last executing test programs:

3.153339485s ago: executing program 3 (id=4529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = epoll_create(0x32)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x40000000}) (async)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x6)
recvmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000001140)=""/83, 0x53}, {&(0x7f0000000080)}, {&(0x7f00000011c0)=""/170, 0xaa}], 0x5, &(0x7f0000001300)=""/205, 0xcd}, 0x10000}], 0x1, 0x0, 0x0) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000940)={<r9=>0x0, 0x5, 0x0, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001bc0)={<r10=>0x0, "7ffa1ae1d7dbb5fc34170991020b969a"})
ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000d40)={0x2b, 0x5, {0x4d, @usage=0xe, r9, 0x8, 0x7, 0x3, 0x6, 0x0, 0x2, @usage=0xffffffffffff8000, 0x8, 0x6, [0xc500def, 0x3, 0x0, 0xffffffffff458d32, 0x2, 0x1000]}, {0x8, @struct={0x1, 0x6}, 0x0, 0x5, 0x9, 0x2, 0x8, 0x81, 0x2, @usage=0x5, 0x2, 0xdd, [0x5, 0x8, 0x100, 0x6127, 0x100000000, 0xec]}, {0x3, @struct={0x150e, 0xfffffff9}, r10, 0x5, 0xffffffffffffffff, 0x1000, 0x7, 0xe, 0x424, @struct={0x5, 0x9}, 0x6, 0x6, [0x8000000000000001, 0x0, 0xffffffffffffffff, 0x4, 0x8000000000000001, 0x3]}, {0x9, 0x100, 0xfffffffffffffffd}}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r0, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)

3.089315842s ago: executing program 4 (id=4531):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$sock(r1, &(0x7f0000000880)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)="124c899f8f06737c73151f23ab8101fc087feafb853be0eeeb1737b5b6bd64e78aa49712641464bd099e51469ffa81f6204d8e3036ff4eb2c8afb6d57a0d37477de5732c7479cd40341fa5dafc4cfb26ad60cd9bfdcae53c4c72af417ce6b9e1c59664c28a8cbb208f5677f7537ebf93ea3c8c5b8b9f33d1ba6a2ad578f96377a5ad0d25b056e1db3928c9d788a67ae6c892f2b1417a6ae3e50a9cd2ff4a96d4d5f7a0766b4019d3936b0a8353172da548", 0xb1}, {&(0x7f0000000200)="c05a60312fed759cb8ba3585842e8a7024c710358d3bc5fa5e66ec7abe9e", 0x1e}, {&(0x7f0000000640)="105e9a79d1ea82c0865da38bb6e4ff53d629c549a13dc6e06c37dda1ef1f6cc9e0b05d540b062b32d220f4200dec9c88aee8dfb470c5ff18e235e037655001d724462ec72f1dde6c8c55814700dbee0f06e2bfbf927242f79eebea6ef071e087fd41d2c7f693b6e85b69c8170dc51c808b9e20cd4697cacb5009b12398e320b9895bc6f0b470f4bea88d693956dc398c3f903260b1f933e51d4252b72db5f44ef13e748f5fc026c6938056bc3d7ff8cb7fe66798dfe13884fab5bd41421cd53096e124416f139091f0b7853f0c6edc02b893dcd92c3c24140c139e6251927e17318c942ec5586a", 0xe7}, {&(0x7f0000000740)="785b587de2afe438c39a6248ce3ed3f03fa8aa2f8619d22884031ba3df76ecf4b38eb32ba22dbc22b00a235296ef9f4e131c0dc1c2bd07eefc27c53c3dd521650153f04a6c12570b96be4d7ec7f5def417abd8046daec87ac597baa5f02911bcfae0f35c5c9309080f0d26e0ba60f49a57d3b6d8eb6bd47ee407f0929c72124b3c64106f7d184049491c68692d8e5bdd557b26055ce123d9c0a430c1a2e62f021bfdad3873262c06cedc10d71b75bfa595e8245162746c2e7b4a9766aff04a05cdf74e3f1908b2ae4712e1a660204889a0a34a6eb6f81a31ae174eb55c45bb4233a3b56e904efdd71643e74a0fdd8c1664e50ca76c", 0xf5}], 0x4, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}], 0x18}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000091a00080900010073797a30000000002c000000030a010100000000000000000500007a31000000000900034073797a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800c001c007061796c6f6164003000028008000240000000000800054000000003080004400000009608000340000000860900010073797a3000000000140000001100010000000000000000000000000a00000000000000bc842c03d7db82683149905402c7ae495e0e0ac673893a8334e937812b64784636492834bffe07015db40356168c7a98e744436cf2a481e1f8a9a141be98260eb8b62bc19599c78644b77308a9efed2c847c395ec89e9d5523939b00ae4ffd6367c28e0bca028d306930d9851b0f39814dae0f976d5bcefef9ee44a8cb41ed96c4136169562cee0ebdda5e4edb3474be682fc6174a84753ea5988ebb8a"], 0xd4}}, 0x0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000140), 0x0, 0x4008004, &(0x7f00000001c0)={0x11, 0x1b, r3, 0x1, 0x9d, 0x6, @broadcast}, 0x14)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @private}, &(0x7f0000000a80)=0x10, 0x80000)
accept$inet(r6, &(0x7f0000000ac0)={0x2, 0x0, @initdev}, &(0x7f0000000b00)=0x10)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r11 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r11, 0x29, 0xce, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x67c, 0x0, r7, 0xff, '\x00', r9, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0)
ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000000340)="436636eac7b967100b5944dbe951771971f6473188420cc9088e7b9adea0c64b7a5a31ec5fe138de4bb60f35d79023dd6369335a58a11a360a222601fba9ae6073cd8e671a7b8e8dc713f58d9bdcd512526faa80ac6cdec7b578820addbdb418d2617c9a000e40f9ca764e5b4ca68e2ae560f872c0caab21f7b6b8f6801240cbdcb806352a29f9dac400bc")

3.001898352s ago: executing program 3 (id=4532):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r3, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180600000000040000000000000000009500000000001f009b238ca21b051716ce0cd11bc51cf5389dcaa0a9d42405023fa4802183b8324a35a4e38f20bab0e7d1ab421eacd730"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @dev={0xac, 0x14, 0x14, 0x25}, 0x2, 0x2}})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r1, 0x5, 0xfffffffffffffff2, 0x9})
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0xfffffffd, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2.884039523s ago: executing program 4 (id=4535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @remote, 0xfffffffd}, 0x1c)
listen(r1, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000200))
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)

2.63013794s ago: executing program 1 (id=4537):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000005ef788d6c82b9c5d420dff1a0f80000001811000000000000998f78490b8a921260dcc182aca1d22d5c66e2cef16e3de24973350bcb03bf53a028db55adf5dfc0e7c1d65451e45838aeb9a2c8cd4e8d6626cc25b65ff58b6b42cbb6d2c336ec5e1b8e17602d4fedda82adc326c9f05d198b6d83a395a4593d9ad71eca24262952", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000001500f4fff0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

2.043587244s ago: executing program 3 (id=4542):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
close(r0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="f4f77303869a2e8d81b89859af454b634eba34cff16caae3158496f537", 0x1d}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r5, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040)
recvmmsg(r5, &(0x7f00000059c0)=[{{0x0, 0x18, 0x0}, 0x9}], 0x1, 0x2, 0x0)
shutdown(r5, 0x1)
writev(r3, &(0x7f0000000600)=[{&(0x7f00000004c0)="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", 0x126}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="4d0ff6044df96744927dc21a1af29aecbac549f3a15d", 0x16}, {&(0x7f0000000680)="8c4e", 0x2}], 0x5)
recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.977367431s ago: executing program 4 (id=4543):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x40000480)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x8090)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000340)=0x30)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x2, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x4a, 0x1, 0x6}, @noop, @timestamp={0x44, 0x20, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff, 0x3]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0x5}, {@local, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0xb, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @rand_addr=0x64010101]}]}}}}})
r5 = accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
connect$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x6, @none, 0x3, 0x2}, 0xe)
close(r5)
sendmsg$nl_route(r4, 0x0, 0x0)

1.837082672s ago: executing program 1 (id=4544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xbc4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4081)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x410, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000480))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x90800400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x4000)
sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4041}, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000880)={'batadv0\x00', 0x1000})
openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0)
ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000000900))
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x80}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x100}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x2}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "a650533fc224488da62dbfa2e0c59ce5b05864929358e2c2c667efe8e363fb2e2aff65dd43468c7d7cd4cdcf7aa607b0a85ec0299dde835cd01009f860d0fc6f3c9a76288829cb7990901a99e70882f2ab8443c7be6b2411b87668be6b5f2f54b5c24108c238694fd16e79ff2640d66710d1f565efbe6f9116e541d6c9899ba653f40dc86dcc9caa5c8361ef6e08032d31d3ec7a0f28333ea2570f20ec92553f37af1433fdc6502a85540e853632cdc0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x727}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24040000}, 0x40001)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, r4, 0x4, 0x8000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014)
getsockname$netlink(r8, &(0x7f0000000cc0), &(0x7f0000000d00)=0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r13, 0x0, 0x24, &(0x7f0000000d40)={@loopback, @multicast1}, &(0x7f0000000d80)=0xc)

1.77158221s ago: executing program 2 (id=4546):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60)
sendmsg$nfc_llcp(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x2e, 0x10, "fa2e8fc509c33eb3e0110772f8cbbbbe8191f4ae6e7d9510da6f752d912720719b584a42beffd2dcad82d56d7f3883fbc54f7889de0207a56e8bbe501d7214", 0x6}, 0x60, &(0x7f0000000400)=[{&(0x7f00000001c0)="4b1174571ac7691660227cc7be1a48d1c92e62e49005daab565694bd32e48c1ce77d6149f71275aee2e03e9b0b6bf9d9a4692f66900288c91886218eb48baf4824c4a8c8cfe5ee871de7e4db90678e0dc25555151b02737b1aef3601166dda32b8865ec6efa7d02013427b7cb374e03aeea8a8c9e7a2b4cb0c1b0042acaccb0c408452b9f533251f5a9310072f1f91ec886b8da2f05e4a1898e1e026637a8ecae59e1b9363e51342147181c48748aa6f11a6da4b970709dbf242", 0xba}, {&(0x7f0000000280)="dfeeca03d8f8d6ef2601d5c083ecfb4ae62b25155116bdb21f78d88c27d74fa48157cc0fc1b4467dd52ae69492371234cb48a476a7c5", 0x36}, {&(0x7f00000002c0)="aecddcc5e7269919b7ddc756e532318064732d0bda335519daa70e7b16dc5c83b9a6107ef9f598ad4749bb3ef84825c00fce55b6f66290f8195ebbf04d1e04eeb6f200cf3e9cbce14c7fb83c126f5db83fc1b773b157ed03bd570e833f76ab7b96a437296c56684154b27f437fdc8c67452c52f059b060d314b253aa063fc8750cbd200ee2161f7c2f71f533218f5baf39344b94558dcf6329", 0x99}, {&(0x7f0000000380)="10048f4c2aa0ab603aaa3d4126e0a4294db30d11843e2726b0a9ee73dc2b4f39271d63e64f9afd043ce6e0ba05e963ccd97eaf7f29fe2ee5eac5b9dbec023b5bdf23a9383ca95644fa2b56f4749393", 0x4f}], 0x4, &(0x7f0000000440)={0xa8, 0x119, 0x2, "19173e2119a367b1013a3a3d92d2b876f5ed312385a770a5eddfc387dda875fa884e7a61ef38df60c1466e366cbeba455c8bd273ca39976d51312724a58fd4650edad870dcb093a16f03cdcd2893a4e4666699973fec136e7d7895f50875ac277a3269f1ccf5a2977bb8ff376936b414e5bd086983db593e1592f6c7b3f12b71b1131de1e12710e166139c82e7ad8c94ed"}, 0xa8, 0x4004000}, 0x10) (async)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000540)={@multicast1, @empty, 0xffffffffffffffff, "beae17dfea7ed44887903bcb11cb4ee935f93f69b5808d9e2d5e28c617c8a595", 0x4, 0x59, 0xfd7}, 0x3c) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e23, 0x8, @remote, 0x10001}, 0x1c) (async, rerun: 64)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000640)=0x6, &(0x7f0000000680)=0x4) (async, rerun: 64)
connect$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000740)='memory.pressure\x00', 0x2, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x2, 0x3ac, [0x0, 0x2000000007c0, 0x200000000b0c, 0x200000000b3c], 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0x2, 0x2, [{0x5, 0x41, 0x9300, 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', 'veth1_macvtap\x00', 'veth1_macvtap\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xead, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x401}}}}, {0x5, 0x21, 0x600, 'vxcan1\x00', 'ipvlan0\x00', 'wlan1\x00', 'veth1_to_bridge\x00', @local, [0x0, 0xff, 0x0, 0x0, 0xff, 0x1fe], @local, [0xff, 0x0, 0xff, 0x0, 0xff], 0xee, 0xee, 0x11e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x2, 0xae, 0x2, 0x1}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x7ff, {0x5}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0x3}]}, 0x424) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c40), r2)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x40) (async)
pipe(&(0x7f0000000d80)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f0000000dc0)={0xf579cefaee8627eb})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r2)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000e80)={<r8=>0x0}, &(0x7f0000000ec0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xdc, 0x2a, 0x214, 0x70bd29, 0x25dfdbfb, {0x14}, [@generic="14af20bbc17f705b49bbd36f5269f9e58a1ea8cdb4b2cd6edb3d38ebcb729d2b90cd3ad598136c1f07cbae8c5bafc7893f4b433d5ec0baf9035c424e0239fcf960d92db3276109daef3786edc8829761be9ee5335b948fedab68edf71050eedf39d9a297a8684ceaa9107b9852c3341429832ba24736d67e6b82807edf51d06efca4b7cffe791b71bfc9fc85ab4d63ba3bc156d1fe44013ceb7ad8508ad38788b4553286859697308d9c22", @nested={0xc, 0x11a, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x104, 0x0, 0x0, @u32=0x57f}, @typed={0x8, 0xb3, 0x0, 0x0, @pid=r8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) (async, rerun: 64)
bind(r6, &(0x7f0000001080)=@in6={0xa, 0x4e24, 0xa7, @private1, 0x1}, 0x80) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001100)={<r9=>0x0, 0xcb, 0x80d6, 0x5, 0xa2, 0x8}, &(0x7f0000001140)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001180)={r9, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x80000000}}, 0x1, 0x4, 0xab57, 0x3, 0x1, 0x7f, 0x3}, &(0x7f0000001240)=0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001280)={0x4, 0x9, 0xa9, 0x0, r9}, 0x10)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000012c0)={0x3, 0x100, 0x9, 0xfffffffffffffff9, 0x9, 0x9}) (async)
r10 = socket$netlink(0x10, 0x3, 0x4) (async)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r6)
sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x74, r11, 0xc01, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x35}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x33}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000014c0)=@generic={&(0x7f0000001480)='./file0\x00', r7}, 0x18)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000001500)={'wpan4\x00'})

1.720685813s ago: executing program 0 (id=4547):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x57}) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000080))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0}) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="d2ff03076003008ccd9e08f086dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x3c) (async)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x40800) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$alg(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0)
sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r11, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/48, 0x30}], 0x2}, 0x101}], 0x1, 0x60, 0x0) (async)
sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0xc, @remote, 0x2000049e}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b1664841a16196ed22ca7c6e9c95df5cb1efb6a8836928b89e58fa07667dc34d3b9ad161180a829d951d559484a047664bc350fb5f2078771f4f4cb2888ec24d206061aa680da74da2159eb97ab904122bfa44ddcceefd85634be55264a9e75d392645cd203268f98b0ce9d805c2983d326a0acb5cb43f0e585653f22570742f851481288d7a5e5e6af4e1e1c823f33de279c9caffb2cd78b5bc690c0e453d601e209786ba506fb60c324586f367b0fbdef0fa961df37b3674a07b93f84066e6294e58dda5fe633c57eca383ba76a181e7c4291668b73235ce9d760d45b96fc381148f8894c4cc3304a233ec08c3628be4d403cb78c9ffbaa33d", 0xfa}], 0x1, &(0x7f0000000200)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x18}, 0x800)

1.547456617s ago: executing program 1 (id=4548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xd5, 0x401, 0x3, 0x7, 0x6, 0xc7, 0x6, 0x400}}}}]}, 0x58}}, 0x44000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.547106607s ago: executing program 2 (id=4549):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x7a30c3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3d, 0x107, 0x0, 0x7, {0x1, 0x7c}}, 0x14}}, 0x4010)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value, 0x8)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x7)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x15c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x130, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x6, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x3, 0xe0000000, 0x1a, 0x14, 0x18, 0x8}}]}}]}, 0x15c}}, 0x4000010)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004500090000000000000100b102000000080002", @ANYRESOCT=r3], 0x1c}}, 0x4000080)

1.489437188s ago: executing program 0 (id=4550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x11f99d0e6a8526d1, 0xffffffffffffffff, 0x3000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xd1, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)

1.408725656s ago: executing program 2 (id=4551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@getchain={0x64, 0x66, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0x3}, {0x11, 0x10}, {0x0, 0xb}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xa4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7fffffff}, {0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r2)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x52, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x32}, @in=@local, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x5, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c031500000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005)

1.364006455s ago: executing program 0 (id=4552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100840000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008001b"], 0xac}}, 0x4008000)

1.26002635s ago: executing program 0 (id=4553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10)
recvmsg$unix(r7, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000640)=""/25, 0x19}], 0x5, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x12100)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010)
setsockopt$inet6_int(r11, 0x29, 0x18, &(0x7f0000000040), 0x4)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x2400c8c5)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0565fc535f3e8e0aeb6800000000000011", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r14 = bpf$MAP_CREATE(0x0, 0x0, 0x3d)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000880)={@dev={0xfe, 0x80, '\x00', 0x23}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe7, 0x3, 0x5, 0x100, 0x3, 0x406004a, r6})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r14}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
r15 = gettid()
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000000c0)=r15)
socket$nl_route(0x10, 0x3, 0x0)

1.249352917s ago: executing program 4 (id=4554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0xc804)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x68, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x481a219781bb11ee)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="d2ffdd934517f3e1450c28e086ddb867599bf39644fec5701676a7d198ba478e4399cc3e133a3af14696ebb515e16c8197b6c443e5a0", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.197038601s ago: executing program 4 (id=4555):
syz_emit_ethernet(0xfc0, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
recvfrom(r0, &(0x7f0000000040)=""/128, 0x80, 0x1003, &(0x7f00000000c0)=@rc={0x1f, @any, 0x9}, 0x80)

1.124050865s ago: executing program 2 (id=4556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x11b, 0x0, &(0x7f0000000700)="259a53f271a76d2608054c6588a89c4c8819f56665ad08286c785032a84f74610a1aa55c438699a6428c434461f4ac693a9a3c5108cce7684403740ff5911b25b197abaaea4b511c48c9ce72641ea539d569fb4cd0c55c35e22ddc9455c7c023b2ec2c23c10ae06e5282edd63a00ab5bde76e8f756e2d551d256eefb85c2be3fbd213f1ac7f76874bae8a7e816c65b781b18a4e2bc2c73d792582c1a9490ff1220155755974d10678ff16d20951223b3cff4e0880a78ff023c655f8fb8700490e59519d2301035b8b540e2475bde52e76ac20a3660b2d03e7e934c588b64cf459feab65741b03098c2fdefaa467525cd4baf43db3a87158a55c3911fedd18f7ccd72592d739d9e92dbfd64d8894400d0d1e32a8f839b3ae6aece30", 0x0, 0xd02, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000851000000200000085007dff3f000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x6)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', r5, 0x20, 0x8, 0x5, 0x207f, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x6b, 0x0, 0xcf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x34, 0x6b, 0x1, 0x8, [{@multicast2, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1ff}, {@local, 0xe}, {@loopback, 0x69}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x55}]}, @ra={0x94, 0x4, 0x1}]}}}}})
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x80042, 0x1, 0x1}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)

1.08917761s ago: executing program 1 (id=4557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x16, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x0, 0xff, 0x4}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x158, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xac0, 0x34}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xdb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x569}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0xe, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x642}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2fc}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x443}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4c7d}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xb545]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff0001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x3, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)

1.001568484s ago: executing program 3 (id=4558):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000020000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000002e000000000000000000000000ffe000008"], 0x38}}, 0x2000000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x65d}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7be2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000048}, 0x6)

799.51428ms ago: executing program 3 (id=4559):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
getpid() (async)
r0 = socket$inet6(0xa, 0x80002, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x1fc, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async, rerun: 64)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r1) (async, rerun: 64)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64)
getsockopt$rose(r3, 0x104, 0x4, 0x0, &(0x7f0000000040)) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3062b, 0x980c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000226bd7000ffdbdf25180000001800308014000400c1c6fcb751a3b5f4691be9f7cf7882bb08000300", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r4)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x20040080) (async, rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000005c0)='xfrm0\x00') (async)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4)

798.726003ms ago: executing program 4 (id=4560):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000180)={0x4, 0x5, 0x203, 0x0, 0xf3, 0x7, 0x40}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES16, @ANYBLOB="4d3b5a497e5538ae2e0bc77b0017540dd8cc54c01e96de624de6999451745d83c72e409c05210309753deb0c1f240bed16478a08fbb687268654e4e2550512b80606fdf3830beed5e3a759198209ebb5e088cb65c2a09afe3c12674815589855162206b4a065d9cf93f738870b14ef92de7b4a6d7e1a962cefd298ac356af3b16968c5480d9e74567777756ee34aa5ab4f9da29672be62942238a15aea48630a906dbd6da055b486111c97bf591329eca2a56f7dbf696e1d0311533801eab74fdce3d4826a89"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800)
sendto$inet6(r2, &(0x7f0000000140)="24d5fc", 0x3, 0x4040, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0)

760.483596ms ago: executing program 1 (id=4561):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000100008000050000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

504.030101ms ago: executing program 3 (id=4562):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c014) (async, rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
close(0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)

419.94ms ago: executing program 1 (id=4563):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r6 = socket$netlink(0x10, 0x3, 0x0)
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000140), 0x4}, {0x0, 0x46}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

377.517997ms ago: executing program 2 (id=4564):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x13, &(0x7f0000000f00)=ANY=[@ANYBLOB="85200000030014004016040004000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000b759f26436ad8a3ca3895beed40a74dc93d575270cb13e82e0e789f967dcfb586265c361ae096053a397cf47b1915631f50092bc3732ab76ee4d889c8a9f1d06bf0a1f2f8d6636da93df3864000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018640000070000000000000002000000af56f0ffffffffffc500080004000000"], &(0x7f0000000740)='GPL\x00', 0x6, 0xb9, &(0x7f00000003c0)=""/185, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x22, 0x3, 0xffffffa5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x1, 0x1}, {0x2, 0x3, 0x8, 0xc}, {0x5, 0x5, 0xffffffff, 0x7}, {0x4, 0x1, 0x7, 0x4}, {0x2, 0x2, 0x200000e}, {0x0, 0x4, 0xf, 0x9}], 0x10, 0x7fffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xad, 0xc9, &(0x7f0000000600)="9fe083e054fb57b6cd21ed20387f85e992ce44359a8e9a375550567705dfb01e6c72ab843e6f6b503586af59ee3ba1e84cbe2e98d1e639dd3ac2bc1a7191ef23c1ee8fa9ca07cfff1e13f924fa16095ddd984d13c0b9c8b844a86aac0d9d869284c0c9908fae3668ff15c2a0d99524d4d491a1da703f73811a7e14baca784b881872f9582563c1f8dda685fa8848e36a87ca20c40e56af190f05ddfef6d13ecf140ee8269ffb79e1ba814c5d1f", &(0x7f00000007c0)=""/201, 0x7, 0x0, 0x41, 0xe3, &(0x7f00000006c0)="705b93e3124facfd28fbd2c22f1f306f5eeeb212275bac99bace72ffea0a1c3a3676203cb3484e33cdb4f7e2b6c0c88b463be2cb3f42b49bdb8b8a44887f80b12c", &(0x7f0000000e00)="1f731d6e9f46e1395eb9b03333d01d83aca5dd3040f9879c0d296aab8360e8a8f5d72f9ad9050a33cb2f5d3e3f52070923b4ff75f662f46cbfa422ca23cd4e58166b0db5051639039ff53040f2cbeb19ab3b8e04a8fed396a98b098ecce7e93c5c0debe359c77ca3f445af33a81164f679b14756ee028422e437479ac1023768f6541845fe089ada8fb4704ddace85ab75d0e65d41febc6cd2c3e01a502ea43b8f022e736e76d34ec0702afd770e58683fdd66303b8f4d3ec8bdd758728f4a224a95baff2df03455b2754ce405c8958de3fbdc92b6902d5083423e8c83ac81e9630266", 0x0, 0x0, 0x100}, 0x50)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
r6 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="6139773d531f05057e5745de25541dda070281368a524d153249aafbf1c87a8dbf6eb672ee48d53b5f4d7eb142253d9dc5887bae75c0cd45f997a4be8b9d095e61021d82c3aac223b1392e0c12cf1f963f5f486b"], 0xfdef)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001bfac12d400000000000000000a"], 0x64}}, 0x0)
getpeername$llc(r6, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10)

327.869229ms ago: executing program 0 (id=4565):
r0 = socket(0x1, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
writev(r1, &(0x7f0000000900)=[{&(0x7f0000000680)="95bfd1", 0x3}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x2, 0x400, 0x10, @loopback, @mcast2, 0x7, 0x40, 0x6, 0xfffffffb}})

119.407173ms ago: executing program 0 (id=4566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) (async)
socket$inet_smc(0x2b, 0x1, 0x0)

0s ago: executing program 2 (id=4567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x109)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000140)=0x7a38)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080026bd7000fcdbfc251100000014000280050006000000000000000900090000000800050006000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x46fd, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000008c0)={'erspan0\x00', r13, 0x1, 0x8, 0x3, 0xfffffe01, {{0x34, 0x4, 0x2, 0x1a, 0xd0, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x24, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0xfffc}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x2}, {0x0, 0x3, "13"}]}, @timestamp_prespec={0x44, 0x4c, 0x34, 0x3, 0x7, [{@broadcast, 0x80000000}, {@local, 0x8}, {@rand_addr=0x64010102}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@remote, 0xe9c0}, {@multicast2, 0x5}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x88, 0x12, "e640652889100f25056ab5da79e4748d"}, @lsrr={0x83, 0x2f, 0x12, [@private=0xa010102, @remote, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {}, {0x8, 0x8}}}, 0x24}}, 0x40004)
socket$kcm(0x11, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

kernel console output (not intermixed with test programs):

546] veth1_vlan: entered promiscuous mode
[  380.898904][T17546] veth0_macvtap: entered promiscuous mode
[  380.913689][T17829] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3021'.
[  380.924513][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'.
[  380.953097][T17546] veth1_macvtap: entered promiscuous mode
[  380.990618][T17546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.019183][T17546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.064991][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.093240][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.111755][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.120926][ T9046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.145621][T17841] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3025'.
[  381.249921][ T9043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.273357][ T9043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.305141][T17846] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3026'.
[  381.315667][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.324535][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.340559][T17846] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  381.350353][T17846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  381.494914][T17853] netlink: 'syz.0.2956': attribute type 2 has an invalid length.
[  381.504035][T17853] netlink: 'syz.0.2956': attribute type 5 has an invalid length.
[  381.716328][T17860] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  381.769436][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.779614][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.788618][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.798631][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.807032][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.893456][T17862] wlan1 speed is unknown, defaulting to 1000
[  381.897356][T17871] syzkaller0: entered promiscuous mode
[  381.905447][T17871] syzkaller0: entered allmulticast mode
[  381.914466][T17871] 0: reclassify loop, rule prio 0, protocol 800
[  382.098353][T17876] netlink: 'syz.4.3037': attribute type 4 has an invalid length.
[  382.197470][T17879] ip6t_srh: unknown srh invflags 4000
[  382.648410][ T5829] Bluetooth: hci2: command tx timeout
[  382.919461][T17862] chnl_net:caif_netlink_parms(): no params data found
[  382.976402][T17908] wlan1 speed is unknown, defaulting to 1000
[  383.160526][T17862] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.187153][T17862] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.203364][T17862] bridge_slave_0: entered allmulticast mode
[  383.221501][T17862] bridge_slave_0: entered promiscuous mode
[  383.240153][T17862] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.258382][T17862] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.276623][T17862] bridge_slave_1: entered allmulticast mode
[  383.293632][T17862] bridge_slave_1: entered promiscuous mode
[  383.342456][T17928] syzkaller0: entered promiscuous mode
[  383.347951][T17928] syzkaller0: entered allmulticast mode
[  383.443212][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.467541][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.560268][T17862] team0: Port device team_slave_0 added
[  383.678710][T17942] bridge0: left promiscuous mode
[  383.688699][T17951] netlink: 'syz.3.3056': attribute type 8 has an invalid length.
[  383.696862][T17952] netlink: 'syz.3.3056': attribute type 8 has an invalid length.
[  383.801232][T17862] team0: Port device team_slave_1 added
[  383.832919][ T9043] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.841620][ T5829] Bluetooth: hci4: command tx timeout
[  383.852091][ T9043] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 43726 - 0
[  383.860685][ T9043] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.870567][ T9043] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 43726 - 0
[  383.915889][ T9043] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.976317][ T9043] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 43726 - 0
[  383.986476][ T9043] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.995475][ T9043] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 43726 - 0
[  384.006524][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.029682][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.077316][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.134243][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.154566][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.220955][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.432600][T17862] hsr_slave_0: entered promiscuous mode
[  384.439522][T17862] hsr_slave_1: entered promiscuous mode
[  384.453439][T17862] debugfs: 'hsr0' already exists in 'hsr'
[  384.460412][T17862] Cannot create hsr debugfs directory
[  384.721871][ T5829] Bluetooth: hci2: command tx timeout
[  384.917359][T17985] syzkaller0: entered promiscuous mode
[  384.927957][T17985] syzkaller0: entered allmulticast mode
[  385.079764][T18000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.107298][T17984] tipc: Resetting bearer <eth:syzkaller0>
[  385.182658][T17984] tipc: Disabling bearer <eth:syzkaller0>
[  385.229987][T18005] syzkaller0: entered promiscuous mode
[  385.235583][T18005] syzkaller0: entered allmulticast mode
[  385.434153][T18021] wlan1 speed is unknown, defaulting to 1000
[  385.686031][T17862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  385.713446][T17862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  385.773911][T17862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  385.838371][T17862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  385.921345][ T5829] Bluetooth: hci4: command tx timeout
[  386.061899][T18053] __nla_validate_parse: 10 callbacks suppressed
[  386.061918][T18053] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3082'.
[  386.220039][T17862] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.295857][T17862] 8021q: adding VLAN 0 to HW filter on device team0
[  386.335503][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.342710][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.382109][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.389312][ T8999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.665875][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.747822][T17862] veth0_vlan: entered promiscuous mode
[  386.782932][T17862] veth1_vlan: entered promiscuous mode
[  386.829793][T17862] veth0_macvtap: entered promiscuous mode
[  386.849798][T17862] veth1_macvtap: entered promiscuous mode
[  386.880081][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.912379][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.938349][ T9046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.947622][   T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.960983][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x61
[  386.969358][T18083] wlan1 speed is unknown, defaulting to 1000
[  386.975660][   T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.995212][   T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.157445][T18090] ip6tnl0: Caught tx_queue_len zero misconfig
[  387.167142][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.180568][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.225132][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.250006][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.400574][T18097] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3093'.
[  387.449305][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3029'.
[  387.610115][T18112] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3096'.
[  387.845234][T18120] Bluetooth: MGMT ver 1.23
[  387.890708][T18113] syzkaller0: entered promiscuous mode
[  387.921680][T18113] syzkaller0: entered allmulticast mode
[  387.933984][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.958526][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.973217][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.986109][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.993876][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  388.009142][ T5834] Bluetooth: hci4: command tx timeout
[  388.700547][T18145] netlink: 'syz.2.3104': attribute type 1 has an invalid length.
[  388.711843][T18145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3104'.
[  389.713182][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'.
[  389.724559][T18140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3104'.
[  389.734390][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'.
[  389.746017][T18140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3104'.
[  389.826573][T18137] wlan1 speed is unknown, defaulting to 1000
[  389.867962][T18121] wlan1 speed is unknown, defaulting to 1000
[  389.879914][T18147] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  389.893690][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'.
[  389.956738][T18149] bond1: option broadcast_neighbor: invalid value (30)
[  389.968593][T18149] bond1 (unregistering): Released all slaves
[  390.036272][   T77] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.047638][   T77] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.083519][ T5829] Bluetooth: hci0: command tx timeout
[  390.085020][ T5834] Bluetooth: hci4: command tx timeout
[  390.143293][   T77] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.158272][   T77] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.233409][   T77] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.243302][   T77] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.348631][   T77] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.360973][   T77] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.385986][T18164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.393850][T18164] syzkaller0: entered promiscuous mode
[  390.399337][T18164] syzkaller0: entered allmulticast mode
[  390.410528][T18163] tipc: Resetting bearer <eth:syzkaller0>
[  390.430577][T18163] tipc: Disabling bearer <eth:syzkaller0>
[  390.608087][T18166] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  390.663913][   T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.713437][   T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.782998][ T9046] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.793077][   T77] bridge_slave_1: left allmulticast mode
[  390.798787][   T77] bridge_slave_1: left promiscuous mode
[  390.806147][   T77] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.816056][   T77] bridge_slave_0: left allmulticast mode
[  390.822548][   T77] bridge_slave_0: left promiscuous mode
[  390.829149][   T77] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.165308][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'.
[  391.223764][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'.
[  392.111891][   T77] dvmrp0 (unregistering): left allmulticast mode
[  392.161519][ T5834] Bluetooth: hci0: command tx timeout
[  392.434194][   T77] team0: Port device bridge6 removed
[  392.475583][   T77] bond3 (unregistering): (slave bridge7): Releasing backup interface
[  392.484126][   T77] bridge7 (unregistering): left promiscuous mode
[  392.629337][   T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.639461][   T77] bond_slave_0: left promiscuous mode
[  392.646377][   T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.656048][   T77] bond_slave_1: left promiscuous mode
[  392.664576][   T77] bond0 (unregistering): Released all slaves
[  392.675110][   T77] bond1 (unregistering): Released all slaves
[  392.687564][   T77] bond2 (unregistering): Released all slaves
[  392.703264][   T77] bond3 (unregistering): Released all slaves
[  392.716086][   T77] bond4 (unregistering): Released all slaves
[  392.737285][   T77] bond5 (unregistering): (slave batadv1): Releasing active interface
[  392.748038][   T77] bond5 (unregistering): Released all slaves
[  392.762577][   T77] bond6 (unregistering): (slave veth7): Releasing active interface
[  392.774267][   T77] bond6 (unregistering): (slave veth9): Releasing active interface
[  392.783903][   T77] bond6 (unregistering): Released all slaves
[  392.800518][   T77] bond7 (unregistering): Released all slaves
[  392.819265][ T9046] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  392.977746][T18182] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  393.056993][T18121] chnl_net:caif_netlink_parms(): no params data found
[  393.107110][   T77] tipc: Left network mode
[  393.212560][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'.
[  393.377128][T18196] bond1: option ad_actor_sys_prio: invalid value (0)
[  393.387578][T18196] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  393.430748][T18196] bond1 (unregistering): Released all slaves
[  393.554159][T18210] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  393.823082][T18121] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.830803][T18121] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.838716][T18121] bridge_slave_0: entered allmulticast mode
[  393.849042][T18121] bridge_slave_0: entered promiscuous mode
[  393.858317][T18214] wlan1 speed is unknown, defaulting to 1000
[  393.870002][T18121] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.891426][T18121] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.901410][T18121] bridge_slave_1: entered allmulticast mode
[  393.908542][T18121] bridge_slave_1: entered promiscuous mode
[  394.007668][T18121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.032248][T18121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.143710][T18121] team0: Port device team_slave_0 added
[  394.159609][T18121] team0: Port device team_slave_1 added
[  394.167149][T18233] netlink: 'syz.2.3122': attribute type 1 has an invalid length.
[  394.241582][ T5834] Bluetooth: hci0: command tx timeout
[  394.343584][T18121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.360904][T18121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.389561][T18121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.423248][T18121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.430295][T18121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.457390][T18121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.645555][T18121] hsr_slave_0: entered promiscuous mode
[  394.665449][T18121] hsr_slave_1: entered promiscuous mode
[  394.677823][T18246] netlink: 'syz.3.3123': attribute type 10 has an invalid length.
[  394.688250][T18121] debugfs: 'hsr0' already exists in 'hsr'
[  394.705439][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3123'.
[  394.721709][T18121] Cannot create hsr debugfs directory
[  394.831735][T18251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'.
[  394.924807][T18255] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  394.963230][T18246] team0: Port device geneve0 added
[  395.050107][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3126'.
[  395.071385][T18258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3126'.
[  395.558726][T18273] can: request_module (can-proto-0) failed.
[  395.566648][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'.
[  395.576883][   T77] batadv0: left promiscuous mode
[  395.579713][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  395.594997][   T77] hsr_slave_0: left promiscuous mode
[  395.600790][   T77] hsr_slave_1: left promiscuous mode
[  395.610276][   T77] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.618566][   T77] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.709452][   T77] pim6reg (unregistering): left allmulticast mode
[  395.837557][   T77] team0 (unregistering): Port device team_slave_1 removed
[  395.857614][   T77] team0 (unregistering): Port device team_slave_0 removed
[  395.987900][T18276] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  395.999200][T18277] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.188753][T18290] Cannot find add_set index 0 as target
[  396.322301][ T5834] Bluetooth: hci0: command tx timeout
[  396.426515][T18306] netlink: 'syz.0.3134': attribute type 11 has an invalid length.
[  396.439189][T18121] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.528314][T18296] syzkaller1: entered promiscuous mode
[  396.572144][T18296] syzkaller1: entered allmulticast mode
[  396.593965][T18303] wlan1 speed is unknown, defaulting to 1000
[  396.699980][T18121] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.898371][T18121] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.019064][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3138'.
[  397.116964][   T77] IPVS: stop unused estimator thread 0...
[  397.216480][T18121] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.240935][T18332] bond0: (slave rose0): Releasing backup interface
[  397.281861][T18341] tipc: Started in network mode
[  397.287132][T18341] tipc: Node identity 5209fb02148a, cluster identity 4711
[  397.295416][T18341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.328242][T18334] syzkaller0: entered promiscuous mode
[  397.340085][T18334] syzkaller0: entered allmulticast mode
[  397.395425][T18334] tipc: Resetting bearer <eth:syzkaller0>
[  397.438497][T18333] tipc: Resetting bearer <eth:syzkaller0>
[  397.459444][T18333] tipc: Disabling bearer <eth:syzkaller0>
[  397.565693][T18121] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  397.611811][T18121] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  397.690488][T18121] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  397.775390][T18121] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  397.965171][T18372] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29232
[  397.973722][T18372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  397.981845][T18372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  398.004792][T18376] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  398.239085][T18121] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.292831][T18121] 8021q: adding VLAN 0 to HW filter on device team0
[  398.338347][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.345558][ T8999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.404680][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.411898][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.426936][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'.
[  398.461194][T18399] vlan2: entered promiscuous mode
[  398.468521][T18399] bridge0: entered promiscuous mode
[  398.558181][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3154'.
[  398.867279][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'.
[  398.875751][T18121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.896060][T18431] netlink: 4716 bytes leftover after parsing attributes in process `syz.2.3157'.
[  399.009353][T18121] veth0_vlan: entered promiscuous mode
[  399.063805][T18121] veth1_vlan: entered promiscuous mode
[  399.164034][T18121] veth0_macvtap: entered promiscuous mode
[  399.182755][T18121] veth1_macvtap: entered promiscuous mode
[  399.205919][T18121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.248386][T18121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.283684][ T9040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.300883][ T9040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.339029][T18448] bridge10: entered promiscuous mode
[  399.361603][ T9040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.372478][ T9040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.433567][T18449] syzkaller0: entered promiscuous mode
[  399.463115][T18449] syzkaller0: entered allmulticast mode
[  399.504591][T18455] netlink: 'syz.4.3163': attribute type 12 has an invalid length.
[  399.514291][T18455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3163'.
[  401.394099][T18401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.545659][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.578517][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.647489][T18532] netlink: 'syz.4.3164': attribute type 11 has an invalid length.
[  401.655841][T18532] netlink: 'syz.4.3164': attribute type 23 has an invalid length.
[  401.665994][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.699325][T18532] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3164'.
[  401.708590][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.019050][T18552] gre1: entered allmulticast mode
[  402.065308][T18556] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3175'.
[  402.212491][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  402.227033][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  402.248159][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  402.271663][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  402.284420][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  402.334318][T18563] wlan1 speed is unknown, defaulting to 1000
[  402.405420][T18570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3178'.
[  402.453168][T18571] wlan1 speed is unknown, defaulting to 1000
[  402.460178][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'.
[  402.592507][   T30] audit: type=1800 audit(1771215656.023:13): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3181" name="blkio.bfq.time_recursive" dev="tmpfs" ino=181 res=0 errno=0
[  402.653854][T18580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.706115][T18580] syzkaller0: entered promiscuous mode
[  402.715832][T18580] syzkaller0: entered allmulticast mode
[  402.744437][T18582] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  402.767193][T18580] tipc: Resetting bearer <eth:syzkaller0>
[  402.774942][T18579] tipc: Resetting bearer <eth:syzkaller0>
[  402.852294][T18579] tipc: Disabling bearer <eth:syzkaller0>
[  402.923775][T18584] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3183'.
[  402.971926][T18584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3183'.
[  403.062721][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3186'.
[  403.081685][T18592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3186'.
[  403.090781][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3186'.
[  403.320177][T18563] chnl_net:caif_netlink_parms(): no params data found
[  403.394174][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'.
[  403.511945][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'.
[  403.582811][T18617] 8021q: adding VLAN 0 to HW filter on device bond1
[  403.626606][T18563] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.633968][T18563] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.641804][T18563] bridge_slave_0: entered allmulticast mode
[  403.652905][T18563] bridge_slave_0: entered promiscuous mode
[  403.680204][T18563] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.694941][T18563] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.710978][T18563] bridge_slave_1: entered allmulticast mode
[  403.722347][T18563] bridge_slave_1: entered promiscuous mode
[  403.765771][T18563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.827824][T18563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.879888][T18563] team0: Port device team_slave_0 added
[  403.892703][T18563] team0: Port device team_slave_1 added
[  403.979487][T18563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.987239][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.024319][T18563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.056329][T18563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.076056][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.104575][T18563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.248047][T18630] netlink: 'syz.2.3194': attribute type 1 has an invalid length.
[  404.286439][T18563] hsr_slave_0: entered promiscuous mode
[  404.295389][T18563] hsr_slave_1: entered promiscuous mode
[  404.302593][T18563] debugfs: 'hsr0' already exists in 'hsr'
[  404.308526][T18563] Cannot create hsr debugfs directory
[  404.328657][ T5834] Bluetooth: hci1: command tx timeout
[  404.790085][T18643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  404.984653][T18655] openvswitch: netlink: Flow actions attr not present in new flow.
[  405.204936][T18664] tipc: Started in network mode
[  405.222753][T18664] tipc: Node identity 5e473dcdd646, cluster identity 4711
[  405.251282][T18664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.308548][T18665] syzkaller0: MTU too low for tipc bearer
[  405.330040][T18665] tipc: Disabling bearer <eth:syzkaller0>
[  405.425483][T18680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.496494][T18677] pim6reg1: entered allmulticast mode
[  405.508701][T18563] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  405.526850][T18563] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  405.539944][T18563] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  405.552537][T18563] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  405.777958][T18687] geneve0: entered promiscuous mode
[  405.879744][T18693] wlan1 speed is unknown, defaulting to 1000
[  406.045072][T18563] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.099176][T18563] 8021q: adding VLAN 0 to HW filter on device team0
[  406.126694][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.133933][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.188532][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.195876][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.335045][T18563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  406.402780][ T5834] Bluetooth: hci1: command tx timeout
[  406.614584][T18717] netlink: 'syz.2.3219': attribute type 9 has an invalid length.
[  406.865413][T18563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.096852][T18734] bond1: (slave bond_slave_1): Device is not our slave
[  407.107253][T18734] bond1: option active_slave: invalid value (bond_slave_1)
[  407.126788][T18734] bond1 (unregistering): Released all slaves
[  407.704633][T18563] veth0_vlan: entered promiscuous mode
[  407.728330][T18563] veth1_vlan: entered promiscuous mode
[  407.790030][T18563] veth0_macvtap: entered promiscuous mode
[  407.800882][T18563] veth1_macvtap: entered promiscuous mode
[  407.822411][T18563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.838303][T18563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.023634][ T9046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.033732][ T9046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.111324][ T9046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.158291][ T9046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.212141][ T9046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.219985][ T9046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.311714][ T9046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.320627][ T9046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.482053][ T5834] Bluetooth: hci1: command tx timeout
[  408.623221][T18770] __nla_validate_parse: 5 callbacks suppressed
[  408.623240][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  408.696883][T18626] Set syz1 is full, maxelem 65536 reached
[  408.754858][T18774] IPVS: set_ctl: invalid protocol: 44 32.0.1.0:9917
[  409.051440][T18793] wlan1 speed is unknown, defaulting to 1000
[  409.116957][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'.
[  409.212158][T18804] netlink: 'syz.1.3236': attribute type 2 has an invalid length.
[  409.217121][T18797] wlan1 speed is unknown, defaulting to 1000
[  409.344736][T18804] hmac(sha224: entered promiscuous mode
[  409.422390][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'.
[  409.856737][T18839] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3242'.
[  409.869875][T18839] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3242'.
[  409.881832][T18839] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3242'.
[  410.124014][T18850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3245'.
[  410.295645][T18858] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3247'.
[  410.569031][ T5834] Bluetooth: hci1: command tx timeout
[  411.038382][T18884] team0 (unregistering): Port device team_slave_0 removed
[  411.056874][T18884] team0 (unregistering): Port device team_slave_1 removed
[  411.347233][T18886] netlink: set zone limit has 4 unknown bytes
[  411.409852][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'.
[  411.436777][T18895] netlink: 'syz.2.3257': attribute type 1 has an invalid length.
[  411.450516][T18889] netlink: 165240 bytes leftover after parsing attributes in process `syz.1.3255'.
[  411.452012][T18896] netlink: 'syz.3.3259': attribute type 11 has an invalid length.
[  411.480381][T18889] bridge1: entered promiscuous mode
[  411.489219][T18889] bridge1: entered allmulticast mode
[  411.536334][T18895] 8021q: adding VLAN 0 to HW filter on device bond1
[  411.578191][T18899] bond1: (slave bridge1): making interface the new active one
[  411.590349][T18899] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  411.624728][T18903] netlink: 'syz.0.3260': attribute type 1 has an invalid length.
[  411.875313][T18922] wlan1 speed is unknown, defaulting to 1000
[  412.064577][T18931] netlink: 'syz.2.3268': attribute type 1 has an invalid length.
[  412.094803][T18931] 8021q: adding VLAN 0 to HW filter on device bond2
[  412.110498][T18931] bond2 (unregistering): Released all slaves
[  412.512777][T18948] Unsupported ieee802154 address type: 0
[  413.017987][ T9043] bond0: (slave bond_slave_0): interface is now down
[  413.026094][T18980] bond0: option arp_validate: invalid value (55553)
[  413.035319][ T9043] bond0: (slave bond_slave_1): interface is now down
[  413.044591][T18981] bond0: option arp_validate: invalid value (55553)
[  413.063086][ T9043] bond0: (slave bond_slave_0): interface is now down
[  413.070003][ T9043] bond0: (slave bond_slave_1): interface is now down
[  413.085346][ T9043] bond0: now running without any active interface!
[  413.416182][T19015] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  414.707196][T19088] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  414.741677][T19086] bond1: entered promiscuous mode
[  414.772460][T19086] 8021q: VLANs not supported on ip6_vti0
[  415.012451][T19104] wlan1 speed is unknown, defaulting to 1000
[  415.438181][T19128] netlink: 'syz.2.3313': attribute type 10 has an invalid length.
[  415.468917][T19128] team0: Port device dummy0 added
[  415.487960][T19128] netlink: 'syz.2.3313': attribute type 10 has an invalid length.
[  415.543096][T19128] team0: Port device dummy0 removed
[  415.562971][T19128] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  415.589555][T19129] __nla_validate_parse: 6 callbacks suppressed
[  415.589574][T19129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3312'.
[  415.608501][T19129] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.617948][T19129] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.760272][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'.
[  416.150996][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3318'.
[  416.502225][T19164] syzkaller1: entered promiscuous mode
[  416.507914][T19164] syzkaller1: entered allmulticast mode
[  416.583883][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3323'.
[  417.127477][T19187] wlan1 speed is unknown, defaulting to 1000
[  417.663360][T19192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3329'.
[  417.892142][T19204] syzkaller0: entered promiscuous mode
[  417.907406][T19204] syzkaller0: entered allmulticast mode
[  418.022005][T19215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3334'.
[  418.556340][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'.
[  418.592282][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3341'.
[  418.678606][T19246] wlan1 speed is unknown, defaulting to 1000
[  418.711480][T19251] Unsupported ieee802154 address type: 0
[  418.756995][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3344'.
[  418.944825][T19262] tap0: tun_chr_ioctl cmd 2148553947
[  419.156573][T19271] netlink: 'syz.3.3346': attribute type 1 has an invalid length.
[  419.185773][T19271] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3346'.
[  419.898328][T19289] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.031808][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.052120][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.066833][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.120214][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.174469][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.238599][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.278795][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.312035][T19290] netlink: 'syz.0.3351': attribute type 29 has an invalid length.
[  420.856410][T19316] __nla_validate_parse: 2 callbacks suppressed
[  420.856428][T19316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3356'.
[  420.887256][T19316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3356'.
[  421.014272][T19319] wlan1 speed is unknown, defaulting to 1000
[  421.331628][T19337] block nbd1: server does not support multiple connections per device.
[  421.351247][T19337] block nbd1: shutting down sockets
[  421.559463][T19348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3363'.
[  421.573069][T19346] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  421.714523][T19348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.804063][T19348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.895241][T19348] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  421.944275][T19348] bond0 (unregistering): Released all slaves
[  422.701917][T19368] bond1: entered promiscuous mode
[  422.713905][T19368] 8021q: adding VLAN 0 to HW filter on device bond1
[  422.749470][T19369] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  422.912687][T19365] Cannot find add_set index 1 as target
[  423.255616][T19386] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  423.355708][T19386] tipc: Disabling bearer <eth:syzkaller0>
[  423.548452][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'.
[  423.590434][T19402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3375'.
[  423.635025][T19398] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  423.998899][T19418] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3377'.
[  424.367576][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3380'.
[  424.387352][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3380'.
[  424.448152][T19428] ip6gretap1: entered allmulticast mode
[  425.241907][T19459] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  425.404582][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'.
[  425.521482][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout
[  425.631594][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'.
[  425.662693][T19473] syzkaller1: entered promiscuous mode
[  425.671630][T19473] syzkaller1: entered allmulticast mode
[  426.272154][T19249] Set syz1 is full, maxelem 65536 reached
[  426.353981][T19501] syzkaller0: entered promiscuous mode
[  426.360990][T19501] syzkaller0: entered allmulticast mode
[  426.512493][T19504] 8021q: VLANs not supported on nlmon0
[  427.316314][T19536] Bluetooth: MGMT ver 1.23
[  427.326518][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'.
[  427.365737][T19536] : entered promiscuous mode
[  427.384868][T19537] wlan1 speed is unknown, defaulting to 1000
[  427.492727][T19540] xt_hashlimit: size too large, truncated to 1048576
[  427.825568][T19551] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  427.957287][T19554] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) !
[  427.969423][T19554] syzkaller0: entered promiscuous mode
[  427.979642][T19554] syzkaller0: entered allmulticast mode
[  428.021492][T19555] tipc: Started in network mode
[  428.026392][T19555] tipc: Node identity a6fb05a3c8e2, cluster identity 4711
[  428.092964][T19555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.138400][T19558] vlan2: entered promiscuous mode
[  428.162276][T19558] bridge0: entered promiscuous mode
[  428.209239][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3410'.
[  428.236731][T19564] tipc: Resetting bearer <eth:syzkaller0>
[  428.257427][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3410'.
[  428.350492][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  428.409173][T19553] tipc: Disabling bearer <eth:syzkaller0>
[  428.684396][T19592] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3419'.
[  428.783458][T19592] ip6gretap0: entered promiscuous mode
[  428.791768][T19592] macsec1: entered promiscuous mode
[  428.807026][T19592] macsec1: entered allmulticast mode
[  428.812864][T19592] ip6gretap0: entered allmulticast mode
[  428.825817][T19592] ip6gretap0: left allmulticast mode
[  428.855232][T19592] ip6gretap0: left promiscuous mode
[  428.980868][T19597] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3420'.
[  429.007000][T19597] IPv6: sit1: Disabled Multicast RS
[  429.017545][T19597] sit1: entered allmulticast mode
[  429.044754][T19603] syzkaller0: entered promiscuous mode
[  429.051823][T19603] syzkaller0: entered allmulticast mode
[  429.369881][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'.
[  429.392160][T19610] xt_CT: You must specify a L4 protocol and not use inversions on it
[  429.454735][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'.
[  429.513018][T19618] validate_nla: 74 callbacks suppressed
[  429.513034][T19618] netlink: 'syz.4.3426': attribute type 1 has an invalid length.
[  429.650871][T19625] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  429.674789][T19625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3427'.
[  429.828721][T19629] vlan2: entered promiscuous mode
[  429.851746][T19629] bridge0: entered promiscuous mode
[  429.895289][   T77] bridge_slave_0: left allmulticast mode
[  429.905412][   T77] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.905492][T19633] netlink: 'syz.3.3431': attribute type 1 has an invalid length.
[  429.985416][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3431'.
[  430.154980][   T77] bond1 (unregistering): (slave gretap1): Releasing active interface
[  430.195361][   T77] bond3 (unregistering): (slave geneve3): Releasing active interface
[  430.220738][   T77] bridge0 (unregistering): left allmulticast mode
[  430.490977][   T77] tipc: Disabling bearer <eth:syzkaller0>
[  430.566146][   T77] bond1 (unregistering): Released all slaves
[  430.579657][   T77] bond2 (unregistering): Released all slaves
[  430.593129][   T77] bond3 (unregistering): Released all slaves
[  430.609203][   T77] bond0 (unregistering): Released all slaves
[  430.630483][   T77] bond4 (unregistering): Released all slaves
[  430.654185][   T77] bond5 (unregistering): (slave bond6): Releasing backup interface
[  430.664053][   T77] bond6 (unregistering): left promiscuous mode
[  430.670859][   T77] bond5 (unregistering): Released all slaves
[  430.685154][   T77] bond6 (unregistering): Released all slaves
[  430.788266][T19633] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  430.790828][   T77] : left promiscuous mode
[  430.868124][T19653] netlink: 'syz.3.3436': attribute type 2 has an invalid length.
[  430.878540][T19647] 8021q: VLANs not supported on vxcan0
[  430.897797][T19645] 8021q: VLANs not supported on vxcan0
[  430.914466][   T77] : left promiscuous mode
[  431.043188][T19657] syzkaller0: entered promiscuous mode
[  431.071246][T19657] syzkaller0: entered allmulticast mode
[  431.106795][T19653] : entered promiscuous mode
[  431.120880][   T77] tipc: Left network mode
[  431.279904][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3441'.
[  431.289449][T19669] tipc: Started in network mode
[  431.296104][T19669] tipc: Node identity , cluster identity 4711
[  431.302716][T19669] tipc: Failed to obtain node identity
[  431.310580][T19669] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  431.334289][T19669] Bluetooth: MGMT ver 1.23
[  431.338768][T19669] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  431.411557][T19678] syzkaller1: entered promiscuous mode
[  431.417067][T19678] syzkaller1: entered allmulticast mode
[  431.487173][T19686] netlink: 'syz.4.3444': attribute type 9 has an invalid length.
[  431.700524][T19695] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜�%àï÷åQÍ0@æjÛÈÊ«–ÓÞ}³£
[  431.774793][T19697] bond0: entered promiscuous mode
[  431.798778][T19697] bond_slave_0: entered promiscuous mode
[  431.805858][T19697] bond_slave_1: entered promiscuous mode
[  431.813591][T19697] gretap0: entered promiscuous mode
[  431.819780][T19697] hsr1: entered promiscuous mode
[  431.850227][T19699] bond0: entered promiscuous mode
[  431.861574][T19699] bond_slave_0: entered promiscuous mode
[  431.872060][T19699] bond_slave_1: entered promiscuous mode
[  431.884273][T19698] bond0: left promiscuous mode
[  431.897135][T19698] bond_slave_0: left promiscuous mode
[  431.912380][T19698] bond_slave_1: left promiscuous mode
[  431.948927][T19703] syzkaller1: entered promiscuous mode
[  431.978279][T19703] syzkaller1: entered allmulticast mode
[  432.225436][T19715] wlan1 speed is unknown, defaulting to 1000
[  432.412549][T19725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.257838][T19760] __nla_validate_parse: 4 callbacks suppressed
[  433.257855][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'.
[  433.269720][T19757] netlink: 'syz.3.3462': attribute type 1 has an invalid length.
[  433.394330][T19763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3462'.
[  433.409612][ T9040] smc: removing ib device syû
[  433.571639][T19772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.805380][T19785] netlink: 'syz.3.3470': attribute type 10 has an invalid length.
[  433.833747][T19785] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3470'.
[  433.878713][T19785] bond0: entered promiscuous mode
[  433.899865][T19785] bond_slave_0: entered promiscuous mode
[  433.911469][T19785] bond_slave_1: entered promiscuous mode
[  433.947082][T19785] bridge0: port 3(bond0) entered blocking state
[  433.985923][T19785] bridge0: port 3(bond0) entered disabled state
[  434.017137][T19785] bond0: entered allmulticast mode
[  434.048889][T19785] bond_slave_0: entered allmulticast mode
[  434.055338][T19785] bond_slave_1: entered allmulticast mode
[  434.099018][T19785] bridge0: port 3(bond0) entered blocking state
[  434.105443][T19785] bridge0: port 3(bond0) entered forwarding state
[  434.143044][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3473'.
[  434.145216][T19791] ip6gretap0: entered promiscuous mode
[  434.379350][T19794] vlan2: entered promiscuous mode
[  434.385068][T19794] dummy0: entered promiscuous mode
[  434.683484][T19824] netlink: 'syz.0.3477': attribute type 10 has an invalid length.
[  434.708168][T19824] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  434.748935][T19824] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  434.779958][T19824] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  435.053851][T19826] wlan1 speed is unknown, defaulting to 1000
[  435.053871][T19838] lo: entered allmulticast mode
[  435.108402][T19838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  435.757994][T19850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3484'.
[  436.106637][T19866] netlink: 840 bytes leftover after parsing attributes in process `syz.2.3488'.
[  436.247420][T19870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3491'.
[  436.279675][   T77] IPVS: stop unused estimator thread 0...
[  436.352948][T19868] wlan1 speed is unknown, defaulting to 1000
[  436.729399][T19889] netlink: 'syz.0.3496': attribute type 10 has an invalid length.
[  436.794061][T19904] netlink: 'syz.4.3498': attribute type 2 has an invalid length.
[  436.831830][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'.
[  436.873459][T19899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.873989][T19909] netlink: 'syz.3.3500': attribute type 10 has an invalid length.
[  436.914136][T19902] syzkaller0: entered promiscuous mode
[  436.923797][T19902] syzkaller0: entered allmulticast mode
[  436.946144][T19909] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  436.957241][T19909] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  436.970928][T19909] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  437.025388][T19905] netlink: 'syz.1.3499': attribute type 13 has an invalid length.
[  437.057701][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'.
[  437.087470][T19899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.112860][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'.
[  437.124684][T19876] wlan1 speed is unknown, defaulting to 1000
[  437.220572][T19902] tipc: Started in network mode
[  437.229272][T19902] tipc: Node identity 3a5ead62337b, cluster identity 4711
[  437.236851][T19902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.294652][ T9043] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.317662][ T9043] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.395593][T19899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.433745][T19901] tipc: Resetting bearer <eth:syzkaller0>
[  437.456615][T19901] tipc: Disabling bearer <eth:syzkaller0>
[  437.479945][ T9043] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.489417][ T9043] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.652263][T19899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.941569][T19938] netlink: 'syz.4.3504': attribute type 25 has an invalid length.
[  438.012974][ T1137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.059959][ T9043] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.089908][ T9043] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.196886][ T1137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.428973][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'.
[  438.700053][T19960] syzkaller0: entered promiscuous mode
[  438.714578][T19960] syzkaller0: entered allmulticast mode
[  438.994079][T19982] gre1: entered allmulticast mode
[  439.079935][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'.
[  439.123659][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'.
[  439.144686][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'.
[  439.174300][T19996] netlink: 'syz.3.3519': attribute type 1 has an invalid length.
[  439.183936][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'.
[  439.198582][T19996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.379875][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3522'.
[  439.399266][T20010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3522'.
[  439.447133][T20010] netlink: 'syz.3.3522': attribute type 11 has an invalid length.
[  439.509312][T20013] netlink: 644 bytes leftover after parsing attributes in process `syz.4.3523'.
[  439.617539][T20013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.644225][T20031] netlink: 'syz.3.3525': attribute type 4 has an invalid length.
[  439.672518][T20033] netlink: 'syz.3.3525': attribute type 4 has an invalid length.
[  439.723127][T20040] netlink: 'syz.2.3528': attribute type 8 has an invalid length.
[  439.725233][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'.
[  439.740313][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'.
[  439.757957][T20039] netlink: 'syz.2.3528': attribute type 8 has an invalid length.
[  439.848876][T20039] xfrm1: entered allmulticast mode
[  439.919149][T20043] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  439.950702][T20053] netlink: 'syz.1.3533': attribute type 5 has an invalid length.
[  440.025057][T20040] nbd1: detected capacity change from 0 to 127
[  440.035092][T17078] block nbd1: Send control failed (result -32)
[  440.035264][ T5834] block nbd1: Receive control failed (result -32)
[  440.043825][T17078] block nbd1: Request send failed, requeueing
[  440.106396][ T2238] block nbd1: Dead connection, failed to find a fallback
[  440.118141][ T2238] block nbd1: shutting down sockets
[  440.124792][ T2238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.136730][ T2238] Buffer I/O error on dev nbd1, logical block 0, async page read
[  440.145515][T17078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.156406][T17078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  440.167105][T17078] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.177316][T17078] Buffer I/O error on dev nbd1, logical block 2, async page read
[  440.186691][T17078] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.196632][T17078] Buffer I/O error on dev nbd1, logical block 3, async page read
[  440.205162][T17078] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.215258][T17078] Buffer I/O error on dev nbd1, logical block 0, async page read
[  440.223968][T17078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.241702][T17078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  440.249513][T17078] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.267939][T17078] Buffer I/O error on dev nbd1, logical block 2, async page read
[  440.276279][T17078] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.287902][T17078] Buffer I/O error on dev nbd1, logical block 3, async page read
[  440.296397][T17078] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.309255][T17078] Buffer I/O error on dev nbd1, logical block 0, async page read
[  440.318110][T17078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  440.329119][T17078] Buffer I/O error on dev nbd1, logical block 1, async page read
[  440.337982][T17078] ldm_validate_partition_table(): Disk read failed.
[  440.345989][T17078] Dev nbd1: unable to read RDB block 0
[  440.352801][T17078]  nbd1: unable to read partition table
[  440.394699][T17078] ldm_validate_partition_table(): Disk read failed.
[  440.405439][T17078] Dev nbd1: unable to read RDB block 0
[  440.415119][T17078]  nbd1: unable to read partition table
[  440.466574][T20076] wlan1 speed is unknown, defaulting to 1000
[  440.509460][T20085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.800512][T20051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.996227][T20116] wg0: Caught tx_queue_len zero misconfig
[  443.018507][T20116] netlink: 'syz.1.3548': attribute type 4 has an invalid length.
[  443.065865][T20120] tipc: Started in network mode
[  443.073999][T20120] tipc: Node identity eac197ce920a, cluster identity 4711
[  443.101344][T20120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.123840][T20120] syzkaller0: entered promiscuous mode
[  443.129352][T20120] syzkaller0: entered allmulticast mode
[  443.200509][T20119] tipc: Resetting bearer <eth:syzkaller0>
[  443.237919][T20119] tipc: Disabling bearer <eth:syzkaller0>
[  443.329018][T20139] ip6gretap1: entered promiscuous mode
[  443.338205][T20139] ip6gretap1: entered allmulticast mode
[  443.496233][T20154] __nla_validate_parse: 13 callbacks suppressed
[  443.496253][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'.
[  443.621381][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'.
[  443.668642][T20156] vlan3: entered promiscuous mode
[  443.728180][T20156] netlink: 'syz.0.3561': attribute type 11 has an invalid length.
[  443.736173][T20156] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3561'.
[  443.863592][T20165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.099097][T20159] delete_channel: no stack
[  444.110296][T20178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.125350][T20178] syzkaller0: entered promiscuous mode
[  444.128696][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'.
[  444.131386][T20178] syzkaller0: entered allmulticast mode
[  444.183179][T20178] wlan0: mtu less than device minimum
[  444.205425][T20177] tipc: Resetting bearer <eth:syzkaller0>
[  444.235649][T20177] tipc: Disabling bearer <eth:syzkaller0>
[  444.264304][T20184] netlink: 'syz.3.3572': attribute type 12 has an invalid length.
[  444.275627][T20184] netlink: 'syz.3.3572': attribute type 29 has an invalid length.
[  444.286037][T20184] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3572'.
[  444.295411][T20184] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3572'.
[  445.281964][ T5834] Bluetooth: hci1: command tx timeout
[  445.304039][T20232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3584'.
[  445.559532][T20258] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  445.603596][T20261] wlan1 speed is unknown, defaulting to 1000
[  445.648035][T20264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.656822][T20264] syzkaller0: entered promiscuous mode
[  445.676809][T20264] syzkaller0: entered allmulticast mode
[  445.817218][T20280] tipc: Resetting bearer <eth:syzkaller0>
[  445.902030][T20286] ip6t_REJECT: ECHOREPLY is not supported
[  446.059661][T20300] netlink: 'syz.1.3600': attribute type 1 has an invalid length.
[  446.092789][T20300] 8021q: adding VLAN 0 to HW filter on device bond3
[  446.136688][T20300] bond3: (slave veth5): Enslaving as an active interface with a down link
[  446.137255][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'.
[  446.162222][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'.
[  446.189553][T20303] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode
[  446.199765][T20303] macvtap1: entered promiscuous mode
[  446.215621][T20305] bond_slave_0: entered promiscuous mode
[  446.221774][T20305] bond_slave_1: entered promiscuous mode
[  446.235769][T20305] macvtap1: entered promiscuous mode
[  446.254569][T20305] bond0: entered promiscuous mode
[  446.266136][T20305] macvtap1: entered allmulticast mode
[  446.276704][T20305] bond0: entered allmulticast mode
[  446.291951][T20305] bond_slave_0: entered allmulticast mode
[  446.299366][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'.
[  446.308023][T20305] bond_slave_1: entered allmulticast mode
[  446.319816][T20305] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  446.350318][T20306] bond0: left allmulticast mode
[  446.356077][T20306] bond_slave_0: left allmulticast mode
[  446.371947][T20306] bond_slave_1: left allmulticast mode
[  446.377543][T20306] bond0: left promiscuous mode
[  446.383866][T20306] bond_slave_0: left promiscuous mode
[  446.389672][T20306] bond_slave_1: left promiscuous mode
[  446.415946][T20260] tipc: Resetting bearer <eth:syzkaller0>
[  446.454023][T20260] tipc: Disabling bearer <eth:syzkaller0>
[  446.581798][T20326] netlink: 'syz.4.3605': attribute type 13 has an invalid length.
[  446.599993][T20326] netlink: 'syz.4.3605': attribute type 17 has an invalid length.
[  446.637077][   T30] audit: type=1800 audit(1771215700.063:14): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3607" name="blkio.bfq.sectors" dev="tmpfs" ino=734 res=0 errno=0
[  446.679833][T20330] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  446.740316][T20326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  447.019950][T20348] syzkaller0: entered promiscuous mode
[  447.038143][T20348] syzkaller0: entered allmulticast mode
[  447.103594][T20358] wlan1 speed is unknown, defaulting to 1000
[  447.261242][T20368] netlink: 'syz.2.3617': attribute type 21 has an invalid length.
[  447.282370][T20368] netlink: 'syz.2.3617': attribute type 22 has an invalid length.
[  447.290230][T20368] netlink: 'syz.2.3617': attribute type 23 has an invalid length.
[  447.318838][T20368] netlink: 'syz.2.3617': attribute type 25 has an invalid length.
[  447.331811][T20372] netlink: 'syz.1.3619': attribute type 8 has an invalid length.
[  447.353921][T20368] netlink: 'syz.2.3617': attribute type 26 has an invalid length.
[  448.240457][T20417] netlink: 'syz.0.3628': attribute type 6 has an invalid length.
[  448.582731][T20440] __nla_validate_parse: 8 callbacks suppressed
[  448.582748][T20440] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3633'.
[  448.633256][T20440] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3633'.
[  448.797524][T20458] netlink: 424 bytes leftover after parsing attributes in process `syz.1.3635'.
[  448.817988][T20460] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  449.069082][T20479] wlan1 speed is unknown, defaulting to 1000
[  449.097690][T20482] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3641'.
[  449.108627][T20475] netlink: 4328 bytes leftover after parsing attributes in process `syz.0.3639'.
[  449.698083][T20509] bond2: option lacp_active: mode dependency failed, not supported in mode broadcast(3)
[  449.724185][T20509] bond2 (unregistering): Released all slaves
[  449.854895][T20519] veth0: entered promiscuous mode
[  449.875411][T20522] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  449.877357][T20519] veth0: left promiscuous mode
[  449.964676][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'.
[  450.097281][T20532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3655'.
[  450.109276][T20532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.120531][T20532] syzkaller0: entered promiscuous mode
[  450.126914][T20532] syzkaller0: entered allmulticast mode
[  450.192899][T20532] wlan1 speed is unknown, defaulting to 1000
[  450.235753][T20542] tipc: Resetting bearer <eth:syzkaller0>
[  450.258783][T20542] tipc: Disabling bearer <eth:syzkaller0>
[  450.438727][T20545] syzkaller1: entered promiscuous mode
[  450.444794][T20545] syzkaller1: entered allmulticast mode
[  450.585879][T20550] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3660'.
[  450.628577][T20551] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3659'.
[  450.639472][T20551] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3659'.
[  450.673561][T20548] �ÿ: renamed from bond_slave_0 (while UP)
[  450.853609][T20560] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  451.238368][T20587] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  451.786726][T20627] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  451.934856][T20642] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  452.029496][T20644] wlan1 speed is unknown, defaulting to 1000
[  453.112772][T20707] validate_nla: 2 callbacks suppressed
[  453.112790][T20707] netlink: 'syz.1.3703': attribute type 11 has an invalid length.
[  453.245098][T20711] netlink: 'syz.4.3705': attribute type 6 has an invalid length.
[  453.259045][T20714] netlink: 'syz.2.3706': attribute type 1 has an invalid length.
[  453.338307][T20714] 8021q: adding VLAN 0 to HW filter on device bond2
[  453.424847][T20720] bond2: (slave gretap1): making interface the new active one
[  453.470322][T20720] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  453.496545][T20727] netlink: 'syz.1.3710': attribute type 1 has an invalid length.
[  453.796131][T20714] bond2 (unregistering): (slave gretap1): Releasing active interface
[  453.813733][T20714] bond2 (unregistering): Released all slaves
[  453.844681][ T5834] Bluetooth: hci1: command 0x0401 tx timeout
[  453.892006][T20740] tunl0: Caught tx_queue_len zero misconfig
[  454.039547][T20760] netlink: 'syz.1.3715': attribute type 10 has an invalid length.
[  454.048107][T20760] __nla_validate_parse: 10 callbacks suppressed
[  454.048123][T20760] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3715'.
[  454.395214][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3720'.
[  454.529180][T20783] syzkaller0: entered promiscuous mode
[  454.610840][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'.
[  455.300477][T20840] netlink: 'syz.0.3732': attribute type 4 has an invalid length.
[  455.319831][T20840] netlink: 'syz.0.3732': attribute type 8 has an invalid length.
[  455.328452][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3731'.
[  455.328476][T20840] netlink: 'syz.0.3732': attribute type 3 has an invalid length.
[  455.348909][T20840] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3732'.
[  455.536927][T20834] hsr_slave_1 (unregistering): left promiscuous mode
[  455.567701][T20832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3730'.
[  455.586560][T20832] team0: No ports can be present during mode change
[  457.097555][T20871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3737'.
[  457.207757][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'.
[  457.341976][T20886] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3741'.
[  457.375088][T20889] IPv6: Can't replace route, no match found
[  457.614520][T20902] wlan1 speed is unknown, defaulting to 1000
[  457.728400][T20894] netlink: 'syz.3.3744': attribute type 1 has an invalid length.
[  458.572882][T20894] 8021q: adding VLAN 0 to HW filter on device bond1
[  458.617535][T20912] bond1: (slave geneve2): making interface the new active one
[  458.628601][T20912] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  458.659149][T20917] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3750'.
[  458.894032][T20924] bond0: left allmulticast mode
[  458.898926][T20924] bond_slave_0: left allmulticast mode
[  458.925936][T20924] bond_slave_1: left allmulticast mode
[  458.956476][T20924] bridge0: port 3(bond0) entered disabled state
[  459.034557][T20924] bridge_slave_0: left allmulticast mode
[  459.064593][T20924] bridge_slave_0: left promiscuous mode
[  459.080560][T20924] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.118390][T20924] bridge_slave_1: left allmulticast mode
[  459.125005][T20924] bridge_slave_1: left promiscuous mode
[  459.133589][T20924] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.152671][T20950] __nla_validate_parse: 3 callbacks suppressed
[  459.152690][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3758'.
[  459.169514][T20924] bond0: (slave bond_slave_0): Releasing backup interface
[  459.184184][T20924] bond_slave_0: left promiscuous mode
[  459.202879][T20924] bond0: (slave bond_slave_1): Releasing backup interface
[  459.213172][T20924] bond_slave_1: left promiscuous mode
[  459.242001][T20924] team0: Port device team_slave_0 removed
[  459.268467][T20924] team0: Port device team_slave_1 removed
[  459.277026][T20924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.285562][T20924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.296058][T20924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.304312][T20924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.313481][T20924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  459.479441][T20964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.495201][T20965] syzkaller0: entered promiscuous mode
[  459.500729][T20965] syzkaller0: entered allmulticast mode
[  459.559648][T20969] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  459.624610][T20965] tipc: Resetting bearer <eth:syzkaller0>
[  459.669376][T20965] tipc: Disabling bearer <eth:syzkaller0>
[  459.705905][T20979] netlink: del zone limit has 4 unknown bytes
[  459.760284][T20982] netlink: 'syz.1.3769': attribute type 89 has an invalid length.
[  459.791981][T20986] netlink: 'syz.3.3771': attribute type 11 has an invalid length.
[  459.832059][T20986] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3771'.
[  460.021527][T20998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3774'.
[  460.030634][T20998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3774'.
[  460.659207][T21039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3782'.
[  461.053068][T21052] netlink: 'syz.0.3784': attribute type 21 has an invalid length.
[  461.060917][T21052] IPv6: NLM_F_CREATE should be specified when creating new route
[  461.069473][T21052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  461.076736][T21052] IPv6: NLM_F_CREATE should be set when creating new route
[  461.084033][T21052] IPv6: NLM_F_CREATE should be set when creating new route
[  461.091298][T21052] IPv6: NLM_F_CREATE should be set when creating new route
[  475.554727][T17624] IPVS: starting estimator thread 0...
[  475.568080][T21067] netlink: 'syz.1.3792': attribute type 1 has an invalid length.
[  475.673278][T21075] IPVS: using max 34 ests per chain, 81600 per kthread
[  475.697799][T21067] vlan2: entered allmulticast mode
[  475.716400][T21067] bond4: entered allmulticast mode
[  475.962371][T21098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.978291][T21099] syzkaller0: entered promiscuous mode
[  475.990437][T21099] syzkaller0: entered allmulticast mode
[  476.026243][T21102] geneve3: entered promiscuous mode
[  476.033777][ T9001] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  476.047829][ T9001] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  476.067438][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'.
[  476.098457][T21098] tipc: Resetting bearer <eth:syzkaller0>
[  476.125165][ T9001] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  476.135643][ T9001] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  476.164961][T21097] tipc: Resetting bearer <eth:syzkaller0>
[  476.247935][T21097] tipc: Disabling bearer <eth:syzkaller0>
[  476.249526][T21116] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3806'.
[  476.269770][T21111] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  476.518848][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3810'.
[  476.696716][T21150] batadv_slave_0: entered promiscuous mode
[  476.733250][T21149] batadv_slave_0: left promiscuous mode
[  476.892321][T21159] wlan1 speed is unknown, defaulting to 1000
[  476.975623][T21174] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004
[  477.065880][T21177] syz_tun: entered allmulticast mode
[  477.875614][T21185] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  477.960435][T21195] netlink: 'syz.0.3827': attribute type 1 has an invalid length.
[  477.967982][T21196] netlink: 'syz.0.3827': attribute type 1 has an invalid length.
[  478.038251][T21200] netlink: 'syz.0.3828': attribute type 6 has an invalid length.
[  478.046827][T21200] netlink: 'syz.0.3828': attribute type 7 has an invalid length.
[  478.057266][T21200] netlink: 'syz.0.3828': attribute type 8 has an invalid length.
[  478.093567][T21200] bond2: invalid ARP target 0.0.0.0 specified for addition
[  478.101592][T21200] bond2: option arp_ip_target: invalid value (0)
[  478.158665][T21200] bond2 (unregistering): Released all slaves
[  478.293481][T21214] syz_tun: entered allmulticast mode
[  478.336447][T21212] wlan1 speed is unknown, defaulting to 1000
[  478.365063][T21210] dummy0: entered promiscuous mode
[  478.370295][T21210] macsec1: entered promiscuous mode
[  478.379117][T21218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3829'.
[  478.379293][T21210] macsec1: entered allmulticast mode
[  478.395295][T21210] dummy0: entered allmulticast mode
[  478.408313][T21210] dummy0: left allmulticast mode
[  478.414378][T21210] dummy0: left promiscuous mode
[  478.652005][T21228] syzkaller0: entered promiscuous mode
[  478.657657][T21228] syzkaller0: entered allmulticast mode
[  478.674741][T21229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3835'.
[  479.790773][T21157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  479.970531][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'.
[  479.972086][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'.
[  479.982909][T21241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3838'.
[  480.017281][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'.
[  480.281994][T21266] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3844'.
[  480.447356][T21277] netlink: 'syz.0.3846': attribute type 11 has an invalid length.
[  480.504976][T21279] bridge0: entered promiscuous mode
[  480.516518][T21279] bridge0: port 3(macvtap2) entered blocking state
[  480.538960][T21279] bridge0: port 3(macvtap2) entered disabled state
[  480.554083][T21279] macvtap2: entered allmulticast mode
[  480.568439][T21279] bridge0: entered allmulticast mode
[  480.580735][T21279] macvtap2: left allmulticast mode
[  480.588770][T21279] bridge0: left allmulticast mode
[  480.632793][T21279] bridge0: left promiscuous mode
[  480.768825][T21286] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.781806][T21286] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  480.849817][T21286] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.862483][T21286] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  480.952994][T21286] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.985077][T21286] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  481.022076][T21297] syzkaller0: entered promiscuous mode
[  481.027825][T21297] syzkaller0: entered allmulticast mode
[  481.087240][T21286] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.097320][T21286] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  481.240861][ T1137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  481.252191][ T1137] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  481.274803][T21307] __nla_validate_parse: 3 callbacks suppressed
[  481.274818][T21307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3853'.
[  481.302668][ T1137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  481.316938][ T1137] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  481.338606][ T1137] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  481.360785][ T1137] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  481.391674][ T1137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  481.419604][ T1137] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  482.008667][T21343] wlan1 speed is unknown, defaulting to 1000
[  482.365614][T21352] team0: Device veth5 is up. Set it down before adding it as a team port
[  482.457582][T21343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  482.660846][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'.
[  482.854335][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'.
[  482.863378][T21376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3871'.
[  482.943654][T21376] wlan1 speed is unknown, defaulting to 1000
[  483.037643][T21382] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  483.492201][T21397] wlan1 speed is unknown, defaulting to 1000
[  483.752159][T21414] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3883'.
[  483.816349][T21417] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3883'.
[  483.860059][T21417] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.867291][T21417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.873193][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'.
[  483.874865][T21417] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.890510][T21417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.891902][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'.
[  483.901788][T21417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3883'.
[  483.918489][T21417] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.925776][T21417] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.937421][T21416] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  483.973814][T21416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  484.008026][T21419] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  484.208034][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3886'.
[  484.719153][T21449] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16)
[  484.729768][T21449] openvswitch: netlink: Message has 16 unknown bytes.
[  484.839702][T21456] ip6erspan0: entered allmulticast mode
[  484.948338][ T5834] Bluetooth: hci1: link tx timeout
[  484.957096][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  487.041815][ T5835] Bluetooth: hci1: command 0x0401 tx timeout
[  487.483540][T21436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  487.708905][T21505] syzkaller1: entered promiscuous mode
[  487.715031][T21505] syzkaller1: entered allmulticast mode
[  487.886943][T21519] __nla_validate_parse: 3 callbacks suppressed
[  487.886960][T21519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3912'.
[  487.887476][T21521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3912'.
[  487.938734][T21519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.987996][T21520] veth0_to_bridge: entered promiscuous mode
[  487.995076][T21520] vlan3: entered promiscuous mode
[  488.079432][T21518] vlan3: entered promiscuous mode
[  488.163818][ T5829] Bluetooth: hci5: command 0x0406 tx timeout
[  488.202676][T21531] netlink: 'syz.2.3915': attribute type 142 has an invalid length.
[  488.262285][T21535] netlink: 'syz.1.3916': attribute type 1 has an invalid length.
[  488.321091][T21535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3916'.
[  488.343651][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'.
[  488.372595][T21539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3910'.
[  488.422721][T21544] netlink: 'syz.3.3917': attribute type 8 has an invalid length.
[  488.455979][T21547] netlink: 'syz.1.3918': attribute type 1 has an invalid length.
[  488.463889][T21515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3910'.
[  488.568218][T21549] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  488.626743][T21549] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  488.661710][T21555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3919'.
[  488.670243][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'.
[  488.687415][T21549] bond5: (slave vxcan3): making interface the new active one
[  488.697605][T21549] bond5: (slave vxcan3): Enslaving as an active interface with an up link
[  488.717892][T21558] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  488.809438][T21547] bond5 (unregistering): (slave vxcan3): Releasing backup interface
[  488.840030][T21547] bond5 (unregistering): Released all slaves
[  488.855225][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3921'.
[  489.087079][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3925'.
[  489.125211][T21569] netlink: 'syz.2.3924': attribute type 2 has an invalid length.
[  489.569978][T21601] veth0_virt_wifi: entered allmulticast mode
[  489.616534][T21605] bridge5: entered promiscuous mode
[  489.635967][T21605] bridge5: entered allmulticast mode
[  489.664796][T21605] team0: Port device bridge5 added
[  489.672576][T21606] bridge0: port 3(team0) entered blocking state
[  489.690446][T21606] bridge0: port 3(team0) entered disabled state
[  489.711941][T21606] team0: entered allmulticast mode
[  489.729548][T21606] team_slave_0: entered allmulticast mode
[  489.745141][T21606] team_slave_1: entered allmulticast mode
[  489.768455][T21606] team0: entered promiscuous mode
[  489.782796][T21606] team_slave_0: entered promiscuous mode
[  489.791950][T21606] team_slave_1: entered promiscuous mode
[  489.810642][T21606] bridge0: port 3(team0) entered blocking state
[  489.817361][T21606] bridge0: port 3(team0) entered forwarding state
[  490.116735][T21623] --map-set only usable from mangle table
[  490.192530][T21625] netlink: 'syz.0.3940': attribute type 1 has an invalid length.
[  490.215806][T21627] netlink: 'syz.1.3941': attribute type 2 has an invalid length.
[  490.257647][T21627] lo: Caught tx_queue_len zero misconfig
[  490.342930][T21631] wg1: entered promiscuous mode
[  490.347822][T21631] wg1: entered allmulticast mode
[  490.492786][T21642] : entered promiscuous mode
[  490.706974][T21663] dummy0: entered promiscuous mode
[  490.717836][T21663] vlan2: entered promiscuous mode
[  490.744451][T21665] netlink: 'syz.4.3953': attribute type 1 has an invalid length.
[  490.760571][T21659] syzkaller0: entered promiscuous mode
[  490.779402][T21659] syzkaller0: entered allmulticast mode
[  490.967394][T21680] bond2 (unregistering): Released all slaves
[  491.070595][T21684] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  491.262258][T21694] wlan1 speed is unknown, defaulting to 1000
[  491.276111][T21697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.322673][T21691] netlink: 'syz.0.3959': attribute type 12 has an invalid length.
[  491.822277][T21721] ipvlan2: entered promiscuous mode
[  491.829182][T21721] bridge0: port 3(ipvlan2) entered blocking state
[  491.857748][T21721] bridge0: port 3(ipvlan2) entered disabled state
[  491.875089][T21721] ipvlan2: entered allmulticast mode
[  491.890216][T21721] bridge0: entered allmulticast mode
[  491.906332][T21721] ipvlan2: left allmulticast mode
[  491.912396][T21721] bridge0: left allmulticast mode
[  492.059708][T21733] netlink: 'syz.4.3971': attribute type 1 has an invalid length.
[  492.281722][T21745] nbd4: detected capacity change from 0 to 63
[  492.321693][T21746] block nbd4: NBD_DISCONNECT
[  492.327758][T21746] block nbd4: Disconnected due to user request.
[  492.338029][T21746] block nbd4: shutting down sockets
[  492.359850][    C1] blk_print_req_error: 138 callbacks suppressed
[  492.359869][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.375724][    C1] buffer_io_error: 138 callbacks suppressed
[  492.375741][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  492.391568][    C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.401099][    C0] Buffer I/O error on dev nbd4, logical block 1, async page read
[  492.408946][    C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.418468][    C0] Buffer I/O error on dev nbd4, logical block 2, async page read
[  492.426327][    C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.435840][    C0] Buffer I/O error on dev nbd4, logical block 3, async page read
[  492.443738][T21090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.477881][T21090] Buffer I/O error on dev nbd4, logical block 0, async page read
[  492.496859][T21090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.514602][T21090] Buffer I/O error on dev nbd4, logical block 1, async page read
[  492.523453][T21090] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.536017][T21090] Buffer I/O error on dev nbd4, logical block 2, async page read
[  492.544603][T21090] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.555672][T21090] Buffer I/O error on dev nbd4, logical block 3, async page read
[  492.567207][T21090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.577147][T21090] Buffer I/O error on dev nbd4, logical block 0, async page read
[  492.585258][T21090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  492.595680][T21090] Buffer I/O error on dev nbd4, logical block 1, async page read
[  492.599129][T21765] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  492.604572][T21090] ldm_validate_partition_table(): Disk read failed.
[  492.604989][T21090] Dev nbd4: unable to read RDB block 0
[  492.605499][T21090]  nbd4: unable to read partition table
[  492.646959][T21090] ldm_validate_partition_table(): Disk read failed.
[  492.656509][T21090] Dev nbd4: unable to read RDB block 0
[  492.665432][T21090]  nbd4: unable to read partition table
[  492.678520][T21761] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  492.717125][T21760] 8021q: adding VLAN 0 to HW filter on device bond2
[  492.722422][ T9041] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  492.752944][T21771] SET target dimension over the limit!
[  492.884893][ T9041] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  492.952999][T21788] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000
[  493.112654][T21807] syzkaller0: entered promiscuous mode
[  493.118433][T21807] syzkaller0: entered allmulticast mode
[  493.121820][T21808] __nla_validate_parse: 55 callbacks suppressed
[  493.121837][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'.
[  493.267924][T21816] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  493.307512][T21815] tun0: tun_chr_ioctl cmd 1074025675
[  493.317579][T21815] tun0: persist enabled
[  493.326595][T21815] tun0: tun_chr_ioctl cmd 1074025675
[  493.341224][T21815] tun0: persist disabled
[  493.512798][T21832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4000'.
[  493.563389][T21830] ipvlan2: entered promiscuous mode
[  493.954677][T21871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4008'.
[  494.037192][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4009'.
[  494.114184][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'.
[  494.217871][T21888] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  494.235885][T21888] bond3 (unregistering): Released all slaves
[  494.267957][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'.
[  494.301717][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4014'.
[  494.403207][T21899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  494.412853][T21899] syzkaller0: entered promiscuous mode
[  494.424069][T21899] syzkaller0: entered allmulticast mode
[  494.465330][T21899] tipc: Resetting bearer <eth:syzkaller0>
[  494.476919][T21898] tipc: Resetting bearer <eth:syzkaller0>
[  494.509769][T21898] tipc: Disabling bearer <eth:syzkaller0>
[  494.970895][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'.
[  494.981427][T21928] validate_nla: 3 callbacks suppressed
[  494.981443][T21928] netlink: 'syz.1.4025': attribute type 30 has an invalid length.
[  495.007484][T21918] netlink: 'syz.3.4023': attribute type 1 has an invalid length.
[  495.065939][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'.
[  495.071787][T21918] syzkaller0: entered promiscuous mode
[  495.080276][T21918] syzkaller0: entered allmulticast mode
[  495.086494][T21928] netlink: 'syz.1.4025': attribute type 30 has an invalid length.
[  495.095970][   T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  495.106461][   T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  495.212582][T21940] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4030'.
[  495.244051][   T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  495.253973][   T77] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  495.404844][T21944] wlan1 speed is unknown, defaulting to 1000
[  496.026300][T21977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  496.028976][T21974] bond2: entered allmulticast mode
[  496.167606][T21983] netlink: 'syz.2.4041': attribute type 1 has an invalid length.
[  496.243278][ T5829] Bluetooth: hci1: command 0x0401 tx timeout
[  496.260524][T21983] 8021q: adding VLAN 0 to HW filter on device bond3
[  496.314612][T21987] bond3: (slave veth5): Enslaving as an active interface with a down link
[  496.787694][T21997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.820568][T21999] pimreg: entered allmulticast mode
[  496.837778][T21999] pimreg: left allmulticast mode
[  496.864652][T21997] syzkaller0: entered promiscuous mode
[  496.871873][T21997] syzkaller0: entered allmulticast mode
[  496.961895][T21997] tipc: Resetting bearer <eth:syzkaller0>
[  497.010758][T21996] tipc: Resetting bearer <eth:syzkaller0>
[  497.084302][T21996] tipc: Disabling bearer <eth:syzkaller0>
[  497.376547][T22036] syzkaller0: entered promiscuous mode
[  497.382186][T22036] syzkaller0: entered allmulticast mode
[  497.467286][T22043] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  497.712525][T22064] batadv_slave_1: entered promiscuous mode
[  497.727106][T22062] batadv_slave_1: left promiscuous mode
[  497.763999][T22067] bond3: up delay (217) is not a multiple of miimon (100), value rounded to 200 ms
[  497.779939][T22067] bond3 (unregistering): Released all slaves
[  498.094737][T22087] xt_policy: neither incoming nor outgoing policy selected
[  498.238272][T22092] xt_hashlimit: size too large, truncated to 1048576
[  498.294590][T22095] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  498.364021][T22098] syzkaller0: entered promiscuous mode
[  498.369706][T22098] syzkaller0: entered allmulticast mode
[  498.627882][T22111] __nla_validate_parse: 9 callbacks suppressed
[  498.627898][T22111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4081'.
[  498.642802][T22112] netlink: 'syz.1.4082': attribute type 1 has an invalid length.
[  498.651146][T22112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4082'.
[  498.662156][T22114] netlink: 'syz.1.4082': attribute type 1 has an invalid length.
[  498.669906][T22114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4082'.
[  498.688700][T22113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4081'.
[  498.763217][T22111] netlink: 'syz.4.4081': attribute type 29 has an invalid length.
[  498.792850][T22119] netlink: 'syz.4.4081': attribute type 29 has an invalid length.
[  498.982383][T22133] ªªªªª9: renamed from lo (while UP)
[  499.290324][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'.
[  499.290591][T22155] netlink: 'syz.4.4094': attribute type 1 has an invalid length.
[  499.299704][T22157] rdma_op ffff8880249a69f0 conn xmit_rdma 0000000000000000
[  499.327780][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4095'.
[  499.355039][T22155] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4094'.
[  499.407294][T22155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  499.429087][T22169] bridge0: port 3(team0) entered disabled state
[  499.462763][T22169] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.483021][T22179] netlink: 'syz.2.4097': attribute type 16 has an invalid length.
[  499.587975][T22179] lo: left allmulticast mode
[  499.605851][T22187] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4099'.
[  499.672264][T22179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  499.894576][T22199] wlan1 speed is unknown, defaulting to 1000
[  500.307270][T22224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4110'.
[  500.346680][T22226] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  500.461763][T22231] ipvlan0: mtu less than device minimum
[  500.524687][T22236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4114'.
[  500.644252][T22247] block nbd1: NBD_DISCONNECT
[  500.648900][T22247] block nbd1: Send disconnect failed -32
[  501.453561][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  502.049850][T22299] Cannot find set identified by id 65534 to match
[  503.521395][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  503.710821][T22252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  503.863672][T22313] __nla_validate_parse: 2 callbacks suppressed
[  503.863692][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'.
[  503.907656][T22316] validate_nla: 1 callbacks suppressed
[  503.907674][T22316] netlink: 'syz.2.4138': attribute type 1 has an invalid length.
[  503.927462][T22315] can: request_module (can-proto-0) failed.
[  504.102721][T22333] macsec1: entered allmulticast mode
[  504.117429][T22333] macsec0: entered allmulticast mode
[  504.129679][T22333] veth1_macvtap: entered allmulticast mode
[  504.314995][T22346] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  504.403973][T22354] bond4: (slave ip6erspan0): making interface the new active one
[  504.430164][T22354] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  504.459150][T22346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4146'.
[  504.514106][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'.
[  504.543080][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'.
[  504.572807][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'.
[  504.598319][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'.
[  504.722268][T22363] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  504.825618][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'.
[  504.860740][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'.
[  505.087136][T22380] wlan1 speed is unknown, defaulting to 1000
[  505.238349][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'.
[  505.833880][T22419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4168'.
[  506.205887][T22458] wlan1 speed is unknown, defaulting to 1000
[  506.228254][T22464] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  506.325446][T22467] wlan1 speed is unknown, defaulting to 1000
[  507.474946][T22497] netlink: 'syz.1.4190': attribute type 1 has an invalid length.
[  507.484100][T22499] 0ªX¹¦À: renamed from caif0
[  507.496183][T22497] netlink: 'syz.1.4190': attribute type 2 has an invalid length.
[  507.522741][T22499] 0ªX¹¦À: entered allmulticast mode
[  507.528539][T22499] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  507.608107][T22504] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  507.645605][T22504] netlink: 'syz.0.4192': attribute type 4 has an invalid length.
[  507.877604][T22516] wlan1 speed is unknown, defaulting to 1000
[  508.400196][T22564] xt_TCPMSS: Only works on TCP SYN packets
[  508.448032][T22559] wlan1 speed is unknown, defaulting to 1000
[  508.455939][T22566] xt_ecn: cannot match TCP bits for non-tcp packets
[  508.646482][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  508.882337][T22584] syzkaller0: entered promiscuous mode
[  508.887836][T22584] syzkaller0: entered allmulticast mode
[  509.862519][T22583] syz.2.4214 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  509.887456][T22583] CPU: 1 UID: 0 PID: 22583 Comm: syz.2.4214 Not tainted syzkaller #0 PREEMPT(full) 
[  509.887484][T22583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  509.887500][T22583] Call Trace:
[  509.887507][T22583]  <TASK>
[  509.887514][T22583]  dump_stack_lvl+0xe8/0x150
[  509.887540][T22583]  dump_header+0xd3/0x4c0
[  509.887560][T22583]  oom_kill_process+0x3ab/0x970
[  509.887584][T22583]  out_of_memory+0x106c/0x1410
[  509.887601][T22583]  ? percpu_ref_put+0x19/0x180
[  509.887623][T22583]  ? __pfx___mutex_lock+0x10/0x10
[  509.887648][T22583]  ? __pfx_out_of_memory+0x10/0x10
[  509.887665][T22583]  ? do_raw_spin_unlock+0xf5/0x210
[  509.887695][T22583]  try_charge_memcg+0xc53/0x1560
[  509.887732][T22583]  ? __pfx_try_charge_memcg+0x10/0x10
[  509.887748][T22583]  ? xa_load+0x60/0x210
[  509.887771][T22583]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  509.887793][T22583]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  509.887816][T22583]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  509.887838][T22583]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  509.887861][T22583]  __read_swap_cache_async+0x212/0x480
[  509.887886][T22583]  swap_cluster_readahead+0x358/0x680
[  509.887909][T22583]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  509.887937][T22583]  ? get_vma_policy+0x27b/0x3c0
[  509.887961][T22583]  swapin_readahead+0x196/0xc50
[  509.887980][T22583]  ? swap_table_get+0x1e/0x260
[  509.888001][T22583]  ? __pfx_swapin_readahead+0x10/0x10
[  509.888019][T22583]  ? swap_table_get+0x1e/0x260
[  509.888032][T22583]  ? swap_table_get+0x1e/0x260
[  509.888044][T22583]  ? swap_table_get+0x1e/0x260
[  509.888060][T22583]  ? swap_table_get+0x216/0x260
[  509.888076][T22583]  ? swap_cache_get_folio+0x513/0x520
[  509.888097][T22583]  do_swap_page+0x8ce/0x5e10
[  509.888133][T22583]  ? __pte_offset_map+0x29/0x240
[  509.888151][T22583]  ? __pte_offset_map+0x29/0x240
[  509.888169][T22583]  ? do_swap_page+0x18b/0x5e10
[  509.888183][T22583]  ? __pfx_do_swap_page+0x10/0x10
[  509.888199][T22583]  ? __lock_acquire+0x6b5/0x2cf0
[  509.888213][T22583]  ? __pfx_default_wake_function+0x10/0x10
[  509.888231][T22583]  ? __pte_offset_map+0x1ae/0x240
[  509.888251][T22583]  ? pte_offset_map_rw_nolock+0xea/0x160
[  509.888271][T22583]  handle_mm_fault+0x12d2/0x32a0
[  509.888301][T22583]  ? handle_mm_fault+0xee/0x32a0
[  509.888325][T22583]  ? __pfx_handle_mm_fault+0x10/0x10
[  509.888340][T22583]  ? lock_vma_under_rcu+0x45a/0x500
[  509.888382][T22583]  do_user_addr_fault+0xa73/0x1360
[  509.888407][T22583]  ? rcu_is_watching+0x15/0xb0
[  509.888429][T22583]  ? trace_page_fault_user+0x84/0x1c0
[  509.888448][T22583]  exc_page_fault+0x6a/0xc0
[  509.888468][T22583]  asm_exc_page_fault+0x26/0x30
[  509.888485][T22583] RIP: 0033:0x7f8498e6479e
[  509.888504][T22583] Code: e9 47 69 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b d8 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00
[  509.888517][T22583] RSP: 002b:00007fffad1f26b0 EFLAGS: 00010202
[  509.888532][T22583] RAX: 00007f8499215fa0 RBX: 00007f8499215fa0 RCX: 0000000000000026
[  509.888543][T22583] RDX: 0000000000000001 RSI: 00007f8499216038 RDI: 000000000000001d
[  509.888553][T22583] RBP: 00007f8499217da0 R08: 0000000000000000 R09: 0000000000000001
[  509.888562][T22583] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000007c6ec
[  509.888572][T22583] R13: 00007f8499215fac R14: 000000000007c3f7 R15: 00007fffad1f2820
[  509.888600][T22583]  </TASK>
[  510.042496][T22583] memory: usage 307200kB, limit 307200kB, failcnt 559
[  510.152352][T22604] syzkaller0: entered promiscuous mode
[  510.249493][T22583] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[  510.258881][T22583] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  510.270048][T22583] Memory cgroup stats for /syz2:
[  510.270471][T22583] cache 0
[  510.279282][T22604] syzkaller0: entered allmulticast mode
[  510.298425][T22583] rss 0
[  510.312023][T22583] rss_huge 0
[  510.315248][T22583] shmem 0
[  510.318187][T22583] mapped_file 0
[  510.356115][T22583] dirty 0
[  510.359119][T22583] writeback 0
[  510.411119][T22583] workingset_refault_anon 13
[  510.465295][T22614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  510.481692][T22583] workingset_refault_file 1
[  510.500902][T22583] swap 176128
[  510.501621][T22616] wlan1 speed is unknown, defaulting to 1000
[  510.527285][T22583] swapcached 24576
[  510.586501][T22583] pgpgin 125747
[  510.589998][T22583] pgpgout 125741
[  510.599282][T22619] __nla_validate_parse: 7 callbacks suppressed
[  510.599297][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4223'.
[  510.634474][T22619] syzkaller0: entered promiscuous mode
[  510.683647][T22619] syzkaller0: entered allmulticast mode
[  510.720176][T22583] pgfault 213980
[  510.737021][T22583] pgmajfault 11
[  510.740520][T22583] inactive_anon 0
[  510.774931][T22583] active_anon 16384
[  510.777543][T22632] netlink: 'syz.3.4226': attribute type 58 has an invalid length.
[  510.778781][T22583] inactive_file 0
[  510.778793][T22583] active_file 0
[  510.778800][T22583] unevictable 0
[  510.778807][T22583] hierarchical_memory_limit 314572800
[  510.778815][T22583] hierarchical_memsw_limit 9223372036854771712
[  510.778823][T22583] total_cache 0
[  510.778830][T22583] total_rss 0
[  510.798274][T22630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'.
[  510.828730][T22583] total_rss_huge 0
[  510.833165][T22583] total_shmem 0
[  510.836630][T22583] total_mapped_file 0
[  510.841701][T22632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4226'.
[  510.842623][T22583] total_dirty 0
[  510.865793][T22583] total_writeback 0
[  510.869630][T22583] total_workingset_refault_anon 13
[  510.895647][T22583] total_workingset_refault_file 1
[  510.914873][T22583] total_swap 176128
[  510.923243][T22583] total_swapcached 24576
[  510.934349][T22583] total_pgpgin 127196
[  510.954591][T22583] total_pgpgout 127190
[  510.958700][T22583] total_pgfault 215431
[  510.984385][T22583] total_pgmajfault 11
[  510.988399][T22583] total_inactive_anon 0
[  510.998446][T22583] total_active_anon 16384
[  511.011586][T22583] total_inactive_file 0
[  511.018566][T22583] total_active_file 0
[  511.028710][T22583] total_unevictable 0
[  511.056583][T22583] anon_cost 0
[  511.063748][T22583] file_cost 0
[  511.071779][T22583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4214,pid=22583,uid=0
[  511.133379][T22583] Memory cgroup out of memory: Killed process 22583 (syz.2.4214) total-vm:102148kB, anon-rss:1224kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  511.383145][T22648] netem: change failed
[  511.524286][T22652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4230'.
[  511.555318][T22652] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4230'.
[  511.614769][T22652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4230'.
[  512.110555][T22671] bond6: option ad_user_port_key: invalid value (65535)
[  512.118262][T22671] bond6: option ad_user_port_key: allowed values 0 - 1023
[  512.177644][T22671] bond6 (unregistering): Released all slaves
[  512.265213][T22681] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4240'.
[  512.346680][T22685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4239'.
[  512.425042][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4239'.
[  512.577814][T22694] netlink: 'syz.1.4242': attribute type 1 has an invalid length.
[  512.720609][T22711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4242'.
[  512.850626][T22701] bond5 (unregistering): Released all slaves
[  512.890285][T22704] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  512.903348][T22704] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  513.013877][T22711] bond6: (slave bridge3): Enslaving as an active interface with a down link
[  513.063218][T22694] bond6: (slave bridge4): Enslaving as an active interface with a down link
[  513.086608][T22716] macvlan2: entered promiscuous mode
[  513.129127][T22716] macvlan2: entered allmulticast mode
[  513.144991][T22716] bond6: entered promiscuous mode
[  513.166115][T22716] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  513.208594][T22716] bond6: left promiscuous mode
[  513.331715][T22735] netlink: 'syz.2.4251': attribute type 5 has an invalid length.
[  513.504438][T22750] netlink: 'syz.0.4255': attribute type 8 has an invalid length.
[  513.695951][T22764] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  513.762344][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout
[  513.849904][T22681] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  514.105948][T22779] xt_l2tp: invalid flags combination: c
[  514.327563][T22788] netlink: 'syz.4.4268': attribute type 10 has an invalid length.
[  514.538104][T22798] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication
[  514.652615][T22803] dvmrp12: entered allmulticast mode
[  515.018757][T22812] xt_TPROXY: Can be used only with -p tcp or -p udp
[  515.055276][T22812] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  515.133663][T22842] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  515.186820][T22843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.200203][T22837] syzkaller0: entered promiscuous mode
[  515.208769][T22837] syzkaller0: entered allmulticast mode
[  515.247505][T22830] gretap1: entered promiscuous mode
[  515.922535][ T5829] Bluetooth: hci0: command 0x0c20 tx timeout
[  515.983425][T22868] __nla_validate_parse: 5 callbacks suppressed
[  515.983445][T22868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4290'.
[  516.365020][T22879] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4294'.
[  516.381507][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'.
[  516.390602][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'.
[  516.505530][T22883] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  516.601970][ T7165] tipc: Node number set to 1183054594
[  516.641917][T22836] tipc: Resetting bearer <eth:syzkaller0>
[  516.706135][T22836] tipc: Disabling bearer <eth:syzkaller0>
[  516.736634][   T77] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  516.750423][   T77] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  516.793897][   T77] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  516.894433][   T77] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  516.917687][T22898] netlink: 'syz.3.4303': attribute type 2 has an invalid length.
[  517.068371][T22910] Cannot find set identified by id 65534 to match
[  517.147163][T22915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4310'.
[  517.387737][T22927] netlink: 'syz.0.4313': attribute type 10 has an invalid length.
[  517.410248][T22927] netlink: 'syz.0.4313': attribute type 10 has an invalid length.
[  517.436984][T22927] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  517.788810][T22944] lo speed is unknown, defaulting to 1000
[  517.810021][T22944] lo speed is unknown, defaulting to 1000
[  517.829059][T22944] lo speed is unknown, defaulting to 1000
[  517.876092][T22944] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  517.946253][T22944] lo speed is unknown, defaulting to 1000
[  517.969174][T22944] lo speed is unknown, defaulting to 1000
[  518.003821][T22944] lo speed is unknown, defaulting to 1000
[  518.023187][T22944] lo speed is unknown, defaulting to 1000
[  518.030623][T22944] lo speed is unknown, defaulting to 1000
[  518.059320][T22944] lo speed is unknown, defaulting to 1000
[  518.085277][T22944] lo speed is unknown, defaulting to 1000
[  518.173974][T22954] netlink: 'syz.3.4319': attribute type 4 has an invalid length.
[  518.194672][T22954] netlink: 'syz.3.4319': attribute type 8 has an invalid length.
[  518.203801][T22954] netlink: 'syz.3.4319': attribute type 1 has an invalid length.
[  518.227603][T22954] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4319'.
[  518.252706][T22955] netlink: 'syz.3.4319': attribute type 5 has an invalid length.
[  518.273023][T22954] NCSI netlink: No device for ifindex 0
[  518.472476][T22965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4322'.
[  518.514469][T22965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'.
[  518.525535][T22965] bridge_slave_1: left allmulticast mode
[  518.541216][T22965] bridge_slave_1: left promiscuous mode
[  518.547028][T22965] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.578815][T22965] bridge_slave_0: left allmulticast mode
[  518.591967][T22965] bridge_slave_0: left promiscuous mode
[  518.597943][T22965] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.810520][T22977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.840851][T22977] syzkaller0: entered promiscuous mode
[  518.845786][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'.
[  518.858547][T22977] syzkaller0: entered allmulticast mode
[  518.859422][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4328'.
[  518.877250][T22983] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  518.904612][T22977] tipc: Resetting bearer <eth:syzkaller0>
[  518.918979][T22974] tipc: Resetting bearer <eth:syzkaller0>
[  518.967170][T22974] tipc: Disabling bearer <eth:syzkaller0>
[  518.988978][T22991] 
: renamed from bond_slave_0
[  519.018025][T22993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.025819][T22993] syzkaller0: entered promiscuous mode
[  519.032371][T22993] syzkaller0: entered allmulticast mode
[  519.064742][T22993] tipc: Resetting bearer <eth:syzkaller0>
[  519.338648][T23010] netlink: 'syz.2.4337': attribute type 1 has an invalid length.
[  519.819626][T22992] tipc: Resetting bearer <eth:syzkaller0>
[  519.839380][T22992] tipc: Disabling bearer <eth:syzkaller0>
[  519.982522][T23047] geneve2: entered promiscuous mode
[  520.065334][T23054] ip6tnl1: entered allmulticast mode
[  520.430295][T23078] netlink: 'syz.3.4354': attribute type 1 has an invalid length.
[  520.450176][T23077] bond0: left promiscuous mode
[  520.456871][T23077] vlan2: left promiscuous mode
[  520.462152][T23077] bridge0: left promiscuous mode
[  520.569879][T23088] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.577117][T23088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.584703][T23088] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.591912][T23088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.633807][T23088] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  520.901564][T23107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.026975][T23127] netlink: 'syz.2.4365': attribute type 1 has an invalid length.
[  521.115861][T23131] __nla_validate_parse: 23 callbacks suppressed
[  521.115881][T23131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4366'.
[  521.194076][T23134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4367'.
[  521.258230][T23135] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4367'.
[  521.282943][T23135] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4367'.
[  521.311423][T23135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4367'.
[  521.370586][T23143] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  521.452359][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  521.464657][    C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  521.517968][T23147] wlan1 speed is unknown, defaulting to 1000
[  521.575886][T23147] lo speed is unknown, defaulting to 1000
[  521.758697][T23167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4377'.
[  521.801589][T23170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4378'.
[  522.024111][T23171] bond3: entered promiscuous mode
[  522.040496][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4380'.
[  522.053810][T23171] bond3: entered allmulticast mode
[  522.059182][T23171] 8021q: adding VLAN 0 to HW filter on device bond3
[  522.116021][T23178] bridge0: entered promiscuous mode
[  522.121517][T23178] bridge0: entered allmulticast mode
[  522.127455][T23178] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  522.440076][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4384'.
[  522.458066][   T30] audit: type=1800 audit(1771215775.883:15): pid=23198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4384" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1256 res=0 errno=0
[  522.482002][T23193] validate_nla: 1 callbacks suppressed
[  522.482019][T23193] netlink: 'syz.0.4382': attribute type 10 has an invalid length.
[  522.713426][T23212] x_tables: ip_tables: icmp match: only valid for protocol 1
[  522.946587][T23236] netlink: 'syz.3.4395': attribute type 1 has an invalid length.
[  522.958453][T23237] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4396'.
[  523.173543][T23248] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  523.190823][T23248] bond7 (unregistering): Released all slaves
[  523.452048][T23270] netlink: 'syz.3.4405': attribute type 15 has an invalid length.
[  523.513149][T23270] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  523.529770][T23270] bond3 (unregistering): Released all slaves
[  523.539783][T23274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.505293][T23305] tipc: Trying to set illegal importance in message
[  524.862514][T23326] netlink: 'syz.3.4422': attribute type 8 has an invalid length.
[  524.898497][T23334] netlink: 'syz.3.4422': attribute type 8 has an invalid length.
[  525.231549][T23360] geneve3: entered promiscuous mode
[  525.236961][T23360] geneve3: entered allmulticast mode
[  525.618864][   T77] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  525.649402][   T77] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  525.689873][   T77] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  525.711602][   T77] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  526.348751][T23432] __nla_validate_parse: 11 callbacks suppressed
[  526.348767][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'.
[  526.378794][T23432] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode
[  526.393340][T23432] macvtap1: entered promiscuous mode
[  526.435696][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4456'.
[  526.472221][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'.
[  526.617662][T23440] netlink: 1604 bytes leftover after parsing attributes in process `syz.3.4456'.
[  526.825877][T23444] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4458'.
[  526.925980][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4457'.
[  527.078730][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4462'.
[  527.113879][T23458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4462'.
[  527.241257][T23464] sctp: [Deprecated]: syz.2.4463 (pid 23464) Use of int in max_burst socket option.
[  527.241257][T23464] Use struct sctp_assoc_value instead
[  527.648138][T23495] netlink: 'syz.1.4470': attribute type 11 has an invalid length.
[  527.648183][T23490] bond7: option xmit_hash_policy: invalid value (10)
[  527.656789][T23495] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.4470'.
[  527.701734][T23490] bond7 (unregistering): Released all slaves
[  527.740235][T23488] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  528.027156][T23523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4476'.
[  528.125775][T23517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.183154][T23511] wlan1 speed is unknown, defaulting to 1000
[  528.267298][T23517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.287319][T23511] lo speed is unknown, defaulting to 1000
[  528.420392][T23517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.560308][T23517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.855272][ T9040] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.923228][   T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.988077][   T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.052681][ T9040] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.292398][T23603] netlink: 'syz.2.4498': attribute type 3 has an invalid length.
[  529.759925][T23610] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.792425][T23610] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.879843][T23610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.914415][T23610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.117294][T23610] veth1_macvtap: left allmulticast mode
[  530.226398][T23610] bridge1: left promiscuous mode
[  530.236263][T23610] bridge1: left allmulticast mode
[  530.246586][T23610] bond1: left promiscuous mode
[  530.268992][T23610] ip6erspan0: left allmulticast mode
[  530.282420][T23610] macsec0: left allmulticast mode
[  530.287561][T23610] macsec1: left allmulticast mode
[  530.310918][T23610] geneve2: left promiscuous mode
[  530.319282][T23610] geneve3: left promiscuous mode
[  530.326174][T23610] geneve3: left allmulticast mode
[  530.415641][T23631] tc_dump_action: action bad kind
[  530.423365][ T9040] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.440931][ T9040] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.464067][ T9040] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.499911][ T9040] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.530329][ T9040] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.541643][ T9040] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.564559][T23644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  530.583451][ T9040] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.603248][ T9040] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.831669][T23653] wlan1 speed is unknown, defaulting to 1000
[  530.853329][T23653] lo speed is unknown, defaulting to 1000
[  530.863161][T23642] netlink: 'syz.1.4508': attribute type 1 has an invalid length.
[  530.996666][T23642] bond7: entered promiscuous mode
[  531.007187][T23642] bond7: entered allmulticast mode
[  531.014098][T23642] 8021q: adding VLAN 0 to HW filter on device bond7
[  531.394344][T23685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.437286][T23696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.474506][T23696] __nla_validate_parse: 77 callbacks suppressed
[  531.474525][T23696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4520'.
[  531.514589][T23699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4521'.
[  531.533663][T23696] tipc: Resetting bearer <eth:syzkaller0>
[  532.525147][T12654] tipc: Node number set to 1847133603
[  532.541646][T23735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.565894][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4531'.
[  532.592259][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'.
[  532.730795][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'.
[  532.761898][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'.
[  532.773800][T23745] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  532.781849][T23745] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  532.799063][T23752] xt_socket: unknown flags 0xfc
[  532.809790][T23752] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4534'.
[  532.831719][T23752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.048903][T23761] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8
[  533.070720][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4538'.
[  533.678040][T23788] wlan1 speed is unknown, defaulting to 1000
[  533.690029][T23788] lo speed is unknown, defaulting to 1000
[  533.972397][T23798] wlan1 speed is unknown, defaulting to 1000
[  533.986180][T23798] lo speed is unknown, defaulting to 1000
[  534.086839][T23794] wlan1 speed is unknown, defaulting to 1000
[  534.114428][T23794] lo speed is unknown, defaulting to 1000
[  534.116812][T23817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.154637][T23817] syzkaller0: entered promiscuous mode
[  534.168558][T23817] syzkaller0: entered allmulticast mode
[  534.168623][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4550'.
[  534.248368][T23817] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  534.272160][T23819] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  534.350075][T23816] tipc: Resetting bearer <eth:syzkaller0>
[  534.400520][T23816] tipc: Disabling bearer <eth:syzkaller0>
[  534.599424][T23843] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4557'.
[  534.976225][T23865] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  535.400065][T17643] lo speed is unknown, defaulting to 1000
[  535.449729][T23882] syzkaller1: entered promiscuous mode
[  535.471926][T23882] syzkaller1: entered allmulticast mode
[  535.768417][T23887] ------------[ cut here ]------------
[  535.774378][T23887] !rwb
[  535.774403][T23887] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0x148/0x1a0, CPU#0: syz.0.4566/23887
[  535.787665][T23887] Modules linked in:
[  535.792373][T23887] CPU: 0 UID: 0 PID: 23887 Comm: syz.0.4566 Not tainted syzkaller #0 PREEMPT(full) 
[  535.801862][T23887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  535.812065][T23887] RIP: 0010:wbt_init_enable_default+0x148/0x1a0
[  535.818333][T23887] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 14 25 09 07 e8 6f b7 2d fd eb 18 e8 68 b7 2d fd eb 0d e8 61 b7 2d fd 4c 89 ff e8 09 f5 8a fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 a3 0a 07
[  535.838958][T23887] RSP: 0018:ffffc90003b5ee48 EFLAGS: 00010292
[  535.845643][T23887] RAX: 056813556197f100 RBX: 1ffff1100da7a004 RCX: 0000000000000046
[  535.853859][T23887] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500
[  535.862172][T23887] RBP: dffffc0000000000 R08: ffffffff90109077 R09: 1ffffffff202120e
[  535.870158][T23887] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff88806d3d0020
[  535.878941][T23887] R13: 0000000000000000 R14: ffff8880348a6000 R15: ffff88806d3d0000
[  535.887871][T23887] FS:  00007fe9c5d866c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000
[  535.897512][T23887] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.904528][T23887] CR2: 000000110c390ac3 CR3: 000000005818c000 CR4: 00000000003526f0
[  535.912905][T23887] Call Trace:
[  535.916180][T23887]  <TASK>
[  535.919112][T23887]  blk_register_queue+0x36a/0x3f0
[  535.926875][T23887]  __add_disk+0x677/0xd50
[  535.932155][T23887]  ? down_read+0x272/0x2e0
[  535.936606][T23887]  add_disk_fwnode+0xfb/0x480
[  535.941896][T23887]  nbd_dev_add+0x72c/0xb50
[  535.946331][T23887]  ? __pfx_nbd_dev_add+0x10/0x10
[  535.952069][T23887]  ? bpf_lsm_capable+0x9/0x20
[  535.956762][T23887]  ? security_capable+0x7e/0x2c0
[  535.962292][T23887]  ? radix_tree_lookup+0x25c/0x290
[  535.967426][T23887]  nbd_genl_connect+0x962/0x1cf0
[  535.972543][T23887]  ? __pfx_nbd_genl_connect+0x10/0x10
[  535.978123][T23887]  ? rcu_is_watching+0x15/0xb0
[  535.983293][T23887]  ? __nla_parse+0x40/0x60
[  535.987733][T23887]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  535.994131][T23887]  genl_family_rcv_msg_doit+0x22a/0x330
[  535.999705][T23887]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  536.006240][T23887]  ? __lock_acquire+0x6b5/0x2cf0
[  536.011527][T23887]  genl_rcv_msg+0x61c/0x7a0
[  536.016064][T23887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.021154][T23887]  ? __pfx_nbd_genl_connect+0x10/0x10
[  536.026565][T23887]  netlink_rcv_skb+0x232/0x4b0
[  536.032024][T23887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.037074][T23887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  536.043117][T23887]  ? genl_rcv+0x19/0x40
[  536.047325][T23887]  ? down_read+0x272/0x2e0
[  536.051825][T23887]  ? genl_rcv+0xd/0x40
[  536.055906][T23887]  genl_rcv+0x28/0x40
[  536.059902][T23887]  netlink_unicast+0x80f/0x9b0
[  536.065967][T23887]  ? __pfx_netlink_unicast+0x10/0x10
[  536.071319][T23887]  ? netlink_sendmsg+0x650/0xb40
[  536.076265][T23887]  ? skb_put+0x11b/0x210
[  536.080526][T23887]  netlink_sendmsg+0x813/0xb40
[  536.085922][T23887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  536.091296][T23887]  ? aa_sock_msg_perm+0xf1/0x1b0
[  536.096253][T23887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  536.101635][T23887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  536.106935][T23887]  ____sys_sendmsg+0xa68/0xad0
[  536.112025][T23887]  ? __might_fault+0xaf/0x130
[  536.116722][T23887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  536.122082][T23887]  ? import_iovec+0x73/0xa0
[  536.126614][T23887]  ___sys_sendmsg+0x2a5/0x360
[  536.131953][T23887]  ? __lock_acquire+0x6b5/0x2cf0
[  536.136917][T23887]  ? __pfx____sys_sendmsg+0x10/0x10
[  536.142885][T23887]  ? futex_wait+0x29a/0x380
[  536.147448][T23887]  ? __fget_files+0x2a/0x420
[  536.152125][T23887]  ? __fget_files+0x3a0/0x420
[  536.156829][T23887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  536.161968][T23887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  536.167459][T23887]  ? rcu_is_watching+0x15/0xb0
[  536.172560][T23887]  do_syscall_64+0x14d/0xf80
[  536.177171][T23887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.183337][T23887]  ? trace_irq_disable+0x37/0x100
[  536.188372][T23887]  ? clear_bhb_loop+0x40/0x90
[  536.193124][T23887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.199029][T23887] RIP: 0033:0x7fe9c4f9bf79
[  536.204077][T23887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.223795][T23887] RSP: 002b:00007fe9c5d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.233499][T23887] RAX: ffffffffffffffda RBX: 00007fe9c5215fa0 RCX: 00007fe9c4f9bf79
[  536.241719][T23887] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a
[  536.249705][T23887] RBP: 00007fe9c50327e0 R08: 0000000000000000 R09: 0000000000000000
[  536.257950][T23887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.266341][T23887] R13: 00007fe9c5216038 R14: 00007fe9c5215fa0 R15: 00007ffde8985f38
[  536.274415][T23887]  </TASK>
[  536.277454][T23887] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  536.284739][T23887] CPU: 0 UID: 0 PID: 23887 Comm: syz.0.4566 Not tainted syzkaller #0 PREEMPT(full) 
[  536.294113][T23887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  536.304178][T23887] Call Trace:
[  536.307481][T23887]  <TASK>
[  536.310428][T23887]  vpanic+0x1e0/0x670
[  536.314427][T23887]  panic+0xc5/0xd0
[  536.318161][T23887]  ? __pfx_panic+0x10/0x10
[  536.322609][T23887]  __warn+0x315/0x4a0
[  536.326598][T23887]  ? wbt_init_enable_default+0x148/0x1a0
[  536.332248][T23887]  ? wbt_init_enable_default+0x148/0x1a0
[  536.337901][T23887]  __report_bug+0x29a/0x540
[  536.342414][T23887]  ? nbd_dev_add+0x72c/0xb50
[  536.346993][T23887]  ? nbd_genl_connect+0x962/0x1cf0
[  536.352085][T23887]  ? genl_family_rcv_msg_doit+0x22a/0x330
[  536.357807][T23887]  ? wbt_init_enable_default+0x148/0x1a0
[  536.363431][T23887]  ? __pfx___report_bug+0x10/0x10
[  536.368459][T23887]  ? wbt_init_enable_default+0x148/0x1a0
[  536.374086][T23887]  report_bug+0x16a/0x220
[  536.378403][T23887]  ? wbt_init_enable_default+0x148/0x1a0
[  536.384022][T23887]  ? wbt_init_enable_default+0x14a/0x1a0
[  536.389643][T23887]  handle_bug+0x98/0x200
[  536.393878][T23887]  exc_invalid_op+0x1a/0x50
[  536.398371][T23887]  asm_exc_invalid_op+0x1a/0x20
[  536.403203][T23887] RIP: 0010:wbt_init_enable_default+0x148/0x1a0
[  536.409464][T23887] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 14 25 09 07 e8 6f b7 2d fd eb 18 e8 68 b7 2d fd eb 0d e8 61 b7 2d fd 4c 89 ff e8 09 f5 8a fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 a3 0a 07
[  536.429062][T23887] RSP: 0018:ffffc90003b5ee48 EFLAGS: 00010292
[  536.435123][T23887] RAX: 056813556197f100 RBX: 1ffff1100da7a004 RCX: 0000000000000046
[  536.443086][T23887] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500
[  536.451054][T23887] RBP: dffffc0000000000 R08: ffffffff90109077 R09: 1ffffffff202120e
[  536.459016][T23887] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff88806d3d0020
[  536.466969][T23887] R13: 0000000000000000 R14: ffff8880348a6000 R15: ffff88806d3d0000
[  536.474941][T23887]  ? wbt_init_enable_default+0x147/0x1a0
[  536.480580][T23887]  blk_register_queue+0x36a/0x3f0
[  536.485598][T23887]  __add_disk+0x677/0xd50
[  536.489922][T23887]  ? down_read+0x272/0x2e0
[  536.494330][T23887]  add_disk_fwnode+0xfb/0x480
[  536.499001][T23887]  nbd_dev_add+0x72c/0xb50
[  536.503404][T23887]  ? __pfx_nbd_dev_add+0x10/0x10
[  536.508341][T23887]  ? bpf_lsm_capable+0x9/0x20
[  536.513003][T23887]  ? security_capable+0x7e/0x2c0
[  536.517931][T23887]  ? radix_tree_lookup+0x25c/0x290
[  536.523117][T23887]  nbd_genl_connect+0x962/0x1cf0
[  536.528048][T23887]  ? __pfx_nbd_genl_connect+0x10/0x10
[  536.533414][T23887]  ? rcu_is_watching+0x15/0xb0
[  536.538165][T23887]  ? __nla_parse+0x40/0x60
[  536.542569][T23887]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  536.548894][T23887]  genl_family_rcv_msg_doit+0x22a/0x330
[  536.554434][T23887]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  536.560492][T23887]  ? __lock_acquire+0x6b5/0x2cf0
[  536.565430][T23887]  genl_rcv_msg+0x61c/0x7a0
[  536.569928][T23887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.574939][T23887]  ? __pfx_nbd_genl_connect+0x10/0x10
[  536.580305][T23887]  netlink_rcv_skb+0x232/0x4b0
[  536.585080][T23887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.590093][T23887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  536.595357][T23887]  ? genl_rcv+0x19/0x40
[  536.599515][T23887]  ? down_read+0x272/0x2e0
[  536.603918][T23887]  ? genl_rcv+0xd/0x40
[  536.607993][T23887]  genl_rcv+0x28/0x40
[  536.611961][T23887]  netlink_unicast+0x80f/0x9b0
[  536.616723][T23887]  ? __pfx_netlink_unicast+0x10/0x10
[  536.622007][T23887]  ? netlink_sendmsg+0x650/0xb40
[  536.626929][T23887]  ? skb_put+0x11b/0x210
[  536.631166][T23887]  netlink_sendmsg+0x813/0xb40
[  536.635931][T23887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  536.641211][T23887]  ? aa_sock_msg_perm+0xf1/0x1b0
[  536.646154][T23887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  536.651435][T23887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  536.656718][T23887]  ____sys_sendmsg+0xa68/0xad0
[  536.661477][T23887]  ? __might_fault+0xaf/0x130
[  536.666155][T23887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  536.671454][T23887]  ? import_iovec+0x73/0xa0
[  536.675968][T23887]  ___sys_sendmsg+0x2a5/0x360
[  536.680644][T23887]  ? __lock_acquire+0x6b5/0x2cf0
[  536.685590][T23887]  ? __pfx____sys_sendmsg+0x10/0x10
[  536.690792][T23887]  ? futex_wait+0x29a/0x380
[  536.695310][T23887]  ? __fget_files+0x2a/0x420
[  536.699890][T23887]  ? __fget_files+0x3a0/0x420
[  536.704561][T23887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  536.709494][T23887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  536.714955][T23887]  ? rcu_is_watching+0x15/0xb0
[  536.719715][T23887]  do_syscall_64+0x14d/0xf80
[  536.724295][T23887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.730343][T23887]  ? trace_irq_disable+0x37/0x100
[  536.735361][T23887]  ? clear_bhb_loop+0x40/0x90
[  536.740041][T23887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.745925][T23887] RIP: 0033:0x7fe9c4f9bf79
[  536.750344][T23887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.769955][T23887] RSP: 002b:00007fe9c5d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.778369][T23887] RAX: ffffffffffffffda RBX: 00007fe9c5215fa0 RCX: 00007fe9c4f9bf79
[  536.786334][T23887] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a
[  536.794325][T23887] RBP: 00007fe9c50327e0 R08: 0000000000000000 R09: 0000000000000000
[  536.802290][T23887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.810248][T23887] R13: 00007fe9c5216038 R14: 00007fe9c5215fa0 R15: 00007ffde8985f38
[  536.818225][T23887]  </TASK>
[  536.821610][T23887] Kernel Offset: disabled
[  536.825917][T23887] Rebooting in 86400 seconds..