last executing test programs:

2.350665768s ago: executing program 1 (id=4058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfffc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004885}, 0x24008004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2.325591879s ago: executing program 3 (id=4059):
r0 = socket$kcm(0x23, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000085000000c4001400b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$tun(0xffffffffffffffff, 0x0, 0x2e)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000002400)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/178, 0xb2}, {&(0x7f0000002240)=""/177, 0xb1}], 0x7, &(0x7f0000002380)=""/107, 0x6b}, 0x20)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x78}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)

2.206661261s ago: executing program 1 (id=4061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', <r4=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x42010)

2.010630509s ago: executing program 1 (id=4065):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20)

2.010205129s ago: executing program 0 (id=4066):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x316}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4088000}, 0x10002090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000003b00)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb12cea5a4bedb7a4b1fa9897a86d3add2db7208aa10343df8ff0f4d6325549c6e3d0f819ed23064e15279e9f5aa7113dc2542a54817c862c433f24c", 0x78, 0x0, 0x0, 0x0) (async)
bind$qrtr(r7, &(0x7f00000002c0)={0x2a, 0x2, 0x7fff}, 0xc) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x12}], 0x2)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x1, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844)

1.956529376s ago: executing program 4 (id=4067):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getlink={0x54, 0x12, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x640, 0xa0}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x51c57}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @random="bed1feba8837"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4c005) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
r7 = epoll_create1(0x0)
sendfile(r7, r4, &(0x7f0000000140)=0x6, 0x276f) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) (async, rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) (async, rerun: 64)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) (async)
r11 = gettid()
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r11}]}, 0x3c}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe8)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0xab0, 0x2f, 0x9, 0x70bd07, 0x25dfdbfb, {0xb}, [@nested={0x298, 0x79, 0x0, 0x1, [@generic="b531fb3ccc5019f805934cb628ea47532822b7b8314acf04ce9247b2c83060ffb9787edb49fcc99086090b0f8e147e99a19b6d305541673123615c0f6f5fd615588570c2bf53aa5fb557d966ad7805662a4f1aab42ce7007a6dbdff46c9c1a1220a568ae85ea28508a9288f79cae6808000000be5b300cfdad8977bdc542a6546052cb0a4fd836b9713848afae4fea6326c489ed3fa9851a39444004a5e8927023702f230448be08662a3ae1753b8a70f9", @generic="0957e98da80d78ee0abbc24cfea574d9810a2eac5fe12578911158b8a87670d84fb4e85a62a49b404170a7a69939b2480d33e7f9e592c44ba7a5151a4875fd73e21b61fc0615c47705dddd8426b230a32a76ba6f5ae4ae737e2476b83d53cf131581e3f7781430e8f0ac224c4bc658b208a9", @nested={0x78, 0x135, 0x0, 0x1, [@nested={0x72, 0xda, 0x0, 0x1, [@nested={0x4, 0x64}, @generic="48bc63d2ec2a7869cc74c699408ec97cc7bbfe00eac93e2e9de21e89b7176f8fa1dd926ac952f7d5ee39a8f859212c5817588a7b4cc272d67c13df3f1d2a6944868adad7a884a55c4aa7417690450a28aeb780bb9c607e3c53904a3e68f32a1da6c4", @typed={0x8, 0x148, 0x0, 0x0, @uid=r12}]}]}, @generic="696f2eb1cfbdf62e348511ec116ad7b30746e4dceae24f6f1567bb9a290f1adeb0efceca4c739674e2331c0c18b244a2f64309289525a5469c552c1c375932c050fcd4884f9d20ef6e6e2fad1a6130de9ada177ca63973e94e9a24d06dcf214720ed31cc9d60ddcb295be994f42c0a4b3b42d7fcd5d6f44f64257d9a05576187732839ae915c51c3f1843772946065d5408d5b66ca2452a5606f1e3d215392b66daf1cdb907d0fa45b53fb665488eeb33d0719f957ba34962bafedc0c31e37cbcdd01e8b693f79f81d9b3083ea3021fc3630894f32952335f69daf9f09dc2c79cda2e99b553c17a809af1b6ebfd7b89ec1c3a80916359912cd"]}, @generic="b892288799aba8fca78cc4cb80ef91b348df4daae10db4d23db60c57f7636948f3a6f38d3965c6e5e8c1796d504942368709e96bb21ac9f2e76ff5ec61c96cfad7bc33089bc1d10c957e96513d867fdcf57301c0a37b21885068fda2552892ad257b863ff032c41b37e6cc69fb21d68293994cfecab6f2509180f69f1658efd8da7dc960b98f3928a50865e509741319884a77204b86fa57b404cc9a5a9203a2ab85", @generic="9112bcb405247cd800b816aa01d5229e3e555b6376619e465a39b862dfc8d3b9104f2ae2d9ea23fed1199ad8cf2c46fbe05a4e2eac87fd1d069b4d40d50bace3892fe8f77eed160ca0de6a0aba9bdadf805a46a07ddfe52700929884d5dd5499cdf012bdcf632916d52695690e86d0e5ba69ecb6e571ecca47afb24a6245476ce678cb499db0d762ec2b67f2906ff19366ced122bd3d2a29a9626e26e8a4", @generic="2b11a3244dca49d4d50ba60bfc524ab83f94039e2c4ed727b030da8687f56b9aaddd683a61df5dca200f52604eb8c65522460bd194931e808931692b57ac5042f43e1ab7e4dcab1e9d35d3fb4e78a992c4cce5f7285b9d21030858c19c67ffa76c422b6fe5bf8030d17440296c26f7d84e46fddc3db8c2b875615c9f9a5c7c0ba878746e52de165fe1796e7c1ba74903b8d82213c6d7ddd73a2328fd0c98cb81dfca521a7f0d917189a25c8ea360", @nested={0x46d, 0x11c, 0x0, 0x1, [@generic="7a8f784346cea1a7ead9ff63b4d15b7995fc2dc5907a35c6b81acc9043b9cbb6c78119741a9f1a220b144a16ef22aec11e1035c289c465380388eba0f8405d596982b008066b62c38b3c77e333080ad3d39db87f2c6f6b702aa8901752da12167a989f64ea4c41736b19a9c169ddeea7045084f98ec27242ce2d496d8d30856f0e802a2effef829212db90236686cfad1b725030a86d602752ec85384941ee1d01d45a5f8ffbc85e64200e10115b8c02c9b255cb95ff5ab76dcd984473e18c8ad2e3f94a76990d17760a69df49740e0b8d836f", @nested={0xba, 0xd0, 0x0, 0x1, [@generic="bcf164318e7f0021eb83add60a08cc6960cee50c582a225712e4a5a56310c4ae0521648d41f1df5439095941c8a50cf33bf7a99c2eb698a2311709891f5a9d6c333a4168b63d14bb5d0fb0db189da9de929ae20d7cfacf68cec7aa083150b13c6283cdcaf4bff172bbe42619958c7f634a17f543", @generic="b82971", @generic="86703e2c3ad453be663ee743209d4b7d5aced60226e458e4f0711c2851ec4bbc6b715a0b10f2a58f3699f42215de001391fdd11240d03c", @nested={0x4, 0x7}, @nested={0x4, 0x95}]}, @nested={0x15a, 0x5b, 0x0, 0x1, [@nested={0x4, 0x12a}, @generic="33ecd88baa4f6dbca5deac0a28e9687ade3a6239d4b1c0a3bd0ca82377f307ee48b83fdddb2044cd07e2ab09742b0bd5c1226a4d0c0097648281ca642594e139ee2e8d8b851940255215471103801b6d4fda920618395e11169f6ae89f7f3b16dbaf56e9b1b9f6eddd70d588b8f0d8cd0690a77bd9fdda99bbe847b89aa2da5398f1", @nested={0x4, 0xf6}, @typed={0x8, 0x29, 0x0, 0x0, @pid=r11}, @nested={0x98, 0x15e, 0x0, 0x1, [@nested={0x91, 0x162, 0x0, 0x1, [@typed={0x9, 0x120, 0x0, 0x0, @str='veth\x00'}, @generic="da40cf4a8211358569bf579ebac983e28dd3c9882ca55803705be7a643c7513986945093c2be0d6073e41c2cd2e04dbeadd6555b8621f19d2ece118ef19891526d7eb29aeb56922dd1ba99445f5664261d6d5e9629fde1cb0af095274652d572c7f70376d9", @nested={0x4, 0x148}, @typed={0xa, 0x13e, 0x0, 0x0, @str='}\x03%!-\x00'}, @nested={0x4, 0xf8}, @nested={0x4, 0xed}, @nested={0x4, 0x15e}]}]}, @typed={0x2b, 0xb6, 0x0, 0x0, @binary="36fb519c076673ffc104efd4c2ff4efd6786f0afcf831c758179575ccfa1915cb3bca3ab188eaa"}]}, @generic="a9f6ee7cddf4dbeb4dfc2b76bbb350b11ae3c33413e14271df6315f8e24d4374534fbcb000ddc045b4f655e97a1d0275d7d2d0a3fd51045d9744ad7ad1d63c25a436ac6501be458d8fcb4e064c7e8be988c8e280187329464e77b8248c9badbbeb94655b5677794317a8a398232fbbd61b716056d0c564d0b3ec1b24125a2c700ca340af062493b632e25c4c450f533658f9057f1778", @nested={0xd6, 0x167, 0x0, 0x1, [@generic="d4a20f01c6a8a83bcf055fcc3d59d68e5a50055df36b9b4bd55ee23072723818b684ed0f8e67926a602cc16b1cdb14148b4c4e88032430f16144891ac9172a89c473b312ac2e0a337ad1c1d3884eb5df6f425e910241cd46dad8464ca89a231a472372fb4874f3338145607113566c0788b7b4e391c64c762868298035cbdac4b8f34e6680bccc25da3a94d2f63fc2d9d197c3e03a7adf62d95bdccd375f7bc7f66f2cce724d1a9fd7e03ef97a8c186b2bec68426d66fb8ce27734ad02bde2f6bc0a412083e3e37b9d7e033e45f43ae63106"]}, @typed={0xf, 0x13f, 0x0, 0x0, @str=']%[](\x8d{##^\x00'}]}, @generic="9f691abfc1597c54e1483c4e692d7ae6ecc9f37debc7a01a8ffe51fbf96aebe581339e63a075870051e8b49389ce1f76327ea79600b9b93a019fb19e14c2f318858cf8232f45a8f92b098591262c64e718aeed241d8e5b8ce940fc254c9d7fb29bdaf55d75cd55e4b5ace041df075548097ae4df5415bf5785de6685110ec427984bf8005b73e95458c236ce09385b9d67221d56", @generic="f7d4819bcb95d140a2bbeddf0a7900252e17701c56b69e7c404efea3107c3f9c53bd4f94cbfeb1766ae2fd0aa51efafc5be30a55ea10d05c926a543924d801fc2db520b7293fd58072f2855018936dcd24bc1a566033ca08cda17fb18b4e2322430ee8c08ae96ba99503d4f87f9d6772cb7b71f99101656de771af2c491f9ad1288658494fab33a17db7e13773051bf0b8f408c8543de558945fb0d59dfa08c15dca777a78a56f259c345add30707f463e1c059f76a10393a858f094539fe621c91f9bfc9e12d3844d66e17940e5087ac40a6e39207b379a0a4a3ad503192e85be37fc19e3935921b21ea488436b12023626052c", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x3ff}, @typed={0x8, 0xe5, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x69, 0x0, 0x0, @pid=r11}]}, 0xab0}, 0x1, 0x0, 0x0, 0x460d4}, 0x80000)

1.8829188s ago: executing program 2 (id=4068):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x5, 0x7f7aa7c5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) (async)
sendmmsg$inet(r0, &(0x7f0000001540), 0xef6f9f, 0x4008000)

1.7942632s ago: executing program 0 (id=4069):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%pi6   \x00'}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0f00000009000000070000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0300000000000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000300"/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)=r0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x21, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffff5}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @call={0x85, 0x0, 0x0, 0xc4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x2, 0x87, &(0x7f0000000ec0)=""/135, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0x4, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, r5, 0xffffffffffffffff], &(0x7f0000001340)=[{0x4, 0x1, 0x7, 0x8}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x32}, 0x9c)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_SRC_IF={0x8, 0x9, r11}]}, 0x24}}, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000009700002100000018150000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$sock_netdev_private(r12, 0x89f8, &(0x7f0000000040)="b256f02e49e4a2e01cfe9bd2a767163c715b941f773f86a87440d11ec23c3239")
sendmsg$NFT_BATCH(r12, &(0x7f0000000e40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10242004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000030a010200000000000000000200000a0900030073797a31000000000900030073797a31000000000900030073797a3200000000200004800800024016af905d1400030076657468315f766972745f77696669000b00070066696c74657200001c010000160a01010000000000000000010000020900020073797a30000000000900010073797a30000000000800074000000002cc00038008000140000000000800014000000000b80003801400010076657468305f746f5f626f6e640000001400010070696d367265670000000000000000001400010076657468305f746f5f626f6e6400000014000100776c616e3100000000000000000000001400010070696d3672656730000000000000000014000100767863616e310000000000000000000014000100776c616e30000000000000000000000014000100766c616e3100000000000000000000001400010077673200000000000000000000000000080007400000000308000740000000010c0005400000000000000001b0000000050a01080000000000000000000000090c00024000000000000000027c0008800c000240000000000000000d0c00014000000000000000010c00024000000000000000020c00024000000000000000090c00014000000000000000f60c00014000000000000000040c00024000000000000000090c00024000000000000000d30c00024000000000000000090c000240000000000000000208000a40000000000900030073797a320000000040000000050a01020000000000000000030000022000048008000140000000001400030073797a5f74756e0000000000000000000a000700726f75746500000054000000180a01010000000000000000070000010900010073797a300000000008000740000000020900010073797a300000000008000740000000000900010073797a30000000000900010073797a3000000000ac000000020a010200000000000000000200000908000240000000030800024000000002080002400000000267000600a8ad4e2f13ec5991521058eebf14f12c38074913a017e783f9322bc7d612953a82f1e3885391b01b1befe0983fc087e78dffa3040043d39e0c85c089260e00d9f8f2e5863a73f02d16a4ae0cc5890dd87190e0edc54f6c165d606f5e004b41abb5bca6000900010073797a30000000000c00044000000000000000042c000000140a01040000000000000000070000000900020073797a32000000000c0006400000000000000004140000001100010000000000000000000100000a"], 0x3c4}, 0x1, 0x0, 0x0, 0x4008814}, 0x980)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000240)=0x2)

1.793379065s ago: executing program 1 (id=4070):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80, &(0x7f0000000440)}, 0x240280d1)

1.772624931s ago: executing program 4 (id=4071):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0xffe0}, {0x0, 0xffe0}, {0xd, 0xffe0}}, [{0x8}]}, 0x2c}}, 0x400)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})

1.62469341s ago: executing program 1 (id=4072):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r5=>0x0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24010)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

1.552489958s ago: executing program 2 (id=4073):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.322789849s ago: executing program 4 (id=4074):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="3d687546db26ce7b3260afc86af1bfca3d7a4cd5fd175454884748cea88c949b09f2ae43b362803377825c0d1cfb0df3aaf03b1d031bc9f04b552106291d343a71aab05548da0279e981b1bcf4f507ae2e735fb3735673bfb03fa2fdb3cd6bd39a3865786f011d5b127a5298a895ffe18861282fa332ed7ece2d5b61ef01e2799373e956a0d20caa341b17a181a26e7f9a1e5de106cf08a0cdc57b20d731ddfe618330c65711906dabe6af715d72fbd2fc00", 0xb2}, {&(0x7f0000000140)="1b7cb97127779c66cf1ea6f583daed8e92e7199590907484754e3209e37a96d885a19c8484a0d2c1767b2fa895765ab2c20ada548e15ed99f887e07f31b882e82bb6659060f5e761d090135c4617c33a80c74b9765d3a03801862bcdebe8fc026c7bfa7a86005d96d9f713935d696f24c103fa4cbf0cc3ad543c8e8a411e9f", 0x7f}, {&(0x7f00000001c0)="f522f838939d33f7f73068e4e56724786e87d552380f3661acf14541f24536c0bece3d92212ba1edd32140a6b2a876d9ad094284ec22d37d21803d514232cf217f7d84fddf642b54fe00bb15a63e61321d4ed726f0373734f05ede8ff09882e6f282f4ec63dc2ca26a7886a39674934dd42488dceacf618692f53821eb7cadf98bffbd05e3299eac48eb503fbed7d1fd36aea36d500c1715bc4efc74cdec42b721de09322891e55140fe84b786dcccb4402620ec6658471e24ba", 0xba}, {&(0x7f0000000280)="01891557190b9ca124c36f73dd98ec5da0b972719d74d0a95738068218dfc0ff20e3673d2497c27191b29de7331f4ed0285a2be4b33d3ac12b6e046ccaf460d9abb7633e0c912ed589e436", 0x4b}, {&(0x7f0000000300)="3b7df24cd1235468eca088ef68bb266afb258b79c34099dcb2cfcef7e99e14668b1d1813b2f31e7d05fd12eb6c2a4e6e16a3cafdca62f452102c79b66e87142e8105a5b2029901da921ada721ffeee3cd918c207527d736fde4f0d6b72a59a0e33d8cb9afbd07433b1e158e4dbd1ded73a16ece752fe14c7868fb73a3421ca5ab191ed99080b055155ad78288035a9137fe2f1c44fcc6409055d52ef90a82f3853159ff9ecec", 0xa6}], 0x5, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xa, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000004c0)='syzkaller\x00', 0x11, 0x79, &(0x7f0000000500)=""/121, 0x41100, 0x1d, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x2, 0x3, 0x5}, {0x2, 0x2, 0xa, 0x4}, {0x4, 0x2, 0xd, 0xc}, {0x2, 0x4, 0x1, 0xa}, {0x1, 0x2, 0xb, 0xa}, {0x1, 0x3}, {0x0, 0x2, 0x4, 0xa}, {0x3, 0x4, 0x10, 0xa}, {0x4, 0x1, 0x2, 0x7}, {0x3, 0x5, 0x9, 0xa}], 0x10, 0x3}, 0x94)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x810, r3, 0x180000000)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000980)={0x1, 0x0, 0x7f, 0x8, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000009c0)={<r5=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000019c0)={{<r6=>0x0, 0x81, 0x0, 0x1000, 0xffffffffffffffff, 0xd, 0x3, 0x1, 0x4, 0xa73e, 0xd, 0x8, 0x9b3, 0x8, 0x6}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001a80)={r5, r6, "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", "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"})
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000002a80)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'wlc\x00', 0xc, 0x3, 0xd}, 0x2c)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000002ac0)=0x1, 0x4)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002b80)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xc4, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3b92950b9c2540a4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
getsockname(r4, &(0x7f0000002d40)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002dc0)=0x80)
getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000002e00)={@initdev, @local}, &(0x7f0000002e40)=0xc)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000002e80)=""/146, &(0x7f0000002f40)=0x92)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002f80)={'wg0\x00', <r10=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000030c0)={@ifindex=r10, 0x31, 0x1, 0x9, &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003000)=[0x0, 0x0], &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[0x0], <r11=>0x0}, 0x40)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000003240)={<r12=>r2, &(0x7f0000003140)='\x00', 0xb0b00, &(0x7f0000003180)={@align=0x9, {0x100, 0x5000, 0x7, 0x1}}, 0x9, &(0x7f00000031c0)={@_ha_fsid}, &(0x7f0000003200)=0x5})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003100)={@ifindex=r9, r2, 0x2e, 0x4, 0x0, @void, @value=r12, @void, @void, r11}, 0x20)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003280)={'pim6reg1\x00'})
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000034c0)={&(0x7f00000032c0)=0x44e5, 0x6, &(0x7f0000003300)=[{}, {}], &(0x7f0000003480)})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000003500))
socket(0x8, 0x6, 0x4)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x64, 0xd, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8001)

1.320048962s ago: executing program 2 (id=4075):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000)

1.309723118s ago: executing program 3 (id=4076):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50)

1.226722404s ago: executing program 0 (id=4077):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x2, 0x7, 0x3, 0x2, 0x8, 0xfa, 0xc09, 0xc}, &(0x7f0000000080)={0x1a, 0x4, 0x7fffffff, 0x2, 0x200, 0x8000000000000000, 0xfffffffffffffff9, 0xb}, &(0x7f00000000c0)={0xdb1, 0x4, 0x0, 0x0, 0x3, 0x7, 0x8, 0x51f}, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8})

1.073744702s ago: executing program 3 (id=4078):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, 0x0) (async)
getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (async)
ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01062dbd7000fddbdf256000000008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8004000}, 0x24000800) (async)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01062dbd7000fddbdf256000000008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x8004000}, 0x24000800)

1.047332004s ago: executing program 0 (id=4079):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket(0x2a, 0x2, 0xffffffff) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0xffffffffffffff2b, 0x2c, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xffff}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffffff, 0xffffff]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x50}}, 0x4000) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

946.831111ms ago: executing program 4 (id=4080):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd3000f8dbdf250200000087557e357516627ae74d34943b98dfc3cef00c23c987a0d42dbc161c7d016e18e41acb84b5d4", @ANYRESHEX=0x0], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="41040201"], 0x7) (async)
write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="41040201"], 0x7)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00')
preadv(r4, 0x0, 0x0, 0x0, 0x0) (async)
preadv(r4, 0x0, 0x0, 0x0, 0x0)

887.205482ms ago: executing program 3 (id=4081):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r2], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x800)
sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast})
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf067", 0x14}], 0x1)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

881.565635ms ago: executing program 0 (id=4082):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x6, 0x9, 0x1, 0x16, @local, @loopback, 0x40, 0x1, 0x40, 0xd98c}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', <r8=>0x0, 0x0, 0x20, 0x5, 0x4, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x2924, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x400c840)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', <r13=>0x0, 0x4, 0x6, 0x0, 0x1, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x40, 0x9, 0x4}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netpci0\x00', <r14=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', <r15=>0x0, 0x1, 0x10, 0x7fff, 0x2, {{0xa, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x9, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x26}, 0xfff}, {@loopback, 0x200000}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000680)={0x594, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x51}, 0x24000011)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008002e800400328008002f"], 0x30}], 0x1}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @loopback, @remote, 0x9, 0x2, 0x4, 0x400, 0xc9af, 0x42000000, r6})

674.763378ms ago: executing program 4 (id=4083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x10c43}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROTO_DOWN={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040841}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x10c43}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROTO_DOWN={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040841}, 0x0) (async)

581.192818ms ago: executing program 1 (id=4084):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r2, &(0x7f0000001900)=""/143, 0x8f, 0x10022, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmmsg$unix(r2, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000440)="b2f796a4c870cecc9adf97c355918be0c8c3912d12587f580d51b25b1bbfbc7f0f82", 0x22}, {&(0x7f00000005c0)="9ee17c5aa0d3f9df1dfa66cc3a4580cb8cb3cd982808f317e1a535e64bd460acc6da6ab35e5565523ee252cc11f75ada78f283dfdd0a66e1b427753f3462bb2020b98708c7e785f4c98f4a1d0e9b1df128f8e75bbac8b3410dafbf3da6784f03969b34a49ec419fb1d47a71835d5", 0x6e}], 0x2, 0x0, 0x0, 0x8811}}], 0x1, 0x44004)
accept$alg(r0, 0x0, 0x0)
shutdown(r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x25dfdbfd, {}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}]}, 0x2c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc011}, 0x4800)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800dd8d27bd7000fedbdf2502201000fd00fe020000000008000400", @ANYRES32=r10, @ANYBLOB="b4af08e1ae3acfed168a05ab2e"], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090)
socket$netlink(0x10, 0x3, 0x0)

429.771343ms ago: executing program 3 (id=4085):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1b8, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x198, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5a, 0x1, "6578b1e1cfeb588e2099407a1c611bfdbe0cbfe4d24758b4b695784f0b365806ec403c7a0d228eef180cc0d470b1bcb271c715475838a2933bef34508b604267ae96c9bbaef5e7d4a6e8acc60d6ed37eb3a5e8d97fee"}, @NL80211_BAND_2GHZ={0xce, 0x0, "2ec1bee817c767fdfe3fcd444df46b0187204010e3ce4a9bdb976b3349346459e5f1cd3572afab70fa78f1df7f3ef13961cac2e6c633ab6b6fbd1f5702a057802d4dda82ffb468f189f0fa72e0b8ddfad8e6dcc9c051ee3dbe81538a5f4836a339a800d81614cfef95898ec63aa23a9eb7be3e9f403c8fd4d78bc862052d3111b593b9f5d4c0b8e95fa80905bdfc2cbf9f74a983c1fbccaecabb62d3d09b62512e77dca5e7ffd9786f5ed61dd2afd7ebcd3407e5a6cc42d83344dd104b45c8571c14e973659a7035a969"}, @NL80211_BAND_6GHZ={0x68, 0x3, "5cbf02a5867bcdd8c69bad75532c9c3380bd7bdc6d10b3844dda92d3f591ceb8160e31ce020191a8832a8a27f2524e5a5f39abe6ea63b8d2b5249a22e31aa78d26d021c71f7ba0fb410c30df17ca46dda6b69cc1454ad2d6c5ea77d11fc43252076f043c"}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000}, 0x20000040)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000001000000003f00000008000300", @ANYBLOB="b152206bc094dfce446d85a6857fa33d410f8c9b0ba1501c8faf91cc7544d3c6e7139803d1d267c6f093cb98e6be69af1e740bde66169e18e714b9bd0eb1b5a66dcb1be087b55f34a4841bbc26077e1f3e8c31f9e9c0b2a6407909fc4075ac0e9d8d3716cef633f794e06b7faa2920cd47d9002d2183da70bca6b2c54b7019ef60914fd9c3d098cecbed90d3d0dfe4cf578d01ece762c8d47ee8e0b48f34fce1f048296722d86df3034e6e943192c807580d823e003f2ac60b97cadfd4076e238ff1c2e3350fd50f2ad15a6773243d00c8390725ee71a4524e32c53be226a8600f17a2", @ANYRESOCT=r2], 0x34}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1f, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x9, 0x1, 0x5, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xe, 0x0, 0xa, 0xfffffffffffffffe, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @generic={0xb, 0x2, 0x1, 0x4, 0x3c2}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x5, 0x57, &(0x7f0000000740)=""/87, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000800)=[{0x5, 0x4, 0x3, 0x5}, {0x5, 0x2, 0x0, 0xa}, {0x2, 0x1, 0x7, 0x6}, {0x2, 0x3, 0xd, 0x2}, {0x1, 0x3, 0x2, 0xb}], 0x10, 0x5}, 0x94)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000a40)={r0, &(0x7f0000000940)='\x00', 0x2000, &(0x7f0000000980)={@align=0x3, {0x6, 0x81, 0x0, 0x8}}, 0xfffffffe, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f00000005c0)=0x4})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x8, 0x10}, 0xc)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d00)={'vlan1\x00'})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)

383.080512ms ago: executing program 4 (id=4086):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xfffe, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0x7, 0x1000, 0x0, 0x40001c2b, 0x8000, 0x7ff, 0x9d4, 0x2000000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

382.599982ms ago: executing program 0 (id=4087):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x4008030)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200206000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000c0008000826"], 0xcc}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102"], 0x38}}, 0x0)

373.192331ms ago: executing program 2 (id=4088):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x39, 0x5, "8a56ddfdd6"}, 0xd)
ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x100000001)
recvmmsg(r0, &(0x7f0000004640)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000140)=""/6, 0x6}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002140)=""/87, 0x57}, 0x4}, {{&(0x7f00000021c0)=@qipcrtr, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002240)=""/175, 0xaf}, {&(0x7f0000002300)=""/249, 0xf9}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/173, 0xad}], 0x4, &(0x7f0000003500)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004500)=@un=@abs, 0x80, &(0x7f0000004600)=[{&(0x7f0000004580)=""/114, 0x72}], 0x1}, 0xc}], 0x3, 0x40012100, &(0x7f0000004700)={0x0, 0x989680})

221.509458ms ago: executing program 2 (id=4089):
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, @llc={0x1a, 0x8, 0x7, 0x4e, 0x9, 0x1, @random="41d1aed0c10f"}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, 0x8cdc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='vlan0\x00', 0x3e9e, 0x5, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0)

57.929647ms ago: executing program 2 (id=4090):
r0 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, <r1=>0x0}, 0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@dev, <r2=>0x0}, &(0x7f0000000500)=0x14)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/47, 0x39, 0x2f, 0x1, 0x200}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, @fallback=0x21, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@loopback, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r12, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010)
shutdown(r12, 0x1)
setsockopt(r11, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0)

0s ago: executing program 3 (id=4091):
r0 = socket$kcm(0x1e, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000b00)={r3, r2})
close(0x3)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80)
r4 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)

kernel console output (not intermixed with test programs):

 type 1 has an invalid length.
[  353.924079][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'.
[  353.937569][T14261] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  353.943317][T14255] netlink: 'syz.3.2297': attribute type 3 has an invalid length.
[  353.980684][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'.
[  354.061975][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'.
[  354.071826][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'.
[  354.399275][T14284] netlink: 'syz.2.2305': attribute type 4 has an invalid length.
[  354.549331][T14292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.764054][T14292] syzkaller0: entered promiscuous mode
[  354.786956][T14292] syzkaller0: entered allmulticast mode
[  354.811938][T14292] tipc: Resetting bearer <eth:syzkaller0>
[  354.898177][T14290] tipc: Resetting bearer <eth:syzkaller0>
[  357.815177][T14290] tipc: Disabling bearer <eth:syzkaller0>
[  357.828453][T14313] bond0: Error: Cannot enslave bond to itself.
[  357.881045][ T7452] tipc: Node number set to 1642825657
[  358.281371][T14346] __nla_validate_parse: 27 callbacks suppressed
[  358.281391][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2320'.
[  358.456811][T14358] netlink: 'syz.2.2319': attribute type 21 has an invalid length.
[  358.507192][T14358] IPv6: NLM_F_CREATE should be specified when creating new route
[  359.827098][T14377] blkio.reset_stats is deprecated
[  360.519525][T14414] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  360.767170][T14426] openvswitch: netlink: IP tunnel dst address not specified
[  360.815678][T14430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2337'.
[  360.966702][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'.
[  360.980230][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'.
[  360.994622][T14434] vlan3: entered allmulticast mode
[  361.001161][T14434] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  361.052810][T14442] netdevsim netdevsim2 
: renamed from netdevsim0
[  361.191066][T14354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.206689][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'.
[  361.623652][T14470] netlink: 'syz.1.2347': attribute type 32 has an invalid length.
[  361.676144][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'.
[  361.689329][T14476] netlink: 'syz.2.2349': attribute type 7 has an invalid length.
[  361.699084][T14476] netlink: 'syz.2.2349': attribute type 8 has an invalid length.
[  361.707776][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'.
[  362.396867][T14500] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2353'.
[  362.450212][T14470] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.478319][T14470] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  362.702676][T14470] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  362.724879][T14470] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  362.834261][T14470] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  362.874028][T14470] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  362.894884][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'.
[  363.009752][T14470] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  363.026488][T14470] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  363.321966][T14529] nftables ruleset with unbound chain
[  363.554008][T14543] netlink: 'syz.2.2366': attribute type 7 has an invalid length.
[  363.580823][T14543] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2366'.
[  364.243111][T14563] syzkaller1: entered allmulticast mode
[  364.321807][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'.
[  364.441411][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'.
[  364.469991][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'.
[  364.483445][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2374'.
[  365.349302][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'.
[  365.406148][T14617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2383'.
[  365.937488][T14649] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  365.965207][T14649] netlink: 'syz.3.2390': attribute type 7 has an invalid length.
[  366.129167][T14649] netlink: 'syz.3.2390': attribute type 7 has an invalid length.
[  366.371221][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'.
[  366.514977][T14670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2396'.
[  366.795933][T14681] pimreg: entered allmulticast mode
[  366.897037][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2399'.
[  368.492587][T14776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.826927][T14770] veth5: entered promiscuous mode
[  368.843749][T14770] veth5: entered allmulticast mode
[  368.850792][T14789] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2410'.
[  369.098585][T14795] tipc: Enabling of bearer <eth:xfrm0> rejected, failed to enable media
[  369.144327][T14795] openvswitch: netlink: Message has 4 unknown bytes.
[  369.166512][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.508836][T14810] syzkaller0: entered promiscuous mode
[  369.518881][T14810] syzkaller0: entered allmulticast mode
[  369.959152][T14829] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2420'.
[  371.537883][T14891] syzkaller1: entered promiscuous mode
[  371.540290][T14890] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2432'.
[  371.584013][T14891] syzkaller1: entered allmulticast mode
[  372.162596][T14919] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2438'.
[  372.263612][T14923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2439'.
[  372.288076][T14926] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2441'.
[  372.411456][ T5758] IPVS: starting estimator thread 0...
[  372.506887][T14930] IPVS: using max 30 ests per chain, 72000 per kthread
[  372.524366][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2443'.
[  372.934565][T14950] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  373.289429][T14961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.390765][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'.
[  373.463689][T14972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2452'.
[  373.562076][T14961] syzkaller0: entered promiscuous mode
[  373.569289][T14961] syzkaller0: entered allmulticast mode
[  373.577129][T14961] tipc: Resetting bearer <eth:syzkaller0>
[  373.590381][T14976] netlink: 'syz.2.2452': attribute type 2 has an invalid length.
[  373.628132][T14958] tipc: Resetting bearer <eth:syzkaller0>
[  373.652852][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'.
[  373.856049][T14988] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  377.293938][T14958] tipc: Disabling bearer <eth:syzkaller0>
[  377.317714][T14991] tc_dump_action: action bad kind
[  377.561127][T15002] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2461'.
[  377.769162][T15019] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003
[  377.892620][T15018] xt_hashlimit: max too large, truncated to 1048576
[  378.074350][T15024] netlink: 'syz.2.2466': attribute type 21 has an invalid length.
[  378.106151][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'.
[  378.572873][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  379.224289][T15077] ksmbd: Unknown IPC event: 1, ignore.
[  379.233889][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2480'.
[  380.068475][T15114] netlink: 'syz.0.2488': attribute type 11 has an invalid length.
[  380.077868][T15114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'.
[  380.495285][T15130] netlink: 'syz.1.2491': attribute type 21 has an invalid length.
[  380.518056][T15130] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2491'.
[  380.844138][T15125] syzkaller0: entered promiscuous mode
[  380.881777][T15125] syzkaller0: entered allmulticast mode
[  381.233303][T15166] netlink: 'syz.2.2498': attribute type 21 has an invalid length.
[  381.465437][T15168] veth0: entered promiscuous mode
[  381.543845][T15167] veth0: left promiscuous mode
[  381.810833][T15185] netlink: 'syz.2.2504': attribute type 1 has an invalid length.
[  381.820404][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2506'.
[  381.864029][T15185] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2504'.
[  381.875473][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'.
[  381.907297][T15188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.404237][T15207] netlink: 'syz.1.2513': attribute type 1 has an invalid length.
[  383.066759][T15238] SET target dimension over the limit!
[  383.172535][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  383.235625][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  383.307649][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2526'.
[  383.465393][T15250] bond6 (unregistering): Released all slaves
[  383.976951][T15275] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.2531'.
[  383.999622][T15276] netlink: 'syz.3.2530': attribute type 83 has an invalid length.
[  384.048023][T15282] erspan0: entered allmulticast mode
[  384.511224][T15295] netlink: 'syz.3.2535': attribute type 1 has an invalid length.
[  384.545134][T15295] bridge0: Device is already in use.
[  384.579592][T15296] netlink: 'syz.4.2536': attribute type 27 has an invalid length.
[  384.615342][T15296] netlink: 'syz.4.2536': attribute type 4 has an invalid length.
[  384.644052][T15296] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2536'.
[  384.724091][T15302] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2532'.
[  384.818232][T15302] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2532'.
[  384.831064][T15311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2539'.
[  384.930597][T15311] netlink: 'syz.3.2539': attribute type 1 has an invalid length.
[  385.082930][T15320] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2541'.
[  385.142557][T15323] syzkaller0: entered promiscuous mode
[  385.153739][T15323] syzkaller0: entered allmulticast mode
[  385.182130][T15323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2543'.
[  385.562739][T15343] validate_nla: 1 callbacks suppressed
[  385.562773][T15343] netlink: 'syz.0.2548': attribute type 12 has an invalid length.
[  385.858636][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.460670][T15370] netlink: 'syz.1.2558': attribute type 1 has an invalid length.
[  386.777457][T15384] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  386.815633][T15379] syzkaller0: entered promiscuous mode
[  386.824046][T15379] syzkaller0: entered allmulticast mode
[  387.387009][T15411] netlink: 'syz.1.2568': attribute type 2 has an invalid length.
[  390.908494][T15420] __nla_validate_parse: 6 callbacks suppressed
[  390.908538][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'.
[  391.309794][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'.
[  391.343353][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'.
[  391.466153][T15444] netlink: 'syz.4.2575': attribute type 1 has an invalid length.
[  391.571984][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  391.663347][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  391.730353][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  391.772795][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  391.788877][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2582'.
[  391.809887][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  391.854139][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  392.075856][T15465] macvlan2: entered promiscuous mode
[  392.081683][T15465] macvlan2: entered allmulticast mode
[  392.088919][T15465] bond8: (slave macvlan2): Opening slave failed
[  392.276155][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.295810][T15483] lo: left promiscuous mode
[  392.309362][T15496] netlink: 'syz.1.2586': attribute type 10 has an invalid length.
[  392.320591][T15496] openvswitch: netlink: Flow key attr not present in new flow.
[  392.357248][T15483] tunl0: left promiscuous mode
[  392.449084][T15483] erspan0: left promiscuous mode
[  392.622078][T15483] 8021q: adding VLAN 0 to HW filter on device .`
[  392.674140][T15483] 8021q: adding VLAN 0 to HW filter on device team0
[  392.892702][T15483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  392.925572][T15483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  392.954665][T15483] veth1_vlan: left promiscuous mode
[  392.965242][T15483] veth0_vlan: left promiscuous mode
[  392.984108][T15483] veth0_vlan: entered promiscuous mode
[  393.005020][T15483] veth1_vlan: entered promiscuous mode
[  393.019057][T15483] macvlan0: left promiscuous mode
[  393.090503][T15483] veth1_macvtap: left promiscuous mode
[  393.148994][T15483] veth0_macvtap: left promiscuous mode
[  393.197186][T15483] veth0_macvtap: entered promiscuous mode
[  393.235156][T15483] veth1_macvtap: entered promiscuous mode
[  393.263635][T15483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  393.319429][T12596] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.327409][T12596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.478591][   T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.494152][   T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.605738][   T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.720513][   T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.137854][T15553] syzkaller0: entered promiscuous mode
[  394.170046][T15553] syzkaller0: entered allmulticast mode
[  394.792202][T15573] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  395.505387][T15608] netlink: 'syz.4.2615': attribute type 13 has an invalid length.
[  396.055607][T15622] __nla_validate_parse: 69 callbacks suppressed
[  396.055629][T15622] netlink: 3668 bytes leftover after parsing attributes in process `syz.3.2621'.
[  396.073402][T15628] netlink: 524 bytes leftover after parsing attributes in process `syz.3.2621'.
[  396.194918][T15630] tipc: Started in network mode
[  396.238052][T15630] tipc: Node identity 5a1c788f14a2, cluster identity 4711
[  396.275365][T15630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.292992][T15631] syzkaller0: entered promiscuous mode
[  396.305153][T15631] syzkaller0: entered allmulticast mode
[  396.334277][T15634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  396.399893][T15643] bridge0: entered promiscuous mode
[  396.424652][T15634] tipc: Resetting bearer <eth:syzkaller0>
[  396.447575][T15629] tipc: Resetting bearer <eth:syzkaller0>
[  396.475938][T15629] tipc: Disabling bearer <eth:syzkaller0>
[  396.939148][T15665] veth0: entered promiscuous mode
[  396.953808][T15665] veth0: left promiscuous mode
[  397.143994][T15674] netlink: 'syz.4.2638': attribute type 1 has an invalid length.
[  397.383567][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'.
[  397.414690][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2639'.
[  397.468792][T15679] openvswitch: netlink: Duplicate or invalid key (type 0).
[  397.513018][T15679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.753424][T15701] netlink: 'syz.1.2642': attribute type 21 has an invalid length.
[  397.778467][T15701] IPv6: NLM_F_CREATE should be specified when creating new route
[  397.908098][T15704] netlink: 'syz.3.2645': attribute type 1 has an invalid length.
[  397.961298][T15704] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2645'.
[  397.969110][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'.
[  398.062115][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'.
[  398.119925][   T30] audit: type=1800 audit(1782724239.926:2): pid=15712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2648" name="memory.events" dev="tmpfs" ino=2607 res=0 errno=0
[  398.180616][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'.
[  398.207052][   T30] audit: type=1804 audit(1782724239.936:3): pid=15712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2648" name="/newroot/509/memory.events" dev="tmpfs" ino=2607 res=1 errno=0
[  398.429264][T15728] sctp: [Deprecated]: syz.3.2651 (pid 15728) Use of int in max_burst socket option deprecated.
[  398.429264][T15728] Use struct sctp_assoc_value instead
[  398.593034][   T30] audit: type=1804 audit(1782724240.406:4): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2651" name="/newroot/549/cgroup.controllers" dev="tmpfs" ino=2809 res=1 errno=0
[  398.641301][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'.
[  398.669709][   T30] audit: type=1800 audit(1782724240.436:5): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2651" name="cgroup.controllers" dev="tmpfs" ino=2809 res=0 errno=0
[  398.701698][T15739] bond0: Caught tx_queue_len zero misconfig
[  399.355731][T15763] netlink: 'syz.4.2665': attribute type 61 has an invalid length.
[  399.403670][T15763] netlink: 'syz.4.2665': attribute type 4 has an invalid length.
[  399.447840][T15763] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2665'.
[  400.054068][T15799] x_tables: duplicate entry at hook 1
[  400.384061][T15811] netlink: 'syz.3.2679': attribute type 4 has an invalid length.
[  400.591065][T15819] netlink: 'syz.3.2682': attribute type 2 has an invalid length.
[  401.349403][T15853] __nla_validate_parse: 5 callbacks suppressed
[  401.349422][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'.
[  401.378324][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'.
[  401.399716][T15854] syzkaller0: entered promiscuous mode
[  401.414178][T15854] syzkaller0: entered allmulticast mode
[  401.433867][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'.
[  401.447022][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'.
[  401.451668][T15860] xt_hashlimit: overflow, try lower: 3/0
[  401.794568][T15879] netlink: 'syz.3.2700': attribute type 3 has an invalid length.
[  401.838176][T15879] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2700'.
[  401.875534][T15883] netlink: 'syz.3.2700': attribute type 3 has an invalid length.
[  401.916132][T15883] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2700'.
[  401.980529][T15889] netlink: 'syz.4.2702': attribute type 39 has an invalid length.
[  402.161726][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2704'.
[  402.637834][T15890] syzkaller1: entered promiscuous mode
[  402.644603][T15890] syzkaller1: entered allmulticast mode
[  403.083709][T15917] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  403.151554][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'.
[  403.357584][T15917] 8021q: adding VLAN 0 to HW filter on device bond8
[  403.468202][T15927] 8021q: adding VLAN 0 to HW filter on device bond8
[  403.490302][T15927] bond8: (slave gre7): The slave device specified does not support setting the MAC address
[  403.514035][T15927] bond8: (slave gre7): Error -95 calling set_mac_address
[  403.606014][T15930] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  403.625697][T15930] bond9 (unregistering): Released all slaves
[  403.674867][T15933] gretap1: entered promiscuous mode
[  403.696754][T15933] bond8: (slave gretap1): making interface the new active one
[  403.709722][T15933] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  403.768015][T15936] macvlan3: entered promiscuous mode
[  403.786496][T15936] macvlan3: entered allmulticast mode
[  403.800746][T15936] bond8: entered promiscuous mode
[  403.829493][T15936] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  403.852323][T15936] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  403.891879][T15936] bond8: left promiscuous mode
[  403.979175][T15955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2718'.
[  404.017151][T15956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2718'.
[  404.292582][T15972] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  404.704171][T15987] tipc: Can't bind to reserved service type 1
[  404.920546][T15999] lo: Caught tx_queue_len zero misconfig
[  405.291539][T16020] 0�: renamed from hsr0 (while UP)
[  405.328665][T16020] 0�: entered allmulticast mode
[  405.341593][T16020] hsr_slave_0: entered allmulticast mode
[  405.360510][T16020] hsr_slave_1: entered allmulticast mode
[  405.379996][T16020] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  405.430820][T16025] netlink: 'syz.1.2739': attribute type 12 has an invalid length.
[  405.848747][T16045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.910585][T16045] syzkaller0: entered promiscuous mode
[  405.928816][T16045] syzkaller0: entered allmulticast mode
[  405.996176][T16045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  406.087995][T16045] tipc: Resetting bearer <eth:syzkaller0>
[  406.220576][T16039] tipc: Resetting bearer <eth:syzkaller0>
[  406.258890][T16039] tipc: Disabling bearer <eth:syzkaller0>
[  406.672863][T16086] __nla_validate_parse: 6 callbacks suppressed
[  406.672887][T16086] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2758'.
[  406.703463][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'.
[  406.731777][T16085] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  406.948768][   T30] audit: type=1107 audit(1782724248.756:6): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  407.055109][T16099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2760'.
[  407.093450][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2762'.
[  407.176161][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'.
[  407.189069][T16102] netlink: 'syz.2.2764': attribute type 7 has an invalid length.
[  407.235057][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2764'.
[  407.267684][T16106] syzkaller1: entered promiscuous mode
[  407.307910][T16106] syzkaller1: entered allmulticast mode
[  407.377545][T16112] sit0: entered promiscuous mode
[  407.423725][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'.
[  407.650031][T16106] bond9: option min_links: invalid value (18446744073709551614)
[  407.661632][T16106] bond9: option min_links: allowed values 0 - 2147483647
[  407.692049][T16106] bond9 (unregistering): Released all slaves
[  408.294474][T16136] bond9: option lp_interval: invalid value (0)
[  408.342429][T16136] bond9: option lp_interval: allowed values 1 - 2147483647
[  408.385717][T16136] bond9 (unregistering): Released all slaves
[  408.478360][T16141] lo: entered allmulticast mode
[  408.515038][T16141] lo: left allmulticast mode
[  408.899673][T16171] syzkaller0: entered promiscuous mode
[  408.907621][T16171] syzkaller0: entered allmulticast mode
[  408.961886][T16167] netlink: 'syz.2.2778': attribute type 1 has an invalid length.
[  408.991001][T16172] xt_hl: Unknown Hop Limit match mode: 206
[  409.040210][T16167] 8021q: adding VLAN 0 to HW filter on device bond6
[  409.041173][T16176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2778'.
[  409.110904][T16167] bond6: (slave geneve3): making interface the new active one
[  409.123781][T16167] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  409.148061][   T48] netdevsim netdevsim2 
: set [1, 0] type 2 family 0 port 6081 - 0
[  409.156691][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.173557][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.202657][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.635569][T16196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2787'.
[  410.663520][T16221] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  410.802070][T16223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2794'.
[  413.475803][T16221] netlink: 'syz.0.2794': attribute type 12 has an invalid length.
[  413.735035][T16231] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  413.938812][T16246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.269869][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'.
[  415.980307][T16267] bridge6: entered promiscuous mode
[  415.998878][T16267] bridge6: entered allmulticast mode
[  416.048548][T16296] vcan0: entered promiscuous mode
[  416.085441][T16296] vcan0: entered allmulticast mode
[  417.057666][T16331] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2820'.
[  417.141915][T16334] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2822'.
[  417.322325][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'.
[  417.666850][T16351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2825'.
[  417.943614][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'.
[  417.954437][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'.
[  418.235294][T16377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2830'.
[  418.388510][T16381] netlink: 'syz.0.2834': attribute type 10 has an invalid length.
[  418.511861][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'.
[  418.532665][T16381] 8021q: adding VLAN 0 to HW filter on device team0
[  418.541766][T16374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.563049][T16381] bond0: (slave team0): Enslaving as an active interface with an up link
[  418.825099][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'.
[  419.288853][T16414] netlink: 'syz.3.2842': attribute type 29 has an invalid length.
[  419.597657][T16433] netlink: 'syz.3.2848': attribute type 1 has an invalid length.
[  419.695379][T16430] netlink: 'syz.1.2847': attribute type 11 has an invalid length.
[  419.711712][T16430] netlink: 'syz.1.2847': attribute type 4 has an invalid length.
[  419.914483][T16438] syzkaller0: entered promiscuous mode
[  419.923820][T16438] syzkaller0: entered allmulticast mode
[  420.025361][T16433] bond10: entered promiscuous mode
[  420.031159][T16433] 8021q: adding VLAN 0 to HW filter on device bond10
[  420.148899][T16443] 8021q: adding VLAN 0 to HW filter on device bond10
[  420.175870][T16443] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  420.189382][T16443] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  420.217219][T16443] bond10: (slave ip6gre1): making interface the new active one
[  420.241309][T16443] ip6gre1: entered promiscuous mode
[  420.263965][T16443] bond10: (slave ip6gre1): Enslaving as an active interface with an up link
[  424.206989][T16481] netlink: 'syz.0.2860': attribute type 39 has an invalid length.
[  424.238651][T16482] syzkaller0: entered promiscuous mode
[  424.262321][T16482] syzkaller0: entered allmulticast mode
[  424.539169][T16497] syzkaller0: entered promiscuous mode
[  424.568837][T16497] syzkaller0: entered allmulticast mode
[  424.661039][T16505] __nla_validate_parse: 4 callbacks suppressed
[  424.661057][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2865'.
[  424.676951][T16503] ieee802154 phy0 wpan0: encryption failed: -22
[  424.714607][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'.
[  424.779219][T16508] vlan3: entered allmulticast mode
[  425.011483][T16520] netlink: 'syz.3.2870': attribute type 17 has an invalid length.
[  425.026954][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'.
[  425.029156][T16516] netlink: 'syz.0.2872': attribute type 5 has an invalid length.
[  425.061276][T16520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2870'.
[  425.178288][T16516] syzkaller0: entered promiscuous mode
[  425.201422][T16516] syzkaller0: entered allmulticast mode
[  425.389923][T16535] syzkaller0: entered promiscuous mode
[  425.419858][T16535] syzkaller0: entered allmulticast mode
[  425.481360][T16545] bridge0: port 1(veth1_to_bridge) entered blocking state
[  425.504764][T16545] bridge0: port 1(veth1_to_bridge) entered disabled state
[  425.524011][T16545] veth1_to_bridge: entered allmulticast mode
[  425.545114][T16545] veth1_to_bridge: entered promiscuous mode
[  426.070120][T16562] netlink: 'syz.4.2883': attribute type 1 has an invalid length.
[  426.265860][T16562] bond9: entered promiscuous mode
[  426.287573][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2888'.
[  426.319760][T16562] 8021q: adding VLAN 0 to HW filter on device bond9
[  426.388362][T16572] ipvlan3: entered allmulticast mode
[  426.399113][T16572] bond9: entered allmulticast mode
[  426.500816][T16577] bond9: (slave bridge4): making interface the new active one
[  426.529659][T16577] bridge4: entered promiscuous mode
[  426.543235][T16577] bridge4: entered allmulticast mode
[  426.577463][T16577] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  427.198334][T16622] netlink: 'syz.2.2897': attribute type 1 has an invalid length.
[  427.343351][T16622] 8021q: adding VLAN 0 to HW filter on device bond7
[  427.424833][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  427.440298][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  427.452013][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  427.463959][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  427.479886][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  427.490321][T16624] bond7: (slave veth11): Enslaving as an active interface with a down link
[  427.602970][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  427.612826][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  427.621343][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  427.658370][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  427.671562][T16622] bond7: (slave veth13): Enslaving as an active interface with a down link
[  427.685271][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  427.735624][T16631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.913329][ T5625] syz_tun (unregistering): left allmulticast mode
[  428.108961][T16646] sctp: [Deprecated]: syz.1.2902 (pid 16646) Use of int in maxseg socket option.
[  428.108961][T16646] Use struct sctp_assoc_value instead
[  429.025426][T16690] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2910'.
[  429.030580][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2907'.
[  429.081007][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2907'.
[  429.558854][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'.
[  429.771049][ T5637] Bluetooth: hci5: command tx timeout
[  429.813848][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2916'.
[  430.058643][T16732] netlink: 'syz.1.2920': attribute type 11 has an invalid length.
[  430.067867][T16732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2920'.
[  430.128492][T16733] netlink: zone id is out of range
[  430.142754][T16733] netlink: zone id is out of range
[  430.155706][T16733] netlink: zone id is out of range
[  430.169294][T16733] netlink: zone id is out of range
[  430.192053][T16733] netlink: zone id is out of range
[  430.235098][T16733] netlink: zone id is out of range
[  430.265607][T16733] netlink: zone id is out of range
[  430.283249][T16741] xt_hashlimit: invalid interval
[  430.297574][T16733] netlink: zone id is out of range
[  430.320697][T16733] netlink: zone id is out of range
[  430.349109][T16733] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication
[  430.550258][T16748] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2925'.
[  431.123788][T16775] Cannot find add_set index 4 as target
[  431.159090][T16767] syzkaller0: entered promiscuous mode
[  431.183695][T16767] syzkaller0: entered allmulticast mode
[  431.431926][T16782] netlink: 'syz.4.2936': attribute type 4 has an invalid length.
[  431.473901][T16782] netlink: 'syz.4.2936': attribute type 2 has an invalid length.
[  431.499722][T16782] xt_addrtype: ipv6 does not support BROADCAST matching
[  431.847096][ T5637] Bluetooth: hci5: command tx timeout
[  432.025506][T16626] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.037130][T16626] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.048076][T16626] bridge_slave_0: entered allmulticast mode
[  432.063814][T16626] bridge_slave_0: entered promiscuous mode
[  432.110046][T16626] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.133262][T16626] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.142911][T16626] bridge_slave_1: entered allmulticast mode
[  432.153137][T16626] bridge_slave_1: entered promiscuous mode
[  432.314040][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.329685][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.438842][T16626] team0: Port device team_slave_0 added
[  432.473103][T16626] team0: Port device team_slave_1 added
[  432.634566][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.666421][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.719184][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.741426][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.756482][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.841518][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.515017][T16626] hsr_slave_0: entered promiscuous mode
[  433.541972][T16626] hsr_slave_1: entered promiscuous mode
[  433.560793][T16626] debugfs: 'hsr0' already exists in 'hsr'
[  433.577765][T16626] Cannot create hsr debugfs directory
[  433.719019][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'.
[  433.752847][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2960'.
[  433.842507][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'.
[  433.882971][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2960'.
[  433.926956][ T5637] Bluetooth: hci5: command tx timeout
[  433.950314][ T1126] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  433.962173][ T1126] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.043025][ T1126] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.084977][ T1126] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.691209][T16626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.725419][T16626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  434.942464][T16913] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2974'.
[  435.041392][T16626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.066465][T16626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  435.251788][T16926] ipt_REJECT: TCP_RESET invalid for non-tcp
[  435.293879][T16626] bond0: (slave netdevsim1): Releasing backup interface
[  435.351127][T16626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.380283][T16626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  435.754536][T16626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.815327][T16626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  435.868300][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'.
[  435.909359][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'.
[  435.912266][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'.
[  435.976488][T16932] ip6tnl4: entered promiscuous mode
[  436.009974][ T5637] Bluetooth: hci5: command tx timeout
[  436.639490][T16981] netlink: 'syz.4.2994': attribute type 10 has an invalid length.
[  436.651373][T16985] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2991'.
[  436.782400][T16626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  436.827594][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.838634][T16626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  436.859322][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.871738][T16988] Cannot find add_set index 46338 as target
[  436.873834][T16626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  436.915985][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.934927][T16626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  437.000108][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  437.127504][T17001] syzkaller0: entered promiscuous mode
[  437.133216][T17001] syzkaller0: entered allmulticast mode
[  437.393114][T17020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3002'.
[  437.583336][T16626] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.664952][T16626] 8021q: adding VLAN 0 to HW filter on device team0
[  437.702381][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.709608][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.765955][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.773191][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.792618][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3007'.
[  437.828735][T17034] netlink: 'syz.2.3005': attribute type 15 has an invalid length.
[  438.080249][T17044] syz_tun: refused to change device tx_queue_len
[  438.462283][T17058] net_ratelimit: 70 callbacks suppressed
[  438.462304][T17058] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  438.783439][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  439.242635][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.340740][T16626] veth0_vlan: entered promiscuous mode
[  439.378342][T16626] veth1_vlan: entered promiscuous mode
[  439.411741][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'.
[  439.470606][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'.
[  439.531375][T16626] veth0_macvtap: entered promiscuous mode
[  439.575040][T16626] veth1_macvtap: entered promiscuous mode
[  439.642638][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.717808][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.770323][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.828522][   T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.853937][   T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.864945][   T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.958475][T17111] netlink: 'syz.0.3028': attribute type 24 has an invalid length.
[  439.970872][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3026'.
[  440.012239][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.306553][T12600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.338784][T12600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.450377][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.477337][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.761413][T12605] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  440.829428][T17134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.859062][T17149] xt_hashlimit: size too large, truncated to 1048576
[  440.952130][T17146] netlink: 'syz.3.2893': attribute type 11 has an invalid length.
[  441.044300][T17146] netlink: 'syz.3.2893': attribute type 11 has an invalid length.
[  441.129025][T17146] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2893'.
[  441.218107][T17155] netlink: 'syz.4.3038': attribute type 11 has an invalid length.
[  441.260948][T17155] netlink: 'syz.4.3038': attribute type 4 has an invalid length.
[  441.290037][T17155] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3038'.
[  441.460221][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  441.475225][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  441.488323][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  441.525256][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  441.542456][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  441.589323][T17162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3041'.
[  441.599511][T17162] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3041'.
[  441.615996][T17162] netlink: 'syz.4.3041': attribute type 6 has an invalid length.
[  441.636874][T17162] netlink: 'syz.4.3041': attribute type 5 has an invalid length.
[  441.669847][T17162] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3041'.
[  442.366581][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'.
[  442.375771][T17189] netlink: 'syz.3.3049': attribute type 7 has an invalid length.
[  442.385919][T17189] netlink: 'syz.3.3049': attribute type 8 has an invalid length.
[  442.394146][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'.
[  442.406008][T12605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.420917][T12605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.460254][T17190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'.
[  442.625113][T17197] netlink: 35235 bytes leftover after parsing attributes in process `syz.3.3051'.
[  442.656122][T12605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.670825][T12605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.961430][T12605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.999498][T12605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.561469][T12605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.607332][ T5639] Bluetooth: hci3: command tx timeout
[  443.611601][T12605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.819763][T17233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.707455][T17258] netlink: 'syz.0.3066': attribute type 23 has an invalid length.
[  444.901390][T12605] bond6: left allmulticast mode
[  444.912996][T12605] ip6gre4: left allmulticast mode
[  445.585562][T12605] bond6 (unregistering): (slave ip6gre4): Releasing backup interface
[  445.595367][T12605] ip6gre4 (unregistering): left promiscuous mode
[  445.689407][ T5639] Bluetooth: hci3: command tx timeout
[  445.887822][T12605] bond8 (unregistering): (slave geneve3): Releasing active interface
[  445.941526][T12605] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  445.995366][T12605] bond1 (unregistering): Released all slaves
[  446.013658][T12605] bond2 (unregistering): Released all slaves
[  446.049478][T12605] bond3 (unregistering): Released all slaves
[  446.073801][T12605] bond4 (unregistering): Released all slaves
[  446.104715][T12605] bond5 (unregistering): Released all slaves
[  446.124770][T12605] bond6 (unregistering): Released all slaves
[  446.144872][T12605] bond0 (unregistering): Released all slaves
[  446.179079][T12605] bond7 (unregistering): Released all slaves
[  446.205408][T12605] bond8 (unregistering): Released all slaves
[  446.269681][T17277] __nla_validate_parse: 65 callbacks suppressed
[  446.269717][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3069'.
[  446.310363][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  446.507856][T12605] tipc: Left network mode
[  446.979794][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'.
[  447.484079][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.515732][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.570581][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.618582][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.671901][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.743589][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.766375][ T5639] Bluetooth: hci3: command tx timeout
[  447.855938][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  447.930330][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  448.794312][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  449.236657][T17157] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.260145][T17157] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.300985][T17157] bridge_slave_0: entered allmulticast mode
[  449.331486][T17157] bridge_slave_0: entered promiscuous mode
[  449.351953][T17157] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.360538][T17157] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.368943][T17157] bridge_slave_1: entered allmulticast mode
[  449.386061][T17157] bridge_slave_1: entered promiscuous mode
[  449.802527][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.852023][ T5639] Bluetooth: hci3: command tx timeout
[  450.031531][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.062268][T17439] ipvlan0: Caught tx_queue_len zero misconfig
[  450.157565][T17438] batadv_slave_1: entered promiscuous mode
[  450.440099][T17157] team0: Port device team_slave_0 added
[  450.492748][T17157] team0: Port device team_slave_1 added
[  450.560525][T17426] batadv_slave_1: left promiscuous mode
[  450.729101][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.751942][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.791097][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.954082][T12605] hsr_slave_0: left promiscuous mode
[  450.972620][T12605] hsr_slave_1: left promiscuous mode
[  451.770503][T12605] vlan0: left allmulticast mode
[  451.776555][T12605] veth1_macvtap: left promiscuous mode
[  451.784418][T12605] veth0_macvtap: left promiscuous mode
[  451.791364][T12605] veth1_vlan: left promiscuous mode
[  451.797387][T12605] veth0_vlan: left promiscuous mode
[  452.331069][T17503] GUP no longer grows the stack in syz.3.3110 (17503): 200000003000-20000000a000 (200000001000)
[  452.355424][T17503] CPU: 1 UID: 0 PID: 17503 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) 
[  452.355454][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  452.355485][T17503] Call Trace:
[  452.355493][T17503]  <TASK>
[  452.355501][T17503]  dump_stack_lvl+0xe8/0x150
[  452.355532][T17503]  __get_user_pages+0x238c/0x2720
[  452.355562][T17503]  ? __gup_longterm_locked+0xc3b/0x15c0
[  452.355618][T17503]  __gup_longterm_locked+0xd52/0x15c0
[  452.355648][T17503]  ? lock_acquire+0x106/0x350
[  452.355686][T17503]  gup_fast_fallback+0x1d8c/0x20e0
[  452.355710][T17503]  ? lockdep_hardirqs_on+0x7a/0x110
[  452.355773][T17503]  ? __pfx_gup_fast_fallback+0x10/0x10
[  452.355801][T17503]  ? is_valid_gup_args+0x11f/0x200
[  452.355828][T17503]  ? get_user_pages_fast+0x4d/0xb0
[  452.355853][T17503]  __iov_iter_get_pages_alloc+0x378/0xa40
[  452.355877][T17503]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  452.355902][T17503]  iov_iter_get_pages2+0x5e/0xa0
[  452.355924][T17503]  __se_sys_vmsplice+0x7b5/0x1660
[  452.355963][T17503]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  452.355987][T17503]  ? __pfx_futex_wake+0x10/0x10
[  452.356079][T17503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.356099][T17503]  do_syscall_64+0x174/0x580
[  452.356117][T17503]  ? clear_bhb_loop+0x40/0x90
[  452.356139][T17503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.356156][T17503] RIP: 0033:0x7f3f1959ce59
[  452.356175][T17503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.356190][T17503] RSP: 002b:00007f3f1a504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  452.356210][T17503] RAX: ffffffffffffffda RBX: 00007f3f19815fa0 RCX: 00007f3f1959ce59
[  452.356224][T17503] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  452.356236][T17503] RBP: 00007f3f19632e6f R08: 0000000000000000 R09: 0000000000000000
[  452.356247][T17503] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  452.356257][T17503] R13: 00007f3f19816038 R14: 00007f3f19815fa0 R15: 00007fff56d2dfd8
[  452.356287][T17503]  </TASK>
[  454.020626][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.030041][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.058122][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.120641][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  454.283829][T17507] __nla_validate_parse: 33 callbacks suppressed
[  454.283863][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3111'.
[  454.325762][T17157] hsr_slave_0: entered promiscuous mode
[  454.362910][T17157] hsr_slave_1: entered promiscuous mode
[  454.456842][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'.
[  454.465768][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'.
[  454.786659][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'.
[  454.929535][T17539] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.065465][T17551] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000
[  455.760982][T12605] IPVS: stop unused estimator thread 0...
[  455.796372][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'.
[  455.852709][T17587] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  456.002593][T17587] xt_hashlimit: size too large, truncated to 1048576
[  456.235097][T17601] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  456.242545][T17601] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  456.524978][T17604] bond8: invalid ARP target 0.0.0.0 specified for addition
[  456.562781][T17604] bond8: option arp_ip_target: invalid value (0)
[  456.577802][T17619] netlink: 'syz.4.3134': attribute type 1 has an invalid length.
[  456.629094][T17604] bond8 (unregistering): Released all slaves
[  456.679604][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'.
[  456.780468][T17619] 8021q: adding VLAN 0 to HW filter on device bond10
[  456.850907][T17621] bond10: (slave veth9): Enslaving as an active interface with a down link
[  457.009383][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'.
[  457.119026][T17157] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  457.199508][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.227975][T17157] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  457.253531][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  457.280830][T17157] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  457.322979][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  457.366161][T17157] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  457.393386][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.404457][T17659] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3140'.
[  457.909213][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'.
[  458.068706][T17693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3149'.
[  458.139689][T17157] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.232199][T17157] 8021q: adding VLAN 0 to HW filter on device team0
[  458.251216][T12600] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.258466][T12600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.417244][T17157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  458.427633][T17157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  458.538131][T12602] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.545383][T12602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.668923][T17721] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  459.032091][T17751] netlink: 'syz.3.3161': attribute type 1 has an invalid length.
[  459.203143][T17751] bond1: entered promiscuous mode
[  459.215368][T17751] 8021q: adding VLAN 0 to HW filter on device bond1
[  459.327489][T17751] bond1: (slave bridge1): making interface the new active one
[  459.337721][T17751] bridge1: entered promiscuous mode
[  459.359086][T17751] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  459.507114][T17769] syzkaller0: entered allmulticast mode
[  459.929824][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.991571][T17795] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  460.092403][T17801] netlink: 'syz.4.3170': attribute type 1 has an invalid length.
[  460.162735][T17157] veth0_vlan: entered promiscuous mode
[  460.202485][T17795] __nla_validate_parse: 3 callbacks suppressed
[  460.202503][T17795] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3167'.
[  460.242560][T17801] 8021q: adding VLAN 0 to HW filter on device bond11
[  460.328233][T17805] .`: (slave veth0_to_bond): Releasing backup interface
[  460.342931][T17805] bond11: (slave veth0_to_bond): making interface the new active one
[  460.352711][T17805] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  460.416398][T17157] veth1_vlan: entered promiscuous mode
[  460.442658][T17809] macvlan2: entered promiscuous mode
[  460.448015][T17809] macvlan2: entered allmulticast mode
[  460.454423][T17809] bond11: entered promiscuous mode
[  460.459664][T17809] veth0_to_bond: entered promiscuous mode
[  460.466345][T17809] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  460.474186][T17809] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  460.510368][T17809] bond11: left promiscuous mode
[  460.515295][T17809] veth0_to_bond: left promiscuous mode
[  460.525032][T17818] netlink: 'syz.2.3172': attribute type 3 has an invalid length.
[  460.525784][T17819] sock: sock_set_timeout: `syz.2.3172' (pid 17819) tries to set negative timeout
[  460.532798][T17818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3172'.
[  460.578738][T17157] veth0_macvtap: entered promiscuous mode
[  460.591180][T17157] veth1_macvtap: entered promiscuous mode
[  460.661738][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.686957][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.738734][ T1126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.752357][ T1126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.772799][T12600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.861422][T12600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.096291][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.113244][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.300418][T12602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.310177][T17850] netlink: 'syz.4.3179': attribute type 1 has an invalid length.
[  461.315442][T12602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.318169][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'.
[  461.907589][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  462.052891][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  462.088462][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  462.119804][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  462.158206][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  462.207945][T17876] netlink: 'syz.3.3186': attribute type 2 has an invalid length.
[  462.797565][T17908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3191'.
[  462.868006][T17910] Cannot find add_set index 4 as target
[  462.940353][T17908] Can't find ip_set type has
[  463.183739][T17931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3197'.
[  463.315390][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'.
[  463.754405][T17955] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  463.791783][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'.
[  463.835959][T17957] nbd: must specify a size in bytes for the device
[  464.086425][T17869] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.093675][T17869] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.100984][T17869] bridge_slave_0: entered allmulticast mode
[  464.108782][T17869] bridge_slave_0: entered promiscuous mode
[  464.117431][T17869] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.124746][T17869] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.145284][T17869] bridge_slave_1: entered allmulticast mode
[  464.153074][T17869] bridge_slave_1: entered promiscuous mode
[  464.240193][T17869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.263990][ T5639] Bluetooth: hci0: command tx timeout
[  464.288118][T17869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.297688][T17985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3210'.
[  464.392352][T17869] team0: Port device team_slave_0 added
[  464.400979][T17869] team0: Port device team_slave_1 added
[  464.448130][T17869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.455119][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.521245][T17869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.549709][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'.
[  464.571201][T17869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.578188][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.620898][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'.
[  464.631972][T17869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.781189][T18005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.888237][T17869] hsr_slave_0: entered promiscuous mode
[  464.895023][T17869] hsr_slave_1: entered promiscuous mode
[  464.903592][T17869] debugfs: 'hsr0' already exists in 'hsr'
[  464.909370][T17869] Cannot create hsr debugfs directory
[  465.146261][T18030] ieee802154 phy0 wpan0: encryption failed: -90
[  465.280782][T18031] netlink: 'syz.0.3221': attribute type 1 has an invalid length.
[  465.281706][T18032] netlink: 'syz.0.3221': attribute type 1 has an invalid length.
[  465.288552][T18031] __nla_validate_parse: 96 callbacks suppressed
[  465.288563][T18031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3221'.
[  465.345872][T18032] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3221'.
[  465.746749][T18043] 8021q: adding VLAN 0 to HW filter on device bond9
[  465.778383][T18043] bond0: (slave bond9): Enslaving as an active interface with an up link
[  465.873286][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'.
[  465.883241][T18043] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  465.907059][T17869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.063784][T18059] tipc: Started in network mode
[  466.073946][T18059] tipc: Node identity 6, cluster identity 4711
[  466.086284][T18059] tipc: Node number set to 6
[  466.096417][T18001] infiniband syz0: set active
[  466.104813][T18001] infiniband syz0: added veth0_vlan
[  466.120220][T18001] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  466.128991][T18001] infiniband syz0: Couldn't open port 1
[  466.151923][T18001] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  466.175253][T18001] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  466.192944][T18001] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  466.252612][T18001] RDS/IB: syz0: added
[  466.256824][T18001] smc: adding ib device syz0 with port count 1
[  466.276026][T18001] smc:    ib device syz0 port 1 has no pnetid
[  466.333889][ T5288] veth0_vlan: left promiscuous mode
[  466.367372][ T7453] veth0_vlan: entered promiscuous mode
[  466.400083][ T5639] Bluetooth: hci0: command tx timeout
[  466.539148][T17869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.760411][T17869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.998780][T17869] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.087921][T18083] macvlan2: entered promiscuous mode
[  467.096291][T18083] macvlan2: entered allmulticast mode
[  467.813023][T17869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  468.021216][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.053389][T17869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  468.089983][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  468.118989][T17869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  468.175456][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.194219][T17869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  468.266081][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.318567][T18120] netlink: 'syz.1.3236': attribute type 9 has an invalid length.
[  468.406569][ T5639] Bluetooth: hci0: command tx timeout
[  468.713076][T17869] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.768827][T17869] 8021q: adding VLAN 0 to HW filter on device team0
[  468.797757][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.804956][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.902252][T12602] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.909491][T12602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.003007][T18142] netlink: 'syz.0.3239': attribute type 33 has an invalid length.
[  469.092817][T18142] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  469.108392][T18142] bond10 (unregistering): Released all slaves
[  470.000814][T18173] netlink: 'syz.1.3242': attribute type 4 has an invalid length.
[  470.063019][T18177] netlink: 'syz.1.3242': attribute type 4 has an invalid length.
[  470.108092][T18178] netlink: 'syz.1.3242': attribute type 4 has an invalid length.
[  470.491174][ T5639] Bluetooth: hci0: command tx timeout
[  470.606586][T17869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.681998][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'.
[  470.713980][T18193] netlink: 'syz.1.3245': attribute type 8 has an invalid length.
[  470.754336][T18193] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3245'.
[  470.779101][T18193] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3245'.
[  470.813681][T17869] veth0_vlan: entered promiscuous mode
[  470.913463][T17869] veth1_vlan: entered promiscuous mode
[  471.028193][T17869] veth0_macvtap: entered promiscuous mode
[  471.038551][T17869] veth1_macvtap: entered promiscuous mode
[  471.093377][T17869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.150410][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3249'.
[  471.187348][T17869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.202845][T12600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.221876][T12600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.256278][T12600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.466864][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.481089][T18220] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  471.493595][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.513116][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.589118][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.608440][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.736284][T18227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3256'.
[  471.747758][T18227] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280
[  471.763313][T18228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3256'.
[  472.311155][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  472.370659][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  472.380056][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  472.390075][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  472.397837][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  472.600794][T18253] sctp: [Deprecated]: syz.1.3262 (pid 18253) Use of int in max_burst socket option.
[  472.600794][T18253] Use struct sctp_assoc_value instead
[  472.662862][T18253] sctp: [Deprecated]: syz.1.3262 (pid 18253) Use of int in max_burst socket option.
[  472.662862][T18253] Use struct sctp_assoc_value instead
[  472.958535][T18261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3265'.
[  473.024731][T18264] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3264'.
[  473.037349][T18263] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3264'.
[  473.138360][T18266] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.145991][T18266] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.179298][T18266] xt_hashlimit: size too large, truncated to 1048576
[  473.232700][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'.
[  473.287628][T18271] macsec1: entered promiscuous mode
[  473.292894][T18271] bridge0: entered promiscuous mode
[  473.298329][T18271] macsec1: entered allmulticast mode
[  473.303642][T18271] bridge0: entered allmulticast mode
[  473.323345][T18271] bridge0: port 3(macsec1) entered blocking state
[  473.337390][T18271] bridge0: port 3(macsec1) entered disabled state
[  473.351560][T18271] bridge0: left allmulticast mode
[  473.356656][T18271] bridge0: left promiscuous mode
[  474.051841][T18291] netlink: 'syz.1.3271': attribute type 1 has an invalid length.
[  474.552174][ T5639] Bluetooth: hci2: command tx timeout
[  476.641349][ T5639] Bluetooth: hci2: command tx timeout
[  477.890391][T18244] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.898290][T18244] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.905568][T18244] bridge_slave_0: entered allmulticast mode
[  477.923099][T18244] bridge_slave_0: entered promiscuous mode
[  477.940674][T18244] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.954680][T18244] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.962370][T18244] bridge_slave_1: entered allmulticast mode
[  477.973134][T18244] bridge_slave_1: entered promiscuous mode
[  478.081393][T18244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.094048][T18244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.149238][T18244] team0: Port device team_slave_0 added
[  478.150305][T18326] netlink: 'syz.2.3275': attribute type 1 has an invalid length.
[  478.158795][T18244] team0: Port device team_slave_1 added
[  478.194032][T18244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.201009][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.226963][T18244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.257106][T18244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.275240][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.311004][T18244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.333096][T18329] __nla_validate_parse: 5 callbacks suppressed
[  478.333116][T18329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3276'.
[  478.392981][T18244] hsr_slave_0: entered promiscuous mode
[  478.399741][T18244] hsr_slave_1: entered promiscuous mode
[  478.406430][T18244] debugfs: 'hsr0' already exists in 'hsr'
[  478.412184][T18244] Cannot create hsr debugfs directory
[  478.450065][ T5639] block nbd7: Receive control failed (result -32)
[  478.605915][T18339] netlink: 'syz.4.3280': attribute type 8 has an invalid length.
[  478.684411][ T5639] Bluetooth: hci2: command tx timeout
[  478.808993][T18350] netlink: 'syz.3.3284': attribute type 1 has an invalid length.
[  478.870962][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'.
[  478.964876][T18350] 8021q: adding VLAN 0 to HW filter on device bond2
[  478.981820][T18357] vcan1: entered promiscuous mode
[  478.986896][T18357] vcan1: entered allmulticast mode
[  478.992843][T18344] syzkaller0: entered promiscuous mode
[  478.998336][T18344] syzkaller0: entered allmulticast mode
[  479.247268][T18368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3288'.
[  479.304770][T18244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.316752][T18244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.383541][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3287'.
[  479.540530][T18384] Cannot find set identified by id 65534 to match
[  479.590689][T18384] netlink: 'syz.1.3293': attribute type 2 has an invalid length.
[  479.598498][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'.
[  479.605897][T18390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3294'.
[  479.643451][T18244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.668828][T18244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.744563][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3296'.
[  479.830574][T18399] netlink: 'syz.1.3296': attribute type 1 has an invalid length.
[  479.860502][T18399] bond1: entered promiscuous mode
[  479.866060][T18399] 8021q: adding VLAN 0 to HW filter on device bond1
[  479.914554][T18399] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  479.926945][T18399] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  479.937213][T18399] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  480.161986][T18244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.182263][T18244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.217774][T18417] netlink: 'syz.2.3297': attribute type 1 has an invalid length.
[  480.767216][ T5639] Bluetooth: hci2: command tx timeout
[  481.069119][T18450] netlink: 'syz.3.3302': attribute type 9 has an invalid length.
[  481.113363][T18410] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  481.146411][T18410] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  483.165719][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3304'.
[  483.197800][T18463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3304'.
[  483.296013][T18244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  483.344501][T18244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.471463][T18478] netlink: 'syz.4.3306': attribute type 7 has an invalid length.
[  484.320192][T18516] netlink: 'syz.2.3310': attribute type 16 has an invalid length.
[  484.356560][T18516] netlink: 'syz.2.3310': attribute type 17 has an invalid length.
[  484.400165][T18514] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.471152][T18514] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.481328][T18522] xt_hashlimit: size too large, truncated to 1048576
[  484.778366][T18244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  484.801834][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  484.877339][T18244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  484.897415][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  484.907547][T18244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  484.950232][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  484.958554][T18244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  484.960270][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  484.992393][T18244] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  485.006389][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'.
[  485.023221][T18540] netlink: 'syz.3.3317': attribute type 2 has an invalid length.
[  485.319524][T18244] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.405895][T18561] veth0_macvtap: entered allmulticast mode
[  485.443406][T18244] 8021q: adding VLAN 0 to HW filter on device team0
[  485.513527][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'.
[  485.531117][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'.
[  485.549551][T12605] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.558219][T12605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.573033][T12605] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.580344][T12605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.762314][T18572] netlink: 'syz.3.3325': attribute type 1 has an invalid length.
[  485.843106][T18572] bond3: entered promiscuous mode
[  485.848758][T18572] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.870510][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'.
[  485.899592][T18572] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.906941][T18572] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  485.918337][T18572] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  485.958579][T18572] bond3: (slave vti0): making interface the new active one
[  485.966290][T18572] vti0: entered promiscuous mode
[  485.980404][T18572] vti0: left promiscuous mode
[  486.397265][T18244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.435562][T18244] veth0_vlan: entered promiscuous mode
[  486.450055][T18244] veth1_vlan: entered promiscuous mode
[  486.475627][T18244] veth0_macvtap: entered promiscuous mode
[  486.488115][T18244] veth1_macvtap: entered promiscuous mode
[  486.512149][T18244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.524167][T18244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.702518][   T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.716992][   T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.733283][   T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.737712][T18590] netlink: 'syz.3.3327': attribute type 13 has an invalid length.
[  486.789663][   T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.876692][T18592] openvswitch: netlink: Flow actions attr not present in new flow.
[  486.943184][T18592] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) !
[  487.007689][T18592] syzkaller0: entered promiscuous mode
[  487.025129][T18592] syzkaller0: entered allmulticast mode
[  487.306845][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'.
[  487.682798][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.696570][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.800515][T18611] 8021q: adding VLAN 0 to HW filter on device macsec1
[  487.836996][ T5758] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  487.845312][T18618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.942202][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.958283][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.330276][T18632] syzkaller0: entered promiscuous mode
[  488.335926][T18632] syzkaller0: entered allmulticast mode
[  488.411091][T18637] lo speed is unknown, defaulting to 1000
[  488.431537][T18637] lo speed is unknown, defaulting to 1000
[  488.482952][T18637] lo speed is unknown, defaulting to 1000
[  488.511238][T18641] ��: renamed from lo (while UP)
[  488.514739][T18637] smbdirect: ib_dev[sy�2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  488.554515][T18637] smbdirect: ib_dev[sy�2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  488.600112][T18637] smbdirect: ib_dev[sy�2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  488.641878][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  488.671444][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  488.683041][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  488.698020][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  488.709036][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  488.781972][T18637] infiniband sy�2: RDMA CMA: cma_listen_on_dev, error -98
[  488.815920][T18645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3342'.
[  488.862264][T18645] syzkaller1: entered promiscuous mode
[  488.867932][T18645] syzkaller1: entered allmulticast mode
[  489.030697][T18637] �� speed is unknown, defaulting to 1000
[  489.062576][T18637] �� speed is unknown, defaulting to 1000
[  489.089179][T18637] �� speed is unknown, defaulting to 1000
[  489.115047][T18637] �� speed is unknown, defaulting to 1000
[  489.163659][T18637] �� speed is unknown, defaulting to 1000
[  489.199215][T18637] �� speed is unknown, defaulting to 1000
[  489.228993][T18655] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3344'.
[  489.243031][T18637] �� speed is unknown, defaulting to 1000
[  489.263948][T18637] �� speed is unknown, defaulting to 1000
[  489.449709][ T5623] syz_tun (unregistering): left allmulticast mode
[  489.464873][T18663] netlink: 'syz.3.3347': attribute type 1 has an invalid length.
[  489.673945][T18673] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3348'.
[  489.724713][T18676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3350'.
[  490.037195][T18693] __nla_validate_parse: 2 callbacks suppressed
[  490.037213][T18693] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3356'.
[  490.054200][T18693] syzkaller0: entered promiscuous mode
[  490.060101][T18693] syzkaller0: entered allmulticast mode
[  490.080801][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3356'.
[  490.089973][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'.
[  490.254098][T18698] netlink: 'syz.2.3358': attribute type 13 has an invalid length.
[  490.391752][ T7435] �� speed is unknown, defaulting to 1000
[  490.401482][T18642] �� speed is unknown, defaulting to 1000
[  490.410729][T18701] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3359'.
[  490.512557][T18698] syzkaller0: entered promiscuous mode
[  490.518084][T18698] syzkaller0: entered allmulticast mode
[  490.616731][T18705] syzkaller1: entered promiscuous mode
[  490.622871][T18705] syzkaller1: entered allmulticast mode
[  490.786641][T18717] netlink: 'syz.1.3363': attribute type 21 has an invalid length.
[  490.808055][T18717] netlink: 'syz.1.3363': attribute type 6 has an invalid length.
[  490.815997][T18717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3363'.
[  490.850780][ T5637] Bluetooth: hci4: command tx timeout
[  491.056864][T18642] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.075007][T18642] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.084918][T18642] bridge_slave_0: entered allmulticast mode
[  491.093711][T18642] bridge_slave_0: entered promiscuous mode
[  491.102376][T18642] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.109628][T18642] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.116896][T18642] bridge_slave_1: entered allmulticast mode
[  491.124758][T18642] bridge_slave_1: entered promiscuous mode
[  491.174344][T18727] bond5 (unregistering): Released all slaves
[  491.245952][T18642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.270124][T18642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.348204][T18642] team0: Port device team_slave_0 added
[  491.357380][T18642] team0: Port device team_slave_1 added
[  491.402372][T18642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.413956][T18642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.456407][T18642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.491183][T18642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.498176][T18642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.528298][T18642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.614541][T18642] hsr_slave_0: entered promiscuous mode
[  491.627495][T18642] hsr_slave_1: entered promiscuous mode
[  491.634062][T18642] debugfs: 'hsr0' already exists in 'hsr'
[  491.639827][T18642] Cannot create hsr debugfs directory
[  491.874244][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3377'.
[  491.902233][T18756] openvswitch: netlink: Missing key (keys=40, expected=80)
[  492.101640][T18768] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  492.210485][T18642] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.233500][T18642] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.282888][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3381'.
[  492.297015][ T5758] IPVS: starting estimator thread 0...
[  492.483735][T18642] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.495513][T18642] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.507278][T18777] IPVS: using max 31 ests per chain, 74400 per kthread
[  492.782416][T18642] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.793168][T18642] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.813291][T18802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3393'.
[  492.929287][ T5637] Bluetooth: hci4: command tx timeout
[  493.001605][T18642] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  493.011416][T18642] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.123837][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'.
[  493.336541][T18642] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  493.359689][T18642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  493.369831][T18642] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  493.382456][T18642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  493.391579][T18642] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  493.425229][T18642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  493.434101][T18642] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  493.445528][T18642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  493.555849][T18836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3403'.
[  493.575019][T18642] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.597589][T18642] 8021q: adding VLAN 0 to HW filter on device team0
[  493.614729][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.621981][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.649821][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.657141][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.933632][T18849] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  494.211585][   T62] nci: nci_ntf_packet: unsupported ntf opcode 0xf05
[  494.256897][T18874] netlink: 'syz.0.3411': attribute type 1 has an invalid length.
[  494.305238][T18849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  494.322226][T18874] gretap1: entered promiscuous mode
[  494.593423][T18642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.791163][T18902] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  494.999699][T18912] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.024266][ T5639] Bluetooth: hci4: command tx timeout
[  495.164987][T18642] veth0_vlan: entered promiscuous mode
[  495.229302][T18922] __nla_validate_parse: 3 callbacks suppressed
[  495.229320][T18922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3421'.
[  495.229355][T18642] veth1_vlan: entered promiscuous mode
[  495.253187][T18921] xt_hashlimit: size too large, truncated to 1048576
[  495.262330][ T7435] IPVS: starting estimator thread 0...
[  495.362089][T18642] veth0_macvtap: entered promiscuous mode
[  495.394306][T18642] veth1_macvtap: entered promiscuous mode
[  495.437050][T18642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.475380][T18642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.517406][T18926] IPVS: using max 33 ests per chain, 79200 per kthread
[  495.539820][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.564030][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.588765][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.638798][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.650802][T18939] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  495.888943][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.896819][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.044369][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.069036][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.278313][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'.
[  496.361209][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3440'.
[  496.448630][T18992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3341'.
[  496.485636][T18992] syzkaller0: entered promiscuous mode
[  496.520383][T18992] syzkaller0: entered allmulticast mode
[  496.571490][T19002] netlink: 'syz.0.3444': attribute type 1 has an invalid length.
[  496.575877][T18983] 8021q: adding VLAN 0 to HW filter on device bond6
[  496.592493][T18983] bond6 (unregistering): Released all slaves
[  496.686130][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3445'.
[  496.694085][T18992] 8021q: adding VLAN 0 to HW filter on device bond1
[  496.704633][T18992] bond0: (slave bond1): Enslaving as an active interface with an up link
[  496.717018][T19012] syz_tun: entered allmulticast mode
[  496.760087][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3440'.
[  497.048573][ T5639] Bluetooth: hci4: command 0x0419 tx timeout
[  497.245984][T19026] xfrm0: Caught tx_queue_len zero misconfig
[  497.321610][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  497.361613][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'.
[  497.970673][T19059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3459'.
[  498.054909][T19055] syzkaller0: entered promiscuous mode
[  498.072001][T19055] syzkaller0: entered allmulticast mode
[  498.387547][T19084] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  498.389446][T19085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3466'.
[  498.435517][T19086] netlink: 'syz.2.3466': attribute type 21 has an invalid length.
[  498.667594][T19107] dvmrp0: entered allmulticast mode
[  499.128301][ T5637] Bluetooth: hci4: command 0x0419 tx timeout
[  499.768481][T19172] Cannot find add_set index 0 as target
[  499.800028][T19172] Cannot find add_set index 0 as target
[  499.825841][T19172] Cannot find add_set index 0 as target
[  499.962067][T19174] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  500.496700][T19212] netlink: ct family unspecified
[  500.501755][T19212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.812468][T19225] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  500.910467][T19230] __nla_validate_parse: 14 callbacks suppressed
[  500.910486][T19230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3500'.
[  501.155607][T19244] netlink: 'syz.0.3503': attribute type 2 has an invalid length.
[  501.466239][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  502.692715][T19311] netlink: 'syz.0.3523': attribute type 1 has an invalid length.
[  502.747330][T19311] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  502.750532][   T30] audit: type=1107 audit(1782724344.566:7): pid=19314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  502.848103][T19321] ip6tnl0: Caught tx_queue_len zero misconfig
[  502.914682][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'.
[  503.201890][T19341] tipc: Started in network mode
[  503.209898][T19341] tipc: Node identity 461080dc4795, cluster identity 4711
[  503.220932][T19341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  503.309920][T19340] syzkaller0: entered promiscuous mode
[  503.327721][T19340] syzkaller0: entered allmulticast mode
[  503.334759][T19340] tipc: Resetting bearer <eth:syzkaller0>
[  503.386313][T19350] netlink: 'syz.1.3534': attribute type 18 has an invalid length.
[  503.395136][T19351] netlink: 'syz.1.3534': attribute type 18 has an invalid length.
[  503.395223][T19338] tipc: Resetting bearer <eth:syzkaller0>
[  503.421446][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'.
[  503.525233][T19360] xt_hashlimit: size too large, truncated to 1048576
[  503.580581][T19364] ieee802154 phy0 wpan0: encryption failed: -22
[  503.607189][T19365] sctp: [Deprecated]: syz.2.3536 (pid 19365) Use of int in max_burst socket option deprecated.
[  503.607189][T19365] Use struct sctp_assoc_value instead
[  504.003295][T19377] netlink: 'syz.4.3540': attribute type 2 has an invalid length.
[  504.012240][T19377] netlink: 'syz.4.3540': attribute type 8 has an invalid length.
[  504.021621][T19377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3540'.
[  506.618491][T19338] tipc: Disabling bearer <eth:syzkaller0>
[  506.642048][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3536'.
[  506.747512][ T7432] tipc: Node number set to 25526492
[  506.761234][T12598] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  506.818188][T12598] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  506.830775][T19380] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3541'.
[  506.857017][T12598] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  506.901568][T12598] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  507.174509][T19399] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3546'.
[  507.233924][T19399] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3546'.
[  507.495994][T19402] syzkaller0: entered promiscuous mode
[  507.507867][T19402] syzkaller0: entered allmulticast mode
[  507.541899][T19404] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3549'.
[  507.658748][T19416] netlink: 'syz.3.3548': attribute type 2 has an invalid length.
[  511.187601][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'.
[  511.196772][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'.
[  511.376754][T19430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'.
[  511.726495][T19442] netlink: 'syz.1.3559': attribute type 12 has an invalid length.
[  511.800171][T19442] bond3: option primary_reselect: invalid value (255)
[  511.811375][T19442] bond3 (unregistering): Released all slaves
[  511.868304][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'.
[  511.887714][T19446] netlink: 'syz.1.3559': attribute type 1 has an invalid length.
[  511.900175][T19433] nbd: device at index 64 is going down
[  511.941983][T19437] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3556'.
[  512.023319][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'.
[  512.159043][T19452] tipc: Started in network mode
[  512.164030][T19452] tipc: Node identity 400, cluster identity 4711
[  512.186300][T19452] tipc: Node number set to 1024
[  512.195824][T19466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3559'.
[  512.363001][T19455] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  512.385021][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'.
[  512.419388][T19455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  512.437185][T19457] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.444964][T19457] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.456687][T19469] udevd[19469]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  512.722515][T19489] Cannot find del_set index 4 as target
[  512.941531][T19499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.022804][T19498] tipc: Disabling bearer <eth:syzkaller0>
[  513.120906][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'.
[  513.176856][T19512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  513.227664][T19512] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  513.235960][T19512] gretap1: entered promiscuous mode
[  513.241664][T19512] gretap1: entered allmulticast mode
[  513.714386][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'.
[  513.923522][T19555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.944598][T19560] Cannot find del_set index 4 as target
[  514.010134][T19555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.070703][T19561] erspan0: entered promiscuous mode
[  514.086848][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'.
[  514.107021][T19564] team_slave_1: Caught tx_queue_len zero misconfig
[  514.126373][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'.
[  514.136551][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'.
[  514.424754][T19583] bond1: entered promiscuous mode
[  514.430112][T19583] bond1: entered allmulticast mode
[  514.437316][T19583] 8021q: adding VLAN 0 to HW filter on device bond1
[  514.447535][T19588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.455334][T19588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.474747][T19588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.490358][T19588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.358919][T19642] sctp: [Deprecated]: syz.0.3617 (pid 19642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  515.358919][T19642] Use struct sctp_sack_info instead
[  515.685515][T19659] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  515.761458][T19662] netlink: 'syz.4.3627': attribute type 17 has an invalid length.
[  515.779756][T19667] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  515.795268][T19666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  516.016777][T19690] syzkaller0: entered promiscuous mode
[  516.022337][T19690] syzkaller0: entered allmulticast mode
[  516.339145][T19706] syzkaller0: entered promiscuous mode
[  516.344680][T19706] syzkaller0: entered allmulticast mode
[  516.527918][T19727] veth0: entered promiscuous mode
[  516.539600][T19727] veth0: left promiscuous mode
[  520.656084][T19761] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  520.696486][T19761] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  520.714679][T19761] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  520.831854][T19772] __nla_validate_parse: 10 callbacks suppressed
[  520.831903][T19772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3650'.
[  520.926716][T19776] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3652'.
[  521.307179][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'.
[  521.327367][T19798] syzkaller0: entered promiscuous mode
[  521.332887][T19798] syzkaller0: entered allmulticast mode
[  521.822634][T19827] syzkaller0: entered promiscuous mode
[  521.828377][T19827] syzkaller0: entered allmulticast mode
[  521.981307][T19838] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  522.026803][T19838] bond2: entered promiscuous mode
[  522.033292][T19838] 8021q: adding VLAN 0 to HW filter on device bond2
[  522.055494][T19838] 8021q: adding VLAN 0 to HW filter on device bond2
[  522.062712][T19838] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  522.072779][T19838] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  522.114429][T19838] bond2: (slave vti0): making interface the new active one
[  522.122045][T19838] vti0: entered promiscuous mode
[  522.132731][T19838] bond2: (slave vti0): Enslaving as an active interface with an up link
[  522.169394][T19838] syzkaller1: entered promiscuous mode
[  522.181848][T19838] syzkaller1: entered allmulticast mode
[  522.230085][T19838] syzkaller0: entered promiscuous mode
[  522.235807][T19838] syzkaller0: entered allmulticast mode
[  522.369096][T19851] bond3: entered promiscuous mode
[  522.468129][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'.
[  522.694930][T19865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3682'.
[  522.730994][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.741350][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.790447][T19873] syzkaller1: entered promiscuous mode
[  522.796658][T19873] syzkaller1: entered allmulticast mode
[  522.809193][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3685'.
[  522.819775][T19873] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3685'.
[  522.864565][T19877] gretap0: entered promiscuous mode
[  522.872535][T19877] vlan2: entered promiscuous mode
[  523.014447][T19887] netlink: 'syz.2.3691': attribute type 4 has an invalid length.
[  523.154795][T19897] netlink: 'syz.0.3692': attribute type 1 has an invalid length.
[  523.215876][T19897] netlink: 'syz.0.3692': attribute type 11 has an invalid length.
[  523.466663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.488723][T19920] netlink: 'syz.4.3698': attribute type 4 has an invalid length.
[  523.490769][T19922] xt_hashlimit: max too large, truncated to 1048576
[  523.504250][T19922] No such timeout policy "syz1"
[  523.542343][T19920] netlink: 'syz.4.3698': attribute type 4 has an invalid length.
[  523.683276][T19926] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  523.858889][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.934776][T19944] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3707'.
[  524.048579][T19950] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3708'.
[  524.061921][T19950] 0�X��D��: renamed from gretap0 (while UP)
[  524.084355][T19950] 0�X��D��: entered allmulticast mode
[  524.502109][T19969] Cannot find add_set index 0 as target
[  524.522821][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.669994][ T5637] block nbd8: Receive control failed (result -32)
[  524.768953][T19975] lo: Caught tx_queue_len zero misconfig
[  524.843316][T19985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.854741][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.920179][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'.
[  524.975407][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.622318][T20024] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  525.639998][T20024] x_tables: ip_tables: icmp match: only valid for protocol 1
[  525.789360][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.865846][T20028] xt_ecn: cannot match TCP bits for non-tcp packets
[  526.261829][T20057] bridge_slave_0: left allmulticast mode
[  526.267596][T20057] bridge_slave_0: left promiscuous mode
[  526.274857][T20057] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.365853][T20057] bridge_slave_1: left allmulticast mode
[  526.371668][T20057] bridge_slave_1: left promiscuous mode
[  526.377444][T20057] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.413838][T20057] bond0: (slave bond_slave_0): Releasing backup interface
[  526.430237][T20057] bond0: (slave bond_slave_1): Releasing backup interface
[  526.452904][T20057] team0: Port device team_slave_0 removed
[  526.468155][T20057] team0: Port device team_slave_1 removed
[  526.477730][T20057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.488256][T20057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.518195][T20057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.528923][T20057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.557707][T20080] __nla_validate_parse: 5 callbacks suppressed
[  526.557726][T20080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3742'.
[  526.933555][T20044] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_cmd_wq": -EINTR
[  527.355117][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3750'.
[  528.170561][ T7432] net_ratelimit: 6 callbacks suppressed
[  528.170580][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.870236][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'.
[  528.879267][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'.
[  528.917170][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.227169][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.262923][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.302681][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.637147][T20138] veth5: entered allmulticast mode
[  531.927203][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.331782][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.358129][T20193] macvtap1: entered promiscuous mode
[  532.379805][T20193] macvtap1: entered allmulticast mode
[  532.409267][T20193] veth1_vlan: entered allmulticast mode
[  532.505057][T20201] macvtap2: entered promiscuous mode
[  532.537890][T20201] macvtap2: entered allmulticast mode
[  532.645832][T20209] bridge0: entered promiscuous mode
[  532.686730][T20209] bridge0: entered allmulticast mode
[  532.791041][ T7453] IPVS: starting estimator thread 0...
[  532.806716][T20218] IPVS: dh: FWM 3 0x00000003 - no destination available
[  532.948051][T20221] IPVS: using max 27 ests per chain, 64800 per kthread
[  533.079236][T20238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3775'.
[  533.108880][T20231] can: request_module (can-proto-4) failed.
[  533.127255][T20234] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3778'.
[  533.136608][T20234] openvswitch: netlink: Message has 512 unknown bytes.
[  533.282368][T20243] tipc: Started in network mode
[  533.288387][T20243] tipc: Node identity 56d673d8333f, cluster identity 4711
[  533.295692][T20243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.303337][T20243] syzkaller0: entered promiscuous mode
[  533.308835][T20243] syzkaller0: entered allmulticast mode
[  533.317708][T20243] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  533.381150][T20243] tipc: Resetting bearer <eth:syzkaller0>
[  533.388514][T20242] tipc: Resetting bearer <eth:syzkaller0>
[  533.439231][T20242] tipc: Disabling bearer <eth:syzkaller0>
[  533.458266][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.597743][T20254] netlink: 'syz.0.3782': attribute type 21 has an invalid length.
[  533.604913][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'.
[  533.699995][T20257] policy can only be matched on NF_INET_PRE_ROUTING
[  533.700030][T20257] unable to load match
[  533.840682][T20265] sit1: entered promiscuous mode
[  533.845687][T20265] sit1: entered allmulticast mode
[  533.855937][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  533.864861][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3788'.
[  534.031669][T20274] syzkaller0: entered promiscuous mode
[  534.037192][T20274] syzkaller0: entered allmulticast mode
[  534.048252][T20274] ������: renamed from vlan1 (while UP)
[  534.393694][T20293] netlink: 'syz.1.3799': attribute type 1 has an invalid length.
[  534.419202][T20293] netlink: 'syz.1.3799': attribute type 3 has an invalid length.
[  534.438391][T20293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3799'.
[  534.489210][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.543578][T20304] openvswitch: netlink: Missing key (keys=40, expected=100)
[  534.605211][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'.
[  534.643604][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'.
[  534.720272][T20320] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3804'.
[  534.949075][T20328] nft_compat: unsupported protocol 0
[  534.971985][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.183463][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'.
[  535.380110][T20346] netlink: 'syz.4.3814': attribute type 1 has an invalid length.
[  535.420546][T20346] 8021q: adding VLAN 0 to HW filter on device bond2
[  535.453169][T20346] bond2: (slave veth3): Enslaving as an active interface with a down link
[  535.500041][T20346] bond2: (slave veth5): Enslaving as an active interface with a down link
[  535.532430][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.941912][T20363] netlink: 'syz.2.3819': attribute type 1 has an invalid length.
[  536.009942][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.016310][T20363] 8021q: adding VLAN 0 to HW filter on device bond3
[  536.029731][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.566782][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.653150][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.988866][T20415] syzkaller0: entered promiscuous mode
[  536.994396][T20415] syzkaller0: entered allmulticast mode
[  537.622612][ T7435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.662881][T20435] xt_hashlimit: size too large, truncated to 1048576
[  538.463738][T20495] hsr0: entered promiscuous mode
[  538.487950][T20480] __nla_validate_parse: 4 callbacks suppressed
[  538.487970][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3853'.
[  538.578302][T20498] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  538.737549][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.849216][T20512] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  538.862353][T20512] bond4 (unregistering): Released all slaves
[  538.879730][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'.
[  539.058686][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.317868][T20540] IPv6: sit2: Disabled Multicast RS
[  539.324203][T20540] sit2: entered allmulticast mode
[  539.348369][T20545] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3869'.
[  539.413995][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3867'.
[  539.482701][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3870'.
[  539.512187][T20551] team0: entered promiscuous mode
[  539.526280][T20551] team_slave_0: entered promiscuous mode
[  539.532901][T20551] team_slave_1: entered promiscuous mode
[  539.576177][T20558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3872'.
[  539.596186][T20551] team0: left promiscuous mode
[  539.602309][T20551] team_slave_0: left promiscuous mode
[  539.624723][T20551] team_slave_1: left promiscuous mode
[  539.678569][T20558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3872'.
[  539.698385][T20558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3872'.
[  539.707568][T20558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3872'.
[  539.736530][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'.
[  539.766628][T20564] netlink: 'syz.1.3874': attribute type 8 has an invalid length.
[  539.838017][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.959253][T20584] netlink: 'syz.3.3879': attribute type 21 has an invalid length.
[  540.567566][T20619] netlink: 'syz.1.3887': attribute type 1 has an invalid length.
[  540.821794][T20634] xt_hashlimit: invalid rate
[  540.939058][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.379561][T20663] xt_hashlimit: size too large, truncated to 1048576
[  541.543854][T20671] netlink: 'syz.4.3904': attribute type 1 has an invalid length.
[  541.848311][T20688] netlink: 'syz.0.3908': attribute type 25 has an invalid length.
[  542.007418][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.029027][T20697] bond4: entered promiscuous mode
[  542.046425][T20699] ip6tnl0: Caught tx_queue_len zero misconfig
[  542.130025][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.388304][T20712] syzkaller0: entered promiscuous mode
[  542.413465][T20712] syzkaller0: entered allmulticast mode
[  542.561387][T20732] xt_hashlimit: size too large, truncated to 1048576
[  542.897771][T20749] syzkaller0: entered promiscuous mode
[  542.913811][T20749] syzkaller0: entered allmulticast mode
[  543.050950][ T7433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.080638][T20757] tunl0: Caught tx_queue_len zero misconfig
[  543.641298][T20794] netlink: 'syz.3.3934': attribute type 1 has an invalid length.
[  543.860982][T20794] 8021q: adding VLAN 0 to HW filter on device bond6
[  543.876688][T20807] __nla_validate_parse: 78 callbacks suppressed
[  543.876710][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3937'.
[  543.947657][T20807] block nbd9: Unsupported socket: should be TCP or UNIX.
[  543.995881][T20794] vlan3: entered promiscuous mode
[  544.037501][T20794] batadv_slave_1: entered promiscuous mode
[  544.061200][T20794] vlan3: entered allmulticast mode
[  544.071613][T20794] batadv_slave_1: entered allmulticast mode
[  544.088919][ T7433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.154545][T20805] bond6: (slave bridge2): making interface the new active one
[  544.174458][T20805] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  544.288377][T20828] 
: renamed from bond0 (while UP)
[  544.323326][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'.
[  544.534639][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.548136][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.821543][T20854] macvlan0: entered promiscuous mode
[  544.840763][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'.
[  544.882309][T20860] 8021q: VLANs not supported on ip6tnl0
[  545.126869][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.237613][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.705568][T20896] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  545.931788][T20916] netlink: 'syz.4.3966': attribute type 9 has an invalid length.
[  545.968895][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'.
[  546.103084][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'.
[  546.174395][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.347417][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.391486][T20932] xt_nat: multiple ranges no longer supported
[  546.663572][T20949] netlink: 'syz.3.3975': attribute type 1 has an invalid length.
[  546.875332][T20954] vlan2: entered promiscuous mode
[  547.061723][T20971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3982'.
[  547.229760][T20982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3986'.
[  547.305126][ T7433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.353315][T20987] netlink: 'syz.3.3987': attribute type 2 has an invalid length.
[  547.367119][T20989] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3985'.
[  547.400951][T20989] openvswitch: netlink: Message has 4 unknown bytes.
[  547.438698][T20989] netlink: 'syz.0.3985': attribute type 1 has an invalid length.
[  547.446487][T20989] netlink: 'syz.0.3985': attribute type 1 has an invalid length.
[  547.473279][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3985'.
[  547.482281][T20989] nbd: couldn't find a device at index 65544
[  547.649520][T20997] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3991'.
[  547.939667][T21024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  548.143346][T21033] tc action pedit 'at' offset 19 out of bounds
[  548.239998][T21035] syzkaller1: entered promiscuous mode
[  548.245615][T21035] syzkaller1: entered allmulticast mode
[  548.251373][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.590349][T21049] netlink: 'syz.1.4007': attribute type 1 has an invalid length.
[  548.922522][T21061] __nla_validate_parse: 1 callbacks suppressed
[  548.922541][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'.
[  548.989766][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'.
[  549.034641][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4013'.
[  549.054206][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'.
[  549.449670][ T7432] net_ratelimit: 3 callbacks suppressed
[  549.449710][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.644529][T21081] syzkaller0: entered promiscuous mode
[  549.653244][T21081] syzkaller0: entered allmulticast mode
[  549.708024][T21103] ip6tnl2: entered promiscuous mode
[  549.810884][T21113] netlink: 'syz.1.4027': attribute type 58 has an invalid length.
[  549.819064][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4027'.
[  549.918772][T19698] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  549.920422][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4025'.
[  549.941380][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4025'.
[  550.488307][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.497568][T21104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.576779][T21133] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4031'.
[  550.661794][T21132] nbd: must specify at least one socket
[  550.813499][T21146] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  550.845176][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[  550.897341][T21144] netlink: 'syz.0.4034': attribute type 10 has an invalid length.
[  550.933348][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4034'.
[  550.977692][T21156] xt_CT: You must specify a L4 protocol and not use inversions on it
[  551.006091][T21144] geneve2: entered promiscuous mode
[  551.044664][T21144] geneve2: entered allmulticast mode
[  551.166771][T21162] block nbd0: reconnected socket
[  551.167510][ T5637] block nbd0: Receive control failed (result -107)
[  551.264932][T21172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.317750][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.376204][T21178] batadv1: entered allmulticast mode
[  551.417037][T21181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.428064][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.595562][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.654026][T21194] netlink: 'syz.4.4047': attribute type 2 has an invalid length.
[  551.728053][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.737799][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.751306][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.765737][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.228123][T21282] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20001
[  553.760928][T21308] syzkaller1: entered promiscuous mode
[  553.783404][T21308] syzkaller1: entered allmulticast mode
[  554.195716][T21338] __nla_validate_parse: 14 callbacks suppressed
[  554.195735][T21338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4085'.
[  554.268726][T21337] syzkaller0: entered promiscuous mode
[  554.286652][T21337] syzkaller0: entered allmulticast mode
[  554.557300][T19682] 
[  554.559677][T19682] ======================================================
[  554.566690][T19682] WARNING: possible circular locking dependency detected
[  554.573714][T19682] syzkaller #0 Not tainted
[  554.578124][T19682] ------------------------------------------------------
[  554.585152][T19682] kworker/u8:28/19682 is trying to acquire lock:
[  554.591482][T19682] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610
[  554.601355][T19682] 
[  554.601355][T19682] but task is already holding lock:
[  554.608736][T19682] ffff88807b831d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  554.617638][T19682] 
[  554.617638][T19682] which lock already depends on the new lock.
[  554.617638][T19682] 
[  554.628046][T19682] 
[  554.628046][T19682] the existing dependency chain (in reverse order) is:
[  554.637067][T19682] 
[  554.637067][T19682] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  554.644994][T19682]        lock_sock_nested+0x41/0x100
[  554.650298][T19682]        do_tcp_setsockopt+0x8f1/0x1f80
[  554.655864][T19682]        mptcp_setsockopt+0x1165/0x3550
[  554.661427][T19682]        do_sock_setsockopt+0x17c/0x1b0
[  554.666986][T19682]        __x64_sys_setsockopt+0x13d/0x1b0
[  554.672714][T19682]        do_syscall_64+0x174/0x580
[  554.677833][T19682]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.684258][T19682] 
[  554.684258][T19682] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  554.692010][T19682]        lock_sock_nested+0x41/0x100
[  554.697315][T19682]        inet_shutdown+0x6a/0x390
[  554.702366][T19682]        nbd_mark_nsock_dead+0x2cb/0x550
[  554.708033][T19682]        recv_work+0x1cee/0x1e10
[  554.712991][T19682]        process_scheduled_works+0xa8e/0x14e0
[  554.719090][T19682]        worker_thread+0xa47/0xfb0
[  554.724247][T19682]        kthread+0x388/0x470
[  554.726501][ T5639] Bluetooth: hci5: command 0x0406 tx timeout
[  554.728854][T19682]        ret_from_fork+0x514/0xb70
[  554.728877][T19682]        ret_from_fork_asm+0x1a/0x30
[  554.728910][T19682] 
[  554.728910][T19682] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  554.728940][T19682]        __mutex_lock+0x19d/0x1550
[  554.728958][T19682]        nbd_queue_rq+0x373/0x1150
[  554.728978][T19682]        blk_mq_dispatch_rq_list+0x499/0x1990
[  554.729006][T19682]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  554.729025][T19682]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  554.782611][T19682]        blk_mq_run_work_fn+0x16c/0x300
[  554.788176][T19682]        process_scheduled_works+0xa8e/0x14e0
[  554.794260][T19682]        worker_thread+0xa47/0xfb0
[  554.799398][T19682]        kthread+0x388/0x470
[  554.804003][T19682]        ret_from_fork+0x514/0xb70
[  554.809130][T19682]        ret_from_fork_asm+0x1a/0x30
[  554.814428][T19682] 
[  554.814428][T19682] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  554.821640][T19682]        __mutex_lock+0x19d/0x1550
[  554.826777][T19682]        nbd_queue_rq+0xc1/0x1150
[  554.831798][T19682]        blk_mq_dispatch_rq_list+0x499/0x1990
[  554.837868][T19682]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  554.844723][T19682]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  554.851223][T19682]        blk_mq_run_work_fn+0x16c/0x300
[  554.856770][T19682]        process_scheduled_works+0xa8e/0x14e0
[  554.862840][T19682]        worker_thread+0xa47/0xfb0
[  554.867954][T19682]        kthread+0x388/0x470
[  554.872538][T19682]        ret_from_fork+0x514/0xb70
[  554.877648][T19682]        ret_from_fork_asm+0x1a/0x30
[  554.882934][T19682] 
[  554.882934][T19682] -> #3 (set->srcu){.+.+}-{0:0}:
[  554.890056][T19682]        __synchronize_srcu+0xc9/0x2f0
[  554.895521][T19682]        elevator_switch+0x1e8/0x7b0
[  554.900806][T19682]        elevator_change+0x2fa/0x480
[  554.906099][T19682]        elevator_set_default+0x375/0x440
[  554.911825][T19682]        blk_register_queue+0x3f3/0x4e0
[  554.917381][T19682]        __add_disk+0x6cb/0xe30
[  554.922235][T19682]        add_disk_fwnode+0xfb/0x4b0
[  554.927433][T19682]        nbd_dev_add+0x733/0xb60
[  554.932366][T19682]        nbd_init+0x15f/0x1e0
[  554.937048][T19682]        do_one_initcall+0x250/0x870
[  554.942344][T19682]        do_initcall_level+0x10a/0x1a0
[  554.947801][T19682]        do_initcalls+0x59/0xa0
[  554.952652][T19682]        kernel_init_freeable+0x29d/0x3e0
[  554.958370][T19682]        kernel_init+0x1d/0x1d0
[  554.963216][T19682]        ret_from_fork+0x514/0xb70
[  554.968323][T19682]        ret_from_fork_asm+0x1a/0x30
[  554.973615][T19682] 
[  554.973615][T19682] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  554.981456][T19682]        __mutex_lock+0x19d/0x1550
[  554.986587][T19682]        elevator_change+0x1af/0x480
[  554.991919][T19682]        elevator_set_none+0xb5/0x140
[  554.997295][T19682]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  555.003621][T19682]        nbd_start_device+0x189/0xb30
[  555.008990][T19682]        nbd_genl_connect+0x1597/0x1c10
[  555.014530][T19682]        genl_family_rcv_msg_doit+0x233/0x340
[  555.020600][T19682]        genl_rcv_msg+0x614/0x7a0
[  555.025660][T19682]        netlink_rcv_skb+0x226/0x4a0
[  555.030944][T19682]        genl_rcv+0x28/0x40
[  555.035450][T19682]        netlink_unicast+0x7bb/0x940
[  555.040729][T19682]        netlink_sendmsg+0x813/0xb40
[  555.046014][T19682]        sock_sendmsg_nosec+0x13a/0x180
[  555.051571][T19682]        ____sys_sendmsg+0x54e/0x850
[  555.056853][T19682]        ___sys_sendmsg+0x2a5/0x360
[  555.062043][T19682]        __x64_sys_sendmsg+0x1b1/0x290
[  555.067497][T19682]        do_syscall_64+0x174/0x580
[  555.072605][T19682]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.079161][T19682] 
[  555.079161][T19682] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  555.087778][T19682]        blk_alloc_queue+0x544/0x690
[  555.093075][T19682]        __blk_mq_alloc_disk+0x194/0x390
[  555.098702][T19682]        nbd_dev_add+0x494/0xb60
[  555.103643][T19682]        nbd_init+0x15f/0x1e0
[  555.108322][T19682]        do_one_initcall+0x250/0x870
[  555.113604][T19682]        do_initcall_level+0x10a/0x1a0
[  555.119061][T19682]        do_initcalls+0x59/0xa0
[  555.123910][T19682]        kernel_init_freeable+0x29d/0x3e0
[  555.129624][T19682]        kernel_init+0x1d/0x1d0
[  555.134470][T19682]        ret_from_fork+0x514/0xb70
[  555.139624][T19682]        ret_from_fork_asm+0x1a/0x30
[  555.144907][T19682] 
[  555.144907][T19682] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  555.152116][T19682]        __lock_acquire+0x1520/0x2cf0
[  555.157493][T19682]        lock_acquire+0x106/0x350
[  555.162511][T19682]        fs_reclaim_acquire+0x71/0x100
[  555.167964][T19682]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  555.174290][T19682]        __alloc_skb+0x1d7/0x7a0
[  555.179222][T19682]        tcp_send_active_reset+0x8a/0x550
[  555.184949][T19682]        __tcp_close+0x462/0xec0
[  555.189885][T19682]        tcp_close+0x28/0x110
[  555.194557][T19682]        inet_release+0x143/0x190
[  555.199579][T19682]        sock_release+0x85/0x150
[  555.204513][T19682]        rds_tcp_accept_one+0x62c/0xd40
[  555.210061][T19682]        rds_tcp_accept_worker+0x1d/0x70
[  555.215700][T19682]        process_scheduled_works+0xa8e/0x14e0
[  555.221767][T19682]        worker_thread+0xa47/0xfb0
[  555.226875][T19682]        kthread+0x388/0x470
[  555.231459][T19682]        ret_from_fork+0x514/0xb70
[  555.236568][T19682]        ret_from_fork_asm+0x1a/0x30
[  555.241847][T19682] 
[  555.241847][T19682] other info that might help us debug this:
[  555.241847][T19682] 
[  555.252064][T19682] Chain exists of:
[  555.252064][T19682]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  555.252064][T19682] 
[  555.265022][T19682]  Possible unsafe locking scenario:
[  555.265022][T19682] 
[  555.272475][T19682]        CPU0                    CPU1
[  555.277829][T19682]        ----                    ----
[  555.283208][T19682]   lock(k-sk_lock-AF_INET6);
[  555.287895][T19682]                                lock(sk_lock-AF_INET6);
[  555.294917][T19682]                                lock(k-sk_lock-AF_INET6);
[  555.302104][T19682]   lock(fs_reclaim);
[  555.306091][T19682] 
[  555.306091][T19682]  *** DEADLOCK ***
[  555.306091][T19682] 
[  555.314225][T19682] 4 locks held by kworker/u8:28/19682:
[  555.319675][T19682]  #0: ffff888032e94140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  555.330571][T19682]  #1: ffffc9000560fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  555.343276][T19682]  #2: ffff888033e8d060 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40
[  555.353983][T19682]  #3: ffff88807b831d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  555.363306][T19682] 
[  555.363306][T19682] stack backtrace:
[  555.369192][T19682] CPU: 0 UID: 0 PID: 19682 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) 
[  555.369213][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  555.369224][T19682] Workqueue: krdsd rds_tcp_accept_worker
[  555.369248][T19682] Call Trace:
[  555.369256][T19682]  <TASK>
[  555.369265][T19682]  dump_stack_lvl+0xe8/0x150
[  555.369283][T19682]  print_circular_bug+0x2e1/0x300
[  555.369306][T19682]  check_noncircular+0x12e/0x150
[  555.369328][T19682]  __lock_acquire+0x1520/0x2cf0
[  555.369345][T19682]  ? lockdep_unlock+0x5d/0xd0
[  555.369359][T19682]  ? __lock_acquire+0x13e8/0x2cf0
[  555.369378][T19682]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  555.369402][T19682]  lock_acquire+0x106/0x350
[  555.369415][T19682]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  555.369441][T19682]  ? napi_skb_cache_get+0x151/0x7d0
[  555.369455][T19682]  ? lock_acquire+0x106/0x350
[  555.369472][T19682]  fs_reclaim_acquire+0x71/0x100
[  555.369485][T19682]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  555.369508][T19682]  kmem_cache_alloc_node_noprof+0x6a/0x610
[  555.369531][T19682]  ? local_lock_release+0x9c/0x160
[  555.369553][T19682]  ? __alloc_skb+0x189/0x7a0
[  555.369566][T19682]  ? __alloc_skb+0x1d7/0x7a0
[  555.369578][T19682]  ? __alloc_skb+0x1d7/0x7a0
[  555.369594][T19682]  __alloc_skb+0x1d7/0x7a0
[  555.369610][T19682]  tcp_send_active_reset+0x8a/0x550
[  555.369640][T19682]  __tcp_close+0x462/0xec0
[  555.369662][T19682]  tcp_close+0x28/0x110
[  555.369678][T19682]  inet_release+0x143/0x190
[  555.369702][T19682]  sock_release+0x85/0x150
[  555.369723][T19682]  rds_tcp_accept_one+0x62c/0xd40
[  555.369742][T19682]  ? __pfx_rds_tcp_accept_one+0x10/0x10
[  555.369764][T19682]  ? rcu_is_watching+0x15/0xb0
[  555.369782][T19682]  ? process_scheduled_works+0xa20/0x14e0
[  555.369803][T19682]  rds_tcp_accept_worker+0x1d/0x70
[  555.369822][T19682]  process_scheduled_works+0xa8e/0x14e0
[  555.369854][T19682]  ? __pfx_process_scheduled_works+0x10/0x10
[  555.369876][T19682]  ? assign_work+0x3cf/0x5d0
[  555.369898][T19682]  worker_thread+0xa47/0xfb0
[  555.369930][T19682]  kthread+0x388/0x470
[  555.369946][T19682]  ? __pfx_worker_thread+0x10/0x10
[  555.369966][T19682]  ? __pfx_kthread+0x10/0x10
[  555.369983][T19682]  ret_from_fork+0x514/0xb70
[  555.370001][T19682]  ? __pfx_ret_from_fork+0x10/0x10
[  555.370018][T19682]  ? __switch_to+0xc89/0x1420
[  555.370040][T19682]  ? __pfx_kthread+0x10/0x10
[  555.370057][T19682]  ret_from_fork_asm+0x1a/0x30
[  555.370082][T19682]  </TASK>
[  555.608049][    C0] net_ratelimit: 268 callbacks suppressed
[  555.608068][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.622221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.630591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.638945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.672617][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.858741][ T7456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.736497][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.046444][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.369290][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.768657][ T7434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.888087][ T7434] net_ratelimit: 4 callbacks suppressed
[  560.888116][ T7434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.979389][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.928268][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.726482][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.890486][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  562.968406][ T7434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.006709][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog