last executing test programs:

4.933982423s ago: executing program 4 (id=5776):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d300000095000000000000"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'team0\x00', 0x400})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x20, 0xf1, &(0x7f0000000200)="fd10759cfb091e34a26325fae679f44c7b55f4d4b99d499f1887d4d35dab73ce", &(0x7f00000002c0)=""/241, 0x6, 0x0, 0xad, 0x17, &(0x7f00000004c0)="acf94820517b24c7e76ad98b9c7c7f8fbc0d4ee9a01fb0d48c16fb5a8ffe1a8df490f4d9bf72d714ced593d658ad48a2646d8a177f7dcb3a66d3daac242b2dc65e3e4150455a5ea0e1cf34ce520a96364b3036a3bb9f036507e7c62e4c6b4045f294c92605318cc32715b74f902adc7d12d518e2046fd2591dfa1ed4728f40c01a331b4514060b4c33761cb4bb61de2e8e0f6968b78b59d62f7ada538deebf78b3e8fcef28aee7c10b9840fa9c", &(0x7f0000000580)="dc9111df7f35ee679fcca88d1ef9b1d68864ea24ea1774", 0x1, 0x0, 0x1}, 0x50)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x66)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80)

4.578881456s ago: executing program 0 (id=5779):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@getneightbl={0x0, 0x42, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
splice(r6, 0x0, r5, 0x0, 0x2, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003, 0x0, 0x4010}, 0x0)

4.529192912s ago: executing program 2 (id=5781):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000ac0)="92112a7461987195244c925560a80c4815", 0x11) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0xffd, {[@mptcp=@ack={0x1e, 0xc, 0x4, 0x4, "c0606d1b03f62691"}]}}}}}}}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.511186754s ago: executing program 3 (id=5787):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000480)="745d667a0d9d8113cba3e65c87449e926017fae6f9847d9627f9cf6c1fd3712d4d6a9896ef26887f54f4f3d31432aab2a448aa94b02fca4a252ca69ee244d7c3ec093724afb218b6ea3a4666245b3f40e68a29cfe516381f3adfc82ee8f3dbea6f791f22e141cb1faeafcaa878c5f1758259ad48242968ab064a0e7b39d47a90402998d890b5ff65470f1d7b", &(0x7f0000000440)=""/14, 0x2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000100030000000000008000000000000000000e0002"], 0x28}}, 0x40000)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010)
getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00000000c0)=""/126, &(0x7f0000000040)=0x7e)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x2, 0x8000, 0xfffc, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'})

1.510714074s ago: executing program 0 (id=5788):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'memory'}, {0x2b, 'io'}, {0x2d, 'freezer'}, {0x2b, 'net_cls'}, {0x2b, 'net_cls'}, {0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'freezer'}]}, 0x49)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

1.440683383s ago: executing program 4 (id=5789):
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0x0, 0x40, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x20000000)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendto$inet6(r5, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x8, 0x4}, 0x8)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0xffffffffffffffb6, r2, 0x20, 0xffffffff}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)

1.439057192s ago: executing program 2 (id=5790):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffaabd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080)

1.393757832s ago: executing program 1 (id=5791):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket(0x2, 0x80805, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.247121515s ago: executing program 0 (id=5792):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f00000020c0)) (async)
getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f00000020c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x8040)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
pread64(r2, &(0x7f0000000340)=""/69, 0x45, 0x3) (async)
pread64(r2, &(0x7f0000000340)=""/69, 0x45, 0x3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

1.19394379s ago: executing program 3 (id=5793):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@_ha_fsid={[0xfffff57a, 0x101]}, {0x9, 0xff, 0x9, 0x4}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x2})
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0x84, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r1 = socket(0x6, 0x2, 0x8)
sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x88}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r5) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64)
r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async, rerun: 64)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x27}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f00000006c0)={0x77359400})
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000004000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000340)={0x1, 'caif0\x00', {}, 0x2}) (rerun: 64)

1.158945346s ago: executing program 1 (id=5794):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x80, 0x700, 0x4d, 0x5, {{0xd, 0x4, 0x2, 0x5, 0x34, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@noop, @ssrr={0x89, 0x1f, 0x60, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100]}]}}}}}) (rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', r1, 0x700, 0x8000, 0x0, 0x1ff, {{0xa, 0x4, 0x2, 0x2, 0x28, 0x67, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@timestamp={0x44, 0x10, 0x44, 0x0, 0x1, [0x6800, 0xf, 0x0]}, @end]}}}}}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f000000a080)) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.0060014s ago: executing program 2 (id=5795):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1bc, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x4}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, @NFQA_EXP={0x180, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x8890)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079b008000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

952.564087ms ago: executing program 4 (id=5796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0xa)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) (async)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0}) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="b7db3fe7295506e64373c400040000000100000004004880100001800c00108004000880040008800c0002000000000000000000c786826a9b92d0d698401db82efb240be239df8d90a1fc22d46972890131bc8e765122f8bc93d8c62faaa3f3af8d43af7c1f74a0c48f5a267ebfc3c5d42abd99b001559209ecb6953e3ec3454061c9b09743baedb6143b169438fcdd091cce23b8d99bcd5b5eaab1444622c8f240856969e52b3271db7ee7ea3f2a7f96fec87d29e2ed5205f33123c42185287d4fd2d39cebe71b352110edbcc0a945243e179c8ce58e9b8f74b6e87c5380cd5c87c6ed4f8e25bf8354"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0)
ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000000300)=0x80000000) (async)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

885.085179ms ago: executing program 0 (id=5797):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448dd, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
getsockopt(r3, 0x6, 0x3, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=0x1000)
socket$inet6_sctp(0xa, 0x0, 0x84)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

875.713243ms ago: executing program 1 (id=5798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x20008001, 0x8, 0x3, 0x80000001}}]}, {0xfffffffffffffe3c, 0x6, "9d672cc70eec8c9b5715c288bb0000ad03fa2043432e0dc9a34b2443893ff0d511d5fe3275b0b3b075e2e2fd579e4c8f1eb41564c979fd027b8b2465560926b52aa9196cf04841315b380fb7c71ac45dda6a2f585218f6c25287bfcff8c229b628b183f6e829276c2fd2192f81019f43328d362f82aa1679659231d1a169f4b88200c59b990b06de4f440d1bd58bccced36dd18f9cecc7d5205e3b586d0f2e7f1f8b0e835cba18bc1eacad3a80dad41e218e44db8b4d090f8c677668c1df8c0c8ca659a0cfe130ab0f8987b32dfa8ea5fd6c0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="895e5a9c575274ae60172036dcdc8fb2dccd26b6cf0e48559617a6fbae149ef19ee27321e41e12b46783836c1b6db1653ac67ff1186994a90a3eb30d13ca06d43c9d9de3b65b8d2bad57cc6810a349564b493b6b393a9682", @ANYRES64=0x0], 0x20)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x884)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

815.333499ms ago: executing program 3 (id=5799):
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xa, 0xa, @l2={'eth', 0x3a, 'macsec0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x12}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x9) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4f10, 0x5d}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x99}, 0x48a0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000003c0)={0x2, 'veth1_to_team\x00', {0xff}, 0x5}) (async, rerun: 32)
r3 = accept(r0, &(0x7f0000000400)=@in={0x2, 0x0, @local}, &(0x7f0000000480)=0x80) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f4bdbd7691bdccbc061f53fb619e2e983ff9e519aad9f052"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ef942da9f1b4805ccf3a2f39b468f745bc1f2b01ecda6408"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r3)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000000)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000840), &(0x7f0000000880)=0xe) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000008c0)={0x3, 0x20a, 0x70f, 0x9, <r6=>0x0}, &(0x7f0000000900)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000940)={r6, 0x6}, 0x8) (async)
r7 = socket(0x23, 0x4, 0x80000000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r7)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2040004) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xab}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}}, 0x44011) (async, rerun: 64)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000bc0)={0x0, 'bond_slave_0\x00', {}, 0x800}) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r9, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x40d1) (async, rerun: 32)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfec}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 32)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x4) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x600000005}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4000020)
getpeername(r7, &(0x7f0000001080)=@can, &(0x7f0000001100)=0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000001280)=0xe8)
sendmsg$nl_netfilter(r1, &(0x7f0000001600)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f00000015c0)={&(0x7f00000012c0)={0x2c8, 0xa, 0x9, 0x5, 0x70bd2c, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@nested={0x2a6, 0x105, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @fd=r7}, @generic="6a32a4bf4c92574c756b74221da26edb7082200b067595731a2112301b588a4d0688b0c43bf7c1b7dbbf113b0997e3d640415f4a3968e711bc2f1403daabbc9c463cdf0147a0b8c70aa0ba577151af24993b67d83d193e9f11fde7bc7ab0244495af949f0a97b604bc5db1432c74d0ecec9d19912a2babbcc906c29db952b2a138c99c4bd7f0ed8ae043a2be669a88ac89060c943351f235905701fafbad09e960178f0be1ebfa08006dcc0adace92a183b8beea6aa5d336664c968cefaea25a82c2eb8167f60287175dc973257b", @generic="a86e757c0555e70361c294c8ab81e95a9e07467b3976858cf9c7d918aa94b324191ed9f1e026e79f7493840ac8fa12f78d4276578c298d278ec9b36d5496b65c671399f729a5f04599e199e0f3292a85e033849d71bc5a3e77d76f681cf712774c33496e83b1520adcb000a23677f9ffc68c67d816d7f82544f8e28777cbf9ab80cee5e16f1fad66eff162d63c0b705c77fd574637a95d86aedfb9867addceba4e9b96099fbc61fb764dea3b414ce487058e14bdcb98bf8605d8697a9ee831ed2733c43142cf3e461edb747fa7539cb96444c2e8dc290d1cda2719", @nested={0x4, 0x93}, @typed={0x8, 0xb4, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x165}, @generic="6a24b2c4a06b859e7017716669e4490b4ed73e1761a91a2d9232c41eadc640e6b7f784c442b23399905bd2438597a50cbb12b6543e11cf919a5dc32ea902b033e559a80256112b1621dbac17c21989b9241080eb40a805c73f298128b3295445141ee623c22c2746362c4f401b7838bb9519da110f0545187cf37c8304ccdcaac37f99defb1211c7e3566a12d68dcb5698210db156821f188c25e74fc77da4dc54ef9b09b315373b2e6dcd297b65e909d9df01754cc62eccedd7213d81db277c3a0a0396a2cabb28ffca18b3584608c6fef656d8fe9d54392a0d8289c9", @nested={0x4, 0x6}]}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x5}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4004840}, 0x10)

814.843571ms ago: executing program 4 (id=5800):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073113100000000008510000002000000850000007600000095000810000000009500a50500000000728c71f9604e5cc91755fe1948b5abba7a5250ca15e47027929ddcdc46"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32)
sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xffff0003}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="68b0dcd1b5845158c8f9a115bee1d12f2015df9852201614809afc29dc66dd0b15a5726b51782d888294a07e199935d65a683a1077b9f7d998dde4795a41f8893da5567e79dda37afacaea6969d657265fbfb0aa683424fa1d4f04ee00c3421bcd0f87001b7e16019190e58344d81a8524cc058b1ee48371a8bb5b8c413387c4496cd10f7e8381a37bc9a73c64ddc2f1f5b3feec832fd4d34e913cd8ccbd1cf1c4a43f0c6e604584ce01aa4bb1", 0xad}], 0x2, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x78}, 0x8001) (rerun: 32)

813.245845ms ago: executing program 2 (id=5801):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRESOCT=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0xd, 0x7, 0xf, 0x2, 0xe9a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7244bc074fd02cf5}}, @jmp={0x5, 0x0, 0x8, 0x1, 0x0, 0x50, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x40, &(0x7f0000000280)=""/64, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x4, 0x5, 0x6, 0x6}, {0x4, 0x1, 0x0, 0xf}], 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x8c, 0x9c, &(0x7f0000000480)="d95033c02987b23068868f7ed5b8bcfa3bcc5fd1d335673e739be5ea534f2aafa3fc099929e9a5894a26710d815b08f103555f23728462fc124969377099bccf96c4d10c4cc3d35b5ad2b5223118a29cab6c11ce37b530b901c161a09f57acaad8e5baa9bf2d6e1ec6330cdb31ed11d93177178827e124a92fdf59ef79e78111bdd7d08b7adc83f0355f3d46", &(0x7f0000000540)=""/156, 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000600)="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", &(0x7f0000000700), 0x4, 0x0, 0x2}, 0x50)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)

704.430472ms ago: executing program 2 (id=5802):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r3 = socket$inet6(0xa, 0x3, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r5, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=r5, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="78000000160010002abd7000ffdbdf250a0012ff", @ANYRES32=r1, @ANYBLOB="08000a0000000000080009000800000014000600090000000f000000000000807008000014000100fc000000000000000000000000000001140000000000c88514000200fc0200"/96], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x94)

595.366052ms ago: executing program 1 (id=5803):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5fe}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)

507.698983ms ago: executing program 3 (id=5804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000025000500000000000000000003000000300001800c0001006e66736400000000140003003132372e3040302e31000000000000000c0003"], 0x44}}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000f744fb1a8c838c12640299714b642ac32f2e929ec21a115e3ebbaef149d36db1856b88c9ed26f70b71bcb3d35ceef5904e40d01c94", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}}, 0x800)

506.893455ms ago: executing program 4 (id=5805):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2d, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x5, r1}, 0x38)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

405.932236ms ago: executing program 1 (id=5806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000ff0000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930200800020000000002080003000000001e", 0x68}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xe, 0x0, 0x1}, [@NFULA_CFG_CMD={0xfffffffffffffee4, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

309.536565ms ago: executing program 4 (id=5807):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x301, 0x3, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r10, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}}, 0x4000000)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40008d0)

259.732523ms ago: executing program 0 (id=5808):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@'], 0x40}, 0x4, 0x700000000000000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800018014000200ec241deacf3d0f803d73797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@private1, @mcast1, @remote, 0x1, 0x0, 0x9, 0x100, 0x4000000010000009, 0x10200})
r3 = accept(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80)
getpeername$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}], 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000054ee010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0xf}, 0x94)

251.398386ms ago: executing program 3 (id=5809):
socket(0xa, 0x3, 0x3a) (async)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4a020, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x6316ba79273f6113}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='/'], 0x20) (async)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)

142.204285ms ago: executing program 2 (id=5810):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x28}}, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03000000", 0x4}], 0x1}, 0x20004014) (async)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x1, 0x3}}, 0x2e) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r10 = getpid()
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r10}}, 0x40) (async)
r12 = socket(0x1e, 0x1, 0x0) (async)
r13 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f0) (async)
r14 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r14, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) (async)
writev(r14, &(0x7f00000000c0), 0x0) (async)
setsockopt$packet_tx_ring(r12, 0x10f, 0x86, &(0x7f0000000440), 0x10) (async, rerun: 64)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r12, 0x111, 0x1, 0x3, 0x4) (async, rerun: 64)
ioctl$FICLONE(r11, 0x40049409, r7)

132.964266ms ago: executing program 1 (id=5811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

2.481906ms ago: executing program 3 (id=5812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(r1, 0x0, 0xfffffc60)
r2 = accept(r0, &(0x7f0000000540)=@ax25={{0x3, @netrom}, [@rose, @bcast, @netrom, @null, @rose, @netrom, @netrom]}, &(0x7f00000005c0)=0x80)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @remote}]})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x2, &(0x7f00000004c0)=""/12, 0xc}, 0x40010001) (async)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x2, &(0x7f00000004c0)=""/12, 0xc}, 0x40010001)

0s ago: executing program 0 (id=5813):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x11}, @window={0x3, 0x58f4, 0x8}], 0x6)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pim6reg0\x00'})
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)="381438f4057ca323f7e9f780730134f145dcd61a3de9745b476d286ab77b95a2791a529f731b333e7d4e10be272fbca4f2b02cf696d780a9dfec2f2737ea3d6462b8e91b3c68ec8515084c1cc6882eb111151ccdedaaeaa9330b8e171da67d6d2480b2269de8bb9a714c994ef247cb595a469f974f2a0358985b99426e19897c2ccafd7f983fd3", 0x87}, {&(0x7f00000000c0)="e9486935e31da8bba72c028780a9e0bee2b1f660af40449644f4db84beaaf996f81b072222b2ee3f2d7fb80615ad8c59c51084cc46a6b08493a8c76dd588a93d63e3c33edd3a09f29ef5fb6cd4305ba7e54268b495fffbfbdd0ecf665a86315a305e3bc021697e4520bc716990155ccea4cc9c", 0x73}, {&(0x7f0000000200)="54f9b4b848315cbcb0ef4e770ca8ddc0008a8eb9f2add8af1585c6da8fcbbc195f3490702930f0780b6b8454f056295d62fe07ac7c766e3a758de7e80c5081ee40aa37571cc56362a7933fe71c1806d5e85451819980c43cb65b37c0a1cd670cfa644e173492bd8b26766fba0d47a2803c26b0f4f4e980fd9508232a26523b1666e62aa8b849dbfc606c3e59a57f6ae69c02d32c", 0x94}], 0x3)

kernel console output (not intermixed with test programs):

 bytes leftover after parsing attributes in process `syz.2.3602'.
[  435.124816][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'.
[  435.569715][T19473] xt_TPROXY: Can be used only with -p tcp or -p udp
[  435.593410][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'.
[  435.634240][T19473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.707463][T19473] batadv_slave_0 (unregistering): left allmulticast mode
[  435.749679][T19473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.912866][T19492] netlink: 'syz.1.3617': attribute type 1 has an invalid length.
[  435.944144][T10521] IPVS: starting estimator thread 0...
[  436.047502][T19497] IPVS: using max 30 ests per chain, 72000 per kthread
[  436.062950][T19507] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3620'.
[  436.093172][T19492] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.132053][T19498] bond2: (slave geneve2): making interface the new active one
[  436.143021][T19498] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  436.154333][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3616'.
[  436.207917][T13569] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  436.258041][T19519] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3623'.
[  436.276996][T13569] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  436.359116][T19509] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3621'.
[  436.388047][T19502] syzkaller0: entered promiscuous mode
[  436.394324][T19502] syzkaller0: entered allmulticast mode
[  436.416593][ T1122] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  436.887164][ T1174] wlan1: Trigger new scan to find an IBSS to join
[  438.439364][T19537] netlink: 'syz.0.3628': attribute type 1 has an invalid length.
[  438.514628][T13569] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  439.078357][T13570] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.115721][T13570] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.148602][T13570] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.180514][T13570] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.902000][T19599] __nla_validate_parse: 4 callbacks suppressed
[  439.902020][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'.
[  440.154145][T19606] netlink: 'syz.0.3646': attribute type 14 has an invalid length.
[  440.176868][T19609] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3648'.
[  440.195034][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'.
[  440.214270][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'.
[  440.386415][ T1174] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  440.407821][ T1174] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  440.441464][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'.
[  440.457884][T13570] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  440.481523][T13570] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  440.511547][T19623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.604284][T19627] netlink: 'syz.3.3654': attribute type 11 has an invalid length.
[  440.848904][T19636] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3656'.
[  440.929377][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'.
[  440.951167][T19636] netlink: 'syz.4.3656': attribute type 1 has an invalid length.
[  440.976423][T19636] netlink: 16167 bytes leftover after parsing attributes in process `syz.4.3656'.
[  441.046907][T19638] team0: Port device team_slave_0 removed
[  441.153831][T19645] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3659'.
[  441.184157][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3660'.
[  441.379570][T19657] netlink: 'syz.4.3663': attribute type 16 has an invalid length.
[  441.420905][T19662] netlink: 'syz.1.3664': attribute type 2 has an invalid length.
[  441.849571][T13569] wlan1: Trigger new scan to find an IBSS to join
[  442.351033][T19714] IPVS: Unknown mcast interface: vcan0
[  442.391893][T19714] netlink: 'syz.1.3678': attribute type 1 has an invalid length.
[  442.539438][T19731] netlink: 'syz.2.3683': attribute type 1 has an invalid length.
[  442.548754][T19731] netlink: 'syz.2.3683': attribute type 1 has an invalid length.
[  442.562336][T19731] netlink: 'syz.2.3683': attribute type 63 has an invalid length.
[  442.801191][T19739] syzkaller0: entered promiscuous mode
[  442.808498][T19739] syzkaller0: entered allmulticast mode
[  443.092153][T19758] syzkaller1: entered promiscuous mode
[  443.100760][T19758] syzkaller1: entered allmulticast mode
[  443.169178][T19762] syzkaller1: left promiscuous mode
[  443.182614][T19762] syzkaller1: left allmulticast mode
[  444.162167][T13576] wlan1: Creating new IBSS network, BSSID 7e:5c:6e:79:6e:9c
[  444.587268][T19820] validate_nla: 1 callbacks suppressed
[  444.587287][T19820] netlink: 'syz.4.3710': attribute type 2 has an invalid length.
[  444.683981][T19828] netlink: 'syz.0.3711': attribute type 4 has an invalid length.
[  445.113563][T19847] __nla_validate_parse: 12 callbacks suppressed
[  445.113582][T19847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3715'.
[  445.323571][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'.
[  445.381190][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'.
[  445.601241][T19875] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3723'.
[  445.788229][T19882] syzkaller0: entered promiscuous mode
[  445.815513][T19882] syzkaller0: entered allmulticast mode
[  446.089006][T19900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.140192][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.149797][T19909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.220091][T19909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.338274][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.388667][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.429837][T19910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.475412][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.519235][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'.
[  446.549622][T19927] mac80211_hwsim hwsim34 ÿ
: renamed from wlan1
[  446.830217][T19936] xt_hl: Unknown Hop Limit match mode: 206
[  448.761721][T19952] netlink: 'syz.4.3739': attribute type 25 has an invalid length.
[  448.771003][T19952] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  449.004338][T19900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  449.274717][T19967] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.283965][T19967] bond0: (slave bond3): Enslaving as an active interface with an up link
[  449.607182][   T30] audit: type=1800 audit(1785739256.465:22): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3750" name="memory.events" dev="tmpfs" ino=531 res=0 errno=0
[  449.802122][T20004] netlink: 'syz.4.3754': attribute type 1 has an invalid length.
[  449.826938][T20004] netlink: 'syz.4.3754': attribute type 2 has an invalid length.
[  449.841685][T20004] netlink: 'syz.4.3754': attribute type 1 has an invalid length.
[  449.859636][T20004] netlink: 'syz.4.3754': attribute type 2 has an invalid length.
[  450.061631][T20024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.210711][T20028] __nla_validate_parse: 6 callbacks suppressed
[  450.210732][T20028] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3761'.
[  450.457882][T20046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  451.042275][T20074] tipc: Started in network mode
[  451.048805][T20074] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  451.075507][T20073] geneve2: entered promiscuous mode
[  451.304366][T20094] netlink: 'syz.4.3781': attribute type 28 has an invalid length.
[  451.335393][T20094] netlink: 'syz.4.3781': attribute type 3 has an invalid length.
[  451.357369][T20094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3781'.
[  451.811788][T20122] syzkaller0: entered promiscuous mode
[  451.824909][T20122] syzkaller0: entered allmulticast mode
[  451.964256][T20135] xt_bpf: check failed: parse error
[  452.291692][T20154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3795'.
[  452.291718][T20152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3795'.
[  452.689544][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'.
[  452.702799][T20179] netlink: 'syz.1.3801': attribute type 1 has an invalid length.
[  452.761328][T20179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3801'.
[  452.967449][T20188] macsec1: entered promiscuous mode
[  455.189364][T20148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  455.484233][T10497] IPVS: starting estimator thread 0...
[  455.492055][T20192] IPVS: dh: FWM 3 0x00000003 - no destination available
[  455.587260][T20200] IPVS: using max 31 ests per chain, 74400 per kthread
[  455.778087][T20216] openvswitch: netlink: IP tunnel dst address not specified
[  455.810393][T20216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.925334][T20224] netlink: 'syz.1.3817': attribute type 2 has an invalid length.
[  455.976916][T20224] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3817'.
[  456.204169][T20228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3818'.
[  456.224132][T20237] netlink: 'syz.1.3820': attribute type 21 has an invalid length.
[  456.722318][T20262] netlink: 'syz.2.3825': attribute type 1 has an invalid length.
[  456.828063][T20262] 8021q: adding VLAN 0 to HW filter on device bond4
[  457.054562][T20277] bond4: Unable to set up delay as MII monitoring is disabled
[  457.066454][T20277] bond4 (unregistering): Released all slaves
[  462.566317][ T5649] Bluetooth: hci5: command 0x0406 tx timeout
[  472.811832][ T5649] Bluetooth: hci2: command 0x0406 tx timeout
[  474.168697][   T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  478.613550][T20300] netlink: 'syz.1.3832': attribute type 1 has an invalid length.
[  478.676601][T20300] bond4: entered promiscuous mode
[  478.688379][T20300] 8021q: adding VLAN 0 to HW filter on device bond4
[  478.781899][T20300] vlan0: entered allmulticast mode
[  478.787239][T20300] bond4: entered allmulticast mode
[  478.817030][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'.
[  478.827874][T20312] bond1 (unregistering): Released all slaves
[  478.918945][T20300] bond4: (slave bridge2): making interface the new active one
[  478.932863][T20300] bridge2: entered promiscuous mode
[  478.943883][T20300] bridge2: entered allmulticast mode
[  478.956931][T20300] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  479.121377][T20303] bond1: entered promiscuous mode
[  479.136861][T20303] 8021q: adding VLAN 0 to HW filter on device bond1
[  479.168016][T20317] 8021q: adding VLAN 0 to HW filter on device bond1
[  479.179148][T20317] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  479.192662][T20317] bond1: (slave ip6gre1): Error -95 calling set_mac_address
[  479.246191][T20326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3838'.
[  479.273642][T20326] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.399634][T20339] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3841'.
[  479.682682][T20348] veth3: entered allmulticast mode
[  479.708707][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3845'.
[  479.849319][T20361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3847'.
[  479.912274][T20363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3846'.
[  480.314478][T20345] netlink: 'syz.4.3842': attribute type 10 has an invalid length.
[  480.652897][T20405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3854'.
[  481.150517][T20427] dummy0: entered allmulticast mode
[  481.279147][T20438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3861'.
[  481.348210][T20438] unsupported nla_type 7424
[  481.568506][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3863'.
[  481.876408][T20474] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3867'.
[  481.955308][T20479] netlink: 'syz.4.3869': attribute type 1 has an invalid length.
[  482.078264][T20479] 8021q: adding VLAN 0 to HW filter on device bond1
[  482.730758][T20498] netlink: 'syz.2.3870': attribute type 64 has an invalid length.
[  483.322541][T20518] block nbd2: NBD_DISCONNECT
[  483.337108][T20518] block nbd2: Send disconnect failed -32
[  483.357499][T20518] block nbd2: shutting down sockets
[  483.600693][T20536] netlink: 'syz.4.3883': attribute type 3 has an invalid length.
[  483.622265][T20540] xt_CT: You must specify a L4 protocol and not use inversions on it
[  483.635180][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  484.026954][T20560] netlink: 'syz.2.3891': attribute type 1 has an invalid length.
[  484.113620][T20560] veth5: entered allmulticast mode
[  484.121708][T20566] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  484.130285][T20566] netlink: 'syz.1.3893': attribute type 4 has an invalid length.
[  484.139338][T20560] bond5: (slave veth5): Enslaving as an active interface with a down link
[  484.139758][T20566] __nla_validate_parse: 4 callbacks suppressed
[  484.139801][T20566] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3893'.
[  484.164165][T20566] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  484.172311][T20566] netlink: 'syz.1.3893': attribute type 4 has an invalid length.
[  484.180241][T20566] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3893'.
[  484.193341][T20566] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  484.201439][T20570] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  484.206568][T20566] netlink: 'syz.1.3893': attribute type 4 has an invalid length.
[  484.217747][T20566] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3893'.
[  484.234742][T20570] netlink: 'syz.1.3893': attribute type 4 has an invalid length.
[  484.245647][T20568] bond5: (slave veth0_to_bond): making interface the new active one
[  484.254312][T20570] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3893'.
[  484.266317][T20568] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  484.608771][T20586] netlink: 'syz.2.3899': attribute type 1 has an invalid length.
[  484.737753][T20591] veth7: entered allmulticast mode
[  484.805065][T20600] bond5: (slave veth0_to_bond): Releasing active interface
[  484.828672][T20600] bond6: (slave veth0_to_bond): making interface the new active one
[  484.838934][T20600] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  484.852195][T20602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  484.883872][T20597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3903'.
[  484.947915][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3903'.
[  484.999034][T20615] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  485.100498][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'.
[  485.140847][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'.
[  485.190961][T20627] vlan2: entered promiscuous mode
[  485.212913][T20627] bridge0: entered promiscuous mode
[  485.245463][T20627] vlan2: entered allmulticast mode
[  485.273042][T20627] bridge0: entered allmulticast mode
[  485.604442][T20658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3914'.
[  485.637462][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'.
[  485.752090][T20655] syzkaller0: entered promiscuous mode
[  485.757855][T20655] syzkaller0: entered allmulticast mode
[  488.077640][T20698] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  488.270532][T20716] NCSI netlink: No device for ifindex 131092
[  488.806393][   T57] wlan1: Trigger new scan to find an IBSS to join
[  488.878675][T20747] pim6reg1: entered promiscuous mode
[  488.896471][T20747] pim6reg1: entered allmulticast mode
[  488.929072][T20751] vlan2: entered allmulticast mode
[  488.934446][T20751] bond0: entered allmulticast mode
[  489.292408][T20770] __nla_validate_parse: 5 callbacks suppressed
[  489.292423][T20770] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3942'.
[  489.590407][T20779] syzkaller0: entered promiscuous mode
[  489.605047][T20779] syzkaller0: entered allmulticast mode
[  489.712939][T20789] sctp: [Deprecated]: syz.2.3946 (pid 20789) Use of int in max_burst socket option.
[  489.712939][T20789] Use struct sctp_assoc_value instead
[  489.834033][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3947'.
[  489.843923][T20792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  489.851269][T20792] IPv6: NLM_F_CREATE should be set when creating new route
[  490.237796][T20810] validate_nla: 9 callbacks suppressed
[  490.237819][T20810] netlink: 'syz.1.3952': attribute type 4 has an invalid length.
[  490.277155][T20815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.309169][T20815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.452330][T20823] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3956'.
[  492.806183][ T5871] wlan1: Trigger new scan to find an IBSS to join
[  492.887256][ T1174] wlan1: Creating new IBSS network, BSSID 56:6c:60:c6:41:fe
[  493.286342][ T5649] Bluetooth: hci4: command 0x041b tx timeout
[  495.366149][ T4946] Bluetooth: hci4: command 0x041b tx timeout
[  497.446265][ T4946] Bluetooth: hci4: command 0x041b tx timeout
[  499.526966][ T4946] Bluetooth: hci4: command 0x041b tx timeout
[  501.606534][ T4946] Bluetooth: hci4: command 0x041b tx timeout
[  506.569248][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  516.437100][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'.
[  516.475774][T20842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3958'.
[  516.548456][T20848] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3961'.
[  516.566128][T20851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3962'.
[  516.877993][T20868] IPVS: Unknown mcast interface: vcan0
[  516.896805][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'.
[  516.926130][T20863] bridge: RTM_NEWNEIGH with invalid ether address
[  517.102887][T20871] syzkaller0: entered promiscuous mode
[  517.142419][T20871] syzkaller0: entered allmulticast mode
[  517.242952][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3972'.
[  517.428809][T20895] SET target dimension over the limit!
[  517.727918][T20903] bridge0: port 3(batadv0) entered blocking state
[  517.745645][T20905] netlink: 'syz.0.3979': attribute type 2 has an invalid length.
[  517.757441][T20903] bridge0: port 3(batadv0) entered disabled state
[  517.774068][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'.
[  517.798209][T20903] batadv0: entered allmulticast mode
[  517.823392][T20903] batadv0: entered promiscuous mode
[  517.912287][T20912] ip6erspan0: mtu less than device minimum
[  517.952673][T20911] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  518.216340][ T5871] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  518.225656][ T5871] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  518.276723][ T5871] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  518.305403][ T5871] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  518.332968][ T5871] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  518.366377][ T5871] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  518.420126][T20931] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3990'.
[  519.083431][T20970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4001'.
[  519.388113][T20986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4007'.
[  519.768668][T20999] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  519.904213][T21010] netlink: 'syz.2.4016': attribute type 11 has an invalid length.
[  520.134647][T21023] veth5: entered allmulticast mode
[  520.257761][T21028] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  520.382867][T21037] bridge0: port 4(veth1_to_bridge) entered blocking state
[  520.422386][T21037] bridge0: port 4(veth1_to_bridge) entered disabled state
[  520.472474][T21037] veth1_to_bridge: entered allmulticast mode
[  520.494542][T21037] veth1_to_bridge: entered promiscuous mode
[  520.968075][T21065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.098171][T21061] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  521.155184][T21061] bond5 (unregistering): Released all slaves
[  521.168266][T21079] sock: sock_timestamping_bind_phc: sock not bind to device
[  521.466082][T21095] netlink: 'syz.3.4046': attribute type 1 has an invalid length.
[  521.503506][T21103] __nla_validate_parse: 7 callbacks suppressed
[  521.503527][T21103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4045'.
[  521.598863][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'.
[  521.669408][T21095] 8021q: adding VLAN 0 to HW filter on device bond2
[  521.701674][T21104] bond2: (slave gretap1): making interface the new active one
[  521.721490][T21104] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  521.944592][T21124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  522.135642][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'.
[  522.312356][T21152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4059'.
[  522.393968][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'.
[  522.434696][T21156] 8021q: adding VLAN 0 to HW filter on device macsec1
[  522.524824][T21161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4063'.
[  522.534476][T21161] netlink: 'syz.3.4063': attribute type 7 has an invalid length.
[  522.542867][T21161] netlink: 'syz.3.4063': attribute type 8 has an invalid length.
[  522.551203][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'.
[  522.689706][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'.
[  522.703222][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'.
[  522.763567][T21167] netlink: 'syz.2.4065': attribute type 1 has an invalid length.
[  522.799025][T21165] syzkaller0: entered promiscuous mode
[  522.804717][T21165] syzkaller0: entered allmulticast mode
[  522.849560][T21167] 8021q: adding VLAN 0 to HW filter on device bond7
[  525.363207][T21211] netlink: 'syz.1.4076': attribute type 1 has an invalid length.
[  525.384727][T21211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4076'.
[  525.586838][T21219] xt_ecn: cannot match TCP bits for non-tcp packets
[  526.379899][T21259] syzkaller0: entered promiscuous mode
[  526.402691][T21259] syzkaller0: entered allmulticast mode
[  526.709341][T21280] __nla_validate_parse: 1 callbacks suppressed
[  526.709361][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4092'.
[  526.756507][T21263] bond1 (unregistering): Released all slaves
[  527.201576][T21285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4091'.
[  527.222026][T21293] netlink: 'syz.3.4093': attribute type 4 has an invalid length.
[  527.571906][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4098'.
[  527.610351][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4098'.
[  527.818958][T21338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4102'.
[  527.859959][T21330] syzkaller1: entered promiscuous mode
[  527.871761][T21330] syzkaller1: entered allmulticast mode
[  527.908122][T21326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4102'.
[  528.506520][T21378] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4117'.
[  528.558869][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'.
[  528.574043][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'.
[  528.584161][T21384] netlink: 'syz.2.4117': attribute type 39 has an invalid length.
[  528.654714][T21387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4118'.
[  529.084063][T21407] netlink: 'syz.3.4124': attribute type 5 has an invalid length.
[  530.195766][T21445] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  530.858534][T21482] syzkaller0: entered promiscuous mode
[  530.864517][T21482] syzkaller0: entered allmulticast mode
[  531.500979][T21522] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  532.099328][T21554] __nla_validate_parse: 10 callbacks suppressed
[  532.099347][T21554] netlink: 524 bytes leftover after parsing attributes in process `syz.0.4163'.
[  532.119481][T21555] netlink: 524 bytes leftover after parsing attributes in process `syz.0.4163'.
[  532.268719][T21560] team0: Device vcan1 is of different type
[  532.620718][T21574] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4169'.
[  532.823436][T21580] syzkaller0: entered promiscuous mode
[  532.840721][T21580] syzkaller0: entered allmulticast mode
[  532.853753][T21584] netlink: 'syz.3.4172': attribute type 1 has an invalid length.
[  532.873299][T21580] tipc: Started in network mode
[  532.881653][T21580] tipc: Node identity , cluster identity 4711
[  532.900136][T21580] tipc: Failed to obtain node identity
[  532.912334][T21580] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  532.979994][T21591] netlink: 'syz.2.4174': attribute type 1 has an invalid length.
[  532.988051][T21591] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4174'.
[  532.997946][T21591] netlink: 'syz.2.4174': attribute type 1 has an invalid length.
[  533.026261][T21584] bond3: entered promiscuous mode
[  533.031957][T21584] 8021q: adding VLAN 0 to HW filter on device bond3
[  533.099875][T21592] 8021q: adding VLAN 0 to HW filter on device bond3
[  533.119739][T21592] bond3: (slave ipip0): The slave device specified does not support setting the MAC address
[  533.145048][T21592] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  533.168946][T21592] bond3: (slave ipip0): making interface the new active one
[  533.177707][T21592] ipip0: entered promiscuous mode
[  533.184937][T21592] bond3: (slave ipip0): Enslaving as an active interface with an up link
[  533.373318][T21613] netlink: 'syz.4.4177': attribute type 1 has an invalid length.
[  533.499884][T21613] 8021q: adding VLAN 0 to HW filter on device bond2
[  533.631496][T21623] sch_tbf: peakrate 7 is lower than or equals to rate 1023 !
[  533.672201][T21623] syzkaller0: entered promiscuous mode
[  533.688366][T21623] syzkaller0: entered allmulticast mode
[  534.836323][T21685] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4198'.
[  535.056458][T21697] netlink: 'syz.3.4202': attribute type 1 has an invalid length.
[  535.091619][T21699] netlink: 'syz.0.4200': attribute type 1 has an invalid length.
[  535.225569][T21709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'.
[  535.238482][T21697] 8021q: adding VLAN 0 to HW filter on device bond4
[  535.344844][T21703] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  535.376192][T13570] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  535.517508][T21725] 8021q: VLANs not supported on ip6tnl0
[  535.804256][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'.
[  536.077547][T21760] netlink: 'syz.2.4213': attribute type 2 has an invalid length.
[  536.091184][T21761] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  536.109305][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.119074][T21755] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.133658][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.141586][T21755] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.214421][T21768] netlink: 'syz.4.4218': attribute type 1 has an invalid length.
[  536.290860][T21768] 8021q: adding VLAN 0 to HW filter on device bond3
[  536.312523][T21771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4219'.
[  536.415384][T21773] dvmrp8: entered allmulticast mode
[  536.689371][T21789] syzkaller0: entered promiscuous mode
[  536.697055][T21787] netlink: 'syz.3.4226': attribute type 1 has an invalid length.
[  536.709293][T21789] syzkaller0: entered allmulticast mode
[  536.727738][T21787] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4226'.
[  536.761906][T21788] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  536.781806][T21788] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  536.948642][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4229'.
[  536.959094][T21801] netlink: 'syz.3.4229': attribute type 5 has an invalid length.
[  537.137394][T21804] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  537.163251][T21804] bond5 (unregistering): Released all slaves
[  537.277764][T21817] pim6reg1: entered promiscuous mode
[  537.308377][T21817] pim6reg1: entered allmulticast mode
[  537.340156][T21811] __nla_validate_parse: 1 callbacks suppressed
[  537.340179][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'.
[  537.853111][T21841] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4238'.
[  537.908408][T21841] vlan4: entered allmulticast mode
[  537.923134][T21841] erspan0: entered allmulticast mode
[  538.021790][T21851] x_tables: duplicate underflow at hook 2
[  538.065205][T21852] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  538.550279][T21878] ip6t_srh: unknown srh invflags 4000
[  538.745310][T21886] syzkaller1: entered promiscuous mode
[  538.758494][T21886] syzkaller1: entered allmulticast mode
[  538.860344][T21895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'.
[  538.887959][T13570] wlan1: Trigger new scan to find an IBSS to join
[  538.896523][T21894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'.
[  538.964041][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'.
[  539.536738][T21928] 8021q: VLANs not supported on gre0
[  539.656647][T21931] syzkaller0: entered promiscuous mode
[  539.673800][T21931] syzkaller0: entered allmulticast mode
[  539.716735][T21933] sctp: [Deprecated]: syz.3.4267 (pid 21933) Use of int in maxseg socket option.
[  539.716735][T21933] Use struct sctp_assoc_value instead
[  540.109354][T21954] netlink: zone id is out of range
[  540.135742][T21956] netlink: 'syz.0.4271': attribute type 1 has an invalid length.
[  540.162116][T21954] netlink: zone id is out of range
[  540.190835][T21956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4271'.
[  540.208218][T21954] netlink: zone id is out of range
[  540.224167][T21954] netlink: zone id is out of range
[  540.252870][T21954] netlink: zone id is out of range
[  540.275402][T21954] netlink: zone id is out of range
[  540.412727][T21966] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  540.574475][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'.
[  540.649222][T21989] syzkaller0: entered promiscuous mode
[  540.667818][T21989] syzkaller0: entered allmulticast mode
[  540.694231][T21996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4284'.
[  540.724937][T21989] netlink: 'syz.4.4282': attribute type 1 has an invalid length.
[  540.757437][T21989] netlink: 'syz.4.4282': attribute type 2 has an invalid length.
[  540.775658][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4284'.
[  540.791326][T21996] bridge_slave_1 (unregistering): left promiscuous mode
[  540.800909][T22000] netlink: 'syz.0.4285': attribute type 1 has an invalid length.
[  540.819040][T21996] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.874616][T22007] netlink: 'syz.1.4287': attribute type 2 has an invalid length.
[  541.438619][T22041] netlink: 'syz.4.4296': attribute type 25 has an invalid length.
[  541.618991][T22048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4301'.
[  541.927492][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.186562][T22094] lo speed is unknown, defaulting to 1000
[  542.194749][T22094] lo speed is unknown, defaulting to 1000
[  542.205604][T22094] lo speed is unknown, defaulting to 1000
[  542.223953][T22094] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  542.312775][T22094] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  542.412432][T22094] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  542.487191][T22094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  542.631654][T22114] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  542.700920][T22116] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.722573][T22116] bridge_slave_0 (unregistering): left allmulticast mode
[  542.730866][T22116] bridge_slave_0 (unregistering): left promiscuous mode
[  542.739027][T22116] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.776453][T22094] lo speed is unknown, defaulting to 1000
[  542.811382][T22094] lo speed is unknown, defaulting to 1000
[  542.892782][   T36] wlan1: Trigger new scan to find an IBSS to join
[  542.941663][T22094] lo speed is unknown, defaulting to 1000
[  542.968039][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.010180][T22094] lo speed is unknown, defaulting to 1000
[  543.033531][T22094] lo speed is unknown, defaulting to 1000
[  543.074327][T22094] lo speed is unknown, defaulting to 1000
[  543.102320][T22094] lo speed is unknown, defaulting to 1000
[  543.128378][T22094] lo speed is unknown, defaulting to 1000
[  543.163605][T22094] lo speed is unknown, defaulting to 1000
[  543.171672][T22133] __nla_validate_parse: 1 callbacks suppressed
[  543.171690][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4320'.
[  543.211452][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'.
[  543.216452][T22133] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  543.251861][T22131] netlink: 'syz.2.4319': attribute type 10 has an invalid length.
[  543.279946][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4319'.
[  543.359486][T22144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.388727][T22144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.415172][T22144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.454254][T22144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.488805][T22144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.523359][T22143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.673269][T22160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4327'.
[  543.796742][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'.
[  543.822702][T22165] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.830577][T22165] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.952122][T22167] ip6gre2: entered allmulticast mode
[  543.983688][T22174] netlink: 'syz.4.4328': attribute type 1 has an invalid length.
[  544.012959][T22174] netlink: 'syz.4.4328': attribute type 2 has an invalid length.
[  544.030418][T22174] netlink: 'syz.4.4328': attribute type 1 has an invalid length.
[  544.039835][T22174] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4328'.
[  544.268237][T22193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4336'.
[  544.639658][T22214] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4342'.
[  544.755263][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4343'.
[  544.794162][T22221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.816723][T22223] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  544.821656][T13576] wlan1: Creating new IBSS network, BSSID be:cf:4d:45:c5:ed
[  544.910317][T22228] ksmbd: Unknown IPC event: 1, ignore.
[  544.933689][T22228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4346'.
[  545.007384][T22221] can: request_module (can-proto-4) failed.
[  545.796315][T22251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.887026][T22250] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  545.907600][T22250] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  546.100681][T22251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.252766][T22280] bond5: option fail_over_mac: invalid value (16)
[  546.275550][T22280] bond5 (unregistering): Released all slaves
[  546.570933][T22251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.935170][T22326] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  547.153242][T22251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.187191][T22335] vlan1: entered allmulticast mode
[  547.192442][T22335] bond0: entered allmulticast mode
[  547.199080][T22335] bond_slave_0: entered allmulticast mode
[  547.204878][T22335] bond_slave_1: entered allmulticast mode
[  547.256759][T22337] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  547.274505][T22337] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  547.455307][T22321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  547.533929][T22349] sctp: [Deprecated]: syz.0.4376 (pid 22349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  547.533929][T22349] Use struct sctp_sack_info instead
[  547.787501][ T3321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.009197][   T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.181176][   T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.192024][   T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.520960][T22389] bond8: Removing last arp target with arp_interval on
[  548.800491][T22403] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20003
[  549.031584][T22413] __nla_validate_parse: 6 callbacks suppressed
[  549.031604][T22413] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4393'.
[  549.103196][T22416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4394'.
[  549.263605][T22421] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4395'.
[  549.296570][T22421] net_ratelimit: 1 callbacks suppressed
[  549.296614][T22421] netlink: Conntrack attr has 1 unknown bytes
[  549.317918][T22421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.582690][T22433] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4397'.
[  549.664344][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4397'.
[  549.692501][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'.
[  549.800390][T22443] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002
[  550.291663][T22472] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4406'.
[  550.326958][T22475] syzkaller1: entered promiscuous mode
[  550.333941][T22475] syzkaller1: entered allmulticast mode
[  550.402922][T22475] bridge_slave_1 (unregistering): left allmulticast mode
[  550.412795][T22475] bridge_slave_1 (unregistering): left promiscuous mode
[  550.420626][T22475] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.534177][T22483] pim6reg: entered allmulticast mode
[  550.619424][T22484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4408'.
[  550.634072][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'.
[  550.818381][T22488] bond9: entered promiscuous mode
[  550.825016][T22488] 8021q: adding VLAN 0 to HW filter on device bond9
[  550.891698][T22502] 8021q: adding VLAN 0 to HW filter on device bond9
[  550.918728][T22502] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  550.935495][T22502] bond9: (slave ip6gre1): Error -95 calling set_mac_address
[  551.660629][   T10] IPVS: starting estimator thread 0...
[  551.744609][T22523] bond5: Removing last arp target with arp_interval on
[  551.766749][T22524] IPVS: using max 28 ests per chain, 67200 per kthread
[  552.331453][T22559] validate_nla: 2 callbacks suppressed
[  552.331473][T22559] netlink: 'syz.3.4426': attribute type 12 has an invalid length.
[  552.819706][T22575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4431'.
[  552.941195][T22588] siw: device registration error -23
[  553.268056][T22612] siw: device registration error -23
[  554.076620][T22658] syzkaller0: entered promiscuous mode
[  554.082593][T22658] syzkaller0: entered allmulticast mode
[  554.105386][T22658] IPv6: Can't replace route, no match found
[  554.117594][T22658] IPv6: Can't replace route, no match found
[  554.134471][T22658] xt_hashlimit: overflow, try lower: 3/0
[  554.344003][T22666] netlink: 'syz.1.4457': attribute type 1 has an invalid length.
[  554.394983][T22667] netlink: 'syz.1.4457': attribute type 1 has an invalid length.
[  554.424015][T22667] __nla_validate_parse: 2 callbacks suppressed
[  554.424032][T22667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4457'.
[  554.546908][T22666] bond6: option mode: invalid value (105)
[  554.574211][T22666] bond6 (unregistering): Released all slaves
[  579.244069][T22691] syzkaller1: entered promiscuous mode
[  579.270045][T22691] syzkaller1: entered allmulticast mode
[  579.290979][T22694] netlink: 'syz.0.4464': attribute type 1 has an invalid length.
[  579.302939][T22691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4462'.
[  579.569155][T22694] bond3: entered promiscuous mode
[  579.577346][T22694] 8021q: adding VLAN 0 to HW filter on device bond3
[  579.707514][T22704] 8021q: adding VLAN 0 to HW filter on device bond3
[  579.724965][T22704] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  579.736698][T22704] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  579.758776][T22704] bond3: (slave ip6gre1): making interface the new active one
[  579.770745][T22704] ip6gre1: entered promiscuous mode
[  579.779155][T22704] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  579.791673][T22706] bridge2: port 1(erspan0) entered blocking state
[  579.808427][T22706] bridge2: port 1(erspan0) entered disabled state
[  579.815208][T22706] erspan0: entered allmulticast mode
[  579.824502][T22706] erspan0: entered promiscuous mode
[  579.847364][T22705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.857238][T22705] bond_slave_0: left allmulticast mode
[  579.866741][T22705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.879983][T22705] bond_slave_1: left allmulticast mode
[  579.889528][T22705] bond0 (unregistering): Released all slaves
[  580.131626][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'.
[  580.161682][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'.
[  580.257260][T22726] veth0: entered allmulticast mode
[  580.267127][T22726] syzkaller1: entered allmulticast mode
[  580.934059][T22756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4478'.
[  580.947605][T22756] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4478'.
[  581.055069][T22758] openvswitch: netlink: IPv4 tunnel dst address is zero
[  581.076660][T22758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  581.102110][T22758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4479'.
[  581.110680][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4481'.
[  581.379573][T22777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4484'.
[  581.406823][T22778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4484'.
[  581.470083][T22777] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  581.529908][T22777] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  581.905057][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4491'.
[  582.005451][T22803] netlink: 'syz.4.4491': attribute type 9 has an invalid length.
[  582.259892][T22817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.775784][T22800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  583.067315][T22857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.237802][T22853] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  583.263122][T22864] netlink: 'syz.3.4504': attribute type 21 has an invalid length.
[  583.273427][T22864] IPv6: NLM_F_CREATE should be specified when creating new route
[  583.343900][T22804] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  584.730864][T22920] __nla_validate_parse: 5 callbacks suppressed
[  584.730906][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4520'.
[  585.020821][T22936] netlink: 'syz.1.4522': attribute type 1 has an invalid length.
[  585.046467][T22936] netlink: 'syz.1.4522': attribute type 11 has an invalid length.
[  585.082116][T22936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4522'.
[  585.170385][T22934] tipc: Failed to remove unknown binding: 66,0,0/0:716133176/716133177
[  585.237059][T22936] tipc: Failed to remove unknown binding: 66,0,0/0:716133176/716133177
[  585.280869][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4524'.
[  585.292520][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4524'.
[  585.371929][T22944] bond0: entered allmulticast mode
[  585.675384][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4527'.
[  585.782027][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'.
[  585.806859][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'.
[  585.816008][T22961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4527'.
[  585.830834][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'.
[  585.861489][T22961] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4527'.
[  586.047951][T22961] veth5: entered promiscuous mode
[  586.617014][T22995] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  586.662621][T22995] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  587.183841][T23021] netlink: 'syz.2.4547': attribute type 1 has an invalid length.
[  587.285097][T23029] netlink: 'syz.4.4548': attribute type 10 has an invalid length.
[  587.315018][T23021] bond8: entered promiscuous mode
[  587.343618][T23021] 8021q: adding VLAN 0 to HW filter on device bond8
[  587.432888][T23027] bond8: (slave bridge1): making interface the new active one
[  587.441942][T23027] bridge1: entered promiscuous mode
[  587.449601][T23027] bond8: (slave bridge1): Enslaving as an active interface with an up link
[  587.462030][T23029] veth1_macvtap: left promiscuous mode
[  587.677383][T23042] netlink: 'syz.4.4551': attribute type 1 has an invalid length.
[  587.692698][T23042] netlink: 'syz.4.4551': attribute type 11 has an invalid length.
[  589.380034][T23118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  589.517954][T23084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.823142][T23125] netlink: 'syz.0.4575': attribute type 7 has an invalid length.
[  589.841495][T23125] netlink: 'syz.0.4575': attribute type 8 has an invalid length.
[  589.855491][T23126] lo: entered allmulticast mode
[  589.868118][T23126] tunl0: entered allmulticast mode
[  589.876674][T23126] gre0: entered allmulticast mode
[  589.909008][T23126] gretap0: entered allmulticast mode
[  589.949957][T23126] ip_vti0: entered allmulticast mode
[  589.965471][T23126] ip6_vti0: entered allmulticast mode
[  589.983594][T23126] sit0: entered allmulticast mode
[  589.997260][T23126] ip6tnl0: entered allmulticast mode
[  590.013661][T23126] ip6gre0: entered allmulticast mode
[  590.182688][T23143] __nla_validate_parse: 8 callbacks suppressed
[  590.182705][T23143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4581'.
[  590.423077][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4584'.
[  590.478331][T23154] block nbd2: Unsupported socket: should be TCP or UNIX.
[  590.506424][T23158] netlink: 'syz.2.4585': attribute type 4 has an invalid length.
[  590.539336][T23158] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4585'.
[  590.561744][T23161] netlink: 'syz.1.4587': attribute type 7 has an invalid length.
[  590.661045][T23163] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4586'.
[  590.855547][T23164] syzkaller0: entered promiscuous mode
[  590.874058][T23164] syzkaller0: entered allmulticast mode
[  591.054979][T23182] netlink: 'syz.3.4589': attribute type 17 has an invalid length.
[  591.094979][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4589'.
[  591.129777][T23182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4589'.
[  591.205091][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4591'.
[  591.861558][T23199] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4593'.
[  594.132266][T23212] netlink: 'syz.0.4596': attribute type 1 has an invalid length.
[  594.155030][T23212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4596'.
[  594.218455][T23217] veth0_to_bond: entered allmulticast mode
[  594.615131][T23234] bond9: option min_links: invalid value (18446744073709551614)
[  594.637244][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'.
[  594.660657][T23234] bond9: option min_links: allowed values 0 - 2147483647
[  594.687649][T23234] bond9 (unregistering): Released all slaves
[  595.294968][T23272] bond9: entered promiscuous mode
[  595.316129][T23272] bond9: entered allmulticast mode
[  595.322102][T23272] 8021q: adding VLAN 0 to HW filter on device bond9
[  595.403777][T23282] ip6gre3: entered allmulticast mode
[  596.520206][T23295] __nla_validate_parse: 1 callbacks suppressed
[  596.520226][T23295] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4625'.
[  597.033402][T23343] sctp: [Deprecated]: syz.0.4636 (pid 23343) Use of int in maxseg socket option.
[  597.033402][T23343] Use struct sctp_assoc_value instead
[  597.200987][T23319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  597.608023][T23359] netlink: 'syz.4.4639': attribute type 2 has an invalid length.
[  597.718576][T23367] 8021q: VLANs not supported on lo
[  597.895439][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4647'.
[  598.167712][T23394] netlink: Invalid conntrack timeout
[  598.180798][T23394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.208536][T23394] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4652'.
[  598.422461][T23400] syzkaller0: entered promiscuous mode
[  598.428734][T23400] syzkaller0: entered allmulticast mode
[  599.054718][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4662'.
[  599.374868][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4665'.
[  599.409516][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4665'.
[  599.428299][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4665'.
[  599.625577][T23451] xt_ecn: cannot match TCP bits for non-tcp packets
[  600.011080][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4676'.
[  600.022444][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4676'.
[  600.034424][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'.
[  600.138422][T23477] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  600.785590][T23502] RDS: rds_bind could not find a transport for 0:1400:800:4500:3c::4084, load rds_tcp or rds_rdma?
[  600.818039][T23504] siw: device registration error -23
[  601.661487][T23542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.697318][T23551] __nla_validate_parse: 6 callbacks suppressed
[  601.697352][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4702'.
[  602.148570][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'.
[  602.235180][T23559] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  603.010008][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4713'.
[  603.043967][T23598] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4713'.
[  603.089371][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4713'.
[  603.569647][T23619] netlink: 'syz.4.4717': attribute type 20 has an invalid length.
[  603.591861][T23619] IPv6: NLM_F_CREATE should be specified when creating new route
[  603.735493][T23618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4718'.
[  603.807768][T23626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4719'.
[  604.022552][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4722'.
[  604.265018][T23636] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  604.303872][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4724'.
[  604.473308][T23654] ªªªªª»: renamed from dummy0
[  604.569232][T23661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4728'.
[  604.597147][T23662] netlink: 'syz.2.4727': attribute type 4 has an invalid length.
[  604.749475][T23672] netlink: 'syz.4.4726': attribute type 13 has an invalid length.
[  604.787553][T23672] netlink: 'syz.4.4726': attribute type 58 has an invalid length.
[  604.826535][T23657] lo: left allmulticast mode
[  604.850409][T23657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  604.910062][T23676] netlink: 'syz.1.4731': attribute type 13 has an invalid length.
[  605.118365][T23684] netlink: 'syz.3.4732': attribute type 34 has an invalid length.
[  605.663213][T23688] syzkaller1: entered promiscuous mode
[  605.710131][T23708] netlink: 'syz.4.4737': attribute type 1 has an invalid length.
[  605.719216][T23688] syzkaller1: entered allmulticast mode
[  606.024191][T23708] bond4: entered promiscuous mode
[  606.053534][T23708] 8021q: adding VLAN 0 to HW filter on device bond4
[  606.132318][T23712] 8021q: adding VLAN 0 to HW filter on device bond4
[  606.151081][T23712] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  606.167609][T23712] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  606.222423][T23712] bond4: (slave ip6gre1): making interface the new active one
[  606.231529][T23712] ip6gre1: entered promiscuous mode
[  606.238887][T23712] bond4: (slave ip6gre1): Enslaving as an active interface with an up link
[  606.802831][T23751] veth7: entered allmulticast mode
[  608.173807][T23820] __nla_validate_parse: 5 callbacks suppressed
[  608.173824][T23820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4759'.
[  608.434017][T23816] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  608.568595][T23816] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  608.642872][T23847] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  608.675209][T23816] bridge1: left promiscuous mode
[  608.691580][T23847] netlink: 'syz.2.4765': attribute type 1 has an invalid length.
[  608.708741][T23816] bond1: left promiscuous mode
[  608.708760][T23847] nbd: error processing sock list
[  608.708784][T23816] ip6gre1: left promiscuous mode
[  608.953077][T23816] 8021q: adding VLAN 0 to HW filter on device bond3
[  608.972545][T23860] netlink: 'syz.2.4767': attribute type 11 has an invalid length.
[  609.021405][T23816] bond4: left promiscuous mode
[  609.050729][T23816] bridge2: left promiscuous mode
[  609.241732][T23816] 8021q: adding VLAN 0 to HW filter on device bond5
[  609.269844][T23816] 8021q: adding VLAN 0 to HW filter on device bond6
[  609.310417][T10528] lo speed is unknown, defaulting to 1000
[  609.319382][T10528] syz2: Port: 1 Link ACTIVE
[  609.331677][T23819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4758'.
[  609.342285][T23819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4758'.
[  609.584476][T23869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.899688][T23884] xt_policy: output policy not valid in PREROUTING and INPUT
[  609.934000][T23881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4772'.
[  610.955752][T23938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'.
[  611.030628][T23928] tunl0: left allmulticast mode
[  611.050231][T23928] gre0: left allmulticast mode
[  611.079782][T23928] gretap0: left allmulticast mode
[  611.091187][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4786'.
[  611.100410][T23928] ip_vti0: left allmulticast mode
[  611.100576][T23928] ip6_vti0: left allmulticast mode
[  611.100718][T23928] sit0: left allmulticast mode
[  611.100842][T23928] ip6tnl0: left allmulticast mode
[  611.100976][T23928] ip6gre0: left allmulticast mode
[  611.101130][T23928] veth0: left allmulticast mode
[  611.102836][T23928] bond3: left promiscuous mode
[  611.169408][T23928] ipip0: left promiscuous mode
[  611.174888][T23928] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  611.184049][T23928] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  611.385709][T23938] bond10: entered promiscuous mode
[  611.391673][T23938] 8021q: adding VLAN 0 to HW filter on device bond10
[  611.519552][T23951] 8021q: adding VLAN 0 to HW filter on device bond10
[  611.569577][T23951] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  611.610337][T23951] bond10: (slave ip6gre2): Error -95 calling set_mac_address
[  611.688085][T13572] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  611.714855][T23960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.022597][T23975] netlink: 'syz.4.4790': attribute type 3 has an invalid length.
[  612.083363][T23974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4791'.
[  612.193238][T23980] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4791'.
[  612.235266][T23983] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4793'.
[  612.279256][T23985] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4794'.
[  613.505623][T24037] netlink: 'syz.4.4809': attribute type 1 has an invalid length.
[  613.613162][T24037] 8021q: adding VLAN 0 to HW filter on device bond5
[  613.660389][T24042] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  613.672988][T24042] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  613.993416][T24057] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4813'.
[  614.024361][T24057] 0·: renamed from hsr0
[  614.057957][T24057] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  614.105055][T24057] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  614.154279][T24057] 0·: entered allmulticast mode
[  614.187122][T24057] hsr_slave_0: entered allmulticast mode
[  614.217768][T24057] hsr_slave_1: entered allmulticast mode
[  614.248854][T24057] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  614.265381][T24068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4816'.
[  614.520501][T24079] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4818'.
[  614.696925][T24086] tipc: Failed to remove unknown binding: 66,0,0/0:4245241697/4245241698
[  614.733022][T24086] tipc: Failed to remove unknown binding: 66,0,0/0:4245241697/4245241698
[  614.914290][T24088] bond11 (unregistering): Released all slaves
[  614.942743][T24103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4824'.
[  615.001866][T24094] tunl0: entered promiscuous mode
[  615.019602][T24094] netlink: 'syz.3.4822': attribute type 3 has an invalid length.
[  615.029875][T24094] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4822'.
[  615.064739][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'.
[  615.413823][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4829'.
[  615.612500][T24132] netlink: 'syz.1.4832': attribute type 83 has an invalid length.
[  615.814525][T24140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4834'.
[  616.053712][T24145] ip6gre1: entered allmulticast mode
[  616.097887][T24147] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4838'.
[  616.102278][T13569] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  616.422170][T24159] bond11: option min_links: invalid value (18446744073709551614)
[  616.464132][T24159] bond11: option min_links: allowed values 0 - 2147483647
[  616.474644][T24168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4843'.
[  616.478378][T24167] nftables ruleset with unbound set
[  616.497877][T24159] bond11 (unregistering): Released all slaves
[  616.597990][T24168] 8021q: adding VLAN 0 to HW filter on device bond11
[  617.230930][T24168] 
: renamed from bond0 (while UP)
[  617.316882][T24171] bond11: (slave dummy0): Enslaving as an active interface with an up link
[  617.599373][T24204] IPVS: set_ctl: invalid protocol: 44 172.30.1.3:20001
[  618.028339][T24209] bond11: invalid ARP target 0.0.0.0 specified for addition
[  618.090245][T24209] bond11: option arp_ip_target: invalid value (0)
[  618.120450][T24209] bond11 (unregistering): Released all slaves
[  618.317320][T24223] veth0_to_bond: entered allmulticast mode
[  618.413573][T24230] macsec1: entered promiscuous mode
[  619.203339][T24267] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  619.374941][T24280] __nla_validate_parse: 2 callbacks suppressed
[  619.374963][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'.
[  619.535484][T24283] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4872'.
[  620.006002][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.132736][T24304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4876'.
[  620.553207][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'.
[  620.638720][T24320] 8021q: adding VLAN 0 to HW filter on device macsec1
[  620.666437][T10528] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  621.044878][T24333] netlink: 'syz.3.4884': attribute type 2 has an invalid length.
[  621.071081][T24333] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4884'.
[  621.083358][T24328] syzkaller0: entered promiscuous mode
[  621.106350][T24328] syzkaller0: entered allmulticast mode
[  621.668548][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4888'.
[  621.744379][T24364] team0 (unregistering): Port device team_slave_0 removed
[  621.779960][T24364] team0 (unregistering): Port device team_slave_1 removed
[  621.951508][T24351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  622.356701][T24400] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 3, id = 0
[  622.607823][T24407] syzkaller0: entered promiscuous mode
[  622.614084][T24407] syzkaller0: entered allmulticast mode
[  622.697706][T24411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4905'.
[  622.721405][T24411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4905'.
[  622.950891][T24428] netlink: 'syz.2.4907': attribute type 3 has an invalid length.
[  622.970436][T24428] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4907'.
[  622.998459][T24428] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4907'.
[  623.033969][T24431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.392946][T24453] IPVS: length: 239 != 24
[  626.968071][T24508] netlink: 'syz.1.4926': attribute type 1 has an invalid length.
[  627.098632][T24508] 8021q: adding VLAN 0 to HW filter on device bond7
[  627.317342][T24514] syzkaller0: entered promiscuous mode
[  627.346324][T24514] syzkaller0: entered allmulticast mode
[  627.514522][T24508] bond7: (slave geneve3): making interface the new active one
[  627.527630][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  627.556845][T24508] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  627.622532][T24514] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.754582][T24514] bridge_slave_0 (unregistering): left allmulticast mode
[  627.806417][T24514] bridge_slave_0 (unregistering): left promiscuous mode
[  627.821623][T24545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  627.834586][T24514] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.664191][T24585] netlink: 'syz.2.4946': attribute type 4 has an invalid length.
[  628.718036][T24591] netlink: 'syz.2.4946': attribute type 4 has an invalid length.
[  628.807215][T13576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.818317][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.830003][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.840792][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.097699][T24612] ksmbd: Unknown IPC event: 1, ignore.
[  629.159302][T24616] nftables ruleset with unbound chain
[  629.328999][T24621] __nla_validate_parse: 4 callbacks suppressed
[  629.329019][T24621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4955'.
[  629.365709][T24625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.387597][T24627] openvswitch: netlink: ct_state flags ffffffff unsupported
[  629.388215][T24625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.417929][T24625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.444971][T24625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.478090][T24627] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4957'.
[  629.570152][T24636] netlink: 'syz.1.4959': attribute type 2 has an invalid length.
[  629.604624][T24636] netlink: 'syz.1.4959': attribute type 1 has an invalid length.
[  629.872453][T24645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4962'.
[  629.903048][T24645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4962'.
[  629.928006][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.180423][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'.
[  630.237814][T24658] syzkaller0: entered promiscuous mode
[  630.254301][T24658] syzkaller0: entered allmulticast mode
[  631.337072][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'.
[  631.355162][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'.
[  631.395504][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'.
[  631.421106][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'.
[  631.432254][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'.
[  632.044426][T24728] netlink: 'syz.1.4983': attribute type 5 has an invalid length.
[  634.087842][T10497] net_ratelimit: 11 callbacks suppressed
[  634.087865][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.332165][T24694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.575952][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.587160][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.610012][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.620583][T24749] SET target dimension over the limit!
[  634.638529][T24749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.834070][T24767] __nla_validate_parse: 34 callbacks suppressed
[  634.834127][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4994'.
[  634.854856][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4994'.
[  634.872701][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4994'.
[  634.884059][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4994'.
[  634.884066][T24754] syzkaller0: entered promiscuous mode
[  634.901135][T24754] syzkaller0: entered allmulticast mode
[  635.041301][T24769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4995'.
[  635.123887][T24773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4995'.
[  635.522515][T24784] vlan3: entered allmulticast mode
[  635.546962][T24784] veth1_virt_wifi: entered allmulticast mode
[  635.687109][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.695975][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.921456][T24806] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5006'.
[  636.079218][T24813] netlink: 'syz.0.5007': attribute type 21 has an invalid length.
[  636.115382][T24813] IPv6: NLM_F_CREATE should be specified when creating new route
[  636.127471][T24813] netlink: 'syz.0.5007': attribute type 1 has an invalid length.
[  636.502839][T24832] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  636.516643][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.542026][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.556821][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.991240][T24838] 8021q: adding VLAN 0 to HW filter on device team1
[  637.010112][T24838] 8021q: adding VLAN 0 to HW filter on device bond1
[  637.031612][T24838] 8021q: adding VLAN 0 to HW filter on device bond2
[  637.061537][T24844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5016'.
[  637.108826][T24838] 8021q: adding VLAN 0 to HW filter on device bond5
[  637.129580][T24838] 8021q: adding VLAN 0 to HW filter on device bond6
[  637.220307][T24838] 8021q: adding VLAN 0 to HW filter on device eth0
[  637.248584][T24838] 8021q: adding VLAN 0 to HW filter on device eth1
[  637.259186][T24838] 8021q: adding VLAN 0 to HW filter on device eth2
[  637.269901][T24838] 8021q: adding VLAN 0 to HW filter on device eth3
[  637.283350][T24838] 8021q: adding VLAN 0 to HW filter on device bond10
[  637.412355][T13576] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.451194][T13569] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  637.463373][T13569] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  637.491889][T13576] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  637.576837][T13576] bond5: (slave veth5): making interface the new active one
[  637.614172][T13576] bond5: active interface up!
[  637.679700][T13576] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  637.865252][T24862] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5020'.
[  638.141623][T24865] syzkaller0: entered promiscuous mode
[  638.167452][T24865] syzkaller0: entered allmulticast mode
[  638.637463][T24883] sctp: [Deprecated]: syz.1.5026 (pid 24883) Use of struct sctp_assoc_value in delayed_ack socket option.
[  638.637463][T24883] Use struct sctp_sack_info instead
[  638.719825][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'.
[  638.756973][T24890] netlink: 'syz.3.5028': attribute type 3 has an invalid length.
[  639.369522][T24914] xt_l2tp: missing protocol rule (udp|l2tpip)
[  639.848916][T10495] net_ratelimit: 14 callbacks suppressed
[  639.848937][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.928654][T24936] FAULT_INJECTION: forcing a failure.
[  639.928654][T24936] name failslab, interval 1, probability 0, space 0, times 1
[  639.945589][T10503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.962972][T24936] CPU: 0 UID: 0 PID: 24936 Comm: syz.3.5041 Not tainted syzkaller #0 PREEMPT(full) 
[  639.963003][T24936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  639.963040][T24936] Call Trace:
[  639.963049][T24936]  <TASK>
[  639.963058][T24936]  dump_stack_lvl+0xe8/0x150
[  639.963168][T24936]  should_fail_ex+0x40c/0x560
[  639.963325][T24936]  should_failslab+0xa8/0x100
[  639.963388][T24936]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  639.963427][T24936]  ? local_lock_release+0x9c/0x160
[  639.963529][T24936]  ? __alloc_skb+0x1d7/0x7a0
[  639.963547][T24936]  ? __alloc_skb+0x1d7/0x7a0
[  639.963576][T24936]  __alloc_skb+0x1d7/0x7a0
[  639.963602][T24936]  netlink_sendmsg+0x5d4/0xb40
[  639.963709][T24936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  639.963741][T24936]  ? aa_sock_msg_perm+0xf1/0x1b0
[  639.963829][T24936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  639.963854][T24936]  sock_sendmsg_nosec+0x13a/0x180
[  639.963967][T24936]  ____sys_sendmsg+0x54e/0x850
[  639.964000][T24936]  ? __pfx_____sys_sendmsg+0x10/0x10
[  639.964036][T24936]  ? import_iovec+0x73/0xa0
[  639.964092][T24936]  ___sys_sendmsg+0x2a5/0x360
[  639.964117][T24936]  ? __lock_acquire+0x683/0x2cf0
[  639.964181][T24936]  ? __pfx____sys_sendmsg+0x10/0x10
[  639.964248][T24936]  ? __fget_files+0x2a/0x420
[  639.964294][T24936]  ? __fget_files+0x3a2/0x420
[  639.964337][T24936]  __x64_sys_sendmsg+0x1b1/0x290
[  639.964367][T24936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  639.964418][T24936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.964460][T24936]  do_syscall_64+0x174/0x580
[  639.964581][T24936]  ? trace_irq_disable+0x3b/0x140
[  639.964632][T24936]  ? clear_bhb_loop+0x40/0x90
[  639.964661][T24936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.964683][T24936] RIP: 0033:0x7f46d1f9e019
[  639.964712][T24936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.964732][T24936] RSP: 002b:00007f46d2eaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  639.964758][T24936] RAX: ffffffffffffffda RBX: 00007f46d2225fa0 RCX: 00007f46d1f9e019
[  639.964774][T24936] RDX: 00000000000408c0 RSI: 0000200000000340 RDI: 0000000000000003
[  639.964789][T24936] RBP: 00007f46d2eaa090 R08: 0000000000000000 R09: 0000000000000000
[  639.964803][T24936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.964816][T24936] R13: 00007f46d2226038 R14: 00007f46d2225fa0 R15: 00007ffd01f461e8
[  639.964852][T24936]  </TASK>
[  640.328228][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.344997][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.407348][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.663061][T24944] __nla_validate_parse: 2 callbacks suppressed
[  640.663098][T24944] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5044'.
[  640.976982][T24956] netlink: 'syz.3.5047': attribute type 5 has an invalid length.
[  641.024399][T24950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5046'.
[  641.037947][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807eafa400: rx timeout, send abort
[  641.047764][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eafa400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  641.258284][T24969] netlink: 'syz.3.5050': attribute type 1 has an invalid length.
[  641.467444][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.615562][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.643621][T10503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.656683][T10526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.669066][T24973] bond13: option min_links: invalid value (18446744073709551614)
[  641.702292][T24973] bond13: option min_links: allowed values 0 - 2147483647
[  641.733281][T24973] bond13 (unregistering): Released all slaves
[  641.766598][T10526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.881591][T24985] syzkaller0: entered promiscuous mode
[  641.888041][T24985] syzkaller0: entered allmulticast mode
[  642.246001][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  643.210325][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'.
[  643.258129][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5071'.
[  643.373488][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5072'.
[  643.410566][T25055] netlink: 'syz.0.5072': attribute type 5 has an invalid length.
[  643.454656][T25055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5072'.
[  643.556998][T25055] geneve3: entered promiscuous mode
[  643.575013][T25055] geneve3: entered allmulticast mode
[  643.616398][ T3321] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  643.648967][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  643.676402][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  643.715664][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  643.807889][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'.
[  643.934244][T25071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5078'.
[  643.997164][T25076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5080'.
[  644.615240][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5085'.
[  644.631703][T25097] netlink: 'syz.3.5085': attribute type 12 has an invalid length.
[  644.641567][T25097] netlink: 'syz.3.5085': attribute type 11 has an invalid length.
[  644.816838][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  645.607180][T10495] net_ratelimit: 11 callbacks suppressed
[  645.607197][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.207004][T25164] netlink: 'syz.0.5107': attribute type 2 has an invalid length.
[  646.227633][T25162] lo: left promiscuous mode
[  646.699895][T25196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.035094][T25162] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.042888][T25162] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.085036][T25175] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  647.351899][T25213] __nla_validate_parse: 4 callbacks suppressed
[  647.351919][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5118'.
[  647.445120][T25220] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5115'.
[  647.672937][T25229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5119'.
[  647.953288][T25244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.970471][T25236] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[  648.166771][T25248] syzkaller0: entered promiscuous mode
[  648.186026][T25248] syzkaller0: entered allmulticast mode
[  648.824944][T25280] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5131'.
[  649.111281][T25291] netlink: 'syz.2.5135': attribute type 1 has an invalid length.
[  649.669947][T25306] netlink: 'syz.2.5140': attribute type 1 has an invalid length.
[  649.694325][T25306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5140'.
[  649.724093][T25306] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.780635][T25307] netlink: 'syz.2.5140': attribute type 1 has an invalid length.
[  649.806830][T25307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5140'.
[  649.829704][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'.
[  649.840164][T25307] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.262108][T25338] xt_hashlimit: size too large, truncated to 1048576
[  650.722632][T25351] syzkaller0: entered promiscuous mode
[  650.748353][T25351] syzkaller0: entered allmulticast mode
[  650.821111][T25354] xt_CT: You must specify a L4 protocol and not use inversions on it
[  651.067170][T25361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5153'.
[  651.163180][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'.
[  651.188204][T25362] syzkaller0: entered promiscuous mode
[  651.210374][T25362] syzkaller0: entered allmulticast mode
[  651.307705][T25369] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5157'.
[  654.200239][T25367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  654.384004][T25416] __nla_validate_parse: 2 callbacks suppressed
[  654.384022][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5166'.
[  654.491435][T25427] FAULT_INJECTION: forcing a failure.
[  654.491435][T25427] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  654.508805][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'.
[  654.569600][T25427] CPU: 1 UID: 0 PID: 25427 Comm: syz.1.5170 Not tainted syzkaller #0 PREEMPT(full) 
[  654.569630][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  654.569644][T25427] Call Trace:
[  654.569653][T25427]  <TASK>
[  654.569662][T25427]  dump_stack_lvl+0xe8/0x150
[  654.569702][T25427]  should_fail_ex+0x40c/0x560
[  654.569738][T25427]  _copy_to_user+0x31/0xb0
[  654.569840][T25427]  simple_read_from_buffer+0xe1/0x170
[  654.569879][T25427]  proc_fail_nth_read+0x1bb/0x230
[  654.569926][T25427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  654.569970][T25427]  ? rw_verify_area+0x24a/0x4c0
[  654.570001][T25427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  654.570032][T25427]  vfs_read+0x213/0xa80
[  654.570059][T25427]  ? __pfx___mutex_lock+0x10/0x10
[  654.570146][T25427]  ? __pfx_vfs_read+0x10/0x10
[  654.570170][T25427]  ? __fget_files+0x2a/0x420
[  654.570205][T25427]  ? __fget_files+0x3a2/0x420
[  654.570233][T25427]  ? __fget_files+0x2a/0x420
[  654.570275][T25427]  ksys_read+0x150/0x270
[  654.570299][T25427]  ? __pfx_ksys_read+0x10/0x10
[  654.570331][T25427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.570356][T25427]  do_syscall_64+0x174/0x580
[  654.570381][T25427]  ? trace_irq_disable+0x3b/0x140
[  654.570412][T25427]  ? clear_bhb_loop+0x40/0x90
[  654.570440][T25427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.570462][T25427] RIP: 0033:0x7f5f2cd5e84e
[  654.570483][T25427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  654.570502][T25427] RSP: 002b:00007f5f2dba2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  654.570525][T25427] RAX: ffffffffffffffda RBX: 00007f5f2dba36c0 RCX: 00007f5f2cd5e84e
[  654.570542][T25427] RDX: 000000000000000f RSI: 00007f5f2dba30a0 RDI: 0000000000000004
[  654.570556][T25427] RBP: 00007f5f2dba3090 R08: 0000000000000000 R09: 0000000000000000
[  654.570570][T25427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  654.570583][T25427] R13: 00007f5f2d026038 R14: 00007f5f2d025fa0 R15: 00007ffdff60ca88
[  654.570620][T25427]  </TASK>
[  654.866387][T25434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5171'.
[  655.113510][T25445] syzkaller0: entered promiscuous mode
[  655.145322][T25445] syzkaller0: entered allmulticast mode
[  655.151398][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'.
[  655.265340][T25445] erspan0: entered promiscuous mode
[  655.282548][T25445] erspan0: entered allmulticast mode
[  655.874082][T25457] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.881584][T25457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.890300][T25457] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.897494][T25457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.014536][T25457] vlan2: left promiscuous mode
[  656.032326][T25457] bridge0: left promiscuous mode
[  656.069112][T25457] team1: left promiscuous mode
[  656.087375][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.117803][T25457] gre1: left promiscuous mode
[  656.181861][T25457] bond8: left promiscuous mode
[  656.187647][T25457] bridge1: left promiscuous mode
[  656.195010][T25457] bond9: left promiscuous mode
[  656.214133][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.269739][T25458] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5177'.
[  656.363467][T25485] syzkaller1: entered promiscuous mode
[  656.368991][T25485] syzkaller1: entered allmulticast mode
[  656.489570][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5188'.
[  656.630589][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5191'.
[  656.887945][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.127994][T10495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.524076][T25544] sctp: [Deprecated]: syz.0.5201 (pid 25544) Use of struct sctp_assoc_value in delayed_ack socket option.
[  657.524076][T25544] Use struct sctp_sack_info instead
[  657.922688][T25560] netlink: 'syz.1.5204': attribute type 3 has an invalid length.
[  658.087270][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.173767][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.347111][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5212'.
[  658.414324][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5212'.
[  658.687046][T25588] netlink: 'syz.0.5214': attribute type 4 has an invalid length.
[  658.792379][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'.
[  658.853374][T25600] siw: device registration error -23
[  659.069746][T25614] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  659.079272][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  659.088533][T25614] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  659.106683][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  659.367623][T25628] geneve3: entered promiscuous mode
[  659.373532][T25628] geneve3: entered allmulticast mode
[  659.652855][T25638] netlink: 'syz.0.5227': attribute type 24 has an invalid length.
[  661.138235][T10528] net_ratelimit: 65 callbacks suppressed
[  661.138251][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.286965][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.740213][T25602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.899726][T25652] netlink: 'syz.0.5229': attribute type 1 has an invalid length.
[  661.960822][T25652] __nla_validate_parse: 3 callbacks suppressed
[  661.960917][T25652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5229'.
[  662.327524][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.560393][T25680] netlink: 'syz.0.5238': attribute type 1 has an invalid length.
[  662.615994][T25682] SET target dimension over the limit!
[  662.636500][T25680] 8021q: adding VLAN 0 to HW filter on device bond5
[  662.683206][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'.
[  662.695025][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'.
[  662.731863][T25680] bond5: (slave geneve4): making interface the new active one
[  662.764005][T25680] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  662.928498][T25705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.947470][T25703] netlink: NAT attribute has 5 unknown bytes
[  662.968836][T25703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.204156][T25719] syzkaller1: entered promiscuous mode
[  663.210629][T25719] syzkaller1: entered allmulticast mode
[  663.279371][T25729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5251'.
[  663.358473][T25735] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5252'.
[  663.376182][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.522963][T25741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5254'.
[  663.569020][T25741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5254'.
[  663.599871][T25741] gretap1: entered promiscuous mode
[  663.605350][T25741] gretap1: entered allmulticast mode
[  663.814765][T25762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5260'.
[  663.895549][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5261'.
[  663.904498][T25767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5261'.
[  664.205579][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.430819][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.431541][T25790] netlink: 'syz.3.5264': attribute type 5 has an invalid length.
[  664.459114][T25794] netlink: 'syz.0.5266': attribute type 12 has an invalid length.
[  664.759159][T25815] netlink: 'syz.3.5269': attribute type 21 has an invalid length.
[  664.893786][T25825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.487964][ T5636] net_ratelimit: 9 callbacks suppressed
[  666.487986][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.255405][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.265494][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.526130][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.584397][T25808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.594481][T25847] netlink: 'syz.4.5281': attribute type 1 has an invalid length.
[  667.616266][T25847] netlink: 'syz.4.5281': attribute type 1 has an invalid length.
[  667.847083][T25857] __nla_validate_parse: 8 callbacks suppressed
[  667.847102][T25857] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5284'.
[  667.896708][T25857] syzkaller0: entered promiscuous mode
[  667.902228][T25857] syzkaller0: entered allmulticast mode
[  667.913039][T25857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5284'.
[  668.566354][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.721332][T25892] syzkaller0: entered allmulticast mode
[  669.170273][T25912] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  669.215726][T25912] bond13 (unregistering): Released all slaves
[  669.304852][T25920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.506375][T25924] syzkaller0: entered promiscuous mode
[  669.518741][T25924] syzkaller0: entered allmulticast mode
[  669.611202][T25926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.630188][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.654843][T25928] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5306'.
[  669.710515][T25928] bond13: Unable to set up delay as MII monitoring is disabled
[  669.722224][T25928] bond13 (unregistering): Released all slaves
[  669.924721][T25934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.957207][T25933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.119617][T25942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5310'.
[  670.295206][T25949] netlink: 'syz.2.5313': attribute type 1 has an invalid length.
[  670.372598][T25949] 8021q: adding VLAN 0 to HW filter on device bond12
[  670.408713][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  670.424865][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.583794][T25964] nbd: must specify an index to disconnect
[  670.628196][T25964] netlink: 'syz.2.5313': attribute type 10 has an invalid length.
[  670.644967][T25960] bond12: (slave veth11): Enslaving as a backup interface with a down link
[  670.662691][T25964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5313'.
[  670.692719][T25949] bond11: (slave dummy0): Releasing backup interface
[  670.719005][T25949] bond12: (slave dummy0): Enslaving as a backup interface with an up link
[  670.773453][T25964] dummy0: entered promiscuous mode
[  670.786315][T25966] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5317'.
[  670.805068][T25964] bond12: (slave dummy0): Releasing backup interface
[  671.121703][T25984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5320'.
[  671.156146][T25988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5321'.
[  671.288316][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5322'.
[  671.451229][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5322'.
[  671.686321][ T5636] net_ratelimit: 5 callbacks suppressed
[  671.686339][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.449190][T26051] tipc: Started in network mode
[  672.462975][T26051] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  672.727520][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.526924][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.748486][T26088] bridge_slave_0: left allmulticast mode
[  673.754233][T26088] bridge_slave_0: left promiscuous mode
[  673.760049][T26088] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.767303][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.346834][T26075] bridge0: port 3(wlan0) entered disabled state
[  674.372255][T26114] tipc: Failed to remove unknown binding: 66,0,0/0:832116892/832116893
[  674.403254][T26114] tipc: Failed to remove unknown binding: 66,0,0/0:832116892/832116893
[  674.416653][T26075] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  674.422624][T26075] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  674.637027][T26121] __nla_validate_parse: 2 callbacks suppressed
[  674.637044][T26121] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5356'.
[  674.732223][T26075] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  674.738263][T26075] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  674.806696][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.840322][T26127] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5357'.
[  674.989984][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.075596][T26075] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  675.099531][T26075] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  675.526007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.536142][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.554240][T26075] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  675.560191][T26075] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  675.591875][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.655135][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.964781][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5365'.
[  676.640690][T26177] syzkaller0: entered promiscuous mode
[  676.669772][T26177] syzkaller0: entered allmulticast mode
[  676.688645][T26207] IPVS: Unknown mcast interface: rose0
[  676.718608][T26202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5370'.
[  676.820215][T26212] xt_time: invalid argument - start or stop time greater than 23:59:59
[  676.887407][ T5636] net_ratelimit: 1 callbacks suppressed
[  676.887425][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.014624][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5375'.
[  677.935064][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.775570][T10526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.970257][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.008880][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.852379][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'.
[  680.909137][T26289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5390'.
[  680.964870][T26287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5392'.
[  681.047140][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.124098][T26304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5395'.
[  681.382490][T26323] netlink: 'syz.4.5400': attribute type 1 has an invalid length.
[  681.524154][T26323] bond6: entered promiscuous mode
[  681.539062][T26323] 8021q: adding VLAN 0 to HW filter on device bond6
[  681.698000][T26343] netlink: 'syz.4.5403': attribute type 1 has an invalid length.
[  681.946091][T10503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.029023][T26360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.086510][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.094971][T26360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.127538][T26360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.160606][T26360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.189728][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5406'.
[  682.199069][T26369] netlink: 'syz.1.5408': attribute type 1 has an invalid length.
[  682.219719][T26360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.229443][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.323520][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5409'.
[  682.332494][T26379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5409'.
[  682.341656][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5409'.
[  682.350574][T26379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5409'.
[  682.499735][T26377] bond8 (unregistering): Released all slaves
[  682.580914][T26389] netlink: 'syz.3.5413': attribute type 12 has an invalid length.
[  682.600852][T26389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5413'.
[  682.630649][T26389] netlink: 'syz.3.5413': attribute type 12 has an invalid length.
[  682.640094][T26384] veth1_to_bridge: entered allmulticast mode
[  682.693258][T13570] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.152188][T26418] v: renamed from veth0_vlan
[  683.173150][T26422] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  683.379407][T26434] xt_socket: unknown flags 0x50
[  683.786657][T26459] netlink: 'syz.2.5438': attribute type 5 has an invalid length.
[  683.836455][T26463] netlink: 'syz.4.5433': attribute type 1 has an invalid length.
[  683.941956][T26470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  683.952886][T26463] bond7: entered promiscuous mode
[  683.959131][T26463] 8021q: adding VLAN 0 to HW filter on device bond7
[  684.277766][T26483] syzkaller0: entered promiscuous mode
[  684.283304][T26483] syzkaller0: entered allmulticast mode
[  684.473720][T26474] netlink: 'syz.3.5439': attribute type 10 has an invalid length.
[  685.028703][T26497] lo speed is unknown, defaulting to 1000
[  686.041550][T26559] netlink: 'syz.1.5464': attribute type 3 has an invalid length.
[  686.118684][T26565] netlink: 'syz.4.5463': attribute type 4 has an invalid length.
[  686.126468][T26565] __nla_validate_parse: 11 callbacks suppressed
[  686.126484][T26565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5463'.
[  686.384187][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'.
[  686.393088][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'.
[  686.459349][T26578] validate_nla: 1 callbacks suppressed
[  686.459367][T26578] netlink: 'syz.0.5469': attribute type 3 has an invalid length.
[  686.575154][T26586] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5473'.
[  686.608413][T26590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5472'.
[  686.808439][T26598] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5477'.
[  686.824307][T26601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5478'.
[  686.910431][T26608] netlink: 'syz.2.5478': attribute type 2 has an invalid length.
[  687.131994][T26616] Unsupported ieee802154 address type: 0
[  687.197794][T26624] netlink: 'syz.4.5479': attribute type 13 has an invalid length.
[  687.298023][T26626] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5484'.
[  687.635572][T26654] netlink: 'syz.1.5487': attribute type 1 has an invalid length.
[  687.740471][T26658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5490'.
[  687.752169][T26654] bond8: entered promiscuous mode
[  687.773577][T26654] 8021q: adding VLAN 0 to HW filter on device bond8
[  687.863798][T26656] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  687.888467][T26656] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  687.898820][T26656] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  687.969945][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5490'.
[  688.380464][T26692] netlink: 'syz.4.5498': attribute type 2 has an invalid length.
[  688.423135][T26698] netlink: 'syz.3.5501': attribute type 1 has an invalid length.
[  688.430912][T26698] netlink: 'syz.3.5501': attribute type 11 has an invalid length.
[  688.518197][T26702] netlink: 'syz.4.5503': attribute type 23 has an invalid length.
[  688.839396][T26719] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  689.647400][T26768] netlink: 'syz.3.5518': attribute type 1 has an invalid length.
[  689.778826][T26768] 8021q: adding VLAN 0 to HW filter on device bond14
[  690.335515][T26808] bridge0: port 3(syz_tun) entered disabled state
[  690.462065][T26808] syz_tun (unregistering): left allmulticast mode
[  690.599794][T26808] syz_tun (unregistering): left promiscuous mode
[  690.638958][T26808] bridge0: port 3(syz_tun) entered disabled state
[  691.082886][T26842] 0ªX¹¦Dö»: entered promiscuous mode
[  691.098929][T26842] 0ªX¹¦Dö»: left allmulticast mode
[  691.177247][T26849] __nla_validate_parse: 16 callbacks suppressed
[  691.177266][T26849] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5538'.
[  691.272337][T26849] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.313064][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5538'.
[  691.353429][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5540'.
[  691.430801][T26849] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5538'.
[  691.440186][T26849] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.447360][T26849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.460702][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5541'.
[  691.469627][T26862] net_ratelimit: 2 callbacks suppressed
[  691.469644][T26862] openvswitch: netlink: Flow key attribute not present in set flow.
[  691.484221][T26849] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5538'.
[  691.535966][T26849] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.656390][T26867] syzkaller1: entered promiscuous mode
[  691.662103][T26867] syzkaller1: entered allmulticast mode
[  692.011382][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5547'.
[  692.024180][T26883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5547'.
[  692.057539][T26883] gtp0: entered promiscuous mode
[  692.073161][T26883] gtp0: entered allmulticast mode
[  692.132673][T26896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5551'.
[  692.183546][T26902] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  692.233319][T26896] syzkaller0: entered promiscuous mode
[  692.252004][T26896] syzkaller0: entered allmulticast mode
[  692.316471][T13569] batman_adv: batadv0: IGMP Querier appeared
[  692.322676][T13569] batman_adv: batadv0: MLD Querier appeared
[  692.434576][T26911] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  692.442162][T26911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  692.487713][T26913] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  693.065508][T26932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5560'.
[  693.250334][T26939] tipc: Started in network mode
[  693.255304][T26939] tipc: Node identity 2e20836544f9, cluster identity 4711
[  693.265352][T26939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.443995][T26938] tipc: Disabling bearer <eth:syzkaller0>
[  693.492144][T26941] netlink: 'syz.0.5563': attribute type 3 has an invalid length.
[  693.850942][T26949] openvswitch: netlink: IP tunnel dst address not specified
[  693.962484][T26963] xt_hashlimit: invalid interval
[  695.210368][T27017] tunl0: entered promiscuous mode
[  695.224682][T27017] netlink: 'syz.1.5580': attribute type 4 has an invalid length.
[  695.292246][T27020] netlink: 'syz.4.5581': attribute type 3 has an invalid length.
[  695.612381][T27035] syzkaller0: entered promiscuous mode
[  695.622461][T27035] syzkaller0: entered allmulticast mode
[  695.727513][T27041] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  696.159369][T27067] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  696.458412][T27082] __nla_validate_parse: 18 callbacks suppressed
[  696.458459][T27082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5602'.
[  696.482807][T27082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5602'.
[  696.868861][T27103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5605'.
[  697.169165][T27113] xt_nat: multiple ranges no longer supported
[  697.342895][T27111] xt_CT: No such helper "snmp"
[  697.603732][T27141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'.
[  697.631171][T27141] netlink: 'syz.0.5617': attribute type 1 has an invalid length.
[  697.713241][T27141] 8021q: adding VLAN 0 to HW filter on device bond6
[  697.738631][T27147] netlink: 592 bytes leftover after parsing attributes in process `syz.0.5617'.
[  697.745748][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5620'.
[  698.787706][T27192] tc_dump_action: action bad kind
[  699.341911][T27218] netlink: 'syz.4.5638': attribute type 1 has an invalid length.
[  699.566850][T27229] bond8: (slave geneve3): making interface the new active one
[  699.578762][T27229] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  699.620990][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  699.661964][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  699.674205][T27229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5638'.
[  699.714761][T27229] 8021q: adding VLAN 0 to HW filter on device bond8
[  699.746385][T13570] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  699.795224][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  699.841091][T27244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5644'.
[  699.979316][T27247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5645'.
[  700.145164][T27255] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  700.206795][T27255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.216393][T27255] openvswitch: netlink: IP tunnel dst address not specified
[  700.239676][T27257] netlink: 'syz.1.5648': attribute type 2 has an invalid length.
[  700.350666][T27261] netlink: 'syz.4.5649': attribute type 8 has an invalid length.
[  700.386691][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5649'.
[  700.837954][T27290] syzkaller0: entered promiscuous mode
[  700.847471][T27290] syzkaller0: entered allmulticast mode
[  701.192008][T27307] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  701.497855][T27322] __nla_validate_parse: 3 callbacks suppressed
[  701.497875][T27322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5667'.
[  701.629867][T27322] netlink: 'syz.0.5667': attribute type 9 has an invalid length.
[  701.689339][T27327] lo: Caught tx_queue_len zero misconfig
[  701.776046][T27326] syzkaller0: entered promiscuous mode
[  701.781599][T27326] syzkaller0: entered allmulticast mode
[  701.918344][T27326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.956279][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5673'.
[  701.980115][T27324] tipc: Resetting bearer <eth:syzkaller0>
[  702.028182][T27324] tipc: Disabling bearer <eth:syzkaller0>
[  702.431835][T27364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'.
[  702.542966][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5681'.
[  702.676797][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5682'.
[  703.137244][T27396] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5688'.
[  703.362339][T27403] netlink: 'syz.4.5691': attribute type 1 has an invalid length.
[  703.533302][T27403] 8021q: adding VLAN 0 to HW filter on device bond9
[  703.591250][T27403] netlink: 'syz.4.5691': attribute type 10 has an invalid length.
[  703.600157][T27403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5691'.
[  703.660547][T27411] bond9: (slave veth1): Enslaving as a backup interface with a down link
[  703.740040][T27426] netlink: 'syz.0.5697': attribute type 1 has an invalid length.
[  703.752346][T27410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  703.764349][T27410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  703.781191][T27410] bond0 (unregistering): Released all slaves
[  703.812752][T27403] ªªªªª»: entered promiscuous mode
[  703.842615][T27426] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  703.897995][T27431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5698'.
[  703.946210][T27431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5698'.
[  703.965007][T27431] vlan0: entered promiscuous mode
[  704.073106][T27447] netlink: 'syz.4.5703': attribute type 1 has an invalid length.
[  704.135601][T27449] bond0: Caught tx_queue_len zero misconfig
[  704.318160][T27457] netlink: 'syz.1.5707': attribute type 11 has an invalid length.
[  704.441556][T27464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5709'.
[  704.527898][T27470] netlink: 'syz.2.5708': attribute type 10 has an invalid length.
[  704.637192][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  704.777355][T27470] team0: Port device geneve1 added
[  704.783442][T27477] netlink: 'syz.3.5712': attribute type 4 has an invalid length.
[  705.077001][T27503] netlink: 'syz.0.5718': attribute type 12 has an invalid length.
[  705.116263][ T5809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  705.218287][T27508] netlink: 'syz.2.5719': attribute type 12 has an invalid length.
[  705.241353][T27508] netlink: 'syz.2.5719': attribute type 29 has an invalid length.
[  705.249312][T27508] netlink: 'syz.2.5719': attribute type 1 has an invalid length.
[  706.712780][T27568] netlink: 'syz.2.5739': attribute type 13 has an invalid length.
[  706.793607][T27533] syz.1.5728 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  706.804998][T27533] CPU: 1 UID: 0 PID: 27533 Comm: syz.1.5728 Not tainted syzkaller #0 PREEMPT(full) 
[  706.805023][T27533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  706.805035][T27533] Call Trace:
[  706.805043][T27533]  <TASK>
[  706.805051][T27533]  dump_stack_lvl+0xe8/0x150
[  706.805086][T27533]  dump_header+0xd3/0x4b0
[  706.805146][T27533]  oom_kill_process+0x3ab/0x970
[  706.805184][T27533]  out_of_memory+0x1064/0x1480
[  706.805205][T27533]  ? try_charge_memcg+0xbca/0x1590
[  706.805247][T27533]  ? __pfx_out_of_memory+0x10/0x10
[  706.805265][T27533]  ? do_raw_spin_unlock+0xf5/0x210
[  706.805301][T27533]  try_charge_memcg+0xc74/0x1590
[  706.805354][T27533]  ? __pfx_try_charge_memcg+0x10/0x10
[  706.805382][T27533]  ? percpu_ref_tryget+0x15/0x180
[  706.805433][T27533]  ? charge_memcg+0x20/0x2b0
[  706.805465][T27533]  charge_memcg+0x19c/0x2b0
[  706.805493][T27533]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  706.805522][T27533]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  706.805554][T27533]  swap_cache_alloc_folio+0x4de/0x990
[  706.805591][T27533]  swap_cache_read_folio+0x44/0x120
[  706.805618][T27533]  swap_cluster_readahead+0x3a0/0x640
[  706.805649][T27533]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  706.805687][T27533]  ? get_vma_policy+0x27b/0x3c0
[  706.805721][T27533]  swapin_readahead+0x19a/0xc10
[  706.805747][T27533]  ? swap_table_get+0x1e/0x260
[  706.805769][T27533]  ? swap_table_get+0x1e/0x260
[  706.805789][T27533]  ? __pfx_swapin_readahead+0x10/0x10
[  706.805814][T27533]  ? swap_table_get+0x1e/0x260
[  706.805833][T27533]  ? swap_table_get+0x1e/0x260
[  706.805852][T27533]  ? swap_table_get+0x1e/0x260
[  706.805873][T27533]  ? swap_table_get+0x216/0x260
[  706.805895][T27533]  ? swap_cache_get_folio+0x2e7/0x2f0
[  706.805922][T27533]  do_swap_page+0x455/0x5060
[  706.805955][T27533]  ? __pte_offset_map+0x29/0x240
[  706.805983][T27533]  ? __lock_acquire+0x683/0x2cf0
[  706.806009][T27533]  ? do_swap_page+0x124/0x5060
[  706.806030][T27533]  ? __pfx_do_swap_page+0x10/0x10
[  706.806048][T27533]  ? __pte_offset_map+0x1ae/0x240
[  706.806073][T27533]  ? pte_offset_map_rw_nolock+0xea/0x160
[  706.806099][T27533]  handle_mm_fault+0x124c/0x3080
[  706.806134][T27533]  ? handle_mm_fault+0xec/0x3080
[  706.806166][T27533]  ? __pfx_handle_mm_fault+0x10/0x10
[  706.806184][T27533]  ? lock_vma_under_rcu+0x45a/0x500
[  706.806253][T27533]  do_user_addr_fault+0xa4d/0x1340
[  706.806318][T27533]  ? trace_page_fault_user+0x84/0x1e0
[  706.806358][T27533]  exc_page_fault+0x6a/0xc0
[  706.806387][T27533]  asm_exc_page_fault+0x26/0x30
[  706.806418][T27533] RIP: 0033:0x7f5f2cd9e02b
[  706.806436][T27533] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[  706.806470][T27533] RSP: 002b:00007f5f2dba3028 EFLAGS: 00010217
[  706.806490][T27533] RAX: 000000000000000c RBX: 00007f5f2d025fa0 RCX: ffffffffffffffe8
[  706.806503][T27533] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000
[  706.806516][T27533] RBP: 00007f5f2ce3500c R08: 0000000000000000 R09: 0000000000000000
[  706.806528][T27533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.806540][T27533] R13: 00007f5f2d026038 R14: 00007f5f2d025fa0 R15: 00007ffdff60ca88
[  706.806574][T27533]  </TASK>
[  706.806587][T27533] memory: usage 307200kB, limit 307200kB, failcnt 587
[  706.910194][T27568] __nla_validate_parse: 14 callbacks suppressed
[  706.910242][T27568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5739'.
[  707.020933][T27578] xt_ecn: cannot match TCP bits for non-tcp packets
[  707.116375][T27533] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0
[  707.238480][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5740'.
[  707.295641][T27533] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0
[  707.304275][T27533] Memory cgroup stats for /syz1:
[  707.305355][T27533] cache 90112
[  707.320282][T27533] rss 12288
[  707.360068][T27578] openvswitch: netlink: Actions may not be safe on all matching packets
[  707.382027][T27533] rss_huge 0
[  707.392960][T27533] shmem 0
[  707.444186][T27533] mapped_file 4096
[  707.474898][T27533] dirty 4096
[  707.486527][T27533] writeback 0
[  707.493335][T27533] workingset_refault_anon 20
[  707.500528][T27533] workingset_refault_file 47
[  707.513497][T27533] swap 172032
[  707.556352][T27533] swapcached 274432
[  707.577623][T27533] pgpgin 104069
[  707.588119][T27533] pgpgout 104042
[  707.591930][T27533] pgfault 193482
[  707.595574][T27533] pgmajfault 11
[  707.612980][T27533] inactive_anon 12288
[  707.626139][T27533] active_anon 4096
[  707.635226][T27533] inactive_file 86016
[  707.645448][T27533] active_file 0
[  707.656974][T27533] unevictable 0
[  707.672873][T27533] hierarchical_memory_limit 314572800
[  707.686560][T27533] hierarchical_memsw_limit 9223372036854771712
[  707.701881][T27533] total_cache 90112
[  707.728546][T27533] total_rss 12288
[  707.732226][T27533] total_rss_huge 0
[  707.735975][T27533] total_shmem 0
[  707.739470][T27533] total_mapped_file 4096
[  707.743747][T27533] total_dirty 4096
[  707.747502][T27533] total_writeback 0
[  707.751331][T27533] total_workingset_refault_anon 20
[  707.756463][T27533] total_workingset_refault_file 47
[  707.761587][T27533] total_swap 172032
[  707.765412][T27533] total_swapcached 274432
[  707.769759][T27533] total_pgpgin 104069
[  707.773760][T27533] total_pgpgout 104042
[  707.777870][T27533] total_pgfault 193482
[  707.781948][T27533] total_pgmajfault 11
[  707.785954][T27533] total_inactive_anon 12288
[  707.790476][T27533] total_active_anon 4096
[  707.794737][T27533] total_inactive_file 86016
[  707.799261][T27533] total_active_file 0
[  707.803261][T27533] total_unevictable 0
[  707.807257][T27533] anon_cost 0
[  707.810569][T27533] file_cost 0
[  707.870818][T27533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5728,pid=27532,uid=0
[  707.975721][T27533] Memory cgroup out of memory: Killed process 27532 (syz.1.5728) total-vm:102312kB, anon-rss:1256kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  708.175402][T27616] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  708.334442][T27618] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  708.350797][T27618] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  708.360166][T27618] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  708.451906][T27619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5751'.
[  708.569451][T27622] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  708.852109][T27637] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5756'.
[  708.963295][T27637] gretap0: entered promiscuous mode
[  709.052146][T27666] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5758'.
[  709.204083][T27654] netlink: 'syz.4.5757': attribute type 13 has an invalid length.
[  709.744181][T27716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5762'.
[  710.698798][T27776] tunl0: left promiscuous mode
[  710.797374][T27776] 0·: left allmulticast mode
[  710.830515][T27776] hsr_slave_0: left allmulticast mode
[  710.858244][T27776] hsr_slave_1: left allmulticast mode
[  710.898973][T27776] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  710.924249][T27776] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  710.933622][T27776] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  710.951813][T27776] ip6gre1: left allmulticast mode
[  710.970214][T27776] geneve3: left promiscuous mode
[  711.019191][T27776] geneve3: left allmulticast mode
[  711.040234][T27785] bridge_slave_0: left allmulticast mode
[  711.055040][T27785] bridge_slave_0: left promiscuous mode
[  711.062918][T27785] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.132933][T27785] team0: Port device team_slave_0 removed
[  711.193929][T27785] team0: Port device team_slave_1 removed
[  711.213748][T27785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  711.247974][T27791] team0: Mode changed to "loadbalance"
[  711.630521][T27817] netlink: 'syz.3.5777': attribute type 1 has an invalid length.
[  711.649157][T27817] netlink: 'syz.3.5777': attribute type 11 has an invalid length.
[  711.658263][T27817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5777'.
[  711.669019][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'.
[  714.951514][T13570] tipc: Subscription rejected, illegal request
[  715.138543][T27870] block nbd4: NBD_DISCONNECT
[  715.178720][T27870] block nbd4: Send disconnect failed -32
[  715.221142][T27870] block nbd4: shutting down sockets
[  715.256002][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5794'.
[  715.272310][T27874] netlink: 'syz.0.5792': attribute type 83 has an invalid length.
[  715.514409][T27898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5801'.
[  715.524999][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5798'.
[  715.534486][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5798'.
[  715.544489][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5798'.
[  715.610849][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5798'.
[  715.724096][T27913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  715.820779][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5802'.
[  715.889420][T27925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5797'.
[  716.036665][T27929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5806'.
[  716.276713][T27933] nbd4: detected capacity change from 0 to 63
[  716.283666][T27940] block nbd4: NBD_DISCONNECT
[  716.340096][ T1630] 
[  716.342519][ T1630] ======================================================
[  716.349559][ T1630] WARNING: possible circular locking dependency detected
[  716.356603][ T1630] syzkaller #0 Not tainted
[  716.361027][ T1630] ------------------------------------------------------
[  716.368052][ T1630] kworker/1:1H/1630 is trying to acquire lock:
[  716.374217][ T1630] ffff88807834a268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150
[  716.383374][ T1630] 
[  716.383374][ T1630] but task is already holding lock:
[  716.390767][ T1630] ffff8880272051f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  716.399312][ T1630] 
[  716.399312][ T1630] which lock already depends on the new lock.
[  716.399312][ T1630] 
[  716.409731][ T1630] 
[  716.409731][ T1630] the existing dependency chain (in reverse order) is:
[  716.418843][ T1630] 
[  716.418843][ T1630] -> #7 (&cmd->lock){+.+.}-{4:4}:
[  716.426076][ T1630]        __mutex_lock+0x19d/0x1550
[  716.431214][ T1630]        nbd_queue_rq+0xc1/0x1150
[  716.436255][ T1630]        blk_mq_dispatch_rq_list+0x499/0x1990
[  716.442505][ T1630]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  716.449435][ T1630]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  716.455960][ T1630]        blk_mq_run_work_fn+0x16c/0x300
[  716.461525][ T1630]        process_scheduled_works+0xa8e/0x14e0
[  716.467625][ T1630]        worker_thread+0xa47/0xfb0
[  716.472755][ T1630]        kthread+0x388/0x470
[  716.477367][ T1630]        ret_from_fork+0x514/0xb70
[  716.482526][ T1630]        ret_from_fork_asm+0x1a/0x30
[  716.487816][ T1630] 
[  716.487816][ T1630] -> #6 (set->srcu){.+.+}-{0:0}:
[  716.494948][ T1630]        __synchronize_srcu+0xc9/0x2f0
[  716.500441][ T1630]        elevator_switch+0x1e8/0x7b0
[  716.505814][ T1630]        elevator_change+0x2fa/0x480
[  716.511123][ T1630]        elevator_set_default+0x375/0x440
[  716.516858][ T1630]        blk_register_queue+0x3f3/0x4e0
[  716.522459][ T1630]        __add_disk+0x6cb/0xe30
[  716.527358][ T1630]        add_disk_fwnode+0x100/0x3a0
[  716.532652][ T1630]        nbd_dev_add+0x733/0xb60
[  716.537607][ T1630]        nbd_init+0x15f/0x1e0
[  716.542401][ T1630]        do_one_initcall+0x250/0x870
[  716.547712][ T1630]        do_initcall_level+0x10a/0x1a0
[  716.553231][ T1630]        do_initcalls+0x59/0xa0
[  716.558087][ T1630]        kernel_init_freeable+0x29d/0x3e0
[  716.563837][ T1630]        kernel_init+0x1d/0x1d0
[  716.568729][ T1630]        ret_from_fork+0x514/0xb70
[  716.573861][ T1630]        ret_from_fork_asm+0x1a/0x30
[  716.579163][ T1630] 
[  716.579163][ T1630] -> #5 (&q->elevator_lock){+.+.}-{4:4}:
[  716.587015][ T1630]        __mutex_lock+0x19d/0x1550
[  716.592146][ T1630]        elevator_change+0x1af/0x480
[  716.597448][ T1630]        elevator_set_none+0xb5/0x140
[  716.602843][ T1630]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  716.609182][ T1630]        nbd_start_device+0x189/0xb30
[  716.614560][ T1630]        nbd_genl_connect+0x1597/0x1c10
[  716.620110][ T1630]        genl_family_rcv_msg_doit+0x233/0x340
[  716.626199][ T1630]        genl_rcv_msg+0x614/0x7a0
[  716.631240][ T1630]        netlink_rcv_skb+0x226/0x4a0
[  716.636565][ T1630]        genl_rcv+0x28/0x40
[  716.641103][ T1630]        netlink_unicast+0x7bb/0x940
[  716.646392][ T1630]        netlink_sendmsg+0x813/0xb40
[  716.651705][ T1630]        sock_sendmsg_nosec+0x13a/0x180
[  716.657270][ T1630]        ____sys_sendmsg+0x54e/0x850
[  716.662585][ T1630]        ___sys_sendmsg+0x2a5/0x360
[  716.667789][ T1630]        __x64_sys_sendmsg+0x1b1/0x290
[  716.673256][ T1630]        do_syscall_64+0x174/0x580
[  716.678383][ T1630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.684823][ T1630] 
[  716.684823][ T1630] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  716.693440][ T1630]        blk_alloc_queue+0x544/0x690
[  716.698740][ T1630]        __blk_mq_alloc_disk+0x194/0x390
[  716.704379][ T1630]        nbd_dev_add+0x494/0xb60
[  716.709334][ T1630]        nbd_init+0x15f/0x1e0
[  716.714025][ T1630]        do_one_initcall+0x250/0x870
[  716.719341][ T1630]        do_initcall_level+0x10a/0x1a0
[  716.724815][ T1630]        do_initcalls+0x59/0xa0
[  716.729699][ T1630]        kernel_init_freeable+0x29d/0x3e0
[  716.735446][ T1630]        kernel_init+0x1d/0x1d0
[  716.740410][ T1630]        ret_from_fork+0x514/0xb70
[  716.745550][ T1630]        ret_from_fork_asm+0x1a/0x30
[  716.750857][ T1630] 
[  716.750857][ T1630] -> #3 (fs_reclaim){+.+.}-{0:0}:
[  716.758081][ T1630]        fs_reclaim_acquire+0x71/0x100
[  716.763554][ T1630]        kmem_cache_alloc_noprof+0x64/0x5f0
[  716.769460][ T1630]        mas_alloc_nodes+0x291/0x350
[  716.774895][ T1630]        mas_preallocate+0x2cf/0x630
[  716.780193][ T1630]        vma_link+0x123/0x470
[  716.784884][ T1630]        insert_vm_struct+0x1bf/0x290
[  716.790261][ T1630]        create_init_stack_vma+0x5c1/0x9b0
[  716.796080][ T1630]        alloc_bprm+0x506/0x640
[  716.800948][ T1630]        kernel_execve+0x85/0x9c0
[  716.805991][ T1630]        try_to_run_init_process+0x13/0x60
[  716.811809][ T1630]        kernel_init+0xad/0x1d0
[  716.816673][ T1630]        ret_from_fork+0x514/0xb70
[  716.821799][ T1630]        ret_from_fork_asm+0x1a/0x30
[  716.827089][ T1630] 
[  716.827089][ T1630] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  716.834693][ T1630]        __might_fault+0xcb/0x130
[  716.839741][ T1630]        _copy_from_user+0x28/0xb0
[  716.844893][ T1630]        tcp_repair_set_window+0x137/0x430
[  716.850821][ T1630]        do_tcp_setsockopt+0xd6c/0x1f80
[  716.856386][ T1630]        do_sock_setsockopt+0x17c/0x1b0
[  716.861948][ T1630]        __x64_sys_setsockopt+0x13d/0x1b0
[  716.867673][ T1630]        do_syscall_64+0x174/0x580
[  716.872792][ T1630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.879216][ T1630] 
[  716.879216][ T1630] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  716.887323][ T1630]        lock_sock_nested+0x41/0x100
[  716.892621][ T1630]        inet_shutdown+0x6a/0x390
[  716.897722][ T1630]        nbd_mark_nsock_dead+0x2cb/0x550
[  716.903362][ T1630]        recv_work+0x1cee/0x1e10
[  716.908406][ T1630]        process_scheduled_works+0xa8e/0x14e0
[  716.914523][ T1630]        worker_thread+0xa47/0xfb0
[  716.919673][ T1630]        kthread+0x388/0x470
[  716.924290][ T1630]        ret_from_fork+0x514/0xb70
[  716.929421][ T1630]        ret_from_fork_asm+0x1a/0x30
[  716.934715][ T1630] 
[  716.934715][ T1630] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  716.942368][ T1630]        __lock_acquire+0x1520/0x2cf0
[  716.947766][ T1630]        lock_acquire+0x106/0x350
[  716.952820][ T1630]        __mutex_lock+0x19d/0x1550
[  716.957944][ T1630]        nbd_queue_rq+0x373/0x1150
[  716.963064][ T1630]        blk_mq_dispatch_rq_list+0x499/0x1990
[  716.969151][ T1630]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  716.976034][ T1630]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  716.982566][ T1630]        blk_mq_run_work_fn+0x16c/0x300
[  716.988129][ T1630]        process_scheduled_works+0xa8e/0x14e0
[  716.994207][ T1630]        worker_thread+0xa47/0xfb0
[  716.999332][ T1630]        kthread+0x388/0x470
[  717.003942][ T1630]        ret_from_fork+0x514/0xb70
[  717.009081][ T1630]        ret_from_fork_asm+0x1a/0x30
[  717.014375][ T1630] 
[  717.014375][ T1630] other info that might help us debug this:
[  717.014375][ T1630] 
[  717.024608][ T1630] Chain exists of:
[  717.024608][ T1630]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  717.024608][ T1630] 
[  717.036703][ T1630]  Possible unsafe locking scenario:
[  717.036703][ T1630] 
[  717.044257][ T1630]        CPU0                    CPU1
[  717.049636][ T1630]        ----                    ----
[  717.055011][ T1630]   lock(&cmd->lock);
[  717.059004][ T1630]                                lock(set->srcu);
[  717.065433][ T1630]                                lock(&cmd->lock);
[  717.071944][ T1630]   lock(&nsock->tx_lock);
[  717.076369][ T1630] 
[  717.076369][ T1630]  *** DEADLOCK ***
[  717.076369][ T1630] 
[  717.084519][ T1630] 4 locks held by kworker/1:1H/1630:
[  717.089815][ T1630]  #0: ffff88801f2b3540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  717.100894][ T1630]  #1: ffffc900066cfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  717.113784][ T1630]  #2: ffff88802681b218 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  717.123210][ T1630]  #3: ffff8880272051f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  717.132183][ T1630] 
[  717.132183][ T1630] stack backtrace:
[  717.138074][ T1630] CPU: 1 UID: 0 PID: 1630 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) 
[  717.138094][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  717.138106][ T1630] Workqueue: kblockd blk_mq_run_work_fn
[  717.138130][ T1630] Call Trace:
[  717.138136][ T1630]  <TASK>
[  717.138143][ T1630]  dump_stack_lvl+0xe8/0x150
[  717.138169][ T1630]  print_circular_bug+0x2e1/0x300
[  717.138189][ T1630]  check_noncircular+0x12e/0x150
[  717.138208][ T1630]  __lock_acquire+0x1520/0x2cf0
[  717.138236][ T1630]  ? irqentry_exit+0x218/0x8f0
[  717.138257][ T1630]  ? lockdep_hardirqs_on+0x7a/0x110
[  717.138275][ T1630]  ? irqentry_exit+0x218/0x8f0
[  717.138293][ T1630]  ? trace_irq_disable+0x3b/0x140
[  717.138320][ T1630]  ? nbd_queue_rq+0x373/0x1150
[  717.138336][ T1630]  lock_acquire+0x106/0x350
[  717.138360][ T1630]  ? nbd_queue_rq+0x373/0x1150
[  717.138382][ T1630]  __mutex_lock+0x19d/0x1550
[  717.138402][ T1630]  ? nbd_queue_rq+0x373/0x1150
[  717.138418][ T1630]  ? ret_from_fork_asm+0x1a/0x30
[  717.138436][ T1630]  ? nbd_queue_rq+0x373/0x1150
[  717.138453][ T1630]  ? __pfx___mutex_lock+0x10/0x10
[  717.138477][ T1630]  ? __pfx_nbd_queue_rq+0x10/0x10
[  717.138497][ T1630]  nbd_queue_rq+0x373/0x1150
[  717.138516][ T1630]  ? __lock_acquire+0x13e8/0x2cf0
[  717.138540][ T1630]  ? __pfx_nbd_queue_rq+0x10/0x10
[  717.138558][ T1630]  ? irqentry_exit+0x218/0x8f0
[  717.138577][ T1630]  ? lockdep_hardirqs_on+0x7a/0x110
[  717.138595][ T1630]  ? irqentry_exit+0x218/0x8f0
[  717.138617][ T1630]  blk_mq_dispatch_rq_list+0x499/0x1990
[  717.138648][ T1630]  ? sbitmap_get+0x229/0x390
[  717.138747][ T1630]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  717.138773][ T1630]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  717.138800][ T1630]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  717.138837][ T1630]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  717.138872][ T1630]  ? blk_mq_run_work_fn+0x144/0x300
[  717.138891][ T1630]  ? blk_mq_run_work_fn+0x144/0x300
[  717.138913][ T1630]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  717.138941][ T1630]  ? blk_mq_run_work_fn+0x144/0x300
[  717.138959][ T1630]  blk_mq_run_work_fn+0x16c/0x300
[  717.138978][ T1630]  ? process_scheduled_works+0xa20/0x14e0
[  717.138997][ T1630]  process_scheduled_works+0xa8e/0x14e0
[  717.139028][ T1630]  ? __pfx_process_scheduled_works+0x10/0x10
[  717.139050][ T1630]  ? assign_work+0x3cf/0x5d0
[  717.139070][ T1630]  worker_thread+0xa47/0xfb0
[  717.139096][ T1630]  ? __kthread_parkme+0x71/0x1f0
[  717.139121][ T1630]  kthread+0x388/0x470
[  717.139145][ T1630]  ? __pfx_worker_thread+0x10/0x10
[  717.139164][ T1630]  ? __pfx_kthread+0x10/0x10
[  717.139199][ T1630]  ret_from_fork+0x514/0xb70
[  717.139223][ T1630]  ? __pfx_ret_from_fork+0x10/0x10
[  717.139245][ T1630]  ? __switch_to+0xc89/0x1420
[  717.139266][ T1630]  ? __pfx_kthread+0x10/0x10
[  717.139302][ T1630]  ret_from_fork_asm+0x1a/0x30
[  717.139342][ T1630]  </TASK>
[  717.454324][T27940] block nbd4: Disconnected due to user request.
[  717.481698][T27940] block nbd4: shutting down sockets
[  717.505360][ T1630] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  717.515045][ T1630] Buffer I/O error on dev nbd4, logical block 0, async page read
[  717.528828][  T767] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  717.538708][  T767] Buffer I/O error on dev nbd4, logical block 1, async page read
[  717.547056][  T767] Buffer I/O error on dev nbd4, logical block 2, async page read
[  717.554816][  T767] Buffer I/O error on dev nbd4, logical block 3, async page read
[  717.563107][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.579567][  T767] Buffer I/O error on dev nbd4, logical block 0, async page read
[  717.587455][  T767] Buffer I/O error on dev nbd4, logical block 1, async page read
[  717.595206][  T767] Buffer I/O error on dev nbd4, logical block 2, async page read
[  717.603489][  T767] Buffer I/O error on dev nbd4, logical block 3, async page read
[  717.611881][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.621749][  T767] Buffer I/O error on dev nbd4, logical block 0, async page read
[  717.629903][  T767] Buffer I/O error on dev nbd4, logical block 1, async page read
[  717.638524][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.648221][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.658310][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.668947][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.680714][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.690665][T27947] ldm_validate_partition_table(): Disk read failed.
[  717.698068][  T767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  717.708008][T27947] Dev nbd4: unable to read RDB block 0
[  717.714817][T27947]  nbd4: unable to read partition table
[  717.725619][T27947] ldm_validate_partition_table(): Disk read failed.
[  717.733377][T27947] Dev nbd4: unable to read RDB block 0
[  717.739571][T27947]  nbd4: unable to read partition table