last executing test programs:

2.060930287s ago: executing program 4 (id=5234):
socket(0x2b, 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async)
syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

1.982834947s ago: executing program 3 (id=5236):
socketpair(0x5, 0x5116e781d3d6127f, 0x1, &(0x7f0000000000)={0x0, <r0=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000780)={<r1=>r0})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x2b8, 0x350, 0x0, 0x1b8, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x3, 0x2, 0x0, 0x4, 0x4], 0x4}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x70}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'bridge0\x00', 'sit0\x00', {}, {0xff}, 0x88, 0x0, 0x6}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e22, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e21, 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x4e24, 0x4e23, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@socket0={{0x20}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x84, @ipv4=@remote, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x80000001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x608)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x1ff)

1.92934066s ago: executing program 3 (id=5237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_opts(r1, 0x0, 0xc, 0x0, &(0x7f0000000780))
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000000))

1.92303958s ago: executing program 4 (id=5238):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340065f277c32aa05d160fd0d36f2f1c1347c9f4269ea33a290c7650d51e6d3a1f08a414f93428c38074115e4117e1aa8afc6e493192d47b321ba45ceca3c2f63e5d65529b95c3736dcc57bcbcf503bbec332453bce251764b33f2381a2c1988dea34b68e541fa7b6cac00725571614afb242285ba141e5609266f3ce1f90cdf2f14c6c4ddcb1f22976b9c364e7170c5ee15697852de8be9b9419a", @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)

1.809578659s ago: executing program 1 (id=5240):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r1})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr=' \x01\x00', r1}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b27, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x801)

1.696785892s ago: executing program 3 (id=5243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r3, &(0x7f0000002480)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tcp={0x8, 0x6, "e6f385", 0xf98, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x8, 0x0, 0x61f}, {"b1586fc68f22d1a6c33d266643adb4b4643b8e8e20d1d6d973cac0e487a279f17460f333f5d492cb29516b051ce8847b230769faea5ab18148784fd66ede74334570c7ec696b8e23f1759cf2472911f3acb531235185e3aa6a20c31ae72b24eef408446fe27f32d9a1c07f0e27fd3c3dc0292ebc6cc4e426ade083000a6fdbcd21238f75764ba661dcdbccbba5cd5e76f21902ee33be697e8dc792a708bb607d8a7459bd376a752af3a4618b7ff99c81a8ddb1cad8c6a5e6dea0ec5a28046e6f8a0332b017cd65fd2a3183eb433df51aab60ccf781c982462b7e049a5b569a8209c4bcac4c63e066cbe983d8a319590cffffe4c3aa1f8a23430bee0f8f54042f7893677cc9effbbe0643037fbd199a8a59232f676413b120733b07c8d3fc41efc20565bed23cef90185a6a34ddedfb8eb47011809494b780291e12a0e5409910618a1f7477912651040b1d544486142894311abac9db242d0dd633c05343ccab932464b35a2bb21626b9a527511a1081912a2300594661cdb463523cb47d59ae4526f93255f9b2653160d5d980a38df15328c55ac548a7318c7cb115e72f1fcf5630fff574688d82bdb95000d9505f8585d14b060cc6fd6302ba896b7a72c62dd7966663458c44de49d85cd9fa5e0ed505ca2ad6863cd1c00389371da2422bf08614bfaae65f82aa297c2903d25f135b2049cfa4100d519a334016baf02bf3a4bfa6096236fd2549ea29e57d3b573308b1eafe47a27c3781612d99c5c9b2f8b2358779049eb3400f42fffbc776222bdb7b42da24611686b1ffbd896f767f3456dee52aec613a133bf6b58ba5181afe2f4bc5ff986b910d3ad2aed298055cffc58103f8a9dd9a81e76b343c766e07f730e722b38485300525e1e69d2dc9ca0b85e1855d19d5eb128a1e1f686f2438f87db5ae21e38c077afade803643b7f5d6d2621b152ec6536b98a7286ff93ff823cc848754517b5813f8a280d3382bfd3e538eca412d863f9f9f2382c8b168b7b087560553d22729b3f1becdd96648d52b2ff99540a0222c9ead9bcf45ddea00b81e098803f26850de1071bc2331bf33dc9dcf7906060e8537443e94cb96b38cad9c827171e129dce403e9d6830e82a9c6bd0be49b1615077a62b3e518dd03becda412027ffbcd21f96c8e4799561d11a535a037ee2787427d529a82952c89d08c3456c3a9d50cec5d5646e5c41bf91c4976c3b241c988664f147ed62e90b1a0e658e9b06b5cbd8fbaf42372fd1072aff7b9364de186c074c11d804c1a7b1bc558c0f6f305f2ae8d6c3ba830bf4eafbe495908d5229875b3587f05fbd57bcacb1d6a047dd6de09ea80796edae8c23c0ba4b7f0e93bae7c2e6f39b148a824523c7fd07eb1cb9a74e70c540276be7d2fc265f5ae4f37a9cbd98fe45194a65a09d5c77f58beef05e8c95e2a2a4de52c0c09d00f4e097e785bf6d29bc9c2bdfd821eb8626f1a8012cc0ce83afec8ff46097aba8433e8d4b66e6dba2ddc45b07e6c917fcc8835ba2152e7c87deceb02ba1f2eaf53b9d1ac655b50cb23e8b74a6cb5316cc57e70dcff35d8dcb093b13d86587c754cda6026e0d3313547802c62ff722d24fa61c1f9e346bfe8b141189cf843aa521ce063b40910fe9ffdf31e3974339e8b72fb1071429c4725c0db09bb91fb501c37a620df672dc1c863f134d6d768aeed941f086e8e2a83ed2b2dd893dad7c9909e6efc27b3788bd2ecadab5057ca333b8cd9a36dc1df825350204e7671ef5ec16156dbcba08686712a736be5e3b5273f1ba3cf33c4b046d46d6588d75d4fe0a8299a6dedb659546105529946242530d65496a35afad06eee751c9cfbe8fbc072462cb04806516cab0cbcc77968fdb902108a86bbfce0225e79fab6acf85498c07861c9d6dc4ef095644c31c8ecbbd84db8dcbcc415b639603ddf0ce8099f92ce3b3f8476ea846d1c1b455f48f1130518f7bd4b414fbcb7351f1e043ae5a939eb30dffcd70febc0229c965af59fb6104f651e5f5e822b096a2d448d755785d8d42caaea38f9851a9ac04370354562878472fb50f6eb548a180f48b54fd0f4b124b04760d1f6f579976c015b68457bbe227a4fd958e443337ff55eabbcc307c1ed72d9ba292d35a09fd39c3ac99137471fb8545cce7a2df3c2195b33b995a1ff8147f1c668a87709c5d9693a03a2296d4aaca7704cf7a1dacdd0e03b5b8330c9e7c63dd251d7283fa89fbec4c14e257a91f0f8f84bbded5ec0ad827b44a82a63afb060c22f87d56f06b00da010b5ce1c17193751cebea6ac1abfb1325dd5f68be79bc15b341f0b89d42a009c0a6a2758f53e56bf9742f76da71ae345a5526ccd8a4ce09102b0bc77e41165ce82a77629057465991e29f6b43e0e87991514ce66640837cbc5b9d3f72d53e48ffa2a88f19d529c86e96dd162cb2d7281f78dc2d7d35ed22130c91d89d2993babb5c1fd18ac8572414418b6dd2ad9849d53abf0ceda02dd03e368e3e2307314981fef619234e8824bfdc6755b617add58ccc4e2537fc5d934c3fb3bf656b34d320b21438f93a0506054922b6534f3b1fd15db6cba0cb9a8ce24c48273c67b7b319226b76c55c16aab9331597c8fc8ee3435b0ace7dbe7ccc498d2435f893419675ffad06a7e527f9386dfcda9dd6c38e5fe5f967645b2872407281307b26d58f8568205cde07e3e1c55058efafef0c7fb85052b999f22ee9ec5e9afa27964e25dada30b6edd14d29c8de2d21bf0dfc811c7d73f37a2673d3b766d1a8b188b405086d0ec1b1e40c4fbe17bf234350c5fcd989abd572cddd712716ddaee7d108cba720a93dbcf90aa1471ec8152a8f19d76905efae9488b82495030d8d97ac1337a3c0abc3f33f9623b860f724d10750189efa4c735bfdfd2bb4483e10f1ca4eb129d2f4c66c57b15cf1f188654059f689d02ffd36840db012156490cc3d2364f1a4391998e345b9301b368f80269252637f49ae8a4de2f7c94d9c9d2f8502c03b8c66cf8cc9f30439a3ec6c50578e568d2fd00f951b27019e83cfee8938347a73b8728cde023ec23d31ba902e0d892a8b47b874ced931d5090f37d44369abcb58849aa80bd8a971a3a5bb3476f50fbe02605d806ba1f3ed601236352d9cbfe80d8c795f35750d9b90cfa1c19344ac9bd9e267d5bd4b7e09cf91bed04c75e35a96938c0f2b295829c6f5569da82096055310cdfd81d27b022acc52d6465640dc0201e0688005dae25a17246e417e8015b488e0a7120486ac427f55a069fa0f404fbb4779665885b66bc2916e5ad3c8e25e2a05f0720c5989d45993da159ee414a1e5eff1880eeb21c45390d27369c57d4a3c6335f7391115f776a964a29757ebd4626562d1c8d617a7a5b4e2433722d84cf7ca8bf7891786407967abd1cb9c61773f440908df202d06e7a68641d873545bc17f3e2d99accbb48989d1dc85c53c33bda33f3a2aefec9e4c24cfad4fe88f1ea39f6925ca5565bb30c9f12d0a369633f20d642850d9fd25de0f10c304503e37f385d0c3909d7fdc1340d24cca1a3c214212c4a3b52f6fdf1feaae703b825302e6f635a91d484216258050b54e7ebbd03d4184eb532f94db08f974955452c1f87f85d3d2a689aea9b0e8cd2fca22851e2197b268f610c66a5a3e88e3bac00c19d9571cfc242606ed829030562bec84898ed343ad6b16fac0e321a8f4a4b8bb8da7c59e9610c70fb6c7612e6a1f8d0d110ae8273926cf34de586dde45a9e7607acebee8cecfc601cbefd3d5d40d85d4021ffc90f85f3a748841f1dcec2bc22641973c8a9d068f42427b7862c3753d64f884db08217342dce6eb0909f86ed838bb8d5c2d7d1d12a93a2ad94454a010141b75731c2328ce8f19979d2a58bb50b3b61401928f5f526870e5cc9859077ec3f6aa7053e30262daa196a36eefc5f4a583e9b6d19de59a387f06f43e082c06dae7ad9ef21e429eebf7c159f745b50c712c3dbdbd36df308fa7013e2711453c504e61debb58d0321a6e5b828c11dc660c6775f744fdd70fd068192a8b0ec71556af95e87246545dfcfc44104860ec314fa5577c5516187d31c713c9780f4580bacd6e1045a460f32116eb35a29cea35419601b1fa2bbfd311b433f8d7d844fa371bb2481541448621c45d5e2ea9acffd40e08106e9d41d90ede1c1c176bc040640c3198c489783843a5e34dfbdc88e277915bcad23132993a43904fbb91505abc9b20e02df64324ca4eef0d2c8b87785d1bd6017a954aaf1f0871336ee5e52cd7f30a1d0a61af8c6940277c1e60cc5bda9565e8aded8fce17543b687ff4a50238632718f10c7dd2288493d6918df0bb158e7716b4cc63b84a1cb1c287018c5b40632991e60e00dc666db622012b71836443d442925bf6501e2daf3dcf463c08975e8a3aab0a2d36def042c7aab6812a183d95db919f8e9664127c94d596dfa8117ce6dc67a845ad483ac0985ecc5217793a4341e2ec2e1facd20fb8657ccf7f53632db42af04c863d6bf2bcec829851141072df3449674b73a4649da45a86218962d14bbdd9b44ca9e20fb510bc148bde1bd1c02ed55087ff1b0701b81b69860382897303f900776792b16e856588c0c57b5a19aefdbc44e0ba22b4e13a015b7a7d0876f9d9dfcf27610a5e2f9aa80b6e7f3f84ba10f0f1ced4c89a3f83ae21445f707e0a11306cb4f25d3560eedcedbdb5cf54960e2f270c435de82b419e14c69af19349dd8af2d1e1b9dc1b326230115474cc114560795d4c2a5e7b08aa458a1ec42825a4bec101a4c11e1d853ae18c71156bd8809465a5e5f480cfc6cd6c01c5cc97e9e42e7a9e356c73ea9a9350c44f3aa41346e8c5545978e7b9a3f8b265eb08fe9ac32e388df8648bda31e2cbe6c95a72b1f1f02cfe56967dbbb397fef0a9f8f51588976437c7c4acfe908bc5c6d0ef2661d646f613bdab77b4664cdf493c3c17749fd871aeea50b9ae9240ab2c054473aec3cc122b9b9b8946da5fbfec87b36f5af373de194e08416e8e29e559828d67044ba2ee9d438d11b9ffeb1c079007f41e22593497b222c476c87615c2a02a42af4caa6aa0454208d6c1398978ee95ed4ae932e975fb508a63a2b9fb209c9c7c38848ca9fb431528c2006f3a331b718f3dc0c1c9c984c848bf375474eafff76215b562c6153d0d3102c2977344b39a06685652ccea39bc960ec071e2ea88ec81545d9c78874ff7f38566e5e3c3fde110a224135f330a7b7a132b276cf63a3dab4a91233c662d2623c2063a7a2a6104057cef28df1d311e41344cddb02c96859a84a42f0b76b45c9a43de389d42bdbd46dea7739f30d4560a34167dc6098c8e1f03a2af7553ae92b6367e11a41e49c96f63fb59f98e2e58781bdf3b63d05f66f7a8c23ee7827debbcabe4bfa3483ade4b30c8884cd0ad089dddde8bb937d96036c96eba485f9eb3daefd05e79a84c233e4bbfb4120d61b3d76e5f820f04d2f844eb073e239398b031c4650e3468391396460853b40b05a144c37a0bcda962a02ba02eb280ae921f07cc6d68a8d45b6e0173461227c872727e2fdfa0452904082004877d6f104821e7d7acd5387dec1c266eef406e5a412c1325e7a6f73838ba025602ad609b5d58e67"}}}}}}, 0xfce)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @private=0xa010100}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x22, {0x2, 0x4e24, @local}, 'veth0_to_bond\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000500000000000000626f6e64000000001400028008001300000068eae100000800120000"], 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@deltaction={0x2ac, 0x31, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff6c00f}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000003}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x744}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcee}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x2ac}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0xb8825000)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b80000000001010100000000ff3baa1ff47b91d4e075098e44000f80080001400000004a080001400000000008000140000000070800034000000007080001400000000208000240000000040800034000000003080002400000000d18008ed719ed000d000000010000000600000fff80000000380004803400038008000340000000bb08000240000000402215039b0000005c0500010001000000087fbe0a64b3a08acb000340000000e60800"/184], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010927bd7000fddbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="2e003300b0770700080211000000080211000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4008060)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1030, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1004, 0x2, [@TCA_BPF_NAME={0xffe, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1030}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x158}, 0x1, 0x0, 0x0, 0x8048000}, 0xc000)

1.624682505s ago: executing program 1 (id=5244):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x200, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async)
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0800080007030300020014"], 0xf76)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket(0x14, 0x2, 0x4) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f0000000040), 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028000002800800010010009ab1c00e2f0a6d0fc70e36000004000580080003000300f8ff07000500"/63, @ANYRES32=r9, @ANYBLOB], 0x50}}, 0x0) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@mcast2, r9}, 0x14)

1.388871555s ago: executing program 0 (id=5247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmsg(r3, 0x0, 0x40000141)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0\x00', 0x7})

1.378725664s ago: executing program 2 (id=5248):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r1, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040)

1.270338455s ago: executing program 1 (id=5249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3e98, 0x1}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="85c8d1ce674940e00dffffff0800000100060000ff86dd6001010000241100fe800000001090"], 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000e2ff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb704001400030000000000000000000000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="76b7ebce069cb407e954e898ed7834fdbb43b721aee6488e16f114d191bccc942a30dbcea4d91b079a16f5f48df48862d0c7d466ed797112a29cee1391ca0fcea8c02ce5addef7f88a6dfc7939e07f7af627aa8c211d629fc921d2453b7a7cdf1294da530a7f452f11"], 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)

1.26950303s ago: executing program 3 (id=5250):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.268699038s ago: executing program 0 (id=5251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a400400000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x0)

1.110092064s ago: executing program 2 (id=5252):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000440)={0x1, 0x6}, 0x8)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x26020480)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r3, 0x37}, 0x20)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a00)={{r2}, "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"})
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = accept$netrom(r4, &(0x7f00000000c0)={{}, [@remote, @netrom, @bcast, @rose, @null, @default, @rose]}, &(0x7f0000000140)=0x48)
getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4)
ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080))
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000340)={0x0, 0x1, [@remote]})
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000240)={0x7, 0x9, 0x6, 0x100, 0x4, 0x0, [{0x4, 0x3, 0xe, '\x00', 0x200}, {0x0, 0x4, 0x0, '\x00', 0x100}, {0x6, 0x80000000, 0x9, '\x00', 0x2002}, {0xd, 0x6, 0xd, '\x00', 0x2d0a}]})

1.109232053s ago: executing program 0 (id=5253):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
tee(r0, r0, 0x3, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r1, 0x731, 0x0, 0x25dfdbfb, {0x38}}, 0x14}, 0x1, 0x2}, 0x0)

1.107048252s ago: executing program 1 (id=5254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002d40)={'netdevsim0\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7e528816}}, 0x30)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000080000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d6163736563f55aaae8bf1708b8fb4a", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.106175759s ago: executing program 3 (id=5255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'team_slave_0\x00', 0x20})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffc6a)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x320}], 0x1, 0x70a)
sendmsg$nl_route(r9, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=@delneigh={0x5c, 0x1d, 0x200, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x0, r6, 0x8, 0x80, 0x7}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7f}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_NH_ID={0x8, 0xd, 0x8000400}]}, 0x5c}}, 0x20014000)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x7}, "00001200", "edfc4a7c2853770307e48bfdb8644800", "6eb4a89a", "c277dbc4b45a157c"}, 0x28)
setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bind$vsock_stream(r10, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r13, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1.028693501s ago: executing program 0 (id=5256):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@local, 0x78, r5})
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000))
ioctl(r0, 0x17bd40, &(0x7f0000000640)="438af0396ac06de1fb90e2e8e1950fadb10cfb7afcba6b355aa2dbd156b351ae2a41d0025f34e43e781a8e19d2462837e4c68941c6cca5fa9c9cb4d656787e678745ba7f037b7256efe8c97f4843e4ccab0dcba8110411c90c71608df0237131e0eafc339cefb0a8283f5c4d2d0610da38e7d8c1510f921c68883e25dc95ae857888d5f9f042d385bbc9adc68ff5ad81935b1d86c6df66719cce2beb2483e454c73720462287bf6d33018693c4094cbf6dae43a1767f190095eb9b4c21f113bbbc34ec1148dea5c44dd936b1b643e2dd1eb7898cac576bac9b204754be840bcfdf5ff59c55ab329359")
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "6729b24948f89c4f", "7578a8e5250b61f03a22d38bc1c3ecac86b74e7720dbac48c702353144bffdd7", "58d38747", "5ec9ffeb8416d2b4"}, 0x38)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x80}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "bba764cb2b934a20", "44b681166e90f5a063591b03040579decb89eb8bd9960c9e79dc405182399e15", "1fbf5838", "94780019b96e2bcb"}, 0x38)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100c19}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000114000329bd7000fcdbdf25080001000100000008b101000000000008000100000000000800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x40000)

1.016022064s ago: executing program 4 (id=5257):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)

1.015354592s ago: executing program 2 (id=5258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r0, @ANYBLOB="0000000002000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

862.348549ms ago: executing program 0 (id=5259):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000100)=0x1, 0x4) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) (rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0xc0)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0xb, 0x23, &(0x7f0000000000)="ebaadcefd447feb190a5ba847b6ce1f314901809a3bd38eb2ac9764a6205c1fd013ce1", 0x1}, {0x7fffffff, 0x66, &(0x7f0000000040)="2707d2a8c4f69eff566e7682e54039fd011353aa02a03445c127dddbc4a8e7c1fe602f91e1cc044a763897bef80b49e135fcf96c28a91a68bbd1364d4d342f873f6f765fe68c55558f6de565005a2305085426ddbfe15eef6daeb5ad5f308328322c6e3e2955", 0x0, 0x1}, {0x4, 0xe7, &(0x7f00000000c0)="36725c471cc21464e01abdc9a0c0b4bb9438ef6ba50c73c320a90b02b96c51020ca7ed06824988006a1265693d76c8664fbb1498c496370cec0b172a4f27169aeece372dfab24f2bc7b058aed9fb3250452ba049d295c2f7d5252a979796336a840676ad2a893b4e2e3f04d1acda2f2279743740cebb8ba6ac0328981e99a7fbd924618cdb04908732b6a163b63321f467883c0ed1e1c6b4e88a074fa89a82bdc428ef07c0c7633521aa66c070987f3fb9b8faa8ab3f74d97b80da20f0aa901c67129d09788a38f5a6f245777eabf80ad9d5e148e075ec5931da6942e78484be7954b06014f2c5", 0x1, 0x1}]})

861.539579ms ago: executing program 2 (id=5260):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=@updpolicy={0x104, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3504, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3}]}]}, 0x104}}, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r0, 0x0, 0x0, 0x81800)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x9}, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r3, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

803.373782ms ago: executing program 2 (id=5261):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@private2, 0x4e24, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x2, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x2, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x456, 0x2b}, 0xa, @in6=@private2, 0xffffffde, 0x0, 0x2, 0x81, 0x7}}, 0xe8)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={@any, 0xba, 0x7, 0x1, 0x9c, 0x8, "f93ebabf50b51245dabe0f09f6aa4b3e4749af576694cb9f90c5d5f102a06d6a3dfe2a8e7de35adaa03aef69a505ff7fc9da77f5a60a5b99342e0ca7adcefd1636fa24cfab00a4c077f2af993f274b8a80f66c2572e8380ffde84657c76cfc30e5aa3b339acfe2a8934b76f9aa67a7bbcfcd696a826689f0ce892e461318a667"})
sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x3}, 0x2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001800200029bd7000fbdbdf25802090070002fe0700080000080001000a01010205001b001100000006001c004e20000006001c004e22000019c7ac8ab8ce5087c2c773fef132c1bbc4f6b854f1f4154afc0041848f85f4fe2332634af599533130e2d173917f5482c44324dc"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x8090)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180))

486.90705ms ago: executing program 4 (id=5262):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async)
setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x5d) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x13)

241.702722ms ago: executing program 1 (id=5263):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000019c0)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='\'{${%\x00', 0x10140, &(0x7f0000000040)={@align=0x6, {0x100, 0x7, 0x1000, 0x6}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, 0xa, &(0x7f0000001880)=[{0x3, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)="89e30f3547cd80017b24300aa624b124a1184ab3f0e86862f0332cb873d43fb041c14610033c35110876b722d29a7d352b502c4619cd521b010f08207d97b9aaa1af779317e299228f0b9b0bbd64d49cb3b1a52788e75e9af21dd98366239b4821f7baa3abef6bf9abbcfb79c63cedf6c5", 0x71, 0x20}, {0x2, 0x3ff, &(0x7f00000001c0)='\',:-\x00', &(0x7f0000000200)="5fd582cb0d63e599f7bfde77bf4cf9c9024f1b68a8936e769d646401d629", 0x1e, 0x8}, {0x0, 0x4, &(0x7f0000000240)=')(\'-&\x00', &(0x7f0000000280)="1e3595a16dc6941efaf4ddcfb5d9546c665cdaa390e50c2c39e71f6b2ade203afd4e58412f6649c5bd0b3677cd9e8298e70b1a18e7c0df192b340368009f4af91cde25208b993524a2dbcdc865787ee5aab0eadae5d5d20830a9876768247c4e40d3423af9e015af7f2807a9317503a7c178240216a26637b96b366f5dfa3dfd41c1df2f3207bd4ed0f8a143fbd3a88577df3f1801d1bc7293bb6676d5dda07bca284c6faf6aa68f4c01b96d5d1016a7bb6ed003efac943e6314063d268acd16cf317d04049d303d231706", 0xcb}, {0x1, 0x3, &(0x7f0000000380)=',\x00', &(0x7f00000003c0)="728c40739ff0ec93cd094187c09860ad3aa30b49140a68d27aa5233a839092bd802e82b8396a85ce19a76e51d157de79f23e9828cb6fe1de7d2f0479b1f9e98917eee65d1711ba319abc078d0c89b89f9318479e9be10fe9fe56dc7387e1bf60ee9f654aae717c7d0227bf6e14bbbed8a01a3992f213f8a85155a72ad2636c70282cb554fc936fa097edd3a5684b033ae64aa6de744d7f", 0x97}, {0x2, 0x4, &(0x7f0000000480)=']\x8b*%{[/-\x00', &(0x7f00000004c0)="a2f75aaa18f789cbf1b924d484ee922f49b1df2b0bea927fb3a7dba05578718f2fab93dce7befd490979e75a64230f5ea42187c170e1f5981c80ca60b322a2468b85e0795ba8eb6465a6da3295", 0x4d, 0xa}, {0x1, 0x3, &(0x7f0000000540)='!\x00', &(0x7f0000000580)="8d9f22e791caa5d19810c89edb9f55fa5bc8e4821d248e2dd25cf8fe4d3bee4163c9fb398f70a8d510b7e8ac337962c40933a4f1718b8e", 0x37, 0x38}, {0x3, 0x5, &(0x7f00000005c0)='-([\x00', &(0x7f0000000600)="16a3463376e0acb8d9d6840659e5e29f9cda7e0c3ecf476c3d3735a3e70eda974434bf66ebc55ba31ab4ed77f7e11df1adb6e53bf7b30a7de2437294ea30879b9e77191d148249cc87a20a94f3dd5f9efae9cd5bec56b6ab97f2b36d46e37395632703a8fea9e693d76c0b01ead5a0af40335390d480099ba26349a0a013fc566a51c201f61e75ee11fdbfb973aabc21d73a95980bc089735f995b071ce898e82b27ff7f225c9350", 0xa8, 0x8}, {0x0, 0x1, &(0x7f00000006c0)='^', &(0x7f0000000700)="1614cc3c0cdd79126202b2a3290235231799d4bdc8d3910f361879e426e334168356d998c6466b0690f33d511ec532d525dfa0a072d36d136093b916ed07f7ea7a2f2f3a82374ccb7d77016c9f85c88ffe7b4be1972546a8bfe470ca35cfc7bde21e6aa0133a59e10b19c788e6ff567fd33ec91dc4959b1132eecd85bc91ba193726695d9bf4d575544fb271e31efc7d0587fe2930ecf41e43ef78eeb9f5b3585f91864dff35e7bd72c4375af192e29992e29462ea48939bfc661f2bb375344b055efc692b6078c205fb0769302f112dee8e058dd194ba9dded344c06d49bb15b7433f9c7545abbf842a3a093b538ba5469a9b9b40c4cc7d77f0b18c3ee3e33fc8ffb5a469a3f6c56fa33aed93e6a1e5e40bade9bdd63d2c3504483e29097c91cb03fe3a64a30526fae2ec5eb45a9ee24eb1987673c40d2005132d9cedb9f69b806706fd9daa600d36482584bbbf9f07b2190ace8f7d9214b0ff9425facc582587fdc986cfd8890fa3f873e0730be07fa68e52e402d8438c86fd8a5317afdb21150bdf22e6b5bbaa3ab61f544e2354b0deecd98702f81f7b1fe27445fcdaf4ac580540a640d4332795249c31c8907abab1457325e9d9b4f4fb420ba49828c78681a0bd2ba61f08fa86c2c1c3456762ac42e67cee17e246b3b9b806844b74a2a6181f16a12b48add7b2601d11480f53500895a2dd965f1307abdbe1e6a12e07f9ec290d30fe67c8747b21d74463aaeee4299d9f65e49cf78699f0add690f72f4286f70803530f983f225479374f26c9350475bf20119e389e31ba6c60be4eb5a6fe364a81a19bc48d4261a67da345c3f8071b56c29afdf5f4e97fba846431c2b61c7f5617ab088ff41763a3bd2830ef70bf5bba925961e8bf281ddd9ac4a82264d57f27182b6eded37fc34ea91849840001b6ab51f653c81c3ef4cc0d5b450ecfdf0e275bbe4ec49cf2204f13cbc569f328a4e7d7cc867cf20b05efd2018f4e5cd81ce5875f42babf0ec3caf2a3eea89ac54abe81c041313be953487e5400819ad2ac4317e2ed589a026c2aeaa348f1a72d1649478e2067f1c72a4fd706fb68b3e28fe2a2137e1c85cce335d37884c899db808bf8799102c5da9b4c8aba98f5f3432507cbc65c5efd82a159de05a1241ed08b85da970dac77136714e6810a3b807944113565bd5dbcc96cc4a8b44af4fb409ad28a456e193c7df4ede46087848bf8bdc0c06690c36498246d4e6b0616a7c1c96814ede935c5f960a1ccc7a4c2bb73be951e355f87e2a2157c92f4628a70156ef69bdd398fe3e7ac5f3c630fe4056808b448fb5761ff64637888ccfb4dc0e8eaddb6d85163749c864649e023ebf0f0f12ab6b055961feb7fe662dde10ff4eb2a01e85fa2ce41bc9916e2a27f10bea6a46da4377cec6cf108a796a2a9b15f87ab3346100268777d77b227c497f44aad6dbd891bc147fd15635c176880b519f855b4cb7bc77318c8d888cefb400a493998ab3217828c89879c5f92f21c4438d9c0141ead0d1018b68826a552a7473c3de72cb02344e55ed731785cf6d55b44151b21a89578c40997aa5266d7bb43e0254dcbd0f20ee2955d5539518f4f6bae289823a45c5d165d5545fbfd459a489c9fcacdbc23862957197298f0f290dac73032dea7bd6dfdb89d0e753be1aa0988a760ef9737a2c6d2458d2903822608eb21bfcb4e46f14c4b7e1ee8ddb98fb169403f0189bf68467ad83f446f7acf93ab4cab8384189815be3dc81aaa0bff45e47412432c573d764d040b432f2b2780117451f563f8ff982a60be1603dcb078906eae07f194d49f5a98cc8b7dec2e8a1cee94458a1097b3530205365da7b6dd8e36dedd140d368781db93ca2cbca4dbcf94f71a6c7448bd76ddd01bb39373b716e41dd8f60c05a81284e172c9ed434f7453872ebbd08a35ad8927087f585e883dd3f8be3426b1fe90edcd7dcbea9f551e60b0464562f5d3bd30aae0f3e98542afd33063e901bb5b99feae23009e69b8192824a464cad0fd3cbf2e5919fb2e10530b426844641b2ac62462b72a85d5a6492279ea350550de44c73272898a07b100a9e17f31de0a56e46fec6c53e3d0377333a854ef72f42e3fda7a0c0b143c8a0669e2cab9e49f7bb7d4ba5a0f0d95705b526aae2165e6215df96448a63f0f2de819289af1bb59fffd8ed847e3fe2970617b4b65e042f8493be1df166ba0d81f7b0e194bf5e0a6b79ed2e968133eb6aac8b937c63cb7dc77431bf2756dabcd628173019c51e860b4af7e8567bd5d44d33ec21763e8f9747d258a36083760e28efde211104a7c18884b11e53f70000e78819388c339fc99cac768759b790bf4e98fb60be35dc7ee7e5b5a8f3cd3102dbd1c70e84e11f711d31121245376a8e6a6f60055d4c7a9b02fd56d378b50ee5773266f2ceafdbd2924c27177c88ee5c8b5cb97ee4add43e8e53c99008402d8f6b5da98cc86db8ff567ab2a6be9b2ee2c6dd63d006577759b4c48b2726afe9bee03bb3948898727e25719c649f53bb9171e18bc4202e6c32cb966eb2367cbcd47fb4ea7e477e1e307a47d1b76b60172b093b0a07dd425488872217b254e903b33836c27929e638ef565f567ed947313849b1edbfc641d7a2e297c4f5e22a0952bded7d369659451818b156e9588436dd5d541ecc909f8bc98ce16f116b4f566ebfe7c91279c20e1306b8a514742e727dd9cae5f709dd170831ba55a33a1581ee7c47d87d17757a685655c2b7543cf46c744a23a49df5a169f2458f294ee41b9f85afa7e2f10a552df5db8fc76b7e4af7795461e2d6110afbcb9128fef42b32e3ae7157cdd33acd217a616e679f36d871ba5890afcb68897ea8e655a4e6b881ba74595fae2652f4773d80b770c8b662cac420ffda18ceea351a97c7b7e747b1160604192a6770837a27080995eacf1d27f48a530271655eb39ec146a88ca99d1aa23c659f46c471976c84d9b873163cdc63aed4ef14b82020aad39afc2fca20984e0ee89891dc9049b8b23e0980561b0c214f8006d5a21ed507e19edb578876dde36508c51a94cf006d4b0f6078254cd85670d95dc1d7cc799ce3e74b95b819dd1a655e525ad54ade8c73798d0a14c258069377f232260b85a34e3e19333a1131a0506b99e31d8cf94c4af8ffacc4e2347f53c0b8e798cbdda2b6f9e3ce7b8f227f828cfe2675eaa798322872b694ea717c99d21603bfa9b507201a6234c039b45381671590dad9a6bfcb08aadc4146ec29d46ebcfaa0ee076494643025c7abd9fd3b23ce89f4a17c8131af3440d5944c62bf82fdc83bbf11cdf09811d6085e78859e171b703a64b53e4177f533ab8c63f8061c6bf6ce2e266bf7abf0686cd52d1827435d87972645a237483a5feb5b9289c9c308b70e1f5be0277464763d2a9ab11bbdd774f3d2891ce9a90a4b6eb37018fd7cd6176f2d4632750d54598bd8850f28e9f3440ac722d8e362b082d6f0639f081524a432782d6641696ba71367804583ca0e5b773e2436fa3786ad6a076e95cf1d0c397ee719eabb6c543ef323a22c48764a7af5bbc29657cb6e1230e968fd657996cb4d8e1c61fde56288487356c95506e99b7e18000ad9e77eaf393cae0e7725f50b4244cbec3ee4478ef7e0cc8bc1b76fc75fdee3d2f46bdfbe70bf152e6f2e09df84e06d1daa30a36f73b942bdca8d5638856d29833c683758be8a18d1164dd283f9a91d9b93e65ebdb565f0bd57a442beeb455bb7236864b6db37a94e07f16c2c71cc40ed79ff2f7200f15196a2f43a894a783663e9bd6f2393651f15142e2f3cd3b7715a538225b3d88955bc7e8cc3aa890699cb0c3d806a86684c33d4080eab642b61f663df827aa36f3e6277a0b701348c30efa45af9b1c21f98cfc58aafb06a4c4605d5d58f1f1447eac39e843790f88f5454ea1be4798bdb8a22f5a63812477f48b67d9361263c0e03ce5bc7d46c161c0a8fdb7aef775a9089ea3157491fa703cb5e48e31aa8b07aed0e6a111912984b9116e53e911c712c50205c8aaf08832d81aacce82a4b3d933e97bb6d548fca3c889f461cf74849f535ec8fe08115e24a74599dae9d078262dd9a483beebd5d9058d8943ec29ff4a18fd52c04aee3acf2b9e02b539e2c52b534d471c67b50cdee4d829cae4ff5164d54112990bc76385c4636fc0b8377821beabd3c2f9e59a188e5c2c258c5d1304c715bd8ea8381c8bf7281770ca5ed4fa3706377219f95d1b9dda94eae3f6dd635f908258067b510906c585408c126ec5cd0a48d9d0f9392f3692faee020fdc29460d84074ab96ce4eb1c9624e65705210daa31cf8ea42e96a483c293e2638169fad1bd3706c16e433825bf93721f2deeae61db44fb2b04dcb3ac585df8084a02f00ac1b664a8809a2264c83396d94302358a896a6f5a4b455c3d9763afa5b349690a4114238921dd6ae7684a8a53fbba0be8af3797c0f2de2454e411c5dd644306144c03d4730f2298c97ccebcdca70c13d519c8bcbfec290c5ae4bfb020eeb77e394028ba600413b0bf7c3301db3ae68fb2e9e8fd941d361df829f335431f19aecf10b1eb38802bf2479a911067b373109d9001ba96ed7147695e9dbb37124e8f18864d35e0162129747a86e10306f37dc9c0c6009a22d56f45615c33c649bfb71e4c2bcd9e34b044dcca1d49409871840ef65041f24ad5809ce06e2b8ebd8ae44aebb1b944e7e5b60ac0babb8c9a754f214bc8a81a093251326a6f2f8e41277aaaba854001cfc83d110ab14ee94dc9af2af30430733075e07005867b2f96fca465e4edec94d140d1c317cd76136694854ec6bf5be4eae186679f164200fd0459affd23c891302e9309e216bb51e41213edb65e95fdf7c834061c65df84ef6d0f199dc4b945f2c443b929666464f922a0f9f01570b604cc9ca4204ba7857a8d4458b0f2f95bb9c47cb7d213c3ad6a4df35353ce9cc11185b97c8b87bb0fb2cb71625ddaf0f5661810491f97808162659bd635ee0342bffbf9523f5e853368dc358f63cb8d641fe739df051993abe7076b8be1461168b7c30c7101577a5d446087419c9e895d7d41fd970caacdff88f5901bbd04ab176084bf4af5a4b199f0f906d27a5144fa240ff7d772f7829d540e31c3848a7f7931055b37000cc02a1294d733313dbe9c571c927695ecde8150a3a6d63472911a2a75c39357f930f87c60664286cd80c927230746fb113670eeab6534f3f94ecd6ee4daec66da1f0653d41cd5a41a061698192dfc3ab33f238624f798830d1e058b4e01da1dd80c18ad632ce20e139f91946eb404efab9ea3408676f49047b2eb3ade1861c998f028f1716240562741ace4a94e354a4764631cc5a08a2b1a99dc1e7273f509d0b76e38e09fdcffef4e075570ba7686403ac019f88e1f776060aa9b3ddf62d23a5db3c596d77b3ccc7e9194a90aa70311bf2dd154fd1742563576cfc4aa5b35c8e1df4d180d1669f3e5c2398af93ad0d6a8b78c6ec2c7987aec67d093555834a5bdcb5d0c2c7eee5229b32a76e126554a4c599b97a2cd83732f0871d8b872e5c07b9b0b35ee9187eeb778ffe180844e1286cb6ecb82b20b2ee78afb795571b52ba0779769551fba34fa1e96abf6e59db4c46cd002ff10d9d48e378b788a3383b6e2d51f2b89dc8670a1ef455d1219a894eb72ad33b1f3a169f789731bd6531b31ab9ba89a35741858d9e31acee7fb7784e9d43a055e189eec25397418b06b9b2acb53d12bde3e4fe55f8ca1622c9c5c6d34b191d9da8ff16fa653d4f214dbc12ec6b54e5e503e1170", 0x1000, 0x28}, {0x3, 0x10000, &(0x7f0000001700)='^\x00', &(0x7f0000001740)="f942b75af2334c9b8ee00ecaf3b5494344e8ee42046c35a5be33dd3899560a1094c2fd269325df0b4e09735a72c751a5d2c8980ec4ffbae07637e7e37dcfa790b922d83e6b0dd1ad4a6f70c51db2bf04919c51ac96330517fdbf2b752800ab77c5759dfc034f290b9af351c86937c8f585", 0x71, 0x32}, {0x2, 0x2, &(0x7f00000017c0)='#\x00', &(0x7f0000001800)="373379c601be4e178acb6509f06913d98c68d3137637c022331fad7b61d16551a19a460dcf296d672647c7f5ba4ed6968b3ca957da0232a502bd53a214ea1edb4e5277c9c4614b6deaebdaa33c4a746886e214bdbbe8a291013bc188f604865fd2", 0x61, 0x12}]})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0xfffffffffffffffd, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a40)={'erspan0\x00', <r2=>0x0}) (async)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=@gettfilter={0x44, 0x2e, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x9}, {0x4, 0x10}, {0x7, 0xe}}, [{0x8}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c1}, 0x1) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001c40)={<r3=>0x0, 0xfffffff2, 0xfffffff6, 0x1, 0x7, 0x0, 0x8, 0x80, {<r4=>0x0, @in6={{0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x5, 0x5, 0xc8b, 0xfffffffa, 0x8b}}, &(0x7f0000001d00)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001d40)={<r5=>r3, 0x7}, &(0x7f0000001d80)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001dc0)={<r6=>r5, 0xf4de}, &(0x7f0000001e00)=0x8) (async)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000001e40)=',\x00', 0x2) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001e80)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x8, 0xe, 0x9, 0x5, 0x74, 0x0, 0x9}, 0x9c)
openat$nci(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001f80)={<r8=>r4, 0xb18}, &(0x7f0000001fc0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002000)=@assoc_value={r8, 0x3}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002040)={0x3, [<r9=>0x0, 0x0, 0x0]}, &(0x7f0000002080)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000020c0)={r5, 0x4e0, 0x30, 0x8, 0xd}, &(0x7f0000002100)=0x18)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002180), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x60, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x40, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x4) (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000023c0), 0x3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000002400), &(0x7f0000002440)=0x4) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002500)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x34, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48004) (async)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002600)={<r15=>r9, 0x4, 0xb0, 0x3ff, 0x10f, 0x2}, &(0x7f0000002640)=0x14)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000002680)={r15, 0x8}, &(0x7f00000026c0)=0x8) (async)
socket$pppl2tp(0x18, 0x1, 0x1)

240.962188ms ago: executing program 4 (id=5264):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
accept(r0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x80800)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xd, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

227.81037ms ago: executing program 2 (id=5265):
r0 = socket$inet(0x2, 0x800, 0x2)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0xa, 0xffffffff)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x4, @loopback, 0x4e20, 0x0, 'rr\x00', 0x0, 0x1, 0x9}, 0x2c)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0xb28f, 0xffffffffffffffff, 0x9cc9})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x5, 0x4)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x8, 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'erspan0\x00', 0x5})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000180)=0x2, 0x4)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$tcp_congestion(r4, &(0x7f0000000200)='bic\x00', 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={<r5=>r2, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x10400, &(0x7f0000000280)={@align=0x2b65abd5, {0x9da8, 0x8, 0x0, 0xdebb}}, 0x10001, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x7})
accept$phonet_pipe(r5, &(0x7f0000000380), &(0x7f00000003c0)=0x10)
setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000400)=0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'virt_wifi0\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x7, 0x2, [0x5, 0x0]}})
connect$tipc(r5, &(0x7f00000004c0)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10)
r6 = socket(0x2c, 0x800, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x140b, 0x10, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x800)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000600)={<r8=>0x0, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x19f}}, 0x5, 0xd64a, 0xfffffff7, 0x5, 0x5, 0x6, 0x9}, &(0x7f00000006c0)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000700)={0x2, 0x8007, 0x5, 0x6, r8}, &(0x7f0000000740)=0x10)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000780)={0x89, @rand_addr=0x64010102, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0xfd8, 0x4f}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r9 = accept4$netrom(r6, &(0x7f00000007c0)={{0x3, @netrom}, [@remote, @bcast, @rose, @null, @null, @rose, @netrom, @default]}, &(0x7f0000000840)=0x48, 0x80c00)
getpeername(r9, &(0x7f0000000880)=@nfc_llcp, &(0x7f0000000900)=0x80)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r6)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x144, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xd}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd6e}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffff000}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@getroute={0x14, 0x1a, 0x20, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20880}, 0x80)

115.497367ms ago: executing program 4 (id=5266):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
socket$nl_rdma(0x10, 0x3, 0x14)

78.856175ms ago: executing program 3 (id=5267):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0xb)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
pselect6(0x40, &(0x7f0000000080)={0x1, 0x5, 0x100, 0x7, 0x2, 0x1, 0x0, 0xd936}, 0x0, &(0x7f0000000100)={0x6a, 0x2, 0x2, 0x1, 0x81, 0x6, 0x7, 0x7fff}, 0x0, 0x0)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef)

9.573943ms ago: executing program 1 (id=5268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010425bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="d8b9af6b0000000014000300776c616e300000000099ecdaa00000000a0001"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

0s ago: executing program 0 (id=5269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80a, 0x205, 0x1, 0x5}, 0xb, 0xfffffffe, 0x32, 0x5, 0x9, 0x0, 0x9, 0xd, 0x5, 0x1, {0x10000000, 0x23, 0x2, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sendto$packet(r5, &(0x7f0000000440)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x18, r4, 0x1, 0xd8, 0x6, @remote}, 0x14)

kernel console output (not intermixed with test programs):

ered blocking state
[  376.567513][T19021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.575234][T19021] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.582476][T19021] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.602677][T19021] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  376.636342][T19034] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000
[  376.645496][T19031] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000
[  376.823467][T19038] syzkaller0: entered promiscuous mode
[  376.829054][T19038] syzkaller0: entered allmulticast mode
[  376.842762][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'.
[  376.889274][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  376.897415][    C1] lec:lec_tx_timeout: lec0
[  376.897619][T19038] tipc: Started in network mode
[  376.902971][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  376.910335][T19038] tipc: Node identity 9adc11fbce89, cluster identity 4711
[  376.925053][T19038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.951086][T19043] netlink: 'syz.2.3283': attribute type 1 has an invalid length.
[  376.962106][T19043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3283'.
[  377.055002][T19042] syzkaller0: entered promiscuous mode
[  377.061192][T19042] syzkaller0: entered allmulticast mode
[  377.087711][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'.
[  377.107500][T19037] tipc: Resetting bearer <eth:syzkaller0>
[  377.174567][T19037] tipc: Disabling bearer <eth:syzkaller0>
[  377.208740][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'.
[  377.592114][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3288'.
[  377.628459][T19053] block nbd0: Unsupported socket: should be TCP or UNIX.
[  377.724256][T19058] team0: Device ip6gre1 is of different type
[  377.769694][ T5835] Bluetooth: hci4: command tx timeout
[  377.897434][T18877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  377.921368][T18877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  377.954846][T18877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  378.001328][T18877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  378.106306][T19083] netlink: 'syz.0.3291': attribute type 2 has an invalid length.
[  378.136800][T19083] netlink: 'syz.0.3291': attribute type 1 has an invalid length.
[  378.427169][T18877] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.468279][T18877] 8021q: adding VLAN 0 to HW filter on device team0
[  378.515307][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.522553][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.538324][T19096] netlink: 'syz.3.3295': attribute type 64 has an invalid length.
[  378.573345][T19096] sctp: [Deprecated]: syz.3.3295 (pid 19096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.573345][T19096] Use struct sctp_sack_info instead
[  378.606431][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.613739][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.652359][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.662564][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.202928][T19126] netlink: 'syz.2.3297': attribute type 1 has an invalid length.
[  379.214411][T19127] netlink: 'syz.2.3297': attribute type 1 has an invalid length.
[  379.341062][T19134] __nla_validate_parse: 136 callbacks suppressed
[  379.341085][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3303'.
[  379.402950][T19134] netlink: 'syz.2.3303': attribute type 5 has an invalid length.
[  379.434166][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3303'.
[  379.464684][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.504845][T19134] geneve2: entered promiscuous mode
[  379.521004][T19134] geneve2: entered allmulticast mode
[  379.548684][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  379.573070][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  379.594531][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  379.609745][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  379.765156][T18877] veth0_vlan: entered promiscuous mode
[  379.789052][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  379.805111][T19154] netlink: 'syz.2.3308': attribute type 32 has an invalid length.
[  379.814621][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  379.821482][T18877] veth1_vlan: entered promiscuous mode
[  379.846084][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'.
[  379.856127][ T5835] Bluetooth: hci4: command tx timeout
[  379.868559][T19154] bond2: option coupled_control: invalid value (16)
[  379.878168][T19154] bond2 (unregistering): Released all slaves
[  379.907818][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3309'.
[  379.978980][T18877] veth0_macvtap: entered promiscuous mode
[  379.998352][T18877] veth1_macvtap: entered promiscuous mode
[  380.041795][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.091245][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.118917][T17352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.129521][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'.
[  380.135406][T17352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.168919][T19164] bridge_slave_1: left allmulticast mode
[  380.196444][T19164] bridge_slave_1: left promiscuous mode
[  380.206213][T19173] x_tables: unsorted underflow at hook 3
[  380.206215][T19164] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.220154][T19173] x_tables: unsorted underflow at hook 3
[  380.225954][T19173] x_tables: unsorted underflow at hook 3
[  380.232688][T19173] x_tables: unsorted underflow at hook 3
[  380.238526][T19173] x_tables: unsorted underflow at hook 3
[  380.244557][T19173] x_tables: unsorted underflow at hook 3
[  380.245898][T19164] bridge_slave_0: left promiscuous mode
[  380.251088][T19173] x_tables: unsorted underflow at hook 3
[  380.262415][T19164] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.270443][T19169] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3312'.
[  380.271928][T19173] x_tables: unsorted underflow at hook 3
[  380.288000][T19173] x_tables: unsorted underflow at hook 3
[  380.295100][T19173] x_tables: unsorted underflow at hook 3
[  380.362101][T17352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.382219][T17352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.580113][T19179] netlink: 'syz.0.3315': attribute type 10 has an invalid length.
[  380.604767][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.613644][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.722497][T17359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.750189][T17359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.751980][T19185] tc_dump_action: action bad kind
[  380.764847][T19195] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3318'.
[  380.965361][T19202] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3320'.
[  381.011548][T19209] netlink: 'syz.2.3322': attribute type 1 has an invalid length.
[  381.032860][T19211] netlink: 'syz.4.3323': attribute type 21 has an invalid length.
[  381.165499][T19209] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.182965][T19214] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  381.200844][T19218] gretap0: entered promiscuous mode
[  381.207158][T19218] gretap0: left promiscuous mode
[  381.929417][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  381.937953][    C1] lec:lec_tx_timeout: lec0
[  381.943350][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  381.952556][ T5835] Bluetooth: hci4: command tx timeout
[  382.098680][T19262] netlink: 'syz.3.3337': attribute type 21 has an invalid length.
[  382.119020][T19262] IPv6: NLM_F_CREATE should be specified when creating new route
[  382.151175][T19262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.158745][T19262] IPv6: NLM_F_CREATE should be set when creating new route
[  382.166112][T19262] IPv6: NLM_F_CREATE should be set when creating new route
[  382.173413][T19262] IPv6: NLM_F_CREATE should be set when creating new route
[  382.212869][T19270] netlink: 'syz.3.3337': attribute type 21 has an invalid length.
[  382.231691][T19270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  383.077202][   T30] audit: type=1800 audit(1772394857.887:2): pid=19320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3354" name="memory.events" dev="tmpfs" ino=71 res=0 errno=0
[  383.167034][   T30] audit: type=1804 audit(1772394857.977:3): pid=19323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3354" name="/newroot/10/memory.events" dev="tmpfs" ino=71 res=1 errno=0
[  384.610679][T19302] tunl0: entered promiscuous mode
[  384.617544][T19302] validate_nla: 2 callbacks suppressed
[  384.617558][T19302] netlink: 'syz.2.3350': attribute type 3 has an invalid length.
[  384.632046][T19302] __nla_validate_parse: 10 callbacks suppressed
[  384.632061][T19302] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3350'.
[  385.303671][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'.
[  385.336078][T19360] syzkaller0: entered promiscuous mode
[  385.363267][T19360] syzkaller0: entered allmulticast mode
[  385.378333][T19361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3360'.
[  385.636558][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3360'.
[  385.771459][T19330] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  385.796210][T19377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3360'.
[  386.684943][T19423] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  386.847774][T19425] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3379'.
[  386.921367][T19427] syzkaller1: entered promiscuous mode
[  386.926916][T19427] syzkaller1: entered allmulticast mode
[  386.959545][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  386.967752][    C1] lec:lec_tx_timeout: lec0
[  386.974706][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  387.100261][T19434] veth3: entered allmulticast mode
[  387.106367][T19439] veth0: entered promiscuous mode
[  387.139367][T19438] veth0: left promiscuous mode
[  387.153179][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'.
[  387.210737][T19444] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3386'.
[  387.300299][T19451] xt_TCPMSS: Only works on TCP SYN packets
[  387.383276][T19454] xt_ecn: cannot match TCP bits for non-tcp packets
[  387.628710][T19476] netlink: 'syz.1.3395': attribute type 10 has an invalid length.
[  387.681577][T19476] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.714372][T19476] bridge_slave_1: left allmulticast mode
[  387.740218][T19476] bridge_slave_1: left promiscuous mode
[  387.763706][T19476] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.794756][T19476] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  388.109997][T19492] netlink: 'syz.3.3399': attribute type 7 has an invalid length.
[  388.157285][T19492] netlink: 'syz.3.3399': attribute type 7 has an invalid length.
[  388.188618][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3400'.
[  388.220456][T19454] Bluetooth: hci0: Opcode 0x080f failed: -4
[  388.365629][T19505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3404'.
[  388.377784][T19503] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  389.107850][   T30] audit: type=1800 audit(1772394863.927:4): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3417" name="memory.events" dev="tmpfs" ino=430 res=0 errno=0
[  389.160151][   T30] audit: type=1804 audit(1772394863.957:5): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3417" name="/newroot/81/memory.events" dev="tmpfs" ino=430 res=1 errno=0
[  389.450193][ T5835] Bluetooth: hci0: command 0x080f tx timeout
[  389.508064][T19571] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  389.527105][T19571] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  389.596700][T19577] bridge1: the hash_elasticity option has been deprecated and is always 16
[  389.804638][T19591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.934782][T19598] wg1: entered promiscuous mode
[  389.940233][T19598] wg1: entered allmulticast mode
[  390.003632][T19598] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.011061][T19598] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.046184][T19598] wg1: left promiscuous mode
[  390.051540][T19598] wg1: left allmulticast mode
[  390.087289][T19598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.105478][T19598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.177830][T19598] geneve2: left promiscuous mode
[  390.190261][T19598] geneve3: left promiscuous mode
[  390.195369][T19598] geneve3: left allmulticast mode
[  390.210286][ T1104] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 47130 - 0
[  390.219069][ T1104] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  390.228724][ T1104] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 47130 - 0
[  390.239390][ T1104] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  390.262471][ T1104] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 47130 - 0
[  390.279964][ T1104] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  390.315185][ T1104] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 47130 - 0
[  390.324211][ T1104] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  391.013359][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.050721][T19643] netlink: 'syz.1.3447': attribute type 4 has an invalid length.
[  391.069014][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.120767][T19647] netlink: 'syz.1.3447': attribute type 4 has an invalid length.
[  391.164580][T19643] __nla_validate_parse: 3 callbacks suppressed
[  391.164600][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'.
[  391.264143][T19653] sctp: [Deprecated]: syz.3.3448 (pid 19653) Use of int in maxseg socket option.
[  391.264143][T19653] Use struct sctp_assoc_value instead
[  391.286093][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'.
[  391.610916][ T5835] Bluetooth: hci4: command tx timeout
[  391.677797][T19676] openvswitch: netlink: Flow key attribute not present in set flow.
[  391.696817][T19676] openvswitch: netlink: Flow key attribute not present in set flow.
[  391.715026][T19676] openvswitch: netlink: Flow key attribute not present in set flow.
[  391.725115][T19676] openvswitch: netlink: Flow key attribute not present in set flow.
[  391.989321][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  391.997498][    C1] lec:lec_tx_timeout: lec0
[  392.002272][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  392.109466][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3461'.
[  392.247840][T19699] netlink: 'syz.2.3462': attribute type 23 has an invalid length.
[  392.360230][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3464'.
[  392.449473][T19710] bridge2: the hash_elasticity option has been deprecated and is always 16
[  392.538356][T19710] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3465'.
[  392.805306][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'.
[  393.386103][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3475'.
[  393.597482][T19771] xt_limit: Overflow, try lower: 604147548/4200216962
[  393.666728][T19774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3479'.
[  393.894373][T19781] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.3481'.
[  393.920813][T19779] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  393.961137][T19779] bond1: (slave lo): Enslaving as an active interface with an up link
[  394.006128][T19779] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  394.077395][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'.
[  394.109909][T19795] netlink: 'syz.0.3485': attribute type 21 has an invalid length.
[  394.123906][T19795] IPv6: NLM_F_CREATE should be specified when creating new route
[  394.147225][T19795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  394.154550][T19795] IPv6: NLM_F_CREATE should be set when creating new route
[  394.161888][T19795] IPv6: NLM_F_CREATE should be set when creating new route
[  394.169336][T19795] IPv6: NLM_F_CREATE should be set when creating new route
[  394.352208][T19802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.393962][T19807] netlink: 'syz.0.3489': attribute type 5 has an invalid length.
[  394.593848][T19814] netlink: 'syz.2.3490': attribute type 8 has an invalid length.
[  395.605682][T19866] xt_TCPMSS: Only works on TCP SYN packets
[  395.982826][T19888] netlink: 'syz.1.3510': attribute type 4 has an invalid length.
[  396.175723][T19895] __nla_validate_parse: 4 callbacks suppressed
[  396.175745][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'.
[  396.272212][T19901] xt_l2tp: v2 tid > 0xffff: 1114244
[  396.332175][T19905] netlink: 'syz.1.3515': attribute type 18 has an invalid length.
[  396.366599][T19904] geneve2: entered promiscuous mode
[  396.438208][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'.
[  396.524149][ T9332] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  396.547577][ T9332] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  396.587099][ T9332] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  396.607729][ T9332] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.766260][T19929] netlink: 'syz.3.3524': attribute type 1 has an invalid length.
[  396.796793][T19929] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3524'.
[  396.825475][T19929] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3524'.
[  397.007666][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'.
[  397.007902][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'.
[  397.016811][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  397.033863][    C1] lec:lec_tx_timeout: lec0
[  397.034641][T19943] chnl_net:caif_netlink_parms(): no params data found
[  397.038912][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  397.217042][T19956] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3532'.
[  397.334365][T19960] syzkaller0: entered promiscuous mode
[  397.368302][T19960] syzkaller0: entered allmulticast mode
[  397.381971][T19960] TC_ACT_REPEAT abuse ?
[  397.979610][T20012] openvswitch: netlink: IP tunnel dst address not specified
[  398.023656][T20008] netlink: 'syz.2.3548': attribute type 11 has an invalid length.
[  398.184149][T20025] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3554'.
[  398.201786][T20025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3554'.
[  398.248900][T20032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3556'.
[  398.269777][T20032] syzkaller0: entered promiscuous mode
[  398.275415][T20032] syzkaller0: entered allmulticast mode
[  398.566342][T20049] netlink: 'syz.0.3562': attribute type 1 has an invalid length.
[  398.656383][T20057] bridge3: port 1(ip6gretap1) entered blocking state
[  398.663930][T20057] bridge3: port 1(ip6gretap1) entered disabled state
[  398.671756][T20057] ip6gretap1: entered allmulticast mode
[  398.692875][T20057] ip6gretap1: entered promiscuous mode
[  398.853702][T20065] syzkaller0: entered promiscuous mode
[  398.872325][T20065] syzkaller0: entered allmulticast mode
[  399.310973][T20105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  399.482011][T20119] tipc: Started in network mode
[  399.486943][T20119] tipc: Node identity ac14140f, cluster identity 4711
[  399.495386][T20120] openvswitch: netlink: IP tunnel dst address not specified
[  399.505479][T20119] tipc: New replicast peer: 255.255.255.255
[  399.513762][T20119] tipc: Enabled bearer <udp:syz2>, priority 10
[  399.657233][T20128] IPVS: sh: FWM 3 0x00000003 - no destination available
[  399.665811][T20128] IPVS: sh: FWM 3 0x00000003 - no destination available
[  399.674730][ T5939] IPVS: starting estimator thread 0...
[  399.779046][T20130] IPVS: using max 25 ests per chain, 60000 per kthread
[  399.860385][T20144] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  399.874388][  T980] IPVS: starting estimator thread 0...
[  400.002684][T20145] IPVS: using max 24 ests per chain, 57600 per kthread
[  400.044159][T20156] netlink: 'syz.3.3599': attribute type 12 has an invalid length.
[  400.079959][T20156] bond2: option primary_reselect: invalid value (255)
[  400.129405][T20164] netlink: 'syz.4.3600': attribute type 7 has an invalid length.
[  400.366342][T20156] bond2 (unregistering): Released all slaves
[  400.788496][T11919] tipc: Node number set to 2886997007
[  401.115837][T20195] netlink: 'syz.1.3609': attribute type 2 has an invalid length.
[  401.161998][T17356] tipc: Subscription rejected, illegal request
[  401.462968][T20215] __nla_validate_parse: 13 callbacks suppressed
[  401.462990][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'.
[  401.509594][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'.
[  401.513070][T20228] netlink: 'syz.3.3619': attribute type 1 has an invalid length.
[  401.562122][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  401.581137][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3619'.
[  401.597518][T20228] netlink: 'syz.3.3619': attribute type 2 has an invalid length.
[  401.617380][T20228] netlink: 'syz.3.3619': attribute type 2 has an invalid length.
[  401.636897][T20228] netlink: 'syz.3.3619': attribute type 2 has an invalid length.
[  401.651365][T20230] bond3: entered promiscuous mode
[  401.784467][T20230] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  401.926393][T20248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3627'.
[  401.937241][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'.
[  401.999125][T20253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3626'.
[  402.059294][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  402.067472][    C1] lec:lec_tx_timeout: lec0
[  402.072614][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  402.204091][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'.
[  402.213738][T20266] bridge_slave_0: left allmulticast mode
[  402.219657][T20266] bridge_slave_0: left promiscuous mode
[  402.236289][T20266] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.252677][ T5835] Bluetooth: hci0: command 0x080f tx timeout
[  402.662171][T20293] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) !
[  402.706492][T20301] netlink: 'syz.3.3641': attribute type 1 has an invalid length.
[  402.810549][T20299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  402.958853][T20307] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  403.017208][T20307] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  403.058571][T20322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3641'.
[  403.166034][T20309] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  403.192898][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3643'.
[  403.558885][T20353] netlink: 'syz.3.3646': attribute type 4 has an invalid length.
[  403.627202][T20360] netlink: 'syz.3.3646': attribute type 4 has an invalid length.
[  403.678666][T20357] IPVS: set_ctl: invalid protocol: 96 0.0.0.0:20003
[  403.720271][T20343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.738966][T20343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.922804][T20369] netlink: 'syz.3.3646': attribute type 12 has an invalid length.
[  403.949055][T20369] netlink: 'syz.3.3646': attribute type 29 has an invalid length.
[  403.960038][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.986163][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.999663][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.008741][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.083987][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.097962][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.129569][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.162003][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.283465][T20389] netlink: 'syz.3.3659': attribute type 7 has an invalid length.
[  404.386279][T20397] Bluetooth: MGMT ver 1.23
[  404.413733][T20394] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  404.940435][T20431] vlan2: entered promiscuous mode
[  404.945588][T20431] geneve1: entered promiscuous mode
[  404.952173][T20431] vlan2: entered allmulticast mode
[  404.957472][T20431] geneve1: entered allmulticast mode
[  405.002752][T20433] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  405.281300][T20447] xt_check_table_hooks: 23 callbacks suppressed
[  405.281326][T20447] x_tables: duplicate underflow at hook 1
[  405.541616][T20466] syzkaller0: entered promiscuous mode
[  405.553966][T20466] syzkaller0: entered allmulticast mode
[  405.615276][T20471] ipt_REJECT: TCP_RESET invalid for non-tcp
[  406.033995][T20494] netlink: zone id is out of range
[  406.039181][T20494] netlink: zone id is out of range
[  406.056907][T20494] netlink: zone id is out of range
[  406.082594][T20494] netlink: zone id is out of range
[  406.097643][T20494] netlink: zone id is out of range
[  406.111853][T20494] netlink: zone id is out of range
[  406.117035][T20494] netlink: zone id is out of range
[  406.142375][T20494] netlink: zone id is out of range
[  406.154282][T20494] netlink: zone id is out of range
[  406.167482][T20494] netlink: zone id is out of range
[  406.270579][T20506] syzkaller1: entered promiscuous mode
[  406.288710][T20506] syzkaller1: entered allmulticast mode
[  406.517825][T20515] __nla_validate_parse: 14 callbacks suppressed
[  406.517848][T20515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3701'.
[  406.539980][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'.
[  406.663532][T20526] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3704'.
[  406.683555][T20528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'.
[  406.711251][T20534] validate_nla: 4 callbacks suppressed
[  406.711279][T20534] netlink: 'syz.1.3703': attribute type 10 has an invalid length.
[  406.836287][T20537] bridge4: port 1(veth3) entered blocking state
[  406.863961][T20537] bridge4: port 1(veth3) entered disabled state
[  406.884356][T20537] veth3: entered allmulticast mode
[  406.912130][T20537] veth3: entered promiscuous mode
[  406.949283][T20528] bridge4: port 2(veth0_to_bond) entered blocking state
[  406.960338][T20528] bridge4: port 2(veth0_to_bond) entered disabled state
[  406.967561][T20528] veth0_to_bond: entered allmulticast mode
[  406.985561][T20528] veth0_to_bond: entered promiscuous mode
[  407.074550][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'.
[  407.079701][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  407.091570][    C1] lec:lec_tx_timeout: lec0
[  407.096207][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  407.110212][T20548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3711'.
[  407.180804][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'.
[  407.252068][T20563] netlink: 'syz.0.3713': attribute type 1 has an invalid length.
[  407.260648][T20563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3713'.
[  407.381999][T20572] sit0: entered promiscuous mode
[  407.397930][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'.
[  407.424161][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'.
[  407.491094][T20583] x_tables: duplicate underflow at hook 1
[  407.653122][T20592] ieee802154 phy1 wpan1: encryption failed: -22
[  407.686402][T20594] lo speed is unknown, defaulting to 1000
[  407.752552][T20592] syzkaller0: entered promiscuous mode
[  407.765971][T20592] syzkaller0: entered allmulticast mode
[  408.255247][T20623] netlink: 'syz.3.3728': attribute type 58 has an invalid length.
[  408.660336][T20646] netlink: 'syz.0.3733': attribute type 83 has an invalid length.
[  409.149873][T20666] syzkaller0: entered promiscuous mode
[  409.155498][T20666] syzkaller0: entered allmulticast mode
[  409.497355][T20683] wg1: entered promiscuous mode
[  409.510595][T20683] wg1: entered allmulticast mode
[  409.518423][T20679] tipc: Started in network mode
[  409.524035][T20679] tipc: Node identity f675f7b15fc5, cluster identity 4711
[  409.547139][T20679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.583529][T20677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.604782][T20679] syzkaller0: entered promiscuous mode
[  409.624850][T20679] syzkaller0: entered allmulticast mode
[  409.658094][T20680] tipc: Resetting bearer <eth:syzkaller0>
[  409.690320][T20676] tipc: Resetting bearer <eth:syzkaller0>
[  409.729914][T20676] tipc: Disabling bearer <eth:syzkaller0>
[  409.935813][T20707] netlink: 'syz.3.3754': attribute type 1 has an invalid length.
[  410.007200][T20707] 8021q: adding VLAN 0 to HW filter on device bond3
[  410.397041][T20740] netlink: 'syz.2.3764': attribute type 1 has an invalid length.
[  410.425169][T20740] bond4: entered promiscuous mode
[  410.431282][T20740] 8021q: adding VLAN 0 to HW filter on device bond4
[  410.456103][T20740] bond4: (slave bridge0): making interface the new active one
[  410.463980][T20740] bridge0: entered promiscuous mode
[  410.471365][T20740] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  410.503605][T20743] C: renamed from lo
[  410.854949][T20718] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  410.936012][T20761] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  411.155501][T20781] net_ratelimit: 6 callbacks suppressed
[  411.155522][T20781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.164677][T20778] ip6gre1: entered promiscuous mode
[  411.718029][T20818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.088065][T20836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.109340][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  412.117398][    C1] lec:lec_tx_timeout: lec0
[  412.122695][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  412.130828][T20838] __nla_validate_parse: 16 callbacks suppressed
[  412.130845][T20838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3795'.
[  412.147238][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3795'.
[  412.196122][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'.
[  412.217445][T20846] xt_hashlimit: overflow, try lower: 3/0
[  412.377564][T20852] veth0_to_bond: left promiscuous mode
[  412.405803][T20852] veth0_to_bond: left allmulticast mode
[  412.446539][T20852] team0: Port device veth0_to_bond removed
[  412.476422][T20852] bond0: (slave bond_slave_0): Releasing backup interface
[  412.499070][T20857] netlink: 'syz.0.3801': attribute type 13 has an invalid length.
[  412.513631][T20852] bond0: (slave bond_slave_1): Releasing backup interface
[  412.528043][T20852] team_slave_0: left promiscuous mode
[  412.534361][T20852] team_slave_0: left allmulticast mode
[  412.544943][T20852] team0: Port device team_slave_0 removed
[  412.553512][T20852] team_slave_1: left promiscuous mode
[  412.559080][T20852] team_slave_1: left allmulticast mode
[  412.568213][T20852] team0: Port device team_slave_1 removed
[  412.576549][T20852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.584430][T20852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.594295][T20852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.602497][T20852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.611947][T20852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  412.634810][T20857] gretap0: refused to change device tx_queue_len
[  412.643162][T20857] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  412.675235][ T5990] syz1: Port: 1 Link DOWN
[  412.874664][T20864] syzkaller0: entered promiscuous mode
[  412.891524][T20864] syzkaller0: entered allmulticast mode
[  413.259137][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'.
[  413.323406][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'.
[  413.386835][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3814'.
[  413.396995][   T30] audit: type=1800 audit(1772394888.207:6): pid=20899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3814" name="memory.events" dev="tmpfs" ino=794 res=0 errno=0
[  413.440067][   T30] audit: type=1804 audit(1772394888.207:7): pid=20899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3814" name="/newroot/152/memory.events" dev="tmpfs" ino=794 res=1 errno=0
[  413.603256][T20908] 8021q: VLANs not supported on ip_vti0
[  413.622891][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'.
[  413.715595][T20908] netlink: 'syz.3.3817': attribute type 1 has an invalid length.
[  413.758471][T20908] netlink: 'syz.3.3817': attribute type 2 has an invalid length.
[  413.835962][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'.
[  413.916750][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'.
[  413.941710][T20935] 8021q: adding VLAN 0 to HW filter on device team0
[  413.983096][T20935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.108462][T20949] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.118131][T20949] 8021q: adding VLAN 0 to HW filter on device team0
[  414.133703][T20949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.162697][T20956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3827'.
[  414.413004][T20966] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  414.510606][T20970] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  414.667053][T20978] veth9: entered allmulticast mode
[  414.677358][T20988] netlink: 'syz.1.3842': attribute type 1 has an invalid length.
[  414.719097][T20982] tipc: Started in network mode
[  414.729522][T20982] tipc: Node identity bece03114299, cluster identity 4711
[  414.747097][T20982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.787534][T20990] veth0_macvtap: left promiscuous mode
[  414.816328][T20990] macvtap0: entered allmulticast mode
[  414.902769][T20998] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  414.995408][T21005] netlink: 'syz.2.3848': attribute type 21 has an invalid length.
[  414.998070][T21003] geneve4: entered promiscuous mode
[  415.010506][T21003] geneve4: entered allmulticast mode
[  415.017993][T17356] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.026962][T17356] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.058801][T17356] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.077555][T17356] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.356932][T21027] bond0: entered allmulticast mode
[  415.363544][T21027] bond_slave_0: entered allmulticast mode
[  415.370361][T21027] bond_slave_1: entered allmulticast mode
[  415.376869][T21027] bridge_slave_1: entered allmulticast mode
[  415.493137][T20981] tipc: Disabling bearer <eth:syzkaller0>
[  415.608169][T21040] lo speed is unknown, defaulting to 1000
[  415.745397][T21050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.694870][T21099] netlink: 'syz.4.3872': attribute type 16 has an invalid length.
[  416.724731][T21099] netlink: 'syz.4.3872': attribute type 17 has an invalid length.
[  416.875482][T21099] sit0: left promiscuous mode
[  416.900584][T21099] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.914060][T21099] 8021q: adding VLAN 0 to HW filter on device team0
[  416.930320][T21099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.106131][T21111] syzkaller0: entered promiscuous mode
[  417.138618][T21111] syzkaller0: entered allmulticast mode
[  417.266492][T21124] __nla_validate_parse: 18 callbacks suppressed
[  417.266513][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'.
[  417.280446][T21129] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3881'.
[  417.294393][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'.
[  417.310700][T21129] netlink: Unknown conntrack attr (0)
[  417.325250][T21131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3883'.
[  417.336210][ T9330] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.337510][T21129] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3881'.
[  417.345447][ T9330] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.345489][ T9330] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.345525][ T9330] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.386439][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'.
[  417.395153][T21129] netlink: Unknown conntrack attr (0)
[  417.397194][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'.
[  417.412930][T21129] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3881'.
[  417.420951][T21131] IPVS: Error connecting to the multicast addr
[  417.423190][T21129] netlink: Unknown conntrack attr (0)
[  417.435567][T21131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3883'.
[  417.502366][T21129] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3881'.
[  417.550113][T21129] netlink: Unknown conntrack attr (0)
[  417.557589][T21129] netlink: Unknown conntrack attr (0)
[  417.572968][T21129] netlink: Unknown conntrack attr (0)
[  417.592423][T21129] netlink: Unknown conntrack attr (0)
[  417.606307][T21129] netlink: Unknown conntrack attr (0)
[  417.613273][T21129] netlink: Unknown conntrack attr (0)
[  418.329260][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms
[  418.337387][    C1] lec:lec_tx_timeout: lec0
[  418.343047][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  418.563551][T21174] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  418.573573][T21174] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  418.612008][T21175] sctp: [Deprecated]: syz.3.3894 (pid 21175) Use of int in max_burst socket option.
[  418.612008][T21175] Use struct sctp_assoc_value instead
[  420.478783][T21133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  420.510349][T21161] netlink: 'syz.1.3891': attribute type 1 has an invalid length.
[  420.518544][T21161] workqueue: Failed to create a rescuer kthread for wq "phy7": -EINTR
[  420.677747][T21185] netlink: 'syz.4.3899': attribute type 11 has an invalid length.
[  420.715535][T21187] x_tables: unsorted underflow at hook 2
[  420.807455][T21192] 8021q: adding VLAN 0 to HW filter on device bond4
[  420.833340][T21199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  420.897887][T21200] geneve3: entered promiscuous mode
[  420.917524][T21200] geneve3: entered allmulticast mode
[  420.945328][T17359] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[  420.994164][T17359] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  421.010556][T17359] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  421.021188][T21214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.032667][T21214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.075532][T17359] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  421.575631][T21250] xt_l2tp: v2 tid > 0xffff: 1114244
[  422.132411][T21270] udevd[21270]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  422.316761][T21293] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  422.422754][T21293] __nla_validate_parse: 52 callbacks suppressed
[  422.422777][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'.
[  422.793688][T21328] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  423.032502][T21339] syzkaller0: entered promiscuous mode
[  423.038938][T21339] syzkaller0: entered allmulticast mode
[  423.196502][T21349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3951'.
[  423.354242][T21360] netlink: 'syz.2.3955': attribute type 9 has an invalid length.
[  423.505515][T21370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3957'.
[  423.534187][T21379] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  423.797198][T21394] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  423.815463][T21396] net_ratelimit: 25 callbacks suppressed
[  423.815486][T21396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.864790][T21399] netlink: 'syz.4.3966': attribute type 11 has an invalid length.
[  423.883870][T21399] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3966'.
[  424.023692][T21403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3968'.
[  424.089245][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  424.097552][    C1] lec:lec_tx_timeout: lec0
[  424.104320][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  424.280137][T21426] openvswitch: netlink: Message has 8 unknown bytes.
[  424.299388][T21426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.384221][T21429] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3975'.
[  424.415895][T21429] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3975'.
[  424.630200][T21445] netlink: 412 bytes leftover after parsing attributes in process `syz.0.3979'.
[  424.968020][T21459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3985'.
[  425.008351][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3985'.
[  425.010641][T21468] team0: Device gtp1 is up. Set it down before adding it as a team port
[  425.687960][T21510] netlink: 'syz.4.3999': attribute type 22 has an invalid length.
[  426.104690][T21513] netlink: 'syz.0.4000': attribute type 3 has an invalid length.
[  426.104766][T21510] netlink: 'syz.4.3999': attribute type 22 has an invalid length.
[  426.129519][ T9330] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  426.149428][ T9330] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  426.157969][ T9330] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  426.241306][ T9330] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  426.466967][T21531] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  426.782967][T21548] block nbd1: not configured, cannot reconfigure
[  427.105217][T21570] syzkaller0: entered promiscuous mode
[  427.111242][T21570] syzkaller0: entered allmulticast mode
[  427.388840][T21582] syzkaller0: entered promiscuous mode
[  427.409420][T21582] syzkaller0: entered allmulticast mode
[  427.562513][T21595] __nla_validate_parse: 9 callbacks suppressed
[  427.562537][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4029'.
[  427.613706][T21598] netlink: 'syz.2.4031': attribute type 30 has an invalid length.
[  427.729038][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  427.808458][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'.
[  427.817611][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4035'.
[  427.838750][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'.
[  427.847816][ T9332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  427.860051][ T9332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  427.868829][ T9332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  427.878275][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4035'.
[  427.888659][ T9332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  427.907061][T21619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.940308][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4037'.
[  428.153943][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'.
[  428.167647][T21630] syzkaller1: entered promiscuous mode
[  428.182993][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'.
[  428.190490][T21630] syzkaller1: entered allmulticast mode
[  428.524431][T21646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.626389][T21661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4044'.
[  428.668861][T21646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.771907][T21646] bond0 (unregistering): Released all slaves
[  428.905120][T21658] syzkaller1: entered promiscuous mode
[  428.949379][T21658] syzkaller1: entered allmulticast mode
[  429.416585][T21693] netlink: 'syz.0.4055': attribute type 13 has an invalid length.
[  429.425263][T21693] lo: entered promiscuous mode
[  429.430730][T21693] lo: entered allmulticast mode
[  429.437701][T21693] bond0: entered promiscuous mode
[  429.450730][T21693] rose0: entered promiscuous mode
[  429.463495][T21703] netlink: 'syz.3.4058': attribute type 142 has an invalid length.
[  429.480821][T21693] bond0: entered allmulticast mode
[  429.511612][T21693] rose0: entered allmulticast mode
[  429.521735][T21693] dummy0: entered promiscuous mode
[  429.526911][T21693] dummy0: entered allmulticast mode
[  429.566720][T21693] eql: entered promiscuous mode
[  429.573138][T21693] eql: entered allmulticast mode
[  429.591541][T21693] ifb0: entered promiscuous mode
[  429.596561][T21693] ifb0: entered allmulticast mode
[  429.612392][T21693] ifb1: entered promiscuous mode
[  429.635989][T21693] ifb1: entered allmulticast mode
[  429.659703][T21693] virtio_net virtio1 eth0: entered promiscuous mode
[  429.676052][T21693] virtio_net virtio1 eth0: entered allmulticast mode
[  429.704239][T21693] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  429.720264][T21693] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[  429.740381][T21693] hwsim0: entered promiscuous mode
[  429.746656][T21693] hwsim0: entered allmulticast mode
[  429.753673][T21693] ieee802154 phy1 wpan1: entered promiscuous mode
[  429.760354][T21693] ieee802154 phy1 wpan1: entered allmulticast mode
[  429.768596][T21693] teql0: entered promiscuous mode
[  429.774759][T21693] teql0: entered allmulticast mode
[  429.780539][T21693] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  429.797522][T21710] 8021q: VLANs not supported on sit0
[  429.831777][T21722] netlink: 'syz.1.4061': attribute type 1 has an invalid length.
[  429.929321][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  429.937417][    C1] lec:lec_tx_timeout: lec0
[  429.943542][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  429.948195][T21727] netlink: 'syz.0.4062': attribute type 1 has an invalid length.
[  430.027592][T21733] netlink: 'syz.3.4065': attribute type 1 has an invalid length.
[  430.077791][T21734] syzkaller0: entered promiscuous mode
[  430.090893][T21733] netlink: 'syz.3.4065': attribute type 2 has an invalid length.
[  430.109779][T21734] syzkaller0: entered allmulticast mode
[  430.303434][T21755] �
: renamed from veth1_vlan
[  430.816857][T21790] netlink: 'syz.3.4081': attribute type 64 has an invalid length.
[  430.826203][T21792] veth0: mtu less than device minimum
[  430.914851][T21801] netlink: 'syz.4.4079': attribute type 1 has an invalid length.
[  431.085136][T21812] gretap1: entered promiscuous mode
[  431.162688][T21822] vcan2: entered promiscuous mode
[  431.168030][T21822] vcan2: entered allmulticast mode
[  431.212389][T21824] syzkaller0: entered promiscuous mode
[  431.218142][T21824] syzkaller0: entered allmulticast mode
[  431.434013][T21844] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  433.455310][T21764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  433.658639][T21861] __nla_validate_parse: 11 callbacks suppressed
[  433.658658][T21861] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.4095'.
[  433.669838][T21863] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20002
[  433.884205][T21876] syzkaller0: entered promiscuous mode
[  433.890507][T21876] syzkaller0: entered allmulticast mode
[  433.961661][T21881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4104'.
[  434.131591][T21893] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4107'.
[  434.145163][T21888] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.187914][T21888] 8021q: adding VLAN 0 to HW filter on device team0
[  434.233788][T21888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.307106][T21908] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  434.603401][T21934] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  434.617416][T21935] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  434.731471][T21922] veth1_macvtap: renamed from veth0_vlan
[  434.959270][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  434.967368][    C1] lec:lec_tx_timeout: lec0
[  434.973316][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  435.106361][T21967] openvswitch: netlink: Flow key attr not present in new flow.
[  435.133944][T21971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4126'.
[  435.686179][ T5489] veth1_macvtap: left promiscuous mode
[  435.704589][ T5489] veth1_macvtap: entered promiscuous mode
[  439.989319][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  439.997378][    C1] lec:lec_tx_timeout: lec0
[  440.002630][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  440.093529][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.102564][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  442.169387][ T5144] Bluetooth: hci5: command 0x0406 tx timeout
[  445.009656][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  445.017715][    C1] lec:lec_tx_timeout: lec0
[  445.022452][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  450.029305][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  450.037321][    C1] lec:lec_tx_timeout: lec0
[  450.042032][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  455.059470][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  455.067513][    C1] lec:lec_tx_timeout: lec0
[  455.072721][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  460.079334][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  460.087385][    C1] lec:lec_tx_timeout: lec0
[  460.092576][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  465.099750][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  465.107790][    C1] lec:lec_tx_timeout: lec0
[  465.112436][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  467.773529][ T5144] Bluetooth: hci3: command 0x0406 tx timeout
[  470.889277][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  470.897320][    C1] lec:lec_tx_timeout: lec0
[  470.902486][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  475.931279][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  475.939358][    C1] lec:lec_tx_timeout: lec0
[  475.944260][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  480.959615][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  480.967816][    C1] lec:lec_tx_timeout: lec0
[  480.972519][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  483.130614][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  485.979286][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  485.987340][    C1] lec:lec_tx_timeout: lec0
[  485.992242][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  490.999305][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  491.007336][    C1] lec:lec_tx_timeout: lec0
[  491.012064][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  496.019805][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  496.027929][    C1] lec:lec_tx_timeout: lec0
[  496.032587][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  498.347530][T22060] netlink: 'syz.4.4133': attribute type 4 has an invalid length.
[  498.356642][T22059] openvswitch: netlink: IP tunnel TTL not specified.
[  498.561012][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'.
[  498.790377][T22083] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.832900][T22087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4138'.
[  498.928218][T22096] netlink: 'syz.4.4141': attribute type 10 has an invalid length.
[  498.940240][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4138'.
[  498.969884][T22087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4138'.
[  499.052280][T22092] syzkaller1: entered promiscuous mode
[  499.069268][T22092] syzkaller1: entered allmulticast mode
[  499.073574][T22103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'.
[  499.106809][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4145'.
[  499.232353][T22105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  499.315312][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'.
[  499.332983][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'.
[  499.443047][T22127] lo: entered allmulticast mode
[  499.450972][T22127] lo: left allmulticast mode
[  499.594521][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'.
[  499.755033][T22138] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  499.787778][T22154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4158'.
[  499.823393][T22156] Bluetooth: MGMT ver 1.23
[  500.172459][T22174] vlan2: entered allmulticast mode
[  500.177800][T22174] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  500.566129][T22199] netlink: 'syz.1.4175': attribute type 3 has an invalid length.
[  500.617667][T22203] netlink: 'syz.2.4176': attribute type 4 has an invalid length.
[  500.752175][T22212] netlink: 'syz.2.4180': attribute type 1 has an invalid length.
[  500.806117][T22212] 8021q: adding VLAN 0 to HW filter on device bond6
[  500.851874][T22217] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  500.896136][T22217] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  500.936316][T22223] netlink: 'syz.4.4181': attribute type 29 has an invalid length.
[  501.039306][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  501.047392][    C1] lec:lec_tx_timeout: lec0
[  501.448996][T22224] IPv6: NLM_F_CREATE should be specified when creating new route
[  501.534024][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.557757][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.572330][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  501.586386][T22251] netlink: 'syz.0.4192': attribute type 12 has an invalid length.
[  501.601314][T22251] netlink: 'syz.0.4192': attribute type 29 has an invalid length.
[  501.716942][T22255] syzkaller0: entered promiscuous mode
[  501.723570][T22255] syzkaller0: entered allmulticast mode
[  501.732392][T22255] TC_ACT_REPEAT abuse ?
[  501.763010][T22257] ipt_ECN: cannot use operation on non-tcp rule
[  502.771794][T22314] netlink: 'syz.2.4217': attribute type 7 has an invalid length.
[  502.846142][T22318] netlink: 'syz.3.4214': attribute type 7 has an invalid length.
[  502.857567][T22315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.866842][T22315] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.955648][T22315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.956115][T22321] nbd: must specify a device to reconfigure
[  502.964743][T22315] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.038451][T22328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.076231][T22328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.189110][T22332] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  503.602137][T22377] syz.4.4233: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  503.639402][T22377] CPU: 0 UID: 0 PID: 22377 Comm: syz.4.4233 Not tainted syzkaller #0 PREEMPT(full) 
[  503.639433][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  503.639445][T22377] Call Trace:
[  503.639454][T22377]  <TASK>
[  503.639464][T22377]  dump_stack_lvl+0xe8/0x150
[  503.639499][T22377]  warn_alloc+0x249/0x340
[  503.639523][T22377]  ? stack_trace_save+0xa9/0x100
[  503.639547][T22377]  ? __pfx_warn_alloc+0x10/0x10
[  503.639576][T22377]  ? kasan_save_track+0x4f/0x80
[  503.639596][T22377]  ? kasan_save_track+0x3e/0x80
[  503.639613][T22377]  ? __kasan_kmalloc+0x93/0xb0
[  503.639632][T22377]  ? __kmalloc_cache_noprof+0x31c/0x660
[  503.639652][T22377]  ? xskq_create+0x56/0x170
[  503.639680][T22377]  ? xsk_setsockopt+0x54c/0x990
[  503.639703][T22377]  ? do_sock_setsockopt+0x17c/0x1b0
[  503.639729][T22377]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  503.639755][T22377]  ? do_syscall_64+0x14d/0xf80
[  503.639778][T22377]  __vmalloc_node_range_noprof+0x132/0x1730
[  503.639833][T22377]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  503.639865][T22377]  ? __kasan_kmalloc+0x93/0xb0
[  503.639893][T22377]  vmalloc_user_noprof+0xad/0xe0
[  503.639914][T22377]  ? xskq_create+0xbf/0x170
[  503.639953][T22377]  xskq_create+0xbf/0x170
[  503.639984][T22377]  xsk_init_queue+0x8a/0xe0
[  503.640014][T22377]  xsk_setsockopt+0x54c/0x990
[  503.640043][T22377]  ? __pfx_xsk_setsockopt+0x10/0x10
[  503.640070][T22377]  ? __pfx_aa_sk_perm+0x10/0x10
[  503.640098][T22377]  ? aa_sock_opt_perm+0xff/0x1a0
[  503.640127][T22377]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  503.640149][T22377]  ? __pfx_xsk_setsockopt+0x10/0x10
[  503.640177][T22377]  do_sock_setsockopt+0x17c/0x1b0
[  503.640210][T22377]  __x64_sys_setsockopt+0x13d/0x1b0
[  503.640244][T22377]  do_syscall_64+0x14d/0xf80
[  503.640260][T22377]  ? trace_irq_disable+0x3b/0x150
[  503.640287][T22377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.640307][T22377]  ? clear_bhb_loop+0x40/0x90
[  503.640331][T22377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.640351][T22377] RIP: 0033:0x7f75de59c799
[  503.640371][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.640388][T22377] RSP: 002b:00007f75df413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  503.640411][T22377] RAX: ffffffffffffffda RBX: 00007f75de816180 RCX: 00007f75de59c799
[  503.640427][T22377] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  503.640438][T22377] RBP: 00007f75de632bd9 R08: 0000000000000004 R09: 0000000000000000
[  503.640450][T22377] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.640463][T22377] R13: 00007f75de816218 R14: 00007f75de816180 R15: 00007ffca9aed738
[  503.640500][T22377]  </TASK>
[  503.640527][T22377] Mem-Info:
[  503.879151][T22390] macvtap1: entered promiscuous mode
[  503.943116][T22390] macvtap1: entered allmulticast mode
[  503.944185][T22377] active_anon:7075 inactive_anon:0 isolated_anon:0
[  503.944185][T22377]  active_file:2699 inactive_file:40082 isolated_file:0
[  503.944185][T22377]  unevictable:768 dirty:44 writeback:0
[  503.944185][T22377]  slab_reclaimable:12122 slab_unreclaimable:115022
[  503.944185][T22377]  mapped:34110 shmem:2213 pagetables:1418
[  503.944185][T22377]  sec_pagetables:0 bounce:0
[  503.944185][T22377]  kernel_misc_reclaimable:0
[  503.944185][T22377]  free:1308088 free_pcp:11323 free_cma:0
[  503.948552][T22390] veth1_vlan: entered allmulticast mode
[  504.020613][T22377] Node 0 active_anon:31400kB inactive_anon:0kB active_file:10796kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139540kB dirty:176kB writeback:0kB shmem:10316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15548kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  504.054159][T22377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  504.089773][T22377] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.121000][T22377] lowmem_reserve[]: 0 2492 2493 2493 2493
[  504.126908][T22377] Node 0 DMA32 free:1271292kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33400kB inactive_anon:0kB active_file:10796kB inactive_file:160124kB unevictable:1536kB writepending:176kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:41400kB local_pcp:21064kB free_cma:0kB
[  504.169158][T22377] lowmem_reserve[]: 0 0 0 0 0
[  504.178240][T22377] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  504.211910][T22377] lowmem_reserve[]: 0 0 0 0 0
[  504.216777][T22377] Node 1 Normal free:3944000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.250354][T22377] lowmem_reserve[]: 0 0 0 0 0
[  504.255208][T22377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  504.275676][T22377] Node 0 DMA32: 9498*4kB (UME) 5899*8kB (UME) 2318*16kB (UME) 335*32kB (UME) 112*64kB (UME) 345*128kB (UME) 487*256kB (UM) 413*512kB (U) 292*1024kB (UM) 129*2048kB (UM) 46*4096kB (M) = 1272064kB
[  504.298304][T22377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  504.311931][T22377] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 10*16kB (UME) 6*32kB (UM) 9*64kB (UME) 5*128kB (UM) 6*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 960*4096kB (UM) = 3944000kB
[  504.342964][T22377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.353157][T22377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  504.362897][T22377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.373677][T22377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  504.392427][T22377] 44140 total pagecache pages
[  504.403634][T22377] 0 pages in swap cache
[  504.407853][T22377] Free swap  = 124996kB
[  504.413512][T22377] Total swap = 124996kB
[  504.417716][T22377] 2097051 pages RAM
[  504.421680][T22377] 0 pages HighMem/MovableOnly
[  504.426572][T22377] 427010 pages reserved
[  504.431231][T22377] 0 pages cma reserved
[  506.469823][T22362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  506.801253][T22436] __nla_validate_parse: 53 callbacks suppressed
[  506.801274][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'.
[  506.833973][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'.
[  506.867377][T22443] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[  506.889213][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms
[  506.897310][    C1] lec:lec_tx_timeout: lec0
[  507.033731][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'.
[  507.121828][T22452] team1: entered promiscuous mode
[  507.127194][T22452] team1: entered allmulticast mode
[  507.500618][T22467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.508994][T22467] +
: renamed from syzkaller0
[  507.521378][T22467] tipc: Disabling bearer <eth:syzkaller0>
[  508.004464][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4260'.
[  508.031706][T22497] validate_nla: 1 callbacks suppressed
[  508.031724][T22497] netlink: 'syz.4.4261': attribute type 1 has an invalid length.
[  508.066914][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'.
[  508.078339][T22497] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4261'.
[  508.173494][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4263'.
[  508.193660][T22505] netlink: 'syz.3.4264': attribute type 1 has an invalid length.
[  508.213756][T22505] netlink: 'syz.3.4264': attribute type 2 has an invalid length.
[  508.228348][T22505] netlink: 'syz.3.4264': attribute type 1 has an invalid length.
[  508.248182][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'.
[  508.280682][T22505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4264'.
[  508.345981][T22512] netlink: 'syz.4.4266': attribute type 29 has an invalid length.
[  508.354469][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'.
[  508.452896][T22510] IPVS: fo: FWM 3 0x00000003 - no destination available
[  508.471250][    C1] IPVS: fo: FWM 3 0x00000003 - no destination available
[  508.599856][T22531] netlink: 'syz.0.4269': attribute type 4 has an invalid length.
[  508.611889][T22532] netlink: 'syz.0.4269': attribute type 4 has an invalid length.
[  508.700925][T22531] netlink: 'syz.0.4269': attribute type 4 has an invalid length.
[  508.722186][T22532] netlink: 'syz.0.4269': attribute type 4 has an invalid length.
[  508.774187][T22531] netlink: 'syz.0.4269': attribute type 4 has an invalid length.
[  508.793533][T22535] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003
[  509.006569][T22545] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  509.128815][T22552] mac80211_hwsim hwsim35 �
: renamed from wlan1 (while UP)
[  509.216143][ T5939] IPVS: starting estimator thread 0...
[  509.312671][T22561] IPVS: using max 26 ests per chain, 62400 per kthread
[  509.352774][T22567] sctp: [Deprecated]: syz.1.4282 (pid 22567) Use of int in max_burst socket option deprecated.
[  509.352774][T22567] Use struct sctp_assoc_value instead
[  509.427148][T22569] x_tables: duplicate entry at hook 1
[  512.111506][T22552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  512.284877][T22582] __nla_validate_parse: 4 callbacks suppressed
[  512.284902][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4286'.
[  512.353910][T22584] syzkaller0: entered promiscuous mode
[  512.363486][T22584] syzkaller0: entered allmulticast mode
[  512.366848][T22589] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4288'.
[  512.389833][T22589] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4288'.
[  512.588032][T22608] IPv6: sit1: Disabled Multicast RS
[  512.613298][T22608] sit1: entered allmulticast mode
[  512.976595][T22626] bond6: (slave ip6gretap1): making interface the new active one
[  513.014401][T22626] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  513.033853][T22630] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.4304'.
[  513.065391][T22628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.181668][T22628] syzkaller0: entered promiscuous mode
[  513.187204][T22628] syzkaller0: entered allmulticast mode
[  513.206056][T22628] tipc: Resetting bearer <eth:syzkaller0>
[  513.220993][T22633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4303'.
[  513.275546][T22627] tipc: Resetting bearer <eth:syzkaller0>
[  513.331318][T22645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'.
[  513.348866][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'.
[  513.384836][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4306'.
[  513.404265][T22642] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4306'.
[  513.805402][T22663] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4310'.
[  515.153457][T22627] tipc: Disabling bearer <eth:syzkaller0>
[  515.162360][T22641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  515.192328][   T29] tipc: Node number set to 1414861307
[  515.549973][T22685] ipt_REJECT: TCP_RESET invalid for non-tcp
[  515.874269][T22708] bond1: option min_links: invalid value (18446744073709551614)
[  515.882439][T22708] bond1: option min_links: allowed values 0 - 2147483647
[  515.900121][T22708] bond1 (unregistering): Released all slaves
[  516.081776][T22715] syzkaller1: entered promiscuous mode
[  516.087349][T22715] syzkaller1: entered allmulticast mode
[  516.134706][T22711] syzkaller1: entered promiscuous mode
[  516.154785][T22711] syzkaller1: entered allmulticast mode
[  516.450483][T22747] block nbd0: not configured, cannot reconfigure
[  516.467347][T22746] block nbd0: not configured, cannot reconfigure
[  516.510003][T22750] validate_nla: 72 callbacks suppressed
[  516.510024][T22750] netlink: 'syz.3.4336': attribute type 1 has an invalid length.
[  516.629550][T22758] netlink: 'syz.1.4337': attribute type 1 has an invalid length.
[  516.890020][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  517.184505][T22785] lo speed is unknown, defaulting to 1000
[  517.762426][T22805] __nla_validate_parse: 8 callbacks suppressed
[  517.762448][T22805] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4349'.
[  517.869838][T22808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4350'.
[  517.946360][T22808] 8021q: VLANs not supported on gre0
[  518.178749][T22819] xfrm1: entered allmulticast mode
[  518.394289][T22827] netlink: 'syz.0.4358': attribute type 21 has an invalid length.
[  518.419346][T22827] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4358'.
[  518.478903][T22836] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  518.519317][T22836] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  518.703190][T22856] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4367'.
[  518.752771][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4368'.
[  518.776631][T22856] lo speed is unknown, defaulting to 1000
[  518.783054][T22860] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4368'.
[  518.796920][T22861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4368'.
[  518.831595][T22861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4368'.
[  519.371317][T22892] netlink: 'syz.1.4375': attribute type 21 has an invalid length.
[  519.404526][T22892] netlink: 'syz.1.4375': attribute type 6 has an invalid length.
[  519.435793][T22892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4375'.
[  519.625114][T22897] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  519.681245][T22916] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.4382'.
[  519.693846][T22916] netlink: Unknown conntrack attr (type=2304, max=9)
[  519.858912][T22926] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  519.906743][T22932] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  520.383391][T22954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  520.892489][T22992] netlink: 'syz.1.4404': attribute type 21 has an invalid length.
[  520.916297][T22993] netlink: 'syz.4.4403': attribute type 30 has an invalid length.
[  520.925474][T22992] IPv6: NLM_F_CREATE should be specified when creating new route
[  520.940688][T22992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  520.947983][T22992] IPv6: NLM_F_CREATE should be set when creating new route
[  520.955327][T22992] IPv6: NLM_F_CREATE should be set when creating new route
[  520.962737][T22992] IPv6: NLM_F_CREATE should be set when creating new route
[  521.123060][T23002] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  521.736239][T23042] netlink: 'syz.2.4417': attribute type 1 has an invalid length.
[  521.780850][T23042] 8021q: adding VLAN 0 to HW filter on device bond7
[  521.934050][T23052] gretap0: entered promiscuous mode
[  521.961229][T23052] vlan2: entered promiscuous mode
[  522.027362][T23059] vlan2: entered promiscuous mode
[  522.186920][T23079] netlink: 'syz.4.4426': attribute type 7 has an invalid length.
[  522.199753][T23079] netlink: 'syz.4.4426': attribute type 8 has an invalid length.
[  522.347964][T23088] netem: unknown loss type 0
[  522.355489][T23088] netem: change failed
[  522.401605][ T1168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  522.421631][ T1168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  522.452194][ T1168] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  522.469677][ T1168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  522.723897][T23109] sctp: [Deprecated]: syz.2.4438 (pid 23109) Use of int in max_burst socket option deprecated.
[  522.723897][T23109] Use struct sctp_assoc_value instead
[  523.253094][T23147] __nla_validate_parse: 83 callbacks suppressed
[  523.253117][T23147] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4448'.
[  523.353856][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4450'.
[  523.392134][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4450'.
[  523.483497][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'.
[  523.585143][T23167] netlink: 'syz.0.4454': attribute type 25 has an invalid length.
[  523.759897][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'.
[  523.792744][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4458'.
[  523.868091][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'.
[  523.879363][T23175] veth0_macvtap: left promiscuous mode
[  523.971781][  T980] IPVS: starting estimator thread 0...
[  524.069701][T23182] IPVS: using max 27 ests per chain, 64800 per kthread
[  524.091788][T23069] Bluetooth: hci4: command 0x0406 tx timeout
[  524.150318][T23184] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  524.470312][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'.
[  524.665736][T23210] lo speed is unknown, defaulting to 1000
[  524.690541][T23212] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.4468'.
[  525.253733][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4476'.
[  525.264021][T23238] veth0: entered promiscuous mode
[  525.281498][T23240] veth0 (unregistering): left promiscuous mode
[  526.024521][T23235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  526.107151][T23268] netlink: 'syz.3.4485': attribute type 7 has an invalid length.
[  526.125664][T23268] netlink: 'syz.3.4485': attribute type 8 has an invalid length.
[  526.243459][T23277] openvswitch: netlink: Flow actions attr not present in new flow.
[  526.269089][T23281] netlink: 'syz.3.4491': attribute type 4 has an invalid length.
[  526.575222][T14470] lec:lec_start_xmit: lec0:No lecd attached
[  526.593261][T23303] netlink: 'syz.1.4498': attribute type 10 has an invalid length.
[  526.710521][T23315] openvswitch: netlink: Flow key attr not present in new flow.
[  526.799514][T23316] netlink: 'syz.0.4502': attribute type 16 has an invalid length.
[  527.182133][T23335] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  527.198227][T23335] bond8 (unregistering): Released all slaves
[  527.489532][T23379] netlink: 'syz.1.4519': attribute type 9 has an invalid length.
[  527.497501][T23379] netlink: 'syz.1.4519': attribute type 11 has an invalid length.
[  527.505479][T23379] netlink: 'syz.1.4519': attribute type 12 has an invalid length.
[  527.534911][T23372] syzkaller0: entered promiscuous mode
[  527.544579][T23372] syzkaller0: entered allmulticast mode
[  527.644630][T23383] netlink: 'syz.0.4520': attribute type 4 has an invalid length.
[  527.653767][T23384] netlink: 'syz.2.4521': attribute type 16 has an invalid length.
[  527.665811][T23386] tc_dump_action: action bad kind
[  527.685471][T23384] netlink: 'syz.2.4521': attribute type 17 has an invalid length.
[  527.749368][T23390] xt_TCPMSS: Only works on TCP SYN packets
[  527.774264][T23384] tunl0: left promiscuous mode
[  527.809593][T23384] team0: left promiscuous mode
[  527.821648][T23384] team0: left allmulticast mode
[  527.853982][T23384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.133791][T23414] openvswitch: netlink: Multiple metadata blocks provided
[  528.314499][T23423] xt_bpf: check failed: parse error
[  528.553833][T23440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.572699][T23443] netlink: 'syz.0.4543': attribute type 32 has an invalid length.
[  528.582733][T23443] __nla_validate_parse: 15 callbacks suppressed
[  528.582752][T23443] netlink: 776 bytes leftover after parsing attributes in process `syz.0.4543'.
[  528.823212][T23460] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4549'.
[  529.109309][T23475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4551'.
[  529.494231][T23491] gretap0: entered promiscuous mode
[  529.510625][T23491] vlan3: entered promiscuous mode
[  529.678402][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'.
[  529.684984][T23502] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  529.956141][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4561'.
[  529.994054][T23517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'.
[  530.014205][T23519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'.
[  530.025452][T23519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'.
[  530.034615][T23517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'.
[  530.157225][T23528] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.4564'.
[  530.361381][T23538] netlink: 'syz.1.4567': attribute type 3 has an invalid length.
[  530.391874][T23540] netlink: 'syz.4.4569': attribute type 4 has an invalid length.
[  530.427406][T23541] ������: renamed from vlan1 (while UP)
[  530.457395][T23538] syzkaller0: entered promiscuous mode
[  530.463237][T23538] syzkaller0: entered allmulticast mode
[  530.536953][T23543] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  530.572764][T23543] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  530.607614][T23543] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  530.621244][T23545] 8021q: adding VLAN 0 to HW filter on device bond4
[  530.750577][T23551] bond4: (slave batadv0): Opening slave failed
[  530.828475][T23566] 8021q: adding VLAN 0 to HW filter on device bond2
[  531.562264][T23604] bond5: (slave erspan0): Device is not bonding slave
[  531.569100][T23604] bond5: option active_slave: invalid value (erspan0)
[  531.636036][T23604] bond5 (unregistering): Released all slaves
[  531.683479][T23624] tipc: Started in network mode
[  531.688478][T23624] tipc: Node identity 3, cluster identity 4711
[  531.698098][T23624] tipc: Node number set to 3
[  531.728690][T23615] : entered promiscuous mode
[  531.935752][T23635] IPv6: sit1: Disabled Multicast RS
[  531.939965][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms
[  531.944724][T23635] sit1: entered allmulticast mode
[  531.949058][    C1] lec:lec_tx_timeout: lec0
[  531.971734][ T9330] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  531.981916][ T9330] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  531.992706][ T9330] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  532.001783][ T9330] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  532.127295][T23644] vlan2: entered allmulticast mode
[  532.190038][T23644] gretap0: entered allmulticast mode
[  532.239875][T23659] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  532.488453][T23676] validate_nla: 2 callbacks suppressed
[  532.488476][T23676] netlink: 'syz.2.4607': attribute type 3 has an invalid length.
[  532.538357][T23676] netlink: 'syz.2.4607': attribute type 3 has an invalid length.
[  532.582805][T23681] set match dimension is over the limit!
[  532.635925][T23685] 8021q: VLANs not supported on ip_vti0
[  532.752328][T23694] netlink: 'syz.2.4615': attribute type 13 has an invalid length.
[  533.332017][T23727] bridge0: port 3(ipvlan2) entered blocking state
[  533.348169][T23727] bridge0: port 3(ipvlan2) entered disabled state
[  533.356311][T23727] ipvlan2: entered allmulticast mode
[  533.361943][T23727] bridge0: entered allmulticast mode
[  533.374144][T23727] ipvlan2: left allmulticast mode
[  533.382706][T23727] bridge0: left allmulticast mode
[  533.685738][T23747] lo speed is unknown, defaulting to 1000
[  534.279873][T23758] netlink: 'syz.1.4631': attribute type 1 has an invalid length.
[  534.310183][T23758] __nla_validate_parse: 11 callbacks suppressed
[  534.310207][T23758] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4631'.
[  534.327843][T23758] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4631'.
[  534.331595][T23761] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  534.337212][T23758] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4631'.
[  534.416555][T23762] netlink: 'syz.4.4634': attribute type 4 has an invalid length.
[  534.458801][T23762] netlink: 'syz.4.4634': attribute type 4 has an invalid length.
[  534.803910][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4640'.
[  534.931456][T23811] syzkaller0: entered promiscuous mode
[  534.941210][T23811] syzkaller0: entered allmulticast mode
[  534.972382][T23815] vlan3: entered promiscuous mode
[  534.981354][T23815] vlan3: entered allmulticast mode
[  534.986535][T23815] hsr_slave_1: entered allmulticast mode
[  535.122891][T23824] netlink: 'syz.1.4647': attribute type 4 has an invalid length.
[  535.156189][T23824] netlink: 'syz.1.4647': attribute type 4 has an invalid length.
[  535.296339][T23828] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4650'.
[  535.308778][T23828] netlink: 'syz.3.4650': attribute type 10 has an invalid length.
[  535.319683][T23828] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4650'.
[  535.375479][T23831] IPv6: NLM_F_CREATE should be specified when creating new route
[  535.552031][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'.
[  535.567295][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'.
[  535.618077][T23849] netlink: 'syz.3.4657': attribute type 19 has an invalid length.
[  535.628926][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4657'.
[  535.648459][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4657'.
[  535.947234][T23871] syzkaller0: entered promiscuous mode
[  535.953330][T23871] syzkaller0: entered allmulticast mode
[  536.208164][T23876] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  536.260203][T23878] IPv6: NLM_F_CREATE should be specified when creating new route
[  536.291558][T23878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  536.298816][T23878] IPv6: NLM_F_CREATE should be set when creating new route
[  536.693838][T23912] veth1_macvtap: left promiscuous mode
[  536.713684][T23912] macsec0: entered promiscuous mode
[  536.718967][T23912] macsec0: entered allmulticast mode
[  536.760678][T23914] sctp: [Deprecated]: syz.2.4675 (pid 23914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.760678][T23914] Use struct sctp_sack_info instead
[  536.801838][T23907] veth1_macvtap: entered promiscuous mode
[  536.807630][T23907] veth1_macvtap: entered allmulticast mode
[  536.842193][T23907] macsec0: left promiscuous mode
[  536.847389][T23907] macsec0: left allmulticast mode
[  536.898711][T23907] veth1_macvtap: left allmulticast mode
[  537.652803][T23957] syzkaller0: entered promiscuous mode
[  537.658435][T23957] syzkaller0: entered allmulticast mode
[  539.961747][T24021] __nla_validate_parse: 31 callbacks suppressed
[  539.961765][T24021] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4702'.
[  540.442986][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4711'.
[  540.544331][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4712'.
[  540.601664][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4712'.
[  540.639348][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4712'.
[  540.663889][T24072] bond9: entered promiscuous mode
[  540.676997][T24072] 8021q: adding VLAN 0 to HW filter on device bond9
[  540.687994][T24081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4715'.
[  540.719027][T24076] bridge0: Device is already in use.
[  540.794328][T24078] bond9: (slave ip6tnl2): refused to change device type
[  540.871890][T24092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4720'.
[  541.567975][T24131] syzkaller0: entered promiscuous mode
[  541.594173][T24131] syzkaller0: entered allmulticast mode
[  541.848035][T24148] validate_nla: 27 callbacks suppressed
[  541.848058][T24148] netlink: 'syz.3.4736': attribute type 2 has an invalid length.
[  541.887892][T24148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4736'.
[  541.887926][T24146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4735'.
[  541.956483][T24154] IPVS: Unknown mcast interface: dvmrp0
[  542.047927][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4739'.
[  542.151570][T24171] netlink: 'syz.3.4740': attribute type 1 has an invalid length.
[  542.259493][T24171] 8021q: adding VLAN 0 to HW filter on device bond8
[  542.408849][T24163] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  542.465994][T24192] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  542.508594][T24163] syzkaller0: entered promiscuous mode
[  542.514586][T24163] syzkaller0: entered allmulticast mode
[  542.628537][T24201] netlink: 'syz.2.4749': attribute type 10 has an invalid length.
[  542.774751][T24199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  542.785482][T24199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  542.801187][T24199] �
: left promiscuous mode
[  542.806827][T24199] veth0_vlan: left promiscuous mode
[  542.813316][T24199] veth0_vlan: entered promiscuous mode
[  542.824179][T24199] �
: entered promiscuous mode
[  542.844727][T24199] veth1_macvtap: left promiscuous mode
[  542.853654][T24199] veth0_macvtap: left promiscuous mode
[  542.861478][T24199] veth0_macvtap: entered promiscuous mode
[  542.869900][T24199] veth1_macvtap: entered promiscuous mode
[  542.891080][T24199] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.927080][T24199] 8021q: adding VLAN 0 to HW filter on device bond2
[  542.940469][T24199] vlan2: left promiscuous mode
[  542.945504][T24199] geneve1: left promiscuous mode
[  542.952680][T24199] geneve4: left promiscuous mode
[  542.976735][T24199] 8021q: adding VLAN 0 to HW filter on device bond3
[  543.043125][T17357] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.050382][T17357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.063372][T17357] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.070598][T17357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.183834][T17352] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 36485 - 0
[  543.202753][ T1104] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 36485 - 0
[  543.248267][ T1104] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 36485 - 0
[  543.257673][ T1104] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 36485 - 0
[  543.588636][T24257] netlink: 'syz.3.4760': attribute type 21 has an invalid length.
[  543.603284][T24257] netlink: 'syz.3.4760': attribute type 22 has an invalid length.
[  543.641630][T24257] netlink: 'syz.3.4760': attribute type 23 has an invalid length.
[  543.655229][T24258] syzkaller0: entered promiscuous mode
[  543.661857][T24258] syzkaller0: entered allmulticast mode
[  543.672696][T24257] netlink: 'syz.3.4760': attribute type 25 has an invalid length.
[  543.682961][T24263] erspan0: entered promiscuous mode
[  543.689040][T24263] erspan0: entered allmulticast mode
[  545.796020][T24293] netlink: 'syz.0.4767': attribute type 1 has an invalid length.
[  545.862543][T24297] __nla_validate_parse: 9 callbacks suppressed
[  545.862566][T24297] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4769'.
[  545.901938][T24297] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  545.917375][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'.
[  545.984509][T24309] erspan0: entered promiscuous mode
[  546.550350][T24331] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  546.677982][T24335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4780'.
[  546.763567][T24337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4781'.
[  546.810351][T24337] 8021q: adding VLAN 0 to HW filter on device bond9
[  546.835550][T24340] bond10: Removing last ns target with arp_interval on
[  546.905598][T24348] 8021q: adding VLAN 0 to HW filter on device bond9
[  546.917273][T24348] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address
[  546.931169][T24348] bond9: (slave vxcan7): Error -95 calling set_mac_address
[  546.964225][T24350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  546.977145][T24353] syzkaller0: entered promiscuous mode
[  546.982949][T24353] syzkaller0: entered allmulticast mode
[  547.103081][T24343] tipc: Resetting bearer <eth:syzkaller0>
[  547.142298][T24359] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  547.185991][T24341] tipc: Resetting bearer <eth:syzkaller0>
[  547.225767][T24341] tipc: Disabling bearer <eth:syzkaller0>
[  547.355975][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4791'.
[  547.371277][T24375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'.
[  547.422309][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'.
[  547.429112][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4791'.
[  547.477663][T24384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4795'.
[  547.635212][T24393] netlink: 294 bytes leftover after parsing attributes in process `syz.3.4797'.
[  547.644643][T24393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.018983][T24413] xt_CT: You must specify a L4 protocol and not use inversions on it
[  548.356546][T24429] lo speed is unknown, defaulting to 1000
[  548.371283][T24435] netlink: 'syz.2.4812': attribute type 1 has an invalid length.
[  548.385440][T24437] IPVS: Error connecting to the multicast addr
[  548.400716][T24435] netlink: 'syz.2.4812': attribute type 1 has an invalid length.
[  548.458442][T24431] syzkaller1: entered promiscuous mode
[  548.467530][T24431] syzkaller1: entered allmulticast mode
[  549.782034][T24486] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.789768][T24486] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.032519][T24526] netlink: 'syz.0.4833': attribute type 8 has an invalid length.
[  550.196764][ T1168] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.207864][ T1168] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.229511][ T1168] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  550.243773][ T1168] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 36485 - 0
[  550.263054][ T1168] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.294728][ T1168] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.319035][ T1168] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  550.335669][ T1168] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 36485 - 0
[  550.347240][ T1168] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.369551][ T1168] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.409426][ T1168] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  550.418021][ T1168] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 36485 - 0
[  550.450258][ T1168] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.464419][ T1168] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.489290][ T1168] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  550.519206][ T1168] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 36485 - 0
[  550.913691][T24557] __nla_validate_parse: 8 callbacks suppressed
[  550.913706][T24557] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4840'.
[  550.930215][T24557] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4840'.
[  550.939997][T24557] netlink: 'syz.4.4840': attribute type 6 has an invalid length.
[  550.947786][T24557] netlink: 'syz.4.4840': attribute type 5 has an invalid length.
[  550.958919][T24557] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4840'.
[  551.056264][T24560] netlink: 'syz.4.4841': attribute type 2 has an invalid length.
[  551.065252][T24560] netlink: 'syz.4.4841': attribute type 5 has an invalid length.
[  551.209044][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'.
[  551.218213][T24570] netlink: 'syz.4.4844': attribute type 5 has an invalid length.
[  551.226647][T24570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4844'.
[  551.316789][T24572] lo speed is unknown, defaulting to 1000
[  552.705168][T24503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  552.911256][T24590] tipc: New replicast peer: 255.255.255.255
[  552.931649][T24590] tipc: Enabled bearer <udp:syz2>, priority 10
[  552.953265][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4853'.
[  552.954771][T24597] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4851'.
[  552.979504][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'.
[  552.988743][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4853'.
[  553.022387][T24598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4853'.
[  553.833862][T24657] bond10: entered promiscuous mode
[  553.839588][T24657] 8021q: adding VLAN 0 to HW filter on device bond10
[  553.882360][T24667] bond1: option mode: unable to set because the bond device has slaves
[  553.891147][T24667] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  553.920692][T24660] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[  553.952179][T24664] syzkaller1: entered promiscuous mode
[  553.967210][T24664] syzkaller1: entered allmulticast mode
[  553.999633][T24671] netlink: 'syz.3.4873': attribute type 1 has an invalid length.
[  554.159910][T24677] bridge_slave_1: default FDB implementation only supports local addresses
[  554.211866][T24684] netlink: 'syz.2.4878': attribute type 1 has an invalid length.
[  554.231176][T24684] sctp: [Deprecated]: syz.2.4878 (pid 24684) Use of int in max_burst socket option.
[  554.231176][T24684] Use struct sctp_assoc_value instead
[  554.346991][T24690] ip6t_srh: unknown srh match flags  4000
[  554.418193][T24694] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.425893][T24694] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.449034][T24692] netlink: 'syz.1.4882': attribute type 4 has an invalid length.
[  554.477285][T24696] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  554.509996][T24692] netlink: 'syz.1.4882': attribute type 4 has an invalid length.
[  554.622038][T24702] syzkaller0: entered promiscuous mode
[  554.640801][T24702] syzkaller0: entered allmulticast mode
[  554.884962][T24725] veth1_macvtap: left promiscuous mode
[  554.900633][T24725] macsec0: entered promiscuous mode
[  554.906030][T24725] macsec0: entered allmulticast mode
[  554.976752][T24728] veth1_macvtap: entered promiscuous mode
[  554.987201][T24728] veth1_macvtap: entered allmulticast mode
[  554.995433][T24728] macsec0: left promiscuous mode
[  555.001077][T24728] macsec0: left allmulticast mode
[  555.006264][T24728] veth1_macvtap: left allmulticast mode
[  555.059647][T24726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  555.157632][T24726] syzkaller0: entered promiscuous mode
[  555.164018][T24726] syzkaller0: entered allmulticast mode
[  555.172968][T24726] tipc: Resetting bearer <eth:syzkaller0>
[  555.238913][ T1104] tipc: Resetting bearer <eth:syzkaller0>
[  555.253990][T24724] tipc: Resetting bearer <eth:syzkaller0>
[  555.273521][T24748] netlink: 'syz.4.4899': attribute type 1 has an invalid length.
[  556.286852][T24763] __nla_validate_parse: 15 callbacks suppressed
[  556.286872][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4904'.
[  557.052371][T24724] tipc: Disabling bearer <eth:syzkaller0>
[  557.218424][T24770] policy can only be matched on NF_INET_PRE_ROUTING
[  557.218449][T24770] unable to load match
[  557.264499][T24770] tipc: Enabled bearer <ib:gretap0>, priority 10
[  557.384979][T24779] ip6gre1: entered allmulticast mode
[  557.412644][T24783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'.
[  557.429535][T24783] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4911'.
[  557.471814][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4911'.
[  557.547877][T24791] openvswitch: netlink: Duplicate or invalid key (type 0).
[  557.568013][T24791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.606796][T24791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4914'.
[  557.620922][T24790] netlink: 'syz.2.4912': attribute type 10 has an invalid length.
[  557.663860][T24790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  557.706982][T24797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4916'.
[  557.801114][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4916'.
[  557.819415][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4916'.
[  557.843831][T24797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4916'.
[  558.251676][T24840] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4929'.
[  558.435703][T24854] ifb1: left promiscuous mode
[  558.440792][T24854] ifb1: left allmulticast mode
[  558.852479][T24873] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  558.873745][T24869] 8021q: adding VLAN 0 to HW filter on device bond1
[  558.983083][T24869] bridge_slave_0: left allmulticast mode
[  558.988794][T24869] bridge_slave_0: left promiscuous mode
[  559.030480][T24869] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.078027][T24869] bridge_slave_1: left allmulticast mode
[  559.089895][T24869] bridge_slave_1: left promiscuous mode
[  559.100841][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  559.135439][T24869] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.172830][T24869] veth0_to_bond: left allmulticast mode
[  559.214155][T24869] veth0_to_bond: left promiscuous mode
[  559.229703][T24869] bridge4: port 2(veth0_to_bond) entered disabled state
[  559.283424][T24869] bond0: (slave bond_slave_0): Releasing backup interface
[  559.352238][T24869] bond0: (slave bond_slave_1): Releasing backup interface
[  559.408880][T24869] team0: Port device team_slave_0 removed
[  559.444811][T24869] team0: Port device team_slave_1 removed
[  559.472314][T24869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.490753][T24869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.504971][T24869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.512675][T24869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.523761][T24869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  559.613381][T24899] openvswitch: netlink: IP tunnel dst address not specified
[  559.766072][T24909] ipt_REJECT: TCP_RESET invalid for non-tcp
[  559.889133][T24909] netlink: 'syz.4.4945': attribute type 11 has an invalid length.
[  559.922701][T24909] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20001
[  560.440098][T24933] netlink: 'syz.3.4952': attribute type 7 has an invalid length.
[  560.529979][T24941] netlink: 'syz.1.4954': attribute type 1 has an invalid length.
[  560.596657][T24946] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes.
[  560.619973][T24941] bond3: entered promiscuous mode
[  560.640639][T24941] 8021q: adding VLAN 0 to HW filter on device bond3
[  560.725895][T24942] bond3: (slave bridge2): making interface the new active one
[  560.734401][T24942] bridge2: entered promiscuous mode
[  560.741484][T24942] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  560.753844][T24946] netlink: 'syz.3.4955': attribute type 12 has an invalid length.
[  560.765599][T24946] netlink: 'syz.3.4955': attribute type 29 has an invalid length.
[  561.890546][T25007] bond5: Unable to set up delay as MII monitoring is disabled
[  561.940419][T25007] bond5 (unregistering): Released all slaves
[  561.968484][T25016] ip6t_srh: unknown srh match flags  4000
[  562.056589][T25014] netlink: 'syz.3.4972': attribute type 12 has an invalid length.
[  562.109917][T25014] netlink: 'syz.3.4972': attribute type 29 has an invalid length.
[  562.132376][T25014] __nla_validate_parse: 10 callbacks suppressed
[  562.132397][T25014] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4972'.
[  562.178462][T25014] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4972'.
[  562.421553][T25037] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  562.430630][T25037] IPVS: lc: FWM 3 0x00000003 - no destination available
[  562.437225][T25036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4978'.
[  562.497026][T25036] netlink: 'syz.0.4978': attribute type 1 has an invalid length.
[  562.634017][T25044] sctp: [Deprecated]: syz.0.4980 (pid 25044) Use of int in max_burst socket option deprecated.
[  562.634017][T25044] Use struct sctp_assoc_value instead
[  562.737782][T25054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4980'.
[  562.754357][T25052] IPVS: length: 239 != 24
[  562.954166][T25063] netlink: 'syz.4.4986': attribute type 10 has an invalid length.
[  562.979277][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.991292][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  563.005746][T25063] veth1_macvtap: left promiscuous mode
[  563.034091][T25063] team0: Device veth1_macvtap failed to register rx_handler
[  563.132115][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4990'.
[  563.155395][T25087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4991'.
[  563.195631][T25082] unsupported nla_type 33542
[  563.337244][T25090] IPVS: length: 61 != 8
[  563.503801][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4994'.
[  563.914552][T25124] netlink: 'syz.4.5001': attribute type 10 has an invalid length.
[  563.924968][T25124] bridge_slave_1: left allmulticast mode
[  563.938666][T25124] bridge_slave_1: left promiscuous mode
[  563.947394][T25124] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.966538][T25124] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  564.155377][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5003'.
[  564.224073][T25140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.253886][T25140] sctp: [Deprecated]: syz.4.5007 (pid 25140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  564.253886][T25140] Use struct sctp_sack_info instead
[  564.317388][T25140] IPv6: NLM_F_CREATE should be specified when creating new route
[  564.412697][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5006'.
[  564.469733][T25157] netlink: 808 bytes leftover after parsing attributes in process `syz.0.5006'.
[  564.611669][T25160] veth0: entered promiscuous mode
[  566.219433][T25163] tap0: tun_chr_ioctl cmd 2148553947
[  566.228663][T25160] veth0: left promiscuous mode
[  566.383496][T25185] Cannot find add_set index 0 as target
[  566.670638][T25200] netlink: 'syz.4.5024': attribute type 14 has an invalid length.
[  566.694436][T25208] netlink: 'syz.1.5026': attribute type 3 has an invalid length.
[  567.103441][T25236] netlink: 'syz.3.5032': attribute type 32 has an invalid length.
[  567.140897][T25236] __nla_validate_parse: 3 callbacks suppressed
[  567.140967][T25236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'.
[  567.207238][T25241] netlink: 'syz.4.5035': attribute type 1 has an invalid length.
[  567.293121][T25236] bond11: option coupled_control: invalid value (52)
[  567.302590][T25236] bond11 (unregistering): Released all slaves
[  567.425912][T25243] bond4: entered promiscuous mode
[  567.444071][T25244] macvlan2: entered promiscuous mode
[  567.451819][T25244] macvlan2: entered allmulticast mode
[  567.458822][T25244] bond4: (slave macvlan2): Opening slave failed
[  567.478320][T25258] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5037'.
[  567.889622][T25274] xt_ecn: cannot match TCP bits for non-tcp packets
[  567.999510][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  568.007608][    C1] lec:lec_tx_timeout: lec0
[  568.350647][T25317] bond1: option mode: unable to set because the bond device has slaves
[  568.382344][T25317] netlink: 'syz.4.5044': attribute type 24 has an invalid length.
[  568.409545][T25317] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  568.427406][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'.
[  570.626347][T25266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  570.868057][T25344] syz_tun: entered allmulticast mode
[  571.212990][T25365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5057'.
[  571.341574][T25372] openvswitch: netlink: Message has 8 unknown bytes.
[  571.348630][T25372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.411038][T25375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5058'.
[  571.878917][T25404] bond11: entered promiscuous mode
[  571.884541][T25404] bond11: entered allmulticast mode
[  571.890379][T25404] 8021q: adding VLAN 0 to HW filter on device bond11
[  571.965353][T25409] syzkaller0: entered promiscuous mode
[  571.999377][T25409] syzkaller0: entered allmulticast mode
[  572.014772][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'.
[  572.034188][T25409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5069'.
[  572.084029][T25409] veth0_to_team: entered promiscuous mode
[  572.104361][T25409] veth0_to_team: left promiscuous mode
[  572.132579][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5073'.
[  572.164139][T25419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5072'.
[  572.175298][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5073'.
[  572.436191][T25438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5078'.
[  572.539648][T25445] netlink: 'syz.4.5079': attribute type 24 has an invalid length.
[  573.488079][T25512] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5095'.
[  573.489594][T25510] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  573.569520][T25510] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  573.645057][T25519] netlink: 'syz.0.5097': attribute type 4 has an invalid length.
[  573.653588][T25519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5097'.
[  573.750260][T25529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5100'.
[  573.792538][T25535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5098'.
[  573.874400][T25535] syzkaller0: entered promiscuous mode
[  573.899494][T25535] syzkaller0: entered allmulticast mode
[  574.076847][T25542] can: request_module (can-proto-0) failed.
[  574.447100][T25551] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  575.447568][T25578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'.
[  575.763878][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.864558][T25595] netlink: 'syz.1.5115': attribute type 11 has an invalid length.
[  575.896406][T25595] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.5115'.
[  575.919558][T25611] veth1_macvtap: left promiscuous mode
[  575.925095][T25611] macsec0: entered promiscuous mode
[  575.931354][T25611] macsec0: entered allmulticast mode
[  575.943464][T25611] veth1_macvtap: entered promiscuous mode
[  575.950369][T25611] veth1_macvtap: entered allmulticast mode
[  575.956639][T25611] macsec0: left promiscuous mode
[  575.962695][T25611] macsec0: left allmulticast mode
[  575.967765][T25611] veth1_macvtap: left allmulticast mode
[  575.978248][T25614] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.5121'.
[  575.998589][T25616] openvswitch: netlink: IPv4 tun info is not correct
[  576.005805][T25614] openvswitch: netlink: Message has 6 unknown bytes.
[  576.035093][T25613] x_tables: ip_tables: icmp match: only valid for protocol 1
[  576.044331][T25613] netlink: 'syz.4.5121': attribute type 1 has an invalid length.
[  576.148858][T25625] openvswitch: netlink: Flow actions attr not present in new flow.
[  576.163885][T25625] netlink: 'syz.0.5124': attribute type 29 has an invalid length.
[  576.187016][T25625] netlink: 'syz.0.5124': attribute type 29 has an invalid length.
[  576.454490][T25593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  577.274520][T25696] netlink: 'syz.2.5147': attribute type 32 has an invalid length.
[  577.299678][T25696] __nla_validate_parse: 13 callbacks suppressed
[  577.299700][T25696] netlink: 776 bytes leftover after parsing attributes in process `syz.2.5147'.
[  577.798420][T25725] netlink: 'syz.3.5158': attribute type 12 has an invalid length.
[  577.816908][T25725] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5158'.
[  578.036978][T25734] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5161'.
[  578.130983][T25734] IPv6: NLM_F_CREATE should be specified when creating new route
[  578.204014][T25747] Cannot find add_set index 2 as target
[  578.207598][T25745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5165'.
[  578.251963][T25747] Cannot find add_set index 2 as target
[  578.440231][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'.
[  578.472582][ T9330] veth5: left allmulticast mode
[  578.475079][T25764] ipt_REJECT: ECHOREPLY no longer supported.
[  578.479192][ T9330] veth5: left promiscuous mode
[  578.488510][ T9330] bridge7: port 1(veth5) entered disabled state
[  578.862842][ T9330] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  579.067707][ T9330] bridge0 (unregistering): left allmulticast mode
[  579.289330][T23069] Bluetooth: hci4: command 0x0406 tx timeout
[  579.445825][ T9330] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  579.456669][ T9330] bond0 (unregistering): Released all slaves
[  579.467775][ T9330] bond1 (unregistering): Released all slaves
[  579.487509][ T9330] bond2 (unregistering): (slave vcan1): Releasing backup interface
[  579.495721][ T9330] vcan1: left promiscuous mode
[  579.501358][ T9330] bond2 (unregistering): Released all slaves
[  579.515540][ T9330] bond3 (unregistering): Released all slaves
[  579.534504][ T9330] bond4 (unregistering): Released all slaves
[  579.550518][ T9330] bond5 (unregistering): Released all slaves
[  579.566615][ T9330] bond6 (unregistering): Released all slaves
[  579.586717][ T9330] bond7 (unregistering): Released all slaves
[  579.604788][ T9330] bond8 (unregistering): (slave batadv1): Releasing active interface
[  579.613194][ T9330] batadv1: left promiscuous mode
[  579.618289][ T9330] batadv1: left allmulticast mode
[  579.625180][ T9330] bond8 (unregistering): Released all slaves
[  579.720168][T25783] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  579.776218][ T9330] v�: left promiscuous mode
[  579.915872][ T9330] : left promiscuous mode
[  580.058708][ T9330] tipc: Left network mode
[  580.145224][T25807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5186'.
[  580.379947][T25817] Cannot find set identified by id 65534 to match
[  580.541086][T25826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5192'.
[  580.808329][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'.
[  581.000156][T25844] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  581.121746][ T9330] team0 (unregistering): Port device wireguard1 removed
[  581.153120][ T9330] pim6reg (unregistering): left allmulticast mode
[  581.221459][ T9330] pimreg (unregistering): left allmulticast mode
[  581.234802][ T9330] team0 (unregistering): Port device wireguard0 removed
[  581.483804][T17356] smc: removing ib device syz0
[  581.493634][ T5990] lo speed is unknown, defaulting to 1000
[  581.502036][ T5990] syz0: Port: 1 Link DOWN
[  581.681945][T25858] netlink: 'syz.2.5200': attribute type 3 has an invalid length.
[  581.704968][T25858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5200'.
[  581.891770][T25860] netlink: 'syz.4.5201': attribute type 2 has an invalid length.
[  581.929548][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  581.984405][T25865] netlink: 'syz.3.5202': attribute type 1 has an invalid length.
[  582.297540][T25876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5206'.
[  582.686385][T25896] : entered promiscuous mode
[  582.843624][T25906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'.
[  582.966308][T25912] netlink: 'syz.2.5215': attribute type 12 has an invalid length.
[  583.159959][T25912] bond12: option primary_reselect: invalid value (255)
[  583.187874][T25912] bond12 (unregistering): Released all slaves
[  583.302390][T25919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  583.393789][T25919] netlink: 'syz.4.5217': attribute type 1 has an invalid length.
[  583.528235][T25938] xt_hashlimit: size too large, truncated to 1048576
[  584.630580][T25920] veth1_vlan: left allmulticast mode
[  584.749342][T25935] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  584.789111][ T1104] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.839419][ T1104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.858744][ T1104] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.877051][ T1104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.902450][ T1104] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.919751][ T1104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.924172][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5223'.
[  584.930756][T25946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5222'.
[  584.969964][ T1104] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.981245][ T1104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.012342][T25951] bond0: entered promiscuous mode
[  585.030392][T25951] bond0: left promiscuous mode
[  585.058872][T25962] netlink: 'syz.4.5226': attribute type 11 has an invalid length.
[  585.074384][T25962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5226'.
[  585.095124][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5227'.
[  585.243430][T25966] netlink: 'syz.4.5229': attribute type 7 has an invalid length.
[  585.275556][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5229'.
[  585.281006][T25977] netlink: 'syz.1.5231': attribute type 4 has an invalid length.
[  585.317906][T25980] netlink: 'syz.1.5231': attribute type 4 has an invalid length.
[  585.359821][T25976] netlink: 'syz.1.5231': attribute type 4 has an invalid length.
[  585.456307][T25984] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  585.489855][T25976] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5231'.
[  585.530697][T25976] sock: sock_timestamping_bind_phc: sock not bind to device
[  585.589846][T25991] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5235'.
[  585.604086][T25992] netlink: 'syz.4.5234': attribute type 39 has an invalid length.
[  585.941464][T26009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5243'.
[  585.970852][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5243'.
[  586.632486][T26049] netlink: 'syz.4.5257': attribute type 16 has an invalid length.
[  586.642179][T26043] netlink: 'syz.3.5255': attribute type 1 has an invalid length.
[  586.688536][T26049] erspan0: left promiscuous mode
[  586.740585][T26049] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.752099][T26049] 8021q: adding VLAN 0 to HW filter on device team0
[  586.826509][T26049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  586.838205][T26049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  586.852803][T26049] �
: left promiscuous mode
[  586.858481][T26049] veth0_vlan: left promiscuous mode
[  586.867848][T26049] veth0_vlan: entered promiscuous mode
[  586.880882][T26049] �
: entered promiscuous mode
[  586.896793][T26049] veth0_macvtap: left promiscuous mode
[  586.904931][T26049] veth0_macvtap: entered promiscuous mode
[  586.912896][T26049] veth1_macvtap: entered promiscuous mode
[  586.936040][T26049] 8021q: adding VLAN 0 to HW filter on device bond1
[  586.955512][T26049] 8021q: adding VLAN 0 to HW filter on device bond2
[  586.972655][T26049] vlan2: left allmulticast mode
[  586.977674][T26049] geneve1: left allmulticast mode
[  586.985685][T26049] geneve4: left allmulticast mode
[  587.001354][T26049] 8021q: adding VLAN 0 to HW filter on device bond3
[  587.010561][T26049] 8021q: adding VLAN 0 to HW filter on device bond4
[  587.024256][T26049] erspan0: entered promiscuous mode
[  587.067927][T26060] bond8: (slave veth0_to_bond): Releasing active interface
[  587.083884][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.091172][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.148853][T17352] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  587.157465][T17352] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.166040][T17352] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 59429 - 0
[  587.174867][T17352] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  587.183384][T17352] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  587.192063][T17352] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.200552][T17352] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 59429 - 0
[  587.208815][T17352] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  587.237936][T17352] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  587.258199][T17352] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.278010][T17352] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 59429 - 0
[  587.299865][T17352] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  587.313666][T17352] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  587.323686][T17352] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.332845][T17352] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 59429 - 0
[  587.358274][T26077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  587.363791][T17352] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  587.407568][ T1168] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  587.449075][   T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  587.458053][ T1168] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  587.475458][T26092] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20001
[  587.627501][T26100] 
[  587.629884][T26100] ======================================================
[  587.636930][T26100] WARNING: possible circular locking dependency detected
[  587.643965][T26100] syzkaller #0 Not tainted
[  587.648395][T26100] ------------------------------------------------------
[  587.655430][T26100] syz.4.5266/26100 is trying to acquire lock:
[  587.661506][T26100] ffffffff8fd48c18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  587.670663][T26100] 
[  587.670663][T26100] but task is already holding lock:
[  587.678035][T26100] ffff8880660baf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  587.687262][T26100] 
[  587.687262][T26100] which lock already depends on the new lock.
[  587.687262][T26100] 
[  587.697664][T26100] 
[  587.697664][T26100] the existing dependency chain (in reverse order) is:
[  587.706678][T26100] 
[  587.706678][T26100] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  587.714680][T26100]        _raw_spin_lock_bh+0x36/0x50
[  587.719977][T26100]        nr_rt_device_down+0x153/0x860
[  587.725441][T26100]        nr_device_event+0x137/0x150
[  587.730734][T26100]        notifier_call_chain+0x1be/0x400
[  587.736373][T26100]        __dev_notify_flags+0x16d/0x310
[  587.741930][T26100]        netif_change_flags+0xe8/0x1a0
[  587.747483][T26100]        dev_change_flags+0x130/0x260
[  587.752859][T26100]        dev_ioctl+0x7b4/0x1150
[  587.757723][T26100]        sock_do_ioctl+0x23e/0x320
[  587.762836][T26100]        sock_ioctl+0x5c6/0x7f0
[  587.767692][T26100]        __se_sys_ioctl+0xfc/0x170
[  587.772819][T26100]        do_syscall_64+0x14d/0xf80
[  587.778035][T26100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.784487][T26100] 
[  587.784487][T26100] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  587.792406][T26100]        _raw_spin_lock_bh+0x36/0x50
[  587.797706][T26100]        nr_rt_device_down+0xbe/0x860
[  587.803105][T26100]        nr_device_event+0x137/0x150
[  587.808516][T26100]        notifier_call_chain+0x1be/0x400
[  587.814161][T26100]        __dev_notify_flags+0x16d/0x310
[  587.819717][T26100]        netif_change_flags+0xe8/0x1a0
[  587.825210][T26100]        dev_change_flags+0x130/0x260
[  587.830590][T26100]        dev_ioctl+0x7b4/0x1150
[  587.835447][T26100]        sock_do_ioctl+0x23e/0x320
[  587.840574][T26100]        sock_ioctl+0x5c6/0x7f0
[  587.845445][T26100]        __se_sys_ioctl+0xfc/0x170
[  587.850566][T26100]        do_syscall_64+0x14d/0xf80
[  587.855688][T26100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.862120][T26100] 
[  587.862120][T26100] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  587.870047][T26100]        __lock_acquire+0x15a5/0x2cf0
[  587.875444][T26100]        lock_acquire+0xf0/0x2e0
[  587.880495][T26100]        _raw_spin_lock_bh+0x36/0x50
[  587.885796][T26100]        nr_rt_ioctl+0x40c/0xf90
[  587.890743][T26100]        sock_do_ioctl+0x101/0x320
[  587.895953][T26100]        sock_ioctl+0x5c6/0x7f0
[  587.900807][T26100]        __se_sys_ioctl+0xfc/0x170
[  587.905928][T26100]        do_syscall_64+0x14d/0xf80
[  587.911040][T26100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.917455][T26100] 
[  587.917455][T26100] other info that might help us debug this:
[  587.917455][T26100] 
[  587.927679][T26100] Chain exists of:
[  587.927679][T26100]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  587.927679][T26100] 
[  587.941597][T26100]  Possible unsafe locking scenario:
[  587.941597][T26100] 
[  587.949045][T26100]        CPU0                    CPU1
[  587.954504][T26100]        ----                    ----
[  587.959873][T26100]   lock(&nr_node->node_lock);
[  587.964801][T26100]                                lock(nr_node_list_lock);
[  587.971919][T26100]                                lock(&nr_node->node_lock);
[  587.979214][T26100]   lock(nr_neigh_list_lock);
[  587.983904][T26100] 
[  587.983904][T26100]  *** DEADLOCK ***
[  587.983904][T26100] 
[  587.992052][T26100] 2 locks held by syz.4.5266/26100:
[  587.997246][T26100]  #0: ffffffff8fd48c78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  588.006840][T26100]  #1: ffff8880660baf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  588.016521][T26100] 
[  588.016521][T26100] stack backtrace:
[  588.022412][T26100] CPU: 0 UID: 0 PID: 26100 Comm: syz.4.5266 Not tainted syzkaller #0 PREEMPT(full) 
[  588.022432][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  588.022442][T26100] Call Trace:
[  588.022448][T26100]  <TASK>
[  588.022455][T26100]  dump_stack_lvl+0xe8/0x150
[  588.022479][T26100]  print_circular_bug+0x2e1/0x300
[  588.022505][T26100]  check_noncircular+0x12e/0x150
[  588.022532][T26100]  __lock_acquire+0x15a5/0x2cf0
[  588.022553][T26100]  ? kasan_save_track+0x4f/0x80
[  588.022576][T26100]  lock_acquire+0xf0/0x2e0
[  588.022594][T26100]  ? nr_rt_ioctl+0x40c/0xf90
[  588.022611][T26100]  ? nr_rt_ioctl+0x40c/0xf90
[  588.022625][T26100]  _raw_spin_lock_bh+0x36/0x50
[  588.022646][T26100]  ? nr_rt_ioctl+0x40c/0xf90
[  588.022660][T26100]  nr_rt_ioctl+0x40c/0xf90
[  588.022679][T26100]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  588.022698][T26100]  ? apparmor_capable+0x126/0x170
[  588.022725][T26100]  ? capable+0x88/0xe0
[  588.022744][T26100]  ? nr_ioctl+0x1b1/0x3b0
[  588.022765][T26100]  sock_do_ioctl+0x101/0x320
[  588.022783][T26100]  ? __pfx_sock_do_ioctl+0x10/0x10
[  588.022798][T26100]  ? do_futex+0x333/0x420
[  588.022824][T26100]  sock_ioctl+0x5c6/0x7f0
[  588.022840][T26100]  ? __pfx_sock_ioctl+0x10/0x10
[  588.022856][T26100]  ? __fget_files+0x2a/0x420
[  588.022876][T26100]  ? __fget_files+0x3a0/0x420
[  588.022896][T26100]  ? __fget_files+0x2a/0x420
[  588.022926][T26100]  ? bpf_lsm_file_ioctl+0x9/0x20
[  588.022944][T26100]  ? __pfx_sock_ioctl+0x10/0x10
[  588.022960][T26100]  __se_sys_ioctl+0xfc/0x170
[  588.022977][T26100]  do_syscall_64+0x14d/0xf80
[  588.022991][T26100]  ? trace_irq_disable+0x3b/0x150
[  588.023012][T26100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.023028][T26100]  ? clear_bhb_loop+0x40/0x90
[  588.023045][T26100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.023060][T26100] RIP: 0033:0x7f75de59c799
[  588.023075][T26100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.023090][T26100] RSP: 002b:00007f75df455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  588.023107][T26100] RAX: ffffffffffffffda RBX: 00007f75de815fa0 RCX: 00007f75de59c799
[  588.023119][T26100] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005
[  588.023129][T26100] RBP: 00007f75de632bd9 R08: 0000000000000000 R09: 0000000000000000
[  588.023139][T26100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.023148][T26100] R13: 00007f75de816038 R14: 00007f75de815fa0 R15: 00007ffca9aed738
[  588.023167][T26100]  </TASK>
[  588.025780][ T5929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  588.228237][T26103] syzkaller0: entered promiscuous mode
[  588.265567][ T5929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  588.295738][T26103] syzkaller0: entered allmulticast mode
[  591.149871][T14470] lec:lec_start_xmit: lec0:No lecd attached
[  591.529504][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  596.889303][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  596.897359][    C1] lec:lec_tx_timeout: lec0