last executing test programs:

6.993037174s ago: executing program 1 (id=3335):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000304000000000000df000000003e64238f9616be292472b1f7009be5aca7127969598704cab2e3cd2233621b803dddc77c08728fd62a2ffd9bfe05e8c1a583613bbca91430de60738afacc85a08b69283d8cce80d4775a486216e27bceccedaea5b96d76923e27736c624c7a32b5d1147f28f718d60c3060da48379d3bf0cb21c2", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
socket(0x32, 0x5, 0x2) (async)
socket(0x32, 0x5, 0x2)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x80800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0)

6.146943442s ago: executing program 3 (id=3340):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3ff, 0x5, 0x6, 0x18, 0x458}, 0x2, 0x2}, [{0x1, 0x87992fa, 0x8, 0x1008, 0x8, 0x7ff}, {0x3b0000, 0x2, 0x5, 0x7, 0x3b4e, 0xfffffff2}, {0x9, 0x3, 0xd289, 0x3, 0x5, 0xfffff06d}, {0x4, 0x8f80, 0x7df1, 0x5, 0xbb, 0x6}, {0x40, 0x1, 0x8, 0x4, 0x8000000, 0x7fffffff}, {0x5, 0x2, 0x80000000, 0x4, 0x4, 0x8}, {0x7690ea5, 0x401, 0x1, 0x4, 0x7, 0x1ff}, {0x2, 0xd, 0xd41, 0x8, 0x80000000, 0x5}, {0x6, 0x0, 0x3ff, 0x4, 0x8, 0x4}, {0x2, 0xfffeffff, 0xbb, 0x1ff, 0x0, 0xb5}, {0x101, 0x1, 0x44, 0x1, 0xe8, 0x101}, {0x9, 0x8, 0x1, 0x1, 0x2, 0x7}, {0x6, 0xd, 0x9, 0xa0, 0xffffffff, 0x2}, {0x7fff, 0x7, 0x3, 0x80000000, 0x9, 0x10001}, {0x1004, 0x7ff, 0x7000000, 0x0, 0x2, 0x2}, {0x8, 0x3, 0x3ff, 0x5, 0x1, 0x5}, {0x8, 0x0, 0x4, 0x8, 0x1, 0x100}, {0x4, 0x0, 0x4, 0xeaa, 0x40, 0xffff}, {0x1, 0x0, 0x4, 0x7, 0x2, 0x7}, {0xd319, 0xa, 0x80000001, 0x3, 0x9, 0x5}, {0x8, 0x2, 0xff, 0x9, 0x0, 0x81}, {0x9, 0x1, 0xa8, 0x9, 0x0, 0xfffff000}, {0x80, 0x6, 0x3ff, 0x2, 0x51e, 0x48e6}, {0x1, 0xf, 0x8000, 0x80000, 0x0, 0x7}, {0x2, 0x3, 0x101, 0x3, 0x3, 0xfffffff8}, {0x2, 0xab7c, 0x3, 0x2, 0x5}, {0x8, 0x2, 0x89, 0x0, 0x3, 0x6}, {0x3, 0x7, 0x1, 0xb435, 0x6, 0xfffffffc}, {0x8, 0x0, 0x0, 0x0, 0x100, 0x401}, {0xfffffffb, 0x5, 0x7, 0x4, 0x8, 0x7}, {0x5, 0x0, 0x2, 0x5, 0x0, 0x7}, {0x6, 0x0, 0x2, 0x7f, 0xc, 0x8}, {0x5, 0x3ff, 0xffffffff, 0x5, 0x10000, 0x6}, {0x9, 0x1, 0x7, 0xc, 0x3674, 0x5}, {0x2e52, 0x10001, 0x1000, 0xffff, 0x1, 0xa9e}, {0x6, 0x80000001, 0x7, 0x2, 0xfff, 0x7fff}, {0xf, 0x0, 0x8, 0x4, 0x79e, 0x2}, {0x8, 0x5, 0x3, 0x5, 0x8, 0x200}, {0x12, 0xfcc, 0x9, 0x6, 0x7, 0x5}, {0x3ff, 0x1, 0xa, 0xffffa747, 0xfffff002, 0xb0}, {0x2614, 0x5, 0x3ff, 0xe5, 0x200, 0x8}, {0x7e10, 0x4, 0xa, 0x0, 0x9, 0x40}, {0xfffffff7, 0x1000, 0x7fff, 0x8, 0x7, 0x7}, {0x81, 0x5, 0x3, 0x7, 0x82b3, 0x3}, {0xc, 0x401, 0x6, 0x3, 0x80000000, 0xb6e}, {0x9, 0x800, 0xfffffff9, 0x2, 0x3, 0x4}, {0xe, 0x0, 0x3, 0x5, 0x3b83, 0x3}, {0x200, 0xfffffffa, 0x8, 0x721, 0xd359, 0x10}, {0x7, 0x5, 0x10001, 0x8, 0x80000000, 0x2}, {0x9, 0x6, 0xfba, 0x6, 0x9bd, 0xdae}, {0x7, 0x507, 0x8, 0x8, 0x5, 0x7}, {0x448f, 0x81, 0x8, 0x80, 0x9, 0x4}, {0x7, 0x4993, 0xe76, 0x6, 0xcb0, 0x401}, {0x9, 0xc49c, 0xd4e1, 0x5, 0x1, 0x5}, {0x1, 0x7, 0xc, 0x2, 0xade, 0xb}, {0x1e14, 0xb, 0x9, 0x800095a, 0x1, 0x7}, {0x6, 0x101, 0xffff, 0x10001, 0x0, 0x7ff}, {0x4, 0x4, 0x0, 0x401, 0x7, 0x5}, {0x1, 0x4d8, 0x57a0, 0x1, 0x9, 0xffffffff}, {0xffffffff, 0x6, 0x0, 0x2222068c, 0x3, 0x1}, {0x2, 0x1000, 0x2, 0x2, 0xfffffff7, 0x7ff}, {0xd, 0x3af, 0x9, 0x8, 0x5, 0xe}, {0x6, 0x33a1, 0x8, 0x8, 0x2, 0xf59}, {0x10000, 0x7fffffff, 0x6, 0x6, 0x6, 0x6}, {0xe, 0xb5, 0x7, 0x1, 0x5, 0x2}, {0x191, 0x6, 0x1, 0x8, 0x4272, 0xfffffff8}, {0x9, 0x6, 0x7, 0x0, 0xf960, 0x9d}, {0x1, 0x2, 0x6, 0x6cde, 0xfffffff7, 0x1ff}, {0x5, 0x3, 0x3, 0x1030, 0x494, 0xffffffcc}, {0x1e2, 0x1, 0x1, 0x4, 0x5, 0x6}, {0xa503, 0x80000000, 0xc3, 0x1ff, 0x1, 0x7}, {0x7, 0x1, 0xe, 0xff, 0x3, 0x9}, {0x80000001, 0x0, 0x3, 0xd, 0x7fffffff, 0xef}, {0x7, 0x6, 0x0, 0x764, 0x5, 0x4}, {0x0, 0x2, 0xb69, 0x7fff, 0x9, 0x5}, {0x5, 0xff, 0x6, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x5, 0x5, 0x3, 0x10001}, {0x6, 0x2, 0x0, 0x2, 0x2ee6, 0x8}, {0xb44, 0x5, 0x6, 0xfffffffa, 0x323, 0x2}, {0x3, 0x9, 0xfffffff7, 0x8, 0x7b6b14a2, 0x3}, {0x8, 0x80000000, 0x1, 0x44, 0x100, 0x257f}, {0x5, 0x5, 0xab, 0x9, 0x5, 0x7fffffff}, {0x9e, 0x6, 0x6, 0x3, 0x2, 0xf2}, {0x9, 0x4000, 0x101, 0x6, 0x4, 0xd}, {0x401, 0x0, 0x7, 0xffffffff, 0x8, 0x9}, {0xfffffffa, 0x9, 0xfffffffb, 0x5, 0x1004000, 0x7}, {0x0, 0x3, 0x80000000, 0x101, 0x5}, {0x10001, 0x2, 0x8, 0xffffffc0, 0xa, 0x5}, {0x7, 0x7, 0x8, 0xca, 0x5, 0x8}, {0xd576, 0x4, 0x4, 0x7, 0x4, 0x8}, {0xe, 0x6f, 0x10000, 0x2, 0x7, 0xb66}, {0xb64, 0x4, 0x7, 0x0, 0x80000001, 0x9}, {0x1, 0x51b2, 0x7, 0x3, 0x4}, {0x3, 0x4, 0x6146a1c3, 0x3, 0xd7, 0x5}, {0x80000001, 0x40, 0xfff, 0x81, 0x4, 0xfffffff9}, {0x7, 0x800, 0x5c, 0x45, 0x4, 0x100}, {0x6, 0x1ff, 0x3, 0x9fed, 0x0, 0x4}, {0x6, 0x4, 0x67, 0x7fffffff, 0xf7}, {0x35be, 0xc, 0x1, 0x800, 0xfffeffff, 0x1000000}, {0x7, 0x8001, 0x0, 0x1, 0x7}, {0x800, 0x5, 0x0, 0x10000000, 0x6, 0x3}, {0x9, 0x6, 0xd, 0x4, 0x537, 0x2}, {0x7, 0x80, 0xb51, 0x1, 0x8000, 0x6}, {0x1, 0x36, 0x186b, 0x995f, 0x5, 0x4}, {0xd3a, 0x15aa, 0x92c0, 0x10000, 0x4, 0x6}, {0x80000000, 0x7, 0x6, 0x0, 0x9, 0xe}, {0x3, 0x3694, 0x6, 0x9, 0x51cf3566, 0x4}, {0x0, 0xffffffff, 0x3, 0x7f, 0x4, 0x1ff}, {0x6, 0x6, 0x2, 0x5, 0xdf63, 0x4}, {0x6, 0x8001, 0x8, 0x7, 0x10000, 0xb}, {0x3, 0x4, 0x4, 0x6, 0x1ff, 0x1}, {0x10, 0x2, 0x54, 0x47c, 0x808, 0x4}, {0x7, 0x101, 0xe, 0x5, 0x100, 0xfffffffe}, {0x0, 0x6, 0x4, 0x1, 0xfffffff1, 0x36}, {0x0, 0x81, 0x6, 0x5b1b, 0xfff, 0xd29}, {0x1ff, 0x2, 0x7fffffff, 0x0, 0x0, 0x4}, {0x800, 0x53e, 0xac15, 0x73, 0xf112, 0x9}, {0x2, 0x800, 0x8d, 0x6268, 0x8, 0x4}, {0x8, 0xffff, 0xf2d, 0x2, 0x5, 0xa}, {0x8, 0x2, 0x1, 0x31d8, 0x7, 0x5}, {0x5, 0x8, 0xda2c, 0x823d, 0x2, 0xfffffff9}, {0x2, 0xc, 0x7fffffff, 0x0, 0x165, 0x6}, {0x5, 0x3, 0x8622, 0x80, 0x1, 0x1}, {0x3, 0x81, 0xc13, 0xffff, 0x1, 0x4}, {0xf4f0, 0x800, 0xa, 0x5, 0x7, 0x11b}, {0x7, 0x86b7, 0x0, 0xee, 0x81, 0x6}, {0x3, 0xfffffff7, 0xffff, 0x101, 0x3}, {0x5, 0x40, 0x4, 0xfffffffd, 0x9, 0x3}], [{0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6bc7e79ad7b0d1cc}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x4}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {}, {0x6, 0x1}, {0x371e711c6fc2f61}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xf9ad1b51769e9d3d}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000140000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5)

6.14622053s ago: executing program 2 (id=3341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a014500000000000000000a0000010900010073797a3100000000480069617465000000180002800c00028005000100fd0000000800010c1bf0301418008f6c10db0100627974656f72646572000000040002800900020073797a4300000000140000fc1100010000000000000000000100000a64ccf57a9ed55abc062ae9bac6f97dbe1dcb2a172aea5d4f1c2b64aba02ec3c4350f9a54dac8977c982f61afe5e92d655445a32f57cde6a1d557c568e3971046476a1d27c67015f2f4"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

5.955200743s ago: executing program 1 (id=3343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="081a60", 0x3}], 0x1}, 0xc000)

5.902611095s ago: executing program 2 (id=3344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007912b0000000000097"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x2c000010)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000030000000000000000000000009500000000000000c737bbf00ab4aea46f240923910e7811ee90b90e9fad8261"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x1, 0x803, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000580))
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0xa0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xa0}}, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='batadv_slave_1\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0xb8}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

5.562199391s ago: executing program 2 (id=3346):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="02", 0x1}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800040001"], 0x48)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x5, 0x4, 0xfffff1b9)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x711c5000)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newchain={0x2c, 0x64, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x4, 0xb}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x7a}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004000}, 0x20004000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x20040140)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4)
listen(r3, 0xfff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0xb, 0x42, 0x44, 0x42, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000800000000000000800000000000001870aba21cd06e29c3936efef7d9795545e94b2a388deae7308bd94dc7bb837191723e3db2dbd0a5b61ac0e4ccb96dcc13b01b7747e179031fab31f8168ab083870436110cb1a93a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x3d, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

5.561018879s ago: executing program 3 (id=3347):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffff070c000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 7)

4.952307034s ago: executing program 3 (id=3348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030c00000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005e00000000002f907800000000e04910000800000f000086dd080088be000000001000000001000000000000000800226dcbf030012000000002000000000000975d9bd8540c00170a4d87c4fffd00000800655802000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fff3b7030000020000f98500000072000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.739029776s ago: executing program 0 (id=3349):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0xc014)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x7)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000400900000200df0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="030000c001"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20008814)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv4_getnexthop={0x28, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.612505301s ago: executing program 4 (id=3350):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xa, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x2, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0xfffffffffffffcd3}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc}, {0x8, 0x6, 0x0, 0x0, 0xff}]}}, @AF_BRIDGE={0x4}]}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x7fcadea9, 0xb7c, 0x7, 0x8100}}, {0x0, 0x1, {0x6f1, 0xb2d, 0x8, 0x8100}}]}]}]}]}, 0x6c}}, 0x0) (async)
unshare(0x22020600) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400501, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) (async)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000240)=r1)

4.56520765s ago: executing program 3 (id=3351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan0\x00', <r1=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x20044014}, 0x400c044)

4.447287852s ago: executing program 0 (id=3352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x40, 0x1, 0x70bd2e, 0x4, {0x1}, [@nested={0x4, 0x44}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str=':\x00'}, @typed={0x8, 0x14d, 0x0, 0x0, @uid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r2, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose, 0xfffffffc}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000000090102000000000000000007000005240002001400018008000100e0000002080002007f0000010c00028005000100110000000900010073797a310000000053d999fdabcb33d6aa1c42223ea7ab8787e1fb156243e451b08e94be19"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r3, &(0x7f0000000040)='lp\x00', 0x3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x38, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@x25={0x805, {0x3, 0x4, 0xb, "403cefda7128011c1d8ec287c596fc5dd7e39c98046c9af8ae0773bf62c73579d02793962b8b6b"}}}}, &(0x7f0000000540)={0x1, 0x3, [0x3eb, 0xe34, 0x702, 0x1fd]})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x100000000)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x81, 0x2, 0x5, 0x8, 0x7, 0x463, 0x9, 0x5, 0x9]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004080)

4.442753039s ago: executing program 1 (id=3353):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
unshare(0x20400)
writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcc", 0x3}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)

4.335703672s ago: executing program 4 (id=3354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="918be5e2d3000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000005c0)=0x1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r4=>0x0, 0x83a, 0x10, 0x6c, 0x7}, &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000600)={r4, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x84)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000001940)={&(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000200)="4de70a892a013325967cd5dd8e79e170baa4892d5eff57287cc0ccb5eab338903e4e8755925e230979ea9dcd62fb6505050c76f55439ac", 0x37}, {&(0x7f0000000240)="8fe9a4", 0x3}, {&(0x7f0000000280)="db36558543e32bcb664adb51cb9536f4bbc6e3157eadfac116355f1626bd4cd82e0e9b8d4ee2fccafd984163aa384195d3", 0x31}, {&(0x7f00000002c0)="d9e8b2fa7ac2bf8f3c72d5d4a2acf5545c380129c8858dc0382fa24439f16c5bc58085f38714fbea7369844193137456e3cf7bbb393044ba41c68212dab7dd570fbb2b34cc2d4e79c2c5c0b429be061ef609cb439a7e22c2b604065c8c3deb85e2c79914ab7d61d6a1e07fb0b8c82cc0e8835bdb5187", 0x76}, {&(0x7f0000000380)="3143adc34d4d7dababc48d4483db106b77d5cd6c4c0993810b87bff7b111a0c5eed86ce3157d01f22b6c9c23984c671e945ea6cca89ec4a15346f93b2964c726ab1ae8308affe344e1a147f1506ce205b6855b4fcbafa194aa49163da4a7fdc182babbe8a9a87bf3492deb3bdf65328fd56697afd658d9d29339b330f8e07f54bff39992d71ec6f75518f61b0141c691af4e119414289163d6a0643252b6536aba5e8e6e21cdf9abf8372c57b06b479cbc04e3c9df6591c1a3e6b704ef080a84c2c96d357a41bb2a61c47cedc0aad7ca3a42b7d203b4756c5c12aef1aae54982588da620b142a3", 0xe7}, {&(0x7f0000000480)="ff9896e99f0697e14396dfddd111acd9b6e68284fe88e937c45406b983ddd7fa8876a0266aead65d3c7b1001c4ac64b6e36c407a10", 0x35}, {&(0x7f00000004c0)="dc7de897dda4ad286cc536871cffffc88536722d76a5da8d63b9bb80652d7c52b047574df73e14c414ff21013c11ae171302ea90cfcdcce4dce5287cba6116fe7d089e70025760cba5e2474214a57fba08a3f332d27d276ec46811bdf3ab7145203b3903b7d829bbb673fdaecb328d5032e81a2cb0241b5f91e1b9cea4c2f7b4541e0b097ccb0f94fe67c23b5b6ca6eb39c4c4a710dcd6c39d77320136dcd2b1c0a9adf5e43fbb65fdec64062ec7d09af77bd0078f9d262cc2", 0xb9}, {&(0x7f0000000580)="540f0ccf154d51798e5d1f578c71b13a21bc572d305215069edc1efdfe85265621cfa8", 0x23}, {&(0x7f0000000880)="033ba351969f61cae26cf7670d2acbd7c95d9d53589334b9ba5b67316de838f35867107fd8998210bbba3dd534d6e29b83078ee66ff0c2ebe7f83e21065b54c321f8103d3fef38e01b922146ac2d0a797417357b99ef159bb386e86e545cda6050683b7b9259285fc039e83237e46aca1232f20dde20c256f4e707037eec9e1d20f425fee9c4915cb579db870a1712c8dafea40a1f23f6e0d8c4d5774d7581bde8fd7191c56250e14d9bd35a4852031fcdad9e271425d2a20fbffdde2661d4e26d3f9b590ac2ff7ddd64900b436a60960186c777786f96f6cde35aeebb6a2dcf9997ffe5b61d47c357f5b5045e1d632a76e3dc64fe8389df2805a4db1ae59b521f0eb296134b54aef06df3ded38ca6fa9a94fc47384da451d2ecf0b9317a5f45198487fe17d580f4639225a17325bb3ba7ced46d92868b2df6053c9563dbf694dd2724611b6f8859d486fed50249f134a1f309bc17f5d5ba65191b0b7d71821132f8f40d762265b6c11e71becc90d7eb621415a03175c669dad1ad0aeb14625361efd69f354be5f8de10e706cb0422114a969a008b4d7e4ddd1aa658daba5e6916d13cb9ce332217e115d6838e60786b4db7ca3e76a248795e07fdea58c55ba190cf04fef2ba0819e423657d992f04c7153fbdc2c8ce2a103ad010015164a5999ab85ff1322fe393a49916e83fed5347fc49bb1a4548fe0191fbb7acb8b23b6f33f2aeecf8fceb4c1b83714ac754aa5ffa30eb885ab1c386af274ac58f933553f07fd4b8ad353a095700b4c15429f6304ca822ae2bd9eab018b8a2317189720cb4352cf3c51ef83d6817c194c3942d0c9b7c04435e19f4afb0f555a6b21d7ff46f4545a05c78bfb7265d81283548494b6fcf4b4ca1aadb2011294fdfa6048430527394ed3ab486812317a6e2e0cdafe65af0d5458ff736cdf01c32ed6120c744095ad4d9efc32d99dfff605285e533d2804c4dd5a9e4cfd69eca832ae069c1c8d489325d979e0108b3463934cec38f6dd482dce31eb510fc01eb27e369384c25bb3b3da6875a2adf8915581a18632c7f983ec37e14290fbb587910635ec0aa3b446ddb817c96294c9c6556ffffbcd2091cd21ac312ca9efa0b196298ac9b36179f958af64b5a2ea0eb3f338e2fef2a37d9b7f64d28432b08edb2ee6f2c82f890c74b8ed8cb739c42a5cdbc004fd5b4e9f091992a774ffe20420cf3dc795ee64d1b4d13178fb2c7e51da3d32932581719896c8d7ded01ca92a41617b2a3958d62cff6ce6222229e3fb337cbc30462402bff26e02674c6e17c8660ad0abdd7628d0e7f51f1b418510a54eef23437535469381317eccec57d93b3fa0adec407f766cb7459c4f70f9b90f4108850bbb75423dde92963d25d08dbda605124483016f15daa21112e04aeee0de8f1f3e88b4997bc553bc9f405a707fa2f6d32d577cc4351d4f891b13740f1d02efd9ec4d62cf8f20fab5123c40f88539a4fafc45a5e62d820d00d7d1be4821e7196fcc8b1634c575c5852c4756a6871fb4084f2d589c4f038a9297c0bd7d0a1039b2e5d7fc9f4da8365d320ca742e3d5d7975b38a44e7dc9e7e9226629b19a3b457ba3024bee07e07d66dc85239760d676963bc68ab07985d243ab2280a219258d86bdc9ac6d90af2a4f93b0dd2b6f855693d4d776ef5612b1aa6456c03499348f4709eebe4fd0912c2b00aa9c70100aa95a451b647c4af7db373658e7da3f0342340260d52663616c1fa6ed32facba44f02f553fe8a69771d6641758de2bf2804332f2f81671e133f0b10965d19f0a3fd55313b0d053f1912f2b8c229e86065b82f217094a4c8f9fa9a176810ddfbb5459de08859f0081256c43f024cdc2cf8dcf1e7354c832e5b504efc28e18e56e4555ff3414d71f879503dfacef55f47ec91659e81f552103b3b7be528cc63049b167f9ee08bb0e62b604e2694a161193945c7831869360b9f662915dc45da732064d0456673b5e7508fd21c8f7f324b640f69953e6a085bf8faa4d7ede30f7d481c804edd42a8e2598ca706dd84f7784b556b81201615f86fb5592f5438c465687246dcf8439004a1c295263d28fe4a5d4d3c8fc69cfd1303cfba1742f2021ba07e7c7d5b36f225c0478e31c0d12e3e48607f491956be7cd78974a2af9d5658ba08b010a558524f03324a4ca5b70268dfc740ca668190866097dfdf009b55181113946fa0e6f15c1e963a1b0111201ef44a415965ca97ce9ab883fa0f800a82321b1184f8a4525dc07c633f4707c26cd60383d8b7dab9374c35ef7e454f75023ebfbebd0b462a7f6fb4568f5937e975f47502bd01a00ae1d0e0727a779d36aabe34421d390e96c818a03dfac41477b18c80215b5bab493bbce5bc29732606420f7c5e86edcab90bd69b8275856aed1fb6faf2683b7c904118a6ceb3ae1068dd5fd2a094357e93dfe058e7bf5905d30fbae4155928d65b708218af2a59c499c4c0e379031a871682f5577aec97f50b3799273c3619c8d791401feb4f0efc40a384dc3546c008acd12e81edcb62d4368ad801029edee528e37b3e32f4e925c71d023a1c6c2ee2cc986197ce28c6dada586a45160534c74a52b83e3d274e0becc46df74f9547e0340eebf0fa0977f24f3286753a41065fb2659ccb8d098c60f8766a3b34ced5bd09d24a3eeea1983dafeaca6de13f51a01f2469f9dbbea02723aebb82558b16f1b82d38a51f84c753ca2f77a02b7759cc2ce21857ac66dc527b5c16dc8362a8cd93c28bead08b2ec27de2d3650ad08c4feae4474270ab41f86f88362689e2e3fc52cba156dd53651f39a2131765c90d7b7a3336096eb4052378f3648b298bdcdecdbc0054252e998c1ffdd42a78b77d12d30f8daa2f58cfa772535419661988c2ab212df716b8c406648c08e06d655cd5f11c8687b132043749af0d2eedfae26ef9dab60064701dd770145a4ec9d2f92c05c0681bbf111ad8e68ad6d6c2613c26ed1aaa46600df87c3a3524dd4068fc066d1b8850a39996ce4b093b4685df9968aec597d71832c09ec9d84dab05ab4076436a6a2a1dff4cfd55c0fe6ecd922642fc3dbaa414ecdfc04627e8fcebcb45aec042d5cc9f2f14d1d60c4a9935141bbc29fd5e8b86e36eaebf515f9ab53b3d6204dff87b6925ca93d4aca292221626b6bf4a989dd1c9d32b6e540d38e38b92fede33ac23d154f0abb9e7e65534aec7943382d363f422d87ce5058395e68527260a7a91bc8d98549fce2f6a22b15672262eb99b001fa4c3acc7294e5681a1861903b3c7ecaac4d93cd3b45eb98492d3f0a5d1657e470a47d736f483228806d13ddf7be3553abe34a79c4107d351d46a0fbefb17d2f8570626008fb2031cdc3a03c82d2a95857efa392fcf016a24107198d79b9d662c167ddd59230a3dd554c4c25c1a03dacc015887abdc125a07348e0d0eb5023842e4da2755b0160464025970a5b46bf7cb62e8cc84a41f389223ab79bdac43dfd6172164046c7174da3b73de11b6b8eb9513446715198c94599af847345f1ee71d01537a7eaf1a93d173b635db2944645c71e106ca19e662b3fa8d4b1c06d8cbb8a8a8bacb319801dc9e6af4765bea8fdac08543d8fbe206f89f52bae896657247ac6ac282a19474f33da66d0a660c1bbb619d23250d5fd839659de8d4b51aa5401fe402def6dbc472820e4e23ebeac4224c3dc0daab7facae64d59ef9efd01883c43a54a5707b708acef74d1f3ca5473bc7fe787964a9282c959ed524f614414e59756ec528af6ecf70f672b56e134ea8204db77c5651f838b7c3be9d022a684ae9d8d8ac061aec3d005093dd66d0b1595dbdc0b22c96d875a039468b5ffacbf5c3df22f1b9716fa19e3a0885360ce7697cd57c6d3fa3075463942293b98dd11e55a21e4f62c4923faa013bb1ae793cd669feb94b6d0dd825f7c6b26395cd69412c42372eb316c22e09a95d8df1d377facd7a8eb705cacd15e84a84e1d4e76173396f34953886974235f1579ad101ce9812304f7f2543b68b19e455b7a2f3edd59e8d0b7722364353cc647c1c80d8fbfa30bb9dfab55c10734a2641d1075fdef70ac912c65e316631d58ae0199bac5da0e86408841f932cd70cf515f6aa4cc4ebff64c5a1b7bb2ad9a2aea298fcd2cf162786492323d2340193619c541adc5a58e00784abff78d9ff09f5a32a806755168f917519b3e96cb0a7001f8ef549c9085f83ce40643fa3a4afb40163b5e5804af00cfef203239580133701a422ac390de74a3e9f777d886c1935f03ca78459e276ed5dea61bcdbc6cda71fe0b3e6cc11b0914479517171ea7f687c76cf8d98cc39e8d6db4debb8f5c9835709d1c1a98f1c218eeb388a950889b66c3baab07c74c7a0845e21cce0323a7d35a6a9c82ecffb9cbeee89b9153a415fcf7efc07406fc6a547155d84fa3de1078072f54c81a4a2eb86cf92c728aede4e9c9dcb872aaf7c5e920eb86529f5848063867f0de40a1baae6ba1884966a7d7a0f7c02b5f826891299c2f19ff490679b8357b3a222eefa2a65400ee854c61fe195883eef0ea686a0d2202bac273ed4a8ef830a98fb2950e446e58524743bb7e42f4c343c759106d7fd22f98c5c494384e8f7880733d9b06ec227a171e3167695ec7fb77144695baeb694e16fa6303fd7c2f2671fdf43bb4f9954054df9dc27518486b1753029cf7143710029e71213b5e3dc619b836cab6cea905cad8d472fd2189d06c93b1664889ece9e4fdf08acac5a15c98bcec216d5ffe722c40c8a43662ee42fe6ae98ceb4d82bec61df0d0103c3553c65587ca1fdc3fa2c2fa303e73e9582566d375f2f21a29c9a5fdd00e9532061852cfa640eb0f3ca955fa76ff6dc2b34883da6064a5b1a1bfddf1fb05ec321a26fe09b96a38499bbf934e3c104e3a80430bf9c539a98251a9c1f5baeec51c29cd80dd6197f9977206191edfcb9c4b27b2f5849d39d69685688b1fb7120cddac998f92874f5cc79b4ee14560ef7f61de5da571d5b600981e609d573868812e9f75c11ca2460d04ab61dcb6ea035d3025369cc365ee530594d3d61fe90ec36e079d08a8d9fad9db1b7a0b3de96d61529a9b1f1e67369aa5eedb3f23da07e31763b394fc712509328164c16bbf83e9ce8f1aa236e45bf74c051a3fe8aca315356e2caebf85f2a132e299d5e4c5e657d7a92d2d521926578d901e5d5157c873e387743fffc5380ae1ceb172f6866c7559ecb21f1a1c204930f15977581d1ed2c82d50cb70d9192f939a3c5031961002e422db9b040523bfaa9f740f372d4c88556ad50c2544f4f2167b7e1b4be39ed78ff8e1402ad526801982f959b97628d1d4b21891352557e841370eb1f1c68fb3049dd8f911fb1978f9f7b44d2b4cd9a7b4dd187fd360785c55980de5e9b83781d9b18d66ac840d54300766234fa335925660cec54e587332c25ee61a1adb6750b8314b6561b84679ab0bb43fd0d221bbf1cb1a0f5db96d23bc1f05fa718a4365aa13dac8da912c117380985e256ebd0019f50118967198548c8c59f9ddab22bb5ea1857fb05c7c07d843e53847060145959ec2e6631ccff400925bf732c355e9fcb4f307f1650dc1f7cab3af6380513216b6846e0c3c897f47a21e9940fc5480c00b2bbab4fdc466b152605a4001a64d3738e83122ce2500ff4d616f3f75a036e07bd1a88117360f1bdf217cec5a78d0dea74bb1e66bc035bdc3d7f3cfb8e4ea851d36f2f19aca0989001500adf7b3c1cd2b9ce2b27c346214b98b03893b9a1428f8e812440d0afbaefe5903a0d77e54aaa732", 0x1000}], 0x9}, 0x800)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0)
recvmmsg(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="000100"/26], 0x3c}}, 0x54)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

4.269963258s ago: executing program 1 (id=3355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x0, 'vcan0\x00', {0x4}, 0xffff})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
sendto(0xffffffffffffffff, &(0x7f00000022c0)="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", 0x1000, 0x24000800, &(0x7f00000032c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x4, 0x0, {0xa, 0x4e20, 0xc89, @empty, 0x8}}}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x1b0, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xf7}}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x7f, 0xac5b4cb, 0x0, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x4, 0x40]}}, {{0x1c, 0x1, {0x1, 0x1, 0x5, 0x9, 0x1, 0xa, 0x9, 0xa}}, {0x18, 0x2, [0x9, 0x401, 0x7, 0x4, 0x2e2, 0xa16, 0x0, 0x6, 0xb1, 0x1]}}, {{0x1c, 0x1, {0x6, 0x25, 0x4, 0x9, 0x1, 0xd00, 0xf1d5, 0x8}}, {0x14, 0x2, [0x7, 0x9, 0x2, 0x8, 0x0, 0x3b6, 0x8, 0xd1]}}, {{0x1c, 0x1, {0x0, 0xff, 0x22, 0x2, 0x0, 0x40, 0x3ff, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0x1ff, 0x1]}}, {{0x1c, 0x1, {0xc, 0xfe, 0x400, 0x7, 0x28d488c6a5f6117f, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0xa00, 0x1]}}, {{0x1c, 0x1, {0x8, 0x3, 0x21, 0x2, 0x1, 0xfffffffa, 0x3}}, {0x4}}, {{0x1c, 0x1, {0xba, 0x5, 0xd, 0x4, 0x2, 0xb8a, 0x7, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x80, 0xfd, 0xfff3, 0x4, 0x1, 0x1, 0x100, 0x1}}, {0x6, 0x2, [0x7ff]}}, {{0x1c, 0x1, {0x0, 0x1, 0x7, 0x6, 0x2, 0x1, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x3, 0x3, 0x80, 0x0, 0x74, 0x6, 0x1}}, {0x6, 0x2, [0xfffd]}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8064}, 0x24040894)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6, 0xfff3}, {0x0, 0xc}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'})
socket$kcm(0x11, 0x3, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r12)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

4.103125237s ago: executing program 2 (id=3356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a30000000030a01e6ffffffffffffff00010002000900010073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c000240000000000000000109000100736d7a3000000000140000001100010000000000000000000700000a00"/168], 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000000099c6045b22971757a3b0d860710414094abc082c0bd4b4512d6cd50b5b08098570701b47e74d34f9ad133753121befc7416b2e341e3b00ded8a8803d82f5124c9cb2ed5dfb717cf2f78e9ef64e2a4c4363b5658dd881698a75013a92a8fe2ec0c2b434a27903657c3085bd12e009581b837be4eb69d7715975960bebf2863a52a6ed0d5f92269f3a463f69abe1ed123c15a56f02a712df54de00000000000000809159b100f19c49b087e8ebbaa6dd134fe61959b0765a96f94d7ba711f0dd28c6d8ca0bc7446ca7e5d11aa785e5a58d5938f26289c729fb9f44b321ec48ee66d8c96346c41bf0cc7a1101367c4069eb36f09870db46826f29", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

4.101306108s ago: executing program 3 (id=3357):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3ff, 0x5, 0x6, 0x18, 0x458}, 0x2, 0x2}, [{0x1, 0x87992fa, 0x8, 0x1008, 0x8, 0x7ff}, {0x3b0000, 0x2, 0x5, 0x7, 0x3b4e, 0xfffffff2}, {0x9, 0x3, 0xd289, 0x3, 0x5, 0xfffff06d}, {0x4, 0x8f80, 0x7df1, 0x5, 0xbb, 0x6}, {0x40, 0x1, 0x8, 0x4, 0x8000000, 0x7fffffff}, {0x5, 0x2, 0x80000000, 0x4, 0x4, 0x8}, {0x7690ea5, 0x401, 0x1, 0x4, 0x7, 0x1ff}, {0x2, 0xd, 0xd41, 0x8, 0x80000000, 0x5}, {0x6, 0x0, 0x3ff, 0x4, 0x8, 0x4}, {0x2, 0xfffeffff, 0xbb, 0x1ff, 0x0, 0xb5}, {0x101, 0x1, 0x44, 0x1, 0xe8, 0x101}, {0x9, 0x8, 0x1, 0x1, 0x2, 0x7}, {0x6, 0xd, 0x9, 0xa0, 0xffffffff, 0x2}, {0x7fff, 0x7, 0x3, 0x80000000, 0x9, 0x10001}, {0x1004, 0x7ff, 0x7000000, 0x0, 0x2, 0x2}, {0x8, 0x3, 0x3ff, 0x5, 0x1, 0x5}, {0x8, 0x0, 0x4, 0x8, 0x1, 0x100}, {0x4, 0x0, 0x4, 0xeaa, 0x40, 0xffff}, {0x1, 0x0, 0x4, 0x7, 0x2, 0x7}, {0xd319, 0xa, 0x80000001, 0x3, 0x9, 0x5}, {0x8, 0x2, 0xff, 0x9, 0x0, 0x81}, {0x9, 0x1, 0xa8, 0x9, 0x0, 0xfffff000}, {0x80, 0x6, 0x3ff, 0x2, 0x51e, 0x48e6}, {0x1, 0xf, 0x8000, 0x80000, 0x0, 0x7}, {0x2, 0x3, 0x101, 0x3, 0x3, 0xfffffff8}, {0x2, 0xab7c, 0x3, 0x2, 0x5}, {0x8, 0x2, 0x89, 0x0, 0x3, 0x6}, {0x3, 0x7, 0x1, 0xb435, 0x6, 0xfffffffc}, {0x8, 0x0, 0x0, 0x0, 0x100, 0x401}, {0xfffffffb, 0x5, 0x7, 0x4, 0x8, 0x7}, {0x5, 0x0, 0x2, 0x5, 0x0, 0x7}, {0x6, 0x0, 0x2, 0x7f, 0xc, 0x8}, {0x5, 0x3ff, 0xffffffff, 0x5, 0x10000, 0x6}, {0x9, 0x1, 0x7, 0xc, 0x3674, 0x5}, {0x2e52, 0x10001, 0x1000, 0xffff, 0x1, 0xa9e}, {0x6, 0x80000001, 0x7, 0x2, 0xfff, 0x7fff}, {0xf, 0x0, 0x8, 0x4, 0x79e, 0x2}, {0x8, 0x5, 0x3, 0x5, 0x8, 0x200}, {0x12, 0xfcc, 0x9, 0x6, 0x7, 0x5}, {0x3ff, 0x1, 0xa, 0xffffa747, 0xfffff002, 0xb0}, {0x2614, 0x5, 0x3ff, 0xe5, 0x200, 0x8}, {0x7e10, 0x4, 0xa, 0x0, 0x9, 0x40}, {0xfffffff7, 0x1000, 0x7fff, 0x8, 0x7, 0x7}, {0x81, 0x5, 0x3, 0x7, 0x82b3, 0x3}, {0xc, 0x401, 0x6, 0x3, 0x80000000, 0xb6e}, {0x9, 0x800, 0xfffffff9, 0x2, 0x3, 0x4}, {0xe, 0x0, 0x3, 0x5, 0x3b83, 0x3}, {0x200, 0xfffffffa, 0x8, 0x721, 0xd359, 0x10}, {0x7, 0x5, 0x10001, 0x8, 0x80000000, 0x2}, {0x9, 0x6, 0xfba, 0x6, 0x9bd, 0xdae}, {0x7, 0x507, 0x8, 0x8, 0x5, 0x7}, {0x448f, 0x81, 0x8, 0x80, 0x9, 0x4}, {0x7, 0x4993, 0xe76, 0x6, 0xcb0, 0x401}, {0x9, 0xc49c, 0xd4e1, 0x5, 0x1, 0x5}, {0x1, 0x7, 0xc, 0x2, 0xade, 0xb}, {0x1e14, 0xb, 0x9, 0x800095a, 0x1, 0x7}, {0x6, 0x101, 0xffff, 0x10001, 0x0, 0x7ff}, {0x4, 0x4, 0x0, 0x401, 0x7, 0x5}, {0x1, 0x4d8, 0x57a0, 0x1, 0x9, 0xffffffff}, {0xffffffff, 0x6, 0x0, 0x2222068c, 0x3, 0x1}, {0x2, 0x1000, 0x2, 0x2, 0xfffffff7, 0x7ff}, {0xd, 0x3af, 0x9, 0x8, 0x5, 0xe}, {0x6, 0x33a1, 0x8, 0x8, 0x2, 0xf59}, {0x10000, 0x7fffffff, 0x6, 0x6, 0x6, 0x6}, {0xe, 0xb5, 0x7, 0x1, 0x5, 0x2}, {0x191, 0x6, 0x1, 0x8, 0x4272, 0xfffffff8}, {0x9, 0x6, 0x7, 0x0, 0xf960, 0x9d}, {0x1, 0x2, 0x6, 0x6cde, 0xfffffff7, 0x1ff}, {0x5, 0x3, 0x3, 0x1030, 0x494, 0xffffffcc}, {0x1e2, 0x1, 0x1, 0x4, 0x5, 0x6}, {0xa503, 0x80000000, 0xc3, 0x1ff, 0x1, 0x7}, {0x7, 0x1, 0xe, 0xff, 0x3, 0x9}, {0x80000001, 0x0, 0x3, 0xd, 0x7fffffff, 0xef}, {0x7, 0x6, 0x0, 0x764, 0x5, 0x4}, {0x0, 0x2, 0xb69, 0x7fff, 0x9, 0x5}, {0x5, 0xff, 0x6, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x5, 0x5, 0x3, 0x10001}, {0x6, 0x2, 0x0, 0x2, 0x2ee6, 0x8}, {0xb44, 0x5, 0x6, 0xfffffffa, 0x323, 0x2}, {0x3, 0x9, 0xfffffff7, 0x8, 0x7b6b14a2, 0x3}, {0x8, 0x80000000, 0x1, 0x44, 0x100, 0x257f}, {0x5, 0x5, 0xab, 0x9, 0x5, 0x7fffffff}, {0x9e, 0x6, 0x6, 0x3, 0x2, 0xf2}, {0x9, 0x4000, 0x101, 0x6, 0x4, 0xd}, {0x401, 0x0, 0x7, 0xffffffff, 0x8, 0x9}, {0xfffffffa, 0x9, 0xfffffffb, 0x5, 0x1004000, 0x7}, {0x0, 0x3, 0x80000000, 0x101, 0x5}, {0x10001, 0x2, 0x8, 0xffffffc0, 0xa, 0x5}, {0x7, 0x7, 0x8, 0xca, 0x5, 0x8}, {0xd576, 0x4, 0x4, 0x7, 0x4, 0x8}, {0xe, 0x6f, 0x10000, 0x2, 0x7, 0xb66}, {0xb64, 0x4, 0x7, 0x0, 0x80000001, 0x9}, {0x1, 0x51b2, 0x7, 0x3, 0x4}, {0x3, 0x4, 0x6146a1c3, 0x3, 0xd7, 0x5}, {0x80000001, 0x40, 0xfff, 0x81, 0x4, 0xfffffff9}, {0x7, 0x800, 0x5c, 0x45, 0x4, 0x100}, {0x6, 0x1ff, 0x3, 0x9fed, 0x0, 0x4}, {0x6, 0x4, 0x67, 0x7fffffff, 0xf7}, {0x35be, 0xc, 0x1, 0x800, 0xfffeffff, 0x1000000}, {0x7, 0x8001, 0x0, 0x1, 0x7}, {0x800, 0x5, 0x0, 0x10000000, 0x6, 0x3}, {0x9, 0x6, 0xd, 0x4, 0x537, 0x2}, {0x7, 0x80, 0xb51, 0x1, 0x8000, 0x6}, {0x1, 0x36, 0x186b, 0x995f, 0x5, 0x4}, {0xd3a, 0x15aa, 0x92c0, 0x10000, 0x4, 0x6}, {0x80000000, 0x7, 0x6, 0x0, 0x9, 0xe}, {0x3, 0x3694, 0x6, 0x9, 0x51cf3566, 0x4}, {0x0, 0xffffffff, 0x3, 0x7f, 0x4, 0x1ff}, {0x6, 0x6, 0x2, 0x5, 0xdf63, 0x4}, {0x6, 0x8001, 0x8, 0x7, 0x10000, 0xb}, {0x3, 0x4, 0x4, 0x6, 0x1ff, 0x1}, {0x10, 0x2, 0x54, 0x47c, 0x808, 0x4}, {0x7, 0x101, 0xe, 0x5, 0x100, 0xfffffffe}, {0x0, 0x6, 0x4, 0x1, 0xfffffff1, 0x36}, {0x0, 0x81, 0x6, 0x5b1b, 0xfff, 0xd29}, {0x1ff, 0x2, 0x7fffffff, 0x0, 0x0, 0x4}, {0x800, 0x53e, 0xac15, 0x73, 0xf112, 0x9}, {0x2, 0x800, 0x8d, 0x6268, 0x8, 0x4}, {0x8, 0xffff, 0xf2d, 0x2, 0x5, 0xa}, {0x8, 0x2, 0x1, 0x31d8, 0x7, 0x5}, {0x5, 0x8, 0xda2c, 0x823d, 0x2, 0xfffffff9}, {0x2, 0xc, 0x7fffffff, 0x0, 0x165, 0x6}, {0x5, 0x3, 0x8622, 0x80, 0x1, 0x1}, {0x3, 0x81, 0xc13, 0xffff, 0x1, 0x4}, {0xf4f0, 0x800, 0xa, 0x5, 0x7, 0x11b}, {0x7, 0x86b7, 0x0, 0xee, 0x81, 0x6}, {0x3, 0xfffffff7, 0xffff, 0x101, 0x3}, {0x5, 0x40, 0x4, 0xfffffffd, 0x9, 0x3}], [{0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6bc7e79ad7b0d1cc}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x4}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {}, {0x6, 0x1}, {0x371e711c6fc2f61}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xf9ad1b51769e9d3d}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000400000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5)

3.901499601s ago: executing program 4 (id=3358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffff070c000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 8)

3.56122266s ago: executing program 0 (id=3359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xd4, 0x0, 0x4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xd7}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000020010000000000000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0)
sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'vlan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000280)={0x60000016})
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r4)
epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xd4, 0x0, 0x4) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xd7}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000020010000000000000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000280)={0x60000016}) (async)
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r4) (async)
epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) (async)
close(r4) (async)

3.479876211s ago: executing program 4 (id=3360):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], &(0x7f0000000f40)=""/4079, 0x4a, 0xfef, 0x6, 0x4}, 0x28)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0xe, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0)

2.339033087s ago: executing program 2 (id=3361):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)
r1 = socket$rds(0x15, 0x5, 0x0)
accept4(r1, &(0x7f0000000000)=@ll, &(0x7f00000000c0)=0x80, 0x0)

2.217431608s ago: executing program 2 (id=3362):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x1000})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\a\x00\x00', @ANYRESDEC=r5, @ANYBLOB="01002cbd7000fcdbdf253900000010005a800c0000800500070001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x20})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x0, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40240, 0x0)
close(r10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r10], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2040010)

2.151705828s ago: executing program 4 (id=3363):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r4=>0x0, 0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x11, &(0x7f0000000600)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x0, 0x8, 0x4, 0x3, 0x0, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0xb, 0x4, 0x0, 0x40, 0xffffffffffffffff}], &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x43, &(0x7f0000000700)=""/67, 0x41100, 0x42, '\x00', 0x0, @fallback=0x4, r5, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0x3, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r2], 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff0}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
close(0x4) (async)
r9 = socket$unix(0x1, 0x1, 0x0) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x7}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xf, 0x5, 0x80}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0x7, 0x5}, {0x10, 0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000300)=""/103, 0x68, 0x67, 0x1, 0x3, 0x10000}, 0x28)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x3, 0x0, 0x5, 0x40000, 0xffffffffffffffff, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x90}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}], &(0x7f0000000180)='GPL\x00', 0x9d4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r11, r9, r12, 0x1, r1], &(0x7f0000000500)=[{0x0, 0x2, 0x0, 0xc}, {0x5, 0x4, 0x6, 0xb}, {0x2, 0x1, 0xe, 0x3}], 0x10, 0x7}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

2.115805243s ago: executing program 0 (id=3364):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080), 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000740)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @local, @void, {@generic={0x894f}}}}, 0x12) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000) (async)
r8 = socket(0x2, 0x80805, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={<r11=>r10, @in6={{0xa, 0x4e21, 0x1002, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffe}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r11, 0x2, 0x30}, &(0x7f00000000c0)=0xc) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007f00000000000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r13, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0x10f, 0x0, &(0x7f0000000140)="bdda0292f97d81b5497949bdf5fb47708d42152ceb9d9b37fbf0a9e5220dc71c6c00a43b7f2de143eefcd7d3507f111700117f3415a5caec5ea23992c0ada0eeab44fec7f6051e6db2fe3d0000000000000000e295cbef3dc3f6b36f99df7da86b3f58614a43aeeef354c459bfefb1de4e2aa3d18b48e7b4d8fd530a917388728a3538da92221fa576461fdd8df057d3dd6aa2054f6b66341dfb8d4ce3be9cf03b85c8821279534b721f8c54490e18515b7a852a7371e0580de4603f5b40c30040ed15449f184d6b655ec2b9a7292b56e90f81a8f5f1f1f4ff4275", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)

2.028594179s ago: executing program 0 (id=3365):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000080800034000000008080007400000002c0800064000000000480000000c0a01010000000000000000070040041c0003801800008008000340000000020c00028006000100d0f900000900020073797a31000000000900010073797a30009520eb89fe3830b0e6bd208f4dbea24f000000140000001000010000000000000000000084000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000080800034000000008080007400000002c0800064000000000480000000c0a01010000000000000000070040041c0003801800008008000340000000020c00028006000100d0f900000900020073797a31000000000900010073797a30009520eb89fe3830b0e6bd208f4dbea24f000000140000001000010000000000000000000084000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x4, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x160}}, 0x20000011)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xad0c, 0x1, 0xff, 0xa, 0x9, 0xc}, 0x20)

214.812351ms ago: executing program 1 (id=3366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007ea0000f8ffffffb702000008000000b70300000000006946120afb17e9b658d4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)

214.163295ms ago: executing program 0 (id=3367):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4048004}, 0x88c4)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000240)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000007c0)={'wg0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x98, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4880)
recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)

210.538164ms ago: executing program 3 (id=3368):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991e00000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe338}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x9c, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x86, 0x1, "401d47f322c051e63e08ac8de5e6ff7ff52ae30fc12301968c977142b719e40e54b2dd5c5fb602d45ca1de42dc9194a7b2ff414056a8331fa5caa7e8465e37d6593786f966d7dae66dec0251ac30044907421a456d27eac7bc9cb04fe769734fdd73f6ae030e8dc8f3c88fc7244b7f4ead72c9ac1fe50f481b6b13e92dfa1c6c5b75"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085000000a400000095", @ANYRES64=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

103.130615ms ago: executing program 1 (id=3369):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newchain={0x38, 0x64, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x10, 0x4}, {0x10, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xffff}}]}}]}, 0x38}, 0x1, 0xfffc}, 0x801)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x102, 0x4, 0x0, 0x0, {0xa, 0x4e24, 0x0, @mcast2}}}, 0x32)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$inet6(r5, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

0s ago: executing program 4 (id=3370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>0x0, 0x29, 0x12, 0x1b, 0x4, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8, 0x0, 0x401}})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r5, 0x111, 0x6, 0x0, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x8000, 0x7800, 0x5, 0x10001, {{0xb, 0x4, 0x2, 0x2a, 0x2c, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xbe, 0x3, 0x4, [{@local, 0x5}, {@local, 0x4}]}, @noop]}}}}})
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000120000000100000008000100020000002400048005000700050000000500030005000000050003000000000005000300060000000800020002000000fce5b4b0e85a8eeae181edc6889a500a14c025078fa4695aa78c35b534e56115abd467b650223ee5cf22253b94f2b4f66ec850c266fb8caf0fc4994d9e2b"], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003c00010325bd7000fcffff070c000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f00000001c0)={0x6, 0xe, 0x6, 0x6})

kernel console output (not intermixed with test programs):

: 'syz.4.2284': attribute type 4 has an invalid length.
[  609.134209][T15618] gre0 speed is unknown, defaulting to 1000
[  609.171044][T15752] __nla_validate_parse: 2 callbacks suppressed
[  609.171068][T15752] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2282'.
[  609.294343][T15757] netlink: 'syz.4.2287': attribute type 2 has an invalid length.
[  609.313210][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'.
[  609.603463][T15618] gre0 speed is unknown, defaulting to 1000
[  609.917076][T15783] netlink: 'syz.4.2292': attribute type 21 has an invalid length.
[  610.290226][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'.
[  610.340571][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2297'.
[  610.384755][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2297'.
[  610.563319][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'.
[  610.618632][T15823] ipvlan2: entered allmulticast mode
[  610.624494][T15823] syz_tun: entered allmulticast mode
[  610.641677][T15822] block nbd3: server does not support multiple connections per device.
[  610.706581][T15822] block nbd3: shutting down sockets
[  610.725058][T15823] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  610.916094][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'.
[  610.967966][T15849] netlink: 'syz.0.2305': attribute type 10 has an invalid length.
[  610.986623][T15847] siw: device registration error -23
[  611.006255][T15852] syzkaller0: entered promiscuous mode
[  611.022871][T15852] syzkaller0: entered allmulticast mode
[  611.070391][T15854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2304'.
[  611.706854][T15888] lo speed is unknown, defaulting to 1000
[  611.726735][T15888] gre0 speed is unknown, defaulting to 1000
[  612.148144][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'.
[  612.204363][T15917] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  612.241781][T15921] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  612.346406][T15928] syzkaller0: entered promiscuous mode
[  612.363565][T15928] syzkaller0: entered allmulticast mode
[  612.423636][T15923] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  612.436377][T15923] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  612.748904][T15934] lo speed is unknown, defaulting to 1000
[  612.949414][T15934] gre0 speed is unknown, defaulting to 1000
[  612.986602][T15937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2320'.
[  613.046196][T15962] net_ratelimit: 1 callbacks suppressed
[  613.046214][T15962] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  613.175189][T15971] veth1_to_bond: entered allmulticast mode
[  613.207646][T15971] veth1_to_bond (unregistering): left allmulticast mode
[  613.625004][T15999] syz_tun: entered allmulticast mode
[  613.668032][T15996] syz_tun: left allmulticast mode
[  613.749602][T16003] syzkaller0: entered promiscuous mode
[  613.757148][T16003] syzkaller0: entered allmulticast mode
[  614.047220][T16012] bridge_slave_1: left allmulticast mode
[  614.083084][T16012] sit1: left allmulticast mode
[  614.098084][T16012] bond5: left allmulticast mode
[  614.398257][T16021] __nla_validate_parse: 1 callbacks suppressed
[  614.398277][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'.
[  614.749799][T16037] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  615.348945][T16064] netlink: 'syz.3.2344': attribute type 1 has an invalid length.
[  615.588721][T16075] netlink: 'syz.4.2347': attribute type 1 has an invalid length.
[  615.899500][T16105] vxcan0: entered allmulticast mode
[  616.008303][T16111] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2354'.
[  616.059233][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'.
[  616.225825][T16127] netlink: 'syz.0.2358': attribute type 1 has an invalid length.
[  616.303800][T16133] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2359'.
[  616.316170][T16127] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.535561][T16146] netlink: 'syz.4.2361': attribute type 21 has an invalid length.
[  616.561624][T16147] netlink: 'syz.4.2361': attribute type 21 has an invalid length.
[  616.600348][T16147] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2361'.
[  616.611944][T16146] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2361'.
[  616.629761][T16147] netlink: 'syz.4.2361': attribute type 5 has an invalid length.
[  616.668698][T16147] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2361'.
[  616.719301][T16146] netlink: 'syz.4.2361': attribute type 5 has an invalid length.
[  616.740686][T16146] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2361'.
[  616.812691][T16155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2363'.
[  617.048903][T16171] macvtap1: entered promiscuous mode
[  617.081581][T16171] macvtap1: entered allmulticast mode
[  617.093214][T16171] veth1_vlan: entered allmulticast mode
[  617.134580][T16174] macvtap2: entered promiscuous mode
[  617.140041][T16174] macvtap2: entered allmulticast mode
[  617.525724][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'.
[  617.923717][T16224] netlink: 'syz.3.2374': attribute type 15 has an invalid length.
[  618.055371][T16228] syz_tun: entered allmulticast mode
[  618.077375][T16228] syz_tun (unregistering): left allmulticast mode
[  618.556641][T16246] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  618.588394][T16246] bond3 (unregistering): Released all slaves
[  618.738948][T16271] openvswitch: netlink: Flow key attr not present in new flow.
[  618.798480][T16274] netlink: 'syz.4.2390': attribute type 11 has an invalid length.
[  618.818665][T16274] netlink: 'syz.4.2390': attribute type 11 has an invalid length.
[  618.819248][ T6451] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  618.880103][ T6451] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  618.983053][ T6451] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  619.010034][ T6451] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  619.615272][T16324] team0: Port device syz_tun removed
[  619.620202][T16319] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.2397:16319
[  619.628940][T16327] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.2397:16327
[  619.650301][T16328] __nla_validate_parse: 10 callbacks suppressed
[  619.650317][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'.
[  619.673162][T16324] bridge_slave_1: left allmulticast mode
[  619.682875][T16324] bridge_slave_1: left promiscuous mode
[  619.694843][T16324] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.709898][T16324] team0: Port device team_slave_0 removed
[  619.718902][T16324] team0: Port device team_slave_1 removed
[  619.725888][T16324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.734539][T16324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.746131][T16324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  619.767018][ T6531] gre0 speed is unknown, defaulting to 1000
[  620.016737][T16342] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2401'.
[  620.165288][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2402'.
[  620.291943][T16346] geneve2: entered promiscuous mode
[  620.312248][ T6004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.332273][ T6004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.365799][ T6004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.398471][ T6004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.634203][T16372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  620.684515][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'.
[  620.862933][T16380] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20257
[  620.904957][T16382] validate_nla: 4 callbacks suppressed
[  620.905008][T16382] netlink: 'syz.0.2410': attribute type 8 has an invalid length.
[  620.936155][T16386] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2412'.
[  621.050485][T16392] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  621.076967][T16392] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  621.097329][T16392] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  621.329824][T16400] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2416'.
[  621.360368][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2416'.
[  621.381581][T16403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2417'.
[  622.072036][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'.
[  622.083216][T16422] bridge_slave_1: default FDB implementation only supports local addresses
[  622.148398][T16448] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  622.179125][T16437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2419'.
[  622.216191][T16448] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  622.299286][T16451] lo speed is unknown, defaulting to 1000
[  622.324025][T16451] gre0 speed is unknown, defaulting to 1000
[  622.610876][T16454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.635889][T16454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.687169][T16458] gretap0: mtu less than device minimum
[  622.858340][T16454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.900105][T16454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.968808][T16483] netlink: 'syz.1.2429': attribute type 31 has an invalid length.
[  623.144137][T16454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.179347][T16454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.298564][T16454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.310875][T16454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.874867][ T6437] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  623.897269][ T6437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.058392][ T6004] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  624.093137][ T6004] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.203019][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  624.287273][ T6004] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  624.313268][ T6004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.313527][T16531] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  624.333408][T16526] batman_adv: batadv0: Adding interface: dummy0
[  624.356168][T16526] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  624.389800][T16526] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  624.444473][ T6451] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  624.473144][ T6451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.648200][T16547] xt_TPROXY: Can be used only with -p tcp or -p udp
[  624.841093][T16554] __nla_validate_parse: 5 callbacks suppressed
[  624.881256][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'.
[  625.103725][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2447'.
[  625.384346][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'.
[  625.402720][T16584] syzkaller0: entered promiscuous mode
[  625.424972][T16584] syzkaller0: entered allmulticast mode
[  625.436491][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'.
[  625.796884][T16609] syzkaller0: entered promiscuous mode
[  625.810307][T16609] syzkaller0: entered allmulticast mode
[  625.884745][T16615] IPVS: set_ctl: invalid protocol: 135 172.30.0.2:20004
[  625.899501][T16616] netlink: 'syz.2.2459': attribute type 4 has an invalid length.
[  625.955735][T16616] nbd: socks must be embedded in a SOCK_ITEM attr
[  625.973526][T16616] block nbd3: shutting down sockets
[  626.193201][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2463'.
[  626.370677][T16641] lo speed is unknown, defaulting to 1000
[  626.406373][T16642] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  626.418945][T16641] gre0 speed is unknown, defaulting to 1000
[  626.482515][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'.
[  626.505978][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'.
[  626.786342][T16668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2470'.
[  626.990092][T16676] sctp: [Deprecated]: syz.3.2472 (pid 16676) Use of struct sctp_assoc_value in delayed_ack socket option.
[  626.990092][T16676] Use struct sctp_sack_info instead
[  627.115714][T16677] syzkaller1: tun_chr_ioctl cmd 1074025677
[  627.148771][T16677] syzkaller1: linktype set to 805
[  627.207249][T16679] can: request_module (can-proto-4) failed.
[  627.557705][T16703] netlink: 'syz.3.2480': attribute type 1 has an invalid length.
[  627.567035][ T5893] Bluetooth: hci4: link tx timeout
[  627.573912][ T5893] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  627.659718][T16703] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  627.986870][T16724] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  628.110496][T16739] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2487'.
[  628.132878][T16739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2487'.
[  628.221045][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.611352][T16772] sctp: [Deprecated]: syz.4.2492 (pid 16772) Use of int in maxseg socket option.
[  628.611352][T16772] Use struct sctp_assoc_value instead
[  628.612074][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.752257][T16770] C: left promiscuous mode
[  628.759443][T16770] žÿ: left promiscuous mode
[  628.765536][T16770] batadv1: left promiscuous mode
[  628.907131][T16770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.932535][T16770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.103326][ T6532] lo speed is unknown, defaulting to 1000
[  629.113497][ T6532] syz2: Port: 1 Link DOWN
[  629.133953][T16777] hsr_slave_1 (unregistering): left promiscuous mode
[  629.148055][ T6451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.161977][T10878] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.175511][T10878] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.212913][T16768] lo speed is unknown, defaulting to 1000
[  629.232373][T10878] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.249305][T10878] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.270662][T16768] gre0 speed is unknown, defaulting to 1000
[  629.634932][ T5162] Bluetooth: hci4: command 0x0406 tx timeout
[  629.643782][T16598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.774423][T16811] netlink: 'syz.2.2500': attribute type 3 has an invalid length.
[  629.922714][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.965860][T16816] macsec0: entered promiscuous mode
[  629.971446][T16816] bridge0: entered promiscuous mode
[  630.539797][ T6532] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.597036][ T6004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.795187][T16827] bond8: option arp_all_targets: invalid value (129)
[  630.818769][T16827] bond8 (unregistering): Released all slaves
[  630.970160][ T6004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.995547][T16860] netlink: 'syz.2.2509': attribute type 10 has an invalid length.
[  631.211360][T16858] __nla_validate_parse: 2 callbacks suppressed
[  631.211376][T16858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2508'.
[  631.330127][T16860] team0: Port device dummy0 added
[  631.616525][T16858] syzkaller0: entered promiscuous mode
[  631.631599][T16598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.645195][T16858] syzkaller0: entered allmulticast mode
[  631.874790][   T25] block nbd2: Possible stuck request ffff88802788e000: control (read@0,1024B). Runtime 90 seconds
[  631.885624][   T25] block nbd2: Possible stuck request ffff88802788e1c0: control (read@1024,1024B). Runtime 90 seconds
[  631.896897][   T25] block nbd2: Possible stuck request ffff88802788e380: control (read@2048,1024B). Runtime 90 seconds
[  631.908071][   T25] block nbd2: Possible stuck request ffff88802788e540: control (read@3072,1024B). Runtime 90 seconds
[  633.763819][ T5506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  633.810496][T16927] sctp: [Deprecated]: syz.2.2522 (pid 16927) Use of struct sctp_assoc_value in delayed_ack socket option.
[  633.810496][T16927] Use struct sctp_sack_info instead
[  633.853737][T16929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  633.915878][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2523'.
[  634.059277][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'.
[  634.089247][T16948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2526'.
[  634.151672][T16948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2526'.
[  634.166406][T16957] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2525'.
[  634.285864][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'.
[  634.471772][T16972] block nbd3: server does not support multiple connections per device.
[  634.494252][T16972] block nbd3: shutting down sockets
[  634.584449][T16962] tipc: Resetting bearer <eth:vlan0>
[  634.640551][T16962] tipc: Resetting bearer <eth:syzkaller0>
[  634.738662][T16982] lo speed is unknown, defaulting to 1000
[  634.754815][T16990] netlink: 'syz.0.2534': attribute type 1 has an invalid length.
[  634.803209][T16990] netlink: 'syz.0.2534': attribute type 2 has an invalid length.
[  634.822403][T16982] gre0 speed is unknown, defaulting to 1000
[  634.873600][T16597] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.899520][T16995] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2536'.
[  634.924113][T16995] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.2536'.
[  634.946728][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2536'.
[  635.161386][T16597] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.412999][T17018] lo speed is unknown, defaulting to 1000
[  635.500449][T17018] gre0 speed is unknown, defaulting to 1000
[  635.994998][T17040] bridge0: left promiscuous mode
[  636.102486][T16597] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.242170][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.413690][T17062] netlink: 'syz.0.2550': attribute type 25 has an invalid length.
[  636.436982][T17062] netlink: 'syz.0.2550': attribute type 3 has an invalid length.
[  636.457718][T17062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2550'.
[  636.569021][ T6451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.727157][T17077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2552'.
[  636.884745][T17074] syzkaller1: tun_chr_ioctl cmd 1074025677
[  636.910349][T17074] syzkaller1: linktype set to 805
[  636.919005][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  637.260024][T17093] lo speed is unknown, defaulting to 1000
[  637.293927][T17093] gre0 speed is unknown, defaulting to 1000
[  637.727427][T17104] syzkaller0: entered promiscuous mode
[  637.750954][T17104] syzkaller0: entered allmulticast mode
[  638.831630][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  639.658525][T17131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  639.776436][T17119] lo speed is unknown, defaulting to 1000
[  639.828662][T17119] gre0 speed is unknown, defaulting to 1000
[  640.216869][T17154] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.268745][T17157] netlink: 'syz.2.2566': attribute type 3 has an invalid length.
[  640.375412][ T5506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.528703][T17166] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2567'.
[  640.767932][T17173] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[  640.842315][T17178] netlink: 'syz.1.2571': attribute type 3 has an invalid length.
[  640.871446][T17179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.898964][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2571'.
[  640.937307][T17173] 8021q: adding VLAN 0 to HW filter on device bond9
[  640.954846][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2571'.
[  641.449435][T10880] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  641.457449][T17207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  641.577362][T17215] netlink: 'syz.2.2578': attribute type 21 has an invalid length.
[  641.609352][T17215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2578'.
[  641.646136][T17215] netlink: 'syz.2.2578': attribute type 4 has an invalid length.
[  641.667743][T17215] netlink: 'syz.2.2578': attribute type 5 has an invalid length.
[  641.690340][T17215] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2578'.
[  641.801227][T17215] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  641.819086][T17215] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  641.839435][T17215] tipc: Resetting bearer <eth:syzkaller0>
[  641.919515][T17225] syz.3.2581 uses old SIOCAX25GETINFO
[  641.977145][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'.
[  642.363539][T17245] syzkaller0: entered promiscuous mode
[  642.389473][   T30] audit: type=1800 audit(1777185678.461:6): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2587" name="memory.events" dev="tmpfs" ino=2722 res=0 errno=0
[  642.422585][T17245] 0: reclassify loop, rule prio 0, protocol 800
[  642.443861][T17245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.457872][T17257] netlink: 'syz.0.2588': attribute type 10 has an invalid length.
[  642.476896][   T30] audit: type=1804 audit(1777185678.551:7): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2587" name="/newroot/525/memory.events" dev="tmpfs" ino=2722 res=1 errno=0
[  642.840397][T17279] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2595'.
[  642.960214][T17285] tun0: tun_chr_ioctl cmd 1074812118
[  642.973307][T17285] tun0: tun_chr_ioctl cmd 1074033169
[  643.379883][T17309] xt_CT: You must specify a L4 protocol and not use inversions on it
[  643.410983][T17312] netlink: 'syz.4.2602': attribute type 10 has an invalid length.
[  643.476222][T17312] netlink: 'syz.4.2602': attribute type 10 has an invalid length.
[  643.491305][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2602'.
[  643.503879][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2602'.
[  643.523939][T17312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2602'.
[  643.636909][T17317] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2604'.
[  643.689850][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'.
[  643.737984][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'.
[  643.871404][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  644.250891][T17363] openvswitch: netlink: Duplicate key (type 21).
[  644.339522][T17363] xt_connbytes: Forcing CT accounting to be enabled
[  644.579371][T17383] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  644.659765][T17386] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  646.271274][ T5162] Bluetooth: hci4: command 0x0406 tx timeout
[  647.000846][T17342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  647.353418][ T5506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  647.354558][T17154] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  647.448436][T17411] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  647.483404][T17411] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  647.580235][T17419] netlink: 'syz.2.2630': attribute type 29 has an invalid length.
[  648.349969][T17446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  648.357281][T17446] IPv6: NLM_F_CREATE should be set when creating new route
[  648.364616][T17446] IPv6: NLM_F_CREATE should be set when creating new route
[  648.510546][T17453] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  648.683901][T17462] syzkaller0: entered promiscuous mode
[  648.700224][T17465] __nla_validate_parse: 4 callbacks suppressed
[  648.700239][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  648.701488][T17462] syzkaller0: entered allmulticast mode
[  648.860655][T17473] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  648.877261][T17465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2637'.
[  648.911903][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  649.044075][T10878] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  649.076031][T10878] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  649.134520][T10878] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  649.179818][T10878] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  649.327590][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'.
[  651.338357][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  651.366093][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  651.511096][T17588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2663'.
[  651.721593][T17588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2663'.
[  651.753751][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2667'.
[  651.774878][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2667'.
[  651.788894][T17604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2663'.
[  651.882395][T17598] lo speed is unknown, defaulting to 1000
[  651.930448][T17598] gre0 speed is unknown, defaulting to 1000
[  652.247401][ T5506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.397853][T17656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  653.473699][T17667] xt_recent: Unsupported userspace flags (000000b1)
[  653.493290][T17661] lo speed is unknown, defaulting to 1000
[  653.532831][T17661] gre0 speed is unknown, defaulting to 1000
[  653.926585][T17681] __nla_validate_parse: 5 callbacks suppressed
[  653.926604][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2684'.
[  653.951309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.988146][T17681] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2684'.
[  654.257750][T17696] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  655.077706][T17731] team0: Port device syz_tun added
[  655.165318][T17735] team0: Port device syz_tun removed
[  655.193754][T17735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  655.221284][T17740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  655.239984][T17740] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  655.267130][T17740] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  655.440035][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'.
[  655.464666][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'.
[  655.474665][T17745] netlink: 'syz.4.2697': attribute type 18 has an invalid length.
[  655.649629][T17754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'.
[  655.710008][T17754] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2699'.
[  655.747959][T17754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.791059][T17754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.832831][T17754] bond0 (unregistering): Released all slaves
[  655.875996][T17758] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.887749][T17758] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.006791][T17758] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.024088][T17758] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.116837][T17758] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.152267][T17758] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.189046][T17779] netlink: 'syz.1.2703': attribute type 21 has an invalid length.
[  656.213747][T17779] netlink: 'syz.1.2703': attribute type 6 has an invalid length.
[  656.231280][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2703'.
[  656.309377][T17758] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.346018][T17758] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.437515][T17785] veth0: entered promiscuous mode
[  656.487431][   T30] audit: type=1804 audit(1777185692.561:8): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2705" name="/newroot/574/memory.events" dev="tmpfs" ino=2969 res=1 errno=0
[  656.569676][   T30] audit: type=1800 audit(1777185692.561:9): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2705" name="memory.events" dev="tmpfs" ino=2969 res=0 errno=0
[  656.612350][T17790] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  656.675165][T17790] bond9 (unregistering): Released all slaves
[  656.816270][T17778] veth0: left promiscuous mode
[  656.825646][ T6451] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.846338][ T6451] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.957430][ T6451] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.994644][ T6451] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.134743][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'.
[  657.145543][ T6451] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  657.167536][ T6451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.177736][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'.
[  657.488005][ T6451] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  657.522427][ T6451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.762029][T17848] openvswitch: netlink: Message has 496 unknown bytes.
[  657.791735][T17848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.840211][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'.
[  657.884149][ T6532] lo speed is unknown, defaulting to 1000
[  658.034147][T17807] lec:lec_atm_close: lec0: Shut down!
[  658.284870][ T5506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.306549][T17154] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.406676][T17887] netlink: 'syz.1.2726': attribute type 27 has an invalid length.
[  658.423116][T17887] veth0_to_batadv: left promiscuous mode
[  658.428955][T17887] veth0_to_batadv: left allmulticast mode
[  658.437351][T17887] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  658.447323][T17887] vlan2: left promiscuous mode
[  658.452800][T17887] bridge0: left promiscuous mode
[  658.479098][T17887] bridge4: left promiscuous mode
[  658.501366][T17887] bridge4: left allmulticast mode
[  658.579368][T17888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  658.605352][T17890] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  658.630578][ T6532] lo speed is unknown, defaulting to 1000
[  658.642982][ T6532] syz2: Port: 1 Link ACTIVE
[  658.700396][T17898] lo speed is unknown, defaulting to 1000
[  658.728831][T17898] gre0 speed is unknown, defaulting to 1000
[  658.869913][T17888] lo speed is unknown, defaulting to 1000
[  658.991333][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  659.299046][T17888] gre0 speed is unknown, defaulting to 1000
[  660.012527][T17938] ipvlan4: entered promiscuous mode
[  660.285183][T17945] syzkaller0: entered promiscuous mode
[  660.300861][T17945] syzkaller0: entered allmulticast mode
[  660.497229][T17966] __nla_validate_parse: 1 callbacks suppressed
[  660.497248][T17966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2741'.
[  660.703943][T17970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2742'.
[  660.715012][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2742'.
[  660.735411][T17970] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2742'.
[  661.951677][   T25] block nbd2: Possible stuck request ffff88802788e000: control (read@0,1024B). Runtime 120 seconds
[  661.963434][   T25] block nbd2: Possible stuck request ffff88802788e1c0: control (read@1024,1024B). Runtime 120 seconds
[  661.974502][   T25] block nbd2: Possible stuck request ffff88802788e380: control (read@2048,1024B). Runtime 120 seconds
[  661.985975][   T25] block nbd2: Possible stuck request ffff88802788e540: control (read@3072,1024B). Runtime 120 seconds
[  662.619762][ T5506] lec:lec_start_xmit: lec0:No lecd attached
[  662.658705][T17960] lo speed is unknown, defaulting to 1000
[  662.684535][T17960] gre0 speed is unknown, defaulting to 1000
[  663.011956][T17994] bond4: option xmit_hash_policy: invalid value (10)
[  663.066278][T17994] bond4 (unregistering): Released all slaves
[  663.128325][T17999] 
€Â0: renamed from batadv_slave_1
[  663.279316][T17994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2746'.
[  663.729718][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'.
[  663.756976][T18021] xt_TCPMSS: Only works on TCP SYN packets
[  663.913269][T18029] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  663.930875][T18029] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  663.939326][T18029] tipc: Resetting bearer <eth:syzkaller0>
[  664.031239][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  664.393910][T18048] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2755'.
[  664.421274][T18048] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  664.429553][T18048] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2755'.
[  664.437601][T18058] netlink: 'syz.1.2756': attribute type 5 has an invalid length.
[  664.502225][T18056] syzkaller1: entered promiscuous mode
[  664.519856][T18056] syzkaller1: entered allmulticast mode
[  664.540759][T18056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2757'.
[  665.140229][T18102] netlink: 'syz.3.2765': attribute type 2 has an invalid length.
[  665.191313][T18102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2765'.
[  665.740039][T18129] lo speed is unknown, defaulting to 1000
[  665.770687][T18129] gre0 speed is unknown, defaulting to 1000
[  665.813614][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'.
[  665.858635][T18142] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  665.880876][T18142] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.985986][T18142] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  666.001516][T18142] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.103155][T18142] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  666.125621][T18142] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.211501][T18142] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  666.239861][T18142] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.448468][T18157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2775'.
[  666.506474][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'.
[  666.558889][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2775'.
[  666.637790][T18160] ip6gretap0: entered promiscuous mode
[  666.643966][T18160] ip6gretap0: entered allmulticast mode
[  666.757064][T18171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'.
[  666.775646][T18171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'.
[  666.794258][T18168] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  666.802508][T18168] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  666.821878][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2779'.
[  666.837130][ T6448] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  666.863815][ T6448] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.058989][ T6448] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  667.092186][ T6448] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.120103][ T6448] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  667.146418][ T6448] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.261948][T10880] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  667.292080][T10880] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.711186][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms
[  667.721013][    C1] lec:lec_tx_timeout: lec0
[  667.726372][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  667.891498][T18224] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2790'.
[  668.003547][T18232] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  668.051298][T18236] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2792'.
[  668.509860][T18230] lo speed is unknown, defaulting to 1000
[  668.585207][T18230] gre0 speed is unknown, defaulting to 1000
[  668.600291][T18255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2795'.
[  669.071227][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  669.167376][ T5897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  669.182633][ T5897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  669.192456][ T5897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  669.203929][ T5897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  669.216202][ T5897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  669.308015][T18275] lo speed is unknown, defaulting to 1000
[  669.850642][T18295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.928469][T18295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  670.166012][T18275] gre0 speed is unknown, defaulting to 1000
[  670.228002][T18295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.272651][T18295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  670.466630][T18295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.480437][T18295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  670.550961][T10878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.575727][T10878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.731819][T18295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.756103][T18295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  670.804802][T18314] lo speed is unknown, defaulting to 1000
[  670.857274][T18314] gre0 speed is unknown, defaulting to 1000
[  670.946389][T18316] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  670.988769][T18328] netlink: 'syz.0.2808': attribute type 4 has an invalid length.
[  671.139725][T10878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  671.156735][T10878] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  671.266828][T10878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  671.275801][T18338] netlink: 'syz.0.2809': attribute type 21 has an invalid length.
[  671.287224][T10878] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  671.295970][T18338] IPv6: NLM_F_CREATE should be specified when creating new route
[  671.309195][T18338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  671.316471][T18338] IPv6: NLM_F_CREATE should be set when creating new route
[  671.323779][T18338] IPv6: NLM_F_CREATE should be set when creating new route
[  671.331029][T18338] IPv6: NLM_F_CREATE should be set when creating new route
[  671.338471][ T5893] Bluetooth: hci5: command tx timeout
[  671.386943][T10880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  671.396299][T10880] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  671.508772][ T6437] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  671.529398][ T6437] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  671.740746][T18275] chnl_net:caif_netlink_parms(): no params data found
[  672.194351][T18357] __nla_validate_parse: 2 callbacks suppressed
[  672.194399][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'.
[  672.358641][T16597] bridge0: entered promiscuous mode
[  672.448409][T18359] team0: Port device dummy0 removed
[  672.490756][T18359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  672.568799][T18275] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.584904][T18275] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.607958][T18275] bridge_slave_0: entered allmulticast mode
[  672.638641][T18275] bridge_slave_0: entered promiscuous mode
[  672.682515][T18275] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.698616][T18275] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.708308][T18275] bridge_slave_1: entered allmulticast mode
[  672.717450][T18275] bridge_slave_1: entered promiscuous mode
[  672.741296][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  672.749391][    C1] lec:lec_tx_timeout: lec0
[  672.754989][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  672.870639][T18275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.892396][T18275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.947385][T18275] team0: Port device team_slave_0 added
[  672.971343][T18275] team0: Port device team_slave_1 added
[  673.080198][T18275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.093149][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'.
[  673.106720][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.174037][T18275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.199317][T18275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.214378][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.257375][T18398] netlink: 'syz.2.2818': attribute type 83 has an invalid length.
[  673.272988][T18275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.391410][ T5893] Bluetooth: hci5: command tx timeout
[  673.437069][T18275] hsr_slave_0: entered promiscuous mode
[  673.444802][T18275] hsr_slave_1: entered promiscuous mode
[  673.580676][T18413] syzkaller1: entered promiscuous mode
[  673.598764][T18413] syzkaller1: entered allmulticast mode
[  673.749367][T17154] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  673.773510][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  673.800131][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  673.811417][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  673.820723][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  673.830800][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  673.840653][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  674.111464][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.120855][T18446] netlink: 'syz.4.2828': attribute type 1 has an invalid length.
[  674.195868][T18447] vxcan1: entered promiscuous mode
[  674.581653][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'.
[  674.639837][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  675.020907][T18478] netlink: 'syz.1.2835': attribute type 1 has an invalid length.
[  675.047774][T18478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.173268][T18275] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  675.203596][T18275] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  675.222497][T18275] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  675.247749][T18275] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  675.263738][T18275] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  675.293650][T18275] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  675.310149][T18275] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  675.348359][T18275] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  675.471420][ T5893] Bluetooth: hci5: command tx timeout
[  675.524959][T18275] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.558594][T18275] 8021q: adding VLAN 0 to HW filter on device team0
[  675.590035][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.597262][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.646942][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.654283][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.345607][T18275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.532675][T18539] netlink: 'syz.2.2848': attribute type 1 has an invalid length.
[  676.562920][T18539] netlink: 'syz.2.2848': attribute type 2 has an invalid length.
[  676.579997][T18539] netlink: 'syz.2.2848': attribute type 2 has an invalid length.
[  676.589093][T18539] netlink: 'syz.2.2848': attribute type 2 has an invalid length.
[  676.598099][T18539] netlink: 'syz.2.2848': attribute type 1 has an invalid length.
[  676.611647][T18539] netlink: 'syz.2.2848': attribute type 2 has an invalid length.
[  676.655269][T18275] veth0_vlan: entered promiscuous mode
[  676.680178][T18539] syzkaller1: entered promiscuous mode
[  676.692465][T18539] syzkaller1: entered allmulticast mode
[  676.722881][T18275] veth1_vlan: entered promiscuous mode
[  676.919501][T18275] veth0_macvtap: entered promiscuous mode
[  676.976532][T18275] veth1_macvtap: entered promiscuous mode
[  677.049683][T18275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.078802][T18275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.124022][ T6451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.160581][ T6451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.199236][ T6451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.228422][ T6451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.540566][T18574] __nla_validate_parse: 9 callbacks suppressed
[  677.540585][T18574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2856'.
[  677.556420][ T5893] Bluetooth: hci5: command tx timeout
[  677.675068][T10881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.690218][T10881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.761131][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  677.769213][    C1] lec:lec_tx_timeout: lec0
[  677.774850][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  677.910070][ T6436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.944033][ T6436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.150445][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'.
[  678.251833][T18607] netlink: 'syz.3.2798': attribute type 9 has an invalid length.
[  678.497500][T18620] tc_dump_action: action bad kind
[  679.127860][T18655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2873'.
[  679.151235][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  679.160018][T18664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2874'.
[  679.326173][T18676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'.
[  679.614172][T18674] dvmrp1: entered allmulticast mode
[  679.668643][T18676] bond4: entered promiscuous mode
[  679.674447][T18676] 8021q: adding VLAN 0 to HW filter on device bond4
[  679.770572][T18688] 8021q: adding VLAN 0 to HW filter on device bond4
[  679.812162][T18688] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  679.845091][T18688] bond4: (slave vti0): Error -95 calling set_mac_address
[  679.872606][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'.
[  679.882573][T18706] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2880'.
[  679.939894][T18713] 8021q: VLANs not supported on nlmon0
[  680.260698][T18728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2886'.
[  680.408321][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'.
[  680.818163][T18749] lo speed is unknown, defaulting to 1000
[  680.855610][T18749] gre0 speed is unknown, defaulting to 1000
[  681.077068][T18765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2891'.
[  682.101733][T18795] bond0: (slave bond_slave_1): Device is not bonding slave
[  682.119973][T18795] bond0: option active_slave: invalid value (bond_slave_1)
[  682.158015][T18795] bond0 (unregistering): Released all slaves
[  682.328553][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.374560][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.393338][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.426282][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.465144][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.502882][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.540156][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.573663][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.592113][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.613227][T18793] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  682.791132][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  682.799303][    C1] lec:lec_tx_timeout: lec0
[  682.804223][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  682.813384][T18806] tipc: Started in network mode
[  682.821308][T18806] tipc: Node identity 72faa1692887, cluster identity 4711
[  682.834366][T18806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  682.877090][T18808] syzkaller0: entered promiscuous mode
[  682.901303][T18808] syzkaller0: entered allmulticast mode
[  683.116229][T18825] tipc: Resetting bearer <eth:syzkaller0>
[  683.196912][T18825] tipc: Disabling bearer <eth:syzkaller0>
[  683.381597][T18845] syzkaller0: entered promiscuous mode
[  683.417994][T18845] syzkaller0: entered allmulticast mode
[  683.486963][T18845] tcf_pedit_act: 7 callbacks suppressed
[  683.486981][T18845] tc action pedit offset -536870912 out of bounds
[  683.500715][T18845] tc action pedit offset -536870912 out of bounds
[  683.507219][T18845] tc action pedit offset -536870912 out of bounds
[  683.513736][T18845] tc action pedit offset -536870912 out of bounds
[  683.520205][T18845] tc action pedit offset -536870912 out of bounds
[  683.526705][T18845] tc action pedit offset -536870912 out of bounds
[  683.533185][T18845] tc action pedit offset -536870912 out of bounds
[  683.539628][T18845] tc action pedit offset -536870912 out of bounds
[  683.546135][T18845] tc action pedit offset -536870912 out of bounds
[  683.552640][T18845] tc action pedit offset -536870912 out of bounds
[  683.559117][T18845] TC_ACT_REPEAT abuse ?
[  683.804963][T18861] lo speed is unknown, defaulting to 1000
[  683.836540][T18861] gre0 speed is unknown, defaulting to 1000
[  684.196404][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.559107][T18893] lo speed is unknown, defaulting to 1000
[  684.698974][T18893] gre0 speed is unknown, defaulting to 1000
[  685.198056][T18908] __nla_validate_parse: 1 callbacks suppressed
[  685.198074][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2908'.
[  685.268915][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2908'.
[  685.658791][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  686.127969][T18927] sctp: [Deprecated]: syz.1.2912 (pid 18927) Use of int in maxseg socket option.
[  686.127969][T18927] Use struct sctp_assoc_value instead
[  686.185755][T18928] x_tables: duplicate underflow at hook 1
[  686.878840][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2914'.
[  686.919754][T18943] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  687.246214][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  687.257127][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  687.269711][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  687.280674][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  687.289373][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  687.477349][T18948] lo speed is unknown, defaulting to 1000
[  687.506832][T18948] gre0 speed is unknown, defaulting to 1000
[  687.810935][T18960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2919'.
[  687.821153][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  687.829224][    C1] lec:lec_tx_timeout: lec0
[  687.835062][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  687.927026][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'.
[  687.992690][T18960] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  688.105046][T18960] bond8 (unregistering): Released all slaves
[  688.239441][T10880] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  688.257540][T10880] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  688.316291][T18975] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  688.337541][T18975] bond7: (slave lo): Enslaving as an active interface with an up link
[  688.347989][T18975] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  688.394507][ T6526] lo speed is unknown, defaulting to 1000
[  688.425001][T16597] lo speed is unknown, defaulting to 1000
[  688.443948][ T6524] lo speed is unknown, defaulting to 1000
[  688.475846][T18981] IPVS: Unknown mcast interface: 

[  688.496623][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2923'.
[  688.505965][T10880] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  688.540256][T10880] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  688.729732][T19001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2925'.
[  688.755147][T19000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2925'.
[  688.855724][T10880] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  688.873010][T10880] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  688.975749][T19010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2928'.
[  689.022628][T19010] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2928'.
[  689.058554][T10880] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  689.090462][T10880] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  689.231228][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.394424][ T5893] Bluetooth: hci0: command tx timeout
[  689.493589][T19033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.668819][ T6531] IPVS: starting estimator thread 0...
[  689.735716][T18948] chnl_net:caif_netlink_parms(): no params data found
[  689.771299][T19049] IPVS: using max 30 ests per chain, 72000 per kthread
[  689.950572][T19044] lo speed is unknown, defaulting to 1000
[  690.023980][T19044] gre0 speed is unknown, defaulting to 1000
[  690.607743][T10878] smc: removing ib device syz1
[  690.649615][T10878] smbdirect: ib_dev[syz1] removed
[  690.694140][T10880] bond3 (unregistering): (slave geneve3): Releasing backup interface
[  691.130486][T10880] bond1 (unregistering): (slave bridge5): Releasing active interface
[  691.426588][T10880] bond0 (unregistering): Released all slaves
[  691.471222][ T5893] Bluetooth: hci0: command tx timeout
[  691.483369][T10880] bond1 (unregistering): Released all slaves
[  691.535095][T10880] bond2 (unregistering): Released all slaves
[  691.605031][T10880] bond3 (unregistering): Released all slaves
[  691.692493][T10880] bond4 (unregistering): Released all slaves
[  691.818380][ T6534] gre0 speed is unknown, defaulting to 1000
[  691.827961][ T6534] syz1: Port: 1 Link DOWN
[  692.029852][T18948] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.039356][   T25] block nbd2: Possible stuck request ffff88802788e000: control (read@0,1024B). Runtime 150 seconds
[  692.050321][   T25] block nbd2: Possible stuck request ffff88802788e1c0: control (read@1024,1024B). Runtime 150 seconds
[  692.061621][   T25] block nbd2: Possible stuck request ffff88802788e380: control (read@2048,1024B). Runtime 150 seconds
[  692.073085][   T25] block nbd2: Possible stuck request ffff88802788e540: control (read@3072,1024B). Runtime 150 seconds
[  692.084402][T18948] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.091712][T18948] bridge_slave_0: entered allmulticast mode
[  692.115435][T18948] bridge_slave_0: entered promiscuous mode
[  692.133829][T18948] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.141065][T18948] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.148950][T18948] bridge_slave_1: entered allmulticast mode
[  692.172279][T18948] bridge_slave_1: entered promiscuous mode
[  692.404395][T18948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.421332][T18948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.546545][T18948] team0: Port device team_slave_0 added
[  692.556047][T18948] team0: Port device team_slave_1 added
[  692.590691][T18948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.597858][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  692.624082][T18948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.637035][T18948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.644270][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  692.670666][T18948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  692.696611][T10880] tipc: Disabling bearer <eth:syzkaller0>
[  692.703393][T10880] tipc: Left network mode
[  692.760874][T18948] hsr_slave_0: entered promiscuous mode
[  692.770524][T18948] hsr_slave_1: entered promiscuous mode
[  692.792560][T18948] debugfs: 'hsr0' already exists in 'hsr'
[  692.798287][T18948] Cannot create hsr debugfs directory
[  692.820378][T10880] IPVS: stopping backup sync thread 9902 ...
[  692.841179][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  692.849246][    C1] lec:lec_tx_timeout: lec0
[  692.853996][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  693.076012][T19070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.200731][T19102] validate_nla: 8 callbacks suppressed
[  693.200749][T19102] netlink: 'syz.1.2944': attribute type 1 has an invalid length.
[  693.317630][T19102] __nla_validate_parse: 3 callbacks suppressed
[  693.317646][T19102] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2944'.
[  693.349836][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'.
[  693.372312][T19102] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2944'.
[  693.408749][T10880] hsr_slave_0: left promiscuous mode
[  693.413453][T19102] netlink: 'syz.1.2944': attribute type 1 has an invalid length.
[  693.430838][T10880] batadv0: left allmulticast mode
[  693.456909][T10880] batadv0: left promiscuous mode
[  693.514734][T19116] netlink: 'syz.3.2946': attribute type 11 has an invalid length.
[  693.555312][ T5893] Bluetooth: hci0: command tx timeout
[  693.980779][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'.
[  694.271379][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  694.555971][T19148] Cannot find add_set index 0 as target
[  694.680000][T10880] IPVS: stop unused estimator thread 0...
[  694.975828][T19160] bond0: option ad_user_port_key: invalid value (65535)
[  695.011535][T19160] bond0: option ad_user_port_key: allowed values 0 - 1023
[  695.055321][T19160] bond0 (unregistering): Released all slaves
[  695.584707][T19203] x_tables: duplicate underflow at hook 1
[  695.612775][T18948] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  695.631344][ T5893] Bluetooth: hci0: command tx timeout
[  695.649904][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  695.729088][T18948] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  695.843179][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  695.859315][T18948] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  695.895422][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  695.924011][T18948] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  695.964703][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  695.991770][T19225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'.
[  696.021503][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'.
[  696.082830][T19231] netlink: 'syz.4.2970': attribute type 1 has an invalid length.
[  696.110921][T19232] vlan0: left allmulticast mode
[  696.119004][T19232] geneve0: left allmulticast mode
[  696.127216][T19232] vlan0: left promiscuous mode
[  696.137016][T19232] geneve0: left promiscuous mode
[  696.143152][T19232] bridge0: port 4(vlan0) entered disabled state
[  696.152413][T19232] bond2: left allmulticast mode
[  696.157453][T19232] bond2: left promiscuous mode
[  696.162847][T19232] bridge0: port 3(bond2) entered disabled state
[  696.171669][T19232] bridge_slave_1: left allmulticast mode
[  696.177431][T19232] bridge_slave_1: left promiscuous mode
[  696.184713][T19232] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.196522][T19232] bridge_slave_0: left allmulticast mode
[  696.202900][T19232] bridge_slave_0: left promiscuous mode
[  696.208807][T19232] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.323062][T19240] bond8: (slave bridge9): making interface the new active one
[  696.333033][T19240] bond8: (slave bridge9): Enslaving as an active interface with an up link
[  696.353962][T19241] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  696.450910][T19233] lo speed is unknown, defaulting to 1000
[  696.820375][T19264] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  696.997585][T18948] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.030842][T18948] 8021q: adding VLAN 0 to HW filter on device team0
[  697.069710][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.076901][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.114594][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.121761][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.346641][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'.
[  697.357623][T19286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2980'.
[  697.388584][T19286] syzkaller0: entered promiscuous mode
[  697.401930][T19286] syzkaller0: entered allmulticast mode
[  697.728084][T19286] tcf_pedit_act: 22 callbacks suppressed
[  697.728104][T19286] tc action pedit offset 48 out of bounds
[  697.740485][T19286] tc action pedit offset 48 out of bounds
[  697.746311][T19286] tc action pedit offset 48 out of bounds
[  697.752099][T19286] tc action pedit offset 48 out of bounds
[  697.757854][T19286] tc action pedit offset 48 out of bounds
[  697.763646][T19286] tc action pedit offset 48 out of bounds
[  697.769401][T19286] tc action pedit offset 48 out of bounds
[  697.775175][T19286] tc action pedit offset 48 out of bounds
[  697.780922][T19286] tc action pedit offset 48 out of bounds
[  697.786712][T19286] tc action pedit offset 48 out of bounds
[  697.792493][T19286] 0: reclassify loop, rule prio 0, protocol 800
[  697.871172][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  697.879260][    C1] lec:lec_tx_timeout: lec0
[  697.884367][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  697.917316][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  698.073776][T19311] netdevsim netdevsim3: Direct firmware load for 
 failed with error -2
[  698.122059][T18948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.130522][T19311] netdevsim netdevsim3: Falling back to sysfs fallback for: 

[  698.198891][T19320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.206177][T19320] IPv6: NLM_F_CREATE should be set when creating new route
[  698.213502][T19320] IPv6: NLM_F_CREATE should be set when creating new route
[  698.220778][T19320] IPv6: NLM_F_CREATE should be set when creating new route
[  698.435454][T18948] veth0_vlan: entered promiscuous mode
[  698.455878][T18948] veth1_vlan: entered promiscuous mode
[  698.543820][T18948] veth0_macvtap: entered promiscuous mode
[  698.600836][T18948] veth1_macvtap: entered promiscuous mode
[  698.669066][T18948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.728307][T18948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.774277][ T6436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.810452][ T6436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.858892][ T6436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.898470][ T6436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.068073][T19360] netlink: 'syz.4.2991': attribute type 5 has an invalid length.
[  699.258593][T10880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.286703][T10880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.311482][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  699.398812][T19367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  699.406066][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.419886][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.434062][T19367] syzkaller0: entered promiscuous mode
[  699.454138][T19367] syzkaller0: entered allmulticast mode
[  699.582738][T19367] tipc: Resetting bearer <eth:syzkaller0>
[  699.706668][T19366] tipc: Resetting bearer <eth:syzkaller0>
[  699.784673][T19366] tipc: Disabling bearer <eth:syzkaller0>
[  699.984141][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'.
[  700.027194][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'.
[  700.082797][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'.
[  700.120645][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'.
[  700.299643][ T5162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  700.316508][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  700.325743][ T5162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  700.338353][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  700.360222][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  700.430803][T19401] lo speed is unknown, defaulting to 1000
[  701.036767][T19401] chnl_net:caif_netlink_parms(): no params data found
[  701.382104][T19443] netlink: 'syz.1.3011': attribute type 62 has an invalid length.
[  701.402013][T19436] tipc: Started in network mode
[  701.411599][T19436] tipc: Node identity aa8be2062e94, cluster identity 4711
[  701.427998][T19436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.491059][T19441] syzkaller0: entered promiscuous mode
[  701.509867][T19441] syzkaller0: entered allmulticast mode
[  701.525943][T19401] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.535245][T19401] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.544612][T19401] bridge_slave_0: entered allmulticast mode
[  701.552618][T19401] bridge_slave_0: entered promiscuous mode
[  701.616831][T19401] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.631770][T19401] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.643134][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'.
[  701.645272][T19401] bridge_slave_1: entered allmulticast mode
[  701.664781][T19401] bridge_slave_1: entered promiscuous mode
[  701.669745][T19436] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  701.708128][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3012'.
[  701.722443][T19441] tipc: Resetting bearer <eth:syzkaller0>
[  701.783292][T19435] tipc: Resetting bearer <eth:syzkaller0>
[  701.804680][T19435] tipc: Disabling bearer <eth:syzkaller0>
[  701.820538][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3012'.
[  701.837281][T19401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.849752][T19401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  701.938195][T19401] team0: Port device team_slave_0 added
[  701.975385][T19401] team0: Port device team_slave_1 added
[  702.140736][T19401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.165928][T19401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  702.220821][T19401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.233945][T19401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.240942][T19401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  702.304568][T19401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.357244][T19475] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3017'.
[  702.426275][T19401] hsr_slave_0: entered promiscuous mode
[  702.434766][ T5893] Bluetooth: hci2: command tx timeout
[  702.452892][T19401] hsr_slave_1: entered promiscuous mode
[  702.459263][T19401] debugfs: 'hsr0' already exists in 'hsr'
[  702.481983][T19401] Cannot create hsr debugfs directory
[  702.679611][T19469] mpoa:mpoad_close: (<unknown>) going down
[  702.790722][T19401] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.821224][T19401] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.901135][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  702.909235][    C1] lec:lec_tx_timeout: lec0
[  702.914372][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  702.958049][T19401] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.968231][T19401] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.065353][T19401] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.098600][T19401] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.305692][T19401] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.323724][T19401] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.541479][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3025'.
[  703.608590][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3026'.
[  703.963854][T19534] netlink: 'syz.2.3028': attribute type 6 has an invalid length.
[  704.140880][T19401] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  704.266948][T11717] udevd[11717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  704.287369][T19545] netlink: 'syz.3.3031': attribute type 4 has an invalid length.
[  704.298432][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  704.327987][T19401] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  704.352492][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  704.379555][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  704.445908][T19401] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  704.464082][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  704.481993][T19401] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  704.494897][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  704.511548][ T5893] Bluetooth: hci2: command tx timeout
[  704.519955][T19539] lo speed is unknown, defaulting to 1000
[  704.646261][T19567] netlink: 'syz.3.3031': attribute type 4 has an invalid length.
[  704.664678][T19534] lo speed is unknown, defaulting to 1000
[  705.172563][T19401] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.237806][T19401] 8021q: adding VLAN 0 to HW filter on device team0
[  705.275081][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.282364][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.319900][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.327091][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.470440][T19587] netlink: 'syz.0.3035': attribute type 7 has an invalid length.
[  705.751016][T19601] netlink: 'syz.2.3037': attribute type 13 has an invalid length.
[  705.796483][T19601] netlink: 'syz.2.3037': attribute type 17 has an invalid length.
[  705.869088][T19601] __nla_validate_parse: 11 callbacks suppressed
[  705.869107][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'.
[  706.018287][T19611] syzkaller1: entered promiscuous mode
[  706.032964][T19611] syzkaller1: entered allmulticast mode
[  706.184819][T17154] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  706.328384][T19401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.374560][T19631] xt_TPROXY: Can be used only with -p tcp or -p udp
[  706.601005][ T5893] Bluetooth: hci2: command tx timeout
[  706.635892][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'.
[  707.152133][T19401] veth0_vlan: entered promiscuous mode
[  707.173235][T19401] veth1_vlan: entered promiscuous mode
[  707.208568][T19401] veth0_macvtap: entered promiscuous mode
[  707.219571][T19401] veth1_macvtap: entered promiscuous mode
[  707.297290][T19401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.444158][T19401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.503814][ T6448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.518683][ T6448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.585290][ T6448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.640459][ T6448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.023970][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.075786][T19686] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3054'.
[  708.096331][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.131689][T19686] netlink: Unknown conntrack attr (type=2304, max=9)
[  708.138435][T19685] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  708.166263][T19685] syzkaller0: entered promiscuous mode
[  708.182005][T19685] syzkaller0: entered allmulticast mode
[  708.673387][ T5893] Bluetooth: hci2: command tx timeout
[  708.681105][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  708.689242][    C1] lec:lec_tx_timeout: lec0
[  708.694541][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  708.867810][T19687] tipc: Started in network mode
[  708.890483][T19687] tipc: Node identity 1ebbfb3caf6d, cluster identity 4711
[  708.914909][T19687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  708.942216][T19699] netem: incorrect ge model size
[  708.961561][T19699] netem: change failed
[  708.976964][T19682] tipc: Resetting bearer <eth:syzkaller0>
[  708.996287][ T5893] block nbd3: Receive control failed (result -32)
[  709.100959][T19720] netlink: 'syz.2.3060': attribute type 13 has an invalid length.
[  709.115116][T19682] tipc: Disabling bearer <eth:syzkaller0>
[  709.125885][T19720] netlink: 'syz.2.3060': attribute type 17 has an invalid length.
[  709.275125][T19720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  709.334483][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.359232][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.360476][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'.
[  709.379949][T19731] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  709.391390][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  709.602912][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'.
[  709.634252][T19736] openvswitch: netlink: Flow actions attr not present in new flow.
[  710.059526][T19759] syzkaller1: entered promiscuous mode
[  710.079115][T19759] syzkaller1: entered allmulticast mode
[  710.260969][T19762] pim6reg: entered allmulticast mode
[  710.306368][T19768] pim6reg: left allmulticast mode
[  710.414764][T19770] netlink: 'syz.1.3074': attribute type 3 has an invalid length.
[  710.426820][T19770] netlink: 'syz.1.3074': attribute type 3 has an invalid length.
[  710.753924][T19799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'.
[  710.798062][T19799] netlink: 'syz.4.3079': attribute type 10 has an invalid length.
[  710.851755][T19804] netlink: 'syz.4.3079': attribute type 10 has an invalid length.
[  710.871408][T19803] tipc: Can't bind to reserved service type 0
[  710.895068][T19800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3080'.
[  710.929253][T19799] team0: Port device dummy0 added
[  711.186417][T19804] team0: Port device dummy0 removed
[  711.250513][ T5162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  711.262389][ T5162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  711.279037][ T5162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  711.290338][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  711.307041][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  711.321666][T19804] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  711.402585][T19816] lo speed is unknown, defaulting to 1000
[  711.458840][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'.
[  712.139337][T19854] lo speed is unknown, defaulting to 1000
[  712.180396][T18572] IPVS: starting estimator thread 0...
[  712.264455][T19862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3091'.
[  712.292082][T19860] IPVS: using max 34 ests per chain, 81600 per kthread
[  712.390765][T19816] chnl_net:caif_netlink_parms(): no params data found
[  712.470484][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3091'.
[  712.904788][T19894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.029902][T19893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  713.391349][ T5893] Bluetooth: hci3: command tx timeout
[  713.711677][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  713.719814][    C1] lec:lec_tx_timeout: lec0
[  713.724599][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  714.431302][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  714.508361][T19816] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.531306][T19816] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.539153][T19816] bridge_slave_0: entered allmulticast mode
[  714.547602][T19816] bridge_slave_0: entered promiscuous mode
[  714.575303][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'.
[  714.597961][T19816] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.624330][T19816] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.653159][T19816] bridge_slave_1: entered allmulticast mode
[  714.673287][T19816] bridge_slave_1: entered promiscuous mode
[  714.742138][T19816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.787177][T19816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.793298][T19938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3100'.
[  714.883981][T19938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  714.956816][T19816] team0: Port device team_slave_0 added
[  714.987645][T19816] team0: Port device team_slave_1 added
[  715.100407][T19816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  715.120472][T19816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.173570][T19816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  715.197035][T19816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  715.229644][T19816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.301925][T19816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  715.386577][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'.
[  715.418866][T19954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'.
[  715.454405][T19954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'.
[  715.472547][ T5893] Bluetooth: hci3: command tx timeout
[  715.515083][T19816] hsr_slave_0: entered promiscuous mode
[  715.541027][T19816] hsr_slave_1: entered promiscuous mode
[  715.564959][T19816] debugfs: 'hsr0' already exists in 'hsr'
[  715.602428][T19816] Cannot create hsr debugfs directory
[  715.753794][T19969] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  715.807785][T19973] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  716.680777][T20024] syzkaller0: entered promiscuous mode
[  716.690662][T20024] syzkaller0: entered allmulticast mode
[  716.799554][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'.
[  717.526896][T19816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  717.551209][ T5893] Bluetooth: hci3: command tx timeout
[  717.894494][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  717.949140][T19816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  718.540122][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  718.731111][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  718.739181][    C1] lec:lec_tx_timeout: lec0
[  718.743843][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  718.909203][T20090] netlink: 'syz.4.3132': attribute type 1 has an invalid length.
[  719.151874][T19816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  719.216536][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  719.253041][T19816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  719.309613][T19816] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  719.428640][T20094] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3133'.
[  719.471348][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  719.631903][ T5893] Bluetooth: hci3: command tx timeout
[  719.780635][T19816] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.824940][T20108] netlink: 'syz.4.3135': attribute type 21 has an invalid length.
[  719.859885][T19816] 8021q: adding VLAN 0 to HW filter on device team0
[  719.917863][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.925059][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  720.028298][T10884] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.035491][T10884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.245574][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'.
[  720.262210][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'.
[  720.305548][T20126] netlink: 'syz.1.3140': attribute type 19 has an invalid length.
[  720.345905][T20128] geneve2: entered promiscuous mode
[  720.365511][T20126] netlink: 'syz.1.3140': attribute type 20 has an invalid length.
[  720.853322][T19816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.881557][T20143] lo speed is unknown, defaulting to 1000
[  721.153242][T19816] veth0_vlan: entered promiscuous mode
[  721.286450][T20151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3143'.
[  721.449858][T19816] veth1_vlan: entered promiscuous mode
[  721.623379][T19816] veth0_macvtap: entered promiscuous mode
[  721.667189][T19816] veth1_macvtap: entered promiscuous mode
[  721.767799][T19816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.807751][T19816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.873226][ T6448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.905089][ T6448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.962615][ T6448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.986375][ T6448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.125326][   T25] block nbd2: Possible stuck request ffff88802788e000: control (read@0,1024B). Runtime 180 seconds
[  722.138139][   T25] block nbd2: Possible stuck request ffff88802788e1c0: control (read@1024,1024B). Runtime 180 seconds
[  722.149253][   T25] block nbd2: Possible stuck request ffff88802788e380: control (read@2048,1024B). Runtime 180 seconds
[  722.160399][   T25] block nbd2: Possible stuck request ffff88802788e540: control (read@3072,1024B). Runtime 180 seconds
[  722.349116][T20171] netlink: 'syz.4.3148': attribute type 1 has an invalid length.
[  722.386844][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.388802][T20171] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3148'.
[  722.434533][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.461314][T20171] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3148'.
[  722.491880][T20171] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3148'.
[  722.540340][T20185] pim6reg: entered allmulticast mode
[  722.771585][T20190] netlink: 'syz.2.3150': attribute type 2 has an invalid length.
[  722.836973][T20184] pim6reg: left allmulticast mode
[  722.922856][ T6451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.931540][ T6451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.140383][T20208] netlink: 'syz.1.3153': attribute type 2 has an invalid length.
[  723.761095][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  723.769167][    C1] lec:lec_tx_timeout: lec0
[  723.773824][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  723.929309][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'.
[  724.047695][T20232] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  724.058801][T20226] 8021q: adding VLAN 0 to HW filter on device batadv1
[  724.068613][T20226] team0: Port device batadv1 added
[  724.095860][T20226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3082'.
[  724.127826][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  724.349230][T20245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3162'.
[  724.511550][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  724.705400][ T5162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  724.717341][ T5162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  724.728918][ T5162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  724.740391][ T5162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  724.750791][ T5162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  724.832322][T20264] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3167'.
[  724.928544][T20255] lo speed is unknown, defaulting to 1000
[  725.136318][T20266] syzkaller0: entered promiscuous mode
[  725.159723][T20266] syzkaller0: entered allmulticast mode
[  725.305939][T20283] netlink: 'syz.4.3173': attribute type 11 has an invalid length.
[  725.604673][T20300] gre0 speed is unknown, defaulting to 1000
[  725.822725][T20300] gre0 speed is unknown, defaulting to 1000
[  725.847682][T20255] chnl_net:caif_netlink_parms(): no params data found
[  725.903116][T20300] gre0 speed is unknown, defaulting to 1000
[  726.109353][T20322] openvswitch: netlink: EtherType 0 is less than min 600
[  726.402108][T20336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3183'.
[  726.452766][T20338] netlink: 'syz.0.3181': attribute type 25 has an invalid length.
[  726.486064][T20255] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.490500][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'.
[  726.494782][T20338] netlink: 'syz.0.3181': attribute type 3 has an invalid length.
[  726.526238][T20255] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.544377][T20255] bridge_slave_0: entered allmulticast mode
[  726.560854][T20255] bridge_slave_0: entered promiscuous mode
[  726.713876][T20255] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.746121][T20255] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.779394][T20255] bridge_slave_1: entered allmulticast mode
[  726.816862][T20255] bridge_slave_1: entered promiscuous mode
[  726.834047][ T5162] Bluetooth: hci1: command tx timeout
[  726.845107][T20300] infiniband syz1: set active
[  726.853283][T20300] infiniband syz1: added gre0
[  726.879061][T20300] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  726.888165][T20300] infiniband syz1: Couldn't open port 1
[  726.947128][T20300] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  726.981282][T16598] gre0 speed is unknown, defaulting to 1000
[  726.983952][T20300] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  727.007905][T20300] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  727.013128][T20255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.068616][T20300] RDS/IB: syz1: added
[  727.085815][T20255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.087018][T20300] smc: adding ib device syz1 with port count 1
[  727.117317][T20300] smc:    ib device syz1 port 1 has no pnetid
[  727.227359][ T6535] gre0 speed is unknown, defaulting to 1000
[  727.315560][T20300] gre0 speed is unknown, defaulting to 1000
[  727.333329][T20255] team0: Port device team_slave_0 added
[  727.380150][T20255] team0: Port device team_slave_1 added
[  727.494788][T20255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.504107][T20255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.564415][T20255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.603488][T20255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.621772][T20255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.643796][T20373] __nla_validate_parse: 1 callbacks suppressed
[  727.643848][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'.
[  727.700763][T20255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.942897][T20255] hsr_slave_0: entered promiscuous mode
[  727.962148][T20255] hsr_slave_1: entered promiscuous mode
[  727.982432][T20255] debugfs: 'hsr0' already exists in 'hsr'
[  727.998832][T20255] Cannot create hsr debugfs directory
[  728.338660][T20300] gre0 speed is unknown, defaulting to 1000
[  728.434825][T20396] netlink: 'syz.0.3195': attribute type 1 has an invalid length.
[  728.462056][T20396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3195'.
[  728.781193][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  728.789429][    C1] lec:lec_tx_timeout: lec0
[  728.794438][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  728.870776][T20410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3197'.
[  728.912318][ T5162] Bluetooth: hci1: command tx timeout
[  729.257425][T20300] gre0 speed is unknown, defaulting to 1000
[  729.551301][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  730.189886][T20460] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.345484][T20255] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  730.409828][T20255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  730.450113][T20255] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  730.522048][T20255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  730.562731][T20255] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  730.619786][T20255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  730.649221][T20300] gre0 speed is unknown, defaulting to 1000
[  730.657163][T20255] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  730.719834][T20255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  730.750165][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'.
[  730.994769][ T5162] Bluetooth: hci1: command tx timeout
[  731.079215][T20255] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.107965][T20505] netlink: zone id is out of range
[  731.141895][T20505] netlink: zone id is out of range
[  731.154453][T20255] 8021q: adding VLAN 0 to HW filter on device team0
[  731.182479][T20505] netlink: zone id is out of range
[  731.207680][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.214967][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  731.255013][T20505] netlink: zone id is out of range
[  731.292243][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.294696][T20505] netlink: zone id is out of range
[  731.299553][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.355644][T20505] netlink: zone id is out of range
[  731.370081][T20505] netlink: zone id is out of range
[  731.398770][T20505] netlink: zone id is out of range
[  731.418011][T20505] netlink: zone id is out of range
[  731.441293][T20505] netlink: zone id is out of range
[  731.464233][T20505] netlink: zone id is out of range
[  731.488203][T20300] gre0 speed is unknown, defaulting to 1000
[  731.500582][T20511] syzkaller0: entered promiscuous mode
[  731.515655][T20511] syzkaller0: entered allmulticast mode
[  731.737830][T20511] xt_hashlimit: max too large, truncated to 1048576
[  731.762859][T20511] xt_hashlimit: overflow, try lower: 2/0
[  732.243233][T20300] gre0 speed is unknown, defaulting to 1000
[  732.462982][T20255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.616339][T20541] team0: Port device syz_tun added
[  732.673037][T20545] netlink: 'syz.0.3217': attribute type 1 has an invalid length.
[  732.706648][T20544] team0: Port device syz_tun removed
[  732.758511][T20544] bridge_slave_0: left allmulticast mode
[  732.779519][T20544] bridge_slave_0: left promiscuous mode
[  732.787663][T20544] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.815796][T20544] bridge_slave_1: left allmulticast mode
[  732.823507][T20544] bridge_slave_1: left promiscuous mode
[  732.829408][T20544] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.855510][T20544] bond0: (slave bond_slave_0): Releasing backup interface
[  732.886958][T20544] bond0: (slave bond_slave_1): Releasing backup interface
[  732.929038][T20544] team0: Port device team_slave_0 removed
[  732.960270][T20544] team0: Port device team_slave_1 removed
[  732.982394][T20544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.993555][T20544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  733.015008][T20544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.023562][T20544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  733.083057][ T5162] Bluetooth: hci1: command tx timeout
[  733.100493][T20550] bond1 (unregistering): Released all slaves
[  733.170952][T20551] vlan2: entered allmulticast mode
[  733.180645][T20551] macvlan0: entered allmulticast mode
[  733.192991][T20551] veth1_vlan: entered allmulticast mode
[  733.216721][T20300] gre0 speed is unknown, defaulting to 1000
[  733.234137][T20255] veth0_vlan: entered promiscuous mode
[  733.303533][T20255] veth1_vlan: entered promiscuous mode
[  733.504576][T20255] veth0_macvtap: entered promiscuous mode
[  733.532021][T20255] veth1_macvtap: entered promiscuous mode
[  733.615478][T20255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  733.679473][T20255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  733.730076][ T6253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  733.751540][ T6253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  733.790721][ T6253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  733.801118][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  733.809152][    C1] lec:lec_tx_timeout: lec0
[  733.813935][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  733.830582][ T6253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.955596][T20586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  734.003866][T20588] syzkaller0: entered promiscuous mode
[  734.021212][T20588] syzkaller0: entered allmulticast mode
[  734.089645][T20300] gre0 speed is unknown, defaulting to 1000
[  734.156455][T20588] tipc: Resetting bearer <eth:syzkaller0>
[  734.241899][T20588] tipc: Disabling bearer <eth:syzkaller0>
[  734.358335][T20603] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  734.395733][T20600] bond1 (unregistering): Released all slaves
[  734.487224][T10866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.535517][T10866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.548658][T20606] sit1: entered allmulticast mode
[  734.591320][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  734.636087][T20615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3228'.
[  734.886670][T10866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.899403][T10866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.907536][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'.
[  734.928671][T20621] pim6reg: entered allmulticast mode
[  734.948486][T20300] gre0 speed is unknown, defaulting to 1000
[  735.083903][T20620] pim6reg: left allmulticast mode
[  735.190764][T20632] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3233'.
[  735.428181][T20645] Cannot find set identified by id 65534 to match
[  735.436072][T20644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3236'.
[  735.597276][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  735.618467][T20646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3234'.
[  735.664590][T20646] hsr0: entered allmulticast mode
[  735.679835][T20646] hsr_slave_0: entered allmulticast mode
[  735.700180][T20646] hsr_slave_1: entered allmulticast mode
[  736.260588][T20675] net_ratelimit: 44 callbacks suppressed
[  736.260610][T20675] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  736.328552][T20678] xt_CT: No such helper "syz1"
[  736.511845][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'.
[  736.889224][T20692] lo speed is unknown, defaulting to 1000
[  736.909369][T20692] gre0 speed is unknown, defaulting to 1000
[  736.975013][T20696] bridge_slave_0: left allmulticast mode
[  736.995943][T20696] bridge_slave_0: left promiscuous mode
[  737.007963][T20696] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.052517][T20699] netlink: 'syz.1.3248': attribute type 2 has an invalid length.
[  737.081768][T20699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3248'.
[  737.108658][T20696] bridge_slave_1: left allmulticast mode
[  737.126524][T20696] bridge_slave_1: left promiscuous mode
[  737.146574][T20696] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.208913][T20696] bond0: (slave bond_slave_0): Releasing backup interface
[  737.249205][T20696] bond0: (slave bond_slave_1): Releasing backup interface
[  737.283016][T20696] team0: Port device team_slave_0 removed
[  737.294347][T20696] team0: Port device team_slave_1 removed
[  737.301688][T20696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  737.309116][T20696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  737.330285][T20714] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  737.344708][T20696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.354662][T20696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.367818][T20696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  737.440862][T20699] bond1: option primary_reselect: invalid value (133)
[  737.451848][T20699] bond1 (unregistering): Released all slaves
[  737.703197][T20704] lo speed is unknown, defaulting to 1000
[  737.738956][T20704] gre0 speed is unknown, defaulting to 1000
[  737.948409][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'.
[  737.965498][T20742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3256'.
[  738.153399][T19923] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  738.177360][T19923] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  738.209494][T19923] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  738.243484][T19923] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  738.804016][T20768] siw: device registration error -23
[  738.821120][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  738.829173][    C1] lec:lec_tx_timeout: lec0
[  738.837627][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  739.086784][T20778] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  739.147010][T20778] bond1: (slave lo): Enslaving as an active interface with an up link
[  739.172864][T20778] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  739.552839][T20797] netlink: 'syz.1.3268': attribute type 4 has an invalid length.
[  739.605972][T20794] netlink: 'syz.1.3268': attribute type 4 has an invalid length.
[  739.717538][T20803] __nla_validate_parse: 4 callbacks suppressed
[  739.717569][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'.
[  739.771917][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'.
[  739.941756][T20803] team1: entered promiscuous mode
[  739.954440][T20803] team1: entered allmulticast mode
[  739.968541][T20803] 8021q: adding VLAN 0 to HW filter on device team1
[  739.991014][T20800] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  740.039197][T20817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3270'.
[  740.080766][T20800] team2: entered promiscuous mode
[  740.086126][T20800] team2: entered allmulticast mode
[  740.092016][T20800] 8021q: adding VLAN 0 to HW filter on device team2
[  740.910677][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'.
[  741.009401][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3281'.
[  741.036285][T20852] netlink: 'syz.4.3280': attribute type 25 has an invalid length.
[  741.290355][T20875] netlink: 'syz.0.3283': attribute type 1 has an invalid length.
[  741.344544][T20881] netlink: 'syz.3.3282': attribute type 4 has an invalid length.
[  741.396432][T20873] netlink: 'syz.3.3282': attribute type 4 has an invalid length.
[  741.457803][T20886] netlink: 'syz.2.3286': attribute type 1 has an invalid length.
[  741.513440][T20875] 8021q: adding VLAN 0 to HW filter on device bond1
[  741.521241][T20890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3286'.
[  741.617792][T20898] ip6gretap1: entered promiscuous mode
[  741.632306][T20898] ip6gretap1: entered allmulticast mode
[  741.737307][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3288'.
[  741.770606][T20898] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3286'.
[  741.926968][T20890] bond1: (slave bridge1): making interface the new active one
[  741.974124][T20890] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  742.242930][T20928] vlan2: entered promiscuous mode
[  742.248093][T20928] bridge0: entered promiscuous mode
[  742.257850][T20931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  742.281756][T20933] netlink: 'syz.4.3294': attribute type 5 has an invalid length.
[  742.440609][T20936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  742.680248][T20954] netlink: 'syz.4.3299': attribute type 1 has an invalid length.
[  742.717267][T20954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  742.729265][T20957] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3301'.
[  742.820247][T20961] veth1_vlan: left allmulticast mode
[  742.859432][T20961] netlink: 'syz.0.3302': attribute type 2 has an invalid length.
[  742.915132][T20964] bridge0: port 1(bond0) entered blocking state
[  742.938821][T20964] bridge0: port 1(bond0) entered disabled state
[  742.986859][T20964] bond0: entered allmulticast mode
[  743.065328][T20964] bond0: entered promiscuous mode
[  743.150601][T20979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3305'.
[  743.675329][T21007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  743.851265][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  743.868389][    C1] lec:lec_tx_timeout: lec0
[  743.873999][ T5162] Bluetooth: hci1: command tx timeout
[  743.878961][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  744.058331][T21020] batman_adv: batadv0: Adding interface: gretap1
[  744.088992][T21020] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.145521][T21020] batman_adv: batadv0: Interface activated: gretap1
[  744.331282][T21017] lo speed is unknown, defaulting to 1000
[  744.394837][T21041] pim6reg: entered allmulticast mode
[  744.422313][T21017] gre0 speed is unknown, defaulting to 1000
[  744.428624][T21030] pim6reg: left allmulticast mode
[  744.482694][T21027] lo speed is unknown, defaulting to 1000
[  744.775412][T21061] __nla_validate_parse: 9 callbacks suppressed
[  744.775430][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3324'.
[  744.890218][ T5162] block nbd4: Receive control failed (result -1)
[  745.148565][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'.
[  745.195213][T21076] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  745.207643][T21027] gre0 speed is unknown, defaulting to 1000
[  745.230975][T21075] syzkaller0: entered promiscuous mode
[  745.253427][T21075] syzkaller0: entered allmulticast mode
[  745.286520][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.294981][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.301834][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.308653][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.315489][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.322301][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.329088][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.335958][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.342783][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.349565][T21075] tc action pedit offset must be on 32 bit boundaries
[  745.356446][T21075] TC_ACT_REPEAT abuse ?
[  745.603635][T21086] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  745.676398][T21089] openvswitch: netlink: IP tunnel dst address not specified
[  746.052823][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'.
[  746.153142][T21113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3335'.
[  747.052360][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3341'.
[  747.064423][T21144] syzkaller0: entered promiscuous mode
[  747.079559][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  747.086264][T21144] syzkaller0: entered allmulticast mode
[  747.155957][T21144] TC_ACT_REPEAT abuse ?
[  747.260230][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'.
[  747.479740][T21156] syzkaller0: entered promiscuous mode
[  747.500459][T21156] syzkaller0: entered allmulticast mode
[  747.640243][T21177] FAULT_INJECTION: forcing a failure.
[  747.640243][T21177] name failslab, interval 1, probability 0, space 0, times 0
[  747.672721][T21177] CPU: 0 UID: 0 PID: 21177 Comm: syz.3.3347 Not tainted syzkaller #0 PREEMPT(full) 
[  747.672745][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  747.672757][T21177] Call Trace:
[  747.672764][T21177]  <TASK>
[  747.672771][T21177]  dump_stack_lvl+0xe8/0x150
[  747.672805][T21177]  should_fail_ex+0x412/0x560
[  747.672840][T21177]  should_failslab+0xa8/0x100
[  747.672874][T21177]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  747.672917][T21177]  ? __alloc_skb+0x1d0/0x7d0
[  747.672934][T21177]  ? __local_bh_enable_ip+0xd0/0x130
[  747.672968][T21177]  __alloc_skb+0x1d0/0x7d0
[  747.672992][T21177]  netlink_dump+0x1d8/0xe10
[  747.673028][T21177]  ? __pfx_netlink_dump+0x10/0x10
[  747.673078][T21177]  ? genl_start+0x499/0x6c0
[  747.673116][T21177]  __netlink_dump_start+0x5cb/0x7e0
[  747.673147][T21177]  genl_family_rcv_msg_dumpit+0x213/0x310
[  747.673181][T21177]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  747.673219][T21177]  ? __pfx_genl_start+0x10/0x10
[  747.673245][T21177]  ? __pfx_genl_dumpit+0x10/0x10
[  747.673271][T21177]  ? __pfx_genl_done+0x10/0x10
[  747.673303][T21177]  ? bpf_lsm_capable+0x9/0x20
[  747.673334][T21177]  ? security_capable+0x7e/0x2c0
[  747.673379][T21177]  genl_rcv_msg+0x5e8/0x7a0
[  747.673415][T21177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  747.673443][T21177]  ? __pfx_batadv_bla_backbone_dump+0x10/0x10
[  747.673469][T21177]  ? __pfx_ref_tracker_free+0x10/0x10
[  747.673506][T21177]  netlink_rcv_skb+0x232/0x4b0
[  747.673529][T21177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  747.673560][T21177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  747.673601][T21177]  ? down_read+0x270/0x2e0
[  747.673630][T21177]  ? genl_rcv+0xd/0x40
[  747.673659][T21177]  genl_rcv+0x28/0x40
[  747.673684][T21177]  netlink_unicast+0x75c/0x8e0
[  747.673728][T21177]  netlink_sendmsg+0x813/0xb40
[  747.673762][T21177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.673790][T21177]  ? aa_sock_msg_perm+0xf1/0x1b0
[  747.673814][T21177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  747.673850][T21177]  ____sys_sendmsg+0x972/0x9f0
[  747.673876][T21177]  ? __might_fault+0xaf/0x130
[  747.673907][T21177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  747.673942][T21177]  ? import_iovec+0x73/0xa0
[  747.673972][T21177]  ___sys_sendmsg+0x2a5/0x360
[  747.673995][T21177]  ? __lock_acquire+0x6b5/0x2cf0
[  747.674033][T21177]  ? __pfx____sys_sendmsg+0x10/0x10
[  747.674097][T21177]  ? __fget_files+0x2a/0x420
[  747.674119][T21177]  ? __fget_files+0x3a0/0x420
[  747.674151][T21177]  __x64_sys_sendmsg+0x1bd/0x2a0
[  747.674179][T21177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  747.674227][T21177]  ? __pfx_ksys_write+0x10/0x10
[  747.674263][T21177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.674296][T21177]  do_syscall_64+0x15f/0xf80
[  747.674321][T21177]  ? trace_irq_disable+0x3b/0x140
[  747.674346][T21177]  ? clear_bhb_loop+0x40/0x90
[  747.674369][T21177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.674387][T21177] RIP: 0033:0x7f4e2259cdd9
[  747.674403][T21177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.674419][T21177] RSP: 002b:00007f4e233bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.674439][T21177] RAX: ffffffffffffffda RBX: 00007f4e22815fa0 RCX: 00007f4e2259cdd9
[  747.674453][T21177] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  747.674464][T21177] RBP: 00007f4e233bc090 R08: 0000000000000000 R09: 0000000000000000
[  747.674476][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.674487][T21177] R13: 00007f4e22816038 R14: 00007f4e22815fa0 R15: 00007ffdd29b7f48
[  747.674517][T21177]  </TASK>
[  748.655960][T21210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3351'.
[  748.721227][T21214] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  748.748493][T21210] gretap0: entered promiscuous mode
[  748.782046][T21210] gretap0: left promiscuous mode
[  748.808130][T21219] validate_nla: 1 callbacks suppressed
[  748.808145][T21219] netlink: 'syz.0.3352': attribute type 1 has an invalid length.
[  748.847159][T21219] netlink: 'syz.0.3352': attribute type 2 has an invalid length.
[  748.850207][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'.
[  748.891113][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  748.899159][    C1] lec:lec_tx_timeout: lec0
[  748.903817][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  748.925478][T21224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3354'.
[  748.983338][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'.
[  749.079182][T21226] 8021q: VLANs not supported on vcan0
[  749.248919][T21245] FAULT_INJECTION: forcing a failure.
[  749.248919][T21245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.280493][T21245] CPU: 1 UID: 0 PID: 21245 Comm: syz.4.3358 Not tainted syzkaller #0 PREEMPT(full) 
[  749.280519][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  749.280530][T21245] Call Trace:
[  749.280538][T21245]  <TASK>
[  749.280546][T21245]  dump_stack_lvl+0xe8/0x150
[  749.280582][T21245]  should_fail_ex+0x412/0x560
[  749.280618][T21245]  _copy_to_user+0x31/0xb0
[  749.280644][T21245]  simple_read_from_buffer+0xe1/0x170
[  749.280670][T21245]  proc_fail_nth_read+0x1bb/0x230
[  749.280694][T21245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  749.280728][T21245]  ? rw_verify_area+0x2a6/0x4d0
[  749.280750][T21245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  749.280772][T21245]  vfs_read+0x20c/0xa70
[  749.280802][T21245]  ? __pfx___mutex_lock+0x10/0x10
[  749.280829][T21245]  ? __pfx_vfs_read+0x10/0x10
[  749.280853][T21245]  ? __fget_files+0x2a/0x420
[  749.280876][T21245]  ? __fget_files+0x3a0/0x420
[  749.280893][T21245]  ? __fget_files+0x2a/0x420
[  749.280920][T21245]  ksys_read+0x150/0x270
[  749.280944][T21245]  ? __pfx_ksys_read+0x10/0x10
[  749.280972][T21245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.280992][T21245]  do_syscall_64+0x15f/0xf80
[  749.281017][T21245]  ? trace_irq_disable+0x3b/0x140
[  749.281041][T21245]  ? clear_bhb_loop+0x40/0x90
[  749.281063][T21245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.281082][T21245] RIP: 0033:0x7f602fb5d60e
[  749.281098][T21245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  749.281114][T21245] RSP: 002b:00007f6030a3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  749.281134][T21245] RAX: ffffffffffffffda RBX: 00007f6030a3d6c0 RCX: 00007f602fb5d60e
[  749.281148][T21245] RDX: 000000000000000f RSI: 00007f6030a3d0a0 RDI: 0000000000000004
[  749.281159][T21245] RBP: 00007f6030a3d090 R08: 0000000000000000 R09: 0000000000000000
[  749.281171][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.281182][T21245] R13: 00007f602fe16038 R14: 00007f602fe15fa0 R15: 00007ffe03cfe418
[  749.281212][T21245]  </TASK>
[  749.758373][T21229] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.173402][T21229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.218451][T21229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  750.629401][T21229] batman_adv: batadv0: Interface deactivated: gretap1
[  750.653245][T21235] vlan2: entered allmulticast mode
[  750.661696][T21235] bridge0: port 3(vlan2) entered blocking state
[  750.668310][T21235] bridge0: port 3(vlan2) entered disabled state
[  750.677846][T21235] vlan2: entered promiscuous mode
[  750.684962][T21231] syzkaller0: entered promiscuous mode
[  750.692434][T21231] syzkaller0: entered allmulticast mode
[  750.784670][T21244] syzkaller0: entered promiscuous mode
[  750.796790][T21244] syzkaller0: entered allmulticast mode
[  750.822442][T21253] netlink: 'syz.4.3360': attribute type 7 has an invalid length.
[  750.830770][T21253] netlink: 'syz.4.3360': attribute type 8 has an invalid length.
[  751.068131][T21278] netlink: 'syz.2.3362': attribute type 10 has an invalid length.
[  751.077245][T21278] __nla_validate_parse: 4 callbacks suppressed
[  751.077261][T21278] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3362'.
[  752.209388][   T25] block nbd2: Possible stuck request ffff88802788e000: control (read@0,1024B). Runtime 210 seconds
[  752.223575][   T25] block nbd2: Possible stuck request ffff88802788e1c0: control (read@1024,1024B). Runtime 210 seconds
[  752.234739][   T25] block nbd2: Possible stuck request ffff88802788e380: control (read@2048,1024B). Runtime 210 seconds
[  752.246541][   T25] block nbd2: Possible stuck request ffff88802788e540: control (read@3072,1024B). Runtime 210 seconds
[  752.729115][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.738353][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.771569][T21278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  752.796374][T21278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  752.824381][T21278] hsr0: entered promiscuous mode
[  752.847998][T21278] bridge0: port 4(hsr0) entered blocking state
[  752.883388][T21278] bridge0: port 4(hsr0) entered disabled state
[  752.896449][T21278] hsr0: entered allmulticast mode
[  752.914129][T21278] hsr_slave_0: entered allmulticast mode
[  752.932841][T21278] hsr_slave_1: entered allmulticast mode
[  752.948974][T21284] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.962784][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.982787][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.058027][T21299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.102224][T21299] 
[  753.104590][T21299] ======================================================
[  753.111633][T21299] WARNING: possible circular locking dependency detected
[  753.118689][T21299] syzkaller #0 Not tainted
[  753.123157][T21299] ------------------------------------------------------
[  753.130207][T21299] syz.1.3369/21299 is trying to acquire lock:
[  753.136293][T21299] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  753.145484][T21299] 
[  753.145484][T21299] but task is already holding lock:
[  753.152854][T21299] ffff888037260338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  753.162368][T21299] 
[  753.162368][T21299] which lock already depends on the new lock.
[  753.162368][T21299] 
[  753.172778][T21299] 
[  753.172778][T21299] the existing dependency chain (in reverse order) is:
[  753.181808][T21299] 
[  753.181808][T21299] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  753.189496][T21299]        __might_fault+0xcb/0x130
[  753.194536][T21299]        _copy_from_user+0x28/0xb0
[  753.199658][T21299]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  753.206173][T21299]        ip_generic_getfrag+0x149/0x2d0
[  753.211729][T21299]        __ip6_append_data+0x3902/0x3e90
[  753.217373][T21299]        ip6_append_data+0x10f/0x280
[  753.222665][T21299]        rawv6_sendmsg+0x12d3/0x18e0
[  753.227959][T21299]        ____sys_sendmsg+0x80a/0x9f0
[  753.233252][T21299]        ___sys_sendmsg+0x2a5/0x360
[  753.238471][T21299]        __x64_sys_sendmsg+0x1bd/0x2a0
[  753.243949][T21299]        do_syscall_64+0x15f/0xf80
[  753.249095][T21299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.255521][T21299] 
[  753.255521][T21299] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  753.263283][T21299]        lock_sock_nested+0x41/0x100
[  753.268598][T21299]        inet_shutdown+0x6a/0x390
[  753.273630][T21299]        nbd_mark_nsock_dead+0x2e9/0x560
[  753.279280][T21299]        recv_work+0x1c2e/0x1d40
[  753.284233][T21299]        process_scheduled_works+0xb5d/0x1860
[  753.290322][T21299]        worker_thread+0xa53/0xfc0
[  753.295463][T21299]        kthread+0x388/0x470
[  753.300067][T21299]        ret_from_fork+0x514/0xb70
[  753.305196][T21299]        ret_from_fork_asm+0x1a/0x30
[  753.310492][T21299] 
[  753.310492][T21299] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  753.318155][T21299]        __mutex_lock+0x1a3/0x1550
[  753.323289][T21299]        nbd_queue_rq+0x37b/0x1100
[  753.328424][T21299]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  753.334506][T21299]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  753.341376][T21299]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  753.347888][T21299]        blk_mq_run_hw_queue+0x348/0x4f0
[  753.353613][T21299]        blk_mq_dispatch_list+0xd16/0xe10
[  753.359345][T21299]        blk_mq_flush_plug_list+0x48d/0x570
[  753.365243][T21299]        __blk_flush_plug+0x3ed/0x4d0
[  753.370630][T21299]        __submit_bio+0x28d/0x580
[  753.375670][T21299]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  753.381835][T21299]        block_read_full_folio+0x599/0x830
[  753.387661][T21299]        filemap_read_folio+0x137/0x3b0
[  753.393220][T21299]        do_read_cache_folio+0x358/0x590
[  753.398873][T21299]        read_part_sector+0xb6/0x2b0
[  753.404178][T21299]        adfspart_check_ICS+0xb1/0x960
[  753.409663][T21299]        bdev_disk_changed+0x817/0x1770
[  753.415211][T21299]        blkdev_get_whole+0x380/0x510
[  753.420603][T21299]        bdev_open+0x31e/0xd30
[  753.425384][T21299]        blkdev_open+0x470/0x610
[  753.430351][T21299]        do_dentry_open+0x785/0x14e0
[  753.435688][T21299]        vfs_open+0x3b/0x340
[  753.440291][T21299]        path_openat+0x2e08/0x3860
[  753.445418][T21299]        do_file_open+0x23e/0x4a0
[  753.450451][T21299]        do_sys_openat2+0x113/0x200
[  753.455664][T21299]        __x64_sys_openat+0x138/0x170
[  753.461046][T21299]        do_syscall_64+0x15f/0xf80
[  753.466173][T21299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.472600][T21299] 
[  753.472600][T21299] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  753.479837][T21299]        __mutex_lock+0x1a3/0x1550
[  753.484972][T21299]        nbd_queue_rq+0xc6/0x1100
[  753.490009][T21299]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  753.496099][T21299]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  753.503052][T21299]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  753.509601][T21299]        blk_mq_run_hw_queue+0x348/0x4f0
[  753.515239][T21299]        blk_mq_dispatch_list+0xd16/0xe10
[  753.520984][T21299]        blk_mq_flush_plug_list+0x48d/0x570
[  753.526887][T21299]        __blk_flush_plug+0x3ed/0x4d0
[  753.532263][T21299]        __submit_bio+0x28d/0x580
[  753.537303][T21299]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  753.543475][T21299]        block_read_full_folio+0x599/0x830
[  753.549321][T21299]        filemap_read_folio+0x137/0x3b0
[  753.554873][T21299]        do_read_cache_folio+0x358/0x590
[  753.560524][T21299]        read_part_sector+0xb6/0x2b0
[  753.565815][T21299]        adfspart_check_ICS+0xb1/0x960
[  753.571324][T21299]        bdev_disk_changed+0x817/0x1770
[  753.576886][T21299]        blkdev_get_whole+0x380/0x510
[  753.582264][T21299]        bdev_open+0x31e/0xd30
[  753.587058][T21299]        blkdev_open+0x470/0x610
[  753.592006][T21299]        do_dentry_open+0x785/0x14e0
[  753.597306][T21299]        vfs_open+0x3b/0x340
[  753.601894][T21299]        path_openat+0x2e08/0x3860
[  753.607105][T21299]        do_file_open+0x23e/0x4a0
[  753.612135][T21299]        do_sys_openat2+0x113/0x200
[  753.617334][T21299]        __x64_sys_openat+0x138/0x170
[  753.622712][T21299]        do_syscall_64+0x15f/0xf80
[  753.627827][T21299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.634259][T21299] 
[  753.634259][T21299] -> #3 (set->srcu){.+.+}-{0:0}:
[  753.641422][T21299]        __synchronize_srcu+0xca/0x300
[  753.646895][T21299]        elevator_switch+0x1e8/0x7a0
[  753.652183][T21299]        elevator_change+0x2cc/0x450
[  753.657478][T21299]        elevator_set_default+0x36c/0x430
[  753.663217][T21299]        blk_register_queue+0x3e9/0x4e0
[  753.668783][T21299]        __add_disk+0x677/0xd50
[  753.673647][T21299]        add_disk_fwnode+0xfb/0x480
[  753.678865][T21299]        nbd_dev_add+0x72c/0xb50
[  753.683811][T21299]        nbd_init+0x168/0x1f0
[  753.688504][T21299]        do_one_initcall+0x250/0x870
[  753.693802][T21299]        do_initcall_level+0x104/0x190
[  753.699276][T21299]        do_initcalls+0x59/0xa0
[  753.704134][T21299]        kernel_init_freeable+0x2a6/0x3e0
[  753.709872][T21299]        kernel_init+0x1d/0x1d0
[  753.714725][T21299]        ret_from_fork+0x514/0xb70
[  753.719851][T21299]        ret_from_fork_asm+0x1a/0x30
[  753.725142][T21299] 
[  753.725142][T21299] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  753.732969][T21299]        __mutex_lock+0x1a3/0x1550
[  753.738181][T21299]        elevator_change+0x1b3/0x450
[  753.743476][T21299]        elevator_set_none+0xb5/0x140
[  753.748890][T21299]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  753.755235][T21299]        nbd_start_device+0x17f/0xb10
[  753.760629][T21299]        nbd_genl_connect+0x165b/0x1cf0
[  753.766203][T21299]        genl_family_rcv_msg_doit+0x22a/0x330
[  753.772284][T21299]        genl_rcv_msg+0x61c/0x7a0
[  753.777330][T21299]        netlink_rcv_skb+0x232/0x4b0
[  753.782619][T21299]        genl_rcv+0x28/0x40
[  753.787131][T21299]        netlink_unicast+0x75c/0x8e0
[  753.792425][T21299]        netlink_sendmsg+0x813/0xb40
[  753.797801][T21299]        ____sys_sendmsg+0x972/0x9f0
[  753.803119][T21299]        ___sys_sendmsg+0x2a5/0x360
[  753.808333][T21299]        __x64_sys_sendmsg+0x1bd/0x2a0
[  753.813821][T21299]        do_syscall_64+0x15f/0xf80
[  753.818952][T21299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.825369][T21299] 
[  753.825369][T21299] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  753.834010][T21299]        blk_alloc_queue+0x546/0x680
[  753.839397][T21299]        __blk_mq_alloc_disk+0x197/0x390
[  753.845044][T21299]        nbd_dev_add+0x499/0xb50
[  753.850002][T21299]        nbd_init+0x168/0x1f0
[  753.854716][T21299]        do_one_initcall+0x250/0x870
[  753.860005][T21299]        do_initcall_level+0x104/0x190
[  753.865469][T21299]        do_initcalls+0x59/0xa0
[  753.870326][T21299]        kernel_init_freeable+0x2a6/0x3e0
[  753.876056][T21299]        kernel_init+0x1d/0x1d0
[  753.880920][T21299]        ret_from_fork+0x514/0xb70
[  753.886044][T21299]        ret_from_fork_asm+0x1a/0x30
[  753.891341][T21299] 
[  753.891341][T21299] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  753.898558][T21299]        __lock_acquire+0x15a5/0x2cf0
[  753.903968][T21299]        lock_acquire+0x106/0x350
[  753.909022][T21299]        fs_reclaim_acquire+0x71/0x100
[  753.914497][T21299]        prepare_alloc_pages+0x152/0x650
[  753.920145][T21299]        __alloc_frozen_pages_noprof+0x12f/0x380
[  753.926507][T21299]        alloc_pages_mpol+0x235/0x490
[  753.931888][T21299]        folio_alloc_mpol_noprof+0x39/0x160
[  753.937791][T21299]        shmem_alloc_and_add_folio+0x442/0xf80
[  753.943955][T21299]        shmem_get_folio_gfp+0x5a9/0x1670
[  753.949697][T21299]        shmem_fault+0x179/0x390
[  753.954638][T21299]        __do_fault+0x138/0x2a0
[  753.959498][T21299]        do_pte_missing+0x2093/0x33f0
[  753.964896][T21299]        handle_mm_fault+0x1bd7/0x3170
[  753.970356][T21299]        do_user_addr_fault+0x75b/0x1340
[  753.976009][T21299]        exc_page_fault+0x6a/0xc0
[  753.981070][T21299]        asm_exc_page_fault+0x26/0x30
[  753.986450][T21299]        rep_movs_alternative+0x4a/0x90
[  753.992001][T21299]        _copy_from_iter+0x21b/0x1670
[  753.997375][T21299]        sk_msg_memcopy_from_iter+0x360/0x700
[  754.003447][T21299]        tls_sw_sendmsg+0x140e/0x2430
[  754.008845][T21299]        __sys_sendto+0x4a3/0x710
[  754.013883][T21299]        __x64_sys_sendto+0xde/0x100
[  754.019178][T21299]        do_syscall_64+0x15f/0xf80
[  754.024308][T21299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.030743][T21299] 
[  754.030743][T21299] other info that might help us debug this:
[  754.030743][T21299] 
[  754.040971][T21299] Chain exists of:
[  754.040971][T21299]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  754.040971][T21299] 
[  754.053585][T21299]  Possible unsafe locking scenario:
[  754.053585][T21299] 
[  754.061056][T21299]        CPU0                    CPU1
[  754.066512][T21299]        ----                    ----
[  754.071895][T21299]   rlock(&mm->mmap_lock);
[  754.076331][T21299]                                lock(sk_lock-AF_INET6);
[  754.083369][T21299]                                lock(&mm->mmap_lock);
[  754.090231][T21299]   lock(fs_reclaim);
[  754.094238][T21299] 
[  754.094238][T21299]  *** DEADLOCK ***
[  754.094238][T21299] 
[  754.102379][T21299] 3 locks held by syz.1.3369/21299:
[  754.107574][T21299]  #0: ffff888085efb4e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x130/0x2430
[  754.117064][T21299]  #1: ffff888054843860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15d/0x2430
[  754.126818][T21299]  #2: ffff888037260338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  754.136753][T21299] 
[  754.136753][T21299] stack backtrace:
[  754.142663][T21299] CPU: 1 UID: 0 PID: 21299 Comm: syz.1.3369 Not tainted syzkaller #0 PREEMPT(full) 
[  754.142682][T21299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  754.142692][T21299] Call Trace:
[  754.142698][T21299]  <TASK>
[  754.142705][T21299]  dump_stack_lvl+0xe8/0x150
[  754.142732][T21299]  print_circular_bug+0x2e1/0x300
[  754.142770][T21299]  check_noncircular+0x12e/0x150
[  754.142791][T21299]  __lock_acquire+0x15a5/0x2cf0
[  754.142818][T21299]  ? __lock_acquire+0x6b5/0x2cf0
[  754.142844][T21299]  ? is_bpf_text_address+0x26/0x2b0
[  754.142871][T21299]  ? prepare_alloc_pages+0x152/0x650
[  754.142891][T21299]  lock_acquire+0x106/0x350
[  754.142915][T21299]  ? prepare_alloc_pages+0x152/0x650
[  754.142938][T21299]  ? __bfs+0x153/0x290
[  754.142951][T21299]  ? __pfx_hlock_conflict+0x10/0x10
[  754.142970][T21299]  fs_reclaim_acquire+0x71/0x100
[  754.142990][T21299]  ? prepare_alloc_pages+0x152/0x650
[  754.143010][T21299]  prepare_alloc_pages+0x152/0x650
[  754.143035][T21299]  __alloc_frozen_pages_noprof+0x12f/0x380
[  754.143059][T21299]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  754.143103][T21299]  ? __pfx_policy_nodemask+0x10/0x10
[  754.143132][T21299]  alloc_pages_mpol+0x235/0x490
[  754.143158][T21299]  folio_alloc_mpol_noprof+0x39/0x160
[  754.143183][T21299]  shmem_alloc_and_add_folio+0x442/0xf80
[  754.143204][T21299]  ? filemap_get_entry+0xcd/0x3f0
[  754.143227][T21299]  ? __pfx_filemap_get_entry+0x10/0x10
[  754.143246][T21299]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  754.143266][T21299]  ? shmem_allowable_huge_orders+0x5ec/0x690
[  754.143298][T21299]  shmem_get_folio_gfp+0x5a9/0x1670
[  754.143334][T21299]  shmem_fault+0x179/0x390
[  754.143357][T21299]  __do_fault+0x138/0x2a0
[  754.143379][T21299]  ? do_pte_missing+0x125b/0x33f0
[  754.143401][T21299]  do_pte_missing+0x2093/0x33f0
[  754.143427][T21299]  ? handle_mm_fault+0xee/0x3170
[  754.143446][T21299]  handle_mm_fault+0x1bd7/0x3170
[  754.143470][T21299]  ? handle_mm_fault+0xee/0x3170
[  754.143496][T21299]  ? __pfx_handle_mm_fault+0x10/0x10
[  754.143519][T21299]  ? __lock_acquire+0x6b5/0x2cf0
[  754.143548][T21299]  ? lock_mm_and_find_vma+0xa7/0x340
[  754.143570][T21299]  do_user_addr_fault+0x75b/0x1340
[  754.143604][T21299]  exc_page_fault+0x6a/0xc0
[  754.143629][T21299]  asm_exc_page_fault+0x26/0x30
[  754.143646][T21299] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  754.143665][T21299] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  754.143682][T21299] RSP: 0018:ffffc900041a77f8 EFLAGS: 00050206
[  754.143698][T21299] RAX: 00007ffffffff001 RBX: ffff888060d30005 RCX: 0000000000003300
[  754.143711][T21299] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888060d30d05
[  754.143724][T21299] RBP: ffffc900041a7958 R08: ffff888060d34004 R09: 1ffff1100c1a6800
[  754.143740][T21299] R10: dffffc0000000000 R11: ffffed100c1a6801 R12: ffffc900041a7db8
[  754.143753][T21299] R13: 0000200000000300 R14: 0000000000004000 R15: 1ffff92000834fb7
[  754.143774][T21299]  _copy_from_iter+0x21b/0x1670
[  754.143797][T21299]  ? __pfx__copy_from_iter+0x10/0x10
[  754.143818][T21299]  ? sk_msg_clone+0xcf9/0xd90
[  754.143847][T21299]  sk_msg_memcopy_from_iter+0x360/0x700
[  754.143870][T21299]  tls_sw_sendmsg+0x140e/0x2430
[  754.143904][T21299]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  754.143922][T21299]  ? __pfx_aa_sk_perm+0x10/0x10
[  754.143950][T21299]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  754.143971][T21299]  ? sock_rps_record_flow+0x19/0x350
[  754.143993][T21299]  ? inet_send_prepare+0x57/0x270
[  754.144013][T21299]  ? __pfx_inet6_sendmsg+0x10/0x10
[  754.144037][T21299]  ? inet6_sendmsg+0x101/0x120
[  754.144070][T21299]  ? __pfx_inet6_sendmsg+0x10/0x10
[  754.144118][T21299]  __sys_sendto+0x4a3/0x710
[  754.144137][T21299]  ? __pfx___sys_sendto+0x10/0x10
[  754.144152][T21299]  ? do_futex+0x395/0x420
[  754.144193][T21299]  ? rcu_is_watching+0x15/0xb0
[  754.144213][T21299]  __x64_sys_sendto+0xde/0x100
[  754.144229][T21299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.144246][T21299]  do_syscall_64+0x15f/0xf80
[  754.144286][T21299]  ? trace_irq_disable+0x3b/0x140
[  754.144306][T21299]  ? clear_bhb_loop+0x40/0x90
[  754.144323][T21299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.144338][T21299] RIP: 0033:0x7f5d5539cdd9
[  754.144351][T21299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.144365][T21299] RSP: 002b:00007f5d56333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  754.144380][T21299] RAX: ffffffffffffffda RBX: 00007f5d55615fa0 RCX: 00007f5d5539cdd9
[  754.144391][T21299] RDX: fffffffffffffe94 RSI: 0000200000000300 RDI: 0000000000000008
[  754.144401][T21299] RBP: 00007f5d55432d69 R08: 0000000000000000 R09: 0000000000000000
[  754.144411][T21299] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000
[  754.144421][T21299] R13: 00007f5d55616038 R14: 00007f5d55615fa0 R15: 00007ffc986b6cc8
[  754.144438][T21299]  </TASK>
[  754.671906][T21291] lo speed is unknown, defaulting to 1000
[  754.698065][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'.
[  754.709600][T21291] gre0 speed is unknown, defaulting to 1000
[  754.724351][T21302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3371'.
[  754.760577][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'.
[  754.761135][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms
[  754.777483][    C1] lec:lec_tx_timeout: lec0
[  754.782237][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  754.826385][T21305] team1: entered promiscuous mode
[  754.843801][T21305] team1: entered allmulticast mode
[  754.849726][T21305] 8021q: adding VLAN 0 to HW filter on device team1
[  754.889453][T21307] team2: entered promiscuous mode
[  754.941260][T21307] team2: entered allmulticast mode
[  754.946802][T21307] 8021q: adding VLAN 0 to HW filter on device team2
[  758.267807][ T5211] udevd[5211]: worker [11703] /devices/virtual/block/nbd2 timeout; kill it
[  758.278551][ T5211] udevd[5211]: seq 17257 '/devices/virtual/block/nbd2' killed
[  759.791441][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  759.799466][    C1] lec:lec_tx_timeout: lec0
[  759.804312][    C1] lec:lec_start_xmit: lec0:No lecd attached