last executing test programs:

2.200249889s ago: executing program 2 (id=4957):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={<r3=>0x0, 0x10001}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r4=>0x0, 0x6, 0x1, [0x4]}, &(0x7f0000000240)=0xa)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r3, 0x17a9, 0x2, 0x3, 0x1, 0x4, 0x5, 0xad, {r4, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8, 0x5, 0xffffffff, 0x3}}, &(0x7f0000000280)=0xb0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003e5", @ANYRES32=0x0, @ANYBLOB="0800050009000000"], 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0)

2.18228539s ago: executing program 2 (id=4961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3a000280"], 0x60}, 0x1, 0x400000000000000}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
shutdown(r5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000012c0)={<r8=>0x0, @broadcast, @multicast2}, &(0x7f0000001300)=0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x58, &(0x7f0000001340)}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r10, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'team0\x00', <r11=>0x0})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffc}, {0x24caf689, 0x80003}]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001880)={0x41c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x27c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2931}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x4, 0x4, 0xc}}, {0x8, 0x6, r10}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x7, 0x1, 0x5}, {0x6, 0x81, 0x2, 0x9}, {0x8004, 0x9, 0x9, 0x10000}, {0xe5b, 0x6, 0x4, 0x4b2}, {0xd, 0xd6, 0x5, 0x5}, {0x2c3, 0xaa, 0xff, 0x8}, {0xff5d, 0x6, 0xfb, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x4f}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x878}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0c0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r15, &(0x7f0000000200)=0xffffffffffffffff, 0x12)
sendfile(r15, r14, 0x0, 0xbdc4)

2.126740653s ago: executing program 1 (id=4966):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="ad3407b76e4de781eb4d86c74ab46ee304440d4df5eb5972e6b8ca25eead484335ea762238a97466e2561de6e307219bef80a785", 0x8339, r0, 0x0, 0x200000000000000}, 0x38)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x22, 0x0, 0xfff, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r2, 0x1b, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r3}}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="ad3407b76e4de781eb4d86c74ab46ee304440d4df5eb5972e6b8ca25eead484335ea762238a97466e2561de6e307219bef80a785", 0x8339, r0, 0x0, 0x200000000000000}, 0x38) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x22, 0x0, 0xfff, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r2, 0x1b, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r3}}, 0x1c) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) (async)

1.923619992s ago: executing program 2 (id=4969):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket(0x15, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000110087d44a372eaf541d000a07000000", @ANYRES32=r3], 0x44}}, 0x2000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x20, 0xffffffff, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="84ff8382", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

1.798474273s ago: executing program 2 (id=4972):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000300)="a6a7ad", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5)
sendto$inet6(r0, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x2, 0x0, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

1.627617256s ago: executing program 1 (id=4974):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bind$can_raw(r0, &(0x7f0000000200), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000dc0)="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", 0x1000)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140))
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, &(0x7f00000001c0)=0x14)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e8d7a", 0x3}], 0x1}, 0x4c00c)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="599f8c39", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf2500000000"], 0x14}}, 0x4000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x70}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, &(0x7f0000000080)=0x10)

1.384147398s ago: executing program 1 (id=4978):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

1.335471996s ago: executing program 0 (id=4979):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}) (rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc8, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="17bcfd775678"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0)

1.304710042s ago: executing program 3 (id=4980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008884}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
getsockname$packet(r5, 0x0, &(0x7f0000000480))
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x1000, 0x4)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24)

1.288335569s ago: executing program 1 (id=4981):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
read$nci(r1, &(0x7f0000000ac0)=""/212, 0xd4)
syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r2)

1.042946288s ago: executing program 3 (id=4982):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=r1, @ANYBLOB="080001"], 0x20}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1404, 0x10c, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x40080)

1.042407784s ago: executing program 0 (id=4983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000101010100000000000000000000000106001240ed010000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40)
socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400))

944.626903ms ago: executing program 4 (id=4984):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r0, 0x8b20, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4], 0xb4}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, <r6=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x700, 0x700, 0xffff0000, 0x37761720, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x65, 0x0, 0x7f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @generic={0x86, 0xc, "35d62512f5ef49d70393"}, @timestamp={0x44, 0x10, 0xe, 0x0, 0x8, [0x8001, 0xe3, 0x59]}, @rr={0x7, 0x7, 0xfe, [@private=0xa010102]}, @lsrr={0x83, 0x13, 0x33, [@rand_addr=0x64010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @lsrr={0x83, 0x23, 0xa9, [@empty, @remote, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010100, @multicast2, @remote]}]}}}}})
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x8, &(0x7f0000000380)=@raw=[@exit, @jmp={0x5, 0x1, 0x5, 0x4, 0x1, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x8}, @alu={0x7, 0x1, 0xa, 0x8, 0x5, 0xfffffffffffffff8, 0x8}, @call={0x85, 0x0, 0x0, 0x76}], &(0x7f0000000900)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x400001, 0x6}, 0x10, 0x1a267, r1, 0x9, &(0x7f00000004c0)=[r6, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x5, 0x5, 0xe, 0x6}, {0x0, 0x2, 0xd, 0xc}, {0x2, 0x5, 0x80000001, 0xb}, {0x1, 0x3, 0xd, 0x5}, {0x5, 0x2, 0x0, 0xc}, {0x2, 0x1, 0x6, 0x6}, {0x0, 0x4, 0xd, 0x7}, {0x1, 0x5, 0x4, 0x8}, {0x1, 0x1, 0xb, 0xb}], 0x10, 0x1e2bc917}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r8, 0x0, 0x0}, 0x20)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xc90e, 0x20}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xa, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x7, 0x1, 0x4, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x7, 0x2, 0x80, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xa220, 0xe6, &(0x7f0000000140)=""/230, 0x41000, 0x17, '\x00', r4, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x6, &(0x7f0000000600)=[r8, r9], &(0x7f00000007c0)=[{0x5, 0x1, 0x8, 0x3}, {0x4, 0x2, 0xc}, {0x3, 0x5, 0xa, 0x6}, {0x3, 0x4, 0xd, 0x6}, {0x0, 0x3, 0x1, 0x8}, {0x5, 0x5, 0xe, 0x5}], 0x10, 0x4363}, 0x94)

865.505528ms ago: executing program 2 (id=4985):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)

803.294109ms ago: executing program 3 (id=4986):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ssrr={0x89, 0x3, 0xdc}, @lsrr={0x83, 0xf, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @cipso={0x86, 0x24, 0x2, [{0x1, 0x12, "75955c05cc97d4e384fadd5647c17bcc"}, {0x5, 0xc, "f55913fec5e4340af196"}]}, @end, @noop, @generic={0x83, 0x5, "0b70e9"}]}}}}}}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@delchain={0x3c, 0x2c, 0xf31, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {0xf, 0x5}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010)

770.23764ms ago: executing program 0 (id=4987):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
close(0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r4], 0x58}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r7 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f0010000160001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000400000000000000000033000000e08a13686100000000000000000000000000000000000000000000000000000000000000000000d8dc5a583a633502f3e5a1101e62f2c12f331d0000000000000000000000000000000000efffffffffffffff03000000000000000000230000000000000000000000000100000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000800000000000000002000000b1", @ANYBLOB="a91b12e84ce1cecf607736f1e49c34d3b15975f3e90b5521140fe5ff9c24845ee62259e11407b45bdb4a44137c1d14110a30815d538497b86a5972140702c51533a82eef8ae485c604c77a3f656ada9d36b24093a05bed85cb9bc15bd3f0a53534a1f77ec6c61fad5cfa56207b54afdcbec9b3190a802815c1ff640ec3315d1a76397e0a2afad431bc9ddde9203f393355a4df7ac77471d7dd0007ef5baf2d371bb7d90f6b79766de4853596202e185517584b58225d98779a41576ead7e2aab7d5fb675d84ad9dfd455d215bce177f12fdf0587e566eabeebfda9f416264f6840fb9326c097", @ANYBLOB="00000000e4000600fe8000000000000000000000000000bbff0200000000000000000000000000014e2100014e230000020000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d36c000000ffffffff000000000000000000000000ff070000000000000200000000000000fbffffffffffffffb82ea45c0000000008000000000000000d000000000000010100000000000002000000000000000200000000000000df000000000000000600000000000000020000000000000001040040020000000300000028bd700006350000020001d15500000000000000"], 0x1f0}}, 0x0)

743.088999ms ago: executing program 4 (id=4988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r1, 0x1, 0xffffffff, 0xfffffffc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14, 0x16, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200080c2}, 0x4)

634.666813ms ago: executing program 4 (id=4989):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00450000600000000000019078ac1e0001ac1414aa05009078e00000e04100000000000000001100000a01010100000000830300442c00030a01010200010000ac1414aa00000000ac1414bb0000000000000000000700"/98], 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r8, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x3c}}, 0x4000044)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000000)={<r11=>0x0, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x7ff, 0x0, 0x7fffffff, 0x5, 0xfd}, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000140)={r11, @in={{0x2, 0x4e20, @empty}}, 0x4, 0xafa, 0x8, 0x7fb787df, 0x4d, 0xc47}, 0x9c)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)
r12 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000180)={0x8})
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f00000000c0))
r13 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000000)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000100))

532.925995ms ago: executing program 3 (id=4990):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)

518.572477ms ago: executing program 2 (id=4991):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

427.091776ms ago: executing program 0 (id=4992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x14, 0x2, 0x101, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@generic="602389da48905290f3a98d21f0fe7c172b957911a0d4d081aef498f98df34b68f478cea49475dca361917d55f41eb312d084684afe47cd75f3eac80e8430490a6c81b59c565613fce2f22a63d3aa6161026bc90318fc129dc393e3d8829a3a8c4ff27c55eb24b5", @generic="eaed4781d3d1fe617231dfba8c059bd33a630f1977865c5031b43126c5f88dcc72cf2a46e40d4836b1fa364eec11832d000a8984f1baede4efab166ca16ac3a3683af7dce2265e86f6a74e97e50081", @generic="2823890d9b4fb25b49afaca9674b0cd814bbd06db9a62d59feda8d4a00a19b5c68d8569ffecb73e9a777473b364651c54b27efc8643110f36c0b7fc78d6d27783e6a3fe64e1a26b0bbd3b23a0c69ab3f6646e21b6dd4"]}, 0x120}, 0x1, 0x0, 0x0, 0x4800}, 0x20000880)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)

425.259803ms ago: executing program 4 (id=4993):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x9, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

340.456617ms ago: executing program 1 (id=4994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010)
r3 = socket$kcm(0x29, 0x4, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r4=>0x0)
sendmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000001c0)=@nfc_llcp={0x27, r4, 0x0, 0x3, 0x5, 0x7, "ee3963097f59a804efff01167de5b2f2e436fbaa1f35b39f2251e7e9355a2df8a4a9371913a7eb166467647999847a183dd18cc379595d7f8a1e8f6d2dd5e5", 0x2b}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="5387238f30fe55887d49520b12434324737caf0fe3fbc4fb4ab8afd27f07ab9c5f32409054084f1103c38e71b1", 0x2d}, {&(0x7f00000002c0)="ea92d5ed2d508aaffb9685af98a6dacb6245c1870e12563dd1d3a68f01db1b99463d332026354fa4a14fc7455c04b4826507aadac16dfb48688ed674476b418f76f6", 0x42}, {&(0x7f0000000340)="b9f27ad3c4ed9736a3ea889a31ec728a7261591d3d591dd45683b81ead719c8bc80c76f651f6322b67e0db7cab52980b7a02643ac2ccce4eccfd9c754a79c6d5", 0x40}, {&(0x7f0000000380)="7112cd2e73c66649b1b645fd759b29ec7dc269f1e446546b9aed75f6ca9b27321761eb3daab9792bf34f3d94cb52f5206c0bd188baa2bf3b213a48cc8db37c0aaf1c9f34bac6c505e54432146f23840fbd", 0x51}, {&(0x7f0000000400)="58564d40bd95171752c1cfda23b02f2a40650ff0ebcfc714e0fbba40b10a7cba373a145f034b2e529ff87f7ed1515b562d80ec21da8255833778e6299068f95beb7e7230687748da5f4343c1ad9f60ff099fbf4374176a975fe0cd4cbd54786b87363b31bfc1064c395096efd127a2", 0x6f}, {&(0x7f0000000480)="ea48b2869c4de4151580280541b3b5fc13de098df9c14c4de9ef0bcb66da78a2ccbdacc9ffe33e4e706d5db90979c9e134c81848d1d7cce40cd6dea196ee33e2853903caf0a15ca0585fd8f727275e23ddb9e2189d12cd00f4c630dc10829183cd27be4f79d2e41f5dd9d4fdf68c03c368740ae4ea839a0c4c8d7b3e3f101bf5f9", 0x81}], 0x6, &(0x7f00000005c0)=[{0x100, 0x10a, 0x0, "8aeef21be98691214dd32c046966ab596f596dca266f87fb4d4e6bee0fd650527c274e454b18c76cbe1815cde89d21e1229cb3aee47e636c242bbcf9d72ed1e575bdee19f7bfb46ae4bd86d71e42f42af83eacc6b78c0779d9b4ccc00affab73424cc433c024274d9224db17056d26f77233d39a6300525b5488619ab35f9953a844c3d4da8773c99d6ec41116aeb5d95a8fc77624ca1508d3a38bbbc3b15a68b6933c13fadfea25198ef211bd24ff657e7d6399cfc3229344c72d7465b416dd597471fb307ece315b4e1b2b24c58e5dca48ac78eace8b28842f5a12038af9e5d9153becd530eb049af195532acb2f22"}, {0x98, 0x10c, 0x80000001, "50480d8edd18926f4899feec152280cb9643815fb6f138a4d22f8306bc76bfaac7d258909fc3c508b79b66519775808350fb13fb0bf653429488ad93beb33882d9ba25db84e1d8d5e82c4af11fa0366c1576638bac3ac3d45e2ad3248d69cc447e88b14c81457f695bcfa4593aa88eef713a2aebd8523db002883807494c648c2282285e318792"}, {0x100, 0x110, 0x2, "0eb6c7d495669d57300aab42849854791009a158ccbf30ed6ca5754c1764385a24b0640876d7b12b65764906e6dbb0653590869cb9ae235bd60f5ce3dbb6fe9c0702855e44bd2482ccccb24670ce44316579435add27b606e490d8756e1e65de6a647188a5d2e8b5d41329530b5ef30d3445f90327acb72df13449da0a744f29e636417062529639393a5a8d6d8258c3bd6bdf8394aa1abd70415107b13def86d755e9136deb8457306d4a71f44f5581468716be746a5d277f0c489f0a41b4c019ca40d17ddff80dff72181f7923acbf0167ee7a9f56ad5aef4c21f7ba6d36aa2ae121a6ee0fa5d9e3cbf2"}], 0x298}, 0x20000040)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2e}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x6000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x38}}, 0x0)

324.63476ms ago: executing program 0 (id=4995):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
socket$kcm(0xa, 0x3, 0x87)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x800000003, 0x100000000, 0x10000109, 0xfffffffffffffff9, 0x6, 0xc, 0x2880000000000009, 0x5}, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0)

256.838632ms ago: executing program 3 (id=4996):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000)
connect$802154_dgram(r0, &(0x7f0000000240)={0x2, @long}, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r2}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2166, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50)
getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000340)=0x14)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x8c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0x4, &(0x7f0000000740)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffeffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc3}], &(0x7f0000000780)='GPL\x00', 0xd, 0x5a, &(0x7f00000007c0)=""/90, 0x41000, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x6, 0xfffffc01, 0x6}, 0x10, 0x0, r1, 0x2, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x5, 0x2, 0x3, 0x8}, {0x0, 0x5}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xf, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x2, 0x3, 0xe, 0x7, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x4f, &(0x7f0000000280)=""/79, 0x41100, 0x3, '\x00', r5, @fallback=0x32, r6, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xe, 0x9, 0x2}, 0x10, r7, r8, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x9}, 0x94)

254.759818ms ago: executing program 4 (id=4997):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10) (async, rerun: 64)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) (async, rerun: 64)
close(r0)

168.817274ms ago: executing program 0 (id=4998):
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x2a, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x17d6892da6fe07aa}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
unshare(0x8000880)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2", 0x2}], 0x1}, 0x0)

157.429433ms ago: executing program 3 (id=4999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840)

84.314721ms ago: executing program 4 (id=5000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0)

0s ago: executing program 1 (id=5001):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000380)=ANY=[@ANYBLOB="4769a4c6f3075b50b25eff06d2fd1fcb33bbc516470fb84dfb0000000000007fff5d50a24f970db96ff2f0375247cdfca3438a18f8", @ANYRES16=r3, @ANYBLOB="010000000000000000000a00000004000180"], 0x18}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000380)=ANY=[@ANYBLOB="4769a4c6f3075b50b25eff06d2fd1fcb33bbc516470fb84dfb0000000000007fff5d50a24f970db96ff2f0375247cdfca3438a18f8", @ANYRES16=r3, @ANYBLOB="010000000000000000000a00000004000180"], 0x18}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc440000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa0, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc440000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa0, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

etlink: 'syz.4.3212': attribute type 2 has an invalid length.
[  410.557688][T17753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3212'.
[  410.689743][  T475] IPVS: stop unused estimator thread 0...
[  410.771594][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'.
[  410.812815][T17763] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3214'.
[  411.157905][T17783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3220'.
[  411.353777][T17505] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  411.391872][T17795] netlink: 'syz.4.3223': attribute type 12 has an invalid length.
[  411.416259][T17505] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  411.477490][T17505] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  411.515522][T17505] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  411.538008][T13699] IPVS: starting estimator thread 0...
[  411.644844][T17808] IPVS: using max 34 ests per chain, 81600 per kthread
[  411.765426][T17820] gre1: entered allmulticast mode
[  411.841118][ T5833] Bluetooth: hci3: command tx timeout
[  411.935513][T17505] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.979102][T17505] 8021q: adding VLAN 0 to HW filter on device team0
[  412.007902][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.015150][ T9408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.095220][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.102447][ T9408] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.299018][T17838] __nla_validate_parse: 2 callbacks suppressed
[  412.299038][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'.
[  412.388588][T17838] bond0 (unregistering): Released all slaves
[  412.441289][T17850] netlink: 'syz.4.3232': attribute type 1 has an invalid length.
[  412.449196][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'.
[  412.467679][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'.
[  412.886058][T17869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.025899][T17877] syzkaller0: entered promiscuous mode
[  413.031554][T17877] syzkaller0: entered allmulticast mode
[  413.062547][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3240'.
[  413.076318][T17505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.178866][T17505] veth0_vlan: entered promiscuous mode
[  413.202639][T17505] veth1_vlan: entered promiscuous mode
[  413.221189][ T5487] veth0_macvtap: left promiscuous mode
[  413.404771][T17505] veth0_macvtap: entered promiscuous mode
[  413.438468][T17505] veth1_macvtap: entered promiscuous mode
[  413.494397][T17505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.532452][T17505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.572409][  T475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.591436][  T475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.605156][  T475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.625363][  T475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.953893][ T9408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.007342][ T9408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.142966][T17920] netlink: 'syz.0.3247': attribute type 1 has an invalid length.
[  414.176911][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.192065][T17920] netlink: 'syz.0.3247': attribute type 3 has an invalid length.
[  414.206910][T17924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3247'.
[  414.216166][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.255586][T17920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3247'.
[  414.267601][T17926] xt_CT: You must specify a L4 protocol and not use inversions on it
[  414.555617][T17940] Cannot find add_set index 0 as target
[  415.007115][T17967] sch_fq: defrate 0 ignored.
[  415.231541][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  415.250921][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  415.259260][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  415.270342][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  415.279747][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  415.449593][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'.
[  415.613401][T17972] wg1 speed is unknown, defaulting to 1000
[  415.838722][T17997] pim6reg527: entered allmulticast mode
[  416.021172][T18005] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3265'.
[  416.228065][T17972] chnl_net:caif_netlink_parms(): no params data found
[  416.326254][ T1951] block nbd0: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 180 seconds
[  416.337380][ T1951] block nbd0: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 180 seconds
[  416.348501][ T1951] block nbd0: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 180 seconds
[  416.359935][ T1951] block nbd0: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 180 seconds
[  416.449433][T18026] ip6_tunnel: non-ECT from fc00:0000:0400:0000:0000:0000:0000:0001 with DS=0x2
[  416.554943][T18033] netlink: 'syz.0.3270': attribute type 39 has an invalid length.
[  416.792820][T18050] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  416.802278][T18050] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3276'.
[  416.862600][T18041] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  416.993577][T18057] veth0: entered promiscuous mode
[  417.076846][T17972] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.084289][T17972] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.094465][T17972] bridge_slave_0: entered allmulticast mode
[  417.109381][T17972] bridge_slave_0: entered promiscuous mode
[  417.121993][T18054] veth0: left promiscuous mode
[  417.127161][T17972] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.156119][T17972] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.172110][T17972] bridge_slave_1: entered allmulticast mode
[  417.211130][T17972] bridge_slave_1: entered promiscuous mode
[  417.275341][T18066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3280'.
[  417.360358][ T5833] Bluetooth: hci2: command tx timeout
[  417.373407][T17972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.445984][T17972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.645190][T17972] team0: Port device team_slave_0 added
[  417.672441][T17972] team0: Port device team_slave_1 added
[  417.789542][T17972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.815245][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.843898][T18093] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3287'.
[  417.843924][T18093] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  417.843938][T18093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3287'.
[  417.872960][T18093] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3287'.
[  417.924345][T18093] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  417.954043][T18093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3287'.
[  417.961162][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'.
[  417.972486][T17972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.004919][T17972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.020107][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.077610][T17972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.268985][T17972] hsr_slave_0: entered promiscuous mode
[  418.275766][T17972] hsr_slave_1: entered promiscuous mode
[  418.282673][T17972] debugfs: 'hsr0' already exists in 'hsr'
[  418.288437][T17972] Cannot create hsr debugfs directory
[  418.557640][T18124] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  418.666267][T18125] delete_channel: no stack
[  418.724009][T18134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3294'.
[  418.868217][T17972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.071387][T17972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.147442][T18155] netlink: 'syz.4.3298': attribute type 12 has an invalid length.
[  419.196787][T17972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.256478][T17972] batman_adv: batadv0: Interface deactivated: netdevsim0
[  419.315221][T18161] netlink: 'syz.4.3299': attribute type 1 has an invalid length.
[  419.325600][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3299'.
[  419.342337][T17972] batman_adv: batadv0: Removing interface: netdevsim0
[  419.351126][T17972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.390807][T18163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'.
[  419.443724][ T5833] Bluetooth: hci2: command tx timeout
[  419.466138][   T13] bridge_slave_1: left allmulticast mode
[  419.473455][   T13] bridge_slave_1: left promiscuous mode
[  419.491567][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.515178][   T13] bridge_slave_0: left allmulticast mode
[  419.538815][   T13] bridge_slave_0: left promiscuous mode
[  419.545233][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.803581][T18171] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3302'.
[  419.865016][   T13] 
 (unregistering): (slave bridge1): Releasing backup interface
[  420.146391][   T13] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.155489][   T13] bond_slave_0: left allmulticast mode
[  420.164940][   T13] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.174934][   T13] bond_slave_1: left allmulticast mode
[  420.182441][   T13] ` (unregistering): Released all slaves
[  420.193267][   T13] bond1 (unregistering): Released all slaves
[  420.208626][   T13] 
 (unregistering): Released all slaves
[  420.227077][   T13] bond2 (unregistering): Released all slaves
[  420.243942][   T13] bond3 (unregistering): Released all slaves
[  420.259429][   T13] bond4 (unregistering): Released all slaves
[  420.276130][   T13] bond5 (unregistering): Released all slaves
[  420.314508][T18070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  420.391364][   T13] �9: left promiscuous mode
[  420.608574][   T13] : left promiscuous mode
[  420.639763][T18175] netlink: 'syz.4.3303': attribute type 16 has an invalid length.
[  420.680479][T18175] netlink: 'syz.4.3303': attribute type 17 has an invalid length.
[  420.696053][T17972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  420.764846][T18175] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  420.794595][T18183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3306'.
[  420.817503][T18183] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  420.858124][T17972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  420.887346][   T13] �9: left promiscuous mode
[  421.012385][T17972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  421.078098][T17972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  421.165250][   T13] tipc: Left network mode
[  421.191117][T18205] syzkaller0: entered promiscuous mode
[  421.196652][T18205] syzkaller0: entered allmulticast mode
[  421.310205][   T30] audit: type=1800 audit(1771804320.161:5): pid=18219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3313" name="memory.events" dev="tmpfs" ino=324 res=0 errno=0
[  421.427569][T18222] tipc: Started in network mode
[  421.446044][T18222] tipc: Node identity 528b9d9c7ed3, cluster identity 4711
[  421.457519][T18222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.484857][T18219] syzkaller0: entered promiscuous mode
[  421.520420][ T5833] Bluetooth: hci2: command tx timeout
[  421.525420][T18219] syzkaller0: entered allmulticast mode
[  421.743527][T18237] tipc: Resetting bearer <eth:syzkaller0>
[  421.817159][T18244] netlink: 'syz.1.3317': attribute type 1 has an invalid length.
[  421.868712][T18218] tipc: Resetting bearer <eth:syzkaller0>
[  421.938698][T18218] tipc: Disabling bearer <eth:syzkaller0>
[  422.289038][T17972] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.545540][T17972] 8021q: adding VLAN 0 to HW filter on device team0
[  422.556659][T18266] netlink: 'syz.0.3323': attribute type 13 has an invalid length.
[  422.607614][T18275] netlink: 'syz.0.3323': attribute type 16 has an invalid length.
[  422.620174][T18275] netlink: 'syz.0.3323': attribute type 17 has an invalid length.
[  422.899175][T18275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.941158][T18293] netlink: 'syz.0.3323': attribute type 1 has an invalid length.
[  422.971800][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.979064][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.156640][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.163917][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.424983][T18322] __nla_validate_parse: 5 callbacks suppressed
[  423.425004][T18322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3335'.
[  423.522566][T18320] bridge2: entered promiscuous mode
[  423.527897][T18320] bridge2: entered allmulticast mode
[  423.597446][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.604987][ T5833] Bluetooth: hci2: command tx timeout
[  423.677467][   T13] pimreg3 (unregistering): left allmulticast mode
[  424.107515][T18335] 8021q: adding VLAN 0 to HW filter on device bond1
[  424.335193][T18355] openvswitch: netlink: IP tunnel dst address not specified
[  424.376029][T18355] netlink: 'syz.2.3344': attribute type 1 has an invalid length.
[  424.430891][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'.
[  424.466467][T18355] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3344'.
[  424.494452][T18355] netlink: 'syz.2.3344': attribute type 1 has an invalid length.
[  424.662532][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'.
[  424.725997][T18375] netlink: 'syz.1.3348': attribute type 30 has an invalid length.
[  424.743758][T18373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  424.809819][T18373] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3347'.
[  424.850799][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'.
[  424.974564][T17972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.063996][   T13] IPVS: stop unused estimator thread 0...
[  425.137828][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'.
[  425.222161][T17972] veth0_vlan: entered promiscuous mode
[  425.251398][T17972] veth1_vlan: entered promiscuous mode
[  425.347414][T18405] netlink: 'syz.0.3353': attribute type 18 has an invalid length.
[  425.407224][T17972] veth0_macvtap: entered promiscuous mode
[  425.507117][T17972] veth1_macvtap: entered promiscuous mode
[  425.536399][ T9408] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  425.552538][ T9408] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  425.590251][ T9408] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  425.601760][T18410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3355'.
[  425.615970][ T9408] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  425.652417][T18414] wg1 speed is unknown, defaulting to 1000
[  425.687945][T17972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.705202][T17972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.720583][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.729377][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.805322][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.852199][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.074270][T18434] netlink: 'syz.1.3360': attribute type 1 has an invalid length.
[  426.157846][T18434] 8021q: adding VLAN 0 to HW filter on device bond2
[  426.174004][T18435] bridge_slave_0: left allmulticast mode
[  426.179797][T18435] bridge_slave_0: left promiscuous mode
[  426.185871][T18435] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.196211][T18435] bridge_slave_1: left allmulticast mode
[  426.203180][T18435] bridge_slave_1: left promiscuous mode
[  426.209103][T18435] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.223770][T18435] bond0: (slave bond_slave_0): Releasing backup interface
[  426.235439][T18435] bond0: (slave bond_slave_1): Releasing backup interface
[  426.249745][T18435] team0: Port device team_slave_0 removed
[  426.263677][T18435] team0: Port device team_slave_1 removed
[  426.270747][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.278142][T18435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.288243][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.296354][T18435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.308778][T18435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  426.376820][T18434] bond2: (slave gretap1): making interface the new active one
[  426.403900][T18434] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  426.513716][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.540368][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.615108][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.621281][T18446] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3361'.
[  426.640756][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.840028][T18463] xt_cluster: node mask cannot exceed total number of nodes
[  426.986241][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3364'.
[  427.144425][T18474] wg1 speed is unknown, defaulting to 1000
[  427.163733][T18477] openvswitch: netlink: Flow key attr not present in new flow.
[  427.828303][T18501] pim6reg1: entered promiscuous mode
[  427.841772][T18501] pim6reg1: entered allmulticast mode
[  428.091621][T18515] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  428.581638][T18546] __nla_validate_parse: 2 callbacks suppressed
[  428.581657][T18546] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3384'.
[  428.613305][T18546] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3384'.
[  428.627905][T18549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3384'.
[  428.642997][T18549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3384'.
[  428.749158][T18560] xt_cgroup: path and classid specified
[  428.993643][T18582] �����9o��+���4�: renamed from lo (while UP)
[  429.020933][T18585] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3393'.
[  429.327448][T18605] netlink: 'syz.3.3398': attribute type 1 has an invalid length.
[  429.357268][T18612] netlink: 'syz.2.3401': attribute type 1 has an invalid length.
[  429.415429][T18612] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.624584][T18628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  429.673993][T18630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.934945][T18642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3407'.
[  429.959084][T18624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.163346][T18665] xt_l2tp: v2 doesn't support IP mode
[  430.595937][T18678] wg1 speed is unknown, defaulting to 1000
[  430.757119][T18704] syzkaller0: entered allmulticast mode
[  430.823557][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3421'.
[  430.978577][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'.
[  431.112970][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.190689][T18729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3428'.
[  431.371046][T18739] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  431.400275][T18739] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  431.426504][T18739] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  431.460281][T18739] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  431.521650][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.708739][T18756] Cannot find set identified by id 0 to match
[  431.726345][T18759] netlink: 'syz.0.3437': attribute type 16 has an invalid length.
[  431.758685][T18759] netlink: 'syz.0.3437': attribute type 3 has an invalid length.
[  431.773573][ T9408] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  431.785599][T18759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3437'.
[  431.810573][ T9408] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  431.819380][ T9408] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  431.869864][ T9408] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  431.919674][T18768] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  432.370586][T18795] tipc: Started in network mode
[  432.375849][T18795] tipc: Node identity 3ac0af5aefbe, cluster identity 4711
[  432.383946][T18795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.395354][T18795] syzkaller0: entered promiscuous mode
[  432.407766][T18795] syzkaller0: entered allmulticast mode
[  432.428476][T18795] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  432.497070][T18795] tipc: Resetting bearer <eth:syzkaller0>
[  432.555343][T18793] tipc: Resetting bearer <eth:syzkaller0>
[  432.625213][T18793] tipc: Disabling bearer <eth:syzkaller0>
[  432.960725][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.015628][T18828] wg1 speed is unknown, defaulting to 1000
[  433.592661][T18855] wg1 speed is unknown, defaulting to 1000
[  433.742251][T18865] __nla_validate_parse: 2 callbacks suppressed
[  433.742272][T18865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'.
[  433.787771][T18864] netlink: 'syz.3.3470': attribute type 21 has an invalid length.
[  433.811521][T18865] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3471'.
[  433.821058][T18864] IPv6: NLM_F_CREATE should be specified when creating new route
[  433.828904][T18864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.836277][T18864] IPv6: NLM_F_CREATE should be set when creating new route
[  433.843602][T18864] IPv6: NLM_F_CREATE should be set when creating new route
[  433.850901][T18864] IPv6: NLM_F_CREATE should be set when creating new route
[  433.937824][T18865] veth7: entered promiscuous mode
[  434.016528][T18879] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3477'.
[  434.055780][T18882] netlink: 'syz.4.3475': attribute type 4 has an invalid length.
[  434.089048][T18883] netlink: 'syz.4.3475': attribute type 4 has an invalid length.
[  434.278092][T18893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3480'.
[  434.343922][T18893] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.351632][T18893] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.365384][T18903] netlink: zone id is out of range
[  434.374455][T18903] netlink: zone id is out of range
[  434.379709][T18903] netlink: zone id is out of range
[  434.385619][T18903] netlink: zone id is out of range
[  434.392498][T18903] netlink: zone id is out of range
[  434.401868][T18903] netlink: zone id is out of range
[  434.407538][T18903] netlink: zone id is out of range
[  434.413220][T18903] netlink: zone id is out of range
[  434.440022][T18906] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  434.659103][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.668870][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.686071][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.719526][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.754827][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.835603][T18925] tipc: Enabled bearer <udp:s>, priority 10
[  434.925050][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'.
[  434.978469][T18935] bond1 (unregistering): Released all slaves
[  435.120745][T18947] netlink: 'syz.2.3491': attribute type 15 has an invalid length.
[  435.301947][T18956] bridge_slave_0: left allmulticast mode
[  435.312821][T13702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  435.335643][T18956] bridge_slave_0: left promiscuous mode
[  435.359504][T18956] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.378021][T18956] bridge_slave_1: left allmulticast mode
[  435.393412][T18956] bridge_slave_1: left promiscuous mode
[  435.403367][T18956] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.496229][T18956] bond0: (slave bond_slave_0): Releasing backup interface
[  435.525266][T18956] bond0: (slave bond_slave_1): Releasing backup interface
[  435.555202][T18956] team0: Port device team_slave_0 removed
[  435.583643][T18956] team0: Port device team_slave_1 removed
[  435.596217][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.605401][T18956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.616920][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.656638][T18956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.717268][T18956] net_ratelimit: 52 callbacks suppressed
[  435.717289][T18956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  435.850333][T13702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  435.950255][ T5886] tipc: Node number set to 744005020
[  436.199318][T19010] syz_tun: entered allmulticast mode
[  437.352214][T19074] pimreg3: entered allmulticast mode
[  437.387091][T19074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.445542][T19080] validate_nla: 2 callbacks suppressed
[  437.445560][T19080] netlink: 'syz.0.3529': attribute type 1 has an invalid length.
[  437.471158][T19082] netlink: 'syz.0.3529': attribute type 1 has an invalid length.
[  437.727134][T19095] ipt_REJECT: TCP_RESET invalid for non-tcp
[  437.746373][T19093] netlink: 'syz.4.3534': attribute type 3 has an invalid length.
[  438.426750][T19136] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  438.498730][T19141] netlink: 'syz.2.3544': attribute type 2 has an invalid length.
[  438.515418][T19141] v�: entered promiscuous mode
[  438.637285][T19147] sctp: [Deprecated]: syz.1.3547 (pid 19147) Use of int in maxseg socket option.
[  438.637285][T19147] Use struct sctp_assoc_value instead
[  438.794893][T19157] __nla_validate_parse: 23 callbacks suppressed
[  438.794912][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'.
[  438.814880][T19155] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3549'.
[  438.830366][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'.
[  438.840965][ T1167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.862390][ T1167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.892427][ T1167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.941316][ T1167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.416862][T19192] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  439.575179][T19202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.693110][T19205] netlink: 'syz.4.3562': attribute type 8 has an invalid length.
[  439.892034][T19222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3565'.
[  439.946757][T19226] : entered promiscuous mode
[  440.137748][T19235] netlink: 'syz.2.3570': attribute type 1 has an invalid length.
[  440.260953][T19235] bond2: entered promiscuous mode
[  440.276067][T19235] 8021q: adding VLAN 0 to HW filter on device bond2
[  440.279798][T19244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3572'.
[  440.306484][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'.
[  440.315723][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'.
[  440.350425][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'.
[  440.442523][T19259] bond2: (slave bridge2): making interface the new active one
[  440.476893][T19259] bridge2: entered promiscuous mode
[  440.494931][T19259] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  440.519931][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'.
[  440.553192][ T5948] tipc: Node number set to 3581849434
[  440.623678][T19263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3576'.
[  441.199734][T19307] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000
[  441.273669][T19310] netlink: 'syz.0.3585': attribute type 39 has an invalid length.
[  441.617608][T19332] macvtap1: entered promiscuous mode
[  441.641055][T19332] vlan0: entered promiscuous mode
[  441.649479][T19332] macvtap1: entered allmulticast mode
[  441.664471][T19332] vlan0: entered allmulticast mode
[  441.689440][T19332] veth0_vlan: entered allmulticast mode
[  444.658623][T19340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  444.697935][T19391] netlink: 'syz.0.3597': attribute type 1 has an invalid length.
[  444.734298][T19391] __nla_validate_parse: 4 callbacks suppressed
[  444.734315][T19391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3597'.
[  444.882001][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.906349][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.943303][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.954629][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.964773][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.987874][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  444.999856][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  445.017573][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  445.040781][T19401] netlink: 'syz.4.3599': attribute type 7 has an invalid length.
[  445.233353][T19423] bond3: option all_slaves_active: invalid value (222)
[  446.211105][T19423] bond3 (unregistering): Released all slaves
[  446.384558][T19429] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  446.402928][ T1951] block nbd0: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 210 seconds
[  446.422415][ T1951] block nbd0: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 210 seconds
[  446.433866][ T1951] block nbd0: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 210 seconds
[  446.447332][ T1951] block nbd0: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 210 seconds
[  446.840030][T19486] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3619'.
[  446.976095][ T5886] IPVS: starting estimator thread 0...
[  446.985795][T19493] nbd: must specify at least one socket
[  447.081503][T19495] IPVS: using max 27 ests per chain, 64800 per kthread
[  447.152643][T19503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.180597][T19497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'.
[  447.193425][T19505] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3625'.
[  447.215471][T19507] team0: Device veth1_macvtap failed to register rx_handler
[  447.306842][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'.
[  447.347086][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3628'.
[  447.382967][T19515] 8021q: adding VLAN 0 to HW filter on device batadv1
[  447.414838][T19515] team0: Port device batadv1 added
[  447.748880][T19536] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  447.843402][T19550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3634'.
[  448.096095][T19569] vlan2: entered allmulticast mode
[  448.130770][T19569] hsr0: entered allmulticast mode
[  448.135938][T19569] hsr_slave_0: entered allmulticast mode
[  448.146088][T19569] hsr_slave_1: entered allmulticast mode
[  448.237062][T19578] syzkaller0: entered promiscuous mode
[  448.242707][T19578] syzkaller0: entered allmulticast mode
[  448.438939][T19588] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  448.452741][T19588] bond1 (unregistering): Released all slaves
[  448.569203][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'.
[  450.644780][T19536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  450.879573][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3654'.
[  450.907973][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3650'.
[  450.934740][T19608] hsr_slave_0: left promiscuous mode
[  450.949111][T19608] hsr_slave_1: left promiscuous mode
[  451.094780][T19624] gtp0: entered promiscuous mode
[  451.099890][T19624] gtp0: entered allmulticast mode
[  451.107243][T19627] validate_nla: 34 callbacks suppressed
[  451.107259][T19627] netlink: 'syz.1.3658': attribute type 5 has an invalid length.
[  451.131483][T19623] geneve2: entered promiscuous mode
[  451.138345][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47273 - 0
[  451.159290][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47273 - 0
[  451.174134][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47273 - 0
[  451.221290][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47273 - 0
[  451.407119][T19644] IPVS: sh: FWM 3 0x00000003 - no destination available
[  451.422279][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  451.433532][T19648] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  451.451402][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'.
[  451.460702][T19647] netlink: 'syz.2.3663': attribute type 7 has an invalid length.
[  451.468839][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3663'.
[  451.478586][T19653] IPVS: sh: FWM 3 0x00000003 - no destination available
[  451.497281][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  451.614413][T19662] mac80211_hwsim hwsim40 wlan1: Caught tx_queue_len zero misconfig
[  451.713329][T19667] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  451.874195][T19680] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  452.038171][T19690] netlink: 'syz.0.3677': attribute type 1 has an invalid length.
[  452.064579][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3681'.
[  452.082160][T19690] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3677'.
[  452.128592][T19693] bond3: option resend_igmp: invalid value (32767)
[  452.173571][T19693] bond3: option resend_igmp: allowed values 0 - 255
[  452.235612][T19693] bond3 (unregistering): Released all slaves
[  452.350689][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'.
[  452.620332][T19725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.711309][T19738] netlink: 'syz.3.3693': attribute type 1 has an invalid length.
[  452.714628][T19725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.766101][T19738] 8021q: adding VLAN 0 to HW filter on device bond1
[  452.775952][T19748] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  452.789412][T19728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.852749][T19725] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  452.869869][T19738] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  452.960581][ T9408] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.070174][  T475] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  453.090698][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  453.098676][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.220216][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  453.232923][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.518133][T19785] netlink: 'syz.4.3704': attribute type 4 has an invalid length.
[  453.554564][T19785] netlink: 'syz.4.3704': attribute type 4 has an invalid length.
[  453.566491][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3704'.
[  453.739694][T19800] netlink: 'syz.2.3705': attribute type 9 has an invalid length.
[  453.920440][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  453.958050][T19815] netlink: 'syz.4.3711': attribute type 1 has an invalid length.
[  453.992438][T19812] syzkaller0: entered allmulticast mode
[  454.193606][T19826] netlink: 'syz.4.3712': attribute type 1 has an invalid length.
[  454.202848][T19825] netlink: 'syz.2.3714': attribute type 17 has an invalid length.
[  454.220903][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'.
[  454.229967][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3714'.
[  454.256165][T19825] erspan0: entered promiscuous mode
[  454.264454][T19825] gretap0: entered promiscuous mode
[  454.302063][T19821] vlan1: entered allmulticast mode
[  454.307282][T19821] veth0_vlan: entered allmulticast mode
[  454.342835][T19831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.960390][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  454.982228][T19864] veth0_macvtap: left promiscuous mode
[  455.093011][T19864] tipc: Started in network mode
[  455.119665][T19864] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  455.140402][T19864] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  455.893457][  T475] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  455.938301][  T475] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  455.977299][T19907] __nla_validate_parse: 5 callbacks suppressed
[  455.977316][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'.
[  456.032591][  T475] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  456.070378][  T475] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  456.226178][T19918] xt_hashlimit: max too large, truncated to 1048576
[  456.250312][T19874] lec:lec_atm_close: lec0: Shut down!
[  456.274803][T11108] tipc: Node number set to 10463914
[  456.355692][T19925] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3748'.
[  456.373655][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'.
[  456.429905][T19927] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3749'.
[  456.467458][T19927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3749'.
[  456.500726][   T36] net_ratelimit: 70 callbacks suppressed
[  456.500746][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  456.539031][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  456.670246][ T9408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  456.700292][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  456.708094][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  456.733343][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'.
[  456.771141][T19947] validate_nla: 4 callbacks suppressed
[  456.771158][T19947] netlink: 'syz.2.3755': attribute type 1 has an invalid length.
[  456.795941][T19941] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  456.815298][T19947] netlink: 'syz.2.3755': attribute type 2 has an invalid length.
[  456.840136][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  456.851899][T19941] team1: entered promiscuous mode
[  456.857047][T19941] team1: entered allmulticast mode
[  456.870186][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  456.907018][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  457.046470][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  457.100894][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  457.112778][T19960] netlink: 'syz.3.3759': attribute type 83 has an invalid length.
[  457.134994][T19964] netlink: 'syz.3.3759': attribute type 83 has an invalid length.
[  457.147147][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'.
[  457.210463][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'.
[  457.429426][T19980] netlink: 4192 bytes leftover after parsing attributes in process `syz.3.3763'.
[  457.473517][T19986] netlink: 'syz.3.3763': attribute type 10 has an invalid length.
[  457.496803][T19980] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.3763'.
[  457.662383][T19995] netlink: 'syz.0.3764': attribute type 2 has an invalid length.
[  458.976658][T19974] syzkaller0: entered promiscuous mode
[  458.990819][T19974] syzkaller0: entered allmulticast mode
[  459.018666][T19995] �9: entered promiscuous mode
[  459.081835][T19997] 8021q: adding VLAN 0 to HW filter on device bond2
[  459.121181][T20008] bridge2: entered promiscuous mode
[  459.126445][T20008] bridge2: entered allmulticast mode
[  459.225791][T20018] netlink: 'syz.0.3769': attribute type 6 has an invalid length.
[  459.260759][T20019] netlink: 'syz.2.3767': attribute type 1 has an invalid length.
[  459.294394][T20007] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  459.321375][   T84] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.361485][   T84] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.382910][   T84] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.394311][   T84] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.500892][ T5948] lec:lec_start_xmit: lec0:No lecd attached
[  459.624917][T20040] netlink: 'syz.3.3772': attribute type 1 has an invalid length.
[  459.671867][T20040] netlink: 'syz.3.3772': attribute type 2 has an invalid length.
[  459.703713][T20029] wg1 speed is unknown, defaulting to 1000
[  460.122197][T20059] 8021q: adding VLAN 0 to HW filter on device bond3
[  460.273225][T20069] bond3: (slave veth3): Enslaving as an active interface with a down link
[  460.354071][T20059] bond3: (slave veth0_to_bond): making interface the new active one
[  460.393603][T20059] veth0_to_bond: entered promiscuous mode
[  460.415893][T20059] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  460.623753][T20086] xt_policy: output policy not valid in PREROUTING and INPUT
[  461.113966][T20108] __nla_validate_parse: 9 callbacks suppressed
[  461.113984][T20108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3788'.
[  461.397259][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3791'.
[  461.523124][ T9408] net_ratelimit: 160 callbacks suppressed
[  461.523147][ T9408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.577559][ T9408] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  461.583576][ T5833] block nbd0: Receive control failed (result -107)
[  461.594440][T20130] block nbd0: reconnected socket
[  461.723669][T20141] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3798'.
[  461.750345][  T146] team0: left allmulticast mode
[  461.755308][   T84] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.767093][  T146] dummy0: left allmulticast mode
[  461.774968][  T146] team0: left promiscuous mode
[  461.779965][  T146] dummy0: left promiscuous mode
[  461.785507][  T146] bridge0: port 1(team0) entered disabled state
[  461.792452][ T9408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.830166][   T84] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.850187][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.872852][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.900498][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.916189][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3802'.
[  461.940605][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  461.971532][ T1167] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  462.032016][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3804'.
[  462.108489][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3805'.
[  462.163271][  T146] bond3 (unregistering): (slave gretap2): Releasing active interface
[  462.395404][  T146] team0: Port device bridge4 removed
[  462.556022][  T146] bond3 (unregistering): (slave bridge7): Releasing active interface
[  462.609434][  T146] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  462.619171][  T146] bond0 (unregistering): Released all slaves
[  462.635533][  T146] bond1 (unregistering): Released all slaves
[  462.655974][  T146] bond2 (unregistering): Released all slaves
[  462.671053][  T146] bond3 (unregistering): Released all slaves
[  462.712248][T20147] sch_fq: defrate 0 ignored.
[  462.809790][  T146] : left promiscuous mode
[  462.922164][  T146] : left promiscuous mode
[  463.102961][  T146] tipc: Left network mode
[  463.117553][T20179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3809'.
[  463.231230][T20186] validate_nla: 3 callbacks suppressed
[  463.231252][T20186] netlink: 'syz.4.3812': attribute type 1 has an invalid length.
[  463.251911][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'.
[  463.302037][T20187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3809'.
[  463.472442][T20197] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  463.951175][T20179] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.959005][T20179] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.618410][T20179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.652959][T20179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.749903][T20179] tipc: Resetting bearer <eth:macvlan1>
[  465.001439][T20224] lec:lec_atm_close: lec0: Shut down!
[  465.082626][T20186] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  465.089540][T20187] geneve2: entered promiscuous mode
[  465.105275][T20187] geneve2: entered allmulticast mode
[  465.134127][T20209] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.162699][T20225] netlink: 'syz.2.3817': attribute type 1 has an invalid length.
[  465.183663][T20225] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3817'.
[  465.355944][ T1142] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.387920][ T1142] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.408944][ T1142] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.441108][ T1142] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.804911][T20273] netlink: 'syz.4.3829': attribute type 33 has an invalid length.
[  465.856896][T11107] IPVS: starting estimator thread 0...
[  466.022384][T20278] IPVS: using max 30 ests per chain, 72000 per kthread
[  466.143315][T20289] "syz.3.3830" (20289) uses obsolete ecb(arc4) skcipher
[  466.163984][  T146] hsr_slave_0: left promiscuous mode
[  466.187100][  T146] hsr_slave_1: left promiscuous mode
[  466.249208][  T146] vlan0: left allmulticast mode
[  466.260246][  T146] veth0_vlan: left allmulticast mode
[  466.272766][  T146] vlan0: left promiscuous mode
[  466.285795][  T146] veth1_macvtap: left promiscuous mode
[  466.298696][  T146] veth0_macvtap: left promiscuous mode
[  466.312943][  T146] veth1_vlan: left promiscuous mode
[  466.324531][  T146] veth0_vlan: left promiscuous mode
[  466.880330][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.899826][  T146] pim6reg (unregistering): left allmulticast mode
[  467.114945][  T146] team0 (unregistering): Port device dummy0 removed
[  467.141922][T20288] __nla_validate_parse: 10 callbacks suppressed
[  467.141943][T20288] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3832'.
[  467.380907][T20315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3837'.
[  467.484443][T20324] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  467.510694][T20324] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  467.518578][T20324] gretap1: entered promiscuous mode
[  467.526136][T20324] gretap1: entered allmulticast mode
[  467.975528][T20353] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3843'.
[  468.229795][T20364] pim6reg527: entered allmulticast mode
[  468.275968][  T146] IPVS: stop unused estimator thread 0...
[  468.408035][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.429945][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.897910][T20400] syzkaller0: entered promiscuous mode
[  468.920115][T20400] syzkaller0: entered allmulticast mode
[  468.943132][T20408] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3857'.
[  468.969220][T20404] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  469.597268][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'.
[  469.612904][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'.
[  469.658901][T20451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3868'.
[  469.829348][T20445] can: request_module (can-proto-0) failed.
[  469.943161][T20462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3873'.
[  470.010086][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  470.018535][    C0] lec:lec_tx_timeout: lec0
[  470.023187][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.259657][T20470] bond4: option arp_all_targets: invalid value (18446744073709551613)
[  470.269743][T20470] bond4 (unregistering): Released all slaves
[  470.456387][T20483] wg1 speed is unknown, defaulting to 1000
[  470.901508][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'.
[  470.923444][T20523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3886'.
[  471.155465][T20528] syzkaller0: entered promiscuous mode
[  471.173551][T20536] netlink: 'syz.1.3887': attribute type 16 has an invalid length.
[  471.192620][T20528] syzkaller0: entered allmulticast mode
[  471.206061][T20536] netlink: 'syz.1.3887': attribute type 17 has an invalid length.
[  471.255023][T20530] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.289173][T20530] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.427050][T20536] 8021q: adding VLAN 0 to HW filter on device `
[  471.445491][T20536] net_ratelimit: 133 callbacks suppressed
[  471.445505][T20536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  473.249499][T20576] x_tables: duplicate underflow at hook 1
[  473.274264][T20578] syzkaller0: entered promiscuous mode
[  473.284936][T20578] syzkaller0: entered allmulticast mode
[  473.311646][T20578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.367575][T20575] tipc: Resetting bearer <eth:syzkaller0>
[  473.413202][T20575] tipc: Disabling bearer <eth:syzkaller0>
[  473.522575][T20591] Cannot find add_set index 2 as target
[  474.112186][T20631] openvswitch: netlink: Missing valid actions attribute.
[  474.139672][T20631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.481133][T20651] __nla_validate_parse: 4 callbacks suppressed
[  474.481152][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'.
[  474.745843][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'.
[  474.761465][T20673] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3922'.
[  474.784867][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3922'.
[  474.818266][T20675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.949987][T20682] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  475.030119][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  475.038203][    C0] lec:lec_tx_timeout: lec0
[  475.045646][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  475.460639][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3931'.
[  475.483398][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3931'.
[  476.484849][ T1951] block nbd0: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 240 seconds
[  476.503487][ T1951] block nbd0: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 240 seconds
[  476.516478][ T1951] block nbd0: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 240 seconds
[  476.528645][ T1951] block nbd0: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 240 seconds
[  476.554564][ T1951] block nbd0: Dead connection, failed to find a fallback
[  476.565590][ T1951] block nbd0: shutting down sockets
[  476.583575][ T1951] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.596334][ T1951] Buffer I/O error on dev nbd0, logical block 3, async page read
[  476.606816][ T1951] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.616570][ T1951] Buffer I/O error on dev nbd0, logical block 2, async page read
[  476.624723][ T1951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.634362][ T1951] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.642695][ T1951] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.652559][ T1951] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.669924][ T7100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.685378][ T7100] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.696925][ T7100] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.706691][ T7100] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.714887][ T7100] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.724639][ T7100] Buffer I/O error on dev nbd0, logical block 2, async page read
[  476.732652][ T7100] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.742619][ T7100] Buffer I/O error on dev nbd0, logical block 3, async page read
[  476.750550][ T7100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.761480][ T7100] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.769323][ T7100] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.779288][ T7100] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.789815][ T7100] ldm_validate_partition_table(): Disk read failed.
[  476.797605][ T7100] Dev nbd0: unable to read RDB block 0
[  476.808793][ T7100]  nbd0: unable to read partition table
[  476.847749][ T7100] ldm_validate_partition_table(): Disk read failed.
[  476.856890][ T7100] Dev nbd0: unable to read RDB block 0
[  476.863474][ T7100]  nbd0: unable to read partition table
[  477.407529][T20751] netlink: 'syz.3.3936': attribute type 1 has an invalid length.
[  477.461864][T20754] IPVS: ip_vs_edit_dest(): server weight less than zero
[  477.469544][T20754] netlink: 'syz.2.3937': attribute type 1 has an invalid length.
[  477.482684][T20758] netlink: 'syz.0.3938': attribute type 1 has an invalid length.
[  477.543858][T20761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3938'.
[  477.555658][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'.
[  477.587874][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3936'.
[  477.673963][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'.
[  477.701976][T20767] netlink: 'syz.4.3934': attribute type 1 has an invalid length.
[  477.716649][T20758] bond2: entered promiscuous mode
[  477.722360][T20758] 8021q: adding VLAN 0 to HW filter on device bond2
[  478.011297][T20783] sctp: [Deprecated]: syz.0.3940 (pid 20783) Use of int in maxseg socket option.
[  478.011297][T20783] Use struct sctp_assoc_value instead
[  478.059001][T20785] netlink: 'syz.3.3941': attribute type 1 has an invalid length.
[  478.163381][T20793] netlink: 'syz.4.3944': attribute type 1 has an invalid length.
[  478.252700][T20795] netlink: 'syz.2.3943': attribute type 3 has an invalid length.
[  478.267392][T20795] netlink: 'syz.2.3943': attribute type 1 has an invalid length.
[  478.285448][T20795] NCSI netlink: No device for ifindex 813332851
[  478.670844][T20824] netlink: 'syz.4.3950': attribute type 2 has an invalid length.
[  478.695532][T20818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.711594][T20818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.957095][T20818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.968056][T20818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.146922][T20818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.164310][T20818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.214487][T20845] netlink: 'syz.3.3955': attribute type 23 has an invalid length.
[  479.258013][T20818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.269087][T20818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.613888][ T1142] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  479.634071][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.669249][ T1142] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  479.679408][ T1142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.694505][T20874] __nla_validate_parse: 7 callbacks suppressed
[  479.694520][T20874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3961'.
[  479.745285][ T1142] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  479.761287][ T1142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.769548][ T1142] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  479.817940][ T1142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.078493][T20900] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3966'.
[  480.135616][T20900] vlan3: entered allmulticast mode
[  480.156721][T20900] gretap0: entered allmulticast mode
[  480.354413][T20919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  480.364236][T20919] syzkaller0: entered promiscuous mode
[  480.380422][T20919] syzkaller0: entered allmulticast mode
[  480.400195][T20802] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  480.406437][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout
[  480.413719][T20802] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  480.425163][T20919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3971'.
[  480.852954][T20943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3977'.
[  480.880053][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  480.888124][    C0] lec:lec_tx_timeout: lec0
[  480.893341][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  480.934398][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3977'.
[  481.003419][T20948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3977'.
[  481.030396][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'.
[  481.146847][T20956] syzkaller0: entered promiscuous mode
[  481.152547][T20956] syzkaller0: entered allmulticast mode
[  481.202050][T20956] xt_hashlimit: invalid rate
[  481.311441][T20802] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  481.319781][T20802] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  481.330961][T20971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3986'.
[  481.567966][T20802] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  481.582162][T20802] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  481.675680][T20994] sctp: [Deprecated]: syz.0.3992 (pid 20994) Use of struct sctp_assoc_value in delayed_ack socket option.
[  481.675680][T20994] Use struct sctp_sack_info instead
[  481.714816][T20995] sctp: [Deprecated]: syz.0.3992 (pid 20995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  481.714816][T20995] Use struct sctp_sack_info instead
[  481.750901][T20802] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  481.766487][T20802] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  482.126165][T21012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3995'.
[  482.271814][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'.
[  482.273606][T21017] veth0_to_bond: entered allmulticast mode
[  482.321608][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.580873][T21033] geneve2: entered promiscuous mode
[  482.586134][T21033] geneve2: entered allmulticast mode
[  482.915908][T21012] validate_nla: 4 callbacks suppressed
[  482.915928][T21012] netlink: 'syz.2.3995': attribute type 30 has an invalid length.
[  483.397306][T21087] gre1: entered promiscuous mode
[  483.425250][T21087] gre1: entered allmulticast mode
[  483.472526][T21090] syzkaller0: entered promiscuous mode
[  483.478059][T21090] syzkaller0: entered allmulticast mode
[  483.739481][T21110] Bluetooth: MGMT ver 1.23
[  484.566073][T21155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.594385][T21155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.618313][T21155] bond0 (unregistering): Released all slaves
[  484.883976][T21174] __nla_validate_parse: 71 callbacks suppressed
[  484.883993][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[  485.098704][T21188] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  485.110191][T21190] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  485.298212][T21202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'.
[  485.490162][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'.
[  485.499167][T21215] netlink: 'syz.4.4044': attribute type 7 has an invalid length.
[  485.647498][T21225] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4046'.
[  485.796643][T21228] netlink: 'syz.1.4047': attribute type 1 has an invalid length.
[  485.854572][T21230] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  485.900077][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  485.908160][    C0] lec:lec_tx_timeout: lec0
[  485.912777][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  485.936848][T21243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.993675][T21240] syzkaller0: entered promiscuous mode
[  485.999213][T21240] syzkaller0: entered allmulticast mode
[  486.341320][T21262] netlink: 'syz.3.4054': attribute type 12 has an invalid length.
[  486.600448][T21272] nbd2: detected capacity change from 0 to 127
[  486.631322][T21272] dvmrp6: entered allmulticast mode
[  486.671224][ T5833] block nbd2: Receive control failed (result -104)
[  486.776056][T21285] wg1 speed is unknown, defaulting to 1000
[  487.038693][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'.
[  487.498605][T21337] IPVS: set_ctl: invalid protocol: 44 172.30.1.5:20001
[  487.533000][T21340] IPVS: ip_vs_edit_dest(): server weight less than zero
[  487.563646][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'.
[  487.992085][T21369] delete_channel: no stack
[  488.004769][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'.
[  488.036286][T21364] openvswitch: netlink: Flow actions attr not present in new flow.
[  488.086596][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4080'.
[  488.413977][T21396] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  488.464699][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'.
[  488.581531][T21403] x_tables: duplicate underflow at hook 1
[  488.627462][T21405] sctp: [Deprecated]: syz.0.4089 (pid 21405) Use of struct sctp_assoc_value in delayed_ack socket option.
[  488.627462][T21405] Use struct sctp_sack_info instead
[  488.747241][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'.
[  488.803093][T21418] xt_hashlimit: size too large, truncated to 1048576
[  489.262047][T21444] netlink: 'syz.0.4099': attribute type 1 has an invalid length.
[  489.305157][T21444] netlink: 'syz.0.4099': attribute type 2 has an invalid length.
[  489.340590][T21444] netlink: 'syz.0.4099': attribute type 2 has an invalid length.
[  489.348378][T21444] netlink: 'syz.0.4099': attribute type 2 has an invalid length.
[  489.450812][T21457] netlink: 'syz.4.4102': attribute type 1 has an invalid length.
[  489.568844][T21471] netlink: 'syz.0.4104': attribute type 10 has an invalid length.
[  489.588865][T21470] macvtap1: entered promiscuous mode
[  489.595293][T21470] macvtap1: entered allmulticast mode
[  489.610822][T21470] veth1_vlan: entered allmulticast mode
[  489.718318][T21471] team0: Device veth1_macvtap failed to register rx_handler
[  490.096137][T21507] __nla_validate_parse: 6 callbacks suppressed
[  490.096158][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'.
[  490.300461][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  490.310747][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4115'.
[  490.335761][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  490.365841][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'.
[  490.392505][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  490.403594][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'.
[  490.426578][T21518] netlink: 'syz.3.4115': attribute type 1 has an invalid length.
[  490.434834][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4116'.
[  490.472798][T21518] netlink: 'syz.3.4115': attribute type 2 has an invalid length.
[  490.499776][T21523] geneve3: entered promiscuous mode
[  490.550446][T21523] geneve3: entered allmulticast mode
[  490.695492][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4120'.
[  490.749995][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'.
[  490.920055][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  490.928141][    C0] lec:lec_tx_timeout: lec0
[  490.933204][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  491.222007][T21572] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  491.244254][T21576] netlink: 'syz.4.4127': attribute type 11 has an invalid length.
[  491.358080][T21582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.272976][T21608] SET target dimension over the limit!
[  492.318875][T21623] netlink: 'syz.2.4133': attribute type 2 has an invalid length.
[  492.395998][T21623] netlink: 'syz.2.4133': attribute type 11 has an invalid length.
[  493.185993][T21580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.245066][T21580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.931532][T21580] vlan0: left allmulticast mode
[  493.940385][T21580] veth0_vlan: left allmulticast mode
[  493.945724][T21580] vlan0: left promiscuous mode
[  494.056960][T21619] syzkaller0: entered promiscuous mode
[  494.064027][T21619] syzkaller0: entered allmulticast mode
[  494.111589][ T1167] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.142698][ T1167] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.179581][ T1167] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.198134][ T1167] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.342207][ T1167] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.366999][ T1167] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.386737][ T1167] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.416722][ T1167] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.554466][T21675] netlink: 'syz.1.4136': attribute type 12 has an invalid length.
[  494.594238][T21675] netlink: 'syz.1.4136': attribute type 29 has an invalid length.
[  494.632890][T21698] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  494.640654][T21675] netlink: 'syz.1.4136': attribute type 1 has an invalid length.
[  494.640684][T21675] netlink: 'syz.1.4136': attribute type 2 has an invalid length.
[  494.658096][T21679] syzkaller0: entered promiscuous mode
[  494.668142][T21679] syzkaller0: entered allmulticast mode
[  494.676854][T21681] bridge0: entered allmulticast mode
[  494.860611][T21698] bond0: entered promiscuous mode
[  494.883208][T21698] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.909553][T21698] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  494.972671][T21699] bond0: (slave bridge2): making interface the new active one
[  494.988755][T21699] bridge2: entered promiscuous mode
[  495.007027][T21699] bond0: (slave bridge2): Enslaving as an active interface with an up link
[  495.024827][T21714] bond0: Error: Cannot enslave bond to itself.
[  495.038765][T21698] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  495.102611][T21699] bond0: (slave bridge3): Enslaving as a backup interface with an up link
[  495.124455][T21715] __nla_validate_parse: 7 callbacks suppressed
[  495.124475][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4142'.
[  495.165979][T21699] bond0: (slave bridge4): Enslaving as a backup interface with an up link
[  495.185618][T21729] xt_policy: output policy not valid in PREROUTING and INPUT
[  495.193422][T21698] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  495.273170][T21731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4145'.
[  495.280794][T21699] bond0: (slave bridge5): Enslaving as a backup interface with an up link
[  495.356039][T21699] bond0: (slave bridge6): Enslaving as a backup interface with an up link
[  495.383295][T21698] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  495.440146][T21738] netlink: 'syz.4.4148': attribute type 1 has an invalid length.
[  495.457666][T21699] bond0: (slave bridge7): Enslaving as a backup interface with an up link
[  495.568543][T21738] bond3: entered promiscuous mode
[  495.580555][T21738] 8021q: adding VLAN 0 to HW filter on device bond3
[  495.617043][T21738] bond3: (slave bridge3): making interface the new active one
[  495.624784][T21738] bridge3: entered promiscuous mode
[  495.632722][T21738] bridge3: left promiscuous mode
[  495.940080][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  495.948209][    C0] lec:lec_tx_timeout: lec0
[  495.954895][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  495.992014][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4155'.
[  496.006437][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'.
[  496.055676][T21772] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4157'.
[  496.130448][T21780] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4159'.
[  496.139592][T21780] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4159'.
[  496.151331][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'.
[  496.165801][T21780] netlink: 582 bytes leftover after parsing attributes in process `syz.0.4159'.
[  496.186529][T21777] geneve2: entered promiscuous mode
[  496.195264][   T84] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 35507 - 0
[  496.232328][T21772] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.252745][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'.
[  496.263493][T21772] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.300638][   T84] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 35507 - 0
[  496.312531][T21780] pimreg: left allmulticast mode
[  496.338657][   T84] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 35507 - 0
[  496.535089][T21797] bond4: option mode: invalid value (133)
[  496.562223][T21804] set match dimension is over the limit!
[  496.586343][T21797] bond4 (unregistering): Released all slaves
[  496.643620][T21803] bond0: entered promiscuous mode
[  497.735202][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.745891][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.768643][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35507 - 0
[  497.829462][T21868] gre1: entered promiscuous mode
[  497.838324][T21868] gre1: entered allmulticast mode
[  497.965199][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.990573][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.016700][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35507 - 0
[  498.147836][T21886] nbd: nbd64 already in use
[  498.195114][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.256577][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.317535][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35507 - 0
[  498.440146][T21914] veth0: entered promiscuous mode
[  498.462891][ T7100] udevd[7100]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  498.607238][ T1167] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  498.631616][ T1167] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 35507 - 0
[  498.668457][ T1167] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  498.703216][T21920] pim6reg: entered allmulticast mode
[  498.757464][T21912] veth0: left promiscuous mode
[  498.763075][   T84] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  498.776758][   T84] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 35507 - 0
[  498.796005][   T84] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  498.829606][ T9408] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.843581][ T9408] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 35507 - 0
[  498.855225][ T9408] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  498.972741][T21934] bond3 (unregistering): Released all slaves
[  499.095113][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.120072][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 35507 - 0
[  499.129948][T21772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  499.272028][T21949] netlink: 'syz.2.4199': attribute type 11 has an invalid length.
[  499.281844][T21946] bond5: (slave bond_slave_1): Device is not bonding slave
[  499.300160][T21946] bond5: option active_slave: invalid value (bond_slave_1)
[  499.316925][T21946] bond5 (unregistering): Released all slaves
[  499.371037][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.390670][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 35507 - 0
[  499.410067][T21772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  499.544619][T21946] bond5: (slave bond_slave_1): Device is not bonding slave
[  499.560393][T21946] bond5: option active_slave: invalid value (bond_slave_1)
[  499.583006][T21946] bond5 (unregistering): Released all slaves
[  499.673095][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.739067][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 35507 - 0
[  499.770236][T21772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  499.878965][T21946] bond5: (slave bond_slave_1): Device is not bonding slave
[  499.888266][T21946] bond5: option active_slave: invalid value (bond_slave_1)
[  499.906639][T21946] bond5 (unregistering): Released all slaves
[  499.982177][T21980] validate_nla: 5 callbacks suppressed
[  499.982194][T21980] netlink: 'syz.2.4202': attribute type 5 has an invalid length.
[  500.333984][T21993] xt_l2tp: invalid flags combination: 0
[  500.476483][T22005] netlink: 'syz.2.4209': attribute type 11 has an invalid length.
[  500.500685][T22005] netlink: 'syz.2.4209': attribute type 11 has an invalid length.
[  500.522093][T22005] __nla_validate_parse: 14 callbacks suppressed
[  500.522111][T22005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4209'.
[  500.899411][T22031] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4215'.
[  500.970095][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  500.978184][    C0] lec:lec_tx_timeout: lec0
[  500.990442][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  501.106087][T22042] netlink: 'syz.1.4218': attribute type 29 has an invalid length.
[  501.155197][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'.
[  501.179499][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'.
[  501.206341][T22051] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4218'.
[  501.223668][T22053] IPVS: set_ctl: invalid protocol: 117 0.0.0.0:20000
[  501.299234][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4221'.
[  501.639381][T22070] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  501.886863][T22087] smc: net device team0 applied user defined pnetid SYZ2
[  501.906235][T22087] smc: net device caif0 applied user defined pnetid SYZ2
[  501.928703][T22093] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.935985][T22093] bridge0: port 2(bridge_slave_1) entered listening state
[  501.943448][T22093] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.950662][T22093] bridge0: port 1(bridge_slave_0) entered listening state
[  501.971607][T22093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  502.062243][T22093] netlink: 'syz.2.4228': attribute type 3 has an invalid length.
[  502.074770][T22093] netlink: 'syz.2.4228': attribute type 64 has an invalid length.
[  502.223219][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[  502.334636][T22114] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4235'.
[  502.362160][T22117] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  502.557648][T22114] syzkaller0: entered promiscuous mode
[  502.564543][T22114] syzkaller0: entered allmulticast mode
[  502.581146][T22126] tipc: New replicast peer: 255.255.255.255
[  502.599026][T22126] tipc: Enabled bearer <udp:syz2>, priority 10
[  502.612777][T22127] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  503.380714][T22152] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4244'.
[  504.305225][T22137] ipvlan2: entered allmulticast mode
[  504.311225][T22137] batadv_slave_1: entered allmulticast mode
[  504.318819][T22137] batman_adv: batadv0: Adding interface: ipvlan2
[  504.326359][T22137] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.353891][T22137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.366657][T22137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.377671][T22137] batman_adv: batadv0: Interface activated: ipvlan2
[  504.602011][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4248'.
[  504.664227][T22174] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  504.674191][T22179] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  504.872995][T22190] netlink: 'syz.1.4251': attribute type 2 has an invalid length.
[  505.115497][T22203] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  505.508614][T22220] syzkaller0: entered promiscuous mode
[  505.514351][T22220] syzkaller0: entered allmulticast mode
[  505.878627][T22246] __nla_validate_parse: 5 callbacks suppressed
[  505.878647][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4264'.
[  506.000149][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  506.008207][    C0] lec:lec_tx_timeout: lec0
[  506.012873][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  506.032456][T22246] 8021q: adding VLAN 0 to HW filter on device bond3
[  506.149087][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4269'.
[  506.321469][T22276] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4274'.
[  506.352738][T22276] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4274'.
[  506.731587][T22309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4284'.
[  506.958304][T22326] netlink: 'syz.0.4288': attribute type 4 has an invalid length.
[  506.993360][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'.
[  507.238307][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4295'.
[  507.359321][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4297'.
[  507.395013][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'.
[  507.407285][T22363] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4300'.
[  507.439130][T22363] netlink: 'syz.2.4300': attribute type 5 has an invalid length.
[  507.467583][T22370] ipt_REJECT: TCP_RESET invalid for non-tcp
[  507.481535][T22363] netlink: 'syz.2.4300': attribute type 3 has an invalid length.
[  507.573939][T22375] netlink: 'syz.0.4302': attribute type 83 has an invalid length.
[  507.762356][T22384] netlink: 'syz.0.4305': attribute type 18 has an invalid length.
[  508.276466][T22433] openvswitch: netlink: Flow key attr not present in new flow.
[  508.428441][T22443] PKCS7: Unknown OID: [4] (bad)
[  508.434435][T22443] PKCS7: Only support pkcs7_signedData type
[  508.523828][T22446] smc: net device team0 applied user defined pnetid SYZ2
[  508.545262][T22448] syzkaller0: entered promiscuous mode
[  508.551654][T22448] syzkaller0: entered allmulticast mode
[  508.589477][T22446] bond5: invalid ARP target 0.0.0.0 specified for addition
[  508.597123][T22446] bond5: option arp_ip_target: invalid value (0)
[  508.605849][T22446] bond5 (unregistering): Released all slaves
[  508.615518][T22451] xt_CT: You must specify a L4 protocol and not use inversions on it
[  509.012574][T22461] syzkaller0: entered promiscuous mode
[  509.039238][T22475] openvswitch: netlink: Multiple metadata blocks provided
[  509.044063][T22461] syzkaller0: entered allmulticast mode
[  509.057300][T22475] netlink: 'syz.2.4335': attribute type 7 has an invalid length.
[  509.284363][T22484] syzkaller0: entered promiscuous mode
[  509.301709][T22484] syzkaller0: entered allmulticast mode
[  509.451335][T22498] netlink: 'syz.3.4343': attribute type 4 has an invalid length.
[  509.737223][T22513] bridge_slave_0: entered promiscuous mode
[  510.055558][T22535] : entered promiscuous mode
[  510.076910][T22537] vlan2: entered promiscuous mode
[  510.089835][T22537] geneve1: entered promiscuous mode
[  510.095690][T22537] vlan2: entered allmulticast mode
[  510.101840][T22537] geneve1: entered allmulticast mode
[  510.330735][T22552] tipc: Started in network mode
[  510.353577][T22552] tipc: Node identity c28b5045e1be, cluster identity 4711
[  510.380452][T22552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.507646][T22567] syzkaller0: entered promiscuous mode
[  510.513403][T22567] syzkaller0: entered allmulticast mode
[  510.519796][T22567] tipc: Resetting bearer <eth:syzkaller0>
[  510.537100][T22551] tipc: Resetting bearer <eth:syzkaller0>
[  511.020376][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  511.028464][    C0] lec:lec_tx_timeout: lec0
[  511.033129][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  511.964134][T22551] tipc: Disabling bearer <eth:syzkaller0>
[  511.980813][ T9409] tipc: Node number set to 590696517
[  512.047090][T22588] __nla_validate_parse: 12 callbacks suppressed
[  512.047110][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4368'.
[  512.185770][T22602] vcan0: entered allmulticast mode
[  512.196744][T22601] netlink: 'syz.0.4370': attribute type 1 has an invalid length.
[  512.214597][T22602] vlan1: left allmulticast mode
[  512.219653][T22601] netlink: 'syz.0.4370': attribute type 4 has an invalid length.
[  512.234730][T22602] veth0_vlan: left allmulticast mode
[  512.240492][T22601] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4370'.
[  512.249832][T22602] dvmrp6: left allmulticast mode
[  512.694185][T22626] tipc: Started in network mode
[  512.699140][T22626] tipc: Node identity f286eed710b7, cluster identity 4711
[  512.715141][T22626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.726820][T22632] Cannot find set identified by id 65534 to match
[  512.727375][T22626] syzkaller0: entered promiscuous mode
[  512.739476][T22626] syzkaller0: entered allmulticast mode
[  512.745614][T22632] IPVS: set_ctl: invalid protocol: 199 10.1.1.1:20004
[  512.757085][T22626] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  512.802912][T22626] tipc: Resetting bearer <eth:syzkaller0>
[  512.820960][T22625] tipc: Resetting bearer <eth:syzkaller0>
[  512.871757][T22636] xt_connbytes: Forcing CT accounting to be enabled
[  512.878992][T22625] tipc: Disabling bearer <eth:syzkaller0>
[  512.903643][T22636] netlink: 'syz.3.4383': attribute type 13 has an invalid length.
[  512.925288][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'.
[  513.012813][T22411] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.038876][T22411] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  513.073460][T22411] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.093422][T22411] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.172997][T22646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  513.180334][T22646] IPv6: NLM_F_CREATE should be set when creating new route
[  513.187617][T22646] IPv6: NLM_F_CREATE should be set when creating new route
[  513.201105][T22646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  513.277638][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'.
[  513.302074][T22654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4389'.
[  513.343933][T22653] wg1 speed is unknown, defaulting to 1000
[  513.525071][T22667] netlink: 'syz.2.4394': attribute type 10 has an invalid length.
[  513.860546][T22691] ip6t_rpfilter: unknown options
[  514.004262][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4403'.
[  514.178334][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'.
[  514.194869][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4405'.
[  514.205912][T22698] veth0: entered promiscuous mode
[  514.213538][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4405'.
[  514.244255][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'.
[  514.271320][T22699] netlink: 'syz.3.4405': attribute type 83 has an invalid length.
[  514.458700][T22696] veth0: left promiscuous mode
[  514.507553][T22712] netlink: 'syz.2.4411': attribute type 1 has an invalid length.
[  514.596838][T22716] syzkaller0: entered promiscuous mode
[  514.619906][T22716] syzkaller0: entered allmulticast mode
[  514.822021][T22728] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  516.040095][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  516.048223][    C0] lec:lec_tx_timeout: lec0
[  516.052850][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  516.344740][T22733] hsr_slave_0: left promiscuous mode
[  516.351691][T22733] hsr_slave_1: left promiscuous mode
[  516.551385][T22773] �����9o��+���4�: entered allmulticast mode
[  516.566695][T22773] bridge0: port 1(ipvlan2) entered blocking state
[  516.575663][T22773] bridge0: port 1(ipvlan2) entered disabled state
[  516.584583][T22773] ipvlan2: entered allmulticast mode
[  516.589990][T22773] bridge0: entered allmulticast mode
[  516.608484][T22773] ipvlan2: left allmulticast mode
[  516.620569][T22773] bridge0: left allmulticast mode
[  516.634683][T22781] netlink: 'syz.3.4425': attribute type 5 has an invalid length.
[  516.748206][T22772] syzkaller0: entered promiscuous mode
[  516.756930][T22772] syzkaller0: entered allmulticast mode
[  516.846500][T22785] xt_hashlimit: size too large, truncated to 1048576
[  517.120408][T22806] __nla_validate_parse: 12 callbacks suppressed
[  517.120428][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'.
[  517.206153][T22809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.225495][T22809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.443181][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  517.450461][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  518.415344][T22821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4436'.
[  518.432895][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4436'.
[  518.822570][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807c845400: rx timeout, send abort
[  518.943952][T22801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'.
[  519.137273][T22833] netlink: 'syz.3.4441': attribute type 10 has an invalid length.
[  519.163684][T22833] team0: Port device dummy0 added
[  519.318750][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807c844400: rx timeout, send abort
[  519.331647][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807c845400: abort rx timeout. Force session deactivation
[  519.827060][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807c844400: abort rx timeout. Force session deactivation
[  519.966021][T22880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.002625][T22882] nbd: socks must be embedded in a SOCK_ITEM attr
[  520.252261][T22896] openvswitch: netlink: Invalid VLAN frame
[  520.351462][T22902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4456'.
[  520.491869][T22907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4458'.
[  520.537947][T22908] bond4: entered promiscuous mode
[  520.570156][T22908] bond4: entered allmulticast mode
[  520.600553][T22908] 8021q: adding VLAN 0 to HW filter on device bond4
[  520.861967][T22921] tipc: Enabled bearer <ib:gretap0>, priority 10
[  521.037391][T22936] xt_HMARK: spi-set and port-set can't be combined
[  521.243610][T22941] sctp: [Deprecated]: syz.3.4466 (pid 22941) Use of int in maxseg socket option.
[  521.243610][T22941] Use struct sctp_assoc_value instead
[  521.407098][T22949] openvswitch: netlink: Flow actions attr not present in new flow.
[  521.563610][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4470'.
[  521.738924][T22960] xt_hashlimit: overflow, try lower: 3/0
[  521.840058][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  521.848108][    C0] lec:lec_tx_timeout: lec0
[  521.853106][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  522.396405][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4484'.
[  522.457304][T22999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'.
[  522.566768][T23001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4487'.
[  522.595062][T22999] macvtap2: entered promiscuous mode
[  522.601161][T22999] vlan0: entered promiscuous mode
[  522.606745][T22999] macvtap2: entered allmulticast mode
[  522.612358][T22999] vlan0: entered allmulticast mode
[  522.617658][T22999] veth0_vlan: entered allmulticast mode
[  522.745753][T23010] IPVS: sh: FWM 3 0x00000003 - no destination available
[  522.804423][T23018] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4493'.
[  522.974751][T23034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4496'.
[  523.183902][T23048] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  523.207785][T23048] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4498'.
[  523.369202][T23054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4499'.
[  523.663051][T23076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4506'.
[  523.690191][T23082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4506'.
[  523.793490][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'.
[  523.946695][T23101] geneve3: entered promiscuous mode
[  523.969793][T23101] geneve3: entered allmulticast mode
[  524.372725][T23090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  524.714308][T23135] sctp: [Deprecated]: syz.3.4523 (pid 23135) Use of int in max_burst socket option deprecated.
[  524.714308][T23135] Use struct sctp_assoc_value instead
[  524.954184][T23148] netlink: 'syz.1.4529': attribute type 11 has an invalid length.
[  525.156737][T23161] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  525.221407][T23167] block nbd2: NBD_DISCONNECT
[  525.226275][T23167] block nbd2: Send disconnect failed -32
[  525.236460][T23167] block nbd2: shutting down sockets
[  525.299352][    C0] blk_print_req_error: 138 callbacks suppressed
[  525.299374][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.315262][    C0] buffer_io_error: 138 callbacks suppressed
[  525.315282][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  525.329048][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.338631][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  525.346490][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.356034][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  525.363878][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.373423][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  525.393900][T12863] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.421860][T12863] Buffer I/O error on dev nbd2, logical block 0, async page read
[  525.429713][T12863] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.452696][T12863] Buffer I/O error on dev nbd2, logical block 1, async page read
[  525.464832][T12863] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.479471][T12863] Buffer I/O error on dev nbd2, logical block 2, async page read
[  525.490858][T12863] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.501975][T12863] Buffer I/O error on dev nbd2, logical block 3, async page read
[  525.509814][T12863] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.522176][T12863] Buffer I/O error on dev nbd2, logical block 0, async page read
[  525.530769][T12863] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  525.543114][T12863] Buffer I/O error on dev nbd2, logical block 1, async page read
[  525.553939][T23176] syzkaller0: entered promiscuous mode
[  525.559530][T23176] syzkaller0: entered allmulticast mode
[  525.598344][T12863] ldm_validate_partition_table(): Disk read failed.
[  525.606782][T12863] Dev nbd2: unable to read RDB block 0
[  525.623260][T12863]  nbd2: unable to read partition table
[  525.664938][T12863] ldm_validate_partition_table(): Disk read failed.
[  525.672635][T12863] Dev nbd2: unable to read RDB block 0
[  525.678746][T12863]  nbd2: unable to read partition table
[  525.727758][T23183] bond0: entered promiscuous mode
[  525.745142][T23183] bond0: left promiscuous mode
[  525.816039][T23188] syzkaller0: entered promiscuous mode
[  525.822297][T23188] syzkaller0: entered allmulticast mode
[  526.029157][T23204] netlink: Conntrack attr has 3 unknown bytes
[  526.107475][T23208] netlink: 'syz.3.4550': attribute type 8 has an invalid length.
[  526.379384][T23229] x_tables: unsorted entry at hook 3
[  526.394782][T23231] syzkaller0: entered promiscuous mode
[  526.403626][T23231] syzkaller0: entered allmulticast mode
[  526.865105][T23257] xt_CT: No such helper "syz1"
[  526.880088][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  526.888215][    C0] lec:lec_tx_timeout: lec0
[  526.893913][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  526.901970][T23263] netlink: 'syz.2.4566': attribute type 1 has an invalid length.
[  527.007215][T23267] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  527.041869][T23267] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  527.082506][T23267] bond3: (slave vxcan3): making interface the new active one
[  527.101304][T23267] bond3: (slave vxcan3): Enslaving as an active interface with an up link
[  527.119566][T23273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.134582][T23269] syzkaller0: entered promiscuous mode
[  527.141271][T23269] syzkaller0: entered allmulticast mode
[  527.148849][T23263] syzkaller0: entered promiscuous mode
[  527.156241][T23263] syzkaller0: entered allmulticast mode
[  527.236436][T23269] tipc: Resetting bearer <eth:syzkaller0>
[  527.251519][T23268] tipc: Resetting bearer <eth:syzkaller0>
[  527.307972][T23268] tipc: Disabling bearer <eth:syzkaller0>
[  527.774859][T23314] __nla_validate_parse: 9 callbacks suppressed
[  527.774881][T23314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4579'.
[  527.799675][T23310] veth1_makvtap: renamed from veth0_vlan
[  527.877500][T23316] netlink: 'syz.0.4580': attribute type 1 has an invalid length.
[  528.077306][T23324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4583'.
[  528.117763][T23324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4583'.
[  528.135825][T23324] gretap2: entered promiscuous mode
[  528.142054][T23324] gretap2: entered allmulticast mode
[  528.188409][T23334] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4585'.
[  528.224358][T23334] netlink: 'syz.0.4585': attribute type 10 has an invalid length.
[  528.245031][T23334] team0: Device veth1_macvtap failed to register rx_handler
[  528.295052][T23339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4585'.
[  528.376544][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4587'.
[  528.385615][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4587'.
[  528.460579][T23343] netlink: 'syz.3.4587': attribute type 10 has an invalid length.
[  528.509303][T23343] veth1_macvtap: left promiscuous mode
[  528.535140][T23343] team0: Device veth1_macvtap failed to register rx_handler
[  528.721991][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[  528.755322][T23358] netlink: 'syz.1.4591': attribute type 3 has an invalid length.
[  528.776947][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'.
[  528.797903][T23358] netlink: 'syz.1.4591': attribute type 3 has an invalid length.
[  528.832066][T23358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4591'.
[  528.862190][T23366] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  529.153833][T23394] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  529.178804][T23394] netlink: 'syz.2.4600': attribute type 12 has an invalid length.
[  529.199832][T23394] netlink: 'syz.2.4600': attribute type 29 has an invalid length.
[  529.215949][T23394] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  529.514608][T23413] syzkaller1: entered promiscuous mode
[  529.535298][T23413] syzkaller1: entered allmulticast mode
[  529.590490][T23419] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  529.758763][   T84] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  529.800656][   T84] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  529.808901][   T84] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  529.864614][   T84] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  530.096348][T23451] syzkaller0: entered promiscuous mode
[  530.103378][T23451] syzkaller0: entered allmulticast mode
[  530.176391][T23461] 0: reclassify loop, rule prio 0, protocol 800
[  530.604420][ T5487] veth1_makvtap: left promiscuous mode
[  530.633118][ T5487] veth1_makvtap: entered promiscuous mode
[  531.900357][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  531.908549][    C0] lec:lec_tx_timeout: lec0
[  531.913352][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  532.091201][T23576] validate_nla: 2 callbacks suppressed
[  532.091235][T23576] netlink: 'syz.4.4641': attribute type 7 has an invalid length.
[  532.166252][T23576] netlink: 'syz.4.4641': attribute type 7 has an invalid length.
[  532.360688][T23586] xt_bpf: check failed: parse error
[  532.421847][T23596] netlink: 'syz.0.4646': attribute type 2 has an invalid length.
[  532.439794][T23596] netlink: 'syz.0.4646': attribute type 25 has an invalid length.
[  532.709923][T23616] netlink: 'syz.0.4652': attribute type 11 has an invalid length.
[  532.730149][T23616] netlink: 'syz.0.4652': attribute type 11 has an invalid length.
[  532.800113][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.807480][    C1] bridge0: topology change detected, propagating
[  532.814270][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.821534][    C1] bridge0: topology change detected, propagating
[  532.957285][T23630] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  532.981389][T23631] IPVS: sh: FWM 3 0x00000003 - no destination available
[  533.044135][T23631] IPVS: sh: FWM 3 0x00000003 - no destination available
[  533.125391][T23639] __nla_validate_parse: 14 callbacks suppressed
[  533.125413][T23639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4657'.
[  533.174514][T23639] veth0_to_team: entered promiscuous mode
[  533.193698][T23639] veth0_to_team: left promiscuous mode
[  533.226456][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'.
[  533.236552][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'.
[  533.941060][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4671'.
[  533.950244][T23691] netlink: 'syz.1.4671': attribute type 1 has an invalid length.
[  533.958023][T23691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4671'.
[  534.667381][T23733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4680'.
[  534.795274][T23745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4680'.
[  534.989629][T23755] x_tables: duplicate underflow at hook 4
[  535.035528][T23762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4687'.
[  535.188739][T23769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4688'.
[  535.228014][T23772] Cannot find add_set index 2 as target
[  535.333211][T23776] team0: Port device dummy0 removed
[  535.349657][T23776] bridge_slave_0: left allmulticast mode
[  535.356526][T23776] bridge_slave_0: left promiscuous mode
[  535.362677][T23776] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.373159][T23776] bridge_slave_1: left allmulticast mode
[  535.378822][T23776] bridge_slave_1: left promiscuous mode
[  535.385059][T23776] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.397813][T23776] bond3: (slave veth0_to_bond): Releasing active interface
[  535.405280][T23776] veth0_to_bond: left promiscuous mode
[  535.415414][T23776] team0: Port device team_slave_0 removed
[  535.423273][T23776] team0: Port device team_slave_1 removed
[  535.429484][T23776] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.439282][T23776] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.447537][T23776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  535.644642][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4695'.
[  535.655192][T23791] ipt_REJECT: TCP_RESET invalid for non-tcp
[  535.670404][T23789] netlink: 'syz.4.4695': attribute type 30 has an invalid length.
[  535.692444][T23789] netlink: 'syz.4.4695': attribute type 10 has an invalid length.
[  535.753320][T23796] tc_dump_action: action bad kind
[  535.781619][T23799] IPv6: NLM_F_CREATE should be specified when creating new route
[  535.815901][T23799] netlink: 'syz.2.4697': attribute type 1 has an invalid length.
[  536.034091][T23811] syzkaller1: entered promiscuous mode
[  536.039822][T23811] syzkaller1: entered allmulticast mode
[  536.089003][T23817] openvswitch: netlink: Flow actions attr not present in new flow.
[  536.296188][T23833] x_tables: duplicate underflow at hook 2
[  536.461435][T23844] 8021q: adding VLAN 0 to HW filter on device batadv1
[  536.512906][T23844] team0: Port device batadv1 added
[  536.543179][T23859] team_slave_1: entered promiscuous mode
[  536.566556][T23859] team_slave_1: left promiscuous mode
[  536.757368][T23869] bond4: option lp_interval: invalid value (0)
[  536.813233][T23869] bond4: option lp_interval: allowed values 1 - 2147483647
[  536.846165][T23869] bond4 (unregistering): Released all slaves
[  536.898555][T23883] delete_channel: no stack
[  536.918079][T23883] A link change request failed with some changes committed already. Interface �����9o��+���4� may have been left with an inconsistent configuration, please check.
[  536.920192][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  536.942518][    C0] lec:lec_tx_timeout: lec0
[  536.947541][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  537.195117][T23893] gre1: entered promiscuous mode
[  537.220672][T23893] gre1: entered allmulticast mode
[  537.551192][T23918] bond4: entered promiscuous mode
[  537.563189][T23918] bond4: entered allmulticast mode
[  537.575035][T23925] x_tables: duplicate entry at hook 3
[  537.582776][T23918] 8021q: adding VLAN 0 to HW filter on device bond4
[  537.613582][T23929] x_tables: duplicate underflow at hook 1
[  537.630616][T23918] Cannot find del_set index 65534 as target
[  537.733017][T23925] wg1: entered promiscuous mode
[  537.737942][T23925] wg1: entered allmulticast mode
[  537.885794][T23925] syzkaller0: entered promiscuous mode
[  537.920752][T23925] syzkaller0: entered allmulticast mode
[  539.569127][T23948] syzkaller0: entered promiscuous mode
[  539.577526][T23948] syzkaller0: entered allmulticast mode
[  539.618658][T23986] __nla_validate_parse: 14 callbacks suppressed
[  539.618677][T23986] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4746'.
[  540.218911][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4751'.
[  540.504166][T24021] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4755'.
[  540.514273][T24021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'.
[  541.372677][T23979] netlink: 'syz.4.4745': attribute type 3 has an invalid length.
[  541.381491][T23979] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4745'.
[  541.651953][T24035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4758'.
[  541.729367][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4761'.
[  541.816547][T24043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4761'.
[  541.960052][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  541.968138][    C0] lec:lec_tx_timeout: lec0
[  541.973582][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  542.161141][T24061] 8021q: adding VLAN 0 to HW filter on device bond4
[  542.404015][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  542.443570][T24075] syzkaller0: entered promiscuous mode
[  542.455499][T24075] syzkaller0: entered allmulticast mode
[  542.470483][T24091] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4773'.
[  542.518150][T24094] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4777'.
[  544.003898][T24100] syzkaller0: entered promiscuous mode
[  544.020514][T24100] syzkaller0: entered allmulticast mode
[  544.162159][T24107] bond4: option resend_igmp: invalid value (32767)
[  544.176971][T24107] bond4: option resend_igmp: allowed values 0 - 255
[  544.202938][T24118] netlink: 'syz.1.4783': attribute type 11 has an invalid length.
[  544.224723][T24107] bond4 (unregistering): Released all slaves
[  544.456294][T24130] netlink: 'syz.3.4787': attribute type 1 has an invalid length.
[  544.538132][T24130] bond5: entered promiscuous mode
[  544.547197][T24130] 8021q: adding VLAN 0 to HW filter on device bond5
[  544.604780][T24130] 8021q: adding VLAN 0 to HW filter on device bond5
[  544.612246][T24130] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  544.624658][T24130] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  544.637496][T24130] bond5: (slave vti0): making interface the new active one
[  544.646535][T24130] vti0: entered promiscuous mode
[  544.654408][T24130] bond5: (slave vti0): Enslaving as an active interface with an up link
[  545.074304][T24166] wg1 speed is unknown, defaulting to 1000
[  545.172687][T24170] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  545.246823][T24171] __nla_validate_parse: 3 callbacks suppressed
[  545.246843][T24171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'.
[  545.264666][T24175] netlink: 'syz.2.4800': attribute type 39 has an invalid length.
[  545.298634][T24176] netlink: 'syz.3.4799': attribute type 9 has an invalid length.
[  545.326868][T24171] 8021q: adding VLAN 0 to HW filter on device bond5
[  545.335750][T24176] netlink: 'syz.3.4799': attribute type 11 has an invalid length.
[  545.363451][T24176] netlink: 'syz.3.4799': attribute type 12 has an invalid length.
[  545.374407][T24171] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.4798'.
[  545.384418][T24176] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4799'.
[  545.395583][T24171] netlink: 'syz.0.4798': attribute type 1 has an invalid length.
[  545.404484][T24175] syz_tun (unregistering): left allmulticast mode
[  545.417968][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'.
[  545.418277][T24184] xt_hashlimit: size too large, truncated to 1048576
[  545.459054][T24171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4798'.
[  545.514555][T24186] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.4802'.
[  545.878364][T24202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.982861][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4808'.
[  546.030428][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4808'.
[  546.263933][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4814'.
[  546.362486][T24232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4814'.
[  546.519466][T24245] geneve1: Caught tx_queue_len zero misconfig
[  546.980079][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  546.988390][    C0] lec:lec_tx_timeout: lec0
[  546.993458][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  546.996082][T24267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.006784][T24261] delete_channel: no stack
[  547.012735][T24268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.069302][T24266] bond4: option min_links: invalid value (18446744073709551614)
[  547.078328][T24266] bond4: option min_links: allowed values 0 - 2147483647
[  547.094831][T24266] bond4 (unregistering): Released all slaves
[  547.118535][T24263] bridge_slave_0: left allmulticast mode
[  547.126115][T24263] bridge_slave_0: left promiscuous mode
[  547.133624][T24263] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.155831][T24263] bridge_slave_1: left allmulticast mode
[  547.162383][T24263] bridge_slave_1: left promiscuous mode
[  547.168272][T24263] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.222683][T24263] `: (slave bond_slave_0): Releasing backup interface
[  547.244327][T24263] `: (slave bond_slave_1): Releasing backup interface
[  547.281566][T24263] team0: Port device team_slave_0 removed
[  547.290766][T24263] team0: Port device team_slave_1 removed
[  547.303456][T24263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.341555][T24263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.353428][T24263] bond2: (slave gretap1): Releasing active interface
[  547.365370][T24263] team0: Port device batadv1 removed
[  547.371801][T24263] batman_adv: batadv0: Interface deactivated: ipvlan2
[  547.378606][T24263] batman_adv: batadv0: Removing interface: ipvlan2
[  547.404666][T24272] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  547.564267][T24290] openvswitch: netlink: Multiple metadata blocks provided
[  547.682693][T24296] macvtap1: entered promiscuous mode
[  547.688235][T24296] macvtap1: entered allmulticast mode
[  547.696885][T24296] veth1_vlan: entered allmulticast mode
[  547.715623][T24303] netlink: 'syz.4.4831': attribute type 4 has an invalid length.
[  547.735986][T24306] macvtap2: entered promiscuous mode
[  547.741794][T24306] macvtap2: entered allmulticast mode
[  547.822940][T24307] vlan3: entered promiscuous mode
[  547.851165][T24307] bridge0: entered promiscuous mode
[  547.873858][T24307] vlan3: entered allmulticast mode
[  547.994559][T24326] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  548.144178][T24331] gtp0: entered promiscuous mode
[  548.159579][T24331] gtp0: entered allmulticast mode
[  548.506534][T24367] xt_TCPMSS: Only works on TCP SYN packets
[  548.706874][T24383] netlink: 'syz.3.4855': attribute type 11 has an invalid length.
[  548.929271][T24394] tunl0: entered promiscuous mode
[  548.934856][T24394] netlink: 'syz.3.4860': attribute type 3 has an invalid length.
[  549.045328][ T5833] block nbd2: Receive control failed (result -22)
[  549.199039][T24410] netlink: 'syz.1.4865': attribute type 61 has an invalid length.
[  549.242188][T24410] : entered promiscuous mode
[  549.734518][T24447] bond6 (unregistering): Released all slaves
[  549.882767][T24452] syzkaller0: entered promiscuous mode
[  549.900633][T24452] syzkaller0: entered allmulticast mode
[  550.389399][T24484] __nla_validate_parse: 16 callbacks suppressed
[  550.389419][T24484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4886'.
[  551.888385][T24507] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4893'.
[  552.001304][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  552.009408][    C0] lec:lec_tx_timeout: lec0
[  552.014941][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  552.109398][T24522] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.4897'.
[  552.154988][ T9368] IPVS: starting estimator thread 0...
[  552.260823][T24527] IPVS: using max 28 ests per chain, 67200 per kthread
[  552.316863][T24532] IPVS: set_ctl: invalid protocol: 135 172.20.20.20:20000
[  552.393818][T24544] netlink: 'syz.1.4902': attribute type 12 has an invalid length.
[  552.443613][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4903'.
[  552.500317][T24551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4905'.
[  552.693616][T24566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4909'.
[  553.103152][T24586] xt_hashlimit: size too large, truncated to 1048576
[  553.103152][T24593] xt_hashlimit: size too large, truncated to 1048576
[  553.213762][T24605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4919'.
[  553.236054][T24604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4919'.
[  553.318487][T24607] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4920'.
[  553.654165][T24629] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  553.665282][T24629] syz_tun: entered allmulticast mode
[  553.690853][T24627] syz_tun: left allmulticast mode
[  553.881712][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4931'.
[  553.925506][T24640] 8021q: adding VLAN 0 to HW filter on device bond6
[  553.945521][T24640] macvlan3: entered promiscuous mode
[  553.951902][T24640] macvlan3: entered allmulticast mode
[  553.957636][T24640] bond6: entered allmulticast mode
[  553.966629][T24640] bond6: entered promiscuous mode
[  553.973033][T24640] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  553.983481][T24640] team0: Port device macvlan3 added
[  554.201291][T24652] netlink: 'syz.1.4935': attribute type 16 has an invalid length.
[  554.209160][T24652] netlink: 'syz.1.4935': attribute type 17 has an invalid length.
[  554.257848][T24652] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  554.482829][T24680] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  554.699761][T24693] netlink: 'syz.3.4947': attribute type 10 has an invalid length.
[  554.759146][T24693] smc: removing net device team0 with user defined pnetid SYZ2
[  555.165629][T24725] netlink: 'syz.4.4955': attribute type 1 has an invalid length.
[  555.208528][T22405] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  555.217966][T22405] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 35507 - 0
[  555.231197][T22405] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  555.241140][T24718] syzkaller1: entered promiscuous mode
[  555.246716][T24718] syzkaller1: entered allmulticast mode
[  555.272468][T24731] netlink: 'syz.3.4954': attribute type 1 has an invalid length.
[  555.296573][T24729] bond4 (unregistering): Released all slaves
[  555.378414][   T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  555.386916][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 35507 - 0
[  555.395593][   T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  555.417729][   T84] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  555.436599][   T84] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 35507 - 0
[  555.445736][   T84] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  555.486660][   T84] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  555.499801][   T84] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 35507 - 0
[  555.521064][   T84] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  555.548536][T24743] x_tables: duplicate underflow at hook 1
[  555.557396][T24743] __nla_validate_parse: 6 callbacks suppressed
[  555.557412][T24743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4958'.
[  555.677901][T24746] netlink: 'syz.1.4960': attribute type 1 has an invalid length.
[  555.762550][T24757] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4961'.
[  555.774504][T24746] 8021q: adding VLAN 0 to HW filter on device bond5
[  555.783512][T24757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'.
[  555.894005][T24746] bond5: (slave gretap3): making interface the new active one
[  555.906138][T24746] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  556.072349][T24773] netlink: 'syz.0.4968': attribute type 16 has an invalid length.
[  556.083049][T24773] netlink: 'syz.0.4968': attribute type 17 has an invalid length.
[  556.131327][T24773] bond0: left promiscuous mode
[  556.137173][T24773] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.161118][T24773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  556.306577][T24780] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4969'.
[  556.456310][T24791] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  556.473371][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4973'.
[  556.898988][T24814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4979'.
[  556.926872][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4980'.
[  556.941501][T24815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4979'.
[  556.954476][T24815] netlink: 'syz.0.4979': attribute type 7 has an invalid length.
[  556.964586][T24815] netlink: 'syz.0.4979': attribute type 8 has an invalid length.
[  556.973661][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'.
[  557.030855][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  557.038939][    C0] lec:lec_tx_timeout: lec0
[  557.044250][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  557.295290][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4984'.
[  557.333423][T24835] vlan4: entered allmulticast mode
[  557.345248][T24835] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode
[  557.478952][T24840] bond5: option primary_reselect: invalid value (255)
[  557.505682][T24840] bond5 (unregistering): Released all slaves
[  557.682943][T11107] IPVS: starting estimator thread 0...
[  557.780192][T24855] IPVS: using max 29 ests per chain, 69600 per kthread
[  558.134794][    C0] 
[  558.137195][    C0] ================================
[  558.142328][    C0] WARNING: inconsistent lock state
[  558.147475][    C0] syzkaller #0 Not tainted
[  558.151922][    C0] --------------------------------
[  558.157061][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  558.163943][    C0] kworker/u8:0/22405 [HC0[0]:SC1[3]:HE1:SE0] takes:
[  558.170573][    C0] ffff888079558fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650
[  558.179946][    C0] {SOFTIRQ-ON-W} state was registered at:
[  558.185702][    C0]   lock_acquire+0xf0/0x2e0
[  558.190257][    C0]   lock_sock_nested+0x48/0x100
[  558.195153][    C0]   tcp_sock_set_nodelay+0x2a/0x180
[  558.200399][    C0]   rds_tcp_listen_init+0x168/0x410
[  558.205641][    C0]   rds_tcp_init_net+0x154/0x380
[  558.210618][    C0]   ops_init+0x35c/0x5c0
[  558.214908][    C0]   register_pernet_operations+0x343/0x830
[  558.220755][    C0]   register_pernet_device+0x2a/0x80
[  558.226105][    C0]   rds_tcp_init+0xcf/0x170
[  558.230644][    C0]   do_one_initcall+0x250/0x8d0
[  558.235669][    C0]   do_initcall_level+0x104/0x190
[  558.240735][    C0]   do_initcalls+0x59/0xa0
[  558.245189][    C0]   kernel_init_freeable+0x2a6/0x3e0
[  558.250522][    C0]   kernel_init+0x1d/0x1d0
[  558.255000][    C0]   ret_from_fork+0x51e/0xb90
[  558.255370][T24902] ip6gre1: entered allmulticast mode
[  558.259710][    C0]   ret_from_fork_asm+0x1a/0x30
[  558.259743][    C0] irq event stamp: 259340
[  558.274258][    C0] hardirqs last  enabled at (259340): [<ffffffff8bafb080>] _raw_spin_unlock_irqrestore+0x30/0x80
[  558.284799][    C0] hardirqs last disabled at (259339): [<ffffffff8bafaeda>] _raw_spin_lock_irqsave+0x1a/0x60
[  558.294897][    C0] softirqs last  enabled at (259244): [<ffffffff897bcea4>] __dev_queue_xmit+0x274/0x38a0
[  558.304725][    C0] softirqs last disabled at (259245): [<ffffffff8187f346>] do_softirq+0x76/0xd0
[  558.313768][    C0] 
[  558.313768][    C0] other info that might help us debug this:
[  558.321831][    C0]  Possible unsafe locking scenario:
[  558.321831][    C0] 
[  558.329281][    C0]        CPU0
[  558.332585][    C0]        ----
[  558.335877][    C0]   lock(k-sk_lock-AF_INET6);
[  558.340572][    C0]   <Interrupt>
[  558.344039][    C0]     lock(k-sk_lock-AF_INET6);
[  558.348912][    C0] 
[  558.348912][    C0]  *** DEADLOCK ***
[  558.348912][    C0] 
[  558.357065][    C0] 12 locks held by kworker/u8:0/22405:
[  558.362525][    C0]  #0: ffff8880338b4148 ((wq_completion)krds_cp_wq#13/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  558.374293][    C0]  #1: ffffc90010e57c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  558.387111][    C0]  #2: ffff888079559ce0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0
[  558.397151][    C0]  #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0
[  558.406574][    C0]  #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980
[  558.415568][    C0]  #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  558.424642][    C0]  #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950
[  558.434237][    C0]  #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50
[  558.443916][    C0]  #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  558.452648][    C0]  #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270
[  558.461548][    C0]  #10: ffff888079558f20 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60
[  558.471314][    C0]  #11: ffff888079559148 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0
[  558.481435][    C0] 
[  558.481435][    C0] stack backtrace:
[  558.487345][    C0] CPU: 0 UID: 0 PID: 22405 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  558.487363][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  558.487374][    C0] Workqueue: krds_cp_wq#13/0 rds_send_worker
[  558.487404][    C0] Call Trace:
[  558.487413][    C0]  <IRQ>
[  558.487421][    C0]  dump_stack_lvl+0xe8/0x150
[  558.487443][    C0]  print_usage_bug+0x28b/0x2e0
[  558.487465][    C0]  mark_lock_irq+0x410/0x420
[  558.487489][    C0]  mark_lock+0x115/0x190
[  558.487509][    C0]  __lock_acquire+0x689/0x2cf0
[  558.487529][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  558.487554][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  558.487578][    C0]  lock_acquire+0xf0/0x2e0
[  558.487596][    C0]  ? inet6_getname+0x15d/0x650
[  558.487615][    C0]  lock_sock_nested+0x48/0x100
[  558.487631][    C0]  ? inet6_getname+0x15d/0x650
[  558.487646][    C0]  inet6_getname+0x15d/0x650
[  558.487661][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  558.487678][    C0]  rds_tcp_conn_slots_available+0x288/0x470
[  558.487695][    C0]  ? __pfx_rds_tcp_conn_slots_available+0x10/0x10
[  558.487718][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  558.487739][    C0]  ? __pfx_rds_tcp_conn_slots_available+0x10/0x10
[  558.487756][    C0]  rds_recv_hs_exthdrs+0x60f/0x7c0
[  558.487774][    C0]  ? NF_HOOK+0x336/0x3c0
[  558.487794][    C0]  ? ip6_input+0x16a/0x270
[  558.487814][    C0]  ? ip_sabotage_in+0x1e1/0x270
[  558.487831][    C0]  ? rds_recv_hs_exthdrs+0xd1/0x7c0
[  558.487853][    C0]  ? __napi_poll+0xae/0x340
[  558.487869][    C0]  ? net_rx_action+0x627/0xf70
[  558.487887][    C0]  ? __pfx_rds_recv_hs_exthdrs+0x10/0x10
[  558.487903][    C0]  ? __dev_queue_xmit+0x1e6c/0x38a0
[  558.487926][    C0]  ? ip6_xmit+0x1149/0x1980
[  558.487943][    C0]  ? __tcp_transmit_skb+0x249b/0x43e0
[  558.487964][    C0]  ? __tcp_push_pending_frames+0x97/0x380
[  558.487982][    C0]  ? tcp_sock_set_cork+0x186/0x2e0
[  558.487997][    C0]  ? rds_send_xmit+0x207e/0x28d0
[  558.488014][    C0]  ? process_scheduled_works+0xb02/0x1830
[  558.488033][    C0]  ? worker_thread+0xa50/0xfc0
[  558.488051][    C0]  ? kthread+0x388/0x470
[  558.488064][    C0]  ? ret_from_fork+0x51e/0xb90
[  558.488083][    C0]  rds_recv_incoming+0x9f6/0x12d0
[  558.488106][    C0]  ? __pfx_rds_recv_incoming+0x10/0x10
[  558.488125][    C0]  ? skb_copy_bits+0x7e5/0x8f0
[  558.488148][    C0]  rds_tcp_data_recv+0x7f1/0xa40
[  558.488172][    C0]  __tcp_read_sock+0x196/0x970
[  558.488189][    C0]  ? __pfx_rds_tcp_data_recv+0x10/0x10
[  558.488206][    C0]  rds_tcp_data_ready+0x369/0x9a0
[  558.488223][    C0]  ? __pfx_sock_def_readable+0x10/0x10
[  558.488239][    C0]  ? __pfx_rds_tcp_data_ready+0x10/0x10
[  558.488255][    C0]  ? tcp_grow_window+0x4fc/0xc50
[  558.488275][    C0]  tcp_data_queue+0x1e2e/0x5e50
[  558.488305][    C0]  ? tcp_urg+0x106/0x410
[  558.488325][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  558.488347][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  558.488367][    C0]  ? ktime_get+0x45/0x200
[  558.488380][    C0]  ? seqcount_lockdep_reader_access+0xe0/0x100
[  558.488394][    C0]  ? tcp_ecn_received_counters+0x2b7/0x7f0
[  558.488430][    C0]  tcp_rcv_established+0xf45/0x2740
[  558.488456][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  558.488477][    C0]  ? ip6_dst_check+0xe2/0x7e0
[  558.488492][    C0]  ? ip6_dst_check+0x5e3/0x7e0
[  558.488508][    C0]  ? __pfx_ip6_dst_check+0x10/0x10
[  558.488524][    C0]  tcp_v6_do_rcv+0x8eb/0x1ba0
[  558.488541][    C0]  tcp_v6_rcv+0x2653/0x2f60
[  558.488567][    C0]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  558.488579][    C0]  ? nf_nat_ipv6_fn+0xf3/0x2f0
[  558.488595][    C0]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  558.488608][    C0]  ? raw6_local_deliver+0x116/0x950
[  558.488630][    C0]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  558.488643][    C0]  ip6_protocol_deliver_rcu+0xa73/0x1600
[  558.488673][    C0]  ip6_input_finish+0x191/0x370
[  558.488695][    C0]  NF_HOOK+0x336/0x3c0
[  558.488714][    C0]  ? ip6_dst_check+0xe2/0x7e0
[  558.488730][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  558.488750][    C0]  ? NF_HOOK+0x9e/0x3c0
[  558.488768][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  558.488789][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  558.488814][    C0]  ip6_input+0x16a/0x270
[  558.488833][    C0]  ? ip6_input+0x23/0x270
[  558.488858][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  558.488877][    C0]  ip_sabotage_in+0x1e1/0x270
[  558.488892][    C0]  ? __pfx_ip_sabotage_in+0x10/0x10
[  558.488907][    C0]  nf_hook_slow+0xc5/0x220
[  558.488927][    C0]  NF_HOOK+0x21f/0x3c0
[  558.488946][    C0]  ? skb_orphan+0xaf/0xd0
[  558.488966][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  558.488985][    C0]  ? NF_HOOK+0x9e/0x3c0
[  558.489004][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  558.489023][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  558.489045][    C0]  ? netif_receive_skb+0x102/0xc50
[  558.489060][    C0]  netif_receive_skb+0x278/0xc50
[  558.489077][    C0]  ? __pfx_netif_receive_skb+0x10/0x10
[  558.489093][    C0]  ? br_netif_receive_skb+0x126/0x190
[  558.489112][    C0]  NF_HOOK+0xa4/0x3a0
[  558.489127][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  558.489142][    C0]  ? NF_HOOK+0xfa/0x3a0
[  558.489156][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  558.489172][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  558.489189][    C0]  ? br_pass_frame_up+0x275/0x420
[  558.489206][    C0]  br_handle_frame_finish+0x14b2/0x1b40
[  558.489221][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  558.489243][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  558.489262][    C0]  ? ip6t_do_table+0x113/0x1560
[  558.489281][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  558.489298][    C0]  ? nf_hook_slow+0x176/0x220
[  558.489316][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  558.489331][    C0]  br_nf_hook_thresh+0x3dd/0x4c0
[  558.489349][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  558.489364][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  558.489379][    C0]  ? nf_nat_ipv6_in+0x203/0x2c0
[  558.489396][    C0]  br_nf_pre_routing_finish_ipv6+0xa3a/0xd70
[  558.489413][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  558.489433][    C0]  br_nf_pre_routing_ipv6+0x374/0x6f0
[  558.489449][    C0]  ? br_nf_pre_routing_ipv6+0x421/0x6f0
[  558.489465][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  558.489482][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  558.489499][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  558.489516][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  558.489530][    C0]  br_handle_frame+0x1277/0x1510
[  558.489548][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  558.489564][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  558.489583][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  558.489598][    C0]  __netif_receive_skb_core+0x98f/0x31a0
[  558.489614][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  558.489634][    C0]  ? NF_HOOK+0x9e/0x3c0
[  558.489657][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  558.489676][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  558.489691][    C0]  ? ip6_input+0x226/0x270
[  558.489710][    C0]  ? ip6_input+0x23/0x270
[  558.489730][    C0]  ? NF_HOOK+0x336/0x3c0
[  558.489748][    C0]  ? __pfx___sock_wfree+0x10/0x10
[  558.489772][    C0]  ? lock_acquire+0xf0/0x2e0
[  558.489790][    C0]  ? process_backlog+0x3eb/0x1950
[  558.489806][    C0]  ? process_backlog+0x3eb/0x1950
[  558.489823][    C0]  ? process_backlog+0x3eb/0x1950
[  558.489839][    C0]  process_backlog+0x76d/0x1950
[  558.489909][    C0]  __napi_poll+0xae/0x340
[  558.489924][    C0]  ? skb_defer_free_flush+0x233/0x260
[  558.489940][    C0]  net_rx_action+0x627/0xf70
[  558.489963][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  558.489986][    C0]  ? sched_clock+0x3f/0x60
[  558.490009][    C0]  handle_softirqs+0x22a/0x870
[  558.490033][    C0]  ? do_softirq+0x76/0xd0
[  558.490057][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  558.490084][    C0]  do_softirq+0x76/0xd0
[  558.490106][    C0]  </IRQ>
[  558.490112][    C0]  <TASK>
[  558.490119][    C0]  __local_bh_enable_ip+0xf8/0x130
[  558.490141][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  558.490167][    C0]  __dev_queue_xmit+0x1e6c/0x38a0
[  558.490200][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  558.490225][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  558.490251][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  558.490279][    C0]  ? neigh_resolve_output+0x438/0x750
[  558.490300][    C0]  ? eth_header+0x11b/0x200
[  558.490325][    C0]  ? __asan_memcpy+0x40/0x70
[  558.490351][    C0]  ? eth_header+0x11b/0x200
[  558.490375][    C0]  ? __pfx_eth_header+0x10/0x10
[  558.490396][    C0]  ? neigh_resolve_output+0x624/0x750
[  558.490422][    C0]  ? ip6_output+0x126/0x550
[  558.490453][    C0]  ip6_output+0x340/0x550
[  558.490492][    C0]  ip6_xmit+0x1149/0x1980
[  558.490518][    C0]  ? ip6_xmit+0x283/0x1980
[  558.490540][    C0]  ? __pfx_ip6_xmit+0x10/0x10
[  558.490565][    C0]  ? __pfx_ip6_dst_check+0x10/0x10
[  558.490586][    C0]  inet6_csk_xmit+0x3bd/0x6c0
[  558.490603][    C0]  ? inet6_csk_xmit+0x110/0x6c0
[  558.490617][    C0]  ? __pfx_inet6_csk_xmit+0x10/0x10
[  558.490631][    C0]  __tcp_transmit_skb+0x249b/0x43e0
[  558.490660][    C0]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  558.490684][    C0]  ? tcp_small_queue_check+0x1c1/0x3b0
[  558.490703][    C0]  tcp_write_xmit+0x16e8/0x6980
[  558.490738][    C0]  __tcp_push_pending_frames+0x97/0x380
[  558.490758][    C0]  tcp_sock_set_cork+0x186/0x2e0
[  558.490771][    C0]  ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10
[  558.490789][    C0]  rds_send_xmit+0x207e/0x28d0
[  558.490819][    C0]  ? __pfx_rds_send_xmit+0x10/0x10
[  558.490840][    C0]  rds_send_worker+0x7d/0x2e0
[  558.490865][    C0]  ? process_scheduled_works+0xa25/0x1830
[  558.490883][    C0]  process_scheduled_works+0xb02/0x1830
[  558.490911][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  558.490932][    C0]  ? assign_work+0x3d5/0x5e0
[  558.490950][    C0]  worker_thread+0xa50/0xfc0
[  558.490978][    C0]  kthread+0x388/0x470
[  558.490991][    C0]  ? __pfx_worker_thread+0x10/0x10
[  558.491008][    C0]  ? __pfx_kthread+0x10/0x10
[  558.491021][    C0]  ret_from_fork+0x51e/0xb90
[  558.491040][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  558.491056][    C0]  ? __switch_to+0xc7d/0x1450
[  558.491073][    C0]  ? __pfx_kthread+0x10/0x10
[  558.491085][    C0]  ret_from_fork_asm+0x1a/0x30
[  558.491113][    C0]  </TASK>
[  559.451589][    C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782
[  559.460394][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22405, name: kworker/u8:0
[  559.469707][    C0] preempt_count: 303, expected: 0
[  559.474780][    C0] RCU nest depth: 7, expected: 0
[  559.479741][    C0] INFO: lockdep is turned off.
[  559.484520][    C0] Preemption disabled at:
[  559.484528][    C0] [<ffffffff897bceb1>] __dev_queue_xmit+0x281/0x38a0
[  559.495582][    C0] CPU: 0 UID: 0 PID: 22405 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  559.495600][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  559.495610][    C0] Workqueue: krds_cp_wq#13/0 rds_send_worker
[  559.495633][    C0] Call Trace:
[  559.495640][    C0]  <IRQ>
[  559.495647][    C0]  dump_stack_lvl+0xe8/0x150
[  559.495667][    C0]  __might_resched+0x378/0x4d0
[  559.495686][    C0]  ? __dev_queue_xmit+0x281/0x38a0
[  559.495709][    C0]  lock_sock_nested+0x5d/0x100
[  559.495725][    C0]  inet6_getname+0x15d/0x650
[  559.495740][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  559.495756][    C0]  rds_tcp_conn_slots_available+0x288/0x470
[  559.495773][    C0]  ? __pfx_rds_tcp_conn_slots_available+0x10/0x10
[  559.495799][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  559.495819][    C0]  ? __pfx_rds_tcp_conn_slots_available+0x10/0x10
[  559.495835][    C0]  rds_recv_hs_exthdrs+0x60f/0x7c0
[  559.495851][    C0]  ? NF_HOOK+0x336/0x3c0
[  559.495869][    C0]  ? ip6_input+0x16a/0x270
[  559.495887][    C0]  ? ip_sabotage_in+0x1e1/0x270
[  559.495903][    C0]  ? rds_recv_hs_exthdrs+0xd1/0x7c0
[  559.495919][    C0]  ? __napi_poll+0xae/0x340
[  559.495934][    C0]  ? net_rx_action+0x627/0xf70
[  559.495949][    C0]  ? __pfx_rds_recv_hs_exthdrs+0x10/0x10
[  559.495965][    C0]  ? __dev_queue_xmit+0x1e6c/0x38a0
[  559.495985][    C0]  ? ip6_xmit+0x1149/0x1980
[  559.496001][    C0]  ? __tcp_transmit_skb+0x249b/0x43e0
[  559.496020][    C0]  ? __tcp_push_pending_frames+0x97/0x380
[  559.496036][    C0]  ? tcp_sock_set_cork+0x186/0x2e0
[  559.496051][    C0]  ? rds_send_xmit+0x207e/0x28d0
[  559.496068][    C0]  ? process_scheduled_works+0xb02/0x1830
[  559.496084][    C0]  ? worker_thread+0xa50/0xfc0
[  559.496101][    C0]  ? kthread+0x388/0x470
[  559.496113][    C0]  ? ret_from_fork+0x51e/0xb90
[  559.496133][    C0]  rds_recv_incoming+0x9f6/0x12d0
[  559.496153][    C0]  ? __pfx_rds_recv_incoming+0x10/0x10
[  559.496169][    C0]  ? skb_copy_bits+0x7e5/0x8f0
[  559.496209][    C0]  rds_tcp_data_recv+0x7f1/0xa40
[  559.496232][    C0]  __tcp_read_sock+0x196/0x970
[  559.496248][    C0]  ? __pfx_rds_tcp_data_recv+0x10/0x10
[  559.496264][    C0]  rds_tcp_data_ready+0x369/0x9a0
[  559.496280][    C0]  ? __pfx_sock_def_readable+0x10/0x10
[  559.496295][    C0]  ? __pfx_rds_tcp_data_ready+0x10/0x10
[  559.496311][    C0]  ? tcp_grow_window+0x4fc/0xc50
[  559.496329][    C0]  tcp_data_queue+0x1e2e/0x5e50
[  559.496358][    C0]  ? tcp_urg+0x106/0x410
[  559.496377][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  559.496398][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  559.496417][    C0]  ? ktime_get+0x45/0x200
[  559.496429][    C0]  ? seqcount_lockdep_reader_access+0xe0/0x100
[  559.496443][    C0]  ? tcp_ecn_received_counters+0x2b7/0x7f0
[  559.496467][    C0]  tcp_rcv_established+0xf45/0x2740
[  559.496494][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  559.496515][    C0]  ? ip6_dst_check+0xe2/0x7e0
[  559.496531][    C0]  ? ip6_dst_check+0x5e3/0x7e0
[  559.496547][    C0]  ? __pfx_ip6_dst_check+0x10/0x10
[  559.496563][    C0]  tcp_v6_do_rcv+0x8eb/0x1ba0
[  559.496581][    C0]  tcp_v6_rcv+0x2653/0x2f60
[  559.496607][    C0]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  559.496632][    C0]  ? nf_nat_ipv6_fn+0xf3/0x2f0
[  559.496648][    C0]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  559.496662][    C0]  ? raw6_local_deliver+0x116/0x950
[  559.496683][    C0]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  559.496696][    C0]  ip6_protocol_deliver_rcu+0xa73/0x1600
[  559.496726][    C0]  ip6_input_finish+0x191/0x370
[  559.496748][    C0]  NF_HOOK+0x336/0x3c0
[  559.496767][    C0]  ? ip6_dst_check+0xe2/0x7e0
[  559.496782][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  559.496807][    C0]  ? NF_HOOK+0x9e/0x3c0
[  559.496825][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  559.496845][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  559.496870][    C0]  ip6_input+0x16a/0x270
[  559.496889][    C0]  ? ip6_input+0x23/0x270
[  559.496909][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  559.496928][    C0]  ip_sabotage_in+0x1e1/0x270
[  559.496943][    C0]  ? __pfx_ip_sabotage_in+0x10/0x10
[  559.496958][    C0]  nf_hook_slow+0xc5/0x220
[  559.496996][    C0]  NF_HOOK+0x21f/0x3c0
[  559.497015][    C0]  ? skb_orphan+0xaf/0xd0
[  559.497036][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  559.497057][    C0]  ? NF_HOOK+0x9e/0x3c0
[  559.497076][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  559.497097][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  559.497121][    C0]  ? netif_receive_skb+0x102/0xc50
[  559.497136][    C0]  netif_receive_skb+0x278/0xc50
[  559.497152][    C0]  ? __pfx_netif_receive_skb+0x10/0x10
[  559.497169][    C0]  ? br_netif_receive_skb+0x126/0x190
[  559.497186][    C0]  NF_HOOK+0xa4/0x3a0
[  559.497201][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  559.497228][    C0]  ? NF_HOOK+0xfa/0x3a0
[  559.497242][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  559.497257][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  559.497275][    C0]  ? br_pass_frame_up+0x275/0x420
[  559.497291][    C0]  br_handle_frame_finish+0x14b2/0x1b40
[  559.497323][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  559.497346][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  559.497365][    C0]  ? ip6t_do_table+0x113/0x1560
[  559.497385][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  559.497402][    C0]  ? nf_hook_slow+0x176/0x220
[  559.497420][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  559.497436][    C0]  br_nf_hook_thresh+0x3dd/0x4c0
[  559.497454][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  559.497469][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  559.497484][    C0]  ? nf_nat_ipv6_in+0x203/0x2c0
[  559.497502][    C0]  br_nf_pre_routing_finish_ipv6+0xa3a/0xd70
[  559.497519][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  559.497539][    C0]  br_nf_pre_routing_ipv6+0x374/0x6f0
[  559.497555][    C0]  ? br_nf_pre_routing_ipv6+0x421/0x6f0
[  559.497572][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  559.497589][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  559.497618][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  559.497636][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  559.497650][    C0]  br_handle_frame+0x1277/0x1510
[  559.497669][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  559.497686][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  559.497705][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  559.497720][    C0]  __netif_receive_skb_core+0x98f/0x31a0
[  559.497737][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  559.497758][    C0]  ? NF_HOOK+0x9e/0x3c0
[  559.497781][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  559.497809][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  559.497825][    C0]  ? ip6_input+0x226/0x270
[  559.497848][    C0]  ? ip6_input+0x23/0x270
[  559.497869][    C0]  ? NF_HOOK+0x336/0x3c0
[  559.497888][    C0]  ? __pfx___sock_wfree+0x10/0x10
[  559.497912][    C0]  ? lock_acquire+0xf0/0x2e0
[  559.497931][    C0]  ? process_backlog+0x3eb/0x1950
[  559.497948][    C0]  ? process_backlog+0x3eb/0x1950
[  559.497964][    C0]  ? process_backlog+0x3eb/0x1950
[  559.497981][    C0]  process_backlog+0x76d/0x1950
[  559.498006][    C0]  __napi_poll+0xae/0x340
[  559.498021][    C0]  ? skb_defer_free_flush+0x233/0x260
[  559.498038][    C0]  net_rx_action+0x627/0xf70
[  559.498060][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  559.498083][    C0]  ? sched_clock+0x3f/0x60
[  559.498102][    C0]  handle_softirqs+0x22a/0x870
[  559.498122][    C0]  ? do_softirq+0x76/0xd0
[  559.498141][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  559.498162][    C0]  do_softirq+0x76/0xd0
[  559.498179][    C0]  </IRQ>
[  559.498184][    C0]  <TASK>
[  559.498189][    C0]  __local_bh_enable_ip+0xf8/0x130
[  559.498206][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  559.498227][    C0]  __dev_queue_xmit+0x1e6c/0x38a0
[  559.498253][    C0]  ? __dev_queue_xmit+0x274/0x38a0
[  559.498274][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  559.498294][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  559.498316][    C0]  ? neigh_resolve_output+0x438/0x750
[  559.498334][    C0]  ? eth_header+0x11b/0x200
[  559.498353][    C0]  ? __asan_memcpy+0x40/0x70
[  559.498374][    C0]  ? eth_header+0x11b/0x200
[  559.498393][    C0]  ? __pfx_eth_header+0x10/0x10
[  559.498411][    C0]  ? neigh_resolve_output+0x624/0x750
[  559.498431][    C0]  ? ip6_output+0x126/0x550
[  559.498448][    C0]  ip6_output+0x340/0x550
[  559.498467][    C0]  ip6_xmit+0x1149/0x1980
[  559.498487][    C0]  ? ip6_xmit+0x283/0x1980
[  559.498505][    C0]  ? __pfx_ip6_xmit+0x10/0x10
[  559.498526][    C0]  ? __pfx_ip6_dst_check+0x10/0x10
[  559.498544][    C0]  inet6_csk_xmit+0x3bd/0x6c0
[  559.498558][    C0]  ? inet6_csk_xmit+0x110/0x6c0
[  559.498571][    C0]  ? __pfx_inet6_csk_xmit+0x10/0x10
[  559.498595][    C0]  __tcp_transmit_skb+0x249b/0x43e0
[  559.498622][    C0]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  559.498646][    C0]  ? tcp_small_queue_check+0x1c1/0x3b0
[  559.498665][    C0]  tcp_write_xmit+0x16e8/0x6980
[  559.498699][    C0]  __tcp_push_pending_frames+0x97/0x380
[  559.498718][    C0]  tcp_sock_set_cork+0x186/0x2e0
[  559.498731][    C0]  ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10
[  559.498748][    C0]  rds_send_xmit+0x207e/0x28d0
[  559.498778][    C0]  ? __pfx_rds_send_xmit+0x10/0x10
[  559.498803][    C0]  rds_send_worker+0x7d/0x2e0
[  559.498821][    C0]  ? process_scheduled_works+0xa25/0x1830
[  559.498839][    C0]  process_scheduled_works+0xb02/0x1830
[  559.498867][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  559.498886][    C0]  ? assign_work+0x3d5/0x5e0
[  559.498905][    C0]  worker_thread+0xa50/0xfc0
[  559.498932][    C0]  kthread+0x388/0x470
[  559.498945][    C0]  ? __pfx_worker_thread+0x10/0x10
[  559.498962][    C0]  ? __pfx_kthread+0x10/0x10
[  559.498974][    C0]  ret_from_fork+0x51e/0xb90
[  559.498993][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  559.499010][    C0]  ? __switch_to+0xc7d/0x1450
[  559.499025][    C0]  ? __pfx_kthread+0x10/0x10
[  559.499038][    C0]  ret_from_fork_asm+0x1a/0x30
[  559.499064][    C0]  </TASK>