last executing test programs:

2.467387421s ago: executing program 2 (id=2058):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr=0x64010101, @local}, 0x8) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, <r3=>0xffffffffffffffff}, 0x4) (async)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
recvfrom$rxrpc(r4, 0x0, 0x0, 0x10130, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (rerun: 64)

2.461894764s ago: executing program 2 (id=2062):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000c868ac1a56c65a4cfbcbd95634857b344aa89e068c988d8bdcbfaba614440d74f953ff8de8065003122cfe3998343c0a102110d590d8628a82c8b024babcef515450"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socketpair(0x10, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe77}, 0x40000020)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6004010100182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b02020600000000ff010000000000000000000000000001b339c1f33058b121339daa7178d66d52c54206534436b50074b44e61157e2c0b1da410d68dadbeea92be8d5735e6d0d08e0701f0c0d70a52fc6bdc4a66622807e4148613c7bd1df99495d29336572ee03f9ab33d94608bc87984b65158d29821df4eb2af4b296241ee28a7bd"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="3377bb96d766", 'veth0_to_hsr\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8915, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r8, 0x0, 0x0}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet6(0xa, 0x0, 0x80000001)

2.178701013s ago: executing program 2 (id=2068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x51, &(0x7f00000009c0)=[{&(0x7f0000000500)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b", 0x63}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643d", 0x68}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291", 0x83}, {&(0x7f00000000c0)}], 0x4}}], 0x1, 0x2000c044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r11 = socket(0x2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3}, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x8800)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="d479183d7d98d181a4b5f3e38100e2f288f7a8d2", 0x14}, {&(0x7f0000001c00)="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", 0xfdc}], 0x2}}, {{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x4, 0x3, {0xa, 0x4e22, 0xc657, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="4350c462eea467039f70a9b1ee662588551e2df2294254d50e3fce987aa088732f7b4dd6f112351a15397f4e7165f15835a60e051e9344abdd5d02cb76e6e092d3", 0x41}, {&(0x7f0000000280)="5b7e449f2a05c9e13164f780dee0d3021752bdc8fa8afb0e8e15a44d364a6c490fbe4313dd6e9abb424e9661a987104f4089cc591e6585fab65749f17a2d27a5c47c33928a70a080a858905ca2a3c44d01910afebe332f6aa559ad4fda1aa9b78dbb926e9aa2b024b88275fa8dde3dbbe6177d8812bddd264e31fa582b2029f7fde5bd96ba452153dd70d0cd00f0528eb4e6d5eac4641fc7e408be820a3249276892eeb8b09781e1", 0xa8}], 0x2, &(0x7f0000001640)=[{0x50, 0x6, 0x9, "0a985dcece091b55ef962d23ea27280c6199d5d13794b13f2243372242848d72db3a47240609fd70e28552894e859cbe2473ad49d933897c02375a474b"}, {0x1b0, 0x84, 0x5f9c, "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"}, {0xb0, 0x0, 0x3, "222ae948d4960d9d7f26942fb489b489683267eb7670c6662ca6ead83970bcbd48f612b9703c3ea15fa79a7550e8db26aa4e0bc1eedb5bc015bb7dfa22e681352048251940e44858146999eb3f3bb8743a2d79bf8ca79a71755a9d8fe957c9538922c7b4c9e40fba439dfc689a21acd1d5e870bc4b4ee30cbfee0183eb0abaf1b75a89aa1428b60e7204506c69d7da56b282a0ef8aeca2c751afb55a88076494"}, {0x78, 0x109, 0x3, "9e0951c7b561189d9145e40471f0e55a3429a80e2b522b6196881f65876fac2ca37bf5efa1ee82105ed09047807456cabd75e385cf2d41b30a35ac797ebc711555696ea9311c7d207baebf784668217aaa1a6a145cf560335ba1ae2107690fd8d9a07a9e9c"}, {0x68, 0x103, 0x5, "b819dbb2c1eb010738220a22058870de0d1abefe2e98833e36c07939af84e4f924c4d6849a4b1efb549a2264d8c24c15c4453538d4d02eecc003d25f7d1f4964bb8dd0ae0e8d70d7ce45af837bf95fefa64707"}, {0xa0, 0x10a, 0x80, "ab906eb28d2c441c36c3a3dce850b2c8feb2eb0bf183c85f357d99389611a23faf477a00b30503fb2867f6271fa7bc851ac985b28bbd7a777a90bc9ea2a2212fad02ed2712a2c246d33bdbba79f3a85a87fbd0bc58eb21932828dd83507a70d90baefd2d3c9d94ba430081dc6c0984edd69247ed094450c71db9b131b41f0e79d41120118e9f431eacd2d0d543f7e5be"}, {0x108, 0x103, 0x8681, "51a4b64cb95663d0c42c1ad4df5f14522805131bf08dd74478433cb0eade8ce5cd3ef8b25372d7fee2623af8fb1e686b3236bc20c8099f36147166ce9eca7af6effbef40da94d65afeb976c0561170dfa4b4791845415a1741f45c4e3f0b16b021e337281603c4780dc70e9c1ba9b78430fe05fc784ad8387a50de259eff9cfd0b2fc221986c4112ccee787661e190aa7b3c2aee823374ee327dbbb40f90999402591403214e0514df422b4375cc59e63f1d97472499f8e78a32021f8abfc639e2a9de73068bad0f45aa3e3d519491c27ec0457585d783ee2035aacdec23a3bdb83a475e99ab81fe5af4f5dff88a599284ad8226d8d5"}], 0x538}}, {{&(0x7f0000000b40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)="6ffdb8f0b0b4ff9c23f51fac3b5a44e6e123fdab1b60d46b1ce67bf6a1bfbb19f78279e929699bfdfa22a7675c858f551f5d10fa7042868ae6dd50263424ffff696f1315efa63489cec99c69df7721801585718c9f0874fdf5f76c93f3f7024518492d7f5961119f2000f152e614325dfc4bfdce1555583b682922cad3fde5235676a5784703d85f4920f40857d1401141b8ae7c49c15fb0f4dff7b7bf3141015f0a4b0064920c92f4f2ff5c0a5165ba690b2196599a55bd76ebad06fab2c63d04c1f6a6fc720f7801", 0xc9}, {&(0x7f0000000d00)="7ef70e766f7b27d775e7a634012e08bf7539dd87ea489ca1f50ccb6043d304cc102568fc75d485b27d9a2c7ac231af6f4dea7734ed11103f4b51346d84d916b9cb8ded965c98269674002f6f762fa41dd977f8d8a124237e8888695958f278c2e3ab040ce1143b2b1bdd88a977cf33c778ea24d273cb30e0cfb4396c494d042748d23266303abb41a5df9d862d851556c04347e6ac305950ecb45b9c0308135d20cb3b7a8955f9175de546dedd19b345c4bd1314c03643f8ed7ec08b71244aead47333f995bd444443", 0xc9}], 0x2, &(0x7f0000000e40)=[{0xb8, 0x110, 0xc0000, "03646df73cf8194882f5bb588b0c7a432e762b1a1660cfc9728178a73c3f101e85bb7ce82551d2ea418ee2e694a599701aa8c402f435c00ada64e7f189b9069221712b1d8bf3e9271004a6fdab328fa0ceb957d6251b163a483ea118fa7ed7816b985a79d40946d20267ef319aff118b1617624c1c44799d32419ad5772a06c2ae30bba429f45c66190d4bf210a22c452294a051116e64a95e00d6f334b574700c"}, {0xe8, 0xff, 0x2, "5c072294de8b87315d3a29be9ba263e82b6bf6a47cc07c4d3151b104292809aadb75b0c01f77827efeb51ddbe533fd023e2280f9e2410084800fca54123272d131b43b7309a669c24a7e0fd3739d69a9d234ea774bc891f6a24046beae41c43c44180e02b796fbd100eb34fb5e61cb223ab1ec1e1a632e677e012b922cc5be7f46bd91984b87afde47bb2336f640b7345a2e987df8ba3b9ccc5ac576d14b9213643b4b18b6860169e3dcbd34ea861a50a6613e3e2195c0b9b3e07681d0a3535f377195d494f75645607386cf84d6c35d952d0d0e8a8df7"}, {0x70, 0x107, 0x4, "d13ac4dd397b1962d2e35061aaece81c6e8c88f5986c6137d6601f32858971cfe1ef323e066843f6141f7f74b717a759560262659dea29c81754f83a8a7f9f6c2614f2ef206a0bc8aaddca4c2d2863fd1919786afb41e26021e7c647392d59"}, {0x110, 0xff, 0xfffffe00, "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"}, {0x68, 0x11, 0x6, "0640e9e38c51ce5d5aaad4954600678351a81351ece49e8c0390e01c904779c680f7fe67adb5af054c943ef1ece021399ec44cfc9ba273eaf6e6ba917a74fd7cfdf17797d27118be2eb5b3a745f98d7ff678d8"}, {0xf0, 0x23f, 0xfffffffa, "472427f4ac8316ecf3e4dad7556783037c25c8d1f6e59bff3fdcfca5dc06b2d262b82e10cc3b082fbbfa8ee83db1c74713d98bb9be3765cf1e542cd85d6abf6759da3e440777f414d3d781a3ed11fd389dc0955d9953fc0093ac3409481473fef8bc15dcde48a4cded2b61410e9edae505d360244371658cf07ece819172f7ff055a617be0f4b27e2aacad314b7f259602285a391ccc3146851c4386a729b26d25ad3cc5bda25300bc4936fd030cc6857402032a98a866046e7a712aa6e41e280ba3fd063083379a318bc0a8457702dc2eb092570b644a1c7b"}, {0xf8, 0x0, 0x40, "c234d38532c8f6eb66bd5870bb702e1e288898edfc6889c91a2946cdbd204843ea14b5a87d96f8613fce90a3986678f090936722251b149a494d3d1e483d15bcfbceee627dac829c3b4cc903b44b96f5803489e601f8d729e517caafc3bfb2c91dff112a023b88dc1d8dfa6dcb804bcf2b5f236bedbaafce875acd537113519c16ca3114d7d0a75c74fe9b306e9a703dc9352ebce2389f72d151215785d8419add4e76c260f35209edaee56796f330ab526e8ce4ad4299ae3714337683ed209f187562adfc030d94b5a646eafded2df68c12452e0bdb2ed3fe148b7c6bd88bbbe898b16d18be"}, {0xf0, 0x113, 0xfff, "7532cae490f3ef6b318d421af940d693b87c06292bc62eedcbfe2619fb1e55d82e278c72b1da78b88bb6cb6544c46429ef1c3fa47cdbb5fec7d3d14e0164d4328d7c297594600ff47d96f02ca469dc70b5a1c0e9671036ecc127142ef7a63670cc6a5f6f23196ead65883169fe3e3b79c208dd79d1c6ccdab10080f323c80677d65bc0e0edb0124f07d4b5f0a7407caf76105fd1948723eeded0cf97db2293fc653153b3cc4c387bb06e9327c9800a053d5e78ddc787b08319686a5e63fa5915b346e1b51f2a67576e4dc0713174b3ca63a1b885c43c9c48126b14"}, {0xe0, 0x118, 0xffffff4d, "1944e3b90309d4d5b6121c373c6fe19def71813f38b0ff59fe3d5d978d1eae496b3c7c898b3128218df35c7791c23e6f90c8906a74335ca2c5fe01226db16e58a03824d356c0dcf72b2ee3d5a8afdd857e112bcd686f5c0d8ff48ab915a7829a1df0de744c0895586a28adb4363ca687f759c4a1befc7441bbd21c400dd5f497d76d3f6415badb0af5fe32555b8ad7c71d21f8608827c6d366be716642ecef12a76e20c8370edcbb2053f1b9412c7fa3f3a03b2de037d3e4d19b2b736cded5600d260ee553d7f1815ee3"}], 0x740}}], 0x3, 0x4044015)
r12 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r13 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0xa75, @mcast1, 0x2}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write$cgroup_devices(r12, &(0x7f0000000040)={'b', ' *:* ', 'r\x00'}, 0x8)

1.906451994s ago: executing program 0 (id=2073):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000580)=0x39ab, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000240)="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", &(0x7f0000000340)=""/104, &(0x7f00000003c0)="b79553cd2a15abf74da543c88931a56e416194a9a465b7c2d29ee7a7d8d1e96841737cb936a8ca221edc571b3c5f08fb47e940e5c48672e5eb157e612625408c4f623383c1689e2cfebf34599accad", &(0x7f0000000440)="a163d21c706a14522fcbd3ffee348b12d035f057d8b8a8723ce01f9a4d22f41cc4919a75d4fcf3084dea78805d102b7a8548ef510f778a7868fbbdc7c01c268de0324631b3b3ef5b4d99aea244f0425bcc66788b84eabfa4eb8d90c99b89818bd1948da7285fcf06863a21db297100a602587e3ec512e21fea91d7646cefefcdfb988c7133910de9c9034ef5c380d14aa75d92c37e1361df7be96e3980ddbeb322df064a35222273f198e40a7ca297c33eeb205ad430a71322fa86485062042958a66cab6052157900d06a156d80b098c2ea695c5144ec0352d8b9db0bab81f226aac268ce7c5418b4fbea892a6318d33e703fd3bc05146304", 0xa, r1}, 0x38)

1.715836005s ago: executing program 3 (id=2075):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
socket$l2tp(0x2, 0x2, 0x73)
syz_emit_ethernet(0x2b6, &(0x7f0000000280)={@empty, @empty, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "ad216c", 0x280, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0xf8, 0x6, 0x2, 0x0, 0x0, [@remote, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x67, 0x6, 0x4, 0x3, 0x6, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @empty, @local]}, @srh={0x2b, 0x10, 0x4, 0x8, 0x5, 0x28, 0xfffb, [@private2, @empty, @remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x87, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @hopopts={0x13b, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x2c0b}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x3a, 0x17, '\x00', [@ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x1, 0xa, 0x80, 0xd41, [0x1, 0x4, 0x0, 0xed, 0xf21a]}}, @pad1, @generic={0x0, 0x52, "280abe3bbb210b068c0dbb3b306b456f59ff7b9e27baa317234f74186188b3f6602b992698adc297d365b565fb012219532b7ee66908097271f32cf88ac2e2e91318ef477691b77f710b98432c574090b083"}, @enc_lim={0x4, 0x1, 0xb}, @ra={0x5, 0x2, 0x8}]}, @routing={0x88, 0x6, 0x1, 0xd7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}], {0x4e22, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "0201898500e3e7a99adcb08d6b135e018397e9766215e84f", "fb5b95e25db4f6ab2f933477bf38008ce8fecabf3769f5edda644de280e9ee37"}}}}}}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xe7af55062be47c0e, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x4}, 0x1, 0x0, 0x0, 0x20004004}, 0x40c4)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1.686847692s ago: executing program 2 (id=2076):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0)

1.320974785s ago: executing program 0 (id=2079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.319274924s ago: executing program 0 (id=2080):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
poll(&(0x7f0000000340)=[{r0, 0x480}], 0x1, 0x33a0) (async)
poll(&(0x7f0000000340)=[{r0, 0x480}], 0x1, 0x33a0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async)
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65)
splice(r4, 0x0, r2, 0x0, 0x5, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4) (async)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000000000000000000f5314f373e08013b4ddb172f61d62e96c2ab5f62086c384f1a7e3141a2a972a0f556958534a5b60491f14cd367190b8a0cb7e925d5ded084806dc11497a30ce85b03988bf383d47a0386496633d9775f65160bd6dca2af5eba03c6000bc3e65d55596d2b5c17584d4947f7637d9d12da4937e2769dff7905dba0b492dadc08e2963976f58fb152035ae969cbca4eb2f7048f5433fca4854304fc13589b8ddaf7c8a19645a0db79e4b0a0a76903000000f6d808473e13e83a635d46f54e3b5c62cad0f94f", @ANYRES16=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES8=r4, @ANYRES32, @ANYBLOB="040000000100"], 0x50)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0)
connect$unix(r7, &(0x7f0000000100)=@abs={0x27}, 0x6e)
ioctl$SIOCSIFHWADDR(r6, 0x8b34, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000000000006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800c0001800800013c000000000800080000000000080006400000000005000500020000000500010006000000"], 0x6c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x23, 0x80805, 0x0)
ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000140)={'xfrm0\x00', @ifru_mtu=0xff}) (async)
ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000140)={'xfrm0\x00', @ifru_mtu=0xff})
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffd8ee, @hyper}, 0x10)

1.318445801s ago: executing program 3 (id=2081):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

1.317219086s ago: executing program 4 (id=2082):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004)

1.289788698s ago: executing program 3 (id=2083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28)
recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000022)
recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000002a00)=""/15, 0xf}], 0x2}, 0xec}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)

1.260160965s ago: executing program 2 (id=2084):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x1d0, 0x1d0, 0xffffffff, 0x3f0, 0x0, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x0, 0x9}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xdd73bcd3084195f, @rand_addr=0x64010101, @empty, @gre_key=0x7, @icmp_id=0x66}}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xff, 0xffffff00, 'macvlan1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x38beeb8d5006cbec}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "def6"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0xda, 0x1]}}, @common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010100, @rand_addr=0x64010101, @port=0x4e24, @gre_key=0x6}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'geneve1\x00', 'geneve1\x00', {0xff}, {}, 0x4, 0x1}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x7, 0x1}}, @common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0x1, 0x0, 0x0, 0x1, 0x1], 0x6, 0x5}, {0x100, [0x3, 0x5, 0x1, 0x4, 0x2, 0x4], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
readv(r4, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2056ee746fa58d6ddb82a2", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0)
sendto$inet(r2, &(0x7f0000000480)="baf435a0b207eab72883d424c08652c39c562f2af5c0fb61abc3eb67a2b2e8e40f1a4c4ca86f582c82e7fe4de9162e6bfdb683537b510c2d870214b37b2c6ed5d0462773968c0dd8a17cdd825ee0612ba7d0f2c28d17b7d5687b639bbd88ecb96c23db2c8ec3077629d436c3f3f64a3f4a51f88eafb20d84", 0x78, 0x26008c40, &(0x7f0000000500)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r6 = getpid()
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x44}}, 0x440b0)

1.198505454s ago: executing program 1 (id=2085):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000d0000032006acbda4ddfb9000000983f553831db5b"], 0x58}, 0x0) (async)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000d0000032006acbda4ddfb9000000983f553831db5b"], 0x58}, 0x0)

1.185113685s ago: executing program 4 (id=2086):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810)

1.117057684s ago: executing program 0 (id=2087):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x6020400)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cc, 0x0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000ac3de1251698a9e1a3eae68d6a1a26cc8eb0fbc67373743e2ece247d149db7c4414e5c69fce3da56fc3d47e85d8b9da0f8a57ddd30b837457d89b25b7921af38af0655a91d1ec77510df6e362b1ec24c91ddc3f7b46ad1ff711acdcc6782cc6694d7c4b265b6df13139485503046d016197070685b09cbbbd5d6fc4bad450b97f175a3411d4bdb89ac0134ea539aa63e1ad76b3098f587e1cb7e5061dbb82a021a1e89a4028f04418968a2741a98b913164155fda1d04007121837eb4ff2a1385bf410eeda47a323b403bd212cc4bd11802befdeea6bb28cfb247d0edc6d28f2f"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0, <r13=>0x0}, &(0x7f00000003c0)=0xc)
r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00')
r15 = getpid()
sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
sendmsg$netlink(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)={0x528, 0x34, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@generic="76acc549d343a05a51fdcb83e9266a8ddefd4cb5a4940f40bd5ce507068fb661cc5a7ed55faf5834898bd6d955e8615ada2f7c389a4467ed177e8e8dfd2611678c72d3d3ff627f326116247db66e7e0ffbe07cbf4e893b3b537b45f85d0d5e9a2e425d377fb941d4ebbedd4d2ef63a94f9da53c8b92069aafa8d61b57531c60ae2ca0c2d74a7af1dbf4f3ae5a1e54aab", @nested={0x22d, 0x6e, 0x0, 0x1, [@generic="ba99f837767fd6a1c92de50d6707e5f775b3fe8b2a50dabc9452196d75bc8914c9539426b3093df377a75d980c89ecc73ab57259c02b0e5b455da460f95903d4f929a9f484ce5a60378a2eff756a70b360dddfdb964ceb4eef45937ea6bc4301eea891cd82a06034461e56967ec20b36765dfd768ee552ce2d96adc4775652c42299461eb47659f2d0be6e337e65153a99f341c7a5cde2d18723e5b89851fa64879c34fbb2c464ce967648ad3d8eb9ea57790de3789fc4b6b5bfe2a9507b3d9368919c351dde3885ec832308c1140c555583b4eb32a6b2b6b5101bdef96605b2683e9351cb65e651a4d5b003cb5ce7b12bd35270425090e9", @generic="837695eb16a4321e317107762746f8e1b432de33595951a1ffbc261c915e279c", @typed={0x8, 0x81, 0x0, 0x0, @fd=r4}, @generic="f576ca472f4262bb102e8c63b6c70c8de9dc9d0c9ae81c5373dbe8cba2a2e494055d3f09cea1d25ad2580dacb475958339201eedc93bc61d8a308065907207151af0678ebc295b8804f965268345949b663a6ddd511022529afb0db2b24da2eb4530bdf1be5f39e0b851b2df946f8757cb4618f5dd4fcaf44682f9b3b0b64395f74494a85646c3e3aa7af6321eb38d596bbcdb9e5a25640e89f9603dfa4e47c07c8ffc29141b2aee2a809363c51df9145be43916b88c24871565684f67843ddf08519fee2bfbe11eebe93d9d1b49eb75af51e4b9fdb42463e965be53e58db968cc13b02e2c51833576d0341d07", @nested={0x4, 0x59}, @generic="697195861aa5cd6dc7a12c7752d64c76be1162a0111c6327"]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@remote}, @generic="fddbecd20ac191f99a9f2efe95b589a5429c88b76675b49a6d0a3738ab493ea3f75b70a39df6211a87d068ae161a98f91dd230619172af700dcf50d8942e09606b67b03e5b060cb6229b14ee2541bf18c0706ae651284a0523e734ab21af42c99eba3ad9009f6ff3b7313e89121748b77b0a01001075f42ae903b768326984acf392a436bed7944d136a59c2aeb0a06e0dfaac99b411c9db5892079dacdfe39b5eacabfb1d01a161e9c47b3c4c52b390c9789534977b2cd53442efbc345c58c16bd923cc0e0fce222022fa6948cd0c65", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x8000}, @generic="e351cf503b543f0f1ba6234e0098508bf844d4ce863c9fc453f4f0d0fe51dca537a1c425612eb20c39e398446b48484c354db0d70bb0a688077c4633f6465dfbb52d00bcc44739bbfdf6abeee52e1726b3df439809fea9f14b27f954f8f4e2927292c87893059edf895c075399eaea08e728eabb3f91127708d121a617ce41a3407f03672693ba89c64f3e25468479a7fe8d8db2e971253638589a17b46c10d94ec54c5f784980503224d820938a2eae8fa52ea5aeceb7e4f7e009", @generic="99767374f38b66b62eb92ea0ffca5b8e82bdd0f4d28309085d16e39db2f6935de8365301f14bfe9d122b275e5de8810b6f0768cc9ecb7c5de6157a40d38350ea8fe932b5e0e99a96d359bf008ed46f9534481ecdb78da320e2f978e8b9d47c2de9d4c16e1409eb8ee9c3f00a5ba10c2c5160f849b92d96f6b5ccb206515fe698c09a2381c46fe96d50b8a56ba483072140ab8be5e4de66e74d3bad2cc5d238faff1401", @typed={0xc, 0xb3, 0x0, 0x0, @u64}]}, 0x528}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r13}}}], 0x70}, 0x40080)
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x2}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x4)
r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.010791218s ago: executing program 1 (id=2088):
socket(0x10, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000400)=0x5, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x4000840, &(0x7f0000000f40)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r2, @ANYBLOB="4000ac0a0a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088)

1.006942003s ago: executing program 4 (id=2089):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x3) (async)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'veth0\x00', {0x2}, 0xffff}) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'veth0\x00', {0x2}, 0xffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
shutdown(r1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000) (async)
sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) (async)
sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0)

969.268176ms ago: executing program 3 (id=2090):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0xa, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

883.022285ms ago: executing program 1 (id=2091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e20, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x2, 0x7, 0xaf2e70f4b0da1350, 0x0, 0x0, {0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x69df}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2a4}]}, 0x60}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000050000e727000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$sock_ifreq(r4, 0x891d, &(0x7f0000000040)={'ipvlan0\x00', @ifru_map={0x6, 0xffffffffffffffff, 0x1, 0x0, 0x7, 0x5e}})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

820.380219ms ago: executing program 2 (id=2092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x20000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'tunl0\x00', <r4=>0x0, 0x1, 0x8, 0xecb, 0x80, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x4, [{@local, 0x1000}]}, @lsrr={0x83, 0x1f, 0x8f, [@multicast1, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @multicast2, @broadcast]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xe}, {0xc, 0x6}, {0x2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r6 = socket(0x10, 0x803, 0x0)
write(r6, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4)
sendto(r6, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10140, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x65042, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0xc4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000007d99080000", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a00}}, 0x1c}}, 0x0)

759.133144ms ago: executing program 4 (id=2093):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000089d8b0f656995cd7c600000000000000000000000000000000000000e0ff000000"], 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000200)="e84767d94f4474c0d1bee71c3580e7151dcfad2352902383f9608aa038295f17da81de568ec357968d8a6ce680b9d69a76dcc5b7989e2299a65469e58b", 0x0, 0x4}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x400}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008050)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008041)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x8854)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0)

710.789681ms ago: executing program 1 (id=2094):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket(0x29, 0x5, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000700)=0x84)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf, 0x2c, "1faaa4b83687fa37c8a06aea069c8d6c7a348a0944088b6457ab635092a2"}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x200, 0x6, 0x1, [0x3, 0x1, 0x0, 0xb75c, 0x0, 0x80, 0x5, 0x7f, 0x4, 0x1, 0x3, 0x457, 0x1000, 0x400, 0x5, 0x80], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x9, 0x2, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
socket$kcm(0x10, 0x2, 0x10) (async)
socket(0x29, 0x5, 0x1) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x5}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000700)=0x84) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf, 0x2c, "1faaa4b83687fa37c8a06aea069c8d6c7a348a0944088b6457ab635092a2"}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x200, 0x6, 0x1, [0x3, 0x1, 0x0, 0xb75c, 0x0, 0x80, 0x5, 0x7f, 0x4, 0x1, 0x3, 0x457, 0x1000, 0x400, 0x5, 0x80], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x9, 0x2, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) (async)

596.31019ms ago: executing program 3 (id=2095):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg1\x00', <r6=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x6, @broadcast}, 0x10) (async, rerun: 64)
r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x71bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc100}, 0x0)

595.368258ms ago: executing program 0 (id=2096):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x2000})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r10, &(0x7f0000000000), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840)

322.303658ms ago: executing program 1 (id=2097):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r1], 0x38}}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "5662aa445273cc6c09c9254fa0c5737dc381e47dbe70b524c91df4de67c8648f51ee64d640c7809b60079f4b0ac4008f8dbe6e0fc8003ab095da692bb9a43b9b9021b4dde38b110b6920e183becff2e40eb82f400e80a99e469cb69dcd1af3787edd78cc5f12b0e21d4e372a08eea44918628e6e36b39bf405668f80704d5d1bab1fe734170df80fd640c2a33e74cfbe80ba4b9fc6774c5edb20809645993e46182a5352b765308605d34493cefbe6f6"}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM]}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "ca83ede6733cfa3c5607f1199dc111ee4d2aaa44d2f0e2bebdbfdbc1f58a301076d2f7d6ff39c8bcbee7796d2844d177b125b589271e2e233a247f2cfd2674167c946b2ddf3fd331d8d347b872807e235c5bd1c8cab5e8205caddd6b0b1ac8f90ab9897d49c0835425d69d47f8c799ea20ede61112cb4bbd2c422adaac7eec104216a3e40dfe42664bc5f98a5f7308ca569a5ccec5a9e3d1c17e16b72d967c4fa6f44a4d71eb89fae1600d4cff1a09"}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x331b}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4}, 0x10)
setsockopt$inet6_group_source_req(r0, 0x29, 0x38, 0x0, 0x0)

232.873494ms ago: executing program 4 (id=2098):
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @local, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "935de4f5ac2ddf4a"}}}}, &(0x7f0000000100)={0x1, 0x3, [0xc38, 0x3ba, 0xc10, 0xe1c]})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

146.79389ms ago: executing program 3 (id=2099):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800214}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "786c60949fb36254a12ef399eb4872c4488e121b40cf1de66d934160e8199735"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid\x00')
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipmr_getroute={0x1c, 0x1a, 0x700, 0x70bd28, 0x25dfdbfb, {0x80, 0x10, 0x14, 0x8f, 0x0, 0x0, 0xfe, 0x1, 0x3000}, ["", "", "", ""]}, 0x1c}}, 0x84)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x1, 0x5, 0xb, 0xffffffffffffffff, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x10, 0x3, 0x812}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1]}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r6, r7, 0x25, 0xa, @void}, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}}, 0x40)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc06}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
syz_extract_tcp_res(&(0x7f0000000c40)={<r14=>0x41424344}, 0x61a, 0xffffffc2)
syz_extract_tcp_res(&(0x7f0000000c80)={0x41424344, <r15=>0x41424344}, 0x7, 0x4)
syz_emit_ethernet(0x12c, &(0x7f0000000cc0)={@local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0xc, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xffff}, {0x2, 0x0, 0x1}, {0x53ac}], @ipv6=@tcp={0xe, 0x6, "7ebfc3", 0xde, 0x6, 0xff, @empty, @private2, {[@fragment={0x3a, 0x0, 0x4f, 0x0, 0x0, 0x1a, 0x64}, @dstopts={0x3c, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0xa4a, [0x2, 0x8000, 0x6, 0x1, 0x1]}}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x2}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x8, [0x7, 0x3, 0xffffffffffffb339, 0x8000000000000000, 0xfffffffffffffbff, 0xfff]}}]}], {{0x4e24, 0x4e24, r14, r15, 0x1, 0x0, 0x7, 0x2, 0x800, 0x0, 0xb56, {[@mss={0x2, 0x4, 0x6}, @window={0x3, 0x3}]}}, {"f5e17e5162be0bf9302c4f859e17e809b9f914fb7a767e84edbf10fb038e2814a58f"}}}}}}}}, &(0x7f0000000e00)={0x0, 0x4, [0x236, 0x374, 0xa35, 0x3d1]})
preadv(r6, &(0x7f00000010c0)=[{&(0x7f0000000e40)=""/75, 0x4b}, {&(0x7f0000000ec0)=""/3, 0x3}, {&(0x7f0000000f00)=""/230, 0xe6}, {&(0x7f0000001000)=""/51, 0x33}, {&(0x7f0000001040)=""/98, 0x62}], 0x5, 0x9, 0xc)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r16, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
pselect6(0x40, &(0x7f0000001280)={0xffff, 0xffff, 0x8, 0x0, 0x9e6, 0xd0, 0x263, 0x5}, &(0x7f00000012c0)={0x7fffffffffffffff, 0x10000, 0x7b9d, 0x100, 0x7ff, 0xfff, 0x7, 0x100000000}, &(0x7f0000001300)={0x4, 0x1ff, 0x1000, 0x0, 0x3, 0x49e, 0x5, 0x4}, &(0x7f0000001340)={0x0, 0x3938700}, &(0x7f00000013c0)={&(0x7f0000001380)={[0x5]}, 0x8})

26.811481ms ago: executing program 4 (id=2100):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x40)
r2 = epoll_create1(0x80000)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_create1(0x0) (async)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x80000008}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x80000008})
sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0)

24.878023ms ago: executing program 0 (id=2101):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000400080001000100000009683519a0dbc96dc65ca7f25e7f37acce9c1388afd3d5fa3e610e54cc5ca52efa3c12b3a70c15433537fb553b50"], 0x24}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40)

0s ago: executing program 1 (id=2102):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r2 = socket(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0xb, 0x0, 0x7, 0x2}, 0x10}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000011}, 0x10)

kernel console output (not intermixed with test programs):

6719002/1846719011
[   76.153246][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719010
[   76.161948][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719009
[   76.172600][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719008
[   76.190939][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719007
[   76.192508][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.212730][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719006
[   76.229752][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719005
[   76.233949][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.246884][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719004
[   76.255783][ T5844] tipc: Failed to remove unknown binding: 66,0,0/0:1846719002/1846719003
[   76.275294][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.307910][ T5850] xfrm1: entered allmulticast mode
[   76.349969][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.389258][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.412239][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.642461][ T3264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.672460][ T3264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.846141][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.871701][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.917261][ T5752] IPVS: starting estimator thread 0...
[   76.929855][ T5877] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19'.
[   76.955193][ T5873] tc action pedit 'at' offset 3 out of bounds
[   76.956889][ T5883] xt_limit: Overflow, try lower: 604147548/4200216962
[   76.974777][ T5877] vlan2: entered allmulticast mode
[   76.981999][ T5877] gretap0: entered allmulticast mode
[   77.048702][ T5880] IPVS: using max 33 ests per chain, 79200 per kthread
[   77.291063][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   77.338126][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   77.469940][ T5901] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   77.491321][ T5907] netlink: 'syz.3.25': attribute type 1 has an invalid length.
[   77.672850][ T5901] gretap0: entered promiscuous mode
[   77.688018][ T5901] vlan2: entered promiscuous mode
[   78.139380][ T5920] netlink: 'syz.2.24': attribute type 1 has an invalid length.
[   78.161216][ T5920] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24'.
[   78.441213][ T5946] Bluetooth: MGMT ver 1.23
[   78.563269][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   78.824705][ T5959] netlink: 'syz.1.38': attribute type 11 has an invalid length.
[   78.878669][ T5953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36'.
[   78.896796][ T5953] bridge: RTM_NEWNEIGH with invalid ether address
[   78.907869][ T5961] sctp: [Deprecated]: syz.3.39 (pid 5961) Use of int in max_burst socket option.
[   78.907869][ T5961] Use struct sctp_assoc_value instead
[   79.014475][ T5967] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   79.283430][ T5975] bridge_slave_1: left allmulticast mode
[   79.318563][ T5975] bridge_slave_1: left promiscuous mode
[   79.359236][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.063544][ T6012] batman_adv: batadv0: Adding interface: dummy0
[   80.080179][ T6012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.136903][ T6012] batman_adv: batadv0: Interface activated: dummy0
[   80.187947][ T6012] batadv0: mtu less than device minimum
[   80.208393][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.221176][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.232946][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.244705][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.256534][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.267699][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.279024][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.290089][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.301164][ T6012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.379923][ T6029] Cannot find add_set index 0 as target
[   80.594576][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'.
[   80.624718][ T6006] netlink: 244 bytes leftover after parsing attributes in process `syz.2.51'.
[   80.861285][ T6046] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.61'.
[   81.552978][ T1221] cfg80211: failed to load regulatory.db
[   81.837784][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'.
[   81.881024][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'.
[   81.980270][ T6086] netlink: 'syz.4.72': attribute type 9 has an invalid length.
[   82.262432][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'.
[   82.319706][ T6105] ip6gretap0: entered promiscuous mode
[   82.923265][ T6139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.86'.
[   82.948466][ T6139] netlink: 224 bytes leftover after parsing attributes in process `syz.0.86'.
[   83.099167][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.89'.
[   83.136386][ T6152] netlink: 76 bytes leftover after parsing attributes in process `syz.1.89'.
[   83.177096][ T6153] sctp: [Deprecated]: syz.1.89 (pid 6153) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.177096][ T6153] Use struct sctp_sack_info instead
[   83.205284][ T6163] sch_fq: defrate 0 ignored.
[   83.990311][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.903159][ T6239] netlink: 'syz.3.112': attribute type 1 has an invalid length.
[   85.809681][ T6289] netlink: 'syz.0.126': attribute type 3 has an invalid length.
[   85.833189][ T6291] net_ratelimit: 13 callbacks suppressed
[   85.833211][ T6291] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[   85.850975][ T6289] __nla_validate_parse: 3 callbacks suppressed
[   85.850990][ T6289] netlink: 666 bytes leftover after parsing attributes in process `syz.0.126'.
[   85.896738][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[   85.952744][ T6295] macsec2: entered promiscuous mode
[   85.966039][ T6295] bridge0: entered promiscuous mode
[   85.977711][ T6295] macsec2: entered allmulticast mode
[   85.998198][ T6295] bridge0: entered allmulticast mode
[   86.028273][ T6295] bridge0: port 2(macsec2) entered blocking state
[   86.048153][ T6295] bridge0: port 2(macsec2) entered disabled state
[   86.073263][ T6295] bridge0: left allmulticast mode
[   86.185635][  T807] bridge0: left promiscuous mode
[   86.191920][ T6303] ieee802154 phy0 wpan0: encryption failed: -22
[   86.223821][ T6318] netlink: 52 bytes leftover after parsing attributes in process `syz.4.132'.
[   86.370915][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'.
[   86.821449][ T6353] netlink: 'syz.2.140': attribute type 1 has an invalid length.
[   86.853890][ T6353] netlink: 'syz.2.140': attribute type 2 has an invalid length.
[   87.740068][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'.
[   87.757626][ T6393] warning: `syz.3.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.388351][ T6432] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   88.403646][ T6433] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   88.452240][ T6432] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   88.527323][ T6433] macvlan2: entered promiscuous mode
[   88.533472][ T6433] macvlan2: entered allmulticast mode
[   88.542195][ T6433] bond1: entered promiscuous mode
[   88.547785][ T6433] bridge1: entered promiscuous mode
[   88.555345][ T6433] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.563784][ T6433] bond1: left promiscuous mode
[   88.570652][ T6433] bridge1: left promiscuous mode
[   88.585569][ T6432] macvlan2: entered promiscuous mode
[   88.591064][ T6432] macvlan2: entered allmulticast mode
[   88.599114][ T6432] bond1: entered promiscuous mode
[   88.604304][ T6432] bridge1: entered promiscuous mode
[   88.612605][ T6432] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.620496][ T6432] bond1: left promiscuous mode
[   88.625361][ T6432] bridge1: left promiscuous mode
[   88.731456][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'.
[   89.550859][ T6453] netlink: 62 bytes leftover after parsing attributes in process `syz.0.166'.
[   89.603992][ T6455] pimreg: entered allmulticast mode
[   90.819218][ T6400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.673827][ T6499] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   91.710219][ T6499] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   91.726319][ T6497] syzkaller0: entered promiscuous mode
[   91.728678][ T6508] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   91.739765][ T6499] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   91.750093][ T6497] syzkaller0: entered allmulticast mode
[   91.987328][ T6521] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   92.012850][ T6521] bond1 (unregistering): Released all slaves
[   92.699279][ T6551] netlink: 'syz.3.192': attribute type 1 has an invalid length.
[   92.880986][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'.
[   93.019934][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   93.056674][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   93.067797][ T6575] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.113745][ T6575] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   93.127674][ T5637] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   93.135189][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout
[   93.167715][ T6581] bond0: option ad_select: unable to set because the bond device is up
[   93.305704][ T6585] : entered promiscuous mode
[   93.449604][ T6594] Bluetooth: MGMT ver 1.23
[   93.716622][ T6600] netlink: 164 bytes leftover after parsing attributes in process `syz.3.207'.
[   94.057225][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'.
[   94.310452][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'.
[   94.380522][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'.
[   94.417426][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'.
[   94.466949][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'.
[   94.477071][ T6642] --map-set only usable from mangle table
[   94.548074][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'.
[   94.561993][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.586556][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.608195][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.662190][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.955533][ T6672] syzkaller0: entered promiscuous mode
[   95.009094][ T6672] syzkaller0: entered allmulticast mode
[   95.024848][ T6681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.032185][ T6681] IPv6: NLM_F_CREATE should be set when creating new route
[   95.039484][ T6681] IPv6: NLM_F_CREATE should be set when creating new route
[   95.067665][ T6676] netem: change failed
[   95.109762][ T6687] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   95.360777][ T6693] tipc: Started in network mode
[   95.376949][ T6693] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711
[   95.443019][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.489602][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.513341][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.588348][ T6717] bridge1: entered promiscuous mode
[   95.613489][ T6711] openvswitch: netlink: Message has 4 unknown bytes.
[   95.643064][ T6717] bridge1: entered allmulticast mode
[   95.669188][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.711216][ T6726] macvtap1: entered allmulticast mode
[   95.726245][ T6726] veth0_macvtap: entered allmulticast mode
[   96.032255][ T6743] Driver unsupported XDP return value 0 on prog  (id 35) dev N/A, expect packet loss!
[   96.192328][ T6757] netlink: 'syz.0.246': attribute type 24 has an invalid length.
[   96.960156][ T6810] Cannot find add_set index 0 as target
[   97.094519][ T6821] netlink: 'syz.1.265': attribute type 6 has an invalid length.
[   97.330444][ T6829] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   97.390577][ T6833] xt_hashlimit: size too large, truncated to 1048576
[   97.421450][ T6833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.695766][ T6854] netlink: 'syz.0.276': attribute type 1 has an invalid length.
[   97.842684][ T6854] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.898718][ T6858] ip_vti0: entered promiscuous mode
[   98.128010][ T6857] nbd0: detected capacity change from 0 to 63
[   98.159895][ T5634] block nbd0: Receive control failed (result -32)
[   98.160209][ T5637] block nbd0: Receive control failed (result -32)
[   98.178605][ T5639] block nbd0: Send control failed (result -32)
[   98.193905][ T5639] block nbd0: Request send failed, requeueing
[   98.212653][ T5006] block nbd0: Dead connection, failed to find a fallback
[   98.220989][ T5006] block nbd0: shutting down sockets
[   98.227548][ T5006] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.241896][ T5006] Buffer I/O error on dev nbd0, logical block 0, async page read
[   98.251741][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.261317][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read
[   98.271754][ T5639] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.280961][ T5639] Buffer I/O error on dev nbd0, logical block 2, async page read
[   98.289344][ T5639] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.301030][ T5639] Buffer I/O error on dev nbd0, logical block 3, async page read
[   98.309648][ T5639] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.318854][ T5639] Buffer I/O error on dev nbd0, logical block 0, async page read
[   98.332579][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.345422][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read
[   98.353883][ T5639] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.363074][ T5639] Buffer I/O error on dev nbd0, logical block 2, async page read
[   98.371208][ T5639] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.380421][ T5639] Buffer I/O error on dev nbd0, logical block 3, async page read
[   98.391015][ T5639] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.412179][ T5639] Buffer I/O error on dev nbd0, logical block 0, async page read
[   98.434216][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.461037][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read
[   98.512179][ T5639] ldm_validate_partition_table(): Disk read failed.
[   98.548515][ T6901] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   98.564455][ T5639] Dev nbd0: unable to read RDB block 0
[   98.584382][ T5639]  nbd0: unable to read partition table
[   98.637165][ T5639] ldm_validate_partition_table(): Disk read failed.
[   98.671561][ T5639] Dev nbd0: unable to read RDB block 0
[   98.699931][ T5639]  nbd0: unable to read partition table
[   99.050655][ T6926] netlink: 'syz.1.300': attribute type 1 has an invalid length.
[   99.143291][ T6926] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.177564][ T6929] bond2: (slave gretap1): making interface the new active one
[   99.188740][ T6929] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   99.321585][ T6936] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   99.533384][ T6943] __nla_validate_parse: 19 callbacks suppressed
[   99.533404][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'.
[   99.656263][ T6943] batadv_slave_1: entered promiscuous mode
[   99.675550][ T6942] batadv_slave_1: left promiscuous mode
[   99.758933][ T6955] netlink: 104 bytes leftover after parsing attributes in process `syz.4.311'.
[   99.833425][ T6960] netlink: 168 bytes leftover after parsing attributes in process `syz.0.315'.
[  100.242852][ T6987] sock: sock_set_timeout: `syz.1.321' (pid 6987) tries to set negative timeout
[  100.318539][ T6981] syzkaller1: entered promiscuous mode
[  100.349368][ T6981] syzkaller1: entered allmulticast mode
[  100.367912][ T6995] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  100.387773][ T6993] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'.
[  100.411770][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'.
[  100.959727][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  101.606583][ T7076] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  101.791499][ T7079] lo speed is unknown, defaulting to 1000
[  101.835133][ T7079] lo speed is unknown, defaulting to 1000
[  101.898833][ T7079] lo speed is unknown, defaulting to 1000
[  101.932740][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'.
[  101.942195][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'.
[  102.061710][ T7086] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.325757][ T7103] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[  102.396839][ T7107] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[  102.558395][ T7103] bond1: entered promiscuous mode
[  102.575629][ T7103] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.684529][ T7079] infiniband syz0: set active
[  102.691613][ T1585] lo speed is unknown, defaulting to 1000
[  102.698776][ T7079] infiniband syz0: added lo
[  102.722580][ T7079] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  102.738981][ T7079] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  102.757370][ T7079] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  102.807894][ T7079] RDS/IB: syz0: added
[  102.818895][ T7079] smc: adding ib device syz0 with port count 1
[  102.825616][ T7079] smc:    ib device syz0 port 1 has no pnetid
[  102.833979][ T1585] lo speed is unknown, defaulting to 1000
[  102.853661][ T7079] lo speed is unknown, defaulting to 1000
[  103.112212][ T7079] lo speed is unknown, defaulting to 1000
[  103.347952][ T7079] lo speed is unknown, defaulting to 1000
[  103.481594][ T7116] vlan2: entered allmulticast mode
[  103.486947][ T7116] bond0: entered allmulticast mode
[  103.492310][ T7116] bond_slave_0: entered allmulticast mode
[  103.500790][ T7116] bond_slave_1: entered allmulticast mode
[  103.760465][ T7079] lo speed is unknown, defaulting to 1000
[  104.108908][ T7079] lo speed is unknown, defaulting to 1000
[  104.780759][ T7080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.801619][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'.
[  104.823322][ T7120] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  104.930597][ T7139] syzkaller1: entered promiscuous mode
[  104.949799][ T7139] syzkaller1: entered allmulticast mode
[  105.120717][ T7147] tc action pedit 'at' offset 3 out of bounds
[  105.190364][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.319000][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'.
[  105.493699][ T7162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.501027][ T7162] IPv6: NLM_F_CREATE should be set when creating new route
[  105.508329][ T7162] IPv6: NLM_F_CREATE should be set when creating new route
[  105.616983][ T7168] erspan0: entered promiscuous mode
[  105.651912][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[  105.711927][ T7173] team0: entered promiscuous mode
[  105.729474][ T7173] team_slave_0: entered promiscuous mode
[  105.747146][ T7173] team_slave_1: entered promiscuous mode
[  105.818598][ T7180] netlink: 'syz.2.368': attribute type 3 has an invalid length.
[  105.854603][ T7178] netlink: 'syz.2.368': attribute type 3 has an invalid length.
[  105.933779][ T7191] netlink: 'syz.0.371': attribute type 5 has an invalid length.
[  105.988279][ T7193] netlink: 'syz.3.372': attribute type 1 has an invalid length.
[  106.065887][ T7202] netlink: 'syz.4.375': attribute type 4 has an invalid length.
[  106.079119][ T7202] netlink: 244 bytes leftover after parsing attributes in process `syz.4.375'.
[  106.103867][ T7206] netlink: 'syz.0.376': attribute type 11 has an invalid length.
[  106.162100][ T7197] syzkaller0: entered promiscuous mode
[  106.179993][ T7206] netlink: 'syz.0.376': attribute type 11 has an invalid length.
[  106.200145][ T7197] syzkaller0: entered allmulticast mode
[  106.272428][ T7213] netlink: 'syz.3.377': attribute type 8 has an invalid length.
[  106.285436][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'.
[  106.345687][ T7219] netlink: 'syz.2.378': attribute type 12 has an invalid length.
[  106.358536][ T7219] netlink: 'syz.2.378': attribute type 29 has an invalid length.
[  106.374478][ T7219] netlink: 148 bytes leftover after parsing attributes in process `syz.2.378'.
[  106.417493][ T7213] bond0: entered promiscuous mode
[  106.436256][ T7213] bond_slave_0: entered promiscuous mode
[  106.443802][ T7213] bond_slave_1: entered promiscuous mode
[  106.462221][ T7213] gretap0: entered promiscuous mode
[  106.491032][ T7213] veth1_virt_wifi: entered promiscuous mode
[  106.499620][ T7213] veth1_virt_wifi: left promiscuous mode
[  106.506301][ T7213] bond0: left promiscuous mode
[  106.511367][ T7213] bond_slave_0: left promiscuous mode
[  106.518493][ T7213] bond_slave_1: left promiscuous mode
[  106.531571][ T7213] gretap0: left promiscuous mode
[  106.920291][ T7256] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[  106.999971][ T7256] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.062492][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[  107.091697][ T7258] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  107.122905][ T7262] netlink: 80 bytes leftover after parsing attributes in process `syz.0.388'.
[  107.188420][ T7262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'.
[  107.253853][ T7262] netlink: 64 bytes leftover after parsing attributes in process `syz.0.388'.
[  107.300262][ T7272] netlink: 'syz.3.395': attribute type 1 has an invalid length.
[  107.611879][ T7282] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.638511][ T7282] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  107.728292][ T7284] bond3: (slave bridge1): Enslaving as an active interface with a down link
[  107.752361][ T7286] bond1: entered promiscuous mode
[  107.757803][ T7286] bond1: entered allmulticast mode
[  107.764360][ T7286] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.800756][ T7272] macvlan2: entered promiscuous mode
[  107.827585][ T7272] macvlan2: entered allmulticast mode
[  107.851933][ T7272] bond3: entered promiscuous mode
[  107.864273][ T7272] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  107.879308][ T7272] bond3: left promiscuous mode
[  108.150886][ T7315] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  108.267000][ T7326] bridge2: entered promiscuous mode
[  108.284817][ T7326] bridge2: entered allmulticast mode
[  108.457506][ T7333] xt_hashlimit: size too large, truncated to 1048576
[  108.541871][ T7338] syz_tun: entered promiscuous mode
[  108.568657][ T7338] macvtap1: entered promiscuous mode
[  108.587903][ T7338] macvtap1: entered allmulticast mode
[  108.598180][ T7338] syz_tun: entered allmulticast mode
[  109.306484][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.328276][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.351941][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.385137][ T7382] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  109.440869][ T7382] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  109.488557][ T7382] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  109.559205][ T7382] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.624190][ T7382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  109.709693][ T7401] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.729205][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.740955][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.753467][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.768243][ T7382] wg1 speed is unknown, defaulting to 1000
[  109.886977][ T7382] wg1 speed is unknown, defaulting to 1000
[  110.519447][ T7440] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  110.741789][ T7445] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  110.802426][ T7445] bond3 (unregistering): Released all slaves
[  111.155079][ T7485] __nla_validate_parse: 1 callbacks suppressed
[  111.155097][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.442'.
[  111.184736][ T7459] bond2: entered promiscuous mode
[  111.189952][ T7459] bond2: entered allmulticast mode
[  111.273159][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  111.304175][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776087
[  111.329017][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776086
[  111.334851][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  111.344340][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776085
[  111.355300][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776084
[  111.365473][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776083
[  111.374068][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776082
[  111.383414][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776081
[  111.392900][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776080
[  111.401506][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776079
[  111.410077][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776078
[  111.421956][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776077
[  111.432539][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776076
[  111.441441][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776075
[  111.469027][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776074
[  111.478112][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776073
[  111.489108][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776072
[  111.498274][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776071
[  111.508599][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776070
[  111.520093][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776069
[  111.537677][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776068
[  111.561348][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776067
[  111.586096][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776066
[  111.608803][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776065
[  111.617520][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776064
[  111.674284][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776063
[  111.698782][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776062
[  111.717125][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776061
[  111.738893][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776060
[  111.779401][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776059
[  111.799191][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776058
[  111.814469][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776057
[  111.843552][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776056
[  111.880228][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776055
[  111.906444][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776054
[  111.925219][ T7518] gre1: entered promiscuous mode
[  111.929794][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776053
[  111.942351][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776052
[  111.955366][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776051
[  111.978961][ T7518] veth0_to_bridge: entered promiscuous mode
[  111.997320][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776050
[  112.019616][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776049
[  112.048741][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776048
[  112.073340][ T7515] veth0_to_bridge: left promiscuous mode
[  112.103598][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776047
[  112.132207][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776046
[  112.147862][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776045
[  112.159279][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776044
[  112.193013][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776043
[  112.218017][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776042
[  112.256095][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776041
[  112.291607][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776040
[  112.328468][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776039
[  112.362620][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776038
[  112.392923][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776037
[  112.419753][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776036
[  112.453030][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776035
[  112.481271][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776034
[  112.495415][ T7544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  112.520455][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776033
[  112.549824][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776032
[  112.558422][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776031
[  112.568302][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776030
[  112.578624][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776029
[  112.587493][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776028
[  112.596109][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776027
[  112.604599][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776026
[  112.613435][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776025
[  112.621973][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776024
[  112.630845][ T7487] tipc: Failed to remove unknown binding: 66,0,0/0:1265776022/1265776023
[  112.861622][ T7564] syzkaller0: entered promiscuous mode
[  112.896905][ T7564] syzkaller0: entered allmulticast mode
[  112.931445][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'.
[  113.077443][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.466'.
[  113.511558][ T7599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.524537][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.638878][ T7604] validate_nla: 1 callbacks suppressed
[  113.638898][ T7604] netlink: 'syz.1.477': attribute type 1 has an invalid length.
[  113.684473][ T7604] bond5: entered promiscuous mode
[  113.691739][ T7604] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.760883][ T7604] bond5: (slave bridge2): making interface the new active one
[  113.770530][ T7604] bridge2: entered promiscuous mode
[  113.780014][ T7604] bridge2: left promiscuous mode
[  114.459399][ T7636] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  114.471470][ T7636] bond3 (unregistering): Released all slaves
[  114.784502][ T7658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'.
[  114.795711][ T7654] IPv6: sit2: Disabled Multicast RS
[  114.814984][ T7658] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.495'.
[  115.003180][ T7665] netlink: 2952 bytes leftover after parsing attributes in process `syz.0.497'.
[  115.022618][ T7665] netlink: 496 bytes leftover after parsing attributes in process `syz.0.497'.
[  115.027271][ T7669] netlink: 'syz.4.499': attribute type 9 has an invalid length.
[  115.043135][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.082211][ T7667] netlink: 'syz.1.498': attribute type 2 has an invalid length.
[  115.097858][ T7667] netlink: 244 bytes leftover after parsing attributes in process `syz.1.498'.
[  115.145226][ T7675] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001
[  115.239983][ T7680] bridge0: port 3(batadv1) entered blocking state
[  115.247520][ T7680] bridge0: port 3(batadv1) entered disabled state
[  115.254239][ T7680] batadv1: entered allmulticast mode
[  115.262192][ T7680] batadv1: entered promiscuous mode
[  115.423615][ T5725] IPVS: starting estimator thread 0...
[  115.435578][ T7687] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  115.536097][ T7688] IPVS: using max 40 ests per chain, 96000 per kthread
[  115.739304][ T7024] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  115.749764][ T7024] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  116.071617][ T7720] netlink: 'syz.3.513': attribute type 10 has an invalid length.
[  116.321186][ T7720] team0 (unregistering): Port device team_slave_0 removed
[  116.350606][ T7720] team0 (unregistering): Port device team_slave_1 removed
[  116.404063][ T7728] netlink: 'syz.1.516': attribute type 1 has an invalid length.
[  116.416175][ T7728] __nla_validate_parse: 2 callbacks suppressed
[  116.416192][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'.
[  116.663382][ T7737] syz.4.519: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  116.718628][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.4.519 Not tainted syzkaller #0 PREEMPT(full) 
[  116.718655][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  116.718674][ T7737] Call Trace:
[  116.718703][ T7737]  <TASK>
[  116.718712][ T7737]  dump_stack_lvl+0xe8/0x150
[  116.718750][ T7737]  warn_alloc+0x249/0x340
[  116.718781][ T7737]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  116.718822][ T7737]  ? __pfx_warn_alloc+0x10/0x10
[  116.718860][ T7737]  ? kasan_save_track+0x4f/0x80
[  116.718887][ T7737]  ? kasan_save_track+0x3e/0x80
[  116.718912][ T7737]  ? __kasan_kmalloc+0x93/0xb0
[  116.718938][ T7737]  ? __kmalloc_cache_noprof+0x31c/0x660
[  116.718966][ T7737]  ? xskq_create+0x56/0x170
[  116.718987][ T7737]  ? xsk_setsockopt+0x54c/0x990
[  116.719004][ T7737]  ? do_sock_setsockopt+0x17c/0x1b0
[  116.719028][ T7737]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  116.719052][ T7737]  ? do_syscall_64+0x15f/0xf80
[  116.719076][ T7737]  __vmalloc_node_range_noprof+0x132/0x1750
[  116.719138][ T7737]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  116.719174][ T7737]  ? __kasan_kmalloc+0x93/0xb0
[  116.719209][ T7737]  vmalloc_user_noprof+0xad/0xe0
[  116.719237][ T7737]  ? xskq_create+0xbf/0x170
[  116.719260][ T7737]  xskq_create+0xbf/0x170
[  116.719286][ T7737]  xsk_init_queue+0x8a/0xe0
[  116.719310][ T7737]  xsk_setsockopt+0x54c/0x990
[  116.719334][ T7737]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.719355][ T7737]  ? __pfx_aa_sk_perm+0x10/0x10
[  116.719383][ T7737]  ? aa_sock_opt_perm+0xff/0x1a0
[  116.719413][ T7737]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  116.719441][ T7737]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.719464][ T7737]  do_sock_setsockopt+0x17c/0x1b0
[  116.719494][ T7737]  __x64_sys_setsockopt+0x13d/0x1b0
[  116.719523][ T7737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.719546][ T7737]  do_syscall_64+0x15f/0xf80
[  116.719570][ T7737]  ? trace_irq_disable+0x3b/0x140
[  116.719601][ T7737]  ? clear_bhb_loop+0x40/0x90
[  116.719626][ T7737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.719646][ T7737] RIP: 0033:0x7fdbe779cdd9
[  116.719672][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.719689][ T7737] RSP: 002b:00007fdbe59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.719710][ T7737] RAX: ffffffffffffffda RBX: 00007fdbe7a15fa0 RCX: 00007fdbe779cdd9
[  116.719726][ T7737] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  116.719738][ T7737] RBP: 00007fdbe7832d69 R08: 0000000000000004 R09: 0000000000000000
[  116.719751][ T7737] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.719764][ T7737] R13: 00007fdbe7a16038 R14: 00007fdbe7a15fa0 R15: 00007ffdf78b28d8
[  116.719797][ T7737]  </TASK>
[  117.010079][ T7737] Mem-Info:
[  117.014306][ T7737] active_anon:5877 inactive_anon:0 isolated_anon:0
[  117.014306][ T7737]  active_file:2824 inactive_file:39950 isolated_file:0
[  117.014306][ T7737]  unevictable:768 dirty:86 writeback:0
[  117.014306][ T7737]  slab_reclaimable:10356 slab_unreclaimable:99081
[  117.014306][ T7737]  mapped:29226 shmem:1283 pagetables:1332
[  117.014306][ T7737]  sec_pagetables:0 bounce:0
[  117.014306][ T7737]  kernel_misc_reclaimable:0
[  117.014306][ T7737]  free:1323168 free_pcp:11592 free_cma:0
[  117.059880][ T7737] Node 0 active_anon:23508kB inactive_anon:0kB active_file:11296kB inactive_file:159600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116904kB dirty:344kB writeback:0kB shmem:3596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13320kB pagetables:5192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  117.060981][ T7749] sctp: [Deprecated]: syz.4.519 (pid 7749) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.060981][ T7749] Use struct sctp_sack_info instead
[  117.096343][ T7737] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  117.126910][ T7751] Cannot find add_set index 0 as target
[  117.144878][ T7737] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.183329][ T7737] lowmem_reserve[]: 0 2492 2493 2493 2493
[  117.189201][ T7737] Node 0 DMA32 free:1322032kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23508kB inactive_anon:0kB active_file:11296kB inactive_file:159600kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:45816kB local_pcp:33660kB free_cma:0kB
[  117.222672][ T7737] lowmem_reserve[]: 0 0 0 0 0
[  117.230760][ T7737] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  117.260087][ T7737] lowmem_reserve[]: 0 0 0 0 0
[  117.264911][ T7737] Node 1 Normal free:3955280kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.308168][ T7737] lowmem_reserve[]: 0 0 0 0 0
[  117.324475][ T7737] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.337719][ T7737] Node 0 DMA32: 2326*4kB (UME) 1245*8kB (UME) 431*16kB (UME) 1*32kB (E) 2*64kB (ME) 66*128kB (UME) 76*256kB (UME) 46*512kB (UM) 25*1024kB (UM) 21*2048kB (UME) 287*4096kB (UM) = 1321936kB
[  117.382673][ T7737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  117.477454][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.490384][ T7737] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 9*32kB (UM) 10*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 964*4096kB (M) = 3955280kB
[  117.518401][ T7737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.529486][ T7737] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.539899][ T7737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.574872][ T7737] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.584682][ T7737] 44884 total pagecache pages
[  117.590690][ T7737] 0 pages in swap cache
[  117.594957][ T7737] Free swap  = 124996kB
[  117.603457][ T7737] Total swap = 124996kB
[  117.609390][ T7737] 2097051 pages RAM
[  117.613261][ T7737] 0 pages HighMem/MovableOnly
[  117.625098][ T7737] 427104 pages reserved
[  117.636041][ T7737] 0 pages cma reserved
[  117.791006][ T7773] netlink: 80 bytes leftover after parsing attributes in process `syz.4.528'.
[  117.847368][ T7777] netlink: 'syz.0.530': attribute type 10 has an invalid length.
[  117.855396][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.530'.
[  117.870208][ T7777] dummy0: entered promiscuous mode
[  117.889151][ T7777] bridge0: port 3(dummy0) entered blocking state
[  117.905001][ T7777] bridge0: port 3(dummy0) entered disabled state
[  117.919037][ T7777] dummy0: entered allmulticast mode
[  117.935584][ T7777] bridge0: port 3(dummy0) entered blocking state
[  117.942349][ T7777] bridge0: port 3(dummy0) entered forwarding state
[  118.460173][ T7808] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.539'.
[  118.559390][ T7813] erspan0: entered promiscuous mode
[  118.569779][ T7813] vlan3: entered promiscuous mode
[  118.741835][ T7820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.544'.
[  118.757738][ T7820] tipc: Started in network mode
[  118.770319][ T7820] tipc: Node identity ac14140f, cluster identity 4711
[  118.802243][ T7820] tipc: Enabled bearer <udp:syz2>, priority 10
[  118.835654][ T7824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.839005][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[  118.874067][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[  118.887686][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[  118.906139][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[  118.982642][ T7823] tipc: Failed to remove unknown binding: 66,0,0/0:947278627/947278629
[  119.004184][ T7823] tipc: Failed to remove unknown binding: 66,0,0/0:947278627/947278628
[  119.015554][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'.
[  119.042407][ T7823] tipc: Failed to remove unknown binding: 66,0,0/0:947278627/947278629
[  119.053751][ T7823] tipc: Failed to remove unknown binding: 66,0,0/0:947278627/947278628
[  119.313116][ T7858] xt_l2tp: wrong L2TP version: 0
[  119.862225][ T7897] veth0: entered promiscuous mode
[  119.981388][ T5752] tipc: Node number set to 2886997007
[  120.222516][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.272428][ T7918] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.369270][ T7921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.543855][ T7992] netlink: 'syz.4.588': attribute type 1 has an invalid length.
[  121.555681][ T7992] netlink: 'syz.4.588': attribute type 4 has an invalid length.
[  121.564001][ T7992] __nla_validate_parse: 7 callbacks suppressed
[  121.564015][ T7992] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.588'.
[  121.580069][ T7988] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  121.593532][ T7993] Bluetooth: MGMT ver 1.23
[  121.607326][ T7988] netlink: 96 bytes leftover after parsing attributes in process `syz.0.586'.
[  121.617513][ T7988] netlink: 1 bytes leftover after parsing attributes in process `syz.0.586'.
[  121.626605][ T7988] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  121.643548][ T7988] netlink: 'syz.0.586': attribute type 8 has an invalid length.
[  121.651933][ T7988] netlink: 606 bytes leftover after parsing attributes in process `syz.0.586'.
[  121.661673][ T7994] trusted_key: syz.0.586 sent an empty control message without MSG_MORE.
[  121.803052][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  121.813231][ T8005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.592'.
[  121.822800][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  122.004692][ T8013] netlink: 204 bytes leftover after parsing attributes in process `syz.4.596'.
[  122.062215][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  122.080112][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  122.482328][ T8037] bridge: RTM_NEWNEIGH with invalid ether address
[  122.484504][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.497749][ T8037] bridge: RTM_NEWNEIGH with invalid ether address
[  122.538043][ T1585] IPVS: starting estimator thread 0...
[  122.636108][ T8041] IPVS: using max 32 ests per chain, 76800 per kthread
[  123.143055][ T8079] tipc: MTU too low for tipc bearer
[  123.932687][ T8132] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  124.486019][ T5634] Bluetooth: hci4: command 0x0405 tx timeout
[  124.500952][ T8167] xt_HMARK: proto mask must be zero with L3 mode
[  124.744293][ T8177] netlink: 'syz.2.646': attribute type 63 has an invalid length.
[  125.145106][ T8201] xt_NFQUEUE: number of total queues is 0
[  125.174754][ T8157] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  125.205899][ T8157] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  125.266712][ T8157] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  125.298627][ T8157] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  125.377454][ T8157] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  125.408243][ T8215] netlink: 'syz.2.654': attribute type 21 has an invalid length.
[  125.408665][ T8157] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  125.455098][ T8157] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  125.468044][ T8157] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  125.520165][ T8219] x_tables: duplicate underflow at hook 3
[  125.544572][ T8157] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  125.570404][ T8157] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  126.394898][ T8257] IPVS: sed: FWM 3 0x00000003 - no destination available
[  126.997312][ T5725] IPVS: starting estimator thread 0...
[  127.003338][ T8299] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  127.136365][ T8300] IPVS: using max 33 ests per chain, 79200 per kthread
[  127.174113][ T8307] block nbd1: Unsupported socket: should be TCP or UNIX.
[  127.510307][ T8321] __nla_validate_parse: 18 callbacks suppressed
[  127.510324][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[  127.618446][ T8311] syzkaller0: entered promiscuous mode
[  127.631888][ T8311] syzkaller0: entered allmulticast mode
[  127.659328][ T8311] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  128.043749][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'.
[  128.134637][ T8369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.688'.
[  128.167811][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'.
[  128.215008][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'.
[  128.453598][ T8379] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  128.810398][ T8405] sch_fq: defrate 0 ignored.
[  128.864702][ T8411] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  129.119213][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'.
[  129.395641][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'.
[  129.865881][ T8470] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  130.055219][ T8487] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  130.074476][ T8488] netlink: 104 bytes leftover after parsing attributes in process `syz.1.711'.
[  130.206085][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.712'.
[  130.787334][ T8519] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[  130.913806][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'.
[  132.175772][ T8519] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  132.364215][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.498657][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.510504][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.610180][ T8530] bridge2: left promiscuous mode
[  132.618794][ T8530] syz_tun: left allmulticast mode
[  132.624057][ T8530] macvtap1: left promiscuous mode
[  132.645297][ T1221] lo speed is unknown, defaulting to 1000
[  132.659103][ T1221] syz0: Port: 1 Link DOWN
[  132.732023][ T8534] bond7 (unregistering): Released all slaves
[  132.732230][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.751679][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  132.808008][ T5724] wg1 speed is unknown, defaulting to 1000
[  132.828247][ T5724] syz2: Port: 1 Link DOWN
[  132.833968][ T7038] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.858449][ T7038] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.910759][ T7038] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.939911][ T7038] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.966506][ T8550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.990197][ T1221] lo speed is unknown, defaulting to 1000
[  133.051841][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[  133.071027][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'.
[  133.082187][ T8552] syzkaller0: entered promiscuous mode
[  133.088674][ T8552] syzkaller0: entered allmulticast mode
[  133.095121][ T8552] tipc: Resetting bearer <eth:syzkaller0>
[  133.096461][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  133.117947][ T8547] tipc: Resetting bearer <eth:syzkaller0>
[  133.199629][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[  134.541354][ T8547] tipc: Disabling bearer <eth:syzkaller0>
[  134.550806][ T8557] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  134.553087][ T7038] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.570551][ T7038] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.635142][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[  134.652514][ T8572] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  134.656060][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'.
[  134.673312][ T5724] tipc: Node number set to 3031167
[  134.684572][ T7038] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.708024][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  134.717026][ T7038] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.771354][ T7038] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.814493][ T7038] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.854021][ T7038] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.960525][ T7038] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.971264][ T8591] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  135.008840][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'.
[  135.044967][ T8588] syzkaller0: entered promiscuous mode
[  135.053732][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'.
[  135.074583][ T8588] syzkaller0: entered allmulticast mode
[  135.143789][ T8590] can: request_module (can-proto-4) failed.
[  135.431391][ T8617] syz.4.741: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  135.492282][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.4.741 Not tainted syzkaller #0 PREEMPT(full) 
[  135.492306][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  135.492317][ T8617] Call Trace:
[  135.492324][ T8617]  <TASK>
[  135.492332][ T8617]  dump_stack_lvl+0xe8/0x150
[  135.492367][ T8617]  warn_alloc+0x249/0x340
[  135.492395][ T8617]  ? stack_trace_save+0xa9/0x100
[  135.492429][ T8617]  ? __pfx_warn_alloc+0x10/0x10
[  135.492458][ T8617]  ? kasan_save_track+0x4f/0x80
[  135.492477][ T8617]  ? kasan_save_track+0x3e/0x80
[  135.492495][ T8617]  ? __kasan_kmalloc+0x93/0xb0
[  135.492515][ T8617]  ? __kmalloc_cache_noprof+0x31c/0x660
[  135.492537][ T8617]  ? xskq_create+0x56/0x170
[  135.492554][ T8617]  ? xsk_setsockopt+0x54c/0x990
[  135.492567][ T8617]  ? do_sock_setsockopt+0x17c/0x1b0
[  135.492586][ T8617]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  135.492605][ T8617]  ? do_syscall_64+0x15f/0xf80
[  135.492629][ T8617]  __vmalloc_node_range_noprof+0x132/0x1750
[  135.492681][ T8617]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  135.492711][ T8617]  ? __kasan_kmalloc+0x93/0xb0
[  135.492740][ T8617]  vmalloc_user_noprof+0xad/0xe0
[  135.492762][ T8617]  ? xskq_create+0xbf/0x170
[  135.492780][ T8617]  xskq_create+0xbf/0x170
[  135.492800][ T8617]  xsk_init_queue+0x8a/0xe0
[  135.492819][ T8617]  xsk_setsockopt+0x54c/0x990
[  135.492839][ T8617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.492857][ T8617]  ? __pfx_aa_sk_perm+0x10/0x10
[  135.492880][ T8617]  ? aa_sock_opt_perm+0xff/0x1a0
[  135.492903][ T8617]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  135.492924][ T8617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.492941][ T8617]  do_sock_setsockopt+0x17c/0x1b0
[  135.492966][ T8617]  __x64_sys_setsockopt+0x13d/0x1b0
[  135.492989][ T8617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.493010][ T8617]  do_syscall_64+0x15f/0xf80
[  135.493031][ T8617]  ? clear_bhb_loop+0x40/0x90
[  135.493052][ T8617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.493069][ T8617] RIP: 0033:0x7fdbe779cdd9
[  135.493093][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.493107][ T8617] RSP: 002b:00007fdbe59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.493125][ T8617] RAX: ffffffffffffffda RBX: 00007fdbe7a15fa0 RCX: 00007fdbe779cdd9
[  135.493137][ T8617] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  135.493147][ T8617] RBP: 00007fdbe7832d69 R08: 0000000000000004 R09: 0000000000000000
[  135.493158][ T8617] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.493167][ T8617] R13: 00007fdbe7a16038 R14: 00007fdbe7a15fa0 R15: 00007ffdf78b28d8
[  135.493192][ T8617]  </TASK>
[  135.495475][ T8617] Mem-Info:
[  135.514556][ T8620] No such timeout policy "syz1"
[  135.574838][ T8617] active_anon:5932 inactive_anon:0 isolated_anon:0
[  135.574838][ T8617]  active_file:2824 inactive_file:39959 isolated_file:0
[  135.574838][ T8617]  unevictable:768 dirty:23 writeback:0
[  135.574838][ T8617]  slab_reclaimable:10474 slab_unreclaimable:101444
[  135.574838][ T8617]  mapped:29378 shmem:1290 pagetables:1399
[  135.574838][ T8617]  sec_pagetables:0 bounce:0
[  135.574838][ T8617]  kernel_misc_reclaimable:0
[  135.574838][ T8617]  free:1322003 free_pcp:9971 free_cma:0
[  135.831615][ T8617] Node 0 active_anon:24064kB inactive_anon:0kB active_file:11296kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117540kB dirty:112kB writeback:0kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13412kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  135.944969][ T8617] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  135.978237][ T8617] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.075996][ T8617] lowmem_reserve[]: 0 2492 2493 2493 2493
[  136.083365][ T8617] Node 0 DMA32 free:1316800kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24164kB inactive_anon:0kB active_file:11296kB inactive_file:159636kB unevictable:1536kB writepending:112kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:37928kB local_pcp:18728kB free_cma:0kB
[  136.246578][ T8617] lowmem_reserve[]: 0 0 0 0 0
[  136.256486][ T8617] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  136.294267][ T8617] lowmem_reserve[]: 0 0 0 0 0
[  136.318680][ T8649] xt_TCPMSS: Only works on TCP SYN packets
[  136.344049][ T8617] Node 1 Normal free:3955276kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.376362][ T8617] lowmem_reserve[]: 0 0 0 0 0
[  136.381231][ T8617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.410336][ T8617] Node 0 DMA32: 3160*4kB (UME) 1582*8kB (UME) 609*16kB (UME) 113*32kB (UME) 90*64kB (UME) 11*128kB (UM) 43*256kB (UM) 39*512kB (UM) 23*1024kB (UME) 20*2048kB (UM) 287*4096kB (UM) = 1316864kB
[  136.475737][ T8617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  136.533714][ T8617] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 8*16kB (UM) 9*32kB (UM) 10*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 964*4096kB (M) = 3955276kB
[  136.577650][ T8617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  136.620304][ T8617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.630060][ T8617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  136.648532][ T8617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.669082][ T8617] 44070 total pagecache pages
[  136.684380][ T8617] 0 pages in swap cache
[  136.698879][ T8617] Free swap  = 124996kB
[  136.724161][ T8617] Total swap = 124996kB
[  136.760513][ T8617] 2097051 pages RAM
[  136.764375][ T8617] 0 pages HighMem/MovableOnly
[  136.769143][ T8617] 427104 pages reserved
[  136.773303][ T8617] 0 pages cma reserved
[  136.984499][ T8682] netlink: 'syz.1.750': attribute type 4 has an invalid length.
[  137.035171][ T8677] netlink: 'syz.1.750': attribute type 4 has an invalid length.
[  137.333311][ T8695] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  137.353782][ T8697] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  137.439827][ T8703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.447492][ T8703] syzkaller0: entered promiscuous mode
[  137.453053][ T8703] syzkaller0: entered allmulticast mode
[  137.548174][ T8703] tipc: Resetting bearer <eth:syzkaller0>
[  137.565377][ T8714] netlink: 'syz.1.761': attribute type 24 has an invalid length.
[  137.593943][ T8699] bond4: entered allmulticast mode
[  137.628587][ T8702] tipc: Resetting bearer <eth:syzkaller0>
[  137.645754][ T8702] tipc: Disabling bearer <eth:syzkaller0>
[  137.728940][ T8720] sctp: [Deprecated]: syz.3.762 (pid 8720) Use of int in maxseg socket option.
[  137.728940][ T8720] Use struct sctp_assoc_value instead
[  162.163306][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  162.186779][ T8736] smc: net device team0 applied user defined pnetid SYZ2
[  162.203948][ T8736] smc: net device team0 erased user defined pnetid SYZ2
[  162.240621][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  162.270751][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'.
[  162.285241][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'.
[  162.527348][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'.
[  162.579791][ T8760] netlink: 'syz.2.773': attribute type 1 has an invalid length.
[  162.604063][ T8763] xt_CONNSECMARK: invalid mode: 0
[  162.630667][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  162.669541][ T8762] netlink: 'syz.1.775': attribute type 2 has an invalid length.
[  162.671542][ T8760] syzkaller0: entered promiscuous mode
[  162.697712][ T8762] netlink: 244 bytes leftover after parsing attributes in process `syz.1.775'.
[  162.721210][ T8760] syzkaller0: entered allmulticast mode
[  162.724426][ T8766] netlink: 788 bytes leftover after parsing attributes in process `syz.3.777'.
[  162.811637][ T8766] veth0_to_bridge: entered promiscuous mode
[  162.842628][ T8766] pimreg: entered allmulticast mode
[  162.864914][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'.
[  162.968627][ T8776] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  162.979954][ T8776] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  162.988925][ T8776] gretap2: entered promiscuous mode
[  162.994188][ T8776] gretap2: entered allmulticast mode
[  163.001891][ T8764] veth0_to_bridge: left promiscuous mode
[  163.008698][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.027070][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.062765][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.093311][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.189107][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'.
[  163.599455][ T8812] syzkaller0: entered promiscuous mode
[  163.624484][ T8812] syzkaller0: entered allmulticast mode
[  163.645721][ T8812] syzkaller0: tun_net_xmit 14
[  163.992460][ T8825] syz_tun: entered promiscuous mode
[  164.030633][ T8825] macvtap1: entered promiscuous mode
[  164.281613][ T8846] netlink: 'syz.1.798': attribute type 3 has an invalid length.
[  165.079455][ T8890] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  165.113436][ T8886] netlink: 'syz.3.809': attribute type 5 has an invalid length.
[  165.278759][ T8890] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.534877][ T8906] af_packet: tpacket_rcv: packet too big, clamped from 4408 to 3952. macoff=96
[  165.538800][ T8911] netlink: 'syz.4.816': attribute type 1 has an invalid length.
[  165.598257][ T8906] openvswitch: netlink: Flow actions attr not present in new flow.
[  165.690446][ T8911] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.794610][ T8917] bond3: (slave geneve2): making interface the new active one
[  165.820846][ T8917] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  165.892197][ T7038] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  165.932645][ T7038] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  165.970892][ T7038] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  166.003307][ T7038] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  166.090217][ T8937] netlink: 'syz.4.823': attribute type 4 has an invalid length.
[  166.163044][ T8940] netlink: 'syz.4.823': attribute type 1 has an invalid length.
[  166.673259][ T8967] netlink: 'syz.3.831': attribute type 64 has an invalid length.
[  166.695844][ T8966] netlink: 'syz.3.831': attribute type 64 has an invalid length.
[  167.180586][ T8993] __nla_validate_parse: 14 callbacks suppressed
[  167.180604][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[  167.200711][ T8994] batman_adv: batadv0: Adding interface: dummy0
[  167.240674][ T8994] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.275461][ T8994] batman_adv: batadv0: Interface activated: dummy0
[  167.298107][ T8994] batadv0: mtu less than device minimum
[  167.305170][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.317075][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.328919][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.340781][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.352613][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.364385][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.376256][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.388087][ T8994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  168.133460][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'.
[  168.185885][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'.
[  168.212584][ T9039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.853'.
[  168.287723][ T9039] veth0: entered promiscuous mode
[  168.321666][ T9037] veth0: left promiscuous mode
[  168.586408][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'.
[  168.673796][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  168.755201][ T9061] hsr_slave_1 (unregistering): left promiscuous mode
[  168.859499][ T9084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'.
[  168.889163][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.896437][ T9078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.983432][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  169.043852][ T9080] syzkaller1: entered promiscuous mode
[  169.055632][ T9080] syzkaller1: entered allmulticast mode
[  169.466525][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'.
[  169.479651][ T9116] syzkaller0: entered promiscuous mode
[  169.485218][ T9116] syzkaller0: entered allmulticast mode
[  169.510300][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'.
[  169.932160][ T9142] ipt_REJECT: TCP_RESET invalid for non-tcp
[  170.333362][ T9151] bond4: entered promiscuous mode
[  170.354302][ T9151] 8021q: adding VLAN 0 to HW filter on device bond4
[  170.619569][ T9184] net_ratelimit: 11 callbacks suppressed
[  170.619586][ T9184] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  170.631901][    C0] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  170.793301][ T9207] xt_HMARK: spi-set and port-set can't be combined
[  170.804839][ T9207] xt_HMARK: spi-set and port-set can't be combined
[  171.031608][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.097566][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.157820][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.207666][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.267376][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.330773][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.438352][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.509843][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.580516][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.659918][ T9224] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  171.883277][   T12] bond0: (slave bond_slave_0): interface is now down
[  171.893993][   T12] bond0: (slave bond_slave_1): interface is now down
[  171.907552][   T12] bond0: now running without any active interface!
[  173.464070][ T9176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.652438][ T9261] IPVS: Unknown mcast interface: vcan0
[  173.839254][ T9278] __nla_validate_parse: 30 callbacks suppressed
[  173.839274][ T9278] netlink: 1 bytes leftover after parsing attributes in process `syz.4.920'.
[  173.890457][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.898118][ T9283] batadv0: mtu less than device minimum
[  173.906303][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.919750][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.931444][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.943183][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.954893][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.960861][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'.
[  173.966312][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  173.967590][ T9283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.009491][ T9287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.923'.
[  174.020001][ T9283] batadv_slave_0: entered promiscuous mode
[  174.051969][ T9286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.920'.
[  174.217914][ T9294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.925'.
[  174.341558][ T9310] Cannot find del_set index 4 as target
[  174.373905][ T9308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'.
[  174.594880][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'.
[  174.879249][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  174.892435][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'.
[  175.187029][ T9356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.946'.
[  175.683924][ T9386] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  176.454840][ T9422] lo: entered promiscuous mode
[  176.492745][ T9422] validate_nla: 7 callbacks suppressed
[  176.492763][ T9422] netlink: 'syz.4.964': attribute type 2 has an invalid length.
[  176.541285][ T9422] net_ratelimit: 14 callbacks suppressed
[  176.541302][ T9422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.585399][ T9427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.010148][ T9442] IPv4: Oversized IP packet from 127.202.26.0
[  177.039770][ T9446] netlink: 'syz.4.973': attribute type 1 has an invalid length.
[  177.142886][ T9448] netlink: 'syz.1.975': attribute type 12 has an invalid length.
[  177.157235][ T9448] netlink: 'syz.1.975': attribute type 11 has an invalid length.
[  177.334326][ T9462] netlink: 'syz.1.979': attribute type 1 has an invalid length.
[  177.402894][ T9451] "syz.0.976" (9451) uses obsolete ecb(arc4) skcipher
[  177.513857][ T9462] 8021q: adding VLAN 0 to HW filter on device bond7
[  177.543051][ T9478] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  177.559692][ T9477] netlink: 'syz.3.980': attribute type 4 has an invalid length.
[  177.578479][ T9478] netlink: 'syz.2.982': attribute type 2 has an invalid length.
[  177.771245][ T9480] bridge0: port 4(macvlan2) entered blocking state
[  177.820002][ T9480] bridge0: port 4(macvlan2) entered disabled state
[  177.873193][ T9480] macvlan2: entered allmulticast mode
[  177.895681][ T9480] syz_tun: entered allmulticast mode
[  177.923234][ T9480] macvlan2: entered promiscuous mode
[  177.950956][ T9480] bridge0: port 4(macvlan2) entered blocking state
[  177.958793][ T9480] bridge0: port 4(macvlan2) entered forwarding state
[  178.013861][ T9500] openvswitch: netlink: Key type 1552 is out of range max 32
[  178.054372][ T9500] syzkaller0: entered promiscuous mode
[  178.080165][ T9500] syzkaller0: entered allmulticast mode
[  178.525669][ T9524] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  178.633555][ T9533] netlink: 'syz.2.996': attribute type 1 has an invalid length.
[  178.653237][ T9534] geneve3: entered promiscuous mode
[  178.678244][ T9533] ip_vti0: entered promiscuous mode
[  179.053575][ T9555] nftables ruleset with unbound set
[  179.136625][ T9565] __nla_validate_parse: 12 callbacks suppressed
[  179.136643][ T9565] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1007'.
[  179.212718][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  179.312771][ T9573] xt_hl: Unknown Hop Limit match mode: 206
[  179.595248][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  179.617659][ T9592] netlink: 'syz.2.1018': attribute type 30 has an invalid length.
[  179.638783][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  179.673638][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  179.730678][ T9592] netem: change failed
[  179.827760][ T9608] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  179.934087][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'.
[  180.013911][ T9616] syzkaller0: entered promiscuous mode
[  180.026617][ T9616] syzkaller0: entered allmulticast mode
[  180.060249][ T9622] IPv6: NLM_F_REPLACE set, but no existing node found!
[  180.219339][ T9627] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  180.424155][ T9635] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  180.433689][ T9635] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  180.565581][ T9641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1031'.
[  180.798480][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'.
[  180.798493][ T9655] Cannot find add_set index 0 as target
[  180.865595][ T9650] bond5: option mode: invalid value (133)
[  180.873325][ T9650] bond5 (unregistering): Released all slaves
[  180.892435][ T9659] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  180.892923][ T9655] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1036'.
[  181.021687][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  181.212015][ T9680] sctp: [Deprecated]: syz.2.1042 (pid 9680) Use of int in max_burst socket option.
[  181.212015][ T9680] Use struct sctp_assoc_value instead
[  181.593239][ T9707] x_tables: duplicate underflow at hook 1
[  181.616366][ T9707] veth: renamed from veth0_vlan (while UP)
[  181.783902][ T9716] validate_nla: 6 callbacks suppressed
[  181.783918][ T9716] netlink: 'syz.4.1052': attribute type 1 has an invalid length.
[  181.901114][ T9721] : entered promiscuous mode
[  182.320224][ T9739] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.030335][ T9774] netlink: 'syz.3.1070': attribute type 29 has an invalid length.
[  183.066964][ T9775] netlink: 'syz.3.1070': attribute type 29 has an invalid length.
[  183.322306][ T9785] sctp: [Deprecated]: syz.3.1074 (pid 9785) Use of int in maxseg socket option.
[  183.322306][ T9785] Use struct sctp_assoc_value instead
[  183.322660][ T9787] veth1_macvtap: left promiscuous mode
[  183.369071][ T9787] macsec0: entered promiscuous mode
[  183.374585][ T9787] macsec0: entered allmulticast mode
[  183.384926][ T9792] veth1_macvtap: entered promiscuous mode
[  183.391569][ T9792] veth1_macvtap: entered allmulticast mode
[  183.400413][ T9795] sctp: [Deprecated]: syz.1.1076 (pid 9795) Use of int in max_burst socket option.
[  183.400413][ T9795] Use struct sctp_assoc_value instead
[  183.418165][ T9792] macsec0: left promiscuous mode
[  183.434962][ T9792] macsec0: left allmulticast mode
[  183.450717][ T9792] veth1_macvtap: left allmulticast mode
[  183.484395][ T9796] IPVS: sed: FWM 3 0x00000003 - no destination available
[  183.531478][ T9799] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  184.088749][ T9835] ip_vti0: entered allmulticast mode
[  184.098282][ T9837] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20003
[  184.303365][ T9854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.521688][ T9859] x_tables: duplicate underflow at hook 1
[  184.579648][ T9868] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  184.598961][ T9868] __nla_validate_parse: 16 callbacks suppressed
[  184.598977][ T9868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.631064][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'.
[  184.657054][ T9868] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.695004][ T9868] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  184.725206][ T9868] netlink: 'syz.0.1090': attribute type 8 has an invalid length.
[  184.750181][ T9868] netlink: 582 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.762381][ T9868] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  184.817038][ T9868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.832974][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'.
[  184.844701][ T9868] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.878116][ T9868] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  184.923436][ T9868] netlink: 'syz.0.1090': attribute type 8 has an invalid length.
[  184.958786][ T9868] netlink: 582 bytes leftover after parsing attributes in process `syz.0.1090'.
[  184.992854][ T9868] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  185.025522][ T9868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'.
[  185.059527][ T9868] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1090'.
[  185.183033][ T9907] sctp: [Deprecated]: syz.2.1102 (pid 9907) Use of int in maxseg socket option.
[  185.183033][ T9907] Use struct sctp_assoc_value instead
[  185.401062][ T9915] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  185.728337][ T9938] gtp0: entered promiscuous mode
[  185.746079][ T9938] gtp0: entered allmulticast mode
[  186.584732][ T9989] x_tables: duplicate underflow at hook 3
[  186.813873][T10003] ip6gre2: entered allmulticast mode
[  187.004654][T10008] tap0: tun_chr_ioctl cmd 1074025676
[  187.012350][T10008] tap0: owner set to 0
[  187.313999][T10033] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0
[  187.490170][T10037] bond7: option mode: invalid value (133)
[  187.506335][T10037] bond7 (unregistering): Released all slaves
[  187.763557][T10054] validate_nla: 94 callbacks suppressed
[  187.763577][T10054] netlink: 'syz.1.1154': attribute type 11 has an invalid length.
[  187.867809][T10068] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  187.867809][T10068] Please contact the netfilter-devel mailing list or update your nftables rules.
[  187.969798][T10059] vcan0: tx drop: invalid da for name 0x0000000000000002
[  188.252809][T10090] syzkaller0: entered promiscuous mode
[  188.272894][T10090] syzkaller0: entered allmulticast mode
[  188.297376][T10077] syz_tun: entered allmulticast mode
[  188.630536][T10115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.858079][T10129] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  188.993933][T10138] netlink: 'syz.2.1180': attribute type 3 has an invalid length.
[  189.386708][T10158] netlink: 'syz.1.1188': attribute type 6 has an invalid length.
[  189.620991][T10175] netlink: 'syz.2.1193': attribute type 1 has an invalid length.
[  189.629179][T10175] netlink: 'syz.2.1193': attribute type 11 has an invalid length.
[  189.630373][T10169] bond5 (unregistering): Released all slaves
[  189.637991][T10175] __nla_validate_parse: 105 callbacks suppressed
[  189.638004][T10175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1193'.
[  189.687343][T10173] syzkaller0: entered promiscuous mode
[  189.693126][T10173] syzkaller0: entered allmulticast mode
[  189.705484][T10173] netlink: 'syz.0.1194': attribute type 1 has an invalid length.
[  189.713591][T10173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1194'.
[  189.914105][T10188] netlink: 'syz.3.1198': attribute type 1 has an invalid length.
[  189.973688][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'.
[  190.219489][T10205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1203'.
[  190.382905][T10217] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1207'.
[  190.871380][T10239] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1214'.
[  190.880561][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'.
[  190.989336][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'.
[  191.051811][T10250] lo: entered promiscuous mode
[  191.076355][T10250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.166308][T10255] syzkaller1: entered promiscuous mode
[  191.177084][T10255] syzkaller1: entered allmulticast mode
[  191.251183][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'.
[  191.270826][T10259] netlink: 'syz.0.1223': attribute type 7 has an invalid length.
[  191.281827][T10259] netlink: 'syz.0.1223': attribute type 8 has an invalid length.
[  191.283107][T10262] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1221'.
[  191.308519][T10264] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  191.446841][T10264] 8021q: adding VLAN 0 to HW filter on device bond8
[  191.473276][T10267] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  191.550731][T10267] bond8: entered allmulticast mode
[  191.662285][T10268] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link
[  191.973856][T10299] syz_tun: entered allmulticast mode
[  192.125466][T10308] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  193.080774][T10370] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.387362][T10385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.871812][T10413] syzkaller0: entered promiscuous mode
[  193.918569][T10413] syzkaller0: entered allmulticast mode
[  194.088761][T10423] 8021q: adding VLAN 0 to HW filter on device bond9
[  194.178694][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  194.187571][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  194.432791][T10448] xt_cluster: node mask cannot exceed total number of nodes
[  194.781389][T10464] __nla_validate_parse: 51 callbacks suppressed
[  194.781407][T10464] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1284'.
[  194.880728][T10465] bond8: entered allmulticast mode
[  194.919778][T10465] bond8 (unregistering): Released all slaves
[  195.074260][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'.
[  195.195493][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'.
[  195.240133][T10496] syzkaller1: entered promiscuous mode
[  195.246579][T10496] syzkaller1: entered allmulticast mode
[  195.501763][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1296'.
[  195.520320][T10509] netlink: 'syz.1.1297': attribute type 11 has an invalid length.
[  195.530612][T10510] ip6tnl2: entered promiscuous mode
[  195.530644][T10510] ip6tnl2: entered allmulticast mode
[  195.548876][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'.
[  195.655751][T10512] sctp: [Deprecated]: syz.1.1298 (pid 10512) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.655751][T10512] Use struct sctp_sack_info instead
[  195.700236][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'.
[  196.073208][T10540] dummy0: left allmulticast mode
[  196.091521][T10536] validate_nla: 67 callbacks suppressed
[  196.091537][T10536] netlink: 'syz.4.1303': attribute type 4 has an invalid length.
[  196.127403][T10540] bridge0: port 3(dummy0) entered disabled state
[  196.143462][T10536] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1303'.
[  197.033499][T10604] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1323'.
[  197.092025][T10606] netlink: 'syz.3.1324': attribute type 10 has an invalid length.
[  197.142629][T10613] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1323'.
[  197.195527][T10613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1323'.
[  197.528253][T10624] bond6: option mode: invalid value (133)
[  197.598712][T10633] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  197.619189][T10624] bond6 (unregistering): Released all slaves
[  197.985074][T10646] pim6reg1: entered promiscuous mode
[  197.999621][T10646] pim6reg1: entered allmulticast mode
[  198.216967][T10656] xt_hashlimit: size too large, truncated to 1048576
[  199.158521][T10701] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20000
[  199.324742][T10714] netlink: 'syz.0.1355': attribute type 11 has an invalid length.
[  199.742622][    C1] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  199.875027][T10742] __nla_validate_parse: 9 callbacks suppressed
[  199.875059][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'.
[  199.877839][T10743] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  199.896175][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'.
[  200.040230][T10754] 8021q: adding VLAN 0 to HW filter on device macsec1
[  200.057648][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'.
[  200.289277][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'.
[  200.294911][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'.
[  200.351571][T10768] netlink: 'syz.3.1371': attribute type 1 has an invalid length.
[  200.356715][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'.
[  200.611618][T10783] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1376'.
[  200.694132][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  200.833846][  T807] IPVS: starting estimator thread 0...
[  200.938381][T10796] IPVS: using max 30 ests per chain, 72000 per kthread
[  201.147117][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[  201.652537][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  202.411003][T10858] syzkaller0: entered promiscuous mode
[  202.438239][T10858] syzkaller0: entered allmulticast mode
[  202.497386][T10862] netlink: 'syz.4.1404': attribute type 17 has an invalid length.
[  223.998660][T10882] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  224.124555][T10894] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  224.506789][T10917] __nla_validate_parse: 7 callbacks suppressed
[  224.506806][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'.
[  224.529253][T10919] netlink: 'syz.4.1421': attribute type 5 has an invalid length.
[  224.553221][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'.
[  224.585202][T10917] netlink: 'syz.0.1422': attribute type 29 has an invalid length.
[  224.607580][  T154] tipc: Subscription rejected, illegal request
[  224.690204][T10925] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1425'.
[  224.870793][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'.
[  224.901477][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'.
[  224.942993][T10938] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  224.952011][T10936] netlink: 'syz.3.1427': attribute type 1 has an invalid length.
[  224.954218][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'.
[  224.962612][T10936] netlink: 'syz.3.1427': attribute type 2 has an invalid length.
[  225.009923][T10933] 8021q: adding VLAN 0 to HW filter on device bond6
[  225.038921][T10935] ipvlan2: entered allmulticast mode
[  225.044782][T10935] bond6: entered allmulticast mode
[  225.128799][T10941] bond6: (slave ipip0): refused to change device type
[  225.216311][T10950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'.
[  225.400623][T10956] sctp: [Deprecated]: syz.3.1434 (pid 10956) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.400623][T10956] Use struct sctp_sack_info instead
[  225.789842][T10980] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1443'.
[  225.799302][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'.
[  225.811395][T10980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1443'.
[  225.895788][T10984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.919865][T10984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  226.558288][T11015] netlink: 'syz.3.1454': attribute type 1 has an invalid length.
[  226.585881][T11015] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  227.189507][T11039] netlink: 'syz.3.1464': attribute type 13 has an invalid length.
[  227.238517][T11043] netlink: 'syz.2.1465': attribute type 2 has an invalid length.
[  227.259043][T11039] netlink: 'syz.3.1464': attribute type 58 has an invalid length.
[  227.261504][T11043] block nbd1: Unsupported socket: should be TCP or UNIX.
[  227.391229][T11047] netlink: 'syz.0.1462': attribute type 1 has an invalid length.
[  227.797578][T11077] netlink: 'syz.2.1472': attribute type 6 has an invalid length.
[  228.008760][T11085] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  228.033897][T11086] 8021q: adding VLAN 0 to HW filter on device team0
[  228.109439][T11087] syzkaller1: entered promiscuous mode
[  228.138222][T11087] syzkaller1: entered allmulticast mode
[  228.193673][T11091] ip6erspan1: entered allmulticast mode
[  229.272799][T11155] veth1_macvtap: left promiscuous mode
[  229.523098][T11167] __nla_validate_parse: 11 callbacks suppressed
[  229.523120][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'.
[  229.582702][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'.
[  229.623760][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'.
[  229.660436][T11129] hsr_slave_0: left promiscuous mode
[  229.676434][T11129] hsr_slave_1: left promiscuous mode
[  229.768275][T11169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.014101][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'.
[  230.195477][T11200] syz_tun: left allmulticast mode
[  230.291308][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1510'.
[  230.426958][T11217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1511'.
[  230.526663][T11222] validate_nla: 1 callbacks suppressed
[  230.526682][T11222] netlink: 'syz.1.1513': attribute type 39 has an invalid length.
[  230.662257][T11222] bond3: (slave syz_tun): Removing an active aggregator
[  230.674816][T11222] bond3: (slave syz_tun): Releasing backup interface
[  230.932065][T11249] netlink: 'syz.1.1519': attribute type 1 has an invalid length.
[  231.060223][T11249] 8021q: adding VLAN 0 to HW filter on device bond10
[  231.091847][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'.
[  231.160565][T11255] bridge_slave_0: default FDB implementation only supports local addresses
[  231.374210][T11264] xt_hashlimit: size too large, truncated to 1048576
[  231.398148][T11270] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.1524'.
[  231.407011][T11268] syzkaller0: entered promiscuous mode
[  231.429220][T11270] openvswitch: netlink: Message has 6 unknown bytes.
[  231.432157][T11268] syzkaller0: entered allmulticast mode
[  231.592326][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'.
[  231.682798][T11281] batman_adv: batadv0: Interface deactivated: dummy0
[  231.693025][T11279] netlink: 'syz.0.1528': attribute type 1 has an invalid length.
[  231.706336][T11281] batman_adv: batadv0: Removing interface: dummy0
[  231.712211][T11279] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1528'.
[  231.752584][T11281] bridge_slave_0: left allmulticast mode
[  231.793402][T11281] bridge_slave_0: left promiscuous mode
[  231.816325][T11281] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.840196][T11281] bridge_slave_1: left allmulticast mode
[  231.855411][T11281] bridge_slave_1: left promiscuous mode
[  231.869062][T11281] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.251617][T11281] bond0: (slave bond_slave_0): Releasing backup interface
[  232.310035][T11281] bond0: (slave bond_slave_1): Releasing backup interface
[  232.352834][T11281] team0: Port device team_slave_0 removed
[  232.367386][T11281] team0: Port device team_slave_1 removed
[  232.381080][T11281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.389666][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.397357][T11281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.670116][T11317] raw_sendmsg: syz.0.1536 forgot to set AF_INET. Fix it!
[  232.783317][ T5634] block nbd1: Receive control failed (result -32)
[  233.340651][T11369] netlink: 'syz.0.1554': attribute type 39 has an invalid length.
[  233.774365][T11389] netlink: 'syz.4.1561': attribute type 1 has an invalid length.
[  233.800241][T11394] xt_hashlimit: size too large, truncated to 1048576
[  233.919062][T11389] 8021q: adding VLAN 0 to HW filter on device bond8
[  233.954663][T11404] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  233.964917][T11393] bond8: (slave batadv1): Opening slave failed
[  234.105094][T11404] 8021q: adding VLAN 0 to HW filter on device bond4
[  234.210274][T11404] netlink: 'syz.2.1565': attribute type 2 has an invalid length.
[  234.533881][T11439] tc_dump_action: action bad kind
[  234.540924][T11439] __nla_validate_parse: 5 callbacks suppressed
[  234.540941][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'.
[  234.628061][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'.
[  236.889106][T11404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.171613][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'.
[  237.224249][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1579'.
[  237.269220][T11466] openvswitch: netlink: Flow key attr not present in new flow.
[  237.495778][T11477] netlink: 'syz.1.1584': attribute type 18 has an invalid length.
[  237.496619][T11476] netlink: 'syz.1.1584': attribute type 18 has an invalid length.
[  237.587380][T11477] netlink: 'syz.1.1584': attribute type 18 has an invalid length.
[  237.590263][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1586'.
[  237.657542][T11476] netlink: 'syz.1.1584': attribute type 18 has an invalid length.
[  237.784001][T11487] syzkaller0: entered promiscuous mode
[  237.803802][T11487] syzkaller0: entered allmulticast mode
[  237.960565][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'.
[  238.100396][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'.
[  238.169469][T11505] netlink: 'syz.3.1591': attribute type 1 has an invalid length.
[  238.213270][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'.
[  238.676260][T11525] netlink: set zone limit has 4 unknown bytes
[  238.764608][T11534] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  238.779540][T11534] bond6 (unregistering): Released all slaves
[  238.807603][   T30] audit: type=1107 audit(1777916065.137:2): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�X��y@�
[  238.807603][   T30] �\�-�*���Dd��#�4Id� �z}tLf�qI�k��v��
΃�P_݄.�N~�f�����B¢��3+sC~l���Iz�,7���&�M!+��p�f�ڪ~���&�|��=w$������$(���t�]��"m�#��[L�2�(�'
[  238.840804][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1600'.
[  239.111495][T11549] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1603'.
[  239.761344][T11597] IPv6: Can't replace route, no match found
[  239.780437][T11597] IPv6: Can't replace route, no match found
[  239.899792][T11604] bridge0: port 2(syz_tun) entered blocking state
[  239.906767][T11604] bridge0: port 2(syz_tun) entered disabled state
[  239.914230][T11604] syz_tun: entered allmulticast mode
[  239.923033][T11604] syz_tun: left allmulticast mode
[  239.936417][T11606] __nla_validate_parse: 2 callbacks suppressed
[  239.936435][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  240.214212][T11621] sch_tbf: peakrate 512 is lower than or equals to rate 11185750692388311336 !
[  240.241413][T11621] syzkaller0: entered promiscuous mode
[  240.261440][T11621] syzkaller0: entered allmulticast mode
[  240.272639][T11623] tipc: Started in network mode
[  240.280198][T11623] tipc: Node identity , cluster identity 4711
[  240.287847][T11623] tipc: Failed to set node id, please configure manually
[  240.295177][T11623] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  240.576950][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'.
[  240.597965][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'.
[  240.649259][T11641] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1633'.
[  240.704229][T11641] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000
[  240.900854][T11653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1639'.
[  241.185829][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'.
[  241.316256][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'.
[  241.393153][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'.
[  241.420841][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'.
[  241.521911][T11698] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1650'.
[  241.574463][T11681] lo: entered promiscuous mode
[  241.590485][T11681] netlink: 'syz.1.1647': attribute type 2 has an invalid length.
[  241.606301][T11681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.756391][T11707] netlink: 'syz.0.1652': attribute type 1 has an invalid length.
[  241.920530][T11712] netlink: 'syz.2.1654': attribute type 9 has an invalid length.
[  242.091639][T11730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.505484][T11757] openvswitch: netlink: Flow key attr not present in new flow.
[  242.879992][T11782] netem: change failed
[  242.911069][T11782] netlink: 'syz.2.1668': attribute type 83 has an invalid length.
[  243.102680][T11800] ipvlan2: entered promiscuous mode
[  243.159463][T11810] netem: change failed
[  243.770415][T11836] netlink: 'syz.4.1686': attribute type 39 has an invalid length.
[  244.319166][T11862] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  244.353941][T11862] bond9 (unregistering): Released all slaves
[  245.597805][T11925] pim6reg1: entered promiscuous mode
[  245.606077][T11925] pim6reg1: entered allmulticast mode
[  245.685601][T11950] netlink: 'syz.3.1719': attribute type 4 has an invalid length.
[  245.693183][T11928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  245.715218][T11942] __nla_validate_parse: 11 callbacks suppressed
[  245.715235][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1716'.
[  245.994357][T11966] netlink: 'syz.0.1724': attribute type 24 has an invalid length.
[  246.054230][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  246.064942][T11972] netlink: 'syz.4.1725': attribute type 1 has an invalid length.
[  246.099694][T11972] bond9: entered promiscuous mode
[  246.105310][T11972] 8021q: adding VLAN 0 to HW filter on device bond9
[  246.153699][T11972] bridge1: entered promiscuous mode
[  246.160359][T11972] bond9: (slave bridge1): Enslaving as a backup interface with an up link
[  246.209273][  T154] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  246.252641][T11972] veth5: entered promiscuous mode
[  246.258179][T11972] veth5: entered allmulticast mode
[  246.273418][T11972] bond9: (slave veth5): Enslaving as a backup interface with a down link
[  246.330208][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  246.346275][ T3357] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  246.367667][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  246.624096][T11997] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  246.776192][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1735'.
[  246.936794][T12018] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1737'.
[  246.973697][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'.
[  246.994415][T12022] netlink: 'syz.4.1739': attribute type 7 has an invalid length.
[  247.020797][T12022] netlink: 'syz.4.1739': attribute type 8 has an invalid length.
[  247.039534][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'.
[  247.225315][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1743'.
[  247.262299][T12036] netlink: 'syz.4.1743': attribute type 1 has an invalid length.
[  247.275614][T12036] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1743'.
[  247.285336][T12036] netlink: 'syz.4.1743': attribute type 1 has an invalid length.
[  247.295914][T12036] netlink: 'syz.4.1743': attribute type 8 has an invalid length.
[  248.012067][T12078] 8021q: adding VLAN 0 to HW filter on device bond5
[  249.325527][T12186] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  249.394174][T12173] veth: left promiscuous mode
[  249.400024][T12173] veth: entered promiscuous mode
[  249.435180][T12173] 8021q: adding VLAN 0 to HW filter on device bond3
[  249.450000][T12173] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check.
[  249.892749][T12217] gtp1: entered promiscuous mode
[  249.909240][T12217] gtp1: entered allmulticast mode
[  250.364217][T12243] validate_nla: 2 callbacks suppressed
[  250.364234][T12243] netlink: 'syz.2.1792': attribute type 1 has an invalid length.
[  250.458898][T12245] 8021q: adding VLAN 0 to HW filter on device macsec0
[  250.623992][T12243] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  250.665750][T12248] netlink: 'syz.0.1794': attribute type 61 has an invalid length.
[  250.723454][T12255] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  250.873495][T12268] __nla_validate_parse: 8 callbacks suppressed
[  250.873513][T12268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1797'.
[  251.018473][T12277] IPv6: sit2: Disabled Multicast RS
[  251.045087][T12277] sit2: entered allmulticast mode
[  251.261857][T12269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.277766][T12269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.354258][T12272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.467266][T12279] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  251.489115][T12279] bond11 (unregistering): Released all slaves
[  251.673700][T12269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.693275][T12269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.982173][T12314] netlink: 'syz.3.1806': attribute type 58 has an invalid length.
[  251.996981][T12269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.007610][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1806'.
[  252.019605][T12269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.170817][T12320] netlink: 'syz.0.1807': attribute type 24 has an invalid length.
[  252.267356][T12269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.334227][T12269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.591210][T12350] �x9�: renamed from bridge_slave_0 (while UP)
[  252.610747][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'.
[  252.720704][T12353] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  252.755046][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'.
[  252.777361][T12353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.911853][ T3264] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.955441][ T3264] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.958965][T12373] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  253.069101][T12379] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1820'.
[  253.086158][   T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.124057][   T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.160321][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'.
[  253.197145][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.208977][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'.
[  253.209846][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'.
[  253.227475][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.255534][   T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.272523][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.295182][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'.
[  253.443909][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1825'.
[  253.753571][T12415] netlink: 'syz.3.1830': attribute type 58 has an invalid length.
[  253.868173][T12419] veth0: entered promiscuous mode
[  254.188992][T12415] syzkaller0: entered promiscuous mode
[  254.206529][T12415] syzkaller0: entered allmulticast mode
[  254.230334][T12418] veth0: left promiscuous mode
[  254.361876][T12434] nbd: must specify a size in bytes for the device
[  255.319186][T12477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.431478][T12477] netdevsim netdevsim3: Direct firmware load for r1 failed with error -2
[  255.512995][T12477] netdevsim netdevsim3: Falling back to sysfs fallback for: r1
[  255.580501][T12486] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  255.611603][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  255.620885][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  255.931436][T12505] __nla_validate_parse: 11 callbacks suppressed
[  255.931454][T12505] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1852'.
[  255.986542][T12509] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1852'.
[  256.428829][T12525] netlink: 'syz.3.1858': attribute type 1 has an invalid length.
[  256.582056][T12525] 8021q: adding VLAN 0 to HW filter on device bond6
[  256.661190][T12525] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1858'.
[  256.755598][T12536] bond6: (slave veth3): Enslaving as an active interface with a down link
[  256.816463][T12540] bond6: (slave dummy0): making interface the new active one
[  256.882350][T12540] dummy0: entered promiscuous mode
[  256.902741][T12540] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  257.013340][T12525] bond6: (slave dummy0): Releasing active interface
[  257.050076][T12525] dummy0 (unregistering): left promiscuous mode
[  257.210775][T12554] lo speed is unknown, defaulting to 1000
[  257.292691][T12546] netlink: 'syz.2.1862': attribute type 16 has an invalid length.
[  257.308150][T12546] netlink: 'syz.2.1862': attribute type 17 has an invalid length.
[  257.338430][T12546] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.426223][T12546] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  257.474072][T12569] netlink: 'syz.3.1867': attribute type 1 has an invalid length.
[  257.509306][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'.
[  257.537164][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'.
[  257.572285][T12569] netlink: 'syz.3.1867': attribute type 2 has an invalid length.
[  257.600844][T12569] netlink: 'syz.3.1867': attribute type 2 has an invalid length.
[  257.601267][T12575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1867'.
[  257.619795][T12569] netlink: 'syz.3.1867': attribute type 2 has an invalid length.
[  257.630900][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'.
[  257.819096][T12554] wg1 speed is unknown, defaulting to 1000
[  257.893501][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'.
[  258.097676][T12591] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  258.113122][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'.
[  258.482148][T12610] netlink: 'syz.1.1880': attribute type 29 has an invalid length.
[  258.491458][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'.
[  258.842903][T12625] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  258.881442][T12625] IPv6: Can't replace route, no match found
[  258.898711][T12625] IPv6: Can't replace route, no match found
[  259.022419][T12636] netlink: 'syz.1.1888': attribute type 1 has an invalid length.
[  259.041499][T12105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.074183][T12105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.099524][T12105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.111808][T12105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.427409][T12652] Bluetooth: MGMT ver 1.23
[  259.664050][T12666] syzkaller1: entered promiscuous mode
[  259.670531][T12666] syzkaller1: entered allmulticast mode
[  259.682182][T12666] tc_dump_action: action bad kind
[  259.969724][T12690] openvswitch: netlink: VLAN attribute unexpected.
[  260.072653][T12693] ������: renamed from virt_wifi0
[  260.291429][T12702] vlan3: entered allmulticast mode
[  260.306608][T12702] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  260.655181][T12732] netlink: ct family unspecified
[  261.028521][T12758] netlink: 'syz.0.1924': attribute type 12 has an invalid length.
[  261.169929][T12767] __nla_validate_parse: 15 callbacks suppressed
[  261.169942][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'.
[  261.240382][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'.
[  261.600916][T12778] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  261.677367][T12781] policy can only be matched on NF_INET_PRE_ROUTING
[  261.677387][T12781] unable to load match
[  261.843263][T12792] netlink: 'syz.3.1931': attribute type 16 has an invalid length.
[  261.851408][T12792] netlink: 'syz.3.1931': attribute type 3 has an invalid length.
[  261.859455][T12792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1931'.
[  261.870746][T12792] netlink: 'syz.3.1931': attribute type 3 has an invalid length.
[  261.878622][T12792] netlink: 'syz.3.1931': attribute type 1 has an invalid length.
[  263.476876][T12716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.648915][T12798] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1934'.
[  263.697401][T12802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'.
[  263.708340][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'.
[  263.726347][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'.
[  264.102018][T12825] xt_hashlimit: size too large, truncated to 1048576
[  264.302637][T12835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.313180][T12839] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1946'.
[  264.680720][T12855] syzkaller0: entered promiscuous mode
[  264.697510][T12855] syzkaller0: entered allmulticast mode
[  265.390695][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1960'.
[  265.495872][T12895] 8021q: VLANs not supported on ip6gre0
[  265.622815][T12909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1964'.
[  265.828047][T12921] macvlan3: entered allmulticast mode
[  265.839155][T12921] dummy0: entered allmulticast mode
[  265.924426][T12929] pimreg: entered allmulticast mode
[  265.958192][T12920] netlink: 'syz.4.1967': attribute type 16 has an invalid length.
[  265.987254][T12932] netlink: 'syz.2.1970': attribute type 1 has an invalid length.
[  266.012381][T12920] netlink: 'syz.4.1967': attribute type 17 has an invalid length.
[  266.054039][T12920] lo: left promiscuous mode
[  266.439924][T12920] veth1_macvtap: entered promiscuous mode
[  266.492599][T12920] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  266.627539][T12940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.635703][T12940] batadv_slave_0: entered promiscuous mode
[  267.102130][T12980] __nla_validate_parse: 1 callbacks suppressed
[  267.102147][T12980] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1983'.
[  267.135139][T12981] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1983'.
[  267.284502][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'.
[  267.346361][T12990] netlink: 'syz.2.1986': attribute type 11 has an invalid length.
[  267.362200][T12990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1986'.
[  267.751596][T13007] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  267.832739][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'.
[  267.863650][T13016] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1989'.
[  267.877132][T13013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.973737][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'.
[  268.048621][T13022] netlink: 'syz.4.1994': attribute type 1 has an invalid length.
[  268.193273][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'.
[  268.268184][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1993'.
[  268.284226][T13022] 8021q: adding VLAN 0 to HW filter on device bond10
[  268.321653][T13028] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1993'.
[  268.378434][T13029] bond10: (slave geneve4): making interface the new active one
[  268.422990][T13029] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  268.502152][T13022] bond11: entered promiscuous mode
[  268.527159][T13022] bond11: entered allmulticast mode
[  268.539727][T13022] 8021q: adding VLAN 0 to HW filter on device bond11
[  268.601142][T13029] syz.4.1994 (13029) used greatest stack depth: 19072 bytes left
[  269.132818][T13077] IPVS: set_ctl: invalid protocol: 108 172.20.20.67:20003
[  269.541122][T13097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.060060][T13111] xt_ipcomp: unknown flags 1D
[  270.692512][T13143] syzkaller0: entered promiscuous mode
[  270.709812][T13143] syzkaller0: entered allmulticast mode
[  271.019551][T13162] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2
[  271.031003][T13162] netdevsim netdevsim0: Falling back to sysfs fallback for: r1
[  271.276930][T13175] 8021q: adding VLAN 0 to HW filter on device bond7
[  271.307773][T13175] bond7 (unregistering): Released all slaves
[  271.925814][T13206] veth0: entered promiscuous mode
[  272.152068][T13215] __nla_validate_parse: 12 callbacks suppressed
[  272.152090][T13215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2045'.
[  272.158775][T13217] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  272.158814][T13217] netlink: 'syz.1.2046': attribute type 2 has an invalid length.
[  272.267399][T13215] nbd0: detected capacity change from 63 to 0
[  272.288076][T13215] block nbd0: reconnected socket
[  272.306188][T13215] block nbd0: reconnected socket
[  272.338648][ T5637] block nbd0: Receive control failed (result -32)
[  272.350459][ T5634] block nbd0: Receive control failed (result -32)
[  272.365742][T13223] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2048'.
[  272.392223][T13223] 0�: renamed from hsr0
[  272.413666][T13223] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  272.466068][T13223] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.484155][T13223] 0�: entered allmulticast mode
[  272.495486][T13223] hsr_slave_0: entered allmulticast mode
[  272.509064][T13223] hsr_slave_1: entered allmulticast mode
[  272.519912][T13223] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  272.703761][T13236] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2053'.
[  272.743168][T13236] openvswitch: netlink: Flow actions attr not present in new flow.
[  272.865387][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2056'.
[  272.883235][T13245] openvswitch: netlink: Duplicate key (type 2).
[  272.919302][T13245] sctp: [Deprecated]: syz.4.2054 (pid 13245) Use of int in maxseg socket option.
[  272.919302][T13245] Use struct sctp_assoc_value instead
[  273.171739][T13263] netlink: 'syz.0.2061': attribute type 1 has an invalid length.
[  273.190559][T13263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2061'.
[  273.253748][T13262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.384781][T13266] netlink: 'syz.2.2062': attribute type 2 has an invalid length.
[  273.605751][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2067'.
[  273.641881][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2067'.
[  274.055320][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2074'.
[  274.213793][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2075'.
[  274.288169][T13317] xt_CT: No such helper "pptp"
[  274.311676][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2078'.
[  274.619052][T13349] netlink: 'syz.2.2084': attribute type 1 has an invalid length.
[  274.761567][T13349] bond7: entered promiscuous mode
[  274.768741][T13349] 8021q: adding VLAN 0 to HW filter on device bond7
[  274.841415][T13365] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  275.143676][T13374] netlink: 'syz.1.2094': attribute type 3 has an invalid length.
[  275.205705][T13375] bond8 (unregistering): Released all slaves
[  275.207238][T13374] x_tables: duplicate underflow at hook 3
[  275.343034][T13378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.774335][T13405] 
[  275.776712][T13405] ======================================================
[  275.783735][T13405] WARNING: possible circular locking dependency detected
[  275.791295][T13405] syzkaller #0 Not tainted
[  275.795722][T13405] ------------------------------------------------------
[  275.802754][T13405] syz.4.2100/13405 is trying to acquire lock:
[  275.808830][T13405] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  275.818164][T13405] 
[  275.818164][T13405] but task is already holding lock:
[  275.825538][T13405] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[  275.834442][T13405] 
[  275.834442][T13405] which lock already depends on the new lock.
[  275.834442][T13405] 
[  275.844842][T13405] 
[  275.844842][T13405] the existing dependency chain (in reverse order) is:
[  275.853846][T13405] 
[  275.853846][T13405] -> #8 (gdp_mutex){+.+.}-{4:4}:
[  275.860970][T13405]        __mutex_lock+0x1a3/0x1550
[  275.866077][T13405]        get_device_parent+0x16f/0x3a0
[  275.871532][T13405]        device_add+0x2e1/0xbb0
[  275.876382][T13405]        device_create+0x269/0x300
[  275.881504][T13405]        msr_device_create+0x33/0x50
[  275.886797][T13405]        cpuhp_invoke_callback+0x445/0x860
[  275.892611][T13405]        cpuhp_thread_fun+0x36b/0x780
[  275.897996][T13405]        smpboot_thread_fn+0x541/0xa50
[  275.903478][T13405]        kthread+0x388/0x470
[  275.908072][T13405]        ret_from_fork+0x514/0xb70
[  275.913176][T13405]        ret_from_fork_asm+0x1a/0x30
[  275.918451][T13405] 
[  275.918451][T13405] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  275.926003][T13405]        cpuhp_thread_fun+0x127/0x780
[  275.931368][T13405]        smpboot_thread_fn+0x541/0xa50
[  275.936813][T13405]        kthread+0x388/0x470
[  275.941386][T13405]        ret_from_fork+0x514/0xb70
[  275.946483][T13405]        ret_from_fork_asm+0x1a/0x30
[  275.951752][T13405] 
[  275.951752][T13405] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  275.959608][T13405]        cpus_read_lock+0x42/0x160
[  275.964708][T13405]        static_key_slow_inc+0x12/0x30
[  275.970161][T13405]        nbd_genl_reconfigure+0x132f/0x1ea0
[  275.976063][T13405]        genl_family_rcv_msg_doit+0x22a/0x330
[  275.982130][T13405]        genl_rcv_msg+0x61c/0x7a0
[  275.987145][T13405]        netlink_rcv_skb+0x232/0x4b0
[  275.992419][T13405]        genl_rcv+0x28/0x40
[  275.996909][T13405]        netlink_unicast+0x75c/0x8e0
[  276.002176][T13405]        netlink_sendmsg+0x813/0xb40
[  276.007446][T13405]        ____sys_sendmsg+0x972/0x9f0
[  276.012781][T13405]        ___sys_sendmsg+0x2a5/0x360
[  276.018003][T13405]        __x64_sys_sendmsg+0x1bd/0x2a0
[  276.023464][T13405]        do_syscall_64+0x15f/0xf80
[  276.028575][T13405]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.034982][T13405] 
[  276.034982][T13405] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  276.042615][T13405]        __mutex_lock+0x1a3/0x1550
[  276.047724][T13405]        nbd_queue_rq+0x37b/0x1100
[  276.052819][T13405]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  276.058888][T13405]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  276.065758][T13405]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  276.072250][T13405]        blk_mq_run_hw_queue+0x348/0x4f0
[  276.077879][T13405]        blk_mq_dispatch_list+0xd16/0xe10
[  276.083587][T13405]        blk_mq_flush_plug_list+0x48d/0x570
[  276.089472][T13405]        __blk_flush_plug+0x3ed/0x4d0
[  276.094836][T13405]        __submit_bio+0x28d/0x580
[  276.099852][T13405]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  276.106011][T13405]        block_read_full_folio+0x599/0x830
[  276.111811][T13405]        filemap_read_folio+0x137/0x3b0
[  276.117343][T13405]        do_read_cache_folio+0x358/0x590
[  276.122970][T13405]        read_part_sector+0xb6/0x2b0
[  276.128250][T13405]        adfspart_check_ICS+0xb1/0x960
[  276.134260][T13405]        bdev_disk_changed+0x817/0x1770
[  276.139949][T13405]        blkdev_get_whole+0x380/0x510
[  276.145331][T13405]        bdev_open+0x31e/0xd30
[  276.150088][T13405]        blkdev_open+0x470/0x610
[  276.155015][T13405]        do_dentry_open+0x785/0x14e0
[  276.160289][T13405]        vfs_open+0x3b/0x340
[  276.164864][T13405]        path_openat+0x2e08/0x3860
[  276.169963][T13405]        do_file_open+0x23e/0x4a0
[  276.174978][T13405]        do_sys_openat2+0x113/0x200
[  276.180176][T13405]        __x64_sys_openat+0x138/0x170
[  276.185559][T13405]        do_syscall_64+0x15f/0xf80
[  276.190698][T13405]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.197124][T13405] 
[  276.197124][T13405] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  276.204340][T13405]        __mutex_lock+0x1a3/0x1550
[  276.209457][T13405]        nbd_queue_rq+0xc6/0x1100
[  276.214468][T13405]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  276.220530][T13405]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  276.227370][T13405]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  276.233862][T13405]        blk_mq_run_hw_queue+0x348/0x4f0
[  276.239481][T13405]        blk_mq_dispatch_list+0xd16/0xe10
[  276.245197][T13405]        blk_mq_flush_plug_list+0x48d/0x570
[  276.251078][T13405]        __blk_flush_plug+0x3ed/0x4d0
[  276.256443][T13405]        __submit_bio+0x28d/0x580
[  276.261458][T13405]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  276.267599][T13405]        block_read_full_folio+0x599/0x830
[  276.273410][T13405]        filemap_read_folio+0x137/0x3b0
[  276.278966][T13405]        do_read_cache_folio+0x358/0x590
[  276.284609][T13405]        read_part_sector+0xb6/0x2b0
[  276.289888][T13405]        adfspart_check_ICS+0xb1/0x960
[  276.295350][T13405]        bdev_disk_changed+0x817/0x1770
[  276.300890][T13405]        blkdev_get_whole+0x380/0x510
[  276.306254][T13405]        bdev_open+0x31e/0xd30
[  276.311014][T13405]        blkdev_open+0x470/0x610
[  276.316109][T13405]        do_dentry_open+0x785/0x14e0
[  276.321383][T13405]        vfs_open+0x3b/0x340
[  276.325970][T13405]        path_openat+0x2e08/0x3860
[  276.331086][T13405]        do_file_open+0x23e/0x4a0
[  276.336098][T13405]        do_sys_openat2+0x113/0x200
[  276.341288][T13405]        __x64_sys_openat+0x138/0x170
[  276.346647][T13405]        do_syscall_64+0x15f/0xf80
[  276.351744][T13405]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.358141][T13405] 
[  276.358141][T13405] -> #3 (set->srcu){.+.+}-{0:0}:
[  276.365270][T13405]        __synchronize_srcu+0xca/0x300
[  276.370713][T13405]        elevator_switch+0x1e8/0x7a0
[  276.375989][T13405]        elevator_change+0x2cc/0x450
[  276.381279][T13405]        elevator_set_default+0x36c/0x430
[  276.387012][T13405]        blk_register_queue+0x3e9/0x4e0
[  276.392557][T13405]        __add_disk+0x677/0xd50
[  276.397392][T13405]        add_disk_fwnode+0xfb/0x480
[  276.402604][T13405]        nbd_dev_add+0x72c/0xb50
[  276.407529][T13405]        nbd_init+0x168/0x1f0
[  276.412190][T13405]        do_one_initcall+0x250/0x870
[  276.417462][T13405]        do_initcall_level+0x104/0x190
[  276.423002][T13405]        do_initcalls+0x59/0xa0
[  276.427841][T13405]        kernel_init_freeable+0x2a6/0x3e0
[  276.433652][T13405]        kernel_init+0x1d/0x1d0
[  276.438511][T13405]        ret_from_fork+0x514/0xb70
[  276.443615][T13405]        ret_from_fork_asm+0x1a/0x30
[  276.448894][T13405] 
[  276.448894][T13405] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  276.456699][T13405]        __mutex_lock+0x1a3/0x1550
[  276.461798][T13405]        elevator_change+0x1b3/0x450
[  276.467090][T13405]        elevator_set_none+0xb5/0x140
[  276.472473][T13405]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  276.478793][T13405]        nbd_start_device+0x17f/0xb10
[  276.484331][T13405]        nbd_genl_connect+0x165b/0x1cf0
[  276.489872][T13405]        genl_family_rcv_msg_doit+0x22a/0x330
[  276.495944][T13405]        genl_rcv_msg+0x61c/0x7a0
[  276.500991][T13405]        netlink_rcv_skb+0x232/0x4b0
[  276.506260][T13405]        genl_rcv+0x28/0x40
[  276.510757][T13405]        netlink_unicast+0x75c/0x8e0
[  276.516032][T13405]        netlink_sendmsg+0x813/0xb40
[  276.521304][T13405]        ____sys_sendmsg+0x972/0x9f0
[  276.526577][T13405]        ___sys_sendmsg+0x2a5/0x360
[  276.531770][T13405]        __x64_sys_sendmsg+0x1bd/0x2a0
[  276.537255][T13405]        do_syscall_64+0x15f/0xf80
[  276.542354][T13405]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.548768][T13405] 
[  276.548768][T13405] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  276.557358][T13405]        blk_alloc_queue+0x546/0x680
[  276.562665][T13405]        __blk_mq_alloc_disk+0x197/0x390
[  276.568377][T13405]        nbd_dev_add+0x499/0xb50
[  276.573319][T13405]        nbd_init+0x168/0x1f0
[  276.578004][T13405]        do_one_initcall+0x250/0x870
[  276.583294][T13405]        do_initcall_level+0x104/0x190
[  276.588769][T13405]        do_initcalls+0x59/0xa0
[  276.593616][T13405]        kernel_init_freeable+0x2a6/0x3e0
[  276.599331][T13405]        kernel_init+0x1d/0x1d0
[  276.604175][T13405]        ret_from_fork+0x514/0xb70
[  276.609273][T13405]        ret_from_fork_asm+0x1a/0x30
[  276.614544][T13405] 
[  276.614544][T13405] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  276.621739][T13405]        __lock_acquire+0x15a5/0x2cf0
[  276.627106][T13405]        lock_acquire+0x106/0x350
[  276.632114][T13405]        fs_reclaim_acquire+0x71/0x100
[  276.637562][T13405]        __kmalloc_cache_noprof+0x40/0x660
[  276.643362][T13405]        get_device_parent+0x255/0x3a0
[  276.648805][T13405]        device_add+0x2e1/0xbb0
[  276.653642][T13405]        wakeup_source_sysfs_add+0x1d3/0x2c0
[  276.659609][T13405]        wakeup_source_register+0x18a/0x380
[  276.665490][T13405]        ep_insert+0xf34/0x1a40
[  276.670336][T13405]        do_epoll_ctl+0x7f4/0xe80
[  276.675354][T13405]        __x64_sys_epoll_ctl+0x165/0x1b0
[  276.680973][T13405]        do_syscall_64+0x15f/0xf80
[  276.686078][T13405]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.692494][T13405] 
[  276.692494][T13405] other info that might help us debug this:
[  276.692494][T13405] 
[  276.702794][T13405] Chain exists of:
[  276.702794][T13405]   fs_reclaim --> cpuhp_state-up --> gdp_mutex
[  276.702794][T13405] 
[  276.714796][T13405]  Possible unsafe locking scenario:
[  276.714796][T13405] 
[  276.722243][T13405]        CPU0                    CPU1
[  276.727598][T13405]        ----                    ----
[  276.732959][T13405]   lock(gdp_mutex);
[  276.736897][T13405]                                lock(cpuhp_state-up);
[  276.743821][T13405]                                lock(gdp_mutex);
[  276.750225][T13405]   lock(fs_reclaim);
[  276.754198][T13405] 
[  276.754198][T13405]  *** DEADLOCK ***
[  276.754198][T13405] 
[  276.762328][T13405] 3 locks held by syz.4.2100/13405:
[  276.767596][T13405]  #0: ffffffff8eaf1e20 (epnested_mutex){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60
[  276.777101][T13405]  #1: ffff88807ae9b060 (&ep->mtx){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60
[  276.786099][T13405]  #2: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[  276.795412][T13405] 
[  276.795412][T13405] stack backtrace:
[  276.801307][T13405] CPU: 0 UID: 0 PID: 13405 Comm: syz.4.2100 Not tainted syzkaller #0 PREEMPT(full) 
[  276.801329][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  276.801338][T13405] Call Trace:
[  276.801348][T13405]  <TASK>
[  276.801355][T13405]  dump_stack_lvl+0xe8/0x150
[  276.801375][T13405]  print_circular_bug+0x2e1/0x300
[  276.801395][T13405]  check_noncircular+0x12e/0x150
[  276.801414][T13405]  __lock_acquire+0x15a5/0x2cf0
[  276.801431][T13405]  ? lockdep_unlock+0x5d/0xd0
[  276.801443][T13405]  ? __lock_acquire+0x146e/0x2cf0
[  276.801461][T13405]  ? __kmalloc_cache_noprof+0x40/0x660
[  276.801479][T13405]  lock_acquire+0x106/0x350
[  276.801492][T13405]  ? __kmalloc_cache_noprof+0x40/0x660
[  276.801515][T13405]  fs_reclaim_acquire+0x71/0x100
[  276.801534][T13405]  ? __kmalloc_cache_noprof+0x40/0x660
[  276.801552][T13405]  __kmalloc_cache_noprof+0x40/0x660
[  276.801570][T13405]  ? get_device_parent+0x255/0x3a0
[  276.801585][T13405]  ? do_raw_spin_unlock+0xf5/0x210
[  276.801605][T13405]  get_device_parent+0x255/0x3a0
[  276.801621][T13405]  device_add+0x2e1/0xbb0
[  276.801634][T13405]  ? device_initialize+0x26a/0x460
[  276.801648][T13405]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  276.801667][T13405]  wakeup_source_register+0x18a/0x380
[  276.801683][T13405]  ep_insert+0xf34/0x1a40
[  276.801704][T13405]  ? __pfx_ep_insert+0x10/0x10
[  276.801725][T13405]  ? ep_loop_check+0x50/0x1b0
[  276.801744][T13405]  do_epoll_ctl+0x7f4/0xe80
[  276.801763][T13405]  __x64_sys_epoll_ctl+0x165/0x1b0
[  276.801782][T13405]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  276.801802][T13405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.801816][T13405]  do_syscall_64+0x15f/0xf80
[  276.801833][T13405]  ? trace_irq_disable+0x3b/0x140
[  276.801853][T13405]  ? clear_bhb_loop+0x40/0x90
[  276.801869][T13405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.801882][T13405] RIP: 0033:0x7fdbe779cdd9
[  276.801897][T13405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.801909][T13405] RSP: 002b:00007fdbe59f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  276.801925][T13405] RAX: ffffffffffffffda RBX: 00007fdbe7a15fa0 RCX: 00007fdbe779cdd9
[  276.801935][T13405] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006
[  276.801943][T13405] RBP: 00007fdbe7832d69 R08: 0000000000000000 R09: 0000000000000000
[  276.801952][T13405] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  276.801961][T13405] R13: 00007fdbe7a16038 R14: 00007fdbe7a15fa0 R15: 00007ffdf78b28d8
[  276.801976][T13405]  </TASK>
[  277.068525][T13404] lo speed is unknown, defaulting to 1000
[  277.192538][T13404] wg1 speed is unknown, defaulting to 1000