last executing test programs:

2.375968162s ago: executing program 4 (id=4661):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x20}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x6, 0x102000200032, r3, 0xc52db000)
setsockopt$sock_timeval(r0, 0x1, 0x50, &(0x7f0000abaff9), 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.309320857s ago: executing program 4 (id=4662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x4000040)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x2}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x100, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000001c0)={{0xfffffffe, 0x500c}, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800500010001000100140000001100010000000000000000000100000a"], 0xa4}}, 0x40)

2.026684688s ago: executing program 0 (id=4669):
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x72c, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f000000acc0), &(0x7f000000ad00)=0x10, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000adc0)={'syztnl1\x00', &(0x7f000000ad40)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0x6, 0x5, 0x9, 0x7, @private2, @mcast1, 0x8000, 0x40, 0xd, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000ae00)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f000000af00)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000af40)={{{@in6=@remote, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0xa0, 0x3c, r2, r3}, {0xfffffffffffff001, 0x4, 0x7, 0x9, 0x4, 0x5, 0x200, 0x7fffffff}, {0xc, 0x7fff, 0x9, 0x4}, 0x0, 0x6e6bbb, 0x0, 0x0, 0x3, 0x3}, {{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in6=@mcast2, 0x3505, 0x2, 0x1, 0x3, 0x3, 0x4, 0xffffffff}}, 0xe8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f000000b040)={'filter\x00', 0x4}, 0x68) (async)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f000000b040)={'filter\x00', 0x4}, 0x68)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f000000b0c0), 0x4) (async)
setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f000000b0c0), 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f000000b100), 0x2, 0x0)
write$ppp(r5, &(0x7f000000b140)="83d28b5ad0e9b403f679cefa0dfadcdd5f668b972e13928a7bce5835b545b323c24a9db1fbebf382f1f9742b11117bf4145b8d62290468ec6bcf9a16a86519069f2190a170c270", 0x47) (async)
write$ppp(r5, &(0x7f000000b140)="83d28b5ad0e9b403f679cefa0dfadcdd5f668b972e13928a7bce5835b545b323c24a9db1fbebf382f1f9742b11117bf4145b8d62290468ec6bcf9a16a86519069f2190a170c270", 0x47)
ioctl$FICLONE(r1, 0x40049409, r0)
r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f000000b1c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f000000b200), 0x9)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f000000b240)={{0x2e, @multicast1, 0x4e20, 0x4, 'wlc\x00', 0x8, 0x1ff, 0x22}, {@loopback, 0x4e20, 0x2000, 0x8, 0x0, 0x101}}, 0x44)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f000000b2c0)={0x0, @local, 0x4e23, 0x1, 'lblcr\x00', 0x1a, 0xa, 0x74}, 0x2c)
ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f000000b400)={&(0x7f000000b300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000b3c0)={&(0x7f000000b380)={0x1c, r9, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400d0c0}, 0x24000000) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f000000b400)={&(0x7f000000b300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000b3c0)={&(0x7f000000b380)={0x1c, r9, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400d0c0}, 0x24000000)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000000b440)={0x0, 0x9, 0x6, 0xfffffff1}, &(0x7f000000b480)=0x10) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000000b440)={<r10=>0x0, 0x9, 0x6, 0xfffffff1}, &(0x7f000000b480)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000000b4c0)={r10, 0x4, 0x4, 0x3ff}, &(0x7f000000b500)=0x10)
getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f000000b540)={'filter\x00', 0x0, [0x6, 0x2, 0x8]}, &(0x7f000000b5c0)=0x44)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f000000b600)={0x0, @in6={{0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x84) (async)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f000000b600)={0x0, @in6={{0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x84)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f000000b8c0)={0x6, 0x5, &(0x7f000000b6c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f000000b700)='syzkaller\x00', 0x7ff, 0x5b, &(0x7f000000b740)=""/91, 0x0, 0x6d, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f000000b7c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f000000b800)={0x1, 0x0, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f000000b840)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f000000b880)=[{0x3, 0x4, 0x3, 0x2}, {0x5, 0x4, 0xc, 0xa}, {0x1, 0x3, 0xa, 0xc}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f000000b980)=r12, 0x4) (async)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f000000b980)=r12, 0x4)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f000000b9c0)) (async)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f000000b9c0))

1.843919816s ago: executing program 0 (id=4673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd24, 0x25dfdbfc}, 0x14}}, 0x6048881)

1.682550411s ago: executing program 0 (id=4676):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @empty, 0x8000}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)
shutdown(r1, 0x1)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x4b}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x280, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xaa45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @empty, 0x33}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffc00, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee41}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7df9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x44011}, 0x20004000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
openat$cgroup_ro(r4, &(0x7f00000007c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000))
socket$inet(0x2, 0x5, 0x3)
write$tun(r0, &(0x7f0000000200)={@val, @val={0x1, 0x80, 0x2, 0x6, 0x8, 0xd}, @ipv6=@generic={0x9, 0x6, "3e19bf", 0x2dc, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@hopopts={0x4, 0xb, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x2, 0x2, [0x5, 0x700000000, 0x40, 0x0]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0xf001, [0x80000001, 0x0, 0x7, 0x7]}}]}, @hopopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, @routing={0x2b, 0x2, 0x2, 0x2, 0x0, [@private0]}, @hopopts={0x6, 0x28, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim, @calipso={0x7, 0x50, {0x1, 0x12, 0xb2, 0x80, [0x6, 0x5, 0x8, 0x1, 0x2, 0x2, 0x9, 0x2, 0x1]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x8, [0xe, 0x323, 0x8348, 0x2, 0x9, 0x2, 0x819]}}, @jumbo={0xc2, 0x4, 0x10}, @generic={0x2, 0x91, "0a676a48ec3db5b874fcd07e8317bf3454f7c7aaa62281944d1320e4c7dc35c1207299fcf02050dec469cb88eb27385b7630e42659d9fb3bdc81555ac50c924e6fc25b214a6106d047cbff3bde5b626afa951de4e2e33687ce9a5f32092d1cb8d00ec5b5784907d861da8a4d7e6da8b30459edde7afcc76d4f1cb106f0616e541f73501a2169359d17c9b302066124c179"}]}, @fragment={0x32, 0x0, 0x3, 0x1, 0x0, 0x2, 0x65}], "a587fbe2e0337fe17cfe07be7b9df250073b9b8241a2c8fcddafa05adf324fb2d7fe01473f9f7c34503ab072867436590a11c66f82ca382400515830612432eaa6b2900a1973f0d3581f7a02e2f8cdbf98a76358316ed0ed49b68984ffa3cff4eed87fd334ffda82fdd5d777d653d05953255c6a30fe29dce3cde2e791513aa37265d7e725eb1ad780a18fd623da11ef26d8e89b61ffd30c885be2d0067761169e95ea2903824d92702ada0e238bac85bf69e96c8391e72f0a840f14fa838e76007242aa5e0d56b67593a366966a1d564c626129a8f8eb0a7938e1a718ab75cc65624da06746a28493cb49db3be4f781d288a42e"}}}, 0x312)

1.244011512s ago: executing program 3 (id=4679):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000004dc0)=[{{&(0x7f0000002500)={0xa, 0x4e23, 0x7f, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000004a80)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x6c, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9}}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x200}]}}}], 0x30}}], 0x1, 0x4000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r6 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd32936ad234ced2e74e4ad6ea7dc496faeafc97b7e6c44a2ae9df7c3dc2ee589a220431da3889f2a8617e3ee2e6252399cbfaab83bfe7c05ec25b9816da44387027b7ab4d6bde8ec960f7bc1363de2cd59ca6081bdfd1440b92b196ddc631e1405c2b1751059bac64e882735ee5d1f01f1766c9212853b51fe09df9c4dafcd4756a7c9553fa2ac7038dcd44574a62a564f9a2f3674fcf8768a7d9618395b1c5e9698951427297c35dbcefc9f6821bd8d78c6ed2911", 0xb7}, {&(0x7f00000006c0)="68b48f6e8fcedde03262d09e8336fe0925b41aec1e5c1dd66e7df0", 0x1b}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x8081)
recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x2001, 0x0)

1.219651433s ago: executing program 0 (id=4680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES8=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4008840}, 0x20008800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073030031000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000007140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ec618224a4b0870133ee4943fea624ae66f713f517", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa8b000800450000200000000000889078000000000000001000000000000c907801000000"], 0x0)
r4 = socket(0x14, 0x2, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, 0x0, 0x8040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100000000001400030065727370616e300000000000000000001c001a8018000a8014000700"/56], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000)
r6 = socket$inet(0x2, 0xb, 0x5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1}, 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xc0, &(0x7f0000000640)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0}}, 0x0)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x23, 0x0, 0x0}, 0x48)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1.187605131s ago: executing program 4 (id=4681):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0xe780, &(0x7f0000000080)=0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'})

984.058139ms ago: executing program 4 (id=4682):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee45b1e000000080045e0b0"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x8}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

977.191549ms ago: executing program 1 (id=4684):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x1f4d2000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x1f4d2000)
close(r0)

882.925402ms ago: executing program 3 (id=4685):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) (async)
write(r1, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) (async)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffa}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd6d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x562}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r4 = socket(0xa, 0x3, 0x3a) (rerun: 64)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 64)
close(0x3) (async, rerun: 64)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0)='4', 0x1) (async)
tee(r6, r5, 0xffffffffffffffff, 0x2) (async)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x3fff8000, 0x4) (async)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64)
listen(r0, 0x0) (rerun: 64)

816.649427ms ago: executing program 2 (id=4686):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r0, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x6)
r2 = accept(r0, 0x0, 0x0)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/111, 0x6f}], 0x5, &(0x7f0000000380)=""/34, 0x22}, 0x10100) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x2420}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)

814.97545ms ago: executing program 4 (id=4687):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002200)=""/260, 0x104}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000003340)=""/4070, 0xfe6}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x12}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002100)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)

814.208025ms ago: executing program 1 (id=4688):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x40048040)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000000)="b5e84c6c9540ad13fc1d786ea3b63d062b2865ecae02ca17def2e2bac019896b1b26b1921d7035615f00f661a3fe36271bddfe1c89a569ec65a9b186e366ff3f2d6f7a976661923f264e2a25f14f2d2cc6701fc06d6f15f2a6848b6bcfdf78408750eff9b38c8fd2508b67d2d4989caf15d04c930b95c60c26192b0000", 0x7d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)

728.806545ms ago: executing program 1 (id=4689):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000000c0)=0x5, 0x17)
sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0000010900010073797a310000000038000480340001800a000110b02a91062428c10024000280100003001c4bf1f8cf3b69a3ab942767080001006d61630008000240000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

697.868799ms ago: executing program 3 (id=4690):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010000000000090002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async)
write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd06e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x6, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0x0, 0x9}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}]}}]}, 0x44}}, 0x44094)

611.827826ms ago: executing program 2 (id=4691):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}}, 0x20}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180)=0x200, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9)

601.980366ms ago: executing program 4 (id=4692):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r7, 0x0, 0xeffd)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e29, 0x3, @empty, 0x106}, 0x1c)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x4, '\x00', 0x0, r1, 0x5, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r13, r10, 0x25, 0x0, @val=@tcx={@void, @value=r13}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f0000001980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0xa, 0x6, "798e0f", 0xd4b, 0x6, 0xff, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x5}, {"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"}}}}}}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f0000000140)="dc2ece1325373ed6c4c193604b0b986828620706cd591e79a608364a7e9980563806f581758be6858e303ff78f02014db87f305d4ccf891792177294f156cdea62e811cbdc6a99301c4d81d805d437fb3438616e867231d0199a6453a70d94c928004faa6e1152fc820b47cb1ac4ff386a2c6975e00890ea7b613019e61b15c8ea23978fee07ca10279f9902fe4ebd44fcc4d8a84fbf92f2ac485bffd7c4071de3caae869b29855adb89c47790099d2e03f25951d2714327c0093acbb9a07df10177f94bccfef60d716c67c17744be018e5b4d50ee5ee6fbacf2a1f76209dca1e8d997ead6a5796c82e2c0714c609b1ff2", &(0x7f0000000240)=""/189}, 0x20)

566.842452ms ago: executing program 1 (id=4693):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000100)={0x0, 0x9, 0x3, 0x7, 0x8, 0xa, 0x1c, "6ed3018a4b9ee963682cff2c1a1da851748738ec", "989d7f9483620b6cc8834bfb88c3853158ab06d9"})
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xf, 0x7, 0x5})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x880)
recvfrom$inet(r5, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

475.752429ms ago: executing program 3 (id=4694):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000)
r1 = socket(0x10, 0x803, 0x1000000)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0xa00, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)
socketpair(0x1, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0)

458.231451ms ago: executing program 2 (id=4695):
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"})

371.616192ms ago: executing program 3 (id=4696):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf38a, 0x2, 0x4}, {0x2, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (rerun: 64)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xc0000, @loopback, 0xe}}, 0x5, 0x6}, &(0x7f0000000140)=0x90)
r10 = socket$alg(0x26, 0x5, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000098", @ANYRES16=r12, @ANYBLOB="310428bd7000ffdbdf251600000018000180140002006e657464657673696d300000000000000500030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44890}, 0x80000d0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r14)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r15, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async)
socket$rxrpc(0x21, 0x2, 0x2)

280.751567ms ago: executing program 1 (id=4697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x701}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000023552bd078064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

280.419911ms ago: executing program 2 (id=4698):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
r2 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2)

279.880088ms ago: executing program 0 (id=4699):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

195.73223ms ago: executing program 2 (id=4700):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @local}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in=@private=0xa010101}}]}, 0x50}}, 0x12)
listen(r2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001000)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf256800000008000300", @ANYRES32=r10], 0x34}}, 0x8000)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r12, 0xd1a}, 0x8)
listen(r6, 0x4)

161.736978ms ago: executing program 0 (id=4701):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
socket(0x29, 0x3, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async)
socket(0x29, 0x3, 0x2) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f0000000040)) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)

116.664193ms ago: executing program 3 (id=4702):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x10000860)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400})
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_DFS_REGION={0x0, 0x92, 0xf5}, @NL80211_ATTR_DFS_REGION={0x0, 0x92, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1002000}})
socket$nl_generic(0x10, 0x3, 0x10)

45.935623ms ago: executing program 1 (id=4703):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xfffffef7, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

0s ago: executing program 2 (id=4704):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x24, 0x8, 0x4, 0x1ff, 0x0, 0x1, 0x0, 0x6, 0x7, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x2]}})

kernel console output (not intermixed with test programs):

 attribute type 13 has an invalid length.
[  367.103744][T15499] openvswitch: netlink: Tunnel attr 21 out of range max 16
[  367.123402][T15499] netlink: 16195 bytes leftover after parsing attributes in process `syz.1.2644'.
[  367.304382][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'.
[  367.364028][T15512] netlink: 'syz.4.2650': attribute type 1 has an invalid length.
[  367.373439][T15512] netlink: 'syz.4.2650': attribute type 2 has an invalid length.
[  367.422920][T15512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2650'.
[  367.975770][T15548] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  367.987478][T15548] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  367.996509][T15548] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  368.223686][T15567] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2665'.
[  368.319818][T15573] netlink: 'syz.4.2667': attribute type 1 has an invalid length.
[  368.402792][T15573] 8021q: adding VLAN 0 to HW filter on device bond7
[  368.437037][T15578] 8021q: adding VLAN 0 to HW filter on device bond7
[  368.444644][T15578] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  368.457054][T15578] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  368.497867][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2667'.
[  368.577471][T15573] veth9: entered promiscuous mode
[  368.585870][T15573] bond7: (slave veth9): Enslaving as an active interface with a down link
[  368.594862][T15583] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2670'.
[  368.605526][T15584] 8021q: adding VLAN 0 to HW filter on device bond7
[  368.732591][T15586] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  368.734026][T15589] x_tables: unsorted underflow at hook 4
[  368.767789][T15590] workqueue: name exceeds WQ_NAME_LEN. Truncating to: K��u�cr��K:����̥�B����|���
[  369.035955][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2676'.
[  369.160619][T15606] netlink: 'syz.3.2678': attribute type 48 has an invalid length.
[  369.267351][T15607] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.294273][T15613] netlink: 'syz.1.2681': attribute type 1 has an invalid length.
[  369.469809][T15627] syzkaller0: entered promiscuous mode
[  369.479340][T15627] syzkaller0: entered allmulticast mode
[  370.111752][T15662] netlink: 'syz.2.2695': attribute type 12 has an invalid length.
[  370.712699][T15704] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  370.715949][T15706] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  371.356346][T15741] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  371.418281][T15746] vxcan1: Caught tx_queue_len zero misconfig
[  371.465105][T15752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.754980][T15769] geneve3: entered promiscuous mode
[  371.760613][T15769] geneve3: entered allmulticast mode
[  371.774346][   T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.789650][   T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.809019][   T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.853052][   T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.964409][T15781] xt_socket: unknown flags 0xe4
[  371.978736][T15782] netlink: 'syz.3.2727': attribute type 10 has an invalid length.
[  371.993841][T15782] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  372.107985][ T7442] lec:lec_start_xmit: lec0:No lecd attached
[  372.196828][T15793] __nla_validate_parse: 16 callbacks suppressed
[  372.196861][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  372.237919][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  372.307390][T15795] macvtap1: entered promiscuous mode
[  372.313354][T15795] macvtap1: entered allmulticast mode
[  372.318892][T15795] veth1_vlan: entered allmulticast mode
[  372.338495][T15795] macvtap2: entered promiscuous mode
[  372.347512][T15795] macvtap2: entered allmulticast mode
[  372.364915][T15797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.387687][T15800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.434029][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'.
[  372.625286][T15813] macvtap2: entered promiscuous mode
[  372.631267][T15813] vlan0: entered promiscuous mode
[  372.637741][T15813] macvtap2: entered allmulticast mode
[  372.652084][T15813] vlan0: entered allmulticast mode
[  372.657272][T15813] veth0_vlan: entered allmulticast mode
[  373.296039][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2751'.
[  373.332509][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2751'.
[  373.353541][T15841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2752'.
[  373.387926][T15817] sctp: [Deprecated]: syz.4.2745 (pid 15817) Use of int in maxseg socket option.
[  373.387926][T15817] Use struct sctp_assoc_value instead
[  373.508994][T15846] erspan0: entered promiscuous mode
[  373.910046][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'.
[  373.963852][T15866] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2758'.
[  373.979330][T15875] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2758'.
[  374.186006][T15889] netlink: 'syz.1.2764': attribute type 9 has an invalid length.
[  374.273682][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'.
[  377.881701][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms
[  377.889785][    C0] lec:lec_tx_timeout: lec0
[  378.606624][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  383.881530][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms
[  383.889675][    C0] lec:lec_tx_timeout: lec0
[  401.005951][T15943] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2776'.
[  401.015522][T15943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2776'.
[  401.266849][T15934] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2776'.
[  401.340157][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  401.353495][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  401.362347][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  401.372648][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  401.382198][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.447676][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  401.455391][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  401.464148][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  401.472558][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  401.477878][T15962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2780'.
[  401.480338][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.835773][T15949] lo speed is unknown, defaulting to 1000
[  401.902387][T15974] x_tables: duplicate underflow at hook 2
[  402.167668][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'.
[  402.261769][ T5833] syz_tun (unregistering): left promiscuous mode
[  402.449337][T15949] chnl_net:caif_netlink_parms(): no params data found
[  402.507044][T16007] netlink: 'syz.2.2790': attribute type 4 has an invalid length.
[  402.821114][T16030] netlink: 'syz.3.2796': attribute type 11 has an invalid length.
[  402.851782][T16030] netlink: 'syz.3.2796': attribute type 4 has an invalid length.
[  402.857088][T15949] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.878912][T16030] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.2796'.
[  402.884034][T15949] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.906234][T15949] bridge_slave_0: entered allmulticast mode
[  402.924462][T15949] bridge_slave_0: entered promiscuous mode
[  402.954164][T15949] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.954957][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'.
[  402.964851][T15949] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.983812][T15949] bridge_slave_1: entered allmulticast mode
[  402.995152][T15949] bridge_slave_1: entered promiscuous mode
[  403.053382][T15949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.067278][T15949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.127836][T15949] team0: Port device team_slave_0 added
[  403.137305][T15949] team0: Port device team_slave_1 added
[  403.187262][T15949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.197110][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.236014][T15949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.249493][T15949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.257215][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.284649][T15949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.370337][T15949] hsr_slave_0: entered promiscuous mode
[  403.378341][T15949] hsr_slave_1: entered promiscuous mode
[  403.385216][T15949] debugfs: 'hsr0' already exists in 'hsr'
[  403.391054][T15949] Cannot create hsr debugfs directory
[  403.562390][ T5842] Bluetooth: hci5: command tx timeout
[  403.949724][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'.
[  404.191023][T16094] netlink: 'syz.3.2815': attribute type 6 has an invalid length.
[  404.250954][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'.
[  404.535638][T16104] team0: Device ip6gre1 is of different type
[  404.645319][T16109] team0: Device ip6gre1 is of different type
[  404.754353][T15949] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  404.813268][T15949] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  404.876329][T15949] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  404.916736][T15949] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  404.928113][T16122] netlink: 'syz.0.2822': attribute type 2 has an invalid length.
[  404.962036][T16122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2822'.
[  405.268920][T15949] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.379588][T16152] netlink: 'syz.3.2833': attribute type 10 has an invalid length.
[  405.391162][T16147] syzkaller0: entered promiscuous mode
[  405.397411][T16147] syzkaller0: entered allmulticast mode
[  405.408573][T15949] 8021q: adding VLAN 0 to HW filter on device team0
[  405.642998][ T5842] Bluetooth: hci5: command tx timeout
[  407.078072][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.085423][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.098577][T16155] __nla_validate_parse: 1 callbacks suppressed
[  407.098597][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'.
[  407.143432][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.150735][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.304943][T15949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.396398][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2836'.
[  407.434272][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2839'.
[  407.552984][T16182] macvtap2: entered promiscuous mode
[  407.567312][T16182] macvtap2: entered allmulticast mode
[  407.580072][T16182] veth1_vlan: entered allmulticast mode
[  407.614392][T16187] macvtap3: entered promiscuous mode
[  407.629932][T16187] macvtap3: entered allmulticast mode
[  407.724598][ T5842] Bluetooth: hci5: command tx timeout
[  407.902278][T15949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.058311][T16209] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1537818874/1537818875
[  408.092493][T16209] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1537818874/1537818875
[  408.230669][T16219] netlink: 'syz.1.2848': attribute type 29 has an invalid length.
[  408.240015][T16219] netlink: 'syz.1.2848': attribute type 29 has an invalid length.
[  408.249397][T16219] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2848'.
[  408.670187][T16239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  408.694881][T15949] veth0_vlan: entered promiscuous mode
[  408.723762][T15949] veth1_vlan: entered promiscuous mode
[  408.771110][T16243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2853'.
[  408.833455][T15949] veth0_macvtap: entered promiscuous mode
[  408.870694][T15949] veth1_macvtap: entered promiscuous mode
[  408.944384][T15949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.968325][T15949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.026776][T16252] netlink: 'syz.2.2856': attribute type 4 has an invalid length.
[  409.067469][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.099784][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.137714][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.186455][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.344367][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.352481][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.413492][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.423026][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.511183][T16268] xt_hashlimit: size too large, truncated to 1048576
[  409.801660][ T5842] Bluetooth: hci5: command tx timeout
[  411.881887][ T5842] Bluetooth: hci5: command tx timeout
[  435.670647][T16292] netlink: 'syz.1.2866': attribute type 12 has an invalid length.
[  435.821088][T16297] ipvlan2: entered allmulticast mode
[  435.842076][T16297] batadv_slave_1: entered allmulticast mode
[  435.860331][T16297] batman_adv: batadv0: Adding interface: ipvlan2
[  435.890711][T16297] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.934542][T16297] batman_adv: batadv0: Interface activated: ipvlan2
[  436.045834][ T7442] lec:lec_start_xmit: lec0:No lecd attached
[  436.246116][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2873'.
[  436.586914][T16328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2876'.
[  436.716384][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'.
[  436.793084][T16340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'.
[  436.850786][T16334] netlink: 'syz.4.2882': attribute type 10 has an invalid length.
[  436.866162][T16333] netlink: 'syz.4.2882': attribute type 10 has an invalid length.
[  436.957940][T16334] 8021q: adding VLAN 0 to HW filter on device team0
[  436.973688][T16334] bond0: (slave team0): Enslaving as an active interface with an up link
[  437.405556][T16359] 8021q: adding VLAN 0 to HW filter on device `
[  437.415071][T16359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  437.716996][T16393] netlink: 'syz.3.2901': attribute type 4 has an invalid length.
[  437.795607][T16396] syz.4.2903 uses old SIOCAX25GETINFO
[  437.805237][T16396] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2903'.
[  437.815289][T16396] netlink: 'syz.4.2903': attribute type 9 has an invalid length.
[  437.971184][T16399] netlink: 464 bytes leftover after parsing attributes in process `syz.3.2904'.
[  437.971184][T16402] netlink: 464 bytes leftover after parsing attributes in process `syz.3.2904'.
[  437.975982][T16401] syzkaller0: entered promiscuous mode
[  438.000093][T16401] syzkaller0: entered allmulticast mode
[  438.424595][T16429] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2914'.
[  438.434863][T16429] netem: invalid attributes len -24
[  438.440294][T16429] netem: change failed
[  438.963063][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'.
[  438.979841][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'.
[  439.166737][T16468] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[  439.244594][T16466] geneve2: entered promiscuous mode
[  439.414833][T16484] netlink: 'syz.3.2931': attribute type 30 has an invalid length.
[  439.588597][T16489] netlink: 'syz.3.2931': attribute type 30 has an invalid length.
[  439.904443][T16518] ip6gre1: entered allmulticast mode
[  440.063191][T16520] ip6gretap0: entered promiscuous mode
[  440.089528][T16520] ip6gretap0: left promiscuous mode
[  440.362808][T16542] netlink: 'syz.2.2944': attribute type 16 has an invalid length.
[  440.409841][T16542] netlink: 'syz.2.2944': attribute type 3 has an invalid length.
[  440.524985][T16547] syzkaller0: entered promiscuous mode
[  440.530486][T16547] syzkaller0: entered allmulticast mode
[  440.856415][T16559] lo speed is unknown, defaulting to 1000
[  441.061672][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  441.069746][    C0] lec:lec_tx_timeout: lec0
[  441.075326][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  441.110486][T16574] veth0: entered promiscuous mode
[  441.325136][T16571] veth0: left promiscuous mode
[  441.542655][T16583] syzkaller1: entered promiscuous mode
[  441.558395][T16583] syzkaller1: entered allmulticast mode
[  441.910565][T16612] __nla_validate_parse: 8 callbacks suppressed
[  441.910585][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'.
[  442.055692][T16616] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  442.160796][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'.
[  442.181039][T16631] netlink: 'syz.3.2969': attribute type 3 has an invalid length.
[  446.081839][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  446.090088][    C0] lec:lec_tx_timeout: lec0
[  467.557478][T16645] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2976'.
[  467.584421][T16645] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  467.845282][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'.
[  468.235677][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'.
[  468.276638][T16678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.328153][T16678] delete_channel: no stack
[  468.884814][T16711] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  468.908133][T16711] bond8 (unregistering): Released all slaves
[  469.478674][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  469.493225][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  469.503240][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  469.516770][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  469.525022][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  469.651150][T16746] lo speed is unknown, defaulting to 1000
[  469.747528][T16755] netem: incorrect gi model size
[  469.770405][T16755] netem: change failed
[  469.871272][T16759] netlink: 'syz.0.3006': attribute type 9 has an invalid length.
[  469.889065][T16759] netlink: 'syz.0.3006': attribute type 11 has an invalid length.
[  469.901675][T16759] netlink: 'syz.0.3006': attribute type 12 has an invalid length.
[  469.910430][T16759] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3006'.
[  469.925723][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3007'.
[  469.935332][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'.
[  469.944949][T16761] openvswitch: netlink: Flow key attr not present in new flow.
[  469.957385][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'.
[  470.130794][T16746] chnl_net:caif_netlink_parms(): no params data found
[  470.161354][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'.
[  470.299710][T16779] netlink: 'syz.2.3011': attribute type 4 has an invalid length.
[  470.308392][T16746] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.324093][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'.
[  470.333519][T16746] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.340745][T16746] bridge_slave_0: entered allmulticast mode
[  470.348462][T16746] bridge_slave_0: entered promiscuous mode
[  470.363646][T16780] vlan2: entered allmulticast mode
[  470.368967][T16780] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  470.379933][T16746] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.391688][T16746] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.399047][T16746] bridge_slave_1: entered allmulticast mode
[  470.412907][T16746] bridge_slave_1: entered promiscuous mode
[  470.455731][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.473561][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.506391][T16746] team0: Port device team_slave_0 added
[  470.514583][T16746] team0: Port device team_slave_1 added
[  470.528069][T16786] openvswitch: netlink: IP tunnel dst address not specified
[  470.547187][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.554377][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.580515][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.594027][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.601024][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.628417][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.683727][T16746] hsr_slave_0: entered promiscuous mode
[  470.694504][T16746] hsr_slave_1: entered promiscuous mode
[  470.701162][T16746] debugfs: 'hsr0' already exists in 'hsr'
[  470.731742][T16746] Cannot create hsr debugfs directory
[  470.765162][T16788] caif0: entered promiscuous mode
[  470.770443][T16788] caif0: entered allmulticast mode
[  470.910653][T16746] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  470.977425][T16746] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  471.063155][T16746] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  471.075007][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3016'.
[  471.139637][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.147938][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.156050][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.164045][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.172031][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.179987][T16792] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  471.236263][T16746] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  471.522342][T16816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  471.529870][T16816] IPv6: NLM_F_CREATE should be set when creating new route
[  471.537207][T16816] IPv6: NLM_F_CREATE should be set when creating new route
[  471.562116][ T5842] Bluetooth: hci3: command tx timeout
[  471.628426][T16746] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  471.663949][T16746] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  471.744207][T16746] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  471.793247][T16746] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  472.104514][T16855] tipc: Started in network mode
[  472.109544][T16855] tipc: Node identity 724165d42eeb, cluster identity 4711
[  472.146728][T16855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.238703][T16849] syzkaller0: entered promiscuous mode
[  472.246507][T16866] netlink: 'syz.0.3032': attribute type 10 has an invalid length.
[  472.259390][T16849] syzkaller0: entered allmulticast mode
[  472.266561][T16849] tipc: Resetting bearer <eth:syzkaller0>
[  472.399755][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[  472.414393][T16848] tipc: Resetting bearer <eth:syzkaller0>
[  473.641779][ T5842] Bluetooth: hci3: command tx timeout
[  474.009952][T16848] tipc: Disabling bearer <eth:syzkaller0>
[  474.042337][ T5909] tipc: Node number set to 1554671060
[  474.126576][T16746] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.176049][T16881] __nla_validate_parse: 2 callbacks suppressed
[  474.176071][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'.
[  474.208327][T16746] 8021q: adding VLAN 0 to HW filter on device team0
[  474.237210][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'.
[  474.241004][T16889] syzkaller0: entered promiscuous mode
[  474.254710][T16889] syzkaller0: entered allmulticast mode
[  474.283435][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.290672][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.320095][T16890] veth1_macvtap: left promiscuous mode
[  474.359477][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.366804][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  474.515350][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3044'.
[  474.544730][T16898] delete_channel: no stack
[  474.583679][T16905] chnl_net:caif_netlink_parms(): no params data found
[  475.090338][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.253551][T16933] veth3: entered promiscuous mode
[  475.291806][T16933] veth3: entered allmulticast mode
[  475.352412][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  475.401279][T16948] netlink: 'syz.0.3058': attribute type 21 has an invalid length.
[  475.508869][T16746] veth0_vlan: entered promiscuous mode
[  475.544983][T16746] veth1_vlan: entered promiscuous mode
[  475.700600][T16746] veth0_macvtap: entered promiscuous mode
[  475.722565][ T5842] Bluetooth: hci3: command tx timeout
[  475.767512][T16746] veth1_macvtap: entered promiscuous mode
[  475.772209][T16965] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3062'.
[  475.790224][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.809196][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.887394][ T3536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.908058][ T3536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.922864][ T3536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.944703][ T3536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.961334][T16971] net_ratelimit: 49 callbacks suppressed
[  475.961355][T16971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.997446][T16969] lo speed is unknown, defaulting to 1000
[  476.027551][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'.
[  476.093158][T16973] syzkaller0: entered promiscuous mode
[  476.098696][T16973] syzkaller0: entered allmulticast mode
[  476.177083][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.190330][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.443804][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'.
[  476.721543][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.741917][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.826706][T17001] syzkaller1: tun_chr_ioctl cmd 1074025677
[  476.855725][T17001] syzkaller1: linktype set to 823
[  476.912480][T17005] netlink: 'syz.2.3074': attribute type 10 has an invalid length.
[  476.920605][T17005] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3074'.
[  476.978040][T17001] 8021q: adding VLAN 0 to HW filter on device bond8
[  477.020648][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3075'.
[  477.076195][T17011] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3075'.
[  477.335130][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  477.344428][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  477.363153][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  477.371768][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  477.381690][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  477.493909][T17014] lo speed is unknown, defaulting to 1000
[  477.523567][ T5998] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.639643][ T5998] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.726823][ T5998] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.803659][ T5842] Bluetooth: hci3: command tx timeout
[  477.870167][T17023] syzkaller0: entered promiscuous mode
[  477.876830][T17023] syzkaller0: entered allmulticast mode
[  477.930578][ T5998] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.963089][T17035] x_tables: duplicate underflow at hook 3
[  478.688088][T17070] sctp: [Deprecated]: syz.0.3090 (pid 17070) Use of int in max_burst socket option.
[  478.688088][T17070] Use struct sctp_assoc_value instead
[  478.712544][T17070] xt_hashlimit: size too large, truncated to 1048576
[  479.482278][ T5842] Bluetooth: hci2: command tx timeout
[  480.343181][T17077] sctp: [Deprecated]: syz.4.3092 (pid 17077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  480.343181][T17077] Use struct sctp_sack_info instead
[  480.561984][T17014] chnl_net:caif_netlink_parms(): no params data found
[  481.024659][T17108] __nla_validate_parse: 6 callbacks suppressed
[  481.024680][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'.
[  481.046361][T17108] xt_CT: You must specify a L4 protocol and not use inversions on it
[  481.236312][ T5998] bond4 (unregistering): (slave gretap2): Releasing active interface
[  481.528901][ T5998] bond2 (unregistering): (slave geneve2): Releasing active interface
[  481.563469][ T5842] Bluetooth: hci2: command tx timeout
[  481.965013][ T5998] bond0 (unregistering): Released all slaves
[  481.976946][ T5998] bond1 (unregistering): Released all slaves
[  481.991195][ T5998] bond2 (unregistering): Released all slaves
[  482.007360][ T5998] bond3 (unregistering): Released all slaves
[  482.022797][ T5998] bond4 (unregistering): Released all slaves
[  482.144286][ T5998] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  482.154885][ T5998] bond5 (unregistering): Released all slaves
[  482.167806][ T5998] bond6 (unregistering): Released all slaves
[  482.180368][ T5998] bond7 (unregistering): Released all slaves
[  482.204162][T17093] erspan0: entered allmulticast mode
[  482.425267][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3099'.
[  482.439805][ T5998] �9: left promiscuous mode
[  482.457117][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'.
[  482.486121][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3101'.
[  482.730295][ T5998] tipc: Disabling bearer <eth:ipvlan0>
[  482.745383][ T5998] tipc: Disabling bearer <eth:vlan0>
[  482.757622][T17014] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.763236][ T5998] tipc: Left network mode
[  482.784576][T17014] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.807736][T17014] bridge_slave_0: entered allmulticast mode
[  482.827262][T17014] bridge_slave_0: entered promiscuous mode
[  482.874804][T17014] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.901831][T17014] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.909867][T17014] bridge_slave_1: entered allmulticast mode
[  482.964236][T17014] bridge_slave_1: entered promiscuous mode
[  483.109538][T17162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3108'.
[  483.157440][T17166] netlink: 'syz.3.3109': attribute type 1 has an invalid length.
[  483.175492][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'.
[  483.210061][T17166] netlink: 'syz.3.3109': attribute type 11 has an invalid length.
[  483.232417][T17166] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3109'.
[  483.344562][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.433388][T17154] syzkaller0: entered promiscuous mode
[  483.451716][T17154] syzkaller0: entered allmulticast mode
[  483.516402][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.641652][ T5842] Bluetooth: hci2: command tx timeout
[  483.764827][T17185] netlink: 'syz.1.3111': attribute type 21 has an invalid length.
[  484.211017][T17197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3114'.
[  484.297558][T17198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3111'.
[  485.609229][T17014] team0: Port device team_slave_0 added
[  485.677768][T17014] team0: Port device team_slave_1 added
[  485.738916][ T5842] Bluetooth: hci2: command tx timeout
[  485.840898][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.896124][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.968998][T17212] netlink: 'syz.1.3118': attribute type 15 has an invalid length.
[  485.976923][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.982976][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.018821][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.064203][T17212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'.
[  486.101883][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.417519][T17214] syzkaller0: entered promiscuous mode
[  486.433261][T17214] syzkaller0: entered allmulticast mode
[  486.504567][T17234] netlink: 'syz.1.3121': attribute type 9 has an invalid length.
[  486.609493][T17232] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3120'.
[  486.665351][ T5998] hsr_slave_0: left promiscuous mode
[  486.757009][T17250] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3122'.
[  486.770262][T17248] netlink: 'syz.3.3124': attribute type 1 has an invalid length.
[  486.807681][T17248] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3124'.
[  486.832120][ T5998] pimreg (unregistering): left allmulticast mode
[  487.040979][ T5998] pimreg3 (unregistering): left allmulticast mode
[  487.165830][T17268] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3126'.
[  488.001767][T17014] hsr_slave_0: entered promiscuous mode
[  488.008169][T17014] hsr_slave_1: entered promiscuous mode
[  488.022724][T17240] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.030494][T17240] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  488.044904][T17240] bond0: (slave gre0): Error -95 calling set_mac_address
[  488.326356][T17284] syzkaller0: entered promiscuous mode
[  488.337982][T17284] syzkaller0: entered allmulticast mode
[  488.574696][T17286] macvtap1: entered promiscuous mode
[  488.580383][T17286] macvtap1: entered allmulticast mode
[  488.587725][T17286] veth1_vlan: entered allmulticast mode
[  488.725508][T17298] macvtap2: entered promiscuous mode
[  488.754380][T17298] macvtap2: entered allmulticast mode
[  488.835112][T17311] Cannot find set identified by id 65534 to match
[  489.076913][T17316] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3136'.
[  489.088504][T17320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3138'.
[  489.098704][T17316] netlink: ct family unspecified
[  489.120955][ T5998] IPVS: stop unused estimator thread 0...
[  489.208340][T17322] ip6gre1: entered allmulticast mode
[  489.321347][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'.
[  489.368059][T17330] netlink: 'syz.3.3141': attribute type 3 has an invalid length.
[  489.746207][T17346] vlan2: entered promiscuous mode
[  489.758712][T17346] bridge0: entered promiscuous mode
[  489.995503][T17360] xt_nat: multiple ranges no longer supported
[  490.003275][T17360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3149'.
[  490.021365][T17360] syzkaller1: entered promiscuous mode
[  490.028804][T17360] syzkaller1: entered allmulticast mode
[  490.213412][T17362] syzkaller1: entered promiscuous mode
[  490.224515][T17362] syzkaller1: entered allmulticast mode
[  490.329795][T17372] xt_cgroup: path and classid specified
[  490.357331][T17014] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  490.416438][T17014] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  490.464725][T17014] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  490.503502][T17014] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  490.516617][T17380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3150'.
[  490.787030][T17014] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.867866][T17014] 8021q: adding VLAN 0 to HW filter on device team0
[  490.899863][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.907092][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.958097][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.965372][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.419454][T17420] vcan0: tx drop: invalid da for name 0x0000000000000015
[  491.508376][T17430] __nla_validate_parse: 1 callbacks suppressed
[  491.508396][T17430] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3160'.
[  492.005386][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.229219][T17014] veth0_vlan: entered promiscuous mode
[  492.270078][T17014] veth1_vlan: entered promiscuous mode
[  492.404276][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'.
[  492.468271][T17014] veth0_macvtap: entered promiscuous mode
[  492.496982][T17014] veth1_macvtap: entered promiscuous mode
[  492.585393][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.626966][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.673498][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.743791][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.782552][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.792049][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'.
[  492.823130][T17491] netlink: 'syz.1.3175': attribute type 1 has an invalid length.
[  492.890846][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.900275][T17491] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3175'.
[  492.943596][T17491] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3175'.
[  493.202921][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.210817][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.393489][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3182'.
[  493.413150][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.421103][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.575889][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'.
[  493.621843][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3182'.
[  493.894096][T17531] netlink: 'syz.2.3188': attribute type 12 has an invalid length.
[  493.902165][T17531] netlink: 'syz.2.3188': attribute type 29 has an invalid length.
[  493.910018][T17531] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3188'.
[  493.943586][T17533] netlink: 181328 bytes leftover after parsing attributes in process `syz.4.3187'.
[  493.992975][T17541] netlink: 'syz.2.3188': attribute type 12 has an invalid length.
[  494.029715][T17541] netlink: 'syz.2.3188': attribute type 29 has an invalid length.
[  494.095908][ T3469] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  494.142706][ T3469] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  494.178662][ T3469] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.217550][ T3469] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  494.544092][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  494.556633][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  494.611851][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  494.633972][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  494.651606][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  494.703322][T17561] lo speed is unknown, defaulting to 1000
[  494.810204][T17575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.190389][T17561] chnl_net:caif_netlink_parms(): no params data found
[  495.660584][T17601] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.668585][T17601] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.835364][T17601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.857349][T17601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.040502][ T3536] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.081792][ T3536] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.108337][T17561] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.142268][T17624] netlink: 'syz.3.3208': attribute type 4 has an invalid length.
[  496.163055][T17561] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.170567][T17561] bridge_slave_0: entered allmulticast mode
[  496.194606][T17561] bridge_slave_0: entered promiscuous mode
[  496.225009][ T3536] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.299848][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.332146][T17561] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.339548][T17561] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.360023][T17561] bridge_slave_1: entered allmulticast mode
[  496.405627][T17561] bridge_slave_1: entered promiscuous mode
[  496.573924][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.599515][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.682184][ T5842] Bluetooth: hci1: command tx timeout
[  496.824567][T17561] team0: Port device team_slave_0 added
[  496.829986][T17665] __nla_validate_parse: 7 callbacks suppressed
[  496.830008][T17665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3217'.
[  496.861259][T17561] team0: Port device team_slave_1 added
[  496.872003][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'.
[  496.887951][T17663] Bluetooth: MGMT ver 1.23
[  496.972547][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.985316][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.070000][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.103320][T17667] vlan3: entered allmulticast mode
[  497.134006][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.164586][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.263548][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.372056][T17669] syzkaller0: entered promiscuous mode
[  497.379017][T17669] syzkaller0: entered allmulticast mode
[  497.428492][T17689] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  497.675763][T17710] netlink: 'syz.1.3225': attribute type 10 has an invalid length.
[  497.717942][T17710] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3225'.
[  498.764281][ T5842] Bluetooth: hci1: command 0x041b tx timeout
[  499.666191][T17561] hsr_slave_0: entered promiscuous mode
[  499.673383][T17561] hsr_slave_1: entered promiscuous mode
[  499.679761][T17561] debugfs: 'hsr0' already exists in 'hsr'
[  499.686285][T17561] Cannot create hsr debugfs directory
[  499.697999][T17717] tipc: Enabling of bearer <eth:pim6reg0> rejected, failed to enable media
[  499.916184][T17739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3228'.
[  500.279657][T17761] netlink: 'syz.3.3235': attribute type 4 has an invalid length.
[  500.422515][T17561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.448466][T17561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  500.631668][T17561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.668167][T17561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  500.845398][ T5836] Bluetooth: hci1: command 0x041b tx timeout
[  500.980244][T17561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.027732][T17561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  501.180196][T17791] syzkaller0: entered promiscuous mode
[  501.192120][T17791] syzkaller0: entered allmulticast mode
[  501.254133][T17561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.264918][T17561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  501.488393][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  502.921916][ T5836] Bluetooth: hci1: command 0x041b tx timeout
[  503.336573][T17824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3246'.
[  503.349157][T17824] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3246'.
[  503.358262][T17824] netlink: 'syz.4.3246': attribute type 5 has an invalid length.
[  503.366174][T17824] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3246'.
[  503.539814][T17775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  503.554184][T17561] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  503.621222][T17561] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  503.699469][T17561] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  503.770726][T17561] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  503.798022][T17828] syzkaller0: entered promiscuous mode
[  503.813623][T17828] syzkaller0: entered allmulticast mode
[  503.852792][T17828] 0: reclassify loop, rule prio 0, protocol 800
[  503.966305][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'.
[  504.108643][T17854] tipc: Started in network mode
[  504.116462][T17854] tipc: Node identity c22b1758bfad, cluster identity 4711
[  504.152389][T17854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.179776][T17857] syzkaller0: entered promiscuous mode
[  504.190399][T17857] syzkaller0: entered allmulticast mode
[  504.213645][T17854] tipc: Resetting bearer <eth:syzkaller0>
[  504.282717][T17857] tipc: Resetting bearer <eth:syzkaller0>
[  504.291685][T17865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3257'.
[  504.314493][T17857] tipc: Disabling bearer <eth:syzkaller0>
[  504.379046][T17561] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.406979][T17561] 8021q: adding VLAN 0 to HW filter on device team0
[  504.423810][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.431036][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.451190][T17869] xt_TCPMSS: Only works on TCP SYN packets
[  504.474026][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.481348][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.665603][T17884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3263'.
[  504.848037][T17892] netlink: 'syz.2.3265': attribute type 1 has an invalid length.
[  504.871823][T17895] netlink: 'syz.2.3265': attribute type 1 has an invalid length.
[  505.002656][ T5836] Bluetooth: hci1: command 0x041b tx timeout
[  505.058795][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.166688][T17561] veth0_vlan: entered promiscuous mode
[  505.246413][T17561] veth1_vlan: entered promiscuous mode
[  505.324025][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3269'.
[  505.373993][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3269'.
[  505.384250][T17561] veth0_macvtap: entered promiscuous mode
[  505.420068][T17561] veth1_macvtap: entered promiscuous mode
[  505.493263][T17561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.533105][T17561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.576282][T17918] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  505.595754][ T5996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.632862][ T5996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.681272][ T5996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.731960][ T5996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.795605][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'.
[  505.893045][T17934] openvswitch: netlink: Key type 220 is out of range max 32
[  505.940304][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.972253][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.008101][T17939] IPv6: sit1: Disabled Multicast RS
[  506.017500][T17939] sit1: entered allmulticast mode
[  506.024163][T17941] netlink: 401 bytes leftover after parsing attributes in process `syz.1.3278'.
[  506.074042][T17942] vlan1: entered allmulticast mode
[  506.079503][T17942] veth0_vlan: entered allmulticast mode
[  506.103818][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.154944][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.392042][T17958] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  506.638554][T17964] ip_vti0: Master is either lo or non-ether device
[  506.921570][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  506.929749][    C0] lec:lec_tx_timeout: lec0
[  506.934922][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  506.953956][T17973] vxcan2: entered allmulticast mode
[  507.126540][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  507.137255][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  507.144457][T17982] syzkaller1: entered promiscuous mode
[  507.144481][T17982] syzkaller1: entered allmulticast mode
[  507.179147][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  507.224622][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  507.232805][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  509.332691][ T5836] Bluetooth: hci0: command tx timeout
[  509.358869][T17987] lo speed is unknown, defaulting to 1000
[  509.455762][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.468074][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.489983][T18012] netlink: 'syz.0.3300': attribute type 16 has an invalid length.
[  509.498178][T18012] netlink: 'syz.0.3300': attribute type 17 has an invalid length.
[  509.657380][T18012] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.665353][T18012] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.746709][T18024] block nbd2: not configured, cannot reconfigure
[  509.860976][T18012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.888404][T18012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.082022][ T3536] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.100018][ T3536] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.166553][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.185167][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.234711][ T3536] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.264901][T18042] __nla_validate_parse: 6 callbacks suppressed
[  510.264922][T18042] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3305'.
[  510.300864][ T3536] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.341615][T18042] netlink: Conntrack attr has 4 unknown bytes
[  510.407107][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.430211][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.515216][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.527508][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.596575][T18046] lo speed is unknown, defaulting to 1000
[  510.746711][T17987] chnl_net:caif_netlink_parms(): no params data found
[  510.760570][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3311'.
[  510.953274][T18033] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  511.137202][T18078] sctp: [Deprecated]: syz.0.3314 (pid 18078) Use of int in max_burst socket option deprecated.
[  511.137202][T18078] Use struct sctp_assoc_value instead
[  511.411723][ T5836] Bluetooth: hci0: command tx timeout
[  511.450111][T18083] netlink: 'syz.2.3316': attribute type 1 has an invalid length.
[  511.459765][ T3469] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  511.530968][ T3469] dvmrp6 (unregistering): left allmulticast mode
[  511.687434][ T3469] bridge0 (unregistering): left allmulticast mode
[  511.889038][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.909427][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.934124][ T3469] bond0 (unregistering): Released all slaves
[  511.941444][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  511.949495][    C0] lec:lec_tx_timeout: lec0
[  512.159507][ T3469] bond1 (unregistering): (slave bond2): Releasing backup interface
[  512.168299][ T3469] bond1 (unregistering): Released all slaves
[  512.288408][ T3469] bond2 (unregistering): Released all slaves
[  512.412443][ T3469] bond3 (unregistering): left allmulticast mode
[  512.418818][ T3469] bond3 (unregistering): left promiscuous mode
[  512.437103][ T3469] team0: Port device macvlan3 removed
[  512.448428][ T3469] bond3 (unregistering): Released all slaves
[  512.464988][ T3469] bond4 (unregistering): Released all slaves
[  512.478204][ T3469] bond5 (unregistering): Released all slaves
[  512.604528][ T3469] bond6 (unregistering): Released all slaves
[  512.726326][ T3469] bond7 (unregistering): Released all slaves
[  512.739584][ T3469] bond8 (unregistering): Released all slaves
[  512.864372][ T3469] bond9 (unregistering): Released all slaves
[  512.941734][T17987] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.959278][T17987] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.982873][T17987] bridge_slave_0: entered allmulticast mode
[  513.007086][T17987] bridge_slave_0: entered promiscuous mode
[  513.033548][T17987] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.046816][T17987] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.055293][T17987] bridge_slave_1: entered allmulticast mode
[  513.073694][T17987] bridge_slave_1: entered promiscuous mode
[  513.181510][ T3469] �9: left promiscuous mode
[  513.261201][T18114] openvswitch: netlink: Multiple metadata blocks provided
[  513.336571][   T13] tipc: Subscription rejected, illegal request
[  513.415533][T17987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.469376][ T3469] IPVS: stopping master sync thread 7590 ...
[  513.481606][ T5836] Bluetooth: hci0: command tx timeout
[  513.504228][T17987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.552442][T18129] 
s5���: renamed from vlan1
[  513.581841][T18133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3328'.
[  513.632887][T18133] netlink: zone id is out of range
[  513.638102][T18133] netlink: zone id is out of range
[  513.673573][T18133] netlink: zone id is out of range
[  513.678754][T18133] netlink: zone id is out of range
[  513.695771][T18133] netlink: zone id is out of range
[  513.701321][T18124] wireguard0: entered promiscuous mode
[  513.707814][T18133] netlink: zone id is out of range
[  513.728084][T18124] wireguard0: entered allmulticast mode
[  513.745825][T18133] netlink: zone id is out of range
[  513.776619][T18133] netlink: set zone limit has 4 unknown bytes
[  513.988707][T18147] netlink: 'syz.0.3329': attribute type 2 has an invalid length.
[  514.238216][T17987] team0: Port device team_slave_0 added
[  514.273595][T17987] team0: Port device team_slave_1 added
[  514.537043][T18172] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0
[  514.565304][T17987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.581528][T17987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.614428][T17987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.704442][T17987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.741560][T17987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.797897][T17987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.825035][T18189] netlink: 'syz.3.3340': attribute type 1 has an invalid length.
[  515.047921][T17987] hsr_slave_0: entered promiscuous mode
[  515.062227][T17987] hsr_slave_1: entered promiscuous mode
[  515.069126][T17987] debugfs: 'hsr0' already exists in 'hsr'
[  515.075578][T17987] Cannot create hsr debugfs directory
[  515.285257][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'.
[  515.333737][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'.
[  515.365283][T18202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3345'.
[  515.566434][ T5836] Bluetooth: hci0: command tx timeout
[  515.695296][T18221] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3349'.
[  515.780027][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'.
[  515.834256][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'.
[  515.871348][T18237] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3352'.
[  516.046719][T18234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.055557][T18244] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3354'.
[  516.083042][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'.
[  516.099453][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3355'.
[  516.204409][T18238] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.212101][T18238] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.303330][ T3469] hsr_slave_0: left promiscuous mode
[  516.325354][T18254] Cannot find add_set index 65532 as target
[  516.337329][ T3469] hsr_slave_1: left promiscuous mode
[  516.344727][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.370892][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.393055][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.405221][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.445718][ T3469] veth1_vlan: left allmulticast mode
[  516.451624][ T3469] veth0_macvtap: left allmulticast mode
[  516.461025][ T3469] veth1_vlan: left promiscuous mode
[  516.535295][T18259] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  517.079950][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  517.441998][ T3469] team0 (unregistering): Port device dummy0 removed
[  517.929929][T18274] syzkaller0: entered promiscuous mode
[  517.952103][T18274] syzkaller0: entered allmulticast mode
[  518.418311][T18297] netlink: 'syz.4.3369': attribute type 11 has an invalid length.
[  518.467002][ T3469] IPVS: stop unused estimator thread 0...
[  518.695804][T18303] syzkaller0: entered allmulticast mode
[  518.738993][T18303] sctp: [Deprecated]: syz.3.3370 (pid 18303) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.738993][T18303] Use struct sctp_sack_info instead
[  518.958043][T17987] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  519.240329][T17987] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  519.266818][T17987] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  519.318283][T17987] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  519.475196][T18357] macvtap1: entered allmulticast mode
[  519.481021][T18357] veth0_macvtap: entered allmulticast mode
[  519.737500][T18376] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  519.867596][T18383] sctp: [Deprecated]: syz.4.3386 (pid 18383) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.867596][T18383] Use struct sctp_sack_info instead
[  522.200810][T18428] __nla_validate_parse: 14 callbacks suppressed
[  522.200830][T18428] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3390'.
[  522.241335][T18426] netlink: 'syz.0.3389': attribute type 13 has an invalid length.
[  522.257237][T18426] gretap0: refused to change device tx_queue_len
[  522.263839][T18347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.272926][T18426] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  522.324924][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3389'.
[  522.547036][T17987] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.580754][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'.
[  522.590408][T17987] 8021q: adding VLAN 0 to HW filter on device team0
[  522.609004][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3395'.
[  522.620468][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3395'.
[  522.649648][T18445] xt_hashlimit: size too large, truncated to 1048576
[  522.678340][T18438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.748656][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.756119][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.770161][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.777298][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.790688][T18448] veth0_macvtap: left allmulticast mode
[  522.796825][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'.
[  522.826854][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'.
[  523.264474][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.283181][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.510524][T17987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.575903][T18481] syzkaller1: tun_chr_ioctl cmd 1074025677
[  523.589123][T18481] syzkaller1: Refused to change device type
[  523.736975][T18492] bridge1: entered promiscuous mode
[  523.744571][T18492] bridge1: entered allmulticast mode
[  523.815904][T17987] veth0_vlan: entered promiscuous mode
[  523.855686][T17987] veth1_vlan: entered promiscuous mode
[  523.965411][T17987] veth0_macvtap: entered promiscuous mode
[  524.008343][T17987] veth1_macvtap: entered promiscuous mode
[  524.087536][T17987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.161313][T17987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.239879][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.269985][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.286775][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'.
[  524.309811][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.410180][T18526] 8021q: adding VLAN 0 to HW filter on device bond1
[  524.435031][   T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.451789][T18439] Bluetooth: hci0: command 0x0405 tx timeout
[  524.792703][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.813614][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.941104][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.951853][T18555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3426'.
[  524.982213][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.992862][T18561] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3426'.
[  525.137761][T18564] syzkaller1: entered promiscuous mode
[  525.153981][T18564] syzkaller1: entered allmulticast mode
[  526.642307][T18630] x_tables: duplicate underflow at hook 3
[  526.820674][T18638] netlink: 'syz.0.3450': attribute type 10 has an invalid length.
[  527.443800][T18681] __nla_validate_parse: 8 callbacks suppressed
[  527.443821][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'.
[  527.605998][   T30] audit: type=1107 audit(1770697450.845:4): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�7,��d9j�ݢ�Z9!�582���m�_�ƟFm@��G鍬�<ٜs�t�2@�z/��۟��(uej;_��M�o��'
[  527.663382][T18696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3467'.
[  527.821069][T18704] macsec2: entered promiscuous mode
[  527.828887][T18702] netlink: 'syz.4.3470': attribute type 39 has an invalid length.
[  527.837074][T18704] pim6reg1: entered promiscuous mode
[  527.846119][T18704] pim6reg1: entered allmulticast mode
[  527.979917][T18712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3474'.
[  528.015327][T18712] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3474'.
[  528.030840][T18712] netlink: 'syz.2.3474': attribute type 6 has an invalid length.
[  528.064773][T18712] netlink: 'syz.2.3474': attribute type 5 has an invalid length.
[  528.081755][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'.
[  528.091594][T18712] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3474'.
[  528.108440][T18716] batman_adv: batadv0: Adding interface: dummy0
[  528.121628][T18716] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.158333][T18716] batman_adv: batadv0: Interface activated: dummy0
[  528.236842][T18722] batadv0: mtu less than device minimum
[  528.253417][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.265898][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.277988][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.289981][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.302207][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.314146][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.314648][T18730] netlink: 'syz.4.3481': attribute type 3 has an invalid length.
[  528.326191][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.345543][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.358191][T18722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.643886][T18746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3486'.
[  529.276082][T18772] ip6gre1: entered allmulticast mode
[  529.395032][T18786] siw: device registration error -23
[  529.522832][T18792] syzkaller1: entered promiscuous mode
[  529.528770][T18792] syzkaller1: entered allmulticast mode
[  529.626477][T18800] xt_hashlimit: size too large, truncated to 1048576
[  529.952273][T18816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3508'.
[  530.100211][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'.
[  530.159743][T18817] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3507'.
[  530.355848][T18841] netlink: 'syz.2.3516': attribute type 21 has an invalid length.
[  530.562715][T18847] netlink: 'syz.3.3517': attribute type 5 has an invalid length.
[  530.607439][T18853] netlink: 'syz.2.3520': attribute type 2 has an invalid length.
[  530.641585][T18853] netlink: 'syz.2.3520': attribute type 2 has an invalid length.
[  530.672575][T18853] netlink: 'syz.2.3520': attribute type 1 has an invalid length.
[  530.706488][T18853] netlink: 'syz.2.3520': attribute type 1 has an invalid length.
[  532.334962][T18933] syzkaller0: entered promiscuous mode
[  532.348557][T18933] syzkaller0: entered allmulticast mode
[  532.365208][T18932] tipc: Started in network mode
[  532.392930][T18932] tipc: Node identity c287fe348f66, cluster identity 4711
[  532.434062][T18932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.436998][T18939] xt_ecn: cannot match TCP bits for non-tcp packets
[  532.472072][T18937] __nla_validate_parse: 29 callbacks suppressed
[  532.472094][T18937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3544'.
[  532.524282][T18932] tipc: Resetting bearer <eth:syzkaller0>
[  532.660046][T18932] tipc: Disabling bearer <eth:syzkaller0>
[  532.748398][T18945] bond1: entered promiscuous mode
[  532.772631][T18945] bond1: entered allmulticast mode
[  532.779878][T18945] 8021q: adding VLAN 0 to HW filter on device bond1
[  532.956774][T18965] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3554'.
[  532.986428][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'.
[  533.042279][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'.
[  533.052974][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'.
[  533.135982][T18963] 8021q: adding VLAN 0 to HW filter on device bond1
[  533.194113][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3558'.
[  533.244134][T18976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3558'.
[  533.444760][T18986] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3563'.
[  533.463722][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'.
[  533.503886][T18988] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3564'.
[  533.633983][T18996] nbd: must specify a size in bytes for the device
[  534.019608][T19014] hsr_slave_0: left promiscuous mode
[  534.052686][T19014] hsr_slave_1: left promiscuous mode
[  534.287878][T18439] Bluetooth: hci5: command 0x0406 tx timeout
[  534.485834][T19046] validate_nla: 2 callbacks suppressed
[  534.485853][T19046] netlink: 'syz.3.3580': attribute type 10 has an invalid length.
[  534.500992][T19046] bridge0: port 3(team0) entered blocking state
[  534.507982][T19046] bridge0: port 3(team0) entered disabled state
[  534.515858][T19046] team0: entered allmulticast mode
[  534.522534][T19046] team_slave_0: entered allmulticast mode
[  534.528736][T19046] team_slave_1: entered allmulticast mode
[  534.555594][T19048] net_ratelimit: 12 callbacks suppressed
[  534.555615][T19048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.587062][T19046] team0: entered promiscuous mode
[  534.611790][T19046] team_slave_0: entered promiscuous mode
[  534.627143][T19046] team_slave_1: entered promiscuous mode
[  534.728974][T19053] Bluetooth: MGMT ver 1.23
[  534.785831][T19053] syzkaller0: entered promiscuous mode
[  534.792713][T19053] syzkaller0: entered allmulticast mode
[  535.052762][T19071] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  535.062051][T19071] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  535.092156][T19074] netlink: 'syz.4.3591': attribute type 6 has an invalid length.
[  535.110736][T19074] netlink: 'syz.4.3591': attribute type 6 has an invalid length.
[  535.574047][T19099] netlink: 'syz.3.3597': attribute type 21 has an invalid length.
[  535.599586][T19098] pim6reg1: entered promiscuous mode
[  535.612518][T19098] pim6reg1: entered allmulticast mode
[  535.704943][T19106] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  536.226416][T19134] netlink: 'syz.3.3608': attribute type 4 has an invalid length.
[  536.283911][T19137] netlink: 'syz.3.3608': attribute type 4 has an invalid length.
[  536.662174][T19155] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  536.675027][T19160] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0
[  537.150619][T19170] netlink: 'syz.1.3618': attribute type 1 has an invalid length.
[  537.345290][T19179] syzkaller0: entered promiscuous mode
[  537.363215][T19179] syzkaller0: entered allmulticast mode
[  538.604463][T18439] Bluetooth: hci0: command 0x0405 tx timeout
[  539.354811][T19191] macvtap1: entered allmulticast mode
[  539.360511][T19191] veth0_macvtap: entered allmulticast mode
[  540.171785][T19250] __nla_validate_parse: 13 callbacks suppressed
[  540.171809][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'.
[  540.217266][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'.
[  540.390750][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'.
[  540.470628][T19263] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3646'.
[  540.532826][T19259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  540.565792][T19259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.586381][T19259] bond0 (unregistering): (slave team0): Releasing backup interface
[  540.596805][T19259] bond0 (unregistering): Released all slaves
[  540.616744][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'.
[  540.653954][T19267] openvswitch: netlink: Message has 8 unknown bytes.
[  541.114003][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3657'.
[  541.612193][T19321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3665'.
[  541.749790][T19328] tipc: Started in network mode
[  541.788288][T19328] tipc: Node identity ca8855884c3f, cluster identity 4711
[  541.824363][T19328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.873121][T19333] syzkaller0: entered promiscuous mode
[  541.885900][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  541.906847][T19333] syzkaller0: entered allmulticast mode
[  541.941271][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3670'.
[  542.030248][T19344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.169516][T19328] tipc: Resetting bearer <eth:syzkaller0>
[  542.180121][T19327] tipc: Resetting bearer <eth:syzkaller0>
[  542.225034][T19327] tipc: Disabling bearer <eth:syzkaller0>
[  542.270459][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'.
[  542.738331][T19376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  542.745795][T19376] IPv6: NLM_F_CREATE should be set when creating new route
[  543.206828][T19410] bond0: option resend_igmp: invalid value (32767)
[  543.216496][T19410] bond0: option resend_igmp: allowed values 0 - 255
[  543.265506][T19410] bond0 (unregistering): Released all slaves
[  543.569142][T19438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.639274][T19441] openvswitch: netlink: Flow key attribute not present in set flow.
[  543.839650][T19446] macvtap2: entered promiscuous mode
[  543.845565][T19446] vlan0: entered promiscuous mode
[  543.851148][T19446] macvtap2: entered allmulticast mode
[  543.856958][T19446] vlan0: entered allmulticast mode
[  543.868582][T19446] veth0_vlan: entered allmulticast mode
[  543.916082][T19453] No such timeout policy "syz0"
[  544.047842][T19459] syzkaller0: entered promiscuous mode
[  544.057506][T19459] syzkaller0: entered allmulticast mode
[  544.082178][T19459] nbd: socks must be embedded in a SOCK_ITEM attr
[  544.135456][T19465] netlink: 'syz.4.3710': attribute type 1 has an invalid length.
[  544.260008][T19467] bond0: Removing last arp target with arp_interval on
[  544.271836][T19474] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  544.463897][T19485] netlink: 'syz.2.3718': attribute type 1 has an invalid length.
[  544.588228][ T3469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.612070][ T3469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.630363][ T3469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.646567][ T3469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.848413][T19509] xt_hashlimit: size too large, truncated to 1048576
[  545.418368][T19541] __nla_validate_parse: 15 callbacks suppressed
[  545.418392][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'.
[  545.484646][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3736'.
[  545.541263][ T3498] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.542064][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'.
[  545.569357][ T3498] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.577829][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3736'.
[  545.587935][ T3498] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.587979][ T3498] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.659353][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3740'.
[  545.714270][T19559] syzkaller0: entered promiscuous mode
[  545.720053][T19559] syzkaller0: entered allmulticast mode
[  545.772851][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'.
[  545.965658][T19575] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3745'.
[  545.969670][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'.
[  546.244834][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3749'.
[  546.279104][T19589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'.
[  546.299313][T19589] bridge_slave_0: invalid flags given to default FDB implementation
[  546.859118][T19627] 8021q: adding VLAN 0 to HW filter on device bond1
[  546.873672][T19625] tipc: Can't bind to reserved service type 1
[  546.886026][T19612] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  546.913514][T19612] bond1: (slave macvlan4): making interface the new active one
[  546.927199][T19612] bond1: (slave macvlan4): Enslaving as an active interface with an up link
[  546.936490][ T5998] tipc: Subscription rejected, illegal request
[  547.260193][T19653] Can't find ip_set type bitmap:po9p
[  547.314075][T19663] netlink: 'syz.1.3770': attribute type 13 has an invalid length.
[  548.159131][T19711] netlink: 'syz.3.3778': attribute type 26 has an invalid length.
[  548.179345][T19711] tipc: Enabled bearer <udp:s>, priority 10
[  548.406063][T19728] syzkaller1: entered promiscuous mode
[  548.413804][T19728] syzkaller1: entered allmulticast mode
[  548.420877][T19728] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  548.486830][T19736] netlink: 'syz.2.3785': attribute type 16 has an invalid length.
[  548.502821][T19736] netlink: 'syz.2.3785': attribute type 3 has an invalid length.
[  548.539902][T19738] netlink: 'syz.3.3787': attribute type 6 has an invalid length.
[  548.549732][T19738] netlink: 'syz.3.3787': attribute type 5 has an invalid length.
[  548.861986][T19750] netlink: 'syz.4.3792': attribute type 1 has an invalid length.
[  548.952995][T19750] bond2: entered promiscuous mode
[  548.982181][T19750] 8021q: adding VLAN 0 to HW filter on device bond2
[  549.183328][T19752] bond2: (slave bridge2): making interface the new active one
[  549.202212][T19752] bridge2: entered promiscuous mode
[  549.222903][T19752] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  549.293419][ T5843] tipc: Node number set to 2105939800
[  550.033317][T19795] netlink: 'syz.4.3806': attribute type 10 has an invalid length.
[  550.085594][ T5918] IPVS: starting estimator thread 0...
[  550.142663][T19802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.150169][T19802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.172451][T19802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.179997][T19802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.181969][T19801] IPVS: using max 28 ests per chain, 67200 per kthread
[  550.233335][T19790] "syz.2.3805" (19790) uses obsolete ecb(arc4) skcipher
[  550.321808][T19813] syzkaller1: entered promiscuous mode
[  550.327604][T19813] syzkaller1: entered allmulticast mode
[  550.565419][T19819] __nla_validate_parse: 24 callbacks suppressed
[  550.566622][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'.
[  550.642218][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.672024][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.691766][T19826] Cannot find set identified by id 65534 to match
[  550.709634][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.725403][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.744373][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.762723][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.779031][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.797730][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  550.819815][T19825] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3813'.
[  551.139092][ T1096] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c
[  551.894353][T19885] macvtap1: entered promiscuous mode
[  551.900725][T19885] macvtap1: entered allmulticast mode
[  551.906942][T19885] veth1_vlan: entered allmulticast mode
[  551.927641][T19887] macvtap2: entered promiscuous mode
[  551.935424][T19887] macvtap2: entered allmulticast mode
[  551.969447][T19890] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  551.980725][T19890] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  552.045148][T19894] delete_channel: no stack
[  552.054781][T19894] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  552.071796][T19894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.188772][T19898] syzkaller0: entered promiscuous mode
[  552.196736][T19898] syzkaller0: entered allmulticast mode
[  552.306298][T19860] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  552.312705][T19860] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  552.450360][T19860] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  552.456997][T19860] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  552.462341][T19917] syzkaller1: entered promiscuous mode
[  552.470720][T19917] syzkaller1: entered allmulticast mode
[  552.521964][T19860] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  552.538490][T19860] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  552.545683][T19917] dvmrp0: entered allmulticast mode
[  552.693024][T19860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  552.699091][T19860] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  552.733686][T19860] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  552.756333][T19860] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  553.354107][T19963] nbd: must specify at least one socket
[  554.041007][T20000] netlink: 'syz.2.3860': attribute type 1 has an invalid length.
[  555.938046][T19992] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  556.095991][T20027] netlink: 'syz.3.3867': attribute type 1 has an invalid length.
[  556.126124][T20030] netlink: 'syz.4.3869': attribute type 4 has an invalid length.
[  556.195034][T20035] netlink: 'syz.4.3869': attribute type 4 has an invalid length.
[  556.197023][T20027] 8021q: adding VLAN 0 to HW filter on device bond2
[  556.309949][T20040] netlink: 'syz.1.3870': attribute type 3 has an invalid length.
[  556.386174][T20027] vlan3: entered promiscuous mode
[  556.445687][T20027] bond2: entered promiscuous mode
[  556.451141][T20027] vlan3: entered allmulticast mode
[  556.509158][T20027] bond2: entered allmulticast mode
[  556.776763][T20075] __nla_validate_parse: 29 callbacks suppressed
[  556.776786][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3877'.
[  556.818212][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'.
[  556.851259][T20078] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3879'.
[  556.892570][T20078] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3879'.
[  556.906877][T20078] netlink: 'syz.3.3879': attribute type 1 has an invalid length.
[  556.950105][T20075] bond1: entered promiscuous mode
[  556.956146][T20075] bond1: entered allmulticast mode
[  556.963162][T20075] 8021q: adding VLAN 0 to HW filter on device bond1
[  557.152664][T20083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.382168][T20083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.559787][T20083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.695576][T20083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.866706][T20138] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3895'.
[  557.883655][T20139] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3895'.
[  557.926428][ T3536] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  557.938568][ T3536] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  557.970642][T20135] syzkaller0: entered promiscuous mode
[  557.991770][T20135] syzkaller0: entered allmulticast mode
[  558.006059][ T3536] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.248836][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.317837][T20158] syzkaller0: entered promiscuous mode
[  558.326634][T20158] syzkaller0: entered allmulticast mode
[  558.988558][T20207] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3916'.
[  558.998522][T20207] netlink: Conntrack attr has 3 unknown bytes
[  559.008612][T20207] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3916'.
[  559.018763][T20207] netlink: Conntrack attr has 3 unknown bytes
[  559.149103][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3917'.
[  559.347581][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'.
[  559.496769][T20235] netlink: 'syz.0.3926': attribute type 1 has an invalid length.
[  559.582864][T20235] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.657944][T20247] bond2: (slave gretap1): making interface the new active one
[  559.679691][T20247] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  560.127566][T20274] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  560.174350][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.184278][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.195396][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.206825][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.216932][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.227459][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.238015][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.332934][T20294] netlink: 'syz.2.3941': attribute type 3 has an invalid length.
[  560.344437][T20295] netlink: 'syz.2.3941': attribute type 3 has an invalid length.
[  560.489868][T20300] syzkaller0: entered promiscuous mode
[  560.511511][T20300] syzkaller0: entered allmulticast mode
[  560.990117][T20332] Bluetooth: MGMT ver 1.23
[  561.010228][T20332] netlink: 'syz.4.3953': attribute type 1 has an invalid length.
[  561.025097][T20332] netlink: 'syz.4.3953': attribute type 4 has an invalid length.
[  561.309661][T20349] netlink: 'syz.3.3960': attribute type 1 has an invalid length.
[  561.324116][T20349] netlink: 'syz.3.3960': attribute type 1 has an invalid length.
[  561.429801][   T30] audit: type=1800 audit(1770697484.665:5): pid=20353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3959" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1278 res=0 errno=0
[  561.487934][T20363] netlink: 'syz.2.3963': attribute type 1 has an invalid length.
[  561.505203][T20363] netlink: 'syz.2.3963': attribute type 2 has an invalid length.
[  561.572501][T20373] netlink: 'syz.3.3964': attribute type 1 has an invalid length.
[  561.895682][T20387] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001
[  561.913259][T20387] sctp: [Deprecated]: syz.4.3971 (pid 20387) Use of int in max_burst socket option.
[  561.913259][T20387] Use struct sctp_assoc_value instead
[  561.968050][T20387] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  562.033766][T20394] __nla_validate_parse: 19 callbacks suppressed
[  562.033789][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'.
[  562.051017][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'.
[  562.103839][T20400] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3972'.
[  562.130755][T20394] syzkaller1: entered promiscuous mode
[  562.136592][T20394] syzkaller1: entered allmulticast mode
[  562.153507][T20402] netlink: 'syz.3.3975': attribute type 1 has an invalid length.
[  562.198332][T20402] bond3: (slave gretap1): making interface the new active one
[  562.207229][T20402] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  562.482608][T20415] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[  562.620613][T20427] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  562.653325][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'.
[  562.929612][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  563.216556][T20462] netlink: 'syz.4.3992': attribute type 10 has an invalid length.
[  563.305350][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'.
[  563.321608][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'.
[  563.416118][T20472] netlink: 'syz.4.3996': attribute type 1 has an invalid length.
[  563.470748][T20432] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  563.626788][T20479] gtp0: entered promiscuous mode
[  563.644630][T20479] gtp0: entered allmulticast mode
[  563.803309][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'.
[  563.974623][T20504] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4005'.
[  564.168844][T20519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4007'.
[  564.188498][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4007'.
[  564.746287][T20546] IPv6: sit1: Disabled Multicast RS
[  565.078326][T20506] lec:lec_atm_close: lec0: Shut down!
[  565.502653][T20595] xt_hashlimit: size too large, truncated to 1048576
[  565.733186][T20601] syzkaller0: entered promiscuous mode
[  565.738931][T20601] syzkaller0: entered allmulticast mode
[  568.190404][T20639] __nla_validate_parse: 34 callbacks suppressed
[  568.190427][T20639] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4040'.
[  568.251874][T20643] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4042'.
[  568.380408][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4043'.
[  568.570066][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4050'.
[  568.600694][T20666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4051'.
[  568.830871][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'.
[  568.963903][T20692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4055'.
[  569.106264][T20700] netlink: 'syz.2.4055': attribute type 33 has an invalid length.
[  569.198038][T20700] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  569.236744][T20700] bond2 (unregistering): Released all slaves
[  569.887035][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4070'.
[  569.923633][T20739] lo speed is unknown, defaulting to 1000
[  570.081475][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  570.089650][    C0] lec:lec_tx_timeout: lec0
[  570.094717][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  570.208694][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4077'.
[  570.426753][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4079'.
[  570.565597][T20752] lo speed is unknown, defaulting to 1000
[  570.567375][T20773] netlink: 'syz.1.4080': attribute type 4 has an invalid length.
[  570.704737][T20784] netlink: 'syz.3.4085': attribute type 1 has an invalid length.
[  570.839465][T20794] : entered promiscuous mode
[  571.171738][T20797] lo speed is unknown, defaulting to 1000
[  571.282764][T20815] syzkaller1: entered promiscuous mode
[  571.306964][T20815] syzkaller1: entered allmulticast mode
[  571.650500][T20836] net_ratelimit: 28 callbacks suppressed
[  571.650522][T20836] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  572.057603][T20867] tipc: Invalid UDP bearer configuration
[  572.057662][T20867] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  572.117452][T20871] tipc: Invalid UDP bearer configuration
[  572.117508][T20871] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  572.170772][T20874] openvswitch: netlink: Unknown nsh attribute 0
[  572.927740][T20915] netlink: 'syz.3.4115': attribute type 3 has an invalid length.
[  572.961121][T20915] netlink: 'syz.3.4115': attribute type 29 has an invalid length.
[  572.982756][T20916] netlink: 'syz.3.4115': attribute type 29 has an invalid length.
[  573.153683][T20932] smc: net device team0 applied user defined pnetid SYZ2
[  573.302071][T20938] __nla_validate_parse: 12 callbacks suppressed
[  573.302094][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4122'.
[  573.325193][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'.
[  573.435132][T20951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'.
[  573.646605][T20961] IPv6: NLM_F_CREATE should be specified when creating new route
[  573.662597][T20958] netlink: 'syz.1.4130': attribute type 2 has an invalid length.
[  573.681774][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'.
[  573.711621][T20960] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  573.724986][T20965] netlink: 'syz.1.4130': attribute type 2 has an invalid length.
[  573.734332][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'.
[  573.774851][T20963] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  573.788418][T20963] bond0: (slave gre0): Error -95 calling set_mac_address
[  573.837888][T20968] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  573.888285][T20978] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004
[  573.897207][T20980] bond0: Caught tx_queue_len zero misconfig
[  574.014226][T20973] bond0: (slave rose0): Enslaving as an active interface with an up link
[  574.093066][T20987] netlink: 'syz.0.4137': attribute type 1 has an invalid length.
[  574.117705][T20987] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4137'.
[  574.181440][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'.
[  574.378923][T20997] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  574.568675][T21007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4143'.
[  574.583873][T21012] tap0: tun_chr_ioctl cmd 1074025698
[  574.693594][T21016] openvswitch: netlink: Key 2 has unexpected len 8 expected 4
[  574.801210][T21018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.808546][T21018] IPv6: NLM_F_CREATE should be set when creating new route
[  574.815879][T21018] IPv6: NLM_F_CREATE should be set when creating new route
[  574.823195][T21018] IPv6: NLM_F_CREATE should be set when creating new route
[  574.869217][T21027] openvswitch: netlink: Flow actions attr not present in new flow.
[  574.994073][T21032] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4151'.
[  575.029733][T21032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4151'.
[  575.380794][T21017] delete_channel: no stack
[  575.878064][T21127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.887103][T21123] syzkaller0: entered promiscuous mode
[  575.888084][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  575.902135][T21123] syzkaller0: entered allmulticast mode
[  575.902145][    C0] lec:lec_tx_timeout: lec0
[  576.137775][T21139] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  576.318033][T21153] team0 (unregistering): Port device team_slave_0 removed
[  576.329303][T21153] team0 (unregistering): Port device team_slave_1 removed
[  576.624918][T21168] netlink: 'syz.4.4181': attribute type 1 has an invalid length.
[  576.766627][T21178] bond4: (slave gretap2): making interface the new active one
[  576.777067][T21178] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  576.797483][T21170] lo speed is unknown, defaulting to 1000
[  578.246654][T21261] netlink: 'syz.2.4206': attribute type 1 has an invalid length.
[  578.387327][T21261] 8021q: adding VLAN 0 to HW filter on device bond2
[  578.699807][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.722356][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.757391][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.767224][T21304] __nla_validate_parse: 8 callbacks suppressed
[  578.767242][T21304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4214'.
[  578.775502][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.803361][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.818271][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.833832][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.849045][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.864896][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  578.879844][T21291] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff
[  579.148712][T21312] netlink: 'syz.0.4217': attribute type 1 has an invalid length.
[  580.775655][T21324] netlink: 'syz.0.4219': attribute type 1 has an invalid length.
[  580.934707][T21337] delete_channel: no stack
[  581.674694][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.700574][T21351] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.723394][T21351] netlink: 'syz.3.4229': attribute type 5 has an invalid length.
[  581.734806][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.749868][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.785176][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.794766][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.889799][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'.
[  581.898068][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'.
[  581.911973][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'.
[  582.350501][T21365] team0: Port device team_slave_0 removed
[  582.854296][T21410] netlink: 'syz.3.4247': attribute type 1 has an invalid length.
[  582.899870][T21410] netlink: 'syz.3.4247': attribute type 2 has an invalid length.
[  582.940835][T21410] netlink: 'syz.3.4247': attribute type 2 has an invalid length.
[  582.974892][T21410] netlink: 'syz.3.4247': attribute type 2 has an invalid length.
[  583.158595][T21423] syzkaller1: entered promiscuous mode
[  583.164970][T21423] syzkaller1: entered allmulticast mode
[  583.276406][T21419] syzkaller0: entered promiscuous mode
[  583.282728][T21419] syzkaller0: entered allmulticast mode
[  585.423057][T21459] netlink: 'syz.1.4260': attribute type 1 has an invalid length.
[  585.518423][T21459] 8021q: adding VLAN 0 to HW filter on device bond2
[  585.525688][T21468] xt_cgroup: path and classid specified
[  585.556830][T21467] __nla_validate_parse: 8 callbacks suppressed
[  585.556849][T21467] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4264'.
[  585.573252][T21464] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4261'.
[  585.612295][T21459] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  585.624718][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4263'.
[  585.928973][T21491] net_ratelimit: 33018 callbacks suppressed
[  585.928995][T21491] openvswitch: netlink: Flow actions attr not present in new flow.
[  585.951960][T21492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4272'.
[  586.216192][T21513] lo: Caught tx_queue_len zero misconfig
[  586.530778][T21529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.959289][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4293'.
[  586.978129][T21556] netlink: 'syz.4.4292': attribute type 1 has an invalid length.
[  587.107267][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4294'.
[  587.272203][T21573] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4296'.
[  587.553449][T21589] netlink: 'syz.1.4302': attribute type 1 has an invalid length.
[  587.565318][T21589] netlink: 'syz.1.4302': attribute type 1 has an invalid length.
[  587.681238][T21591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4303'.
[  587.748205][T21591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4303'.
[  587.875584][T21608] IPVS: length: 33 != 24
[  588.218248][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4312'.
[  588.262127][T21628] netlink: 'syz.4.4315': attribute type 1 has an invalid length.
[  588.272084][T21626] netlink: 'syz.1.4314': attribute type 12 has an invalid length.
[  588.323475][T21637] xt_socket: unknown flags 0x50
[  588.339583][T21628] 8021q: adding VLAN 0 to HW filter on device bond6
[  588.395131][T21626] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING
[  588.646016][T21652] openvswitch: netlink: Flow key attr not present in new flow.
[  588.774370][T21657] netlink: 'syz.3.4321': attribute type 1 has an invalid length.
[  588.782910][T21657] netlink: 'syz.3.4321': attribute type 4 has an invalid length.
[  589.054392][T21674] syzkaller0: entered promiscuous mode
[  589.066835][T21674] syzkaller0: entered allmulticast mode
[  589.113558][T21676] netlink: 'syz.3.4327': attribute type 1 has an invalid length.
[  589.172635][T21676] 8021q: adding VLAN 0 to HW filter on device bond4
[  589.205224][T21680] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  589.229768][T21680] team1: entered promiscuous mode
[  589.240385][T21680] team1: entered allmulticast mode
[  589.365542][T21688] vlan4: entered promiscuous mode
[  589.370790][T21688] vlan4: entered allmulticast mode
[  589.376100][T21688] hsr_slave_1: entered allmulticast mode
[  589.675783][T21707] xt_limit: Overflow, try lower: 271964/0
[  589.890081][T21719] netlink: 'syz.1.4341': attribute type 1 has an invalid length.
[  590.103278][T21734] 8021q: VLANs not supported on lo
[  590.398133][T21758] netlink: 'syz.1.4350': attribute type 6 has an invalid length.
[  590.669028][T21771] openvswitch: netlink: Key type 295 is out of range max 32
[  590.740729][T21773] bond3: invalid ARP target 0.0.0.0 specified for addition
[  590.748719][T21773] bond3: option arp_ip_target: invalid value (0)
[  590.799194][T21773] bond3 (unregistering): Released all slaves
[  591.068843][T21787] __nla_validate_parse: 15 callbacks suppressed
[  591.068865][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'.
[  591.116299][T21782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4356'.
[  591.119335][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4356'.
[  591.128706][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'.
[  591.207782][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4359'.
[  591.230739][T21792] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4359'.
[  591.315238][T21800] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4361'.
[  591.337108][   T30] audit: type=1804 audit(1770697514.575:6): pid=21800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4361" name="/newroot/342/cgroup.controllers" dev="tmpfs" ino=1755 res=1 errno=0
[  591.373874][T21800] 
@0�: renamed from bond_slave_1
[  591.388410][   T30] audit: type=1800 audit(1770697514.575:7): pid=21800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4361" name="cgroup.controllers" dev="tmpfs" ino=1755 res=0 errno=0
[  591.458358][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'.
[  591.493384][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'.
[  592.463109][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4385'.
[  592.502679][T21869] syzkaller0: entered promiscuous mode
[  592.508381][T21869] syzkaller0: entered allmulticast mode
[  592.537739][T21862] validate_nla: 8 callbacks suppressed
[  592.537762][T21862] netlink: 'syz.2.4382': attribute type 10 has an invalid length.
[  592.565296][T21862] dummy0: entered promiscuous mode
[  592.575007][T21862] bridge0: port 3(dummy0) entered blocking state
[  592.592092][T21862] bridge0: port 3(dummy0) entered disabled state
[  592.599352][T21862] dummy0: entered allmulticast mode
[  592.934851][T21896] bridge3: the hash_elasticity option has been deprecated and is always 16
[  592.950065][T21897] bridge4: the hash_elasticity option has been deprecated and is always 16
[  593.689114][T21934] openvswitch: netlink: Key type 220 is out of range max 32
[  593.800061][T21938] netlink: 'syz.1.4400': attribute type 1 has an invalid length.
[  593.857753][T21938] bond3: entered promiscuous mode
[  593.863810][T21938] 8021q: adding VLAN 0 to HW filter on device bond3
[  593.865310][T21943] netlink: 'syz.3.4402': attribute type 1 has an invalid length.
[  593.893932][T21938] bond3: (slave bridge1): making interface the new active one
[  593.901686][T21938] bridge1: entered promiscuous mode
[  593.908173][T21938] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  594.009462][T21943] 8021q: adding VLAN 0 to HW filter on device bond5
[  594.179374][T21951] 8021q: adding VLAN 0 to HW filter on device bond7
[  594.503409][T21975] openvswitch: netlink: IP tunnel dst address not specified
[  594.583880][T21987] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  594.950462][T22011] netlink: 'syz.2.4418': attribute type 2 has an invalid length.
[  594.973676][T22011] �9: entered promiscuous mode
[  595.119498][T22016] netlink: 'syz.4.4421': attribute type 1 has an invalid length.
[  595.145724][T22015] syzkaller0: entered promiscuous mode
[  595.152072][T22015] syzkaller0: entered allmulticast mode
[  596.083071][T22080] __nla_validate_parse: 11 callbacks suppressed
[  596.083094][T22080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4439'.
[  596.128225][T22082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.161657][T22082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4440'.
[  596.321231][T22093] netlink: 'syz.2.4444': attribute type 9 has an invalid length.
[  596.330598][T22093] netlink: 'syz.2.4444': attribute type 11 has an invalid length.
[  596.339717][T22093] netlink: 'syz.2.4444': attribute type 12 has an invalid length.
[  596.348548][T22093] netlink: 180848 bytes leftover after parsing attributes in process `syz.2.4444'.
[  596.404438][T22098] netlink: 401 bytes leftover after parsing attributes in process `syz.4.4446'.
[  596.420892][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4446'.
[  596.433971][T22098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4446'.
[  596.444389][T22098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4446'.
[  596.866359][T22128] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  596.977767][T22129] syzkaller0: entered promiscuous mode
[  597.001787][T22129] syzkaller0: entered allmulticast mode
[  597.155771][T22148] netlink: 'syz.2.4461': attribute type 1 has an invalid length.
[  597.156578][T22150] netlink: 'syz.2.4461': attribute type 1 has an invalid length.
[  597.242440][T22148] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  597.248507][T22150] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  597.327266][T22159] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  597.468793][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'.
[  597.543461][T22175] bond3: entered promiscuous mode
[  597.549017][T22175] 8021q: adding VLAN 0 to HW filter on device bond3
[  597.616961][T22183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4471'.
[  597.653576][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4469'.
[  597.767464][T22192] netlink: 'syz.0.4473': attribute type 1 has an invalid length.
[  598.685410][T22236] x_tables: unsorted entry at hook 1
[  598.762836][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  598.925396][T22261] netlink: 'syz.1.4490': attribute type 21 has an invalid length.
[  599.075032][T22269] macvtap3: entered promiscuous mode
[  599.080956][T22269] macvtap3: entered allmulticast mode
[  599.088081][T22269] veth1_vlan: entered allmulticast mode
[  599.795775][T22310] bond7: entered promiscuous mode
[  599.840759][T22314] macvlan2: entered promiscuous mode
[  599.866658][T22314] macvlan2: entered allmulticast mode
[  599.889320][T22314] bond7: (slave macvlan2): Opening slave failed
[  599.994125][T22324] syzkaller0: entered promiscuous mode
[  600.000129][T22324] syzkaller0: entered allmulticast mode
[  600.016100][T22325] ip6tnl1: entered allmulticast mode
[  600.054600][T22332] netlink: 'syz.3.4507': attribute type 21 has an invalid length.
[  601.102367][T22351] __nla_validate_parse: 9 callbacks suppressed
[  601.102389][T22351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4509'.
[  601.997644][T22332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4507'.
[  602.104362][T22343] bond4: entered promiscuous mode
[  602.110137][T22343] 8021q: adding VLAN 0 to HW filter on device bond4
[  602.145916][T22351] ipip1: entered allmulticast mode
[  602.369498][T22371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4517'.
[  602.456655][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'.
[  602.458419][T22371] bond9: entered promiscuous mode
[  602.562259][T22371] 8021q: adding VLAN 0 to HW filter on device bond9
[  602.605710][T22363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4513'.
[  602.870690][T22386] 8021q: adding VLAN 0 to HW filter on device bond9
[  602.949136][T22386] bond9: (slave sit2): The slave device specified does not support setting the MAC address
[  603.015626][T22386] bond9: (slave sit2): Error -95 calling set_mac_address
[  603.212308][T22400] ipvlan0: entered promiscuous mode
[  603.413561][T22410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4522'.
[  603.427670][T22411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4524'.
[  603.505024][T22412] netlink: 'syz.2.4524': attribute type 7 has an invalid length.
[  603.517785][T22411] netlink: 'syz.2.4524': attribute type 7 has an invalid length.
[  603.595285][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.623589][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.642174][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.663850][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.715361][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.735761][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.753850][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.838784][T22426] netlink: 'syz.3.4528': attribute type 16 has an invalid length.
[  603.864666][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'.
[  603.900551][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4529'.
[  603.946309][ T5909] IPVS: starting estimator thread 0...
[  603.955176][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4530'.
[  604.063622][T22437] IPVS: using max 29 ests per chain, 69600 per kthread
[  604.209192][T22447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  604.784216][T22490] netlink: 'syz.3.4547': attribute type 11 has an invalid length.
[  604.789597][T22480] netlink: 'syz.0.4545': attribute type 1 has an invalid length.
[  604.887930][T22476] bond3 (unregistering): Released all slaves
[  604.957898][T22487] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  605.143080][T22506] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  605.294318][T22516] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.301973][T22516] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.486970][T22531] syzkaller0: entered promiscuous mode
[  605.495771][T22531] syzkaller0: entered allmulticast mode
[  605.996302][T22560] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  606.050726][T22556] netlink: 'syz.1.4569': attribute type 1 has an invalid length.
[  606.126784][T22566] __nla_validate_parse: 7 callbacks suppressed
[  606.126804][T22566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4570'.
[  606.769191][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'.
[  606.802158][T22599] bridge0: entered allmulticast mode
[  606.951952][T22607] geneve2: entered promiscuous mode
[  606.981863][T21759] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  607.013116][T21759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  607.065332][T21759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  607.087096][T21755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  607.205413][T22624] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  607.498982][T22638] IPVS: Unknown mcast interface: pimreg0
[  607.737445][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'.
[  607.780564][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'.
[  607.865710][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4600'.
[  607.895479][T22667] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4600'.
[  607.941885][T22667] netlink: Unknown conntrack attr (0)
[  608.004984][T22675] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4602'.
[  608.127597][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4604'.
[  608.350811][T22691] syzkaller0: entered promiscuous mode
[  608.358618][ T5918] Dead loop on virtual device ipvlan1, fix it urgently!
[  608.367412][T22691] syzkaller0: entered allmulticast mode
[  608.423563][ T5918] Dead loop on virtual device ipvlan1, fix it urgently!
[  608.427662][T22688] netlink: 32318 bytes leftover after parsing attributes in process `syz.1.4608'.
[  608.908648][T22725] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.4618'.
[  608.936490][T22728] netlink: 'syz.0.4620': attribute type 10 has an invalid length.
[  608.973447][T22728] bridge0: port 3(team0) entered blocking state
[  608.994566][T22728] bridge0: port 3(team0) entered disabled state
[  609.015673][T22728] team0: entered allmulticast mode
[  609.033070][T22728] team_slave_0: entered allmulticast mode
[  609.047687][T22728] team_slave_1: entered allmulticast mode
[  609.056212][T22728] team0: entered promiscuous mode
[  609.062257][T22728] team_slave_0: entered promiscuous mode
[  609.068028][T22728] team_slave_1: entered promiscuous mode
[  609.116969][T22733] bond3: Unable to set down delay as MII monitoring is disabled
[  609.342440][T22733] bond3 (unregistering): Released all slaves
[  609.619549][T22746] netlink: 'syz.3.4624': attribute type 9 has an invalid length.
[  609.932471][T22764] netlink: 'syz.2.4631': attribute type 10 has an invalid length.
[  610.090805][T22777] syzkaller0: entered promiscuous mode
[  610.097455][T22777] syzkaller0: entered allmulticast mode
[  610.108621][T22781] netlink: 'syz.4.4636': attribute type 21 has an invalid length.
[  610.119137][T22777] netlink: 'syz.1.4634': attribute type 13 has an invalid length.
[  610.290052][T22786] netlink: 'syz.2.4638': attribute type 10 has an invalid length.
[  610.298723][T22786] bridge0: port 4(team0) entered blocking state
[  610.305726][T22786] bridge0: port 4(team0) entered disabled state
[  610.315454][T22786] team0: entered allmulticast mode
[  610.320658][T22786] team_slave_0: entered allmulticast mode
[  610.326871][T22786] team_slave_1: entered allmulticast mode
[  610.334918][T22786] team0: entered promiscuous mode
[  610.340103][T22786] team_slave_0: entered promiscuous mode
[  610.346826][T22786] team_slave_1: entered promiscuous mode
[  610.724132][T22814] openvswitch: netlink: Duplicate key (type 32).
[  611.525059][T22846] ip_vti0: entered promiscuous mode
[  611.546706][T22846] __nla_validate_parse: 9 callbacks suppressed
[  611.546729][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'.
[  612.019255][T22863] netlink: 'syz.1.4657': attribute type 1 has an invalid length.
[  612.061454][T22863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4657'.
[  612.157332][T22865] netlink: 'syz.1.4657': attribute type 1 has an invalid length.
[  612.193777][T22865] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4657'.
[  612.524822][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4665'.
[  612.540998][T22899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'.
[  612.699816][T22907] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000
[  612.844839][T22922] : entered promiscuous mode
[  612.938265][T22916] syzkaller0: entered promiscuous mode
[  612.958309][T22916] syzkaller0: entered allmulticast mode
[  613.362805][T22947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4678'.
[  613.703531][T22961] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.4683'.
[  613.879578][T22974] netlink: 'syz.4.4687': attribute type 29 has an invalid length.
[  613.919833][T22974] netlink: 'syz.4.4687': attribute type 29 has an invalid length.
[  614.193912][T22992] netlink: 'syz.4.4692': attribute type 1 has an invalid length.
[  614.508458][T23013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.558484][T23016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4700'.
[  614.608043][T23019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4701'.
[  614.697433][T23019] ------------[ cut here ]------------
[  614.703668][T23019] wbt_init(disk)
[  614.703687][T23019] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x4e/0x60, CPU#0: syz.0.4701/23019
[  614.718196][T23019] Modules linked in:
[  614.723197][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.0.4701 Not tainted syzkaller #0 PREEMPT(full) 
[  614.732743][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  614.742889][T23019] RIP: 0010:wbt_init_enable_default+0x4e/0x60
[  614.749103][T23019] Code: ff 89 c6 e8 e4 c6 31 fd 85 db 75 18 e8 9b c2 31 fd 5b c3 cc cc cc cc cc e8 8f c2 31 fd 5b e9 99 2e 07 07 cc e8 83 c2 31 fd 90 <0f> 0b 90 5b e9 89 2e 07 07 cc 0f 1f 84 00 00 00 00 00 90 90 90 90
[  614.769124][T23019] RSP: 0018:ffffc9000c006e78 EFLAGS: 00010293
[  614.775467][T23019] RAX: ffffffff8492b4cd RBX: 00000000fffffff4 RCX: ffff888024828000
[  614.783638][T23019] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[  614.791723][T23019] RBP: 1ffff1100a941412 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e
[  614.799907][T23019] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000000
[  614.807999][T23019] R13: 1ffff110050e8133 R14: ffff888054a0a000 R15: ffff888028740988
[  614.816147][T23019] FS:  00007f93dd1cd6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  614.825332][T23019] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  614.832092][T23019] CR2: 000055557c47e9e8 CR3: 000000004ec40000 CR4: 00000000003526f0
[  614.840162][T23019] Call Trace:
[  614.843655][T23019]  <TASK>
[  614.846613][T23019]  blk_register_queue+0x36a/0x3f0
[  614.851837][T23019]  __add_disk+0x677/0xd50
[  614.856222][T23019]  ? down_read+0x272/0x2e0
[  614.860683][T23019]  add_disk_fwnode+0xfb/0x480
[  614.865554][T23019]  nbd_dev_add+0x72c/0xb50
[  614.870117][T23019]  ? __pfx_nbd_dev_add+0x10/0x10
[  614.875273][T23019]  ? bpf_lsm_capable+0x9/0x20
[  614.879996][T23019]  ? security_capable+0x7e/0x2c0
[  614.885046][T23019]  ? radix_tree_lookup+0x25c/0x290
[  614.890226][T23019]  nbd_genl_connect+0x962/0x1cf0
[  614.895281][T23019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  614.900701][T23019]  ? rcu_is_watching+0x15/0xb0
[  614.905560][T23019]  ? __nla_parse+0x40/0x60
[  614.910036][T23019]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  614.916802][T23019]  genl_family_rcv_msg_doit+0x22a/0x330
[  614.922550][T23019]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  614.928683][T23019]  ? __lock_acquire+0x6b5/0x2cf0
[  614.933974][T23019]  genl_rcv_msg+0x61c/0x7a0
[  614.938736][T23019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  614.943990][T23019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  614.949435][T23019]  netlink_rcv_skb+0x232/0x4b0
[  614.954445][T23019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  614.959511][T23019]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  614.964928][T23019]  ? genl_rcv+0x19/0x40
[  614.969239][T23019]  ? down_read+0x272/0x2e0
[  614.973789][T23019]  ? genl_rcv+0xd/0x40
[  614.977904][T23019]  genl_rcv+0x28/0x40
[  614.982003][T23019]  netlink_unicast+0x80f/0x9b0
[  614.986828][T23019]  ? __pfx_netlink_unicast+0x10/0x10
[  614.992199][T23019]  ? __alloc_skb+0x193/0x390
[  614.996839][T23019]  ? netlink_sendmsg+0x650/0xb40
[  615.002080][T23019]  ? skb_put+0x11b/0x210
[  615.006570][T23019]  netlink_sendmsg+0x813/0xb40
[  615.011486][T23019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.016831][T23019]  ? aa_sock_msg_perm+0xf1/0x1b0
[  615.022128][T23019]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  615.027519][T23019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.032933][T23019]  ____sys_sendmsg+0xa68/0xad0
[  615.037833][T23019]  ? __might_fault+0xaf/0x130
[  615.042627][T23019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.047970][T23019]  ? import_iovec+0x73/0xa0
[  615.052569][T23019]  ___sys_sendmsg+0x2a5/0x360
[  615.057293][T23019]  ? __lock_acquire+0x6b5/0x2cf0
[  615.062462][T23019]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.067721][T23019]  ? futex_wait+0x29a/0x380
[  615.072372][T23019]  ? __fget_files+0x2a/0x420
[  615.077100][T23019]  ? __fget_files+0x3a0/0x420
[  615.082241][T23019]  __x64_sys_sendmsg+0x1bd/0x2a0
[  615.087304][T23019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  615.092933][T23019]  ? rcu_is_watching+0x15/0xb0
[  615.097761][T23019]  do_syscall_64+0xe2/0xf80
[  615.102359][T23019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.108454][T23019]  ? trace_irq_disable+0x37/0x100
[  615.113561][T23019]  ? clear_bhb_loop+0x60/0xb0
[  615.118270][T23019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.124304][T23019] RIP: 0033:0x7f93dc39af79
[  615.128778][T23019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.148999][T23019] RSP: 002b:00007f93dd1cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.157720][T23019] RAX: ffffffffffffffda RBX: 00007f93dc615fa0 RCX: 00007f93dc39af79
[  615.166094][T23019] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  615.174564][T23019] RBP: 00007f93dc4316e0 R08: 0000000000000000 R09: 0000000000000000
[  615.182631][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.190644][T23019] R13: 00007f93dc616038 R14: 00007f93dc615fa0 R15: 00007ffc7de55208
[  615.198757][T23019]  </TASK>
[  615.201856][T23019] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  615.209179][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.0.4701 Not tainted syzkaller #0 PREEMPT(full) 
[  615.218572][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  615.228641][T23019] Call Trace:
[  615.232024][T23019]  <TASK>
[  615.235092][T23019]  vpanic+0x1e0/0x670
[  615.239183][T23019]  panic+0xc5/0xd0
[  615.242926][T23019]  ? __pfx_panic+0x10/0x10
[  615.247379][T23019]  __warn+0x315/0x4a0
[  615.251383][T23019]  ? wbt_init_enable_default+0x4e/0x60
[  615.256894][T23019]  ? wbt_init_enable_default+0x4e/0x60
[  615.262408][T23019]  __report_bug+0x29a/0x540
[  615.266935][T23019]  ? wbt_init_enable_default+0x4e/0x60
[  615.272405][T23019]  ? __pfx___report_bug+0x10/0x10
[  615.277549][T23019]  ? wbt_init_enable_default+0x4e/0x60
[  615.283058][T23019]  report_bug+0x16a/0x220
[  615.287442][T23019]  ? wbt_init_enable_default+0x4e/0x60
[  615.292904][T23019]  ? wbt_init_enable_default+0x50/0x60
[  615.298369][T23019]  handle_bug+0x98/0x200
[  615.302614][T23019]  exc_invalid_op+0x1a/0x50
[  615.307120][T23019]  asm_exc_invalid_op+0x1a/0x20
[  615.312061][T23019] RIP: 0010:wbt_init_enable_default+0x4e/0x60
[  615.318175][T23019] Code: ff 89 c6 e8 e4 c6 31 fd 85 db 75 18 e8 9b c2 31 fd 5b c3 cc cc cc cc cc e8 8f c2 31 fd 5b e9 99 2e 07 07 cc e8 83 c2 31 fd 90 <0f> 0b 90 5b e9 89 2e 07 07 cc 0f 1f 84 00 00 00 00 00 90 90 90 90
[  615.337802][T23019] RSP: 0018:ffffc9000c006e78 EFLAGS: 00010293
[  615.343894][T23019] RAX: ffffffff8492b4cd RBX: 00000000fffffff4 RCX: ffff888024828000
[  615.351888][T23019] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[  615.359868][T23019] RBP: 1ffff1100a941412 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e
[  615.367869][T23019] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000000
[  615.375847][T23019] R13: 1ffff110050e8133 R14: ffff888054a0a000 R15: ffff888028740988
[  615.383921][T23019]  ? wbt_init_enable_default+0x4d/0x60
[  615.389407][T23019]  ? wbt_init_enable_default+0x4d/0x60
[  615.394886][T23019]  blk_register_queue+0x36a/0x3f0
[  615.399927][T23019]  __add_disk+0x677/0xd50
[  615.404282][T23019]  ? down_read+0x272/0x2e0
[  615.408798][T23019]  add_disk_fwnode+0xfb/0x480
[  615.413502][T23019]  nbd_dev_add+0x72c/0xb50
[  615.417950][T23019]  ? __pfx_nbd_dev_add+0x10/0x10
[  615.422913][T23019]  ? bpf_lsm_capable+0x9/0x20
[  615.427696][T23019]  ? security_capable+0x7e/0x2c0
[  615.432637][T23019]  ? radix_tree_lookup+0x25c/0x290
[  615.437851][T23019]  nbd_genl_connect+0x962/0x1cf0
[  615.443091][T23019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  615.448486][T23019]  ? rcu_is_watching+0x15/0xb0
[  615.453257][T23019]  ? __nla_parse+0x40/0x60
[  615.457686][T23019]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  615.464142][T23019]  genl_family_rcv_msg_doit+0x22a/0x330
[  615.469701][T23019]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  615.475868][T23019]  ? __lock_acquire+0x6b5/0x2cf0
[  615.480825][T23019]  genl_rcv_msg+0x61c/0x7a0
[  615.485344][T23019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  615.490466][T23019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  615.495861][T23019]  netlink_rcv_skb+0x232/0x4b0
[  615.500726][T23019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  615.505760][T23019]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  615.511059][T23019]  ? genl_rcv+0x19/0x40
[  615.515243][T23019]  ? down_read+0x272/0x2e0
[  615.519665][T23019]  ? genl_rcv+0xd/0x40
[  615.523754][T23019]  genl_rcv+0x28/0x40
[  615.527743][T23019]  netlink_unicast+0x80f/0x9b0
[  615.532636][T23019]  ? __pfx_netlink_unicast+0x10/0x10
[  615.537962][T23019]  ? __alloc_skb+0x193/0x390
[  615.542576][T23019]  ? netlink_sendmsg+0x650/0xb40
[  615.547624][T23019]  ? skb_put+0x11b/0x210
[  615.551967][T23019]  netlink_sendmsg+0x813/0xb40
[  615.556743][T23019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.562132][T23019]  ? aa_sock_msg_perm+0xf1/0x1b0
[  615.567189][T23019]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  615.572536][T23019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.577858][T23019]  ____sys_sendmsg+0xa68/0xad0
[  615.582730][T23019]  ? __might_fault+0xaf/0x130
[  615.587471][T23019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.592808][T23019]  ? import_iovec+0x73/0xa0
[  615.597496][T23019]  ___sys_sendmsg+0x2a5/0x360
[  615.602211][T23019]  ? __lock_acquire+0x6b5/0x2cf0
[  615.607188][T23019]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.612578][T23019]  ? futex_wait+0x29a/0x380
[  615.617118][T23019]  ? __fget_files+0x2a/0x420
[  615.621806][T23019]  ? __fget_files+0x3a0/0x420
[  615.626588][T23019]  __x64_sys_sendmsg+0x1bd/0x2a0
[  615.631627][T23019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  615.637104][T23019]  ? rcu_is_watching+0x15/0xb0
[  615.641890][T23019]  do_syscall_64+0xe2/0xf80
[  615.646409][T23019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.652477][T23019]  ? trace_irq_disable+0x37/0x100
[  615.657505][T23019]  ? clear_bhb_loop+0x60/0xb0
[  615.662280][T23019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.668174][T23019] RIP: 0033:0x7f93dc39af79
[  615.672769][T23019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.692386][T23019] RSP: 002b:00007f93dd1cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.700813][T23019] RAX: ffffffffffffffda RBX: 00007f93dc615fa0 RCX: 00007f93dc39af79
[  615.709233][T23019] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  615.717296][T23019] RBP: 00007f93dc4316e0 R08: 0000000000000000 R09: 0000000000000000
[  615.725269][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.733246][T23019] R13: 00007f93dc616038 R14: 00007f93dc615fa0 R15: 00007ffc7de55208
[  615.741249][T23019]  </TASK>
[  615.744830][T23019] Kernel Offset: disabled
[  615.749244][T23019] Rebooting in 86400 seconds..