last executing test programs:

9.912949661s ago: executing program 4 (id=2745):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000300002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, 0x0, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000100)="520003000100b8", 0x7)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x48880)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xc, 0x26f}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r6, 0x0, 0x0, 0x142, 0x0)

8.965098658s ago: executing program 4 (id=2754):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xa, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @generic={0x40, 0xb, 0x2, 0x9a, 0x3}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90)

8.882626621s ago: executing program 4 (id=2756):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0xc, {{0xa, 0x4e23, 0x4, @remote, 0xff}}, {{0xa, 0x4e22, 0xffff, @loopback, 0x3}}}, 0x108)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000001640)=[{&(0x7f0000000140)="5bfc87aaff8f480be710d3423aedb959b1bbf51004263f042f3ce592a517c6a4173ccf02345ec706d034128e830d1edeb486ae0075c021bda16296eddb6de2898608cb82766739565b8d10054fd3ac6d5f4788979b4f6ceed9cab0e68bda20a7be535fba98c787f8eb0e841a4622d044c9d2c65e169af7f6863fb09aa812911ce3a452b45e4023fcbd6b7bf42f32ee7c", 0x90}, {&(0x7f0000000200)="fce80257e1d968e7732400a1a2db12734c25620bbb9bf31e26e17e339024ce160baf9c67f1ea8a62bd75e165adf91c35df5c2252528d5ebd8a12dc7ae18ab659cd274ffdd42276067b036f0713bbad77c4e39d1debbe650cde958545582eab58aaa3e33926ef2c40ba72", 0x6a}, {&(0x7f0000000280)="37b7d8abdb63bdf40e0b2a8b70ea1f79d8b8fb36a873638fa17e077338b1e5c6c849472f49e5a2cfd5cb07e850876f360593f0fed03dfc51b0630e3f8386f6764afff6de269a8639ea1859469ccdb251fad306d0b022d401b121506b7c0d50365fa6bd72ac36b9323c07109787c8f79724db254c38448fc26b86829c8881735dc26855ebc184c93e36ea255596b2fc1d7bb4c066", 0x94}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="49f2cc4c2170248ce1ef5807fc3fb49ef201842e05129f168d10f3b6ce2b55f7155d2e35dfd8247b5fff53358b29335062099cfc7d548fb4e27fb350da81221b6c76720c9dc197d3ad9b9e59c0c67256830edf7e9472c6831935b9b49d04a395852bdcd1ce4d07b079", 0x69}, {&(0x7f00000013c0)="eea7e1a7bdb052189f4c00fa7aca481e3f249d39f25b2886650326a484ab5f258734a4463ea01621556fbd806384aa7aead2876ea4a4cbbd3385473e41a5a06ce126ea4fa6e17f1cd6be71b166425c755ec4822f0bef45809c71a9ff2e17a7d194e53f03cf593ef83be49e333c02fce153a5ef7fec59648f8e523af06921b836b61752c32e0740d47819f33c5462367d1978ec9c1a95c08237a6343be5600717aeae3b163b82a9967bce5bf76902779f029f751c2f529f6bf2b656a4098ca52c9aa7b72b41d312b37720d44b3731e4fa95a8b36a49dc5861", 0xd8}, {&(0x7f00000014c0)="900dbd3cad59473fbdb0728dc11826a914f658dfe518ec10ac610d6945b1c730ded3f15b0b33a401d66c6cb26bdb6f05c32ea6822e7f2bd10b13625cd8dd542a148d5b96865615f6aeb4e0", 0x4b}, {&(0x7f0000001540)="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", 0xfc}], 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001780)={'gretap0\x00', &(0x7f00000016c0)={'syztnl1\x00', <r3=>0x0, 0x10, 0x20, 0x2, 0x1, {{0x1a, 0x4, 0x3, 0x23, 0x68, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x10, "5a91b5ab72f22e91825113b26325"}, {0x5, 0xb, "eac78ada258748b43e"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xca, [@broadcast, @broadcast, @loopback]}, @lsrr={0x83, 0x13, 0xd, [@multicast1, @rand_addr=0x64010100, @remote, @multicast1]}, @generic={0x89, 0xc, "27df972f5acabd12de40"}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001840)={0xfffffffffffffffc, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6}, {0x2, 0xfff3}, {0xffff, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x20040800)
r4 = socket$inet(0x2, 0x6, 0x1000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001900)={'sit0\x00', &(0x7f0000001880)={'syztnl0\x00', r3, 0x8, 0x1, 0x2, 0x6, {{0x16, 0x4, 0x3, 0x2, 0x58, 0x65, 0x8, 0xf4, 0x2064742baba1a054, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x7a, 0x3, 0x1, [{@multicast1, 0x48}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @lsrr={0x83, 0x1f, 0xf6, [@private=0xa010102, @empty, @broadcast, @loopback, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x1a}]}, @noop]}}}}})
r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001ac0)=0x14)
recvfrom$packet(r5, &(0x7f0000001980)=""/253, 0xfd, 0x10001, &(0x7f0000001b00)={0x11, 0xf8, r6, 0x1, 0x4e, 0x6, @broadcast}, 0x14)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001b40)={0x100, 0xfde0, 0xdf82, 0xd}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x4, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
r7 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001c80))
bind$ax25(r7, &(0x7f0000001cc0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xa8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xa8}}, 0x4004000)
r9 = accept4$ax25(r7, 0x0, &(0x7f0000001ec0), 0x80800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/114, 0x72}, {&(0x7f0000001f80)=""/9, 0x9}, {&(0x7f0000001fc0)=""/20, 0x14}, {&(0x7f0000002000)=""/113, 0x71}, {&(0x7f0000002080)=""/178, 0xb2}, {&(0x7f0000002140)=""/233, 0xe9}], 0x6, &(0x7f00000022c0)=""/6, 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002300)=""/197, 0xc5}, {&(0x7f0000002400)=""/136, 0x88}, {&(0x7f00000024c0)=""/240, 0xf0}, {&(0x7f00000025c0)=""/64, 0x40}, {&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/155, 0x9b}], 0x6, &(0x7f00000027c0)=""/168, 0xa8}, 0x5}, {{&(0x7f0000002880)=@nfc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/229, 0xe5}, {&(0x7f0000002a00)=""/57, 0x39}], 0x2}, 0x5}, {{&(0x7f0000002a80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002b00)=""/225, 0xe1}, {&(0x7f0000002c00)=""/201, 0xc9}, {&(0x7f0000002d00)=""/255, 0xff}, {&(0x7f0000002e00)=""/133, 0x85}, {&(0x7f0000002ec0)=""/17, 0x11}], 0x5, &(0x7f0000002f80)=""/171, 0xab}, 0x77a0}, {{&(0x7f0000003040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000030c0)=""/164, 0xa4}, {&(0x7f0000003180)=""/79, 0x4f}, {&(0x7f0000003200)=""/21, 0x15}, {&(0x7f0000003240)=""/176, 0xb0}, {&(0x7f0000003300)=""/21, 0x15}, {&(0x7f0000003340)=""/81, 0x51}], 0x6, &(0x7f0000003440)=""/183, 0xb7}, 0x10000}, {{&(0x7f0000003500)=@caif=@dbg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003580)=""/64, 0x40}, {&(0x7f00000035c0)=""/214, 0xd6}], 0x2, &(0x7f0000003700)=""/209, 0xd1}, 0x6}], 0x6, 0x40002000, &(0x7f0000003980))
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r10, &(0x7f00000039c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x20000814)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000003c00)={<r11=>r2, &(0x7f0000003b00)='netdevsim', 0x8080, &(0x7f0000003b40)={@_ha_fsid={[0x7, 0x8000]}, {0x7, 0x5, 0x7, 0x40}}, 0x6, &(0x7f0000003b80)={@_ha_fsid}, &(0x7f0000003bc0)=0x81})
recvfrom$ax25(r11, &(0x7f0000003c40)=""/252, 0xfc, 0x12000, &(0x7f0000003d40)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000003dc0)={0x1, 0x48dd})
ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000003e00))
syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r10)
ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f0000003e80)={0x0, 0x6, "b18fca", 0x79, 0x2})

8.594196756s ago: executing program 4 (id=2759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x8, @remote, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0xfffc, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}}, 0x32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @remote}]}}]}, 0x44}}, 0x800)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

8.245375585s ago: executing program 4 (id=2762):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4122000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xf}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "73cacd7b55ab8376d395b1101b993683"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048800}, 0x4)
recvfrom(r1, &(0x7f0000003300)=""/4108, 0x1061, 0x40004102, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000240)=0x8, 0x4)
listen(r0, 0x8)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x8805, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8)

7.8327947s ago: executing program 4 (id=2767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c000100240001"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0)

5.541042523s ago: executing program 1 (id=2795):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0) (async)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @multicast1}, 0xffffffffffffffc1, 0x0}, 0x30004040) (async)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @multicast1}, 0xffffffffffffffc1, 0x0}, 0x30004040)
close(r0)

5.332238961s ago: executing program 1 (id=2798):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES8, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16], 0xcc}, 0x1, 0x0, 0x0, 0x812}, 0x4080091)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)

4.958948492s ago: executing program 1 (id=2803):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000001c0))

4.812993453s ago: executing program 1 (id=2806):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDFWD(r0, 0x8919, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1, 0x70bd2d}, 0x10}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)={'security\x00', 0x0, [0x6, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0x3, 0xfffff801, 0x3, 0x80, 0xd]}, &(0x7f0000000340)=0x54)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
write$nci(r3, 0x0, 0x7)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="4005014c"], 0x4)
socket$inet(0x2, 0x800, 0x7)

4.575498424s ago: executing program 0 (id=2810):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb20a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452d0074006600000301907864010101ac1414bb0b00907800090000465c000c6600657b9840010004e00000017f000001070354862a000000010607abcbae4ca307048cfb0511bdc32e2c803418c7d6ff621df9ada7070814abc9b4b4d59404010044104880000000000080338c00000001000000"], 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={<r5=>r0, &(0x7f00000000c0)='&]][\']\'&\x00', 0x14140, &(0x7f0000000100)={@_ha_fsid={[0xc, 0x4]}, {0xb019, 0xa017, 0x1, 0x96}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xb8, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x409}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48055}, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb20a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452d0074006600000301907864010101ac1414bb0b00907800090000465c000c6600657b9840010004e00000017f000001070354862a000000010607abcbae4ca307048cfb0511bdc32e2c803418c7d6ff621df9ada7070814abc9b4b4d59404010044104880000000000080338c00000001000000"], 0x0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='&]][\']\'&\x00', 0x14140, &(0x7f0000000100)={@_ha_fsid={[0xc, 0x4]}, {0xb019, 0xa017, 0x1, 0x96}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xb8, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x409}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48055}, 0x0) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12) (async)

4.221660651s ago: executing program 0 (id=2812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x60000011}, 0x24044000)

4.07792052s ago: executing program 0 (id=2814):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f800600e000000bbdec7bb6bc75059ae5a0000", @ANYRES16=r1, @ANYBLOB="00032cbd7000fcdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000800000006001600800000000500120000000000060011000700000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00020000000600160008000000050012000000000006001100af00000008000b00f8ffffff080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000400000006001600010000000500120000000000060011000300000008000b0000010000"], 0xf8}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000380), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3)

3.753057986s ago: executing program 0 (id=2816):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r6, &(0x7f0000000000)=@proc, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}]}, 0x90}}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660086ddeb75ba46e9d2277e4dd96485c657dedd6b5afbeb001806ffff020000000000000000000000000001fc0200000000000000ca0000000000fc0000000000000000000000000000000300004e2200004e21"], 0x56)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x4000})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00'], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.572714712s ago: executing program 1 (id=2819):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdb0034ecf3d7573832aa01007770226e792a4fc4"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={<r3=>0x0, 0xa6, "572a2c83c06a25927659c09289289f7825c509b0a4b80d02003b26e1e007c3a2397377cf61212e4f5d6b51f753cecddba513ff39fe234fbf7a83c6db55ef27f26e91ed160cb681c0e3165790535634f81fedc76042f5d43489bb00d5313b0d66fba737146d52fe88c85e619b2e4aac1bd78c3d48fe7571332f99443997d20dddfcd6ebe818d91ce1748b34ab68888071d7269cf01a7a70f9488dff9410191598605c1f699d67"}, &(0x7f0000000400)=0xae)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x30, &(0x7f0000000440)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000004c0)=0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000014b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$inet6(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="e87b1566851219557317afff86e4c864c9af4dbc073214108146835c99e8aa0cf65b16b1f8cbf6557907e314af72e9a43aae19d4f8654d7760ed9560641a54684b75409b51f850d7fbcfef8230c976309c1651d4a03d2775d5bfe541ea3bd3f507da5cf85d055798b871ec19633cbdcaf52b245ef4bab107e5d0ae9bd8ff203c2e0879bead55e5c362f3f35e0955e28df75ed7b99e855b28b996f5412095ae6c6a2eddc5deaecb4b307b52cc7502c44d73f65b6afec39fd9c4403f0c326ec9af7d8ad7a35b1df104244f374987536d6a056b66c11056a05d71a1153139e426b51d687a", 0xe3}, {&(0x7f0000000800)="a738211fffc7efe88568e8aede9773a0b17cf1c49621dd561373d33ad6d61c", 0x1f}, {&(0x7f0000000840)="8e54b7c41c246d73e1714373c8204063028fef3b3dcee23dd5fddfe60041c9e61e5e425a4882018429d8d0a2e5a3347fd6ebde09b09f8d641433f6a6d38c76668df84ef280cdb8bb0d67031b68d2a5174c4acb611cd6f35d0d21cbd2ba8ad0b6c31d93dc3edf242d9cb3db9bb95a9fea711c008f070ca2c67ba4e6e78869f206d9150a6c65852655a72245d31876b2f6db392885767618571ede873ca6f211f69031c5a889d4f5ecf6", 0xa9}, {&(0x7f0000000900)="ad847f11bdd9825094dee69012ea6515985683d28750a1c46b2fedd124cf7c9ebbaab01991dcb3a9f6443598132367aa870f346f43984bc9aa74a5a0d0d39852", 0x40}], 0x4, &(0x7f0000000d00)=[@dstopts_2292={{0x170, 0x29, 0x4, {0x32, 0x2a, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0xfb, "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"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x2, [0x1, 0x6, 0x400]}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0x40, 0x29, 0x37, {0xb056e1b8dac6a20e, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0x10}, @jumbo, @hao={0xc9, 0x10, @private2}]}}}, @flowinfo={{0x14}}], 0x1e0}, 0x4008001)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16], 0xc4}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2d}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4004050)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0xffff0080)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000000)=0x8)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@newtfilter={0x334, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x300, 0x2, [@TCA_MATCHALL_ACT={0x2fc, 0x2, [@m_sample={0xbc, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ef}]}, {0x85, 0x6, "9af7912cd72f434ab4d639426eb24a842b034852b190088a65afa2edca9fe5ef8e548239faf12f182580a21ed1c3c150377eada351ffeae2133e1f71a7a0a697494c350ab1331731f00b7f2884f841d8c91fcce163405445d629b5ee47fc7f26a0207ad623bd6821339546befc41561e85d95b9ab050afe1a813a1c19a75e0f2b0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x114, 0xc, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x6, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x334}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

3.276550256s ago: executing program 2 (id=2822):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x200c4050)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="170000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.112295524s ago: executing program 2 (id=2824):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={<r1=>0x0, 0x6c, "bbc1bd5fd08ca6beb929f7432d4daf71380425396a06b83690f8c43f76a2763a22910475df3738e9e2425deecac122ae2943bc00fd67cd4c9a2667230861bde58d6ad27ba69ab1c917456ce4070bb6e880b046d5e245e32cf4dcd23fd22a111d590cf3b629ad29b7edfd07c9"}, &(0x7f0000000240)=0x74)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x4d, 0x8004, 0x0, 0x3ff, r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x10, 0x4}, 0x94)

2.944171655s ago: executing program 2 (id=2825):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x108b3e70d01d9368, @bcast, @bpq0, 0x7f, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbcf251300000008000300", @ANYRES32=r4, @ANYBLOB="e5b7e7a7341468"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000)

2.707061349s ago: executing program 3 (id=2826):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESDEC, @ANYRESHEX], 0x27)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2)
setsockopt$rose(r0, 0x104, 0x6, &(0x7f00000000c0), 0x4)

2.625439446s ago: executing program 3 (id=2827):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x1400c000)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x20, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newtclass={0x40, 0x28, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xa, 0x1}, {0x5, 0x4}, {0x10, 0x2}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r13 = socket$kcm(0x11, 0x3, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r14)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x80)
listen(r0, 0x0)
socket$packet(0x11, 0x3, 0x300)

469.366613ms ago: executing program 2 (id=2828):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1, 0xfa, "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"}, &(0x7f00000001c0)=0x102)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipmr_delroute={0x28, 0x19, 0x100, 0x70bd29, 0x25dfdbfb, {0x80, 0x10, 0x14, 0x8, 0xfc, 0x0, 0xff, 0xa, 0x3400}, [@RTA_MULTIPATH={0xc, 0x9, {0xa, 0x28, 0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, <r3=>0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000440)={0x1, 0x2})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x184, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x29, 0x8, "8fa2e984a4e2a986daceb81b40e20dc595898555af99413831bf39cc5cd7367ae9a0d2fe34"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x101, 0x8, "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"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x14, 0x8, "d488ed66efc50e78a701c93d6f1c7a6f"}, @NFTA_OBJ_USERDATA={0x5, 0x8, "ff"}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0xc0810)
getsockname$ax25(r4, &(0x7f0000000780)={{0x3, @bcast}, [@rose, @null, @netrom, @rose, @null, @remote, @default, @null]}, &(0x7f0000000800)=0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xde4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc82}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "3db375b81ae5be7a79953ccf61ac65fd400a1d26e7bc2eedebffa65a351261cab6ea5b9f6b5365e6a427db10ecb1f0c8a85f67ff881da38f5f52c1dad13ea5f7d361bcaf891db7a8575b9173166dc2d1dc8e4097e2f6d8ca554632ed0693fc69f0793602f86a00cd7aa61da204640d92adbf1a89314df397f0ae1ea26499baa67f8047c2cfbbffe15e9f3fe7c7c94ca42cb81088ab1dd62158b3831b4765715ba375"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffff80}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000c40)={{<r7=>r3, &(0x7f0000000a80)='TIPCv2\x00', 0x262400, &(0x7f0000000ac0)={@_ha_fsid={[0x6, 0x401]}, {0x7, 0x1, 0x3, 0x9}}, 0x0, &(0x7f0000000b00), &(0x7f0000000b40)=0x800}, {[0x5, 0x4, 0x2, 0x2]}, 0x9, 0x8d, &(0x7f0000000b80)=""/141})
ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001000)={0x3, &(0x7f0000000f80)=[{0x2, 0xbc, &(0x7f0000000cc0)="1b154b2ad0ca960b4e84275d131d63e0b73d428a415b0d6e0e9253b7f299a40e44204d13ec78e103a8ae930fe061bfb88a4fbcdb3a9a07ae844dbfef5f5ac6dcf34d1e6b42d42a0d1da54da81cca9dd2f0b1a52c1b8a0e9d9981df23c878193aa0f673dd3ccda469dafa346242c12bbe3b75890bcbb139dea1daefd57ee38bb800761182aa580d1940c330614dadb2f1eb8a657951fac33ad1ca87287aa34095bf4dc2677ff9e57a5790fea6f7bc8306d0c0a957fc538a155d04c090", 0x1}, {0x22, 0xfb, &(0x7f0000000d80)="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", 0x1, 0x1}, {0xbb, 0xf3, &(0x7f0000000e80)="282234d8caaeb48c6a94fe72d88fca31eb94711f2db770b3447696022093fff7bf4886d8e571b0300cb6965822a1b05c9de27f34134c17f8d2bb382040f37e2441396c08403f861cdb88b254ae7feb5de3cba023cc606065dd2d88131d1dfb4a32a2d00813ee549b747d1913fb0e2d72c59ebbfa57aed331f71c1348123a6081f0dd20d6f1021a02022e0a9af217cb0e9c794188ae8ce12dd655c43ede816c03ad00fe957e8015951928f95a811052e23d81be8dfac6a1c2ad03b5b710e325ffd49432b49c28517ff40ebe4abb4a227181721148f1b88e12b4b90a8a439513c561b663bb4197a2d647845159588d0199c0427f", 0x1}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001040)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001240)={{<r9=>0x0, 0x2c2, 0x8, 0x4, 0x0, 0xcc4, 0x9, 0x2, 0xb29e, 0x6b, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0xf87}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001300)={r8, r9, "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", "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"})
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000002300), 0x4)
sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x20, 0x3fa, 0x800, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002600)={'syztnl2\x00', &(0x7f0000002500)={'syztnl2\x00', <r11=>0x0, 0x7800, 0x1, 0x7fffffff, 0x4, {{0x2b, 0x4, 0x1, 0x3b, 0xac, 0x67, 0x3, 0xc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @local, {[@cipso={0x86, 0x26, 0x2, [{0x6, 0x4, '\b~'}, {0x3, 0x5, "d7b175"}, {0x6, 0xb, "3359fd29091be1efbe"}, {0x0, 0xc, "9138376332324cd77cc9"}]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x78, 0x3, 0xb, [{@local}, {@broadcast, 0xfffffffd}, {@broadcast, 0x5}]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x81}, {@private=0xa010102, 0x5}]}, @generic={0x89, 0x11, "1097eee74929795357d7758a03b31e"}, @end, @timestamp={0x44, 0x8, 0x65, 0x0, 0x2, [0x7f]}, @ssrr={0x89, 0x1f, 0xf1, [@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, @broadcast]}, @ra={0x94, 0x4}]}}}}})
sendto$packet(r7, &(0x7f0000002440)="d729e2bf40c4a8548f8ee585ca9446a7fe0b115e18227f63eb26ada6299781310c86a1667d77f4a375c9a5f7f61f2c1f60be16a463ce46c6a87a147403b51157a78dc660248d9a970f54ddf05100d045fa284ed3b37d127f575a938a4a8b3b414f5c4a15e5dc71fbe85d51929f3ffb87ac39822e9c2a4b15f3761628426ad426829283ead3196f476d004eccc4eddbd3b850d877b1442dff75230eb1", 0x9c, 0x1, &(0x7f0000002640)={0x11, 0x4, r11, 0x1, 0x8, 0x6, @random="20520fa44059"}, 0x14)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000002680)={0x1, [0x0]})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000026c0)={'TPROXY\x00'}, &(0x7f0000002700)=0x1e)
getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000002740), &(0x7f0000002780)=0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x48, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc010)

464.121828ms ago: executing program 3 (id=2829):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x0, 0x3}, {0x7, 0x3}]}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x0, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x66, 0xf9, 0x6}, 0x28)

344.853123ms ago: executing program 3 (id=2830):
close(0x4) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, <r4=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000004f00010000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="d4cd3422d6b7469bcbe62c5f7ee4669a94c7e4326a5aa648f8b368cf55d0b344723b958fa7b97c81b75c738b0afe068a4e6117cbad99e6be4cf0ffae0be9319f31815c8fad3a7fad89b091bfd48da160a21564a94b8f5b9fe3105e365c13555ee683a3b1d473e9c1c485debca1571aceef9ab64563d18ff349644c3ea105368ef66f122ac50c6066555a"], 0x1c}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={<r6=>0x0, 0x0, <r7=>0x0}, &(0x7f00000003c0)=0xc)
syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00') (async)
getpid() (async)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xf}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40040c4) (async)
sendmmsg$unix(r5, &(0x7f0000001b00), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@jmp={0x5, 0x1, 0x2, 0x9, 0x4, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x7, 0x0, 0x9, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x0, 0x4, 0x7, 0x8, 0xc, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfff, 0x30, &(0x7f0000000200)=""/48, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x8, 0x401, 0xfffffffa}, 0xfffffefd, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) (async)
r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c, 0x800)
r10 = gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private2}}}, &(0x7f0000000580)=0xe8)
r12 = getgid()
r13 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000bc0)={{<r14=>r1, &(0x7f00000005c0)='>:\x00', 0x22000, &(0x7f0000000600)={@_ha_fsid={[0x7, 0x3]}, {0x6, 0xfffc, 0x1, 0x9772}}, 0x5, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x2}, 0x4, &(0x7f0000000b40)=[{0x1, 0x4, &(0x7f00000006c0)='netdevsim\x00', &(0x7f0000000740)="b9357809a94da1faf855d0c55cbd22a9bc65bef336eddc66c81c0ab376efd22e9f1f5f4123f9bb638d89b2119a46a9af36c10fa3c692e287aa3804e31b3e923fcdac36ccaea3be00c9051e370f73db78903384f924e6dfd5fd0b8377ea6582a54575838bf4c4758c8624f4b48f46c8b60f54449bc59bd7c83cd3d099b664988add72eda34e1c1b3cb9f81dbf0f90742cc76dca2862eebe9ea45756996f6f2f4b24da15f8babc3acaf9f3c72df39b71da9f64d4870202b73e8f0cebb8afce3eba5f09533f98a612bae8d3b95c72e92748d6af6da9f1e53794dd828709dd710c290e52b8f1364bfcc2dfaa83082f2dae3e2808f04a35e582", 0xf7, 0x8}, {0x3, 0x80000000, &(0x7f0000000840)='devlink\x00', &(0x7f0000000880)="873b41328ba5a5f378d07a3b9c193adde1dca0f2f7c33a3b77f170cd33fbe3b4edc11eafefc54c98a6bbc979691c1ec15b260628e406f9ac3b050be603345985f78f23d39d88fdc0f698f95d2a2b638412c87338aa0bd7a5d112722f142f7bf2132b6fc26aea415e4f5284759db79f685a7ae8616ebe31446eaa17d0d2f7", 0x7e}, {0x3, 0x0, &(0x7f0000000900)='devlink\x00', &(0x7f0000000940)="548320ff985a7a0fbf3b3b38551745124a02726e874e7c537440530fb10d81f60d7ae46f3d29668b2c267f0698821e30f4683386bf7a2113f9c7a9f857286e2916ea8e390791bc1254d030907ce5c4102b07a5594586b94ec08d177a9db7269a05470404c93b045b88c122748c62b0d8bcb38583dcb11905b45ef5c413e9a71d89ab2652efb331d700e275ccdc763c09eb39f6a3b301c3e10da27920db72f632c28a6629be7e5df9cf3bcd30186d12ba3cfa23a0753a0e7585614787a88f846c2680c7e24dba1a8dd301066a4339f45580fb29e1cfea1df50fc9cbdbbeefd8f830", 0xe1, 0x20}, {0x1, 0xb, &(0x7f0000000a40)='netdevsim', &(0x7f0000000a80)="23989730cdd50a008c9e7a0bfb1e7c46a1f15c6d2a56a6db8195f0e672ba307373d30b424434601f34ec421ece795cd30af3c2c9f8cb47d42699081b012f74b506df76df70c245a16f4a5a03c401e9ea5704ff86e66bf8147265272133aa9eca7bbd84801ef9927f3b84696881a014c874d2dd28d585d236d7811f8ecc75f89f3a15a3bf5d48247744a13fe5a86b35521b6b790f079d8e6a26a390f14308983c17", 0xa1, 0x10}]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r15=>0xffffffffffffffff})
recvmsg(r15, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000d40)={<r16=>r2, &(0x7f0000000c40)='devlink\x00', 0x800, &(0x7f0000000c80)={@_ha_fsid={[0x40000000, 0x2]}, {0x80, 0x8, 0x400, 0x1}}, 0x6, &(0x7f0000000cc0), &(0x7f0000000d00)=0x48})
sendmsg$netlink(r2, &(0x7f0000000e80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x50200400}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000d80)=[@rights={{0x1c, 0x1, 0x1, [r2, r13, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r7}}}, @rights={{0x34, 0x1, 0x1, [r2, r2, r8, r9, r13, r1, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x38, 0x1, 0x1, [r2, r2, r2, r1, r1, 0xffffffffffffffff, r2, r14, r16, r2]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1]}}], 0x100, 0x4000010}, 0xc001)

341.438556ms ago: executing program 2 (id=2831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x35, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x20000000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000600020601020000000000805c000000000005000100070000000900020073797a30000000000c0007800500150001000000050004000000000015000300686173683a69702c706f72742c6e657400000000050005000a000000f0"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/81, 0x51}], 0x5}, 0x2000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x81}}]}, 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000)

282.048651ms ago: executing program 3 (id=2832):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r11)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = socket$kcm(0x11, 0x3, 0x0)
r13 = socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40)
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r10, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
socket$inet(0x2, 0x3, 0x2)
close(0x3)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000014007f370000000000000000102437ba21c8d2c90000"], 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

168.952997ms ago: executing program 3 (id=2833):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000201016ec300000010000400000a87000000124000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000007600000095000000000000001422"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r5=>0xffffffffffffffff, 0xe, 0x7fffffffffffffff, 0x42b})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xe4, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000014c0), &(0x7f0000001540)=0x68)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x13, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa4a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @alu={0x7, 0x1, 0x5, 0x7, 0xb, 0x0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r5, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0xa, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x1, 0xb, 0x2}, {0x0, 0x4, 0xa}, {0x5, 0x4, 0x9, 0x9}, {0x4, 0x2, 0x3, 0xc}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x1, 0x7, 0xa}, {0x2, 0x4, 0x2, 0x4}, {0x0, 0x5, 0x7}, {0x1, 0x1, 0x2, 0x7}, {0x4, 0x2, 0x6, 0x8}], 0x10, 0x7}, 0x94)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000000)=0x4)

133.399962ms ago: executing program 0 (id=2834):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0xf, 0xffffff2b, 0x8a008, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xb}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0xf, 0xffffff2b, 0x8a008, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88, 0xffffff7d}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

97.981253ms ago: executing program 1 (id=2835):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000850800000300000018000000000000000000000000000000950000000000e11e5eb30000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x90) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x200, 0x4) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r1})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r3=>0x0)
connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, r3, 0xffffffffffffffff, 0x4}, 0x10) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x118, 0x398, 0xffffffff, 0x0, 0x398, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000440), {[{{@ipv6={@private2, @loopback, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'macvlan1\x00', {}, {0xff}, 0x73, 0x80}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"cc70"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @gre_key=0x120, @port=0x4e24}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0xfffffafc, 0xfe, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@private=0xa010101, @ipv6=@local, @port=0x4e22, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "4cb5", 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@loopback, [0xff, 0x0, 0xff0000ff, 0xffffffff], 0x4e20, 0x2c, 0x6, 0x4e24, 0x10, 0x8}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@loopback, @ipv6=@local, @port=0x4e23, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x80, 0x2, 0x81, 0x200, @empty, @private2, @empty, [0xffffffff, 0x0, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xff000000], 0x5, 0x1504}}, @common=@mh={{0x28}, {"5d1e"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x54}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) (async)
r5 = socket(0x1e, 0x4, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0) (async)
close(0x3)
bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
accept4(r6, 0x0, 0x0, 0x0) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
recvmsg$can_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bind$bt_l2cap(r8, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
sendmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000680)="ce281f2f00568144a0dc401c3bca31e7eef1ede144fa89c0d18f0e6df1eada13e54fd9221fbbf030d777115bc0ae8de8160950b3737ee3f5cb9c34dc4bb2e2b112625f30169e9b0c59473ab0a1c72541e9d810f417efa042c6bd85e6c0ba56ad04492f0700000000000000f177d93132d4a63691c8e991e1608cf8cb9b41e1f0ecd25b52e06bacf354cd21f58456a503247695bd5235d847420cd3f772329a1cbd8c740548c5e2cb5b95be6331b0ee7c1f4bd06fff96dc38ccdabc1ac0c5da887d82b0eb94f56e8b8f17e7d7323913b8f6f336c001f1e5cc0382c1c296", 0xdd}, {&(0x7f0000000780)="6ee2231a1e83e8ab9fd07f966940aafea2d19fbb028b8cc482a91cc41f8bb97f359ae8aaee9b95577696a040399bdf81be817b71e9088c7497fbc9e65a2906f7513228f036c228c0478f769be91ae6920677b6dd4a56bfcdf7f0027a8525b2dc095cad994fe93611", 0x68}, {&(0x7f00000033c0)="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", 0x15c}], 0x3, &(0x7f0000004540)}}], 0x1, 0x40810)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x1, 0x8, 0xa, {{0x7, 0x4, 0x3, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}})

1.019237ms ago: executing program 2 (id=2836):
connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @null, 0x5, 0x0, [@null, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
recvmsg$unix(r0, &(0x7f0000001ec0)={&(0x7f0000000100), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/206, 0xce}, {&(0x7f0000001c40)=""/91, 0x5b}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/66, 0x42}], 0x5}, 0x10142)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x1001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))

0s ago: executing program 0 (id=2837):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
shutdown(r1, 0x1)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
accept4$unix(r3, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e, 0x800)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x2, @short}, 0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r4], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800fd3c78052abd7000000700"/25, @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b000100697036677265000020000280080005008c00000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

fter parsing attributes in process `syz.2.705'.
[  164.300854][ T8588] bridge1: entered promiscuous mode
[  164.307204][ T8588] bridge1: entered allmulticast mode
[  164.315806][ T8588] team0: Port device bridge1 added
[  164.322233][ T8589] bridge0: port 1(team0) entered blocking state
[  164.333669][ T8589] bridge0: port 1(team0) entered disabled state
[  164.341788][ T8589] team0: entered allmulticast mode
[  164.350312][ T8589] team0: entered promiscuous mode
[  164.540390][ T8608] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  164.554489][ T8606] tc_dump_action: action bad kind
[  164.812629][ T8628] __nla_validate_parse: 3 callbacks suppressed
[  164.812647][ T8628] netlink: 68 bytes leftover after parsing attributes in process `syz.4.716'.
[  164.940545][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'.
[  165.039688][ T8636] netlink: 256 bytes leftover after parsing attributes in process `syz.4.719'.
[  165.138020][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'.
[  165.516705][ T8661] syzkaller0: entered promiscuous mode
[  165.523828][ T8664] netlink: 'syz.0.729': attribute type 4 has an invalid length.
[  165.531487][ T8661] syzkaller0: entered allmulticast mode
[  165.535113][ T8664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.729'.
[  165.581544][ T8664] .`¹: renamed from bond0 (while UP)
[  165.810227][ T8675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.731'.
[  165.891900][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'.
[  166.226751][ T8697] netlink: 'syz.4.736': attribute type 4 has an invalid length.
[  166.235832][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.737'.
[  166.258622][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.737'.
[  166.294654][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'.
[  166.347015][ T8707] bond_slave_0: entered allmulticast mode
[  166.392605][ T8702] netlink: 'syz.3.738': attribute type 7 has an invalid length.
[  166.424242][ T8702] netlink: 'syz.3.738': attribute type 8 has an invalid length.
[  166.499710][ T8712] xt_bpf: check failed: parse error
[  166.530536][ T1224] IPVS: starting estimator thread 0...
[  166.627350][ T8718] IPVS: using max 34 ests per chain, 81600 per kthread
[  166.677055][ T8725] delete_channel: no stack
[  166.956056][ T8732] geneve2: entered promiscuous mode
[  166.962040][ T8732] geneve2: entered allmulticast mode
[  167.152372][ T8746] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[  167.198668][ T8750] trusted_key: syz.0.756 sent an empty control message without MSG_MORE.
[  167.210875][ T8750] netlink: 'syz.0.756': attribute type 10 has an invalid length.
[  167.294007][ T8746] bond0: entered promiscuous mode
[  167.325260][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.366020][ T8750] team0: Device ipvlan1 failed to register rx_handler
[  167.431349][ T8763] sctp: [Deprecated]: syz.1.759 (pid 8763) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.431349][ T8763] Use struct sctp_sack_info instead
[  167.848554][ T8788] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  168.239823][ T8819] team0: No ports can be present during mode change
[  168.328079][ T8822] xt_hashlimit: invalid interval
[  168.354674][ T8825] netlink: 'syz.3.779': attribute type 1 has an invalid length.
[  168.503930][   T30] audit: type=1107 audit(1777112400.912:5): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='è/è}¾,r˜–Š”`ÞsHæ¶3¡m ”Ô�N™ó!{—Ë_}™ÌtÓ‡ÃhüÏceO‡ÓIN=à\T¥¥òa´Ž‰zëD…¾üÙCˆc èîÀÔ'
[  168.983822][ T8858] xt_ecn: cannot match TCP bits for non-tcp packets
[  169.138885][ T8872] xt_hl: Unknown Hop Limit match mode: 206
[  169.149149][ T8873] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  169.149149][ T8873] Please contact the netfilter-devel mailing list or update your nftables rules.
[  169.256507][ T8869] tipc: Started in network mode
[  169.275903][ T8869] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  169.296957][ T8869] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  169.437563][ T8886] xt_HMARK: spi-set and port-set can't be combined
[  169.453997][ T8886] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  170.190834][ T8904] __nla_validate_parse: 19 callbacks suppressed
[  170.190851][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'.
[  170.207756][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'.
[  171.782967][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  171.794832][ T8913] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  171.797308][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'.
[  171.827985][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  171.882188][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'.
[  171.915826][ T8916] ipvlan2: entered allmulticast mode
[  171.933054][ T8918] netlink: 'syz.3.805': attribute type 1 has an invalid length.
[  171.963697][ T8916] batadv_slave_1: entered allmulticast mode
[  171.981521][ T8916] batman_adv: batadv0: Adding interface: ipvlan2
[  171.995839][ T8916] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.025822][ T8916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.038194][ T8916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.040023][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'.
[  172.050032][ T8916] batman_adv: batadv0: Interface activated: ipvlan2
[  172.151213][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.809'.
[  172.209186][ T8929] bond3: (slave geneve2): making interface the new active one
[  172.218163][ T8929] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  172.231434][ T8932] 8021q: adding VLAN 0 to HW filter on device bond3
[  172.243866][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.257201][ T1120] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  172.282250][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  172.361956][ T1120] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  172.403928][ T1120] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  172.444476][ T8939] netlink: 'syz.4.811': attribute type 21 has an invalid length.
[  172.468928][ T8939] netlink: 128 bytes leftover after parsing attributes in process `syz.4.811'.
[  172.480182][ T8939] netlink: 3 bytes leftover after parsing attributes in process `syz.4.811'.
[  172.724330][ T8963] veth1_macvtap: left promiscuous mode
[  172.733482][ T8963] macsec0: entered promiscuous mode
[  172.748973][ T8963] macsec0: entered allmulticast mode
[  172.787799][ T8963] veth1_macvtap: entered promiscuous mode
[  172.821638][ T8963] veth1_macvtap: entered allmulticast mode
[  172.877704][ T8963] macsec0: left promiscuous mode
[  172.915572][ T8963] macsec0: left allmulticast mode
[  172.928116][ T8963] veth1_macvtap: left allmulticast mode
[  174.154300][ T9037] bond4 (unregistering): Released all slaves
[  174.236091][ T9045] macvlan2: entered allmulticast mode
[  174.242714][ T9045] hsr0: entered promiscuous mode
[  174.289469][  T782] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.316215][  T782] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.351862][  T782] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.383106][  T782] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.737789][ T9065] netlink: 'syz.3.840': attribute type 10 has an invalid length.
[  175.039057][ T9077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.104329][ T9076] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  175.139097][ T9076] bond5 (unregistering): Released all slaves
[  175.197744][ T9095] netlink: 'syz.1.847': attribute type 30 has an invalid length.
[  175.215866][ T9077] __nla_validate_parse: 14 callbacks suppressed
[  175.215884][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[  175.316973][ T9095] bond1: option arp_missed_max: invalid value (0)
[  175.323544][ T9095] bond1: option arp_missed_max: allowed values 1 - 255
[  175.333501][ T9095] bond1 (unregistering): Released all slaves
[  175.442946][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.452918][ T9103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.477820][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.547970][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.566870][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.576356][ T9112] netlink: 'syz.2.851': attribute type 3 has an invalid length.
[  175.581615][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.630186][ T9108] netlink: 216 bytes leftover after parsing attributes in process `syz.3.850'.
[  175.661343][ T9103] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  175.680168][ T9103] bond5 (unregistering): Released all slaves
[  175.681912][ T9108] netlink: 'syz.3.850': attribute type 2 has an invalid length.
[  175.695677][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'.
[  175.730970][ T9107] netlink: 92 bytes leftover after parsing attributes in process `syz.4.849'.
[  177.043870][ T9202] openvswitch: netlink: Flow actions attr not present in new flow.
[  177.282740][ T9225] netlink: 'syz.1.876': attribute type 7 has an invalid length.
[  177.740786][ T9240] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  177.754478][ T9240] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  177.813429][ T9242] netlink: 'syz.3.884': attribute type 2 has an invalid length.
[  178.276017][ T9266] syzkaller1: entered promiscuous mode
[  178.311250][ T9266] syzkaller1: entered allmulticast mode
[  178.705478][ T9295] 8021q: VLANs not supported on gre0
[  178.730139][ T9288] netlink: 'syz.4.899': attribute type 8 has an invalid length.
[  178.744330][ T9288] sch_fq: defrate 0 ignored.
[  179.172852][ T9316] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  179.179407][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.324694][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.476657][ T9333] openvswitch: netlink: IPv4 tunnel dst address is zero
[  179.849866][ T9366] vxcan0: tx drop: invalid da for name 0x0000000000000001
[  179.878878][ T9358] bond0: entered promiscuous mode
[  179.884664][ T9358] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.292764][ T9386] syzkaller1: entered promiscuous mode
[  180.309151][ T9386] syzkaller1: entered allmulticast mode
[  180.681207][ T9411] __nla_validate_parse: 44 callbacks suppressed
[  180.681228][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'.
[  180.824129][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.910534][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.003342][ T9417] ip6_vti0: entered promiscuous mode
[  181.022132][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  181.333480][ T9438] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  181.354035][ T9452] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  181.364200][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'.
[  181.375805][ T9438] bond3 (unregistering): Released all slaves
[  181.567538][ T9465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.949'.
[  181.640765][ T9470] syzkaller0: entered promiscuous mode
[  181.653021][ T9470] syzkaller0: entered allmulticast mode
[  181.807980][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.121718][ T9481] openvswitch: netlink: Flow key attribute not present in set flow.
[  182.475861][ T9495] netlink: 9 bytes leftover after parsing attributes in process `syz.4.959'.
[  182.859062][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.171169][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.650087][ T9479] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  183.887734][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.924305][ T9505] netlink: 168 bytes leftover after parsing attributes in process `syz.1.961'.
[  183.967004][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.080865][ T9522] netlink: 'syz.4.963': attribute type 1 has an invalid length.
[  184.102060][ T9522] netlink: 'syz.4.963': attribute type 2 has an invalid length.
[  184.119729][ T9523] netlink: 'syz.0.965': attribute type 1 has an invalid length.
[  184.196033][ T9528] mac80211_hwsim hwsim3 ÿ
: renamed from wlan1
[  184.436373][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.973'.
[  184.519933][ T9550] tipc: Started in network mode
[  184.538296][ T9550] tipc: Node identity ac14140f, cluster identity 4711
[  184.560514][ T9550] tipc: New replicast peer: 255.255.255.255
[  184.575514][ T9550] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.585224][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'.
[  184.597657][ T9550] netlink: 100 bytes leftover after parsing attributes in process `syz.2.972'.
[  184.644053][ T9558] netlink: 'syz.3.976': attribute type 1 has an invalid length.
[  184.681497][ T9558] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.751102][ T9558] bond4: (slave bridge2): making interface the new active one
[  184.789152][ T9558] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  184.928032][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.939369][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'.
[  184.978544][ T9573] netlink: 'syz.3.979': attribute type 1 has an invalid length.
[  185.220733][ T9579] netlink: 'syz.1.981': attribute type 3 has an invalid length.
[  185.249474][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.266705][ T9579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.286045][ T9589] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  185.405577][ T9598] IPv6: NLM_F_REPLACE set, but no existing node found!
[  185.532723][ T9601] bond0: option ad_select: unable to set because the bond device is up
[  185.552838][ T9603] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  185.568376][ T9605] syzkaller0: entered promiscuous mode
[  185.587140][ T9605] syzkaller0: entered allmulticast mode
[  185.697207][ T9614] __nla_validate_parse: 2 callbacks suppressed
[  185.697225][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'.
[  185.795925][ T9620] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  185.805685][   T24] tipc: Node number set to 2886997007
[  185.920849][ T9628] netlink: 216 bytes leftover after parsing attributes in process `syz.4.995'.
[  185.937663][ T9628] netlink: 'syz.4.995': attribute type 2 has an invalid length.
[  185.948520][ T9628] netlink: 'syz.4.995': attribute type 1 has an invalid length.
[  185.958459][ T9620] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  185.958703][ T9622] netlink: 92 bytes leftover after parsing attributes in process `syz.0.991'.
[  185.976389][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.988099][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'.
[  186.100261][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.997'.
[  186.208607][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.259257][ T9645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'.
[  186.284736][ T9645] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1001'.
[  186.418522][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[  186.625722][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'.
[  186.679156][ T9663] C: renamed from lo (while UP)
[  187.009580][ T5940] net_ratelimit: 2 callbacks suppressed
[  187.009597][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.035656][ T9693] netlink: 'syz.1.1018': attribute type 3 has an invalid length.
[  187.250860][ T9702] sctp: [Deprecated]: syz.3.1020 (pid 9702) Use of int in max_burst socket option.
[  187.250860][ T9702] Use struct sctp_assoc_value instead
[  187.698576][ T9725] syzkaller0: entered promiscuous mode
[  187.772197][ T9725] syzkaller0: entered allmulticast mode
[  187.889397][ T9730] vlan2: entered allmulticast mode
[  187.916142][ T9730] bond0: entered allmulticast mode
[  188.050272][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.376996][ T9761] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1039'.
[  188.407681][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.427467][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.448228][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.464931][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.484996][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.553101][ T9779] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  188.557731][ T9764] erspan0: entered promiscuous mode
[  189.090248][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.246886][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.259767][ T9833] validate_nla: 1 callbacks suppressed
[  189.259783][ T9833] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[  189.324550][ T9837] netlink: 'syz.1.1058': attribute type 3 has an invalid length.
[  189.395883][ T9837] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  189.424534][ T9838] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  189.910525][ T9870] openvswitch: netlink: Message has 1 unknown bytes.
[  190.016117][ T9876] netlink: 'syz.2.1067': attribute type 1 has an invalid length.
[  190.160982][ T9876] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.203331][ T9881] bond2: (slave veth3): Enslaving as an active interface with a down link
[  190.249310][ T9884] bond2: (slave gre0): Device is not bonding slave
[  190.256938][ T9884] bond2: option active_slave: invalid value (gre0)
[  190.265765][ T9884] bond2 (unregistering): Released all slaves
[  190.356252][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv1
[  190.388765][ T9886] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  190.985382][ T9917] __nla_validate_parse: 14 callbacks suppressed
[  190.985404][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'.
[  191.038848][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'.
[  191.474577][ T9947] gretap2: entered promiscuous mode
[  191.484677][ T9947] batman_adv: batadv0: Adding interface: gretap2
[  191.491627][ T9947] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  191.522770][ T9947] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  191.697434][ T9959] netlink: 'syz.4.1088': attribute type 21 has an invalid length.
[  191.723108][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.764874][ T9962] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.212901][   T24] net_ratelimit: 12 callbacks suppressed
[  192.212921][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.293162][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.358200][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'.
[  192.361424][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'.
[  192.387179][ T9996] tipc: New replicast peer: 172.20.20.187
[  192.394331][ T9996] tipc: Enabled bearer <udp:syz2>, priority 10
[  192.585097][T10006] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1100'.
[  192.617908][T10008] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1102'.
[  192.650443][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'.
[  192.928848][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'.
[  192.938178][T10031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.969067][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'.
[  193.204529][T10047] netlink: 'syz.4.1113': attribute type 29 has an invalid length.
[  193.213752][T10047] netlink: 'syz.4.1113': attribute type 29 has an invalid length.
[  193.222846][T10047] netlink: 'syz.4.1113': attribute type 16 has an invalid length.
[  193.231169][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  193.247649][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.373890][T10050] bond3: option packets_per_slave: invalid value (18446744073709551615)
[  193.386622][T10050] bond3: option packets_per_slave: allowed values 0 - 65535
[  193.396931][T10050] bond3 (unregistering): Released all slaves
[  193.568301][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.653851][T10058] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.661585][T10058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.823418][T10075] syzkaller1: entered promiscuous mode
[  193.831446][T10075] syzkaller1: entered allmulticast mode
[  194.217306][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.294575][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.671411][T10098] syzkaller0: entered allmulticast mode
[  194.745632][T10101] syzkaller0 (unregistering): left allmulticast mode
[  194.912975][T10113] team0 (unregistering): Port device team_slave_0 removed
[  194.950022][T10113] team0 (unregistering): Port device team_slave_1 removed
[  195.330734][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.339322][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.747900][T10160] bridge5: entered promiscuous mode
[  195.773965][T10160] bridge5: entered allmulticast mode
[  195.831751][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.844041][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  196.142370][ T5845] block nbd0: Receive control failed (result -32)
[  196.216056][T10184] __nla_validate_parse: 3 callbacks suppressed
[  196.216079][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'.
[  196.767865][T10144] infiniband syz1: set active
[  196.778435][T10204] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1162'.
[  196.798943][T10144] infiniband syz1: added bond_slave_1
[  196.889129][T10144] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  196.910999][T10144] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  196.934803][T10144] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  196.973198][T10216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1165'.
[  197.021193][T10211] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  197.072936][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1166'.
[  197.169503][T10144] RDS/IB: syz1: added
[  197.183727][T10222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1166'.
[  197.186488][T10144] smc: adding ib device syz1 with port count 1
[  197.216380][T10144] smc:    ib device syz1 port 1 has no pnetid
[  197.409735][ T5940] net_ratelimit: 1 callbacks suppressed
[  197.409753][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.655752][T10247] Cannot find add_set index 3 as target
[  197.883711][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1181'.
[  198.022924][T10266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1183'.
[  198.091353][T10265] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  198.104335][T10265] bond3 (unregistering): Released all slaves
[  198.367973][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.391452][T10280] netlink: 'syz.0.1187': attribute type 3 has an invalid length.
[  198.450585][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.767019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.775778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.327176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.487290][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.525276][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'.
[  199.866382][T10342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.895544][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1204'.
[  199.919001][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'.
[  200.092148][T10351] C: entered promiscuous mode
[  200.114142][T10351] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  200.353574][T10360] bond5: option min_links: invalid value (18446744073709551614)
[  200.364534][T10360] bond5: option min_links: allowed values 0 - 2147483647
[  200.377538][T10360] bond5 (unregistering): Released all slaves
[  200.407493][T10365] netlink: 'syz.0.1216': attribute type 3 has an invalid length.
[  200.529343][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.878543][T10396] bond4: Unable to set up delay as MII monitoring is disabled
[  200.923200][T10396] bond4 (unregistering): Released all slaves
[  200.965632][T10409] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  200.992507][T10409] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  201.009312][T10409] netlink: 'syz.2.1223': attribute type 2 has an invalid length.
[  201.024183][T10409] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  201.033570][T10409] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  201.118214][T10412] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  201.263848][T10414] __nla_validate_parse: 6 callbacks suppressed
[  201.263868][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  201.320430][T10426] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  201.442882][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'.
[  201.489036][T10426] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.566474][T10430] vlan3: entered allmulticast mode
[  201.591345][T10430] bridge3: entered allmulticast mode
[  201.602012][T10438] netlink: 'syz.0.1230': attribute type 7 has an invalid length.
[  201.625323][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'.
[  201.642449][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'.
[  201.663898][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'.
[  201.785495][T10452] nbd: must specify a size in bytes for the device
[  201.863755][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'.
[  201.874044][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'.
[  202.060403][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'.
[  202.509263][T10502] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1249'.
[  202.608392][   T24] net_ratelimit: 5 callbacks suppressed
[  202.608411][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.826389][T10505] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  202.872518][T10505] syzkaller0: entered promiscuous mode
[  202.885238][T10505] syzkaller0: entered allmulticast mode
[  203.056733][T10528] netlink: 'syz.2.1256': attribute type 10 has an invalid length.
[  203.145666][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'.
[  203.174503][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.211732][T10531] gretap0: entered promiscuous mode
[  203.239202][T10531] gretap0: left promiscuous mode
[  203.258170][T10535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.416287][T10539] bond5: entered promiscuous mode
[  203.507673][T10542] macvlan2: entered promiscuous mode
[  203.534882][T10542] macvlan2: entered allmulticast mode
[  203.565243][T10542] bond5: (slave macvlan2): Opening slave failed
[  203.649728][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.238644][T10600] openvswitch: netlink: IP tunnel dst address not specified
[  204.468693][T10611] IPv6: sit1: Disabled Multicast RS
[  204.493607][T10611] sit1: entered allmulticast mode
[  205.144091][T10652] validate_nla: 1 callbacks suppressed
[  205.144110][T10652] netlink: 'syz.1.1295': attribute type 21 has an invalid length.
[  208.667693][T10656] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  208.842810][T10688] netlink: 'syz.3.1302': attribute type 1 has an invalid length.
[  209.140286][T10700] IPVS: length: 239 != 220195436376
[  209.235570][T10709] nbd: socks must be embedded in a SOCK_ITEM attr
[  209.581825][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.584530][T10728] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  209.618144][T10724] __nla_validate_parse: 7 callbacks suppressed
[  209.618163][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'.
[  209.623195][T10728] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1314'.
[  209.634050][T10724] bridge_slave_1: default FDB implementation only supports local addresses
[  209.660519][T10722] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  209.668181][T10722] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  209.743746][T10737] geneve2: entered promiscuous mode
[  209.749208][T10737] geneve2: entered allmulticast mode
[  209.775735][T10728] netem: incorrect gi model size
[  209.787089][T10728] netem: change failed
[  209.830523][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'.
[  209.844631][T10729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.512708][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'.
[  210.678998][T10780] netlink: 'syz.4.1330': attribute type 1 has an invalid length.
[  210.751361][T10780] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  211.348736][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'.
[  211.688673][T10836] xt_l2tp: v2 tid > 0xffff: 1114244
[  211.755441][T10839] netlink: 'syz.2.1348': attribute type 2 has an invalid length.
[  211.787077][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1348'.
[  211.835813][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'.
[  211.995210][T10850] bond6: option resend_igmp: invalid value (32767)
[  212.009764][T10850] bond6: option resend_igmp: allowed values 0 - 255
[  212.058498][T10850] bond6 (unregistering): Released all slaves
[  212.243419][T10868] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  212.348590][T10868] 8021q: adding VLAN 0 to HW filter on device bond2
[  212.477483][T10870] bond2: (slave geneve3): making interface the new active one
[  212.520405][T10870] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  212.543401][ T3516] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  212.586503][ T3516] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  212.617219][ T3516] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  212.655639][ T3516] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  212.686350][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'.
[  212.738980][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'.
[  212.746106][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'.
[  213.012815][T10904] syzkaller1: entered promiscuous mode
[  213.032201][T10904] syzkaller1: entered allmulticast mode
[  213.065816][T10897] syzkaller0: entered allmulticast mode
[  213.071771][T10904] netlink: 'syz.4.1367': attribute type 1 has an invalid length.
[  213.125587][T10904] bond6: entered promiscuous mode
[  213.140718][T10904] 8021q: adding VLAN 0 to HW filter on device bond6
[  213.222283][T10908] bond6: (slave bridge5): making interface the new active one
[  213.261362][T10908] bridge5: entered promiscuous mode
[  213.279215][T10908] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  213.485231][T10917] x_tables: unsorted underflow at hook 4
[  213.886267][T10934] macsec1: entered promiscuous mode
[  213.904878][T10939] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  213.920836][T10939] netlink: 'syz.1.1376': attribute type 3 has an invalid length.
[  213.937584][T10939] NCSI netlink: No device for ifindex 813332851
[  214.143892][T10950] netlink: 'syz.0.1380': attribute type 1 has an invalid length.
[  214.163972][T10950] netlink: 'syz.0.1380': attribute type 1 has an invalid length.
[  214.305396][T10945] bond3: Unable to set up delay as MII monitoring is disabled
[  214.315352][T10945] bond3 (unregistering): Released all slaves
[  214.460148][T10956] sctp: [Deprecated]: syz.4.1384 (pid 10956) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.460148][T10956] Use struct sctp_sack_info instead
[  214.615724][T10963] netlink: 'syz.0.1385': attribute type 4 has an invalid length.
[  214.855463][T10975] netlink: 'syz.0.1390': attribute type 21 has an invalid length.
[  214.866321][T10975] __nla_validate_parse: 4 callbacks suppressed
[  214.866339][T10975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1390'.
[  215.197412][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'.
[  215.213545][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'.
[  215.217548][T10999] syzkaller1: entered promiscuous mode
[  215.228671][T10999] syzkaller1: entered allmulticast mode
[  215.356278][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'.
[  215.371096][T11004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.372126][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'.
[  215.396307][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1401'.
[  215.411743][T11006] batadv0: entered promiscuous mode
[  215.428591][T11006] batadv0: entered allmulticast mode
[  215.470430][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'.
[  215.725584][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'.
[  215.824117][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'.
[  216.136175][T11062] validate_nla: 3 callbacks suppressed
[  216.136208][T11062] netlink: 'syz.3.1414': attribute type 4 has an invalid length.
[  216.756087][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'.
[  217.020049][T11113] gre1: entered promiscuous mode
[  217.041756][T11113] gre1: entered allmulticast mode
[  217.392203][T11134] bond7: Invalid ad_actor_system MAC address.
[  217.400866][T11134] bond7: option ad_actor_system: invalid value (1)
[  217.409319][T11134] bond7 (unregistering): Released all slaves
[  217.598940][T11143] bond4: option min_links: invalid value (18446744073709551614)
[  217.610485][T11143] bond4: option min_links: allowed values 0 - 2147483647
[  217.636192][T11143] bond4 (unregistering): Released all slaves
[  217.821738][T11153] : entered promiscuous mode
[  218.099311][T11182] netlink: 'syz.2.1451': attribute type 1 has an invalid length.
[  218.227281][T11182] 8021q: adding VLAN 0 to HW filter on device bond4
[  218.484626][T11211] netlink: 'syz.2.1457': attribute type 9 has an invalid length.
[  218.512923][T11211] netlink: 'syz.2.1457': attribute type 6 has an invalid length.
[  218.650432][T11219] netlink: 'syz.1.1460': attribute type 7 has an invalid length.
[  218.664848][T11219] netlink: 'syz.1.1460': attribute type 7 has an invalid length.
[  219.113204][T11246] netlink: 'syz.3.1468': attribute type 11 has an invalid length.
[  220.184922][T11297] __nla_validate_parse: 11 callbacks suppressed
[  220.184941][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'.
[  220.185640][T11295] sctp: [Deprecated]: syz.0.1484 (pid 11295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.185640][T11295] Use struct sctp_sack_info instead
[  220.273688][T11300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1485'.
[  220.460149][T11305] netlink: 'syz.1.1488': attribute type 1 has an invalid length.
[  220.522534][T11297] 8021q: adding VLAN 0 to HW filter on device bond6
[  220.658262][T11318] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1488'.
[  220.663649][T11305] 8021q: adding VLAN 0 to HW filter on device bond5
[  220.746482][T11309] bond5: (slave veth3): Enslaving as an active interface with a down link
[  221.040830][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  221.061444][T11337] syzkaller0: entered promiscuous mode
[  221.099731][T11337] 0: reclassify loop, rule prio 0, protocol 800
[  221.372619][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1500'.
[  221.382958][T11355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1499'.
[  221.462502][T11359] netlink: 'syz.2.1502': attribute type 2 has an invalid length.
[  222.200941][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1505'.
[  222.261514][T11408] netlink: 'syz.1.1505': attribute type 7 has an invalid length.
[  222.329938][T11408] netlink: 'syz.1.1505': attribute type 8 has an invalid length.
[  222.341245][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1507'.
[  222.385698][T11415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.393034][T11415] IPv6: NLM_F_CREATE should be set when creating new route
[  222.412854][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'.
[  222.450775][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1507'.
[  222.530965][T11420] netlink: 'syz.0.1508': attribute type 5 has an invalid length.
[  224.312509][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.605305][T11485] netlink: 'syz.4.1521': attribute type 1 has an invalid length.
[  225.584499][T11485] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  225.763180][T11495] netlink: 'syz.4.1524': attribute type 1 has an invalid length.
[  226.292558][T11527] "syz.4.1534" (11527) uses obsolete ecb(arc4) skcipher
[  226.308510][T11534] netlink: 'syz.0.1535': attribute type 12 has an invalid length.
[  226.644471][T11542] __nla_validate_parse: 4 callbacks suppressed
[  226.644491][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1539'.
[  226.649715][T11543] bridge5: the hash_elasticity option has been deprecated and is always 16
[  226.663554][T11542] x_tables: duplicate entry at hook 2
[  226.843010][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'.
[  226.864120][T11554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.891420][T11552] veth1_macvtap: left promiscuous mode
[  226.980488][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1545'.
[  227.014416][T11565] netlink: 'syz.0.1546': attribute type 4 has an invalid length.
[  227.059672][T11565] netlink: 'syz.0.1546': attribute type 4 has an invalid length.
[  227.135523][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'.
[  227.181907][T11571] syzkaller1: entered promiscuous mode
[  227.199402][T11571] syzkaller1: entered allmulticast mode
[  227.215782][T11575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1550'.
[  227.284797][T11582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1548'.
[  227.359607][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'.
[  227.398072][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'.
[  227.417092][ T7105] IPVS: ip_vs_send_async error -101
[  227.470427][T11587] gretap0: entered promiscuous mode
[  227.502565][T11587] gretap0: left promiscuous mode
[  227.770781][T11604] tap0: tun_chr_ioctl cmd 2148553947
[  228.104881][T11629] netlink: 'syz.1.1563': attribute type 25 has an invalid length.
[  228.128529][T11623] ip6t_srh: unknown srh invflags 4000
[  228.143022][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  228.152655][T11623] ip6t_srh: unknown srh invflags 4000
[  228.160830][T11623] ip6t_srh: unknown srh invflags 4000
[  228.165280][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  228.167574][T11623] ip6t_srh: unknown srh invflags 4000
[  228.183174][T11632] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  228.189978][T11623] ip6t_srh: unknown srh invflags 4000
[  228.201867][T11623] ip6t_srh: unknown srh invflags 4000
[  228.208971][T11623] ip6t_srh: unknown srh invflags 4000
[  228.228399][T11623] ip6t_srh: unknown srh invflags 4000
[  228.236430][T11629] netlink: 'syz.1.1563': attribute type 25 has an invalid length.
[  228.244621][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.258401][ T6367] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.267730][T11623] ip6t_srh: unknown srh invflags 4000
[  228.269142][ T6367] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.282973][T11623] ip6t_srh: unknown srh invflags 4000
[  228.291004][ T6367] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.352687][T11636] veth0_to_bridge: entered promiscuous mode
[  228.363839][T11635] veth0_to_bridge: left promiscuous mode
[  228.700837][T11654] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  229.176675][T11689] Unsupported ieee802154 address type: 0
[  229.205807][T11689] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  229.619291][T11725] netlink: 'syz.1.1593': attribute type 63 has an invalid length.
[  229.628846][T11725] netlink: 'syz.1.1593': attribute type 63 has an invalid length.
[  229.665272][T11709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.799068][T11731] netlink: 'syz.3.1594': attribute type 29 has an invalid length.
[  229.839902][T11736] netlink: 'syz.3.1594': attribute type 29 has an invalid length.
[  230.066653][T11745] netlink: 'syz.0.1597': attribute type 7 has an invalid length.
[  231.002657][T11800] xt_policy: too many policy elements
[  231.237629][T11815] netlink: 'syz.4.1615': attribute type 1 has an invalid length.
[  231.303582][T11815] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  231.591010][T11833] bond3: option xmit_hash_policy: invalid value (64)
[  231.605101][T11833] bond3 (unregistering): Released all slaves
[  231.657991][T11835] __nla_validate_parse: 27 callbacks suppressed
[  231.658012][T11835] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1620'.
[  231.697107][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1623'.
[  232.035236][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1631'.
[  232.210956][T11864] netlink: set zone limit has 4 unknown bytes
[  232.277048][T11876] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1635'.
[  232.313647][T11876] xt_policy: neither incoming nor outgoing policy selected
[  232.366398][T11875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.382067][T11883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1636'.
[  232.683757][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'.
[  232.708235][T11898] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  233.595126][T11933] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1649'.
[  233.930875][T11942] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  234.255953][T11965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1661'.
[  234.473379][T11978] validate_nla: 2 callbacks suppressed
[  234.473399][T11978] netlink: 'syz.4.1664': attribute type 1 has an invalid length.
[  234.575467][T11978] 8021q: adding VLAN 0 to HW filter on device bond7
[  234.587736][T11986] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1668'.
[  234.619333][T11988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.634373][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'.
[  234.851780][T11979] syzkaller0: entered promiscuous mode
[  234.863724][T11979] syzkaller0: entered allmulticast mode
[  234.881563][T11979] tipc: Resetting bearer <eth:syzkaller0>
[  234.996202][T11978] bond7: (slave geneve3): making interface the new active one
[  235.027883][T11978] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  235.253315][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  235.262130][T11976] tipc: Resetting bearer <eth:syzkaller0>
[  237.307475][T11976] tipc: Disabling bearer <eth:syzkaller0>
[  237.316999][T12008] netlink: 'syz.2.1671': attribute type 4 has an invalid length.
[  237.340172][T12013] batadv1: entered allmulticast mode
[  237.379113][T12029] syzkaller0: entered promiscuous mode
[  237.396140][T12029] syzkaller0: entered allmulticast mode
[  237.431619][ T5903] tipc: Node number set to 1
[  237.488651][T12040] __nla_validate_parse: 1 callbacks suppressed
[  237.488675][T12040] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1678'.
[  237.644037][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'.
[  237.823252][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.014654][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.040331][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  238.058923][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.077486][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.090260][T12068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1685'.
[  238.093519][T12035] : entered promiscuous mode
[  238.111675][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.142934][T12067] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1685'.
[  238.157913][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.198986][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.257923][T12072] syzkaller0: entered allmulticast mode
[  238.264417][T12049] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  238.283359][T12072] syzkaller0 (unregistering): left allmulticast mode
[  238.719622][T12092] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1690'.
[  238.758713][T12092] nbd: illegal input index -8454144
[  238.890088][T12092] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  238.981534][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'.
[  238.995179][T12105] openvswitch: netlink: Flow actions attr not present in new flow.
[  239.031823][T12105] openvswitch: netlink: Flow actions attr not present in new flow.
[  239.130809][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'.
[  239.193006][T12104] syzkaller0: entered promiscuous mode
[  239.208346][T12104] syzkaller0: entered allmulticast mode
[  239.505268][T12133] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1702'.
[  239.894835][ T7105] IPVS: ip_vs_send_async error -101
[  239.911891][T12132] syz.3.1704 (12132) used greatest stack depth: 17944 bytes left
[  240.284739][T12161] geneve3: entered promiscuous mode
[  240.341924][ T6367] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 49810 - 0
[  240.383653][ T6367] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 49810 - 0
[  240.435561][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1715'.
[  240.455554][ T6367] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 49810 - 0
[  240.485475][ T6367] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 49810 - 0
[  240.561010][T12177] validate_nla: 27 callbacks suppressed
[  240.561029][T12177] netlink: 'syz.4.1716': attribute type 2 has an invalid length.
[  240.600966][T12177] netlink: 'syz.4.1716': attribute type 2 has an invalid length.
[  240.662751][T12177] netlink: 'syz.4.1716': attribute type 2 has an invalid length.
[  240.706308][T12177] netlink: 'syz.4.1716': attribute type 2 has an invalid length.
[  240.730546][T12177] netlink: 'syz.4.1716': attribute type 1 has an invalid length.
[  240.752904][T12177] netlink: 'syz.4.1716': attribute type 1 has an invalid length.
[  240.773546][T12177] netlink: 'syz.4.1716': attribute type 2 has an invalid length.
[  240.795062][T12188] tipc: Failed to remove unknown binding: 66,0,0/1:2215379079/2215379080
[  240.822947][T12188] tipc: Failed to remove unknown binding: 66,0,0/1:2215379079/2215379080
[  241.050048][T12197] netlink: 'syz.2.1722': attribute type 39 has an invalid length.
[  241.519143][T12213] netlink: 'syz.2.1727': attribute type 10 has an invalid length.
[  241.636075][T12221] syz_tun: entered allmulticast mode
[  241.900797][T12224] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537
[  242.142195][T12241] lo speed is unknown, defaulting to 1000
[  242.192669][T12241] lo speed is unknown, defaulting to 1000
[  242.202683][T12246] hsr_slave_0: left promiscuous mode
[  242.230740][T12246] hsr_slave_1: left promiscuous mode
[  242.294938][T12250] netlink: 'syz.0.1740': attribute type 5 has an invalid length.
[  242.337136][T12241] lo speed is unknown, defaulting to 1000
[  243.036283][T12275] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  243.056096][T12278] __nla_validate_parse: 7 callbacks suppressed
[  243.056131][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  243.079651][T12241] infiniband syz2: set active
[  243.090432][T12241] infiniband syz2: added lo
[  243.102255][    T9] lo speed is unknown, defaulting to 1000
[  243.111414][T12241] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  243.136768][T12241] infiniband syz2: Couldn't open port 1
[  243.165983][T12241] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  243.183461][T12241] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  243.205647][T12241] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  243.283979][T12241] RDS/IB: syz2: added
[  243.300217][T12241] smc: adding ib device syz2 with port count 1
[  243.313892][T12241] smc:    ib device syz2 port 1 has no pnetid
[  243.342068][ T1224] lo speed is unknown, defaulting to 1000
[  243.365896][T12241] lo speed is unknown, defaulting to 1000
[  243.645869][T12296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1752'.
[  243.702031][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'.
[  243.942802][T12298] bond7: entered promiscuous mode
[  243.951940][T12298] 8021q: adding VLAN 0 to HW filter on device bond7
[  244.244994][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'.
[  244.305279][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'.
[  244.367233][T12333] Bluetooth: MGMT ver 1.23
[  244.392432][T12241] lo speed is unknown, defaulting to 1000
[  244.804121][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'.
[  244.889440][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1767'.
[  244.913939][T12347] : entered promiscuous mode
[  245.129195][T12241] lo speed is unknown, defaulting to 1000
[  245.299847][T12363] x_tables: unsorted underflow at hook 4
[  245.952231][T12241] lo speed is unknown, defaulting to 1000
[  246.875495][T12241] lo speed is unknown, defaulting to 1000
[  246.951015][T12418] validate_nla: 3 callbacks suppressed
[  246.951035][T12418] netlink: 'syz.1.1784': attribute type 1 has an invalid length.
[  247.244782][T12418] bond8: entered promiscuous mode
[  247.250268][T12418] bond8: entered allmulticast mode
[  247.269907][T12418] 8021q: adding VLAN 0 to HW filter on device bond8
[  247.278250][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'.
[  247.371402][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'.
[  248.098693][T12461] bridge0: port 1(ipvlan3) entered blocking state
[  248.115437][T12461] bridge0: port 1(ipvlan3) entered disabled state
[  248.131188][T12461] ipvlan3: entered allmulticast mode
[  248.146395][T12461] bridge0: entered allmulticast mode
[  248.180901][T12461] ipvlan3: left allmulticast mode
[  248.197064][T12461] bridge0: left allmulticast mode
[  248.588868][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'.
[  248.610260][T12470] netlink: 'syz.4.1800': attribute type 21 has an invalid length.
[  248.618893][T12470] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1800'.
[  249.038343][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'.
[  249.102732][T12487] netlink: 'syz.3.1803': attribute type 21 has an invalid length.
[  249.131283][T12487] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1803'.
[  249.252116][T12487] netlink: 'syz.3.1803': attribute type 5 has an invalid length.
[  249.261496][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'.
[  249.275648][T12487] netlink: 'syz.3.1803': attribute type 6 has an invalid length.
[  249.287443][T12496] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  249.299669][T12487] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1803'.
[  249.552074][T12500] sctp: [Deprecated]: syz.2.1810 (pid 12500) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.552074][T12500] Use struct sctp_sack_info instead
[  249.587388][T12504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1811'.
[  249.793338][T12512] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1812'.
[  249.836435][T12512] netlink: 'syz.3.1812': attribute type 2 has an invalid length.
[  249.955784][T12518] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1814'.
[  250.002208][T12518] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1814'.
[  250.068943][T12492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.117806][T12492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.485506][T12492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.529588][T12492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.633054][T12542] xt_TCPMSS: Only works on TCP SYN packets
[  250.896489][T12492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.922228][T12492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.045527][T12492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.057842][T12492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.932169][T12576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.064579][T12576] veth0_macvtap: left allmulticast mode
[  252.163441][   T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.172260][   T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.310532][   T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.322046][   T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.332452][   T48] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  252.435787][   T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.445583][   T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.454794][   T48] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  252.465921][   T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.475968][   T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.486237][   T48] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  252.601236][   T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.630037][   T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.651236][   T48] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  252.678866][   T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.705978][   T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.739680][   T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.761254][   T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.776173][   T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.796684][   T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.439997][T12658] syz_tun: entered allmulticast mode
[  253.444280][T12660] sctp: [Deprecated]: syz.3.1843 (pid 12660) Use of struct sctp_assoc_value in delayed_ack socket option.
[  253.444280][T12660] Use struct sctp_sack_info instead
[  253.520059][T12665] syz_tun: left allmulticast mode
[  254.076285][T12685] netlink: 'syz.0.1851': attribute type 11 has an invalid length.
[  254.102937][T12685] __nla_validate_parse: 4 callbacks suppressed
[  254.102954][T12685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1851'.
[  254.500514][T12712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1858'.
[  254.558007][T12712] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1858'.
[  254.590771][T12712] netlink: 'syz.4.1858': attribute type 6 has an invalid length.
[  254.621944][T12712] netlink: 'syz.4.1858': attribute type 5 has an invalid length.
[  254.651047][T12712] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1858'.
[  254.730272][T12723] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1861'.
[  254.882242][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'.
[  255.061181][T12731] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼Ú
[  255.429106][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'.
[  255.622547][T12752] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1871'.
[  255.662066][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  255.894304][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'.
[  255.908760][T12765] SET target dimension over the limit!
[  255.923917][T12765] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1874'.
[  257.498371][T12834] vlan4: entered promiscuous mode
[  257.508871][T12834] vlan4: entered allmulticast mode
[  258.251608][T12860] netlink: 'syz.1.1905': attribute type 12 has an invalid length.
[  259.111403][T12910] __nla_validate_parse: 8 callbacks suppressed
[  259.111441][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'.
[  259.236138][T12908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.270965][T12908] syzkaller0: entered promiscuous mode
[  259.290070][T12908] syzkaller0: entered allmulticast mode
[  259.319442][T12908] tipc: Resetting bearer <eth:syzkaller0>
[  259.511542][T12930] bond0: (slave gre0): refused to change device type
[  259.529987][T12906] tipc: Resetting bearer <eth:syzkaller0>
[  259.576982][T12935] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  259.582135][T12920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.599518][T12906] tipc: Disabling bearer <eth:syzkaller0>
[  259.923776][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1926'.
[  260.069559][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'.
[  260.071658][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'.
[  260.193169][T12949] macsec2: entered promiscuous mode
[  260.200822][T12949] bridge0: entered promiscuous mode
[  260.208957][T12949] macsec2: entered allmulticast mode
[  260.214406][T12949] bridge0: entered allmulticast mode
[  260.224694][T12949] bridge0: port 2(macsec2) entered blocking state
[  260.232019][T12949] bridge0: port 2(macsec2) entered disabled state
[  260.243678][T12949] bridge0: left allmulticast mode
[  260.262881][   T10] bridge0: left promiscuous mode
[  260.454857][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1935'.
[  260.489852][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1935'.
[  260.546226][T12973] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1935'.
[  260.634828][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[  260.893041][T12992] netlink: 'syz.2.1939': attribute type 1 has an invalid length.
[  260.902682][T12992] netlink: 'syz.2.1939': attribute type 7 has an invalid length.
[  260.912119][T12992] netlink: 'syz.2.1939': attribute type 8 has an invalid length.
[  260.924674][T12992] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1939'.
[  260.962229][T12992] NCSI netlink: No device for ifindex 65584
[  261.355200][T13005] IPv6: sit1: Disabled Multicast RS
[  261.589877][T12979] lo speed is unknown, defaulting to 1000
[  261.820870][T13019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1951'.
[  261.893615][T13019] netlink: 'syz.3.1951': attribute type 1 has an invalid length.
[  263.402200][T13089] netlink: 'syz.2.1971': attribute type 1 has an invalid length.
[  263.742450][T13100] debugfs: 'KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼ÚÞlS·œ-!' already exists in 'ieee80211'
[  264.204164][T13124] openvswitch: netlink: Missing key (keys=40, expected=100)
[  264.422143][T13132] netlink: 'syz.4.1983': attribute type 1 has an invalid length.
[  264.558509][T13132] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  264.585639][T13143] __nla_validate_parse: 6 callbacks suppressed
[  264.585661][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'.
[  264.707622][T13147] netlink: 'syz.1.1985': attribute type 10 has an invalid length.
[  264.771703][T13143] netlink: 'syz.1.1985': attribute type 10 has an invalid length.
[  264.800290][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'.
[  265.810138][T13187] netlink: 'syz.0.1997': attribute type 10 has an invalid length.
[  265.839662][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'.
[  265.849331][T13187] bridge_slave_1: left allmulticast mode
[  265.865278][T13187] bridge_slave_1: left promiscuous mode
[  265.877211][T13187] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.917391][T13198] tipc: Failed to remove unknown binding: 66,0,0/1740010406:710314829/710314830
[  265.957949][T13187] .`¹: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  265.993444][T13198] tipc: Failed to remove unknown binding: 66,0,0/1740010406:710314829/710314830
[  266.274477][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  266.318132][T13213] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  266.546319][T13228] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2007'.
[  267.118197][T13257] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2017'.
[  267.136261][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'.
[  267.150638][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'.
[  267.191773][T13255] syz_tun (unregistering): left allmulticast mode
[  267.313964][T13264] netlink: 'syz.4.2019': attribute type 1 has an invalid length.
[  267.328386][T13264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2019'.
[  267.417588][T13264] tipc: Started in network mode
[  267.436327][T13264] tipc: Node identity 080211000001, cluster identity 4711
[  267.467629][T13264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.552414][T13272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.552783][T13274] Cannot find set identified by id 3 to match
[  267.612222][T13272] tipc: Resetting bearer <eth:syzkaller0>
[  268.049018][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'.
[  268.589896][T12602] tipc: Node number set to 134418688
[  269.635922][T13378] netlink: 'syz.4.2053': attribute type 16 has an invalid length.
[  269.645052][T13378] __nla_validate_parse: 7 callbacks suppressed
[  269.645068][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2053'.
[  269.699716][T13379] macvtap1: entered promiscuous mode
[  269.706624][T13379] macvtap1: entered allmulticast mode
[  269.723694][T13379] veth1_vlan: entered allmulticast mode
[  269.732628][T13385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2055'.
[  270.004496][T13397] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  270.032197][T13397] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  270.040848][T13397] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  270.055857][T13397] netlink: 'syz.3.2060': attribute type 13 has an invalid length.
[  270.068439][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'.
[  270.081411][T13397] netlink: 'syz.3.2060': attribute type 13 has an invalid length.
[  270.090980][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'.
[  270.152858][T13397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.171261][T13401] nbd: nbd0 already in use
[  270.624350][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2069'.
[  270.637066][T13425] veth1_mac: renamed from veth0_vlan
[  270.703175][ T5294] lo speed is unknown, defaulting to 1000
[  270.729364][ T5294] syz2: Port: 1 Link DOWN
[  270.771564][ T5294] lo speed is unknown, defaulting to 1000
[  271.013500][T13440] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  271.074497][T13440] bond0: (slave ip6tnl2): Error -95 calling set_mac_address
[  271.103927][T13449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2071'.
[  271.535764][T13478] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  271.582664][T13483] openvswitch: netlink: IP tunnel dst address not specified
[  271.590669][T13478] bond0: (slave lo): Error: Device can not be enslaved while up
[  271.971436][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  271.996406][T13502] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  272.007862][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  272.066461][T13504] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  272.079589][T13504] bond5 (unregistering): Released all slaves
[  272.109031][T13499] batman_adv: batadv0: Adding interface: dummy0
[  272.115653][T13499] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  272.317740][T13514] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  272.448327][ T5508] veth1_mac: left promiscuous mode
[  272.510974][ T5508] veth1_mac: entered promiscuous mode
[  272.522514][T13520] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  273.546317][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2097'.
[  273.784655][T13580] netlink: 'syz.1.2100': attribute type 1 has an invalid length.
[  273.929389][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'.
[  274.001265][T13580] bond9: entered promiscuous mode
[  274.007666][T13580] 8021q: adding VLAN 0 to HW filter on device bond9
[  274.032005][T13585] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  274.046174][T13585] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  274.058921][T13585] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  274.196977][T13595] IPVS: Scheduler module ip_vs_sip not found
[  274.651213][T13620] __nla_validate_parse: 3 callbacks suppressed
[  274.651248][T13620] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2111'.
[  274.692078][T13620] 0·: renamed from hsr_slave_1 (while UP)
[  274.716026][T13620] 0·: entered allmulticast mode
[  274.732211][T13620] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  275.025788][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2115'.
[  275.040425][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'.
[  275.213102][T13640] netlink: 'syz.3.2117': attribute type 3 has an invalid length.
[  275.222740][T13640] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2117'.
[  275.540589][T13646] syzkaller1: entered promiscuous mode
[  275.548032][T13646] syzkaller1: entered allmulticast mode
[  275.884823][T13663] netlink: 'syz.4.2125': attribute type 1 has an invalid length.
[  275.901509][T13664] x_tables: duplicate underflow at hook 2
[  276.055566][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'.
[  276.334363][T13690] netlink: 'syz.4.2133': attribute type 3 has an invalid length.
[  276.353085][T13690] netlink: 'syz.4.2133': attribute type 3 has an invalid length.
[  276.371517][T13691] IPVS: length: 104 != 8
[  276.707938][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'.
[  276.760368][T13707] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  277.011698][T13717] netlink: 'syz.4.2143': attribute type 3 has an invalid length.
[  277.123759][T13729] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2143'.
[  277.155020][T13729] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2143'.
[  277.202077][T13729] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2143'.
[  277.262834][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'.
[  277.402695][T13742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.555197][T11390] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.582756][T11390] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.611790][T11390] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.630830][T11390] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.681847][T13753] netlink: 'syz.2.2154': attribute type 39 has an invalid length.
[  278.247940][T13783] gretap0: entered promiscuous mode
[  278.284151][T13783] gretap0: left promiscuous mode
[  278.730047][T13807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.770644][T13805] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  278.784880][T13813] Cannot find add_set index 3 as target
[  278.896473][T13815] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  279.204674][T13829] openvswitch: netlink: Multiple metadata blocks provided
[  279.359266][T13834] netlink: 'syz.4.2177': attribute type 2 has an invalid length.
[  279.632398][T13846] netlink: 'syz.3.2182': attribute type 1 has an invalid length.
[  279.783493][T13856] __nla_validate_parse: 10 callbacks suppressed
[  279.783527][T13856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2184'.
[  279.790968][T13846] 8021q: adding VLAN 0 to HW filter on device bond8
[  279.844372][T13850] 8021q: adding VLAN 0 to HW filter on device bond8
[  279.852401][T13850] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  279.865065][T13850] bond8: (slave vcan1): Error -95 calling set_mac_address
[  280.488714][T13887] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2193'.
[  280.507604][T13887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2193'.
[  280.639441][T13887] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  280.642467][T13889] batman_adv: batadv0: Adding interface: dummy0
[  280.671613][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'.
[  280.675595][T13889] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.723457][T13889] batman_adv: batadv0: Interface activated: dummy0
[  280.897151][T13890] bond3: (slave ip6gretap1): making interface the new active one
[  280.909299][T13890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  280.923746][T13890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  280.949541][T13890] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  281.204229][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'.
[  281.281084][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'.
[  281.348963][T13912] vlan6: entered allmulticast mode
[  281.364959][T13912] bridge3: entered allmulticast mode
[  281.431609][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  281.726332][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.823328][T13922] macvtap0: entered promiscuous mode
[  281.829691][T13922] vlan0: entered promiscuous mode
[  281.836265][T13922] macvtap0: entered allmulticast mode
[  281.848830][T13922] vlan0: entered allmulticast mode
[  281.854682][T13922] veth0_vlan: entered allmulticast mode
[  281.909772][   T30] audit: type=1800 audit(1777112514.322:6): pid=13931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2204" name="memory.events" dev="tmpfs" ino=2108 res=0 errno=0
[  281.938446][   T30] audit: type=1804 audit(1777112514.322:7): pid=13931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2204" name="/newroot/410/memory.events" dev="tmpfs" ino=2108 res=1 errno=0
[  282.125661][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2208'.
[  282.191585][T13938] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  282.532738][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'.
[  282.762017][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2214'.
[  282.795459][T13971] netlink: 'syz.4.2218': attribute type 39 has an invalid length.
[  282.809741][T13967] netlink: 'syz.2.2214': attribute type 32 has an invalid length.
[  282.853170][T13976] netlink: 'syz.3.2219': attribute type 30 has an invalid length.
[  282.975188][T13976] bond9: option arp_missed_max: invalid value (0)
[  282.982086][T13976] bond9: option arp_missed_max: allowed values 1 - 255
[  282.993908][T13976] bond9 (unregistering): Released all slaves
[  283.313986][T13983] netlink: 'syz.4.2222': attribute type 4 has an invalid length.
[  283.803813][T13995] ip6gretap1: entered promiscuous mode
[  283.814664][T13995] ip6gretap1: entered allmulticast mode
[  283.950666][T14006] vxcan1 speed is unknown, defaulting to 1000
[  283.961233][T14006] vxcan1 speed is unknown, defaulting to 1000
[  283.970638][T14006] vxcan1 speed is unknown, defaulting to 1000
[  284.089526][T14008] bond9: entered promiscuous mode
[  284.096846][T14008] 8021q: adding VLAN 0 to HW filter on device bond9
[  284.145455][T14008] 8021q: adding VLAN 0 to HW filter on device bond9
[  284.163426][T14008] bond9: (slave sit2): The slave device specified does not support setting the MAC address
[  284.185506][T14008] bond9: (slave sit2): Error -95 calling set_mac_address
[  284.398035][T14006] infiniband syz0: set active
[  284.402856][   T10] vxcan1 speed is unknown, defaulting to 1000
[  284.425240][T14006] infiniband syz0: added vxcan1
[  284.468357][T14006] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  284.489945][T14006] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  284.554011][T14006] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  284.637623][T14006] RDS/IB: syz0: added
[  284.652395][T14006] smc: adding ib device syz0 with port count 1
[  284.673722][T14006] smc:    ib device syz0 port 1 has no pnetid
[  284.708856][   T10] vxcan1 speed is unknown, defaulting to 1000
[  284.714137][T14025] netlink: 'syz.3.2236': attribute type 13 has an invalid length.
[  284.745386][T14006] vxcan1 speed is unknown, defaulting to 1000
[  284.783784][T14025] veth0_macvtap: left promiscuous mode
[  284.830837][T14025] macvtap0: entered allmulticast mode
[  284.890534][T14025] macvtap0: refused to change device tx_queue_len
[  285.254782][T14048] __nla_validate_parse: 4 callbacks suppressed
[  285.254800][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'.
[  285.287830][T14052] netlink: 'syz.3.2241': attribute type 1 has an invalid length.
[  285.500988][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'.
[  285.606050][T14072] netlink: 'syz.2.2247': attribute type 10 has an invalid length.
[  285.637634][T14052] 8021q: adding VLAN 0 to HW filter on device bond10
[  285.738096][T14057] bond10: (slave geneve3): making interface the new active one
[  285.770715][T14057] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  285.818122][T11392] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  285.848963][T11392] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  285.906332][T14006] vxcan1 speed is unknown, defaulting to 1000
[  285.921362][T11392] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  285.969089][T11392] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  286.276446][T14094] netlink: 'syz.2.2252': attribute type 15 has an invalid length.
[  286.335810][T14088] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2253'.
[  286.450064][T14088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.484598][T14088] batadv_slave_0: entered promiscuous mode
[  286.903077][T14117] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2258'.
[  287.385631][T14130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2260'.
[  287.411516][T14006] vxcan1 speed is unknown, defaulting to 1000
[  287.510272][T14130] bond0 (unregistering): Released all slaves
[  288.030195][T14006] vxcan1 speed is unknown, defaulting to 1000
[  288.374582][T14006] vxcan1 speed is unknown, defaulting to 1000
[  288.702914][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'.
[  288.756792][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'.
[  288.828456][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'.
[  289.137698][T14195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.220653][T14247] netlink: 'syz.2.2293': attribute type 1 has an invalid length.
[  290.240697][T14247] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.2293'.
[  290.473800][T14257] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2294'.
[  290.517761][T14257] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2294'.
[  290.651463][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'.
[  290.697999][T14273] : left promiscuous mode
[  291.065362][T14288] netlink: 'syz.4.2303': attribute type 10 has an invalid length.
[  291.103677][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'.
[  291.403075][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'.
[  291.482805][T14309] netlink: 'syz.2.2311': attribute type 10 has an invalid length.
[  291.493048][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'.
[  292.058885][T14334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2319'.
[  292.090111][T14334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2319'.
[  292.303900][T14344] netdevsim netdevsim4 
: renamed from netdevsim0
[  292.580308][T14359] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  292.628931][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'.
[  292.669021][T14359] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  292.687982][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'.
[  292.709739][T14367] sctp: [Deprecated]: syz.1.2330 (pid 14367) Use of struct sctp_assoc_value in delayed_ack socket option.
[  292.709739][T14367] Use struct sctp_sack_info instead
[  293.248832][T14400] nft_compat: unsupported protocol 1
[  293.873353][T14438] xt_l2tp: missing protocol rule (udp|l2tpip)
[  293.943626][T14442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.011077][T14443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.605037][T14480] netlink: 'syz.1.2356': attribute type 25 has an invalid length.
[  295.368022][T14496] netlink: zone id is out of range
[  295.390225][T14496] netlink: zone id is out of range
[  295.426269][T14496] netlink: zone id is out of range
[  295.451463][T14496] netlink: zone id is out of range
[  295.465747][T14496] netlink: zone id is out of range
[  295.476273][T14496] netlink: zone id is out of range
[  295.489315][T14496] netlink: zone id is out of range
[  295.506984][T14496] netlink: zone id is out of range
[  295.532245][T14496] netlink: zone id is out of range
[  295.546788][T14496] netlink: zone id is out of range
[  295.884770][T14531] netlink: 'syz.4.2373': attribute type 21 has an invalid length.
[  295.911107][T14531] IPv6: NLM_F_CREATE should be specified when creating new route
[  295.939974][T14531] __nla_validate_parse: 3 callbacks suppressed
[  295.939991][T14531] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2373'.
[  295.977472][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'.
[  296.001952][T14535] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2374'.
[  296.003089][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'.
[  296.236117][T14542] FAULT_INJECTION: forcing a failure.
[  296.236117][T14542] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  296.264621][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'.
[  296.274229][T14542] CPU: 0 UID: 0 PID: 14542 Comm: syz.4.2380 Not tainted syzkaller #0 PREEMPT(full) 
[  296.274254][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  296.274273][T14542] Call Trace:
[  296.274281][T14542]  <TASK>
[  296.274288][T14542]  dump_stack_lvl+0xe8/0x150
[  296.274326][T14542]  should_fail_ex+0x412/0x560
[  296.274359][T14542]  _copy_from_user+0x2d/0xb0
[  296.274382][T14542]  ___sys_sendmsg+0x1c6/0x360
[  296.274406][T14542]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.274423][T14542]  ? __lock_acquire+0x6b5/0x2cf0
[  296.274489][T14542]  __sys_sendmmsg+0x27c/0x4e0
[  296.274514][T14542]  ? __pfx___sys_sendmmsg+0x10/0x10
[  296.274531][T14542]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  296.274577][T14542]  ? ksys_write+0x242/0x270
[  296.274603][T14542]  ? __pfx_ksys_write+0x10/0x10
[  296.274631][T14542]  __x64_sys_sendmmsg+0xa0/0xc0
[  296.274651][T14542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.274669][T14542]  do_syscall_64+0x15f/0xf80
[  296.274691][T14542]  ? trace_irq_disable+0x3b/0x140
[  296.274713][T14542]  ? clear_bhb_loop+0x40/0x90
[  296.274734][T14542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.274751][T14542] RIP: 0033:0x7fc630d9cdd9
[  296.274774][T14542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.274789][T14542] RSP: 002b:00007fc631c68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.274809][T14542] RAX: ffffffffffffffda RBX: 00007fc631015fa0 RCX: 00007fc630d9cdd9
[  296.274821][T14542] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  296.274832][T14542] RBP: 00007fc631c68090 R08: 0000000000000000 R09: 0000000000000000
[  296.274844][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  296.274854][T14542] R13: 00007fc631016038 R14: 00007fc631015fa0 R15: 00007fffb190eb38
[  296.274881][T14542]  </TASK>
[  296.288685][T14548] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2378'.
[  296.573417][T14555] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2381'.
[  296.625917][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'.
[  296.666169][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'.
[  296.676435][T14562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'.
[  296.773071][T14567] netlink: 'syz.2.2385': attribute type 83 has an invalid length.
[  296.868231][T14570] netlink: 'syz.2.2385': attribute type 25 has an invalid length.
[  296.895371][T14571] netlink: 'syz.4.2386': attribute type 1 has an invalid length.
[  297.381441][T14596] batman_adv: batadv0: Interface deactivated: dummy0
[  297.390482][T14594] FAULT_INJECTION: forcing a failure.
[  297.390482][T14594] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.403867][T14596] batman_adv: batadv0: Removing interface: dummy0
[  297.414950][T14594] CPU: 0 UID: 0 PID: 14594 Comm: syz.2.2394 Not tainted syzkaller #0 PREEMPT(full) 
[  297.414974][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  297.414988][T14594] Call Trace:
[  297.414996][T14594]  <TASK>
[  297.415003][T14594]  dump_stack_lvl+0xe8/0x150
[  297.415036][T14594]  should_fail_ex+0x412/0x560
[  297.415066][T14594]  _copy_from_user+0x2d/0xb0
[  297.415086][T14594]  ___sys_sendmsg+0x1c6/0x360
[  297.415118][T14594]  ? __pfx____sys_sendmsg+0x10/0x10
[  297.415135][T14594]  ? __lock_acquire+0x6b5/0x2cf0
[  297.415200][T14594]  __sys_sendmmsg+0x27c/0x4e0
[  297.415223][T14594]  ? __pfx___sys_sendmmsg+0x10/0x10
[  297.415240][T14594]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  297.415284][T14594]  ? ksys_write+0x242/0x270
[  297.415308][T14594]  ? __pfx_ksys_write+0x10/0x10
[  297.415341][T14594]  __x64_sys_sendmmsg+0xa0/0xc0
[  297.415360][T14594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.415378][T14594]  do_syscall_64+0x15f/0xf80
[  297.415402][T14594]  ? clear_bhb_loop+0x40/0x90
[  297.415422][T14594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.415440][T14594] RIP: 0033:0x7f1587b9cdd9
[  297.415456][T14594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.415471][T14594] RSP: 002b:00007f1588a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  297.415490][T14594] RAX: ffffffffffffffda RBX: 00007f1587e15fa0 RCX: 00007f1587b9cdd9
[  297.415502][T14594] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  297.415513][T14594] RBP: 00007f1588a42090 R08: 0000000000000000 R09: 0000000000000000
[  297.415524][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  297.415535][T14594] R13: 00007f1587e16038 R14: 00007f1587e15fa0 R15: 00007fffcfca2898
[  297.415564][T14594]  </TASK>
[  297.835319][T14599] syzkaller0: entered promiscuous mode
[  297.842379][T14599] syzkaller0: entered allmulticast mode
[  297.999476][T14610] ip6erspan0: entered allmulticast mode
[  298.115125][T14618] netlink: 'syz.0.2401': attribute type 7 has an invalid length.
[  301.883632][T14649] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  301.901414][T14654] __nla_validate_parse: 7 callbacks suppressed
[  301.901433][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2408'.
[  301.945941][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  302.104317][T14664] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  302.183333][T14649] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.667494][T14688] netlink: 'syz.1.2417': attribute type 15 has an invalid length.
[  302.703581][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'.
[  302.737801][T14688] netlink: 'syz.1.2417': attribute type 15 has an invalid length.
[  302.762641][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'.
[  302.771135][T14694] sch_fq: defrate 0 ignored.
[  303.069210][T14708] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2424'.
[  303.123938][T14708] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2424'.
[  303.159162][T14708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2424'.
[  303.284392][T14714] netlink: 'syz.1.2428': attribute type 10 has an invalid length.
[  303.342732][T14714] team0 (unregistering): Port device team_slave_0 removed
[  303.387268][T14714] team0 (unregistering): Port device team_slave_1 removed
[  303.448080][T14714] team0 (unregistering): Port device batadv1 removed
[  304.006743][T14747] netlink: 'syz.2.2437': attribute type 3 has an invalid length.
[  304.040675][T14749] FAULT_INJECTION: forcing a failure.
[  304.040675][T14749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.066085][T14747] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2437'.
[  304.075910][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.4.2438 Not tainted syzkaller #0 PREEMPT(full) 
[  304.075935][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  304.075955][T14749] Call Trace:
[  304.075962][T14749]  <TASK>
[  304.075970][T14749]  dump_stack_lvl+0xe8/0x150
[  304.076003][T14749]  should_fail_ex+0x412/0x560
[  304.076036][T14749]  _copy_from_user+0x2d/0xb0
[  304.076056][T14749]  ___sys_sendmsg+0x1c6/0x360
[  304.076080][T14749]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.076096][T14749]  ? __lock_acquire+0x6b5/0x2cf0
[  304.076161][T14749]  __sys_sendmmsg+0x27c/0x4e0
[  304.076182][T14749]  ? __pfx___sys_sendmmsg+0x10/0x10
[  304.076210][T14749]  ? __pfx_xfrm_dev_backlog+0x10/0x10
[  304.076240][T14749]  ? __irq_exit_rcu+0xca/0x220
[  304.076263][T14749]  ? lockdep_softirqs_on+0x11d/0x180
[  304.076286][T14749]  ? handle_softirqs+0x715/0x840
[  304.076313][T14749]  __x64_sys_sendmmsg+0xa0/0xc0
[  304.076332][T14749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.076348][T14749]  do_syscall_64+0x15f/0xf80
[  304.076372][T14749]  ? clear_bhb_loop+0x40/0x90
[  304.076393][T14749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.076410][T14749] RIP: 0033:0x7fc630d9cdd9
[  304.076427][T14749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.076441][T14749] RSP: 002b:00007fc631c68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  304.076460][T14749] RAX: ffffffffffffffda RBX: 00007fc631015fa0 RCX: 00007fc630d9cdd9
[  304.076471][T14749] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  304.076482][T14749] RBP: 00007fc631c68090 R08: 0000000000000000 R09: 0000000000000000
[  304.076492][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.076502][T14749] R13: 00007fc631016038 R14: 00007fc631015fa0 R15: 00007fffb190eb38
[  304.076529][T14749]  </TASK>
[  304.390936][ T7105] IPVS: ip_vs_send_async error -101
[  304.496855][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'.
[  304.508089][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2440'.
[  304.723812][T14761] net_ratelimit: 3 callbacks suppressed
[  304.723832][T14761] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  305.023040][T14780] FAULT_INJECTION: forcing a failure.
[  305.023040][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.062239][ T5294] vxcan1 speed is unknown, defaulting to 1000
[  305.114745][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.4.2450 Not tainted syzkaller #0 PREEMPT(full) 
[  305.114771][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  305.114783][T14780] Call Trace:
[  305.114790][T14780]  <TASK>
[  305.114805][T14780]  dump_stack_lvl+0xe8/0x150
[  305.114838][T14780]  should_fail_ex+0x412/0x560
[  305.114869][T14780]  _copy_from_user+0x2d/0xb0
[  305.114890][T14780]  ___sys_sendmsg+0x1c6/0x360
[  305.114916][T14780]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.114933][T14780]  ? __lock_acquire+0x6b5/0x2cf0
[  305.115002][T14780]  __sys_sendmmsg+0x27c/0x4e0
[  305.115025][T14780]  ? __pfx___sys_sendmmsg+0x10/0x10
[  305.115043][T14780]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  305.115092][T14780]  ? ksys_write+0x242/0x270
[  305.115116][T14780]  ? __pfx_ksys_write+0x10/0x10
[  305.115143][T14780]  __x64_sys_sendmmsg+0xa0/0xc0
[  305.115161][T14780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.115180][T14780]  do_syscall_64+0x15f/0xf80
[  305.115203][T14780]  ? trace_irq_disable+0x3b/0x140
[  305.115226][T14780]  ? clear_bhb_loop+0x40/0x90
[  305.115248][T14780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.115265][T14780] RIP: 0033:0x7fc630d9cdd9
[  305.115282][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.115297][T14780] RSP: 002b:00007fc631c68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  305.115316][T14780] RAX: ffffffffffffffda RBX: 00007fc631015fa0 RCX: 00007fc630d9cdd9
[  305.115329][T14780] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  305.115341][T14780] RBP: 00007fc631c68090 R08: 0000000000000000 R09: 0000000000000000
[  305.115352][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  305.115362][T14780] R13: 00007fc631016038 R14: 00007fc631015fa0 R15: 00007fffb190eb38
[  305.115388][T14780]  </TASK>
[  305.474119][T14791] netlink: 'syz.1.2451': attribute type 3 has an invalid length.
[  306.134668][T14834] netlink: 'syz.2.2463': attribute type 1 has an invalid length.
[  306.142535][T14834] netlink: 'syz.2.2463': attribute type 1 has an invalid length.
[  306.150342][T14834] netlink: 'syz.2.2463': attribute type 8 has an invalid length.
[  306.316809][T14850] netlink: zone id is out of range
[  306.322029][T14850] netlink: zone id is out of range
[  306.327240][T14850] netlink: zone id is out of range
[  306.386677][T14850] netlink: zone id is out of range
[  306.392023][T14850] netlink: zone id is out of range
[  306.397675][T14850] netlink: zone id is out of range
[  306.402988][T14850] netlink: zone id is out of range
[  306.408636][T14850] netlink: zone id is out of range
[  306.413942][T14850] netlink: zone id is out of range
[  306.682689][T14866] syzkaller0: entered promiscuous mode
[  306.689808][T14866] syzkaller0: entered allmulticast mode
[  306.790112][T14872] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  306.802715][T14872] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  306.854608][T14877] bond0: (slave bridge6): Enslaving as an active interface with a down link
[  306.878717][T14877] bond0: (slave gretap1): making interface the new active one
[  306.895779][T14877] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  307.635328][T14918] validate_nla: 1 callbacks suppressed
[  307.635356][T14918] netlink: 'syz.3.2486': attribute type 1 has an invalid length.
[  307.679232][T14918] netlink: 'syz.3.2486': attribute type 2 has an invalid length.
[  307.694992][T14918] netlink: 'syz.3.2486': attribute type 1 has an invalid length.
[  307.740486][T14918] netlink: 'syz.3.2486': attribute type 3 has an invalid length.
[  307.771625][T14918] __nla_validate_parse: 6 callbacks suppressed
[  307.771644][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'.
[  307.803306][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'.
[  307.963831][T14934] vlan0: entered promiscuous mode
[  307.970013][T14926] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.311482][T14949] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.453393][T14955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2495'.
[  308.540536][T14957] netlink: 'syz.1.2496': attribute type 2 has an invalid length.
[  308.801981][T14974] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2501'.
[  308.828874][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'.
[  308.894071][T14980] : entered promiscuous mode
[  309.090487][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'.
[  309.258849][T15000] netlink: 'syz.1.2509': attribute type 11 has an invalid length.
[  309.292411][T15000] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2509'.
[  309.808310][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2519'.
[  309.841752][T15046] netlink: 'syz.4.2520': attribute type 10 has an invalid length.
[  309.858135][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'.
[  310.004827][T15046] team0: Port device dummy0 added
[  310.013001][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'.
[  310.433001][T15074] tipc: Can't bind to reserved service type 0
[  310.842881][T15090] netlink: 'syz.0.2532': attribute type 4 has an invalid length.
[  311.462077][T15112] bond8: entered allmulticast mode
[  311.496758][T15115] veth7: entered allmulticast mode
[  311.533371][T15115] bond8: (slave veth7): Enslaving as an active interface with an up link
[  311.550127][T15117] bond8 (unregistering): (slave veth7): Releasing backup interface
[  311.575698][T15117] bond8 (unregistering): Released all slaves
[  311.953242][T15135] net_ratelimit: 7 callbacks suppressed
[  311.953278][T15135] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  311.990643][T15139] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  312.004144][T15141] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  312.053098][T15141] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.115949][T15141] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  312.168109][T15145] macvlan7: entered promiscuous mode
[  312.203660][T15145] macvlan7: entered allmulticast mode
[  312.209899][T15145] bond5: entered promiscuous mode
[  312.216645][T15145] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  312.224305][T15145] bond5: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  312.342318][T15156] netlink: 'syz.2.2547': attribute type 16 has an invalid length.
[  312.350756][T15156] netlink: 'syz.2.2547': attribute type 17 has an invalid length.
[  312.527512][T15145] bond5: left promiscuous mode
[  312.555354][T15146] macvlan7: entered promiscuous mode
[  312.560686][T15146] macvlan7: entered allmulticast mode
[  312.566848][T15146] bond5: entered promiscuous mode
[  312.572642][T15146] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  312.580289][T15146] bond5: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  312.596624][T15146] bond5: left promiscuous mode
[  312.717289][T15156] ip6_vti0: left promiscuous mode
[  312.733822][T15160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.771469][T15156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.787145][ T5294] lo speed is unknown, defaulting to 1000
[  312.793006][ T5294] syz2: Port: 1 Link ACTIVE
[  312.797593][ T5294] lo speed is unknown, defaulting to 1000
[  312.822466][T15160] __nla_validate_parse: 36 callbacks suppressed
[  312.822483][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'.
[  312.886449][T15164] FAULT_INJECTION: forcing a failure.
[  312.886449][T15164] name failslab, interval 1, probability 0, space 0, times 0
[  312.903068][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.0.2551 Not tainted syzkaller #0 PREEMPT(full) 
[  312.903091][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  312.903101][T15164] Call Trace:
[  312.903108][T15164]  <TASK>
[  312.903115][T15164]  dump_stack_lvl+0xe8/0x150
[  312.903147][T15164]  should_fail_ex+0x412/0x560
[  312.903179][T15164]  should_failslab+0xa8/0x100
[  312.903204][T15164]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  312.903225][T15164]  ? __alloc_skb+0x186/0x7d0
[  312.903248][T15164]  ? __alloc_skb+0x1d0/0x7d0
[  312.903262][T15164]  ? __local_bh_enable_ip+0xd0/0x130
[  312.903290][T15164]  __alloc_skb+0x1d0/0x7d0
[  312.903307][T15164]  alloc_skb_with_frags+0xc8/0x760
[  312.903322][T15164]  ? __lock_acquire+0x6b5/0x2cf0
[  312.903352][T15164]  sock_alloc_send_pskb+0x878/0x990
[  312.903386][T15164]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  312.903407][T15164]  ? sock_def_readable+0xae/0x550
[  312.903431][T15164]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  312.903454][T15164]  unix_dgram_sendmsg+0x460/0x18d0
[  312.903494][T15164]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  312.903519][T15164]  ? count_memcg_event_mm+0x21/0x260
[  312.903537][T15164]  ? aa_sock_msg_perm+0xda/0x1b0
[  312.903557][T15164]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  312.903580][T15164]  ____sys_sendmsg+0x972/0x9f0
[  312.903599][T15164]  ? __might_fault+0xaf/0x130
[  312.903623][T15164]  ? __pfx_____sys_sendmsg+0x10/0x10
[  312.903650][T15164]  ? import_iovec+0x73/0xa0
[  312.903674][T15164]  ___sys_sendmsg+0x2a5/0x360
[  312.903698][T15164]  ? __pfx____sys_sendmsg+0x10/0x10
[  312.903715][T15164]  ? __lock_acquire+0x6b5/0x2cf0
[  312.903781][T15164]  __sys_sendmmsg+0x27c/0x4e0
[  312.903806][T15164]  ? __pfx___sys_sendmmsg+0x10/0x10
[  312.903823][T15164]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  312.903871][T15164]  ? ksys_write+0x242/0x270
[  312.903894][T15164]  ? __pfx_ksys_write+0x10/0x10
[  312.903921][T15164]  __x64_sys_sendmmsg+0xa0/0xc0
[  312.903941][T15164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.903960][T15164]  do_syscall_64+0x15f/0xf80
[  312.903982][T15164]  ? trace_irq_disable+0x3b/0x140
[  312.904004][T15164]  ? clear_bhb_loop+0x40/0x90
[  312.904022][T15164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.904037][T15164] RIP: 0033:0x7feb7799cdd9
[  312.904052][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.904069][T15164] RSP: 002b:00007feb78815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  312.904085][T15164] RAX: ffffffffffffffda RBX: 00007feb77c15fa0 RCX: 00007feb7799cdd9
[  312.904095][T15164] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  312.904106][T15164] RBP: 00007feb78815090 R08: 0000000000000000 R09: 0000000000000000
[  312.904117][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  312.904128][T15164] R13: 00007feb77c16038 R14: 00007feb77c15fa0 R15: 00007ffcf80b71d8
[  312.904156][T15164]  </TASK>
[  313.358352][T15172] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2552'.
[  313.461492][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'.
[  313.464293][T15181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'.
[  313.485685][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'.
[  313.505355][T15183] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  313.638131][T15181] openvswitch: netlink: IP tunnel dst address not specified
[  313.773101][ T5845] block nbd1: Receive control failed (result -1)
[  314.211073][T15215] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2564'.
[  314.233987][T15216] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2564'.
[  314.552935][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'.
[  314.648930][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2571'.
[  314.683601][T15238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2574'.
[  315.209390][T15264] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  316.217018][T15316] netlink: 'syz.2.2590': attribute type 21 has an invalid length.
[  316.661441][T15334] netlink: 'syz.0.2595': attribute type 1 has an invalid length.
[  317.112816][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.151124][T15359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.439038][T15379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  317.751436][T15405] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  317.841628][T15408] ip6t_srh: unknown srh invflags 4000
[  317.844467][T15405] 8021q: adding VLAN 0 to HW filter on device bond10
[  317.947722][T15405] bond10: (slave veth7): Enslaving as an active interface with a down link
[  317.972559][T15410] __nla_validate_parse: 7 callbacks suppressed
[  317.972577][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'.
[  317.990425][T15415] netlink: 'syz.0.2615': attribute type 1 has an invalid length.
[  318.240093][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'.
[  318.252679][T15432] tipc: Failed to remove unknown binding: 66,0,0/1:1413224485/1413224487
[  318.264111][T15432] tipc: Failed to remove unknown binding: 66,0,0/1:1413224485/1413224486
[  318.281984][T15432] tipc: Failed to remove unknown binding: 66,0,0/1:1413224485/1413224487
[  318.296206][T15432] tipc: Failed to remove unknown binding: 66,0,0/1:1413224485/1413224486
[  319.162623][T15464] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  319.168447][T15467] openvswitch: netlink: IP tunnel dst address not specified
[  319.179736][T15439] lo speed is unknown, defaulting to 1000
[  319.180574][T15468] openvswitch: netlink: IP tunnel dst address not specified
[  319.243721][T15457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  319.277010][T15457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  319.465659][T15482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.497100][T15482] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  319.512831][T15482] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  319.545643][T15439] vxcan1 speed is unknown, defaulting to 1000
[  319.556008][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2639'.
[  319.600822][T15482] tipc: Resetting bearer <eth:syzkaller0>
[  320.935066][T15534] netlink: 'syz.3.2653': attribute type 1 has an invalid length.
[  320.945428][T15534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.952723][T15534] IPv6: NLM_F_CREATE should be set when creating new route
[  321.110564][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'.
[  321.388071][T15546] batman_adv: batadv0: Removing interface: dummy0
[  321.435558][T15546] bridge_slave_0: left allmulticast mode
[  321.453983][T15546] bridge_slave_0: left promiscuous mode
[  321.470640][T15546] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.509433][T15546] .`¹: (slave bridge_slave_1): Releasing backup interface
[  321.559638][T15546] bond5: (slave veth0_to_bond): Releasing active interface
[  321.595291][T15546] .`¹: (slave bond_slave_0): Releasing backup interface
[  321.621612][T15546] .`¹: (slave bond_slave_1): Releasing backup interface
[  321.633050][T15555] netlink: 'syz.3.2661': attribute type 10 has an invalid length.
[  321.641757][T15557] netlink: 'syz.3.2661': attribute type 10 has an invalid length.
[  321.650231][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'.
[  321.669215][T15546] team0: Port device team_slave_0 removed
[  321.679459][T15546] team0: Port device team_slave_1 removed
[  321.685834][T15546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.698166][T15546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  321.717850][T15559] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2662'.
[  321.764938][T15555] bridge0: port 1(team0) entered disabled state
[  321.818281][T15555] team0 (unregistering): left allmulticast mode
[  321.835184][T15555] team0 (unregistering): left promiscuous mode
[  321.860120][T15555] bridge0: port 1(team0) entered disabled state
[  321.920846][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'.
[  321.939712][T15555] team0 (unregistering): Port device bridge1 removed
[  321.948369][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'.
[  322.452394][T15589] netlink: 'syz.2.2671': attribute type 29 has an invalid length.
[  322.548810][T15588] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  322.700298][T15597] bond5: option mode: invalid value (133)
[  322.722007][T15597] bond5 (unregistering): Released all slaves
[  322.920549][T15616] syzkaller0: entered promiscuous mode
[  322.926405][T15616] syzkaller0: entered allmulticast mode
[  322.978762][T15623] __nla_validate_parse: 1 callbacks suppressed
[  322.978779][T15623] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2684'.
[  323.302539][T15642] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2691'.
[  323.664224][T15652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2695'.
[  323.900884][T15660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2697'.
[  324.014216][ T5845] block nbd2: Receive control failed (result -32)
[  325.375103][T15726] netlink: 'syz.0.2712': attribute type 12 has an invalid length.
[  325.544957][T15726] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2712'.
[  325.672177][T15675] lo speed is unknown, defaulting to 1000
[  326.234381][T15763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2721'.
[  326.263249][T15763] batman_adv: batadv0: Adding interface: dummy0
[  326.278580][T15763] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.303809][T15763] batman_adv: batadv0: Interface activated: dummy0
[  326.515325][T15774] x_tables: duplicate underflow at hook 3
[  326.758107][T15674] lo speed is unknown, defaulting to 1000
[  326.767818][T15675] vxcan1 speed is unknown, defaulting to 1000
[  326.849227][T15787] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  326.951832][T15797] veth9: entered promiscuous mode
[  326.956887][T15797] veth9: entered allmulticast mode
[  327.194022][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'.
[  327.203026][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'.
[  327.352057][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'.
[  327.517652][T15674] vxcan1 speed is unknown, defaulting to 1000
[  327.609658][T15817] netlink: 'syz.0.2740': attribute type 14 has an invalid length.
[  327.617512][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'.
[  327.675576][T15817] netlink: 'syz.0.2740': attribute type 14 has an invalid length.
[  328.018886][T15826] __nla_validate_parse: 2 callbacks suppressed
[  328.018912][T15826] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2744'.
[  328.075289][T15826] netlink: Conntrack attr has 4 unknown bytes
[  328.092715][T15826] netlink: 'syz.0.2744': attribute type 10 has an invalid length.
[  328.155063][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'.
[  328.289049][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'.
[  328.314691][T15837] netlink: 'syz.2.2748': attribute type 1 has an invalid length.
[  328.333962][T15837] bond5: entered promiscuous mode
[  328.340659][T15837] 8021q: adding VLAN 0 to HW filter on device bond5
[  328.357489][T15837] bridge7: the hash_elasticity option has been deprecated and is always 16
[  328.389301][T15837] bond5: (slave bridge7): making interface the new active one
[  328.404847][T15837] bridge7: entered promiscuous mode
[  328.411503][T15840] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2747'.
[  328.432091][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2747'.
[  328.460208][T15837] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  328.634495][T15847] tipc: Started in network mode
[  328.639654][T15847] tipc: Node identity bbbbbb01, cluster identity 4711
[  328.657761][T15847] tipc: Enabled bearer <eth:rose0>, priority 10
[  328.836148][T15849] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  329.003344][T15853] bond6: option lp_interval: invalid value (0)
[  329.038016][T15853] bond6: option lp_interval: allowed values 1 - 2147483647
[  329.053085][T15853] bond6 (unregistering): Released all slaves
[  329.118562][T15863] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2755'.
[  329.191295][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2755'.
[  329.524501][T15880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2760'.
[  329.583028][T15875] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2758'.
[  329.583089][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2759'.
[  329.604168][T15880] netlink: 'syz.2.2760': attribute type 6 has an invalid length.
[  329.621865][T15880] netlink: 'syz.2.2760': attribute type 5 has an invalid length.
[  329.810855][T15884] xt_l2tp: v2 sid > 0xffff: 1114112
[  329.891432][    T9] tipc: Node number set to 3149642497
[  330.428718][T15906] bond8: option arp_all_targets: invalid value (18446744073709551613)
[  330.438734][T15906] bond8 (unregistering): Released all slaves
[  330.611403][T15916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.074261][T15940] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  331.442566][T15950] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  331.563495][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.581604][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.598846][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.609205][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.628779][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.666367][T15959] netlink: 'syz.1.2784': attribute type 1 has an invalid length.
[  331.749330][T15959] 8021q: adding VLAN 0 to HW filter on device bond11
[  331.800857][T15959] 8021q: adding VLAN 0 to HW filter on device bond11
[  331.808083][T15959] bond11: (slave vcan0): The slave device specified does not support setting the MAC address
[  331.819392][T15959] bond11: (slave vcan0): Error -95 calling set_mac_address
[  331.912724][T15976] netlink: 'syz.1.2784': attribute type 2 has an invalid length.
[  332.071608][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.354829][T15954] lo speed is unknown, defaulting to 1000
[  332.364452][T15987] netlink: 'syz.1.2794': attribute type 1 has an invalid length.
[  332.495109][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.675840][T15954] vxcan1 speed is unknown, defaulting to 1000
[  332.728479][T16007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.992812][T16013] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  333.470869][T16040] block nbd0: reconnected socket
[  333.509537][T16045] netlink: 'syz.2.2811': attribute type 11 has an invalid length.
[  333.527986][T16040] block nbd0: Unsupported socket: should be TCP or UNIX.
[  333.547673][T16044] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  333.571453][T16044] __nla_validate_parse: 7 callbacks suppressed
[  333.571471][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'.
[  333.655669][T16044] netlink: 'syz.0.2810': attribute type 2 has an invalid length.
[  333.672178][T16044] netlink: 'syz.0.2810': attribute type 2 has an invalid length.
[  333.680575][T16044] netlink: 'syz.0.2810': attribute type 1 has an invalid length.
[  333.688658][T16044] netlink: 'syz.0.2810': attribute type 1 has an invalid length.
[  333.692760][ T3516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.696976][T16044] netlink: 'syz.0.2810': attribute type 2 has an invalid length.
[  333.709180][ T3516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.728491][ T5848] Bluetooth: hci5: command tx timeout
[  333.749342][T15954] chnl_net:caif_netlink_parms(): no params data found
[  333.787552][T16057] xt_bpf: check failed: parse error
[  333.923139][T16064] tipc: Enabled bearer <eth:nr0>, priority 10
[  333.937648][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  334.042138][T16066] 8021q: adding VLAN 0 to HW filter on device bond6
[  334.062849][T15954] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.063915][T16072] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2815'.
[  334.073851][T15954] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.088274][T15954] bridge_slave_0: entered allmulticast mode
[  334.098074][T15954] bridge_slave_0: entered promiscuous mode
[  334.122445][T15954] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.131259][T15954] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.139689][T15954] bridge_slave_1: entered allmulticast mode
[  334.154190][T15954] bridge_slave_1: entered promiscuous mode
[  334.265922][ T5845] block nbd0: Receive control failed (result -32)
[  334.457582][ T3516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.481306][ T3516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.513862][T15954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.523336][T16079] batman_adv: batadv0: Removing interface: gretap2
[  334.568902][T16092] dvmrp0: entered allmulticast mode
[  334.577318][T15954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.692691][T15954] team0: Port device team_slave_0 added
[  334.713712][T15954] team0: Port device team_slave_1 added
[  334.747484][T15954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.754460][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.780590][T15954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.828166][T15954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.835144][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.861044][T15954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.914939][T16107] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  334.948188][T16108] xt_hashlimit: size too large, truncated to 1048576
[  334.985780][T15954] hsr_slave_0: entered promiscuous mode
[  334.992479][T15954] hsr_slave_1: entered promiscuous mode
[  334.998870][T15954] debugfs: 'hsr0' already exists in 'hsr'
[  335.004609][T15954] Cannot create hsr debugfs directory
[  335.087083][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'.
[  335.911252][ T5845] Bluetooth: hci5: command tx timeout
[  337.381772][ T3516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  337.392046][ T3516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.709904][T16137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.720725][T16137] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2832'.
[  337.743090][T16137] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  337.775456][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'.
[  337.816744][T16140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.861873][ T3516] netdevsim netdevsim4 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  337.883521][ T3516] netdevsim netdevsim4 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.966961][ T5845] Bluetooth: hci5: command tx timeout
[  338.041721][T16152] 
[  338.044071][T16152] ======================================================
[  338.051075][T16152] WARNING: possible circular locking dependency detected
[  338.058114][T16152] syzkaller #0 Not tainted
[  338.062523][T16152] ------------------------------------------------------
[  338.069535][T16152] syz.2.2836/16152 is trying to acquire lock:
[  338.075602][T16152] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  338.085070][T16152] 
[  338.085070][T16152] but task is already holding lock:
[  338.092430][T16152] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  338.102023][T16152] 
[  338.102023][T16152] which lock already depends on the new lock.
[  338.102023][T16152] 
[  338.112415][T16152] 
[  338.112415][T16152] the existing dependency chain (in reverse order) is:
[  338.121419][T16152] 
[  338.121419][T16152] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  338.129314][T16152]        _raw_spin_lock_bh+0x36/0x50
[  338.134596][T16152]        nr_rt_ioctl+0x40c/0xf90
[  338.139535][T16152]        sock_do_ioctl+0x101/0x320
[  338.144640][T16152]        sock_ioctl+0x5c6/0x7f0
[  338.149480][T16152]        __se_sys_ioctl+0xfc/0x170
[  338.154601][T16152]        do_syscall_64+0x15f/0xf80
[  338.159703][T16152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.166105][T16152] 
[  338.166105][T16152] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  338.174094][T16152]        _raw_spin_lock_bh+0x36/0x50
[  338.179370][T16152]        nr_rt_ioctl+0x215/0xf90
[  338.184294][T16152]        sock_do_ioctl+0x101/0x320
[  338.189400][T16152]        sock_ioctl+0x5c6/0x7f0
[  338.194263][T16152]        __se_sys_ioctl+0xfc/0x170
[  338.199388][T16152]        do_syscall_64+0x15f/0xf80
[  338.204493][T16152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.210899][T16152] 
[  338.210899][T16152] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  338.218720][T16152]        __lock_acquire+0x15a5/0x2cf0
[  338.224099][T16152]        lock_acquire+0x106/0x350
[  338.229136][T16152]        _raw_spin_lock_bh+0x36/0x50
[  338.234425][T16152]        nr_rt_device_down+0xbe/0x860
[  338.239791][T16152]        nr_device_event+0x137/0x150
[  338.245083][T16152]        notifier_call_chain+0x1ad/0x3d0
[  338.250708][T16152]        __dev_notify_flags+0x16d/0x310
[  338.256334][T16152]        netif_change_flags+0xe8/0x1a0
[  338.261783][T16152]        dev_change_flags+0x130/0x270
[  338.267142][T16152]        dev_ioctl+0x7b4/0x1150
[  338.272002][T16152]        sock_do_ioctl+0x23e/0x320
[  338.277110][T16152]        sock_ioctl+0x5c6/0x7f0
[  338.281978][T16152]        __se_sys_ioctl+0xfc/0x170
[  338.287082][T16152]        do_syscall_64+0x15f/0xf80
[  338.292186][T16152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.298594][T16152] 
[  338.298594][T16152] other info that might help us debug this:
[  338.298594][T16152] 
[  338.308802][T16152] Chain exists of:
[  338.308802][T16152]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  338.308802][T16152] 
[  338.322610][T16152]  Possible unsafe locking scenario:
[  338.322610][T16152] 
[  338.330041][T16152]        CPU0                    CPU1
[  338.335392][T16152]        ----                    ----
[  338.340746][T16152]   lock(nr_neigh_list_lock);
[  338.345418][T16152]                                lock(&nr_node->node_lock);
[  338.352688][T16152]                                lock(nr_neigh_list_lock);
[  338.359960][T16152]   lock(nr_node_list_lock);
[  338.364540][T16152] 
[  338.364540][T16152]  *** DEADLOCK ***
[  338.364540][T16152] 
[  338.372754][T16152] 2 locks held by syz.2.2836/16152:
[  338.377940][T16152]  #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  338.386736][T16152]  #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  338.396735][T16152] 
[  338.396735][T16152] stack backtrace:
[  338.402696][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.2.2836 Not tainted syzkaller #0 PREEMPT(full) 
[  338.402715][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  338.402725][T16152] Call Trace:
[  338.402734][T16152]  <TASK>
[  338.402741][T16152]  dump_stack_lvl+0xe8/0x150
[  338.402768][T16152]  print_circular_bug+0x2e1/0x300
[  338.402788][T16152]  check_noncircular+0x12e/0x150
[  338.402808][T16152]  __lock_acquire+0x15a5/0x2cf0
[  338.402835][T16152]  ? __lock_acquire+0x6b5/0x2cf0
[  338.402859][T16152]  ? dsa_user_netdevice_event+0x495/0x2850
[  338.402879][T16152]  ? packet_notifier+0x121/0xf70
[  338.402900][T16152]  ? nr_rt_device_down+0xbe/0x860
[  338.402914][T16152]  lock_acquire+0x106/0x350
[  338.402936][T16152]  ? nr_rt_device_down+0xbe/0x860
[  338.402952][T16152]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  338.402973][T16152]  ? nr_rt_device_down+0xbe/0x860
[  338.402988][T16152]  _raw_spin_lock_bh+0x36/0x50
[  338.403007][T16152]  ? nr_rt_device_down+0xbe/0x860
[  338.403021][T16152]  nr_rt_device_down+0xbe/0x860
[  338.403034][T16152]  ? nr_device_event+0x12f/0x150
[  338.403060][T16152]  nr_device_event+0x137/0x150
[  338.403083][T16152]  notifier_call_chain+0x1ad/0x3d0
[  338.403103][T16152]  __dev_notify_flags+0x16d/0x310
[  338.403121][T16152]  ? __pfx___dev_notify_flags+0x10/0x10
[  338.403135][T16152]  ? __dev_change_flags+0x5a0/0x7e0
[  338.403152][T16152]  ? __pfx___dev_change_flags+0x10/0x10
[  338.403168][T16152]  ? full_name_hash+0x92/0xe0
[  338.403185][T16152]  netif_change_flags+0xe8/0x1a0
[  338.403208][T16152]  dev_change_flags+0x130/0x270
[  338.403224][T16152]  dev_ioctl+0x7b4/0x1150
[  338.403249][T16152]  sock_do_ioctl+0x23e/0x320
[  338.403270][T16152]  ? __pfx_sock_do_ioctl+0x10/0x10
[  338.403290][T16152]  ? do_futex+0x395/0x420
[  338.403310][T16152]  sock_ioctl+0x5c6/0x7f0
[  338.403330][T16152]  ? __pfx_sock_ioctl+0x10/0x10
[  338.403350][T16152]  ? __fget_files+0x2a/0x420
[  338.403365][T16152]  ? __fget_files+0x3a0/0x420
[  338.403380][T16152]  ? __fget_files+0x2a/0x420
[  338.403396][T16152]  ? bpf_lsm_file_ioctl+0x9/0x20
[  338.403417][T16152]  ? __pfx_sock_ioctl+0x10/0x10
[  338.403436][T16152]  __se_sys_ioctl+0xfc/0x170
[  338.403457][T16152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.403474][T16152]  do_syscall_64+0x15f/0xf80
[  338.403496][T16152]  ? clear_bhb_loop+0x40/0x90
[  338.403514][T16152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.403530][T16152] RIP: 0033:0x7f1587b9cdd9
[  338.403545][T16152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.403559][T16152] RSP: 002b:00007f1588a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.403576][T16152] RAX: ffffffffffffffda RBX: 00007f1587e15fa0 RCX: 00007f1587b9cdd9
[  338.403588][T16152] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008
[  338.403599][T16152] RBP: 00007f1587c32d69 R08: 0000000000000000 R09: 0000000000000000
[  338.403609][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.403618][T16152] R13: 00007f1587e16038 R14: 00007f1587e15fa0 R15: 00007fffcfca2898
[  338.403636][T16152]  </TASK>
[  338.745693][T16156] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.822880][ T3516] gretap0: left allmulticast mode
[  338.827964][ T3516] gretap0: left promiscuous mode
[  338.833147][ T3516] bridge0: port 3(gretap0) entered disabled state
[  338.845269][ T3516] bridge_slave_1: left allmulticast mode
[  338.851410][ T3516] bridge_slave_1: left promiscuous mode
[  338.857339][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.929514][ T3516] bond7 (unregistering): (slave geneve3): Releasing active interface
[  339.180304][ T3516] bond6 (unregistering): (slave bridge5): Releasing backup interface
[  339.188800][ T3516] bridge5 (unregistering): left promiscuous mode
[  339.322522][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.333339][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.343444][ T3516] bond0 (unregistering): Released all slaves
[  339.352468][ T3516] bond1 (unregistering): Released all slaves
[  339.364271][ T3516] bond2 (unregistering): (slave vxcan3): Releasing backup interface
[  339.373761][ T3516] bond2 (unregistering): (slave vxcan5): Releasing backup interface
[  339.383685][ T3516] bond2 (unregistering): Released all slaves
[  339.395427][ T3516] bond3 (unregistering): Released all slaves
[  339.411812][ T3516] bond4 (unregistering): Released all slaves
[  339.423166][ T3516] bond5 (unregistering): Released all slaves
[  339.434887][ T3516] bond6 (unregistering): Released all slaves
[  339.446413][ T3516] bond7 (unregistering): Released all slaves
[  339.549821][ T3516] tipc: Disabling bearer <eth:syzkaller0>
[  339.573746][ T3516] tipc: Left network mode
[  339.782068][T15954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  339.794709][T15954] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  339.802939][T15954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  339.816139][T15954] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  339.826272][T15954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  339.853694][T15954] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  339.867470][T15954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  339.876853][T15954] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  340.046723][ T5845] Bluetooth: hci5: command tx timeout
[  340.080539][T15954] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.109683][T15954] 8021q: adding VLAN 0 to HW filter on device team0
[  340.135845][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.143008][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.176075][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.183229][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.382770][ T3516] hsr_slave_1: left promiscuous mode
[  340.388865][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.396564][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.403948][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.411610][ T3516] batman_adv: batadv0: Interface deactivated: ipvlan2
[  340.492882][ T3516] batman_adv: batadv0: Removing interface: ipvlan2
[  340.508955][ T3516] veth1_macvtap: left promiscuous mode
[  340.521943][ T3516] veth0_macvtap: left promiscuous mode
[  340.527838][ T3516] veth1_vlan: left promiscuous mode
[  340.662011][ T3516] team0 (unregistering): Port device team_slave_1 removed
[  340.682896][ T3516] team0 (unregistering): Port device team_slave_0 removed
[  340.724506][ T3516] team0 (unregistering): Port device dummy0 removed
[  340.746060][T15954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.948282][T15954] veth0_vlan: entered promiscuous mode
[  340.957744][T15954] veth1_vlan: entered promiscuous mode
[  340.975313][T15954] veth0_macvtap: entered promiscuous mode
[  340.988927][T15954] veth1_macvtap: entered promiscuous mode
[  340.996794][ T3516] IPVS: stop unused estimator thread 0...
[  341.003220][T15954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.015799][T15954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.034969][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.045618][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.057624][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.066460][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.099602][T15954] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht'
[  341.124055][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.134024][T15954] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht'
[  341.142807][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.164932][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.175722][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50