last executing test programs:

4m37.713359574s ago: executing program 4 (id=216):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x38, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x39, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3a, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x3b, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374"]}, 0x20}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3c, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3d, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3e, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3f, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x40, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x38, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x39, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3a, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3b, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3c, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3d, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3e, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)

4m37.494690854s ago: executing program 4 (id=218):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000")
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

4m37.109423482s ago: executing program 4 (id=223):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
listen(r0, 0x5)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "040000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "05"}], 0x18}, 0x0)
nanosleep(0x0, 0x0)
recvmsg(r0, 0x0, 0x40)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0)
nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}, 0x40)
recvmsg(r1, 0x0, 0x40)

4m36.751626397s ago: executing program 4 (id=227):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x2}, 0x1c)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getpeername$packet(r6, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x4}]}]}, {0x0, [0x61, 0x5f, 0x61, 0x2e, 0x5e]}}, 0x0, 0x33, 0x0, 0x1, 0xbd5b}, 0x28)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000440)={0x2, 'xfrm0\x00'}, 0x18)

4m36.465234813s ago: executing program 4 (id=230):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3ff}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}})
write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0800080007000010000016000000466f006500660000401190780a010102ac141416940401004e244e20004d9078741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"], 0x73)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0)

4m36.020224928s ago: executing program 4 (id=235):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010000000044000000440000000c0000000400000001000084010000000a0000000300001be446d75efbf0e85de7cf8ad404260004000000054ee10000000001050000002000080007000000040000000000000031f20000060000007b0000000000310959d61d6178de866f7f5131712cd54b445a2151600021468b5c9f618d6227b17be6ec262cd345042e8999ed66337800e6019055dcce72d4139b3c1a686db94a9acef899b41748d075"], 0x0, 0x68}, 0x28)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000051) (async)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000051)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES32=r2, @ANYRES64=0x2710, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES32=r2, @ANYRES64=0x2710, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0)
close(0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
bind(r6, &(0x7f0000000380)=@nl=@unspec, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x7ffe}, {0xffff, 0xffff}, {0x3, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x40080c0)
sendmsg$nl_route_sched(r6, 0x0, 0x40)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
accept4(r8, 0x0, 0x0, 0x0) (async)
r9 = accept4(r8, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r9)
socket(0x10, 0x9, 0xa558) (async)
socket(0x10, 0x9, 0xa558)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r10], 0x108}}], 0x2, 0xc040)
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, 0x0}, 0x4005)

4m20.83699512s ago: executing program 32 (id=235):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010000000044000000440000000c0000000400000001000084010000000a0000000300001be446d75efbf0e85de7cf8ad404260004000000054ee10000000001050000002000080007000000040000000000000031f20000060000007b0000000000310959d61d6178de866f7f5131712cd54b445a2151600021468b5c9f618d6227b17be6ec262cd345042e8999ed66337800e6019055dcce72d4139b3c1a686db94a9acef899b41748d075"], 0x0, 0x68}, 0x28)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000051) (async)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000051)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES32=r2, @ANYRES64=0x2710, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES32=r2, @ANYRES64=0x2710, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0)
close(0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
bind(r6, &(0x7f0000000380)=@nl=@unspec, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x7ffe}, {0xffff, 0xffff}, {0x3, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x40080c0)
sendmsg$nl_route_sched(r6, 0x0, 0x40)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
accept4(r8, 0x0, 0x0, 0x0) (async)
r9 = accept4(r8, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r9)
socket(0x10, 0x9, 0xa558) (async)
socket(0x10, 0x9, 0xa558)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r10], 0x108}}], 0x2, 0xc040)
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, 0x0}, 0x4005)

5.685761799s ago: executing program 0 (id=2566):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r3, r4, 0x0, 0xff7fffff000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000000c0)=""/115, 0x1d, 0x73, 0x0, 0xfffffffc, 0x10000, @value=r4}, 0x28)

4.696204192s ago: executing program 0 (id=2575):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2, 0x1c}], 0x1, 0x0, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)

3.37639552s ago: executing program 2 (id=2586):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4041040}, 0x400c4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
socket$kcm(0x2, 0x2, 0x73)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) (async)
r3 = socket(0x11, 0x2, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0), 0x0) (async)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) (async)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) (async)
sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000051) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000140), 0x4)

3.193490367s ago: executing program 2 (id=2588):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (rerun: 32)
close(r0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

2.867406452s ago: executing program 1 (id=2590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200010029bd7000ffdbdf2500167980", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x880)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2a060400)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRESHEX=0x0, @ANYRES8=r4], 0x144}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080))

2.397164167s ago: executing program 5 (id=2593):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='veth1_vlan\x00', 0x7ea67dd2, 0x7, 0x1})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000000c0)=""/232, &(0x7f00000001c0)=0xe8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x400a005}, 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@hci, &(0x7f00000003c0)=0x80)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0x7, <r4=>0x0}, 0x8)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r4}, 0x4)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000540)={{0x2, 0x4e21, @empty}, {0x1, @local}, 0x8, {0x2, 0x4e20, @empty}, 'caif0\x00'})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x170, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x0, 0x5, 0x4, 0x5, 0x2], 0xfa, 0x6}, {0x4, [0xe, 0x3, 0x6, 0x7, 0x1, 0x2], 0x5, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x48, 0x2245, 0x8, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x8, 0x4, [0xf, 0x19, 0x2f, 0x12, 0x3a, 0x1, 0x38, 0x36, 0x1b, 0x2a, 0x7, 0xf, 0x30, 0x32, 0x25, 0x15], 0x2, 0x4db6d3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000b80)={&(0x7f0000000940), 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x160, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x10a, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x5, 0xc6}, @value=@ver_80211n={0x0, 0x30ae, 0x0, 0x0, 0x0, 0x3}}, 0x1, 0x3, 0x58, @val={0x10, 0x1, 0xbc}, [{0xdd, 0xdf, "bbd19f5467992cefc55b8926af605f8e69d57d03439e9d8e33df9f4e41cf6e6e3274a3458c6b0646ce8a895e3ce928511611e39aa64ac762ce897ed3fa32caad42a2b0b6ad0e742ba2c7f69467515ee2eaa6b50e36188b4ddd18da53b9cdd8ffec57d70198531b4199195da65e9ec78d5519776c9c0c6b9bde4134511dea640a09e1a05bb552784a4ce0bf74424b627755824b1dab1753a85b020f5683c55b9e550df2749850fa00612d7a761eca4676a0aa9bbcbf33b9e21e1db8cddf861be8868ba364755933bc18d797c0ab8bde43151466793f0714bab83e98c412573a"}]}}, @NL80211_ATTR_FRAME={0x30, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_a, @device_b, @from_mac=@device_b, {0x5, 0x3}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x1, 0x1, @void, @void, @void}}}}}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x160}}, 0x40800)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x42, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', <r9=>0x0, 0x2f, 0xe, 0xff, 0x4, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x20, 0xbba, 0x2}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@bridge_setlink={0x68, 0x13, 0x200, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x80, 0x1600}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7fc6}, @IFLA_MTU={0x8, 0x4, 0x5}, @IFLA_PHYS_SWITCH_ID={0x17, 0x24, "89bef1bb93766d494e79bb53a8b91fe23d9bbf"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x40000)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001280)={0x1, 0x1, 0x1000, 0x60, &(0x7f0000001100)="b98a5c4b19d708ba7238feef35ea21c9c85fb81c13783dc7ccfa012e5ab43668d155b5edbe7a097b6412148be07bede7a9f0b5e8a5db620cf4ff4f275233427623dd7fd0bb401efb7c8ef7f2a6d729ff3432fea4535b542439f61811b55cbd7a", 0xc7, 0x0, &(0x7f0000001180)="23f0dcfc9bd79753e5e42758775e2bab1555acd45804a7667b99a593486ae2c4901d38e013afa9e5e0db4982c1f23a9dfb0ea6c3d0a4b245b574bd3cf896070726df7bd0a9fbb2471aa40c2797f0e6a599d004eeb76ebe0c7a50784e12b952aadae867675d973405b17b978a92b090825768199e41630235bc4545bcf160c234df9617b1054ffc3c3dadb8707a7b229fd39856adb130daae7c82b665b1017a633492dd33e929bbcdf6c99a6db57bbef146fc8de32ed5a8c69d7cad0e5e601d1db808e097e59e67"})
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000001300)=0xff, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x200000c3)
sendmsg$nl_route(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@ipv4_newrule={0x2c, 0x20, 0x20, 0x70bd2d, 0x25dfdbfd, {0x2, 0x110, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @loopback}, @FRA_DST={0x8, 0x1, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800)
ioctl$sock_ifreq(r6, 0x8949, &(0x7f0000001600)={'vlan0\x00', @ifru_flags=0x2000})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001640), &(0x7f0000001680)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)=r5}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={&(0x7f00000016c0)='\"', &(0x7f0000001700)=""/123, &(0x7f0000001780)="f2acccf2f7f6c9934db18e7ab29e5cd323ff516a266402ccc3595f672e53224fc8dc964a5e1aea8c3170cb257c8782cd5c93695c38305546c051fd0946bf7357b38389a32449864288319a62e4443706e1fdbfd50e887858ececcdcfdce83cf3062c601412f0d0dbe567df50e7aff8badf", &(0x7f0000001800)="1f07d2c4f3519a44ab0bb06b1ff934ed06c762d5aa89c1b54c45719a451a9f188c49a935fca21cde515d948e74b927e6df1a47849f5327d76c70313ead352abb87c1004483359171d0beb5990777a25518bcfadf7aef4369f524c16d79836be036cc235f730fd67ad460cca7f40b4bd442c25a09291596ebd0083b78bef921ce73082d51c16406d218f01608ff40152d92aac2ed8d5ead1f0d17e64a617313e44c595bd208552c88040850f439e39a1e73cd5934882119efdc7578e6c338852059e8088535936971bd9df1e187c09aeaf886dfcd0aa5655bdb217d1b722be4f5da0705b57999ca9a7e5465009b05de67e679", 0xffffffa8, r10}, 0x38)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x832, r5, 0x1f1a5000)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001a00)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @private=0xa010100}, 0x40, 0x0, 0x0, 0x0, 0x87, 0x0, 0x80000000, 0xae6, 0x80})
r11 = accept$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001ac0)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@local, @in6=@private1}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8)

2.317648058s ago: executing program 0 (id=2594):
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) (rerun: 32)
r2 = accept(r1, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x3, 0x1000, 0x2d, &(0x7f0000000000)="dd09be9c71f6e2d62818b1c47c7ccb484f1b59e3687b9a1a05cd3cc6b830e191a5a7aba08529bb29dfa8c6d605", 0x2, 0x0, &(0x7f0000000080)=':4'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x6, 0xfffffffe}}, 0xe8) (async, rerun: 64)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (rerun: 64)

2.128498033s ago: executing program 2 (id=2595):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "b1a86d7b67175179", "b39570f3519041ed9e596316375bc088", "2a27d4ef", "c9dd14afdffc82ee"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x3000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x7}, "4ad0a0c4fcdae95f", "d2f6de32465bee2f40d3541920f572d9", "69f28d8a", "983ff3687842f5f8"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000000)=""/56, 0x38}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002d00)=""/4110, 0x100e}], 0x1}, 0x5}], 0x2, 0x23, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d0672ff1", 0x4, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xffffffffffffffb3}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0x8, 0x40000215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
close(r9)

1.495051162s ago: executing program 1 (id=2596):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x801, 0x70bd2d, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@local, 0x4e23, 0x0, 0xfffc, 0xbcf8, 0xa, 0x0, 0x80, 0x1, 0x0, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x6c}, @in=@broadcast, {0x1, 0x8, 0x0, 0x76b01af9, 0x27f, 0xa522, 0x7, 0x5c9}, {0x81, 0x7c5bfed9, 0x4db1, 0x8}, {0xa4, 0x100, 0xfffffffb}, 0x70bd26, 0x0, 0x2, 0x3, 0xc, 0x36}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0)

1.481549844s ago: executing program 3 (id=2597):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x82, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3a4f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x54840}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000880)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000cfb6f722992c00000000000000008112a000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90)
r9 = openat$cgroup_int(r8, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f00000000c0)=0x1000f85, 0x64)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x24}}, 0x0)

1.393538544s ago: executing program 5 (id=2598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8905, &(0x7f0000000080)={'netdevsim0\x00', 0x0})
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.263657708s ago: executing program 1 (id=2599):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x1, 0x5, [@local, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, 0x24)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001640)="e6", 0x1}], 0x1}}], 0x1, 0x84)
sendmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="a6af2c5fe1c92b6c87521e577c8f8ab4690409", 0x13}, {0x0}], 0x2, &(0x7f0000001680)=[{0x10, 0x1, 0x9}, {0x18, 0x9cd9ad6347ae6cd8, 0x1, "0cedaebf"}], 0x28}}], 0x1, 0x4044805)

1.162970585s ago: executing program 0 (id=2600):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)="799879b6a55c451c48d709f6d3f615642e0bdd71ff52110d0b0cbc0abaca307dce666de3980c4de0dd9c7f9d4db406488fd78d1d0e0c309b6cd6a82ea10a5b4d8508b61a054acdc3c206c896ff614e3ccc571b9c9cd70d93190aec1d7a4419028024fdaccd3b4965469c325f17739882b49e599fdc2d94b2fb4683e606b95890ca0230f62d4f0e0038fa59366349b00544bbbd865300b7298b2acb93122e975fb95ac119013e9b77c28c77658a4ae2f198fc28eefa3fc6a9cbd0c085ade23c86de1fdbdf554c96bb2795c8552270594c5c1092cf413151c85a668f186aea837d9b63edc27df135b0ae4eae3488287960f8a9601a2ea3aab8751803e17ca44f712a1371402d589e94bbdd41835e78c1ba98aa1add81d06d499b11a6d116b8cb70cc791cd05fb1245edf82d1a09affbdc4f5396fddfd3c0a151a39e63b7b90cf0c995d47f8a2821b7e3312e78edbd9b0946b7761d53aa0972de4173e725915ea05e82b8369e5e5d90ee5be2460cca9711adbd31ccf9bc9e70d52c792c2b1ef8cbc5fb4db4cb7d4eebb0b438971892eb2167ee53214115cb515c7931ea0e855042ed23e64ff12335865e935a9317672143364be3515014a460bead7c3a7495db3f139e739129e2e3e618d9e4992ede7588bb60f097542439689adcdc5a3b89d8df6bc414c8c4b8bcc02ea872dcbbffcace6ad05b0473d6e00adb884da38a0c72e820fb45f5c65f57efae1da642cda0d05e1e8b9f2a5c49cdb0e451964c9518f5d5ce1be099027645c31af0af2b600de3fa278d094d260f220ed1428e13450ef767931e3621dc500db66140d87841edff46bc7aab27eab55605d7adc7605e81a155a903774d813242f20a1d751e4ec57208b54c979868c1dadf0a8a3d270", &(0x7f0000000040), 0x1003, r2}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r2}, 0x38) (async)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xff}, 0x18)

1.089915886s ago: executing program 1 (id=2601):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xef, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x41) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b77b83b03b3326ba7054e90019cb767c64fa0441f8fa0885e50320b495302543c6eee3484cd019a24e1ce0f85e194ca069cee5673396b15a821aa602bd67668dcc291bb8124fb7349e8b5bdb39fac1925f04b33be1e567161ddd9c594cd4e107994e7524368aa7d00b01", 0x6a}, {&(0x7f00000000c0)="8af029258d080dfd1d09fa51afd87a5c8502c3e51c9d871d5ed1b08157d7cef8017e485891aa5e4c9b38b16c5e94e8b196b0e811f3e55b0e46fa12320ebb16c37373680580c98952ed89f9a6a6fac0044f074b91dfe7", 0x56}], 0x2, 0x0, 0x0, 0x8010}, 0x40000) (async, rerun: 32)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x2001) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x2}, 0x10)

1.088361596s ago: executing program 3 (id=2602):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0xe, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1eb980, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xeae}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)
r5 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e2308000e0072d15e04000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

1.071445229s ago: executing program 5 (id=2603):
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000280080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) (fail_nth: 2)

970.874589ms ago: executing program 1 (id=2604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6d0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40440c4}, 0x4000885)

873.073985ms ago: executing program 2 (id=2605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r2=>r1, 0x0, 0x1, 0xedab})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @local, <r3=>0x0}, &(0x7f0000000080)=0xc)
unshare(0x28000600)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x29, 0xde, 0xdc, 0xe, 0x73, @local, @mcast2, 0x7800, 0x40, 0x2, 0x4b9}})

871.777031ms ago: executing program 3 (id=2606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x27)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000500), 0xc, &(0x7f0000001b40)={&(0x7f0000001a00)=ANY=[@ANYBLOB="040100c2", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf2504000000300001800800030002000000080003000500000008000100", @ANYRESDEC=0x0, @ANYBLOB="1400020069703667726574617030000000000000300001800800030002000000080003000100000014000200776c616e31000000000000000000000008000300020000001c0001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018014000200626f6e645f736c6176655f310000000008000300010000000800030001000000140002006970766c616e300000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f30000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100da05cceee2", @ANYRES32=r7, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x20000004)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r3, 0x20, &(0x7f0000001880)={&(0x7f0000000300)=""/66, 0x42, 0x0, &(0x7f0000001780)=""/200, 0xc8}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r10, @ANYRES8=r10, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a010102ac1414aa07070476bc4b4c440c0b01e000000100000000000000000c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
setsockopt$packet_int(r13, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r13, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x200000000000007}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', <r14=>0x0, 0x10, 0x10, 0x4, 0x785, {{0x6, 0x4, 0x3, 0x38, 0x18, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000004300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000cb000000bf09000000000000550901000000008095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005e032000881333bc3e928500000006000000bf910000001d0000b7020000030000008500000084000000b7000000040500009500"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x61, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1ff, 0x4})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000ff489af48600fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0188000063180300140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x34008085}, 0xc080)

610.199237ms ago: executing program 0 (id=2607):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e07000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r3, @ANYBLOB="0600060000000000"], 0x48}, 0x4, 0x700000000000000}, 0x0)

608.134928ms ago: executing program 5 (id=2608):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x1000, @any, 0xfffa}, 0xe)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000e9ff000080"], 0x26}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r4, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000000e00)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, 'E', "dcd654", 0x201, "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"}}}}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002bbd7000fddbdb2501000000000000000b00ac5e35281ffc27d1e645faefced5"], 0x28}, 0x1, 0x0, 0x0, 0xc053}, 0x11) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r6, &(0x7f0000000a00)=[{{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000700)=""/88, 0x58}], 0x3}, 0x7ff}, {{&(0x7f00000007c0)=@phonet, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/249, 0xf9}], 0x1, &(0x7f0000000980)=""/70, 0x46}, 0x100}], 0x2, 0x0, &(0x7f0000000a80))
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041)

504.698282ms ago: executing program 2 (id=2609):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={<r3=>0x0, 0x7, 0x100, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000740)={{r0}, r2, 0x10, @inherit={0x88, &(0x7f0000000280)={0x1, 0x8, 0x9, 0x954, {0x30, 0x3, 0x2, 0x9, 0x6c}, [0x0, 0x3, 0x7fffffffffffffff, 0x4, 0x9, 0x3, 0x9, 0x8000]}}, @devid=r3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r4, 0x5c5dc000)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001740)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000001780)={0x1d, r7}, 0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @empty}], 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x6c, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
r11 = accept4$packet(r0, &(0x7f0000001980), &(0x7f00000019c0)=0x14, 0x800)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r9)
sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x48, r12, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x4}, {0x40, 0x4}, {0x3, 0x3}, {0x8f, 0x1}, {0x0, 0x2}, {0x10, 0x4}, {0x80, 0x3}, {0x1, 0x7}, {0x9a, 0x1}, {0x10, 0x4}, {0x9, 0x1}, {0x8, 0x4}, {0xe, 0x7}], "f56a92ac81130588"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x15)
ioctl$FICLONE(r1, 0x40049409, r13)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@o_path={&(0x7f0000001b80)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
ioctl$XFS_IOC_DIOINFO(r14, 0x800c581e, &(0x7f0000001c00))
ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000001c40)={r11})
setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000001c80)=0x1946, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001cc0)={'wg0\x00', <r15=>0x0})
bind$packet(r11, &(0x7f0000001d00)={0x11, 0x7, r15, 0x1, 0xfd, 0x6, @broadcast}, 0x14)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4)

441.799629ms ago: executing program 0 (id=2610):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x89fb, &(0x7f0000000040)={'syzkaller1\x00', @random="07000000e16f"})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x100005}, {0x6, 0xfd}]})
write$ppp(r4, &(0x7f0000000280)="1e08bc", 0x3)
r5 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r7, 0x9)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r8, &(0x7f00000000c0)="11e119c84e2e4a6d3423c02b48965e0355749ea9fed71740966497ccd78698b2fb6da2d1b28ff745d98ef23ef7", 0x2d, 0xc1, &(0x7f0000000280)={0x2, 0x4e26, @loopback}, 0x10)
readv(r6, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000043c0)=""/4098, 0x1002}], 0x2)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x50012)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)

431.320251ms ago: executing program 1 (id=2611):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x30}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000203030a8000000000000000010000020800044000000020080003400000000709000200000100000200000008000340000000060900020000000000020000000800010001"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4084804)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001180))
close(0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
close(0x3)
syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611cc82500303c01fe80000000000000000000000000000bfe8000000000000000000000000000aa2c04000000000000c910fec000000000000000000000000000aa"], 0x0)

429.927357ms ago: executing program 5 (id=2612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x3, 0x8, {{0x26, 0x4, 0x2, 0x19, 0x98, 0x64, 0x0, 0xa, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x40, 0x3, 0x6, [{@local, 0x3}, {@rand_addr=0x64010100, 0x8}, {@multicast1, 0x1}, {@local, 0x2}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0xf, [{@local, 0xae}]}, @timestamp_prespec={0x44, 0xc, 0x2f, 0x3, 0xd, [{@empty, 0xfffffff8}]}, @rr={0x7, 0xf, 0x6b, [@remote, @rand_addr=0x64010102, @private=0xa010101]}, @rr={0x7, 0x23, 0xf9, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @generic={0x88, 0x5, "3227bd"}]}}}}})
r1 = gettid()
r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00')
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000005a00020028bd7000ffdbdf250008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

380.2788ms ago: executing program 3 (id=2613):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x2301, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 32)
read$rfkill(r4, &(0x7f0000000240), 0x8) (async, rerun: 32)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8020000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf25090000009c00018014000280080004000b00000008000100010000000d0001007564703a73797a31000000002400028008000200030000000800030006000000080003000400000008000300060000000c00028008000100010000000d0001007564703a73797a31000000002c0004001400010002004e23ac1e000100000000000000001400020002004e22ac1e0001000000000000000008000300001000000c000980080002000e000000640007800c00030001000000000000000c00030000000000000000000c000400060000000000000008000100060000000c00040087000000000000000c000300915500000000000008000100000200000c000400000000000000000008000200000400000c0003800800010008000000200001800b00010069623a7767320000100001006574683a70696d7265673000840004800900010073797a30000000000900010073797a310000000014000780080002000200000008000300010000003400078008000400ff0f0000080002000b000000080003000800000085eac1ebbf4e2c0df1cc4578a7674a04080001000f00000008000400ffffffff080001000e0000000900010073797a31000000001300010062726f6164636173742d6c696e6b0000a40004800900010073797a31000000000900010073797a31000000001300010062726f6164636173742d6c696e6b00001c0007800800010019000000080002000100000008000200090000000900010073797a30000000002c0007800800020000000000080004000400000008000200ac000000080002000014000008000100060000001300010062726f6164636173742d6c696e6b00000900010073797a310000000044000980080002000c000000080002000400000008000200f7ffffff0800020005000000080002000800000008000100e203000008000100000100000800020005000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x44050}, 0x40001) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r5=>0x0}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d6163736563000020000280080005000d0000000c0001000001000000000000050003000800000008000500", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', <r9=>r5, 0x80, 0x8000, 0x65d, 0x80000001, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x86, 0x5, "2ca799"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x200, 0x1070bd2c, 0x25dedbff, {0x0, 0x0, 0x0, r9, 0x5e521, 0x41025}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40001)

288.561937ms ago: executing program 5 (id=2614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000680)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_sfeatures={0x33}})
openat$tun(0xffffffffffffff9c, 0x0, 0x10240, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000500000000000000000000850000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0xfff7}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = socket$kcm(0x11, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
socket(0x11, 0x80001, 0x8)

219.043147ms ago: executing program 2 (id=2615):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x8, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004001)
bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xf80, 0x0, 0x400, 0x2000, 0x1, 0xd, '\x00', 0x0, r2, 0x2, 0x4, 0x5, 0xa}, 0x50)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1411, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c040}, 0x1)
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={<r4=>0x0, 0x7fff}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000003c0)={r4, 0x101}, 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r6, &(0x7f0000000900)={&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/84, 0x54}], 0x2, &(0x7f0000000800)=""/211, 0xd3}, 0x2001)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd7b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd6d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000001)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa0000800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x80)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', r2, 0x4000, r9}, 0x18)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r3)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2420200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa8, r10, 0x908, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1923}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x11}, 0x1)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000e00), 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000f40), &(0x7f0000000f80)=0x4)
socket$kcm(0x29, 0x0, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r11, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/76, 0x4c}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x3, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x40)
getsockopt$SO_J1939_SEND_PRIO(r12, 0x6b, 0x3, &(0x7f0000003180), &(0x7f00000031c0)=0x4)

141.900342ms ago: executing program 3 (id=2616):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000800)={0x0, 0xfffffefd, 0xffffff80, 0x6, 0x0, 0x6, 0x8, 0xf43b, {<r1=>0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x81, 0x100, 0x9c5, 0x8, 0xa}}, &(0x7f00000008c0)=0xb0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000900)=@assoc_id=r1, 0x4)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@isdn={0x22, 0x7, 0x5, 0x2, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="0ed644e52d6d71aaefc130315321a65fe5eda09bfaeb64b8e48b713b0e9d9899d2497285419f250cfe8cf061231de9241365b45b82086d0d9f262ea8da14d63a227d930ba8", 0x45}, {&(0x7f0000000100)="b89f7e48ce918c2d17aee03428ffeee80c992ce3d80f6f393668521cb1ffaeb3c36e49852b289711c1cb96c775d6722af1b44bf908abed5b275a6ad8cc4c126412db1495486be7500e1f8178b85ee177c871eaaf638462d70726fd9c5fd0cd2becf20c9deefddf8d2a89dabd7bcba5845512cbc63228adb20f219ec83bd708d355ba3d52df7f3be1672cb876e7cab0e3bb051fe332bc65207b3fe9e0154f32f9bcf9551926ac4e913469cf130094dc3c55493a8ae34dbf76553c4767bd0b3451bf910f65", 0xc4}, {&(0x7f0000000200)="b047002b9c5c8dfc4a872130c2378a4d372ee8529726d99bd5b3fb39b56ec8a48cfc4bce632e75cec120925160e281ee726339f4fe060c3765cf6dcc5e613588cd93fc5bc9b0ffbf4c2b5eb04861a64b0a248d1368b18b83df5ae26ca234ad82b12528", 0x63}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/1265], 0x4d0}, 0x2814)

0s ago: executing program 3 (id=2617):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8aa0, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x1, 0x2, 0x4000, 0xffffffff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @generic={0xb, 0x2, 0x0, 0xfff7, 0x940c}, @alu={0x7, 0x0, 0x9, 0x5, 0xb, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x914}}, @generic={0x9, 0x8, 0x2, 0x8001, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x675, 0x0, 0x0, 0x0, 0x1400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

kernel console output (not intermixed with test programs):

.878510][T10174] tipc: Resetting bearer <eth:syzkaller0>
[  220.887784][T10194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.913057][T10173] tipc: Resetting bearer <eth:syzkaller0>
[  221.057457][T10173] tipc: Disabling bearer <eth:syzkaller0>
[  221.112231][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1103'.
[  221.125423][ T5839] tipc: Node number set to 3933173950
[  221.815923][T10245] bond7: (slave 
): Releasing backup interface
[  221.846382][T10245] bridge_slave_0: left allmulticast mode
[  221.863947][T10245] bridge_slave_0: left promiscuous mode
[  221.881164][T10245] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.914783][T10245] vlan2: left promiscuous mode
[  221.935236][T10245] geneve0: left promiscuous mode
[  221.977829][T10245] bond0: (slave bond_slave_0): Releasing backup interface
[  222.036600][T10245] bond0: (slave bond_slave_1): Releasing backup interface
[  222.073328][T10245] team0: Port device team_slave_0 removed
[  222.085263][T10245] team0: Port device team_slave_1 removed
[  222.101291][T10245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.118657][T10245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.148860][T10245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  222.206268][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'.
[  222.602404][T10275] nbd: couldn't find device at index 65536
[  222.749907][T10281] C: renamed from veth1_to_team (while UP)
[  222.790662][T10281] netlink: 'syz.0.1119': attribute type 2 has an invalid length.
[  222.850574][T10281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1119'.
[  222.905899][T10281] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  223.012877][T10291] netlink: 'syz.3.1122': attribute type 2 has an invalid length.
[  223.212596][T10291] : entered promiscuous mode
[  223.468094][T10306] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1128'.
[  223.508377][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'.
[  223.568931][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1128'.
[  223.580128][T10310] netlink: 'syz.3.1128': attribute type 1 has an invalid length.
[  223.622542][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  223.633717][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'.
[  223.663101][T10316] netlink: 'syz.0.1130': attribute type 30 has an invalid length.
[  223.676012][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'.
[  223.701081][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'.
[  224.209026][T10330] bond9 (unregistering): Released all slaves
[  224.391407][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'.
[  224.406956][T10341] netlink: 'syz.3.1135': attribute type 14 has an invalid length.
[  224.881659][T10354] vcan0: tx drop: invalid da for name 0x0000000000000002
[  224.939612][T10357] 8021q: VLANs not supported on ipvlan1
[  225.005445][T10363] pim6reg1: entered allmulticast mode
[  225.339617][T10385] netlink: 'syz.3.1145': attribute type 1 has an invalid length.
[  225.703619][T10385] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  225.862766][T10406] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  226.062765][T10419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1151'.
[  226.330387][T10425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.475385][T10424] tipc: Disabling bearer <eth:syzkaller0>
[  226.954588][T10461] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1161'.
[  227.732180][T10502] netlink: 'syz.5.1171': attribute type 4 has an invalid length.
[  227.785402][T10508] netlink: 'syz.5.1171': attribute type 4 has an invalid length.
[  227.975806][T10510] syzkaller0: entered promiscuous mode
[  228.003340][T10510] syzkaller0: entered allmulticast mode
[  228.053245][T10510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.478758][T10541] __nla_validate_parse: 1 callbacks suppressed
[  228.478778][T10541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1184'.
[  228.499325][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  228.521499][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'.
[  228.545263][T10541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1184'.
[  228.546233][T10546] netlink: 'syz.5.1186': attribute type 12 has an invalid length.
[  228.578969][T10541] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1184'.
[  228.610545][T10541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'.
[  229.114335][T10570] lo: entered allmulticast mode
[  229.155206][T10572] dvmrp8: entered allmulticast mode
[  229.181524][T10563] lo: left allmulticast mode
[  229.392456][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'.
[  229.417469][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'.
[  229.439001][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'.
[  229.466559][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'.
[  229.750591][T10604] netlink: 'syz.2.1200': attribute type 22 has an invalid length.
[  229.865744][T10613] syzkaller0: left promiscuous mode
[  229.886306][T10613] syzkaller0: left allmulticast mode
[  230.236093][T10629] netlink: 'syz.3.1207': attribute type 7 has an invalid length.
[  230.265737][T10629] netlink: 'syz.3.1207': attribute type 8 has an invalid length.
[  230.404722][T10629] syz_tun: entered promiscuous mode
[  230.417924][T10629] syz_tun: left promiscuous mode
[  230.486293][T10632] bond0: (slave bond_slave_0): Releasing backup interface
[  230.582160][T10632] bond_slave_0: entered promiscuous mode
[  230.609839][T10632] bond_slave_0: entered allmulticast mode
[  231.053359][T10667] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  231.112874][T10667] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  231.402762][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.437827][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.673415][T10680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.835307][T10696] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  232.148067][T10696] bond12 (unregistering): Released all slaves
[  232.383363][T10715] netlink: 'syz.1.1222': attribute type 3 has an invalid length.
[  232.616451][T10729] syzkaller1: entered allmulticast mode
[  233.022101][T10759] netlink: 'syz.0.1232': attribute type 4 has an invalid length.
[  233.076039][T10764] netlink: 'syz.0.1232': attribute type 4 has an invalid length.
[  233.247177][T10773] ieee802154 phy0 wpan0: encryption failed: -22
[  233.336087][T10759] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.344702][T10759] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.559983][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.582245][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.880645][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  233.958420][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.990745][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.033205][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.099743][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.354690][T10792] netlink: 'syz.0.1240': attribute type 10 has an invalid length.
[  234.400761][T10792] team0 (unregistering): Port device team_slave_0 removed
[  234.456323][T10792] team0 (unregistering): Port device 
7
6žÿ removed
[  234.933399][T10818] __nla_validate_parse: 18 callbacks suppressed
[  234.933420][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'.
[  235.213308][T10824] netlink: 'syz.2.1250': attribute type 83 has an invalid length.
[  235.543218][T10843] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  236.044472][T10865] netlink: 'syz.3.1260': attribute type 3 has an invalid length.
[  236.541627][T10892] block nbd0: Unsupported socket: should be TCP or UNIX.
[  236.739618][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'.
[  236.996268][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1272'.
[  237.033934][T10911] netlink: 'syz.1.1270': attribute type 12 has an invalid length.
[  237.072534][T10911] bond0: option primary_reselect: invalid value (109)
[  237.246616][T10927] syzkaller0: entered promiscuous mode
[  237.277185][T10927] syzkaller0: entered allmulticast mode
[  237.321010][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'.
[  237.359360][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'.
[  237.993462][T10976] syzkaller1: entered promiscuous mode
[  237.999669][T10976] syzkaller1: entered allmulticast mode
[  240.432311][    C0] vcan0: j1939_tp_rxtimer: 0xffff888058852000: rx timeout, send abort
[  240.443244][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058852000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  240.458631][T10950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  240.698793][T10995] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1290'.
[  240.851871][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'.
[  241.026277][T11009] sock: sock_timestamping_bind_phc: sock not bind to device
[  241.060067][T11009] syzkaller0: entered promiscuous mode
[  241.066275][T11009] syzkaller0: entered allmulticast mode
[  241.122799][T11013] netlink: 'syz.0.1297': attribute type 39 has an invalid length.
[  241.149745][T11014] netlink: 'syz.0.1297': attribute type 39 has an invalid length.
[  241.419057][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1301'.
[  241.438781][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1301'.
[  241.566324][T11030] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1302'.
[  241.816865][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1306'.
[  241.853864][T11043] "syz.0.1307" (11043) uses obsolete ecb(arc4) skcipher
[  241.962426][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'.
[  242.078590][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1307'.
[  242.255314][T11054] bridge0: entered allmulticast mode
[  242.306712][T11067] netlink: 'syz.1.1312': attribute type 1 has an invalid length.
[  242.335644][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  242.359105][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'.
[  242.625822][T11075] ieee802154 phy0 wpan0: encryption failed: -22
[  243.306472][T11107] netlink: 'syz.5.1326': attribute type 1 has an invalid length.
[  243.802208][T11140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.012125][T11148] netlink: 'syz.5.1336': attribute type 12 has an invalid length.
[  244.064143][T11154] syz_tun: entered allmulticast mode
[  244.084799][T11152] syzkaller1: entered allmulticast mode
[  244.136885][T11150] syz_tun: left allmulticast mode
[  244.233066][T11161] syzkaller0: entered promiscuous mode
[  244.248363][T11161] syzkaller0: entered allmulticast mode
[  244.445395][T11165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.547881][T11173] netlink: 'syz.3.1341': attribute type 1 has an invalid length.
[  244.782390][T11181] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.811467][T11177] netlink: 'syz.0.1342': attribute type 13 has an invalid length.
[  244.849132][T11177] netlink: 'syz.0.1342': attribute type 17 has an invalid length.
[  245.224492][T11177] bridge0: left allmulticast mode
[  245.246482][T11177] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.277549][T11177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.523676][T11177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.539046][T11177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.562169][T11177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  245.577374][T11177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.607679][T11177] veth1_vlan: left promiscuous mode
[  245.621433][T11177] veth0_vlan: left promiscuous mode
[  245.644808][T11177] veth0_vlan: entered promiscuous mode
[  245.667628][T11177] veth1_vlan: entered promiscuous mode
[  245.696222][T11177] veth1_macvtap: left promiscuous mode
[  245.703849][T11177] veth0_macvtap: left promiscuous mode
[  245.711287][T11177] veth0_macvtap: entered promiscuous mode
[  245.734882][T11177] veth1_macvtap: entered promiscuous mode
[  245.760851][T11177] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  245.781537][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  245.805394][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  245.823096][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  245.839699][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  245.864354][T11177] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  245.877954][T11177] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.902675][T11177] bond2: left promiscuous mode
[  245.909083][T11177] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.967542][T11177] 8021q: adding VLAN 0 to HW filter on device bond3
[  246.050842][T11177] 8021q: adding VLAN 0 to HW filter on device bond4
[  246.069511][T11177] bond5: left promiscuous mode
[  246.074660][T11177] bond5: left allmulticast mode
[  246.081939][T11177] 8021q: adding VLAN 0 to HW filter on device bond5
[  246.103094][T11177] syzkaller0: left promiscuous mode
[  246.109593][T11177] syzkaller0: left allmulticast mode
[  246.116814][   T35] bond6: (slave batadv0): link status up again after 0 ms
[  246.123603][T11177] 8021q: adding VLAN 0 to HW filter on device bond6
[  246.141323][T11177] 8021q: adding VLAN 0 to HW filter on device bond7
[  246.148422][ T1175] bond6: (slave batadv0): link status up again after 0 ms
[  246.157630][T11220] __nla_validate_parse: 13 callbacks suppressed
[  246.157650][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  246.178403][   T35] bond6: (slave batadv0): link status up again after 0 ms
[  246.199139][   T12] bond6: (slave batadv0): link status up again after 0 ms
[  246.214275][T11177] 8021q: adding VLAN 0 to HW filter on device bond8
[  246.228363][   T12] bond6: (slave batadv0): link status up again after 0 ms
[  246.248475][ T1175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.268443][ T1175] bond6: (slave batadv0): link status up again after 0 ms
[  246.276233][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.283517][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.299684][ T1175] bond6: (slave batadv0): link status up again after 0 ms
[  246.323159][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.330432][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.343955][ T1175] bond6: (slave batadv0): link status up again after 0 ms
[  246.378577][   T35] bond6: (slave batadv0): link status up again after 0 ms
[  246.399635][T11223] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1352'.
[  246.421957][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.434028][ T1014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.458728][   T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.619236][T11227] netlink: 'syz.5.1355': attribute type 1 has an invalid length.
[  246.674701][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1355'.
[  246.704182][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1355'.
[  246.742310][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'.
[  246.761030][T11235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.782828][T11231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1353'.
[  246.989188][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1357'.
[  247.458040][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'.
[  247.556880][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1363'.
[  247.987124][T11282] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  248.016309][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'.
[  248.088025][T11285] netlink: 'syz.1.1368': attribute type 32 has an invalid length.
[  248.274894][T11285] bond12: option coupled_control: invalid value (12)
[  248.285478][T11285] bond12 (unregistering): Released all slaves
[  248.911473][T11321] syzkaller0: entered promiscuous mode
[  248.937882][T11321] syzkaller0: entered allmulticast mode
[  249.284557][T11342] netlink: 'syz.3.1381': attribute type 1 has an invalid length.
[  249.377713][T11346] netlink: 'syz.1.1382': attribute type 29 has an invalid length.
[  249.468346][   T47] net_ratelimit: 23 callbacks suppressed
[  249.468370][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  249.517176][T11352] netlink: 'syz.3.1384': attribute type 4 has an invalid length.
[  249.527542][T11350] netlink: 'syz.5.1383': attribute type 1 has an invalid length.
[  249.717985][T11350] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.818942][T11357] veth3: entered allmulticast mode
[  249.835996][T11357] bond1: (slave veth3): Enslaving as an active interface with a down link
[  249.861902][T11359] bond1: (slave veth0_to_bond): making interface the new active one
[  249.871909][T11359] veth0_to_bond: entered promiscuous mode
[  249.882637][T11359] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  249.909039][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  249.936295][ T5630] Bluetooth: hci5: link tx timeout
[  249.944044][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  249.958381][ T5630] Bluetooth: hci5: link tx timeout
[  249.965041][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.981113][ T5630] Bluetooth: hci5: link tx timeout
[  249.986322][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  249.994289][ T5630] Bluetooth: hci5: link tx timeout
[  249.999617][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.040441][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  250.095412][ T5630] Bluetooth: hci5: link tx timeout
[  250.101158][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  250.109286][ T5630] Bluetooth: hci5: link tx timeout
[  250.114747][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.150426][ T5630] Bluetooth: hci5: link tx timeout
[  250.155652][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  250.163446][ T5630] Bluetooth: hci5: link tx timeout
[  250.170176][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.192240][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  250.341490][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  250.478484][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  250.490115][ T5630] Bluetooth: hci5: link tx timeout
[  250.495361][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  250.503203][ T5630] Bluetooth: hci5: link tx timeout
[  250.508399][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.524716][T11381] TC_ACT_REPEAT abuse ?
[  250.610095][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  250.673174][ T5630] Bluetooth: hci5: link tx timeout
[  250.678438][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  250.686125][ T5630] Bluetooth: hci5: link tx timeout
[  250.692126][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.748358][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  250.792185][T11405] netlink: 'syz.1.1394': attribute type 1 has an invalid length.
[  250.908538][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  251.183205][T11424] 8021q: VLANs not supported on syzkaller0
[  251.203067][T11424] syzkaller0: left promiscuous mode
[  251.225283][T11424] syzkaller0: left allmulticast mode
[  251.413883][T11437] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  251.519051][T11442] Cannot find map_set index 0 as target
[  251.731896][T11449] __nla_validate_parse: 14 callbacks suppressed
[  251.731916][T11449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1405'.
[  251.774460][ T5630] Bluetooth: hci5: link tx timeout
[  251.780266][ T5630] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  251.789802][ T5630] Bluetooth: hci5: link tx timeout
[  251.795198][ T5630] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  252.022699][ T5630] Bluetooth: hci5: command 0x0406 tx timeout
[  252.499999][T11468] netlink: 'syz.5.1407': attribute type 1 has an invalid length.
[  252.569223][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1407'.
[  252.611385][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1407'.
[  253.408741][T11508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1417'.
[  253.507137][T11508] syzkaller0: entered promiscuous mode
[  253.521563][T11508] syzkaller0: entered allmulticast mode
[  253.882059][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'.
[  253.895501][T11530] netlink: 'syz.0.1421': attribute type 2 has an invalid length.
[  253.925778][T11530] ´: entered promiscuous mode
[  254.112734][T11538] netlink: 'syz.3.1422': attribute type 1 has an invalid length.
[  254.163415][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'.
[  254.203955][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'.
[  254.212336][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[  254.253530][ T5630] Bluetooth: hci5: command 0x0406 tx timeout
[  254.538684][   T12] net_ratelimit: 27 callbacks suppressed
[  254.538705][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  254.553634][T11554] netlink: 'syz.5.1425': attribute type 11 has an invalid length.
[  254.611944][T11554] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1425'.
[  254.708847][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  254.839293][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  254.988809][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  255.120518][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  255.589694][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  255.773576][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  255.780141][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  255.899485][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  256.066127][T11606] netlink: 'syz.0.1437': attribute type 1 has an invalid length.
[  256.101239][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1436'.
[  256.235103][T11610] sit0: entered promiscuous mode
[  256.433131][T11610] netlink: 'syz.3.1436': attribute type 1 has an invalid length.
[  256.460679][T11623] netlink: 'syz.5.1441': attribute type 1 has an invalid length.
[  256.639107][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  256.780461][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  256.883831][T11633] netdevsim netdevsim3: Direct firmware load for .® failed with error -2
[  256.927014][T11633] netdevsim netdevsim3: Falling back to sysfs fallback for: .®
[  257.040273][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  257.307278][T11643] __nla_validate_parse: 3 callbacks suppressed
[  257.307298][T11643] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1445'.
[  257.381459][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'.
[  257.403413][T11644] netlink: 'syz.2.1445': attribute type 30 has an invalid length.
[  257.554491][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'.
[  257.592728][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'.
[  258.530454][T11685] netlink: 'syz.0.1450': attribute type 1 has an invalid length.
[  258.542101][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'.
[  258.553446][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'.
[  258.614377][T11656] macvlan0: entered allmulticast mode
[  258.646226][T11656] gretap0: entered allmulticast mode
[  258.937446][T11692] netlink: 'syz.5.1452': attribute type 2 has an invalid length.
[  258.990110][T11692] netlink: 'syz.5.1452': attribute type 5 has an invalid length.
[  259.027083][T11701] sctp: [Deprecated]: syz.2.1455 (pid 11701) Use of int in maxseg socket option.
[  259.027083][T11701] Use struct sctp_assoc_value instead
[  259.055024][T11698] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  259.083456][T11698] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  259.120635][T11698] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  259.291024][T11698] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  259.356218][T11698] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  259.570522][   T35] net_ratelimit: 11 callbacks suppressed
[  259.570544][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  259.728671][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  259.766242][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'.
[  259.807849][T11741] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  259.820151][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'.
[  259.857189][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'.
[  259.875625][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  260.020132][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  260.097175][T11748] netlink: 'syz.3.1465': attribute type 1 has an invalid length.
[  260.240933][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'.
[  260.276065][T11748] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.299700][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  260.337324][T11757] bond5: entered promiscuous mode
[  260.386627][T11748] bond5: (slave dummy0): making interface the new active one
[  260.423246][T11748] dummy0: entered promiscuous mode
[  260.451695][T11748] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  260.487698][T11766] netlink: 'syz.1.1471': attribute type 1 has an invalid length.
[  260.503218][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  260.576974][T11766] bond12: entered promiscuous mode
[  260.585999][T11766] 8021q: adding VLAN 0 to HW filter on device bond12
[  260.640702][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  260.725079][T11772] 8021q: adding VLAN 0 to HW filter on device bond12
[  260.746362][T11772] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address
[  260.757305][T11772] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  260.779439][T11772] bond12: (slave xfrm1): making interface the new active one
[  260.787075][T11772] xfrm1: entered promiscuous mode
[  260.798606][T11772] bond12: (slave xfrm1): Enslaving as an active interface with an up link
[  260.855530][T11783] netlink: 'syz.3.1476': attribute type 6 has an invalid length.
[  260.969180][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  261.098766][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  261.137847][   T12] veth0_to_bond: left promiscuous mode
[  261.229756][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  261.459987][T11811] syzkaller0: left promiscuous mode
[  261.467361][T11811] syzkaller0: left allmulticast mode
[  261.549843][T11814] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  261.824341][T11825] netlink: 'syz.3.1488': attribute type 1 has an invalid length.
[  261.869578][T11825] 8021q: adding VLAN 0 to HW filter on device bond6
[  262.540418][T11864] __nla_validate_parse: 1 callbacks suppressed
[  262.540444][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'.
[  262.881322][T11879] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  262.989620][T11879] 8021q: adding VLAN 0 to HW filter on device bond13
[  263.317722][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  263.554029][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'.
[  263.573506][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'.
[  263.638270][T11919] dvmrp1: tun_chr_ioctl cmd 1074025677
[  263.644116][T11919] dvmrp1: linktype set to 776
[  263.857816][T11929] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1514'.
[  263.891075][T11929] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  264.060581][T11936] ip6gretap0: entered promiscuous mode
[  264.316502][T11952] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  264.491109][T11952] 8021q: adding VLAN 0 to HW filter on device bond8
[  264.556638][T11960] nbd2: detected capacity change from 0 to 63
[  264.557876][T11962] netlink: 'syz.3.1523': attribute type 32 has an invalid length.
[  264.599346][ T5628] block nbd2: Receive control failed (result -32)
[  264.610580][ T1610] block nbd2: Dead connection, failed to find a fallback
[  264.622357][ T1610] block nbd2: shutting down sockets
[  264.630494][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.640992][ T1165] net_ratelimit: 25 callbacks suppressed
[  264.641012][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  264.654341][ T1610] Buffer I/O error on dev nbd2, logical block 0, async page read
[  264.666268][ T1610] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  264.675929][ T1610] Buffer I/O error on dev nbd2, logical block 1, async page read
[  264.690259][ T1610] Buffer I/O error on dev nbd2, logical block 2, async page read
[  264.699125][ T1610] Buffer I/O error on dev nbd2, logical block 3, async page read
[  264.713972][ T1636] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.725698][ T1636] Buffer I/O error on dev nbd2, logical block 0, async page read
[  264.734044][ T1636] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.746611][ T1636] Buffer I/O error on dev nbd2, logical block 1, async page read
[  264.754773][ T1636] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.764559][ T1636] Buffer I/O error on dev nbd2, logical block 2, async page read
[  264.773360][ T1636] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.784372][ T1636] Buffer I/O error on dev nbd2, logical block 3, async page read
[  264.792769][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.802750][ T1610] Buffer I/O error on dev nbd2, logical block 0, async page read
[  264.814679][ T1610] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.824459][ T1610] Buffer I/O error on dev nbd2, logical block 1, async page read
[  264.834465][ T1610] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.844297][ T1610] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  264.854964][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  264.865739][ T7496] ldm_validate_partition_table(): Disk read failed.
[  264.927624][ T7496] Dev nbd2: unable to read RDB block 0
[  264.972912][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  264.983763][ T7496]  nbd2: unable to read partition table
[  264.995338][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'.
[  265.081827][ T7496] ldm_validate_partition_table(): Disk read failed.
[  265.124406][ T7496] Dev nbd2: unable to read RDB block 0
[  265.147135][ T7496]  nbd2: unable to read partition table
[  265.254648][T11984] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.309400][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  265.512285][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  265.657509][T12006] netlink: 'syz.5.1531': attribute type 1 has an invalid length.
[  265.672591][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  265.773684][T12006] 8021q: adding VLAN 0 to HW filter on device bond3
[  265.833861][T12006] netlink: 'syz.5.1531': attribute type 1 has an invalid length.
[  265.859685][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  265.876260][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'.
[  265.880416][T12006] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1531'.
[  265.916107][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'.
[  266.012050][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  266.288497][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  266.419969][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  266.552931][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'.
[  267.460739][T12069] netlink: 'syz.3.1548': attribute type 4 has an invalid length.
[  267.500051][T12069] netlink: 'syz.3.1548': attribute type 1 has an invalid length.
[  267.554241][T12069] netlink: 'syz.3.1548': attribute type 2 has an invalid length.
[  267.626743][T12069] __nla_validate_parse: 5 callbacks suppressed
[  267.626777][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'.
[  267.703567][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1550'.
[  268.456283][T12113] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'.
[  269.698744][ T1156] net_ratelimit: 23 callbacks suppressed
[  269.698766][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  269.839098][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  269.978348][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  270.008466][T12177] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003
[  270.098573][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  270.218793][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  270.329030][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1580'.
[  270.347522][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  270.470140][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  270.528680][T12200] netlink: 'syz.1.1583': attribute type 1 has an invalid length.
[  270.616669][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'.
[  270.713877][T12200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  270.808718][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  270.843727][T12214] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.872904][T12214] syzkaller0: entered promiscuous mode
[  270.889259][T12214] syzkaller0: entered allmulticast mode
[  271.020136][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  271.284286][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'.
[  272.016761][T12255] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1598'.
[  272.647364][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'.
[  272.712646][T12279] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.743790][T12279] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.978775][T12279] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.020450][T12279] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.068492][T12257] syzkaller0: entered promiscuous mode
[  273.084350][T12257] syzkaller0: entered allmulticast mode
[  273.134185][T12279] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.149895][T12279] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.192480][T12297] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  273.210323][T12297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1613'.
[  273.254838][T12279] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.287467][T12279] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.433834][T12292] No such timeout policy "syz1"
[  273.742518][   T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.770904][   T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.943441][ T1156] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.971111][ T1156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.158010][T12318] netlink: 'syz.0.1617': attribute type 2 has an invalid length.
[  274.179917][T12325] netlink: 'syz.3.1620': attribute type 49 has an invalid length.
[  274.332697][ T1014] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.359083][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e68400: rx timeout, send abort
[  274.362071][ T1014] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.412854][ T1014] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.443648][ T1014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.768273][   T12] net_ratelimit: 43 callbacks suppressed
[  274.768294][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  274.793342][T12349] netlink: 'syz.1.1625': attribute type 3 has an invalid length.
[  274.859201][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e6a000: rx timeout, send abort
[  274.867685][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e68400: abort rx timeout. Force session deactivation
[  274.888999][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  274.966132][T12354] netlink: 'syz.3.1626': attribute type 1 has an invalid length.
[  275.056348][T12354] 8021q: adding VLAN 0 to HW filter on device bond7
[  275.075039][T12354] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  275.092506][T12354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1626'.
[  275.277952][T12340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  275.367626][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e6a000: abort rx timeout. Force session deactivation
[  275.390812][T12356] bond7: (slave veth3): Enslaving as an active interface with a down link
[  275.468767][T12354] bond5: (slave dummy0): Releasing active interface
[  275.543745][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'.
[  275.659654][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  275.791193][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  275.929275][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  275.955865][T12377] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  276.058345][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  276.153783][   T29] audit: type=1804 audit(1785767946.014:5): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1637" name="/newroot/224/cgroup.controllers" dev="tmpfs" ino=1172 res=1 errno=0
[  276.189747][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  276.239404][   T29] audit: type=1800 audit(1785767946.014:6): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1637" name="cgroup.controllers" dev="tmpfs" ino=1172 res=0 errno=0
[  276.303992][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'.
[  276.458264][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  276.581478][T12402] bond0: (slave ip6tnl0): refused to change device type
[  276.628348][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  276.663466][T12405] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  276.686595][T12406] ip6erspan0: entered allmulticast mode
[  276.724018][T12379] netlink: 'syz.2.1633': attribute type 29 has an invalid length.
[  277.333757][T12425] bridge3: entered promiscuous mode
[  277.339333][T12425] bridge3: entered allmulticast mode
[  277.356149][T12425] team0: Port device bridge3 added
[  277.385979][T12425] bridge0: port 3(team0) entered blocking state
[  277.406185][T12425] bridge0: port 3(team0) entered disabled state
[  277.417643][T12425] team0: entered allmulticast mode
[  277.429905][T12425] team_slave_0: entered allmulticast mode
[  277.438066][T12425] team_slave_1: entered allmulticast mode
[  277.452118][T12425] team0: entered promiscuous mode
[  277.457387][T12425] team_slave_0: entered promiscuous mode
[  277.469696][T12425] team_slave_1: entered promiscuous mode
[  277.478089][T12425] bridge0: port 3(team0) entered blocking state
[  277.484612][T12425] bridge0: port 3(team0) entered forwarding state
[  277.690886][T12429] bond8: Unable to set peer notification delay as MII monitoring is disabled
[  277.737251][T12429] bond8 (unregistering): Released all slaves
[  277.776579][T12439] netlink: 'syz.0.1652': attribute type 29 has an invalid length.
[  277.830836][T12439] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1652'.
[  277.862459][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'.
[  277.881951][T12445] syzkaller0: entered promiscuous mode
[  277.909876][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1652'.
[  277.922276][T12445] syzkaller0: entered allmulticast mode
[  277.951848][T12432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.054269][T12433] tipc: Resetting bearer <eth:syzkaller0>
[  278.105458][T12431] tipc: Resetting bearer <eth:syzkaller0>
[  278.195399][T12431] tipc: Disabling bearer <eth:syzkaller0>
[  278.440738][T12458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1656'.
[  278.482343][T12460] xt_ecn: cannot match TCP bits for non-tcp packets
[  278.931717][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'.
[  279.168285][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'.
[  279.236381][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'.
[  279.266746][T12490] netlink: 'syz.2.1666': attribute type 29 has an invalid length.
[  279.314071][T12490] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1666'.
[  279.331771][T12487] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1665'.
[  279.348360][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'.
[  279.659032][T12505] netlink: 'syz.5.1669': attribute type 3 has an invalid length.
[  279.772632][T12505] veth5: entered allmulticast mode
[  279.869321][ T1165] net_ratelimit: 20 callbacks suppressed
[  279.869343][ T1165] bond6: (slave batadv0): failed to get link speed/duplex
[  280.008961][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  280.143324][T12526] ip6gre1: entered promiscuous mode
[  280.176883][T12526] ip6gre1: entered allmulticast mode
[  280.192845][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  280.261415][T12534] netlink: 'syz.5.1677': attribute type 29 has an invalid length.
[  280.308445][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  280.401060][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.420061][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.428663][T10055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.458598][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  280.578268][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  280.698382][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  280.881012][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  280.943523][T12558] sctp: [Deprecated]: syz.3.1685 (pid 12558) Use of int in maxseg socket option.
[  280.943523][T12558] Use struct sctp_assoc_value instead
[  281.002441][T12559] sctp: [Deprecated]: syz.3.1685 (pid 12559) Use of int in maxseg socket option.
[  281.002441][T12559] Use struct sctp_assoc_value instead
[  281.035056][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  281.128577][T10055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.148337][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  281.198760][   T29] audit: type=1804 audit(1785767951.064:7): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1688" name="/newroot/328/memory.events" dev="tmpfs" ino=1697 res=1 errno=0
[  281.370444][T10051] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.566056][T12587] netlink: 'syz.5.1695': attribute type 1 has an invalid length.
[  281.675702][T12590] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92
[  281.756924][T12598] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  282.010146][T12607] lo speed is unknown, defaulting to 1000
[  282.020477][T12607] lo speed is unknown, defaulting to 1000
[  282.027193][T12607] lo speed is unknown, defaulting to 1000
[  282.039761][T12607] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  282.057324][T12607] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  282.077467][T12607] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  282.102316][T12607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  282.225684][T12607] lo speed is unknown, defaulting to 1000
[  282.251775][T12607] lo speed is unknown, defaulting to 1000
[  282.282246][T12607] lo speed is unknown, defaulting to 1000
[  282.306117][T12607] lo speed is unknown, defaulting to 1000
[  282.327068][T12607] lo speed is unknown, defaulting to 1000
[  282.716782][T12626] bridge0: entered promiscuous mode
[  282.743065][T12626] bridge0: entered allmulticast mode
[  282.827488][T12630] netlink: 'syz.5.1708': attribute type 1 has an invalid length.
[  282.872223][T12630] __nla_validate_parse: 18 callbacks suppressed
[  282.872245][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1708'.
[  282.932203][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1708'.
[  283.004984][T12639] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.1711'.
[  283.229227][T12648] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  283.283076][T12648] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  283.299127][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'.
[  283.344850][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'.
[  283.415695][T12655] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1715'.
[  283.453670][T12662] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1718'.
[  283.491480][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  283.637468][T12667] netlink: 'syz.2.1721': attribute type 11 has an invalid length.
[  283.857436][T12677] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1722'.
[  283.882010][T12679] netlink: 'syz.2.1723': attribute type 1 has an invalid length.
[  283.895635][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'.
[  284.258723][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  284.377620][T12698] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.400369][T12695] hsr_slave_0: left promiscuous mode
[  284.412794][T12699] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.427434][T12695] hsr_slave_1: left promiscuous mode
[  284.771289][T12720] netlink: 'syz.2.1735': attribute type 1 has an invalid length.
[  284.970199][ T1156] net_ratelimit: 27 callbacks suppressed
[  284.970223][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  285.115248][T12727] lo speed is unknown, defaulting to 1000
[  285.128641][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  285.264499][T12737] bridge4: entered promiscuous mode
[  285.270293][T12737] bridge4: entered allmulticast mode
[  285.282364][T12737] team0: Port device bridge4 added
[  285.328697][T12741] netlink: 'syz.3.1742': attribute type 3 has an invalid length.
[  285.343714][T12741] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  285.401632][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  285.510850][T12755] netlink: 'syz.5.1744': attribute type 5 has an invalid length.
[  285.549285][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  285.675088][T12757] netlink: 'syz.2.1745': attribute type 29 has an invalid length.
[  285.693618][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  286.148426][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  286.279534][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  286.398368][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  286.540071][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  286.718994][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  287.036649][T12815] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.245217][T12820] netlink: 'syz.1.1760': attribute type 29 has an invalid length.
[  287.482727][T12829] ip6gre1: entered promiscuous mode
[  287.976057][T12854] __nla_validate_parse: 17 callbacks suppressed
[  287.976078][T12854] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1769'.
[  288.000291][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'.
[  288.009669][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  288.063294][T12845] 8021q: adding VLAN 0 to HW filter on device bond9
[  288.090436][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'.
[  288.105641][T12845] bond8: (slave bond9): Enslaving as an active interface with an up link
[  288.177058][T12850] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  288.198362][T10051] lo speed is unknown, defaulting to 1000
[  288.206521][T12858] 8021q: adding VLAN 0 to HW filter on device bond8
[  288.262119][T12848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.290987][T12848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.321663][T12848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.360321][T12848] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.393278][T12848] batman_adv: batadv0: Interface deactivated: ipvlan2
[  288.411442][T12848] batman_adv: batadv0: Removing interface: ipvlan2
[  288.435660][T12870] netlink: 'syz.1.1772': attribute type 29 has an invalid length.
[  288.467306][T12870] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1772'.
[  288.530671][T12867] block nbd3: server does not support multiple connections per device.
[  288.560974][T12867] block nbd3: shutting down sockets
[  288.913398][T12884] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  288.986089][T12890] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  289.110087][T12890] 8021q: adding VLAN 0 to HW filter on device bond15
[  289.191151][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'.
[  289.283335][T12899] netlink: 'syz.1.1776': attribute type 10 has an invalid length.
[  289.307174][T12892] bond15: (slave veth9): Enslaving as an active interface with a down link
[  289.319051][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1776'.
[  289.363754][T12890] vlan2 (unregistering): left allmulticast mode
[  289.392514][T12890] geneve0 (unregistering): left allmulticast mode
[  289.418546][T12890] bridge0: port 3(vlan2) entered disabled state
[  289.526966][T12899] 
: entered promiscuous mode
[  289.728980][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'.
[  289.871997][T12903] lo speed is unknown, defaulting to 1000
[  289.912190][T12907] sctp: [Deprecated]: syz.3.1779 (pid 12907) Use of int in maxseg socket option.
[  289.912190][T12907] Use struct sctp_assoc_value instead
[  290.148309][   T12] net_ratelimit: 18 callbacks suppressed
[  290.148331][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  290.253966][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'.
[  290.300543][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  290.308053][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'.
[  290.337863][T12921] netlink: 'syz.3.1783': attribute type 29 has an invalid length.
[  290.428601][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  290.558475][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  290.694080][T12930] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  290.710800][T12931] block nbd3: Unsupported socket: should be TCP or UNIX.
[  290.844245][T12930] 8021q: adding VLAN 0 to HW filter on device bond16
[  290.876897][   T29] audit: type=1804 audit(1785767960.734:8): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1788" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2017 res=1 errno=0
[  290.889975][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  290.909602][   T29] audit: type=1800 audit(1785767960.764:9): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1788" name="cgroup.controllers" dev="tmpfs" ino=2017 res=0 errno=0
[  291.018499][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  291.210387][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  291.385288][T12962] xt_time: invalid argument - start or stop time greater than 23:59:59
[  291.447974][T12967] netlink: 'syz.3.1796': attribute type 29 has an invalid length.
[  291.479020][T12959] bridge0: port 3(team0) entered disabled state
[  291.485607][T12959] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.493066][T12959] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.580999][T12973] netlink: 'syz.1.1797': attribute type 3 has an invalid length.
[  291.760319][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  291.842427][T10051] lo speed is unknown, defaulting to 1000
[  291.848980][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.858481][T10051] syz2: Port: 1 Link DOWN
[  291.878468][ T1014] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.901631][ T1014] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.945823][ T1014] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.998548][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  292.012592][T12799] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  292.148389][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  292.258432][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.310859][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  292.495074][T13009] netlink: 'syz.0.1806': attribute type 1 has an invalid length.
[  292.701389][T13009] 8021q: adding VLAN 0 to HW filter on device bond10
[  292.848562][T13029] vlan2: entered promiscuous mode
[  292.877587][T13029] syz_tun: entered promiscuous mode
[  292.908728][T13029] vlan2: entered allmulticast mode
[  292.919707][T13029] syz_tun: entered allmulticast mode
[  292.983609][T13016] bond10: (slave veth0_to_bond): making interface the new active one
[  293.007855][T13016] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  293.066225][T13021] macvlan2: entered promiscuous mode
[  293.077711][T13021] macvlan2: entered allmulticast mode
[  293.091181][T13021] bond10: entered promiscuous mode
[  293.102379][T13021] veth0_to_bond: entered promiscuous mode
[  293.119402][T13021] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  293.143486][T13021] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  293.184412][T13021] bond10: left promiscuous mode
[  293.205765][T13021] veth0_to_bond: left promiscuous mode
[  293.334828][T13033] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  293.358019][T13033] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  293.421975][T13042] netlink: 'syz.5.1813': attribute type 29 has an invalid length.
[  293.456018][T13042] __nla_validate_parse: 11 callbacks suppressed
[  293.456039][T13042] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1813'.
[  293.519779][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'.
[  293.554213][T13045] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  293.826989][T13059] netlink: 'syz.5.1817': attribute type 4 has an invalid length.
[  293.967526][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  294.007336][T13059] tipc: Resetting bearer <eth:syzkaller0>
[  294.021523][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  294.045801][ T2176] lo speed is unknown, defaulting to 1000
[  294.109603][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.118335][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.127258][ T1156] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.155797][ T1156] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.387064][T13078] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1819'.
[  294.513451][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'.
[  294.526833][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'.
[  295.178051][T13119] netlink: 'syz.3.1827': attribute type 29 has an invalid length.
[  295.232385][   T47] net_ratelimit: 12 callbacks suppressed
[  295.232406][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  295.310521][T13125] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1827'.
[  295.321674][T13126] netlink: 'syz.2.1829': attribute type 1 has an invalid length.
[  295.340944][ T7496] udevd[7496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  295.351528][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'.
[  295.401766][ T7496] udevd[7496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  295.446399][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1827'.
[  295.541150][T13126] bond9: entered promiscuous mode
[  295.566496][T13126] bond9: entered allmulticast mode
[  295.581183][T13126] 8021q: adding VLAN 0 to HW filter on device bond9
[  295.658883][T13131] erspan2: entered allmulticast mode
[  295.712496][T13131] bond9: (slave erspan2): making interface the new active one
[  295.757344][T13131] erspan2: entered promiscuous mode
[  295.787745][T13131] bond9: (slave erspan2): Enslaving as an active interface with an up link
[  295.885082][T13137] syz.2.1829 (13137) used obsolete PPPIOCDETACH ioctl
[  295.896430][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  296.230052][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  296.348269][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  296.490661][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  296.601400][T13165] vlan2: entered promiscuous mode
[  296.617748][T13165] hsr0: entered promiscuous mode
[  296.633105][T13165] vlan2: entered allmulticast mode
[  296.655999][T13165] hsr0: entered allmulticast mode
[  296.661378][T13165] hsr_slave_0: entered allmulticast mode
[  296.667264][T13165] hsr_slave_1: entered allmulticast mode
[  296.744975][T13165] hsr_slave_0: left promiscuous mode
[  296.752410][T13165] hsr_slave_1: left promiscuous mode
[  296.838256][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  296.980340][T13176] team0: left allmulticast mode
[  297.011374][T13176] team_slave_0: left allmulticast mode
[  297.021472][T13176] team_slave_1: left allmulticast mode
[  297.034833][T13176] team0: left promiscuous mode
[  297.040686][T13176] team_slave_0: left promiscuous mode
[  297.046512][T13176] team_slave_1: left promiscuous mode
[  297.062990][T13176] bridge0: port 3(team0) entered disabled state
[  297.075828][T13176] bridge_slave_0: left allmulticast mode
[  297.083736][T13176] bridge_slave_0: left promiscuous mode
[  297.095710][T13176] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.112464][T13176] bridge_slave_1: left allmulticast mode
[  297.119975][T13176] bridge_slave_1: left promiscuous mode
[  297.125875][T13176] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.138597][T13176] bond1: (slave veth0_to_bond): Releasing active interface
[  297.149371][T13176] bond0: (slave bond_slave_1): Releasing backup interface
[  297.161304][T13176] team0: Port device team_slave_0 removed
[  297.170112][T13176] team0: Port device team_slave_1 removed
[  297.176255][T13176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  297.248298][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  297.358363][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  297.488709][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  297.509013][T13197] netlink: 'syz.5.1845': attribute type 1 has an invalid length.
[  297.535996][T13197] 8021q: adding VLAN 0 to HW filter on device bond5
[  297.566516][T13197] bond5: (slave veth5): Enslaving as an active interface with a down link
[  297.584344][T13197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.593898][T13197] bond5: (slave batadv0): making interface the new active one
[  297.603393][T13197] batadv0: entered promiscuous mode
[  297.609770][T13197] bond5: (slave batadv0): Enslaving as an active interface with an up link
[  297.670303][T13197] bond5: (slave veth7): Enslaving as an active interface with a down link
[  298.032164][T13211] netlink: 'syz.5.1848': attribute type 2 has an invalid length.
[  300.258345][ T1175] net_ratelimit: 23 callbacks suppressed
[  300.258367][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  300.378434][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  300.488495][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  300.598388][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  300.708424][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  300.818436][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  300.928376][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  301.038436][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  301.148354][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  301.258333][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  305.338448][   T47] net_ratelimit: 36 callbacks suppressed
[  305.338475][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  305.458387][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  305.568457][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  305.678482][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  305.788359][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  305.898334][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  306.008416][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  306.118383][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  306.228422][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  306.338348][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  308.248502][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.558845][ T1014] batadv0: left promiscuous mode
[  310.428484][ T1014] net_ratelimit: 36 callbacks suppressed
[  310.428508][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  310.548365][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  310.658491][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  310.768460][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  310.878373][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  310.988308][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  311.098848][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  311.208460][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  311.318351][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  311.428470][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  315.498395][   T47] net_ratelimit: 36 callbacks suppressed
[  315.498418][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  315.619877][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  315.728996][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  315.839311][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  315.949170][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  316.068954][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  316.178410][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  316.288919][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  316.398453][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  316.508839][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  317.210124][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  317.216493][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  320.589758][   T47] net_ratelimit: 36 callbacks suppressed
[  320.589782][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  320.708376][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  320.818352][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  320.928379][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  321.038378][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  321.148391][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  321.258356][   T12] bond6: (slave batadv0): failed to get link speed/duplex
[  321.369022][   T47] bond6: (slave batadv0): failed to get link speed/duplex
[  321.478408][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  321.589137][   T35] bond6: (slave batadv0): failed to get link speed/duplex
[  322.405388][T13239] __nla_validate_parse: 9 callbacks suppressed
[  322.405408][T13239] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1858'.
[  322.424335][T13238] Timeout policy `syz0' can only be used by L3 protocol number 25
[  322.623157][T13248] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  322.786380][T13257] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.924566][T13269] netlink: 'syz.2.1863': attribute type 1 has an invalid length.
[  322.976256][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'.
[  322.991167][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'.
[  323.010241][T13271] netlink: 'syz.3.1865': attribute type 18 has an invalid length.
[  323.026431][T13269] veth5: entered allmulticast mode
[  323.049997][T13269] bond10: (slave veth5): Enslaving as an active interface with a down link
[  323.124856][T13276] bond10: (slave veth0_to_bond): making interface the new active one
[  323.136543][T13276] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  323.194546][T13276] macvlan3: entered promiscuous mode
[  323.210046][T13276] macvlan3: entered allmulticast mode
[  323.229061][T13276] bond10: entered promiscuous mode
[  323.235638][T13282] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20003
[  323.242571][T13276] veth0_to_bond: entered promiscuous mode
[  323.246785][T13276] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  323.274499][T13276] bond10: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth5
[  323.287685][T13285] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  323.298962][T13285] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  323.306193][T13285] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  323.315108][T13276] bond10: left promiscuous mode
[  323.325665][T13276] veth0_to_bond: left promiscuous mode
[  323.339050][T13285] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  323.361416][T13285] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  323.413776][T13269] syzkaller1: entered promiscuous mode
[  323.442819][T13269] syzkaller1: entered allmulticast mode
[  323.902394][T13317] vlan2: entered allmulticast mode
[  323.917858][T13317] bond0: entered allmulticast mode
[  324.062307][T13323] netlink: 'syz.2.1873': attribute type 29 has an invalid length.
[  324.128006][T13323] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1873'.
[  324.163560][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'.
[  324.180307][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1873'.
[  324.212508][T13326] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001
[  324.386535][T13340] Cannot find set identified by id 0 to match
[  324.435299][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1879'.
[  324.644804][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'.
[  324.776890][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'.
[  324.783335][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'.
[  325.150042][T13389] netlink: 'syz.5.1888': attribute type 29 has an invalid length.
[  325.399119][T13400] netlink: 'syz.0.1890': attribute type 10 has an invalid length.
[  325.450240][T13399] netlink: 'syz.5.1891': attribute type 4 has an invalid length.
[  325.688719][ T1175] net_ratelimit: 34 callbacks suppressed
[  325.688743][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  326.159826][T13440] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002
[  326.168257][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.325425][T13412] gretap0: left allmulticast mode
[  326.541194][T13414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.576519][T13427] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  326.620638][   T49] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.666965][   T49] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.686579][   T49] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.720807][   T49] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.759724][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  326.888677][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  327.008981][   T49] bond6: (slave batadv0): failed to get link speed/duplex
[  327.052116][T13462] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  327.142551][T13471] sctp: [Deprecated]: syz.3.1908 (pid 13471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.142551][T13471] Use struct sctp_sack_info instead
[  327.179753][ T1156] bond6: (slave batadv0): failed to get link speed/duplex
[  327.209941][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.386856][T13479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.400401][   T49] bond6: (slave batadv0): failed to get link speed/duplex
[  327.417138][T13471] lo speed is unknown, defaulting to 1000
[  327.451125][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.750205][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  327.886695][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  327.966641][T13500] __nla_validate_parse: 11 callbacks suppressed
[  327.966662][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  328.230058][T13512] netlink: 'syz.3.1920': attribute type 12 has an invalid length.
[  328.273139][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'.
[  328.440706][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1922'.
[  328.749751][T13534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'.
[  328.811590][T13536] sctp: [Deprecated]: syz.2.1927 (pid 13536) Use of int in max_burst socket option.
[  328.811590][T13536] Use struct sctp_assoc_value instead
[  329.415226][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'.
[  329.425507][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'.
[  329.508701][T13567] pimreg: entered allmulticast mode
[  329.531156][T13567] pimreg: left allmulticast mode
[  329.537624][T13567] dvmrp8: left allmulticast mode
[  329.620729][T13572] netlink: 'syz.0.1940': attribute type 32 has an invalid length.
[  329.635842][T13571] netlink: 'syz.0.1940': attribute type 32 has an invalid length.
[  329.644443][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'.
[  329.659889][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'.
[  329.782573][T13572] bond11: option coupled_control: invalid value (96)
[  329.797852][T13572] bond11 (unregistering): Released all slaves
[  329.990568][T13571] bond11: option coupled_control: invalid value (96)
[  330.011899][T13571] bond11 (unregistering): Released all slaves
[  330.021570][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'.
[  330.048033][T13584] tipc: Enabled bearer <eth:vlan0>, priority 30
[  330.168499][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'.
[  330.277096][T13601] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.718588][ T1175] net_ratelimit: 20 callbacks suppressed
[  330.718609][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  330.903134][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  331.029778][ T1175] bond6: (slave batadv0): failed to get link speed/duplex
[  331.168425][ T1014] bond6: (slave batadv0): failed to get link speed/duplex
[  331.230480][ T1014] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.251131][T13649] netlink: 'syz.0.1964': attribute type 13 has an invalid length.
[  331.264749][ T1014] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.281611][T13649] netlink: 'syz.0.1964': attribute type 17 has an invalid length.
[  331.298066][ T1014] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.318466][T13651] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  331.368324][ T1156] bond6: (slave batadv0): link status up again after 0 ms
[  331.402189][ T1156] bond6: (slave batadv0): link status up again after 0 ms
[  331.448516][ T1014] bond6: (slave batadv0): link status up again after 0 ms
[  331.498787][ T1156] bond6: (slave batadv0): link status up again after 0 ms
[  331.506172][T13649] syzkaller0: left promiscuous mode
[  331.511852][T13649] syzkaller0: left allmulticast mode
[  331.529892][T13667] nbd: must specify a size in bytes for the device
[  331.541911][T13649] 8021q: adding VLAN 0 to HW filter on device bond9
[  331.550036][ T1156] bond6: (slave batadv0): link status up again after 0 ms
[  331.590117][   T13] bond6: (slave batadv0): link status up again after 0 ms
[  331.608822][ T1156] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.778608][T13675] can: request_module (can-proto-0) failed.
[  331.951537][T13683] dvmrp8: entered allmulticast mode
[  331.996267][T13680] xt_CT: No such helper "syz1"
[  332.375834][T13701] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.386239][T13704] netlink: 'syz.5.1981': attribute type 11 has an invalid length.
[  332.455361][T13705] veth6: entered allmulticast mode
[  333.027399][T13741] __nla_validate_parse: 13 callbacks suppressed
[  333.027448][T13741] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1992'.
[  333.055226][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  333.165087][T13745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.191218][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1994'.
[  333.240173][T13745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.375642][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1996'.
[  333.714294][T13763] bond17 (unregistering): Released all slaves
[  333.776899][T13772] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2003'.
[  333.818689][T13772] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.826243][T13772] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.870295][T13754] syzkaller1: entered promiscuous mode
[  333.877294][T13754] syzkaller1: entered allmulticast mode
[  334.218962][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.231269][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.401791][T13782] tipc: Resetting bearer <eth:syzkaller0>
[  334.549978][ T1175] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.570853][ T1175] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.580340][   T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.611440][   T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.658562][   T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.677449][   T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.700323][   T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.719240][   T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.914935][T13816] IPv6: sit2: Disabled Multicast RS
[  335.093098][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2017'.
[  335.314207][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'.
[  335.331694][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'.
[  335.432459][T13840] netlink: 'syz.5.2023': attribute type 11 has an invalid length.
[  335.475733][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2023'.
[  335.498466][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2023'.
[  335.718696][T13854] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  335.887264][T13862] netlink: 'syz.5.2028': attribute type 6 has an invalid length.
[  336.072756][T13866] netlink: 'syz.3.2031': attribute type 29 has an invalid length.
[  336.213723][T13878] netlink: 'syz.2.2035': attribute type 49 has an invalid length.
[  336.621926][T13899] unsupported nlmsg_type 40
[  336.871317][T13911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.944102][T13915] netlink: 'syz.0.2043': attribute type 3 has an invalid length.
[  337.227143][T13927] netlink: 'syz.3.2048': attribute type 1 has an invalid length.
[  337.373004][T13915] bond11 (unregistering): Released all slaves
[  337.381990][T13931] net_ratelimit: 18 callbacks suppressed
[  337.382011][T13931] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  337.403784][T13931] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  337.673435][T13920] lo speed is unknown, defaulting to 1000
[  337.764195][T13941] netlink: 'syz.3.2052': attribute type 3 has an invalid length.
[  337.834823][T13941] netlink: 'syz.3.2052': attribute type 10 has an invalid length.
[  338.122420][T13962] netlink: 'syz.2.2057': attribute type 49 has an invalid length.
[  338.871976][T13990] __nla_validate_parse: 17 callbacks suppressed
[  338.872000][T13990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2067'.
[  339.156097][T13987] bridge0: port 3(gretap0) entered disabled state
[  339.236707][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'.
[  339.288972][T13987] sit0: left promiscuous mode
[  339.427242][T13987] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.435068][T13987] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.448954][T13987] bridge0: left promiscuous mode
[  339.458154][T13987] bridge0: left allmulticast mode
[  339.639913][T13987] dummy0: left promiscuous mode
[  339.679642][T13987] batadv0: left promiscuous mode
[  339.776715][T13987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.804949][T13987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.856287][T13987] vlan0: left promiscuous mode
[  339.974033][T13987] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  339.981872][T13987] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  340.055774][T13987] tipc: Resetting bearer <eth:syzkaller0>
[  340.063918][T13987] syzkaller0: left promiscuous mode
[  340.069391][T13987] syzkaller0: left allmulticast mode
[  340.237026][T13987] vlan3: left promiscuous mode
[  340.242377][T13987] bond0: left promiscuous mode
[  340.247326][T13987] bond_slave_0: left promiscuous mode
[  340.255788][T13987] bond_slave_1: left promiscuous mode
[  340.267120][T13987] bond3: left promiscuous mode
[  340.272402][T13987] bond3: left allmulticast mode
[  340.282387][T13987] xfrm1: left promiscuous mode
[  340.287323][T13987] xfrm1: left allmulticast mode
[  340.342414][T13987] bond5: left promiscuous mode
[  340.411917][T13987] ip6gre1: left promiscuous mode
[  340.458947][ T1014] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.495149][ T1014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.518412][ T1014] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.543651][ T1014] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.571916][ T1014] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.596069][ T1014] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.622647][ T1014] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.641313][ T1014] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.653433][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2074'.
[  340.750588][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'.
[  340.951042][T14025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'.
[  341.412152][T14062] SET target dimension over the limit!
[  341.644732][T14073] netlink: 'syz.3.2090': attribute type 1 has an invalid length.
[  341.776301][T14080] netlink: 'syz.2.2091': attribute type 1 has an invalid length.
[  341.800382][T14073] 8021q: adding VLAN 0 to HW filter on device bond11
[  341.816218][T14086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2093'.
[  341.832071][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2091'.
[  341.902888][T14080] 8021q: adding VLAN 0 to HW filter on device bond11
[  341.911548][T14077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2093'.
[  341.956104][T14090] bond11: (slave batadv2): Opening slave failed
[  342.105677][T14097] sctp: [Deprecated]: syz.0.2095 (pid 14097) Use of int in max_burst socket option.
[  342.105677][T14097] Use struct sctp_assoc_value instead
[  342.462743][T14119] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  342.625609][T14119] 8021q: adding VLAN 0 to HW filter on device bond17
[  342.675294][T14123] bond17: (slave veth11): Enslaving as an active interface with a down link
[  342.686869][T14132] batadv_slave_1: entered promiscuous mode
[  342.732218][T14131] batadv_slave_1: left promiscuous mode
[  342.869175][T14143] ieee802154 phy0 wpan0: encryption failed: -22
[  343.009428][T14145] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  343.063141][T14151] lo speed is unknown, defaulting to 1000
[  343.081031][T14145] netlink: 600 bytes leftover after parsing attributes in process `syz.5.2110'.
[  343.109476][T14156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  343.154890][T14159] openvswitch: netlink: VXLAN extension message has 232 unknown bytes.
[  343.223126][T14159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2114'.
[  343.994025][T14194] __nla_validate_parse: 2 callbacks suppressed
[  343.994046][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'.
[  344.602250][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  344.625829][T14224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2130'.
[  344.856991][T14241] netlink: 'syz.0.2137': attribute type 10 has an invalid length.
[  344.900957][T14241] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  344.985931][T14243] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:ac10:48ff:fee2:6119 error=-28
[  345.537001][T14243] infiniband syz1: set down
[  345.553797][T14243] infiniband syz1: added bridge_slave_1
[  345.623599][T14243] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  345.643266][T14257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2142'.
[  345.646494][T14243] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  345.669856][T14243] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  345.671685][T14257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2142'.
[  345.790312][T14243] RDS/IB: syz1: added
[  345.815293][T14243] smc: adding ib device syz1 with port count 1
[  345.849076][T14243] smc:    ib device syz1 port 1 has no pnetid
[  346.581040][T14291] Unsupported ieee802154 address type: 0
[  347.066067][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2155'.
[  347.103456][T14309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2155'.
[  347.327958][T14320] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.335320][T14320] bridge0: port 2(bridge_slave_1) entered listening state
[  347.342858][T14320] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.350226][T14320] bridge0: port 1(bridge_slave_0) entered listening state
[  347.363340][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.398557][T14324] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2161'.
[  347.424827][T14320] dummy0: left promiscuous mode
[  347.487898][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.500285][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.549401][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.676182][T14320] 8021q: adding VLAN 0 to HW filter on device bond2
[  347.703057][T14320] syzkaller0: left promiscuous mode
[  347.726451][T14320] bridge2: left promiscuous mode
[  347.760256][T14320] 8021q: adding VLAN 0 to HW filter on device eth0
[  347.781508][T14320] 8021q: adding VLAN 0 to HW filter on device eth1
[  347.793136][T14320] 8021q: adding VLAN 0 to HW filter on device eth2
[  347.826222][T14320] 8021q: adding VLAN 0 to HW filter on device eth3
[  347.835288][T14320] bond9: left promiscuous mode
[  347.840612][T14320] erspan2: left promiscuous mode
[  347.862042][T14320] 8021q: adding VLAN 0 to HW filter on device bond10
[  347.960687][T14321] ip6gretap0: left promiscuous mode
[  347.982519][T14321] bridge0: port 3(gretap0) entered blocking state
[  347.989364][T14321] bridge0: port 3(gretap0) entered forwarding state
[  348.001395][T14321] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.010644][T14321] 8021q: adding VLAN 0 to HW filter on device team0
[  348.022814][T14321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.067918][T14321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.079090][T14321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.098020][T14321] veth1_vlan: left promiscuous mode
[  348.105110][T14321] veth0_vlan: left promiscuous mode
[  348.112863][T14321] veth0_vlan: entered promiscuous mode
[  348.122661][T14321] veth1_vlan: entered promiscuous mode
[  348.133458][T14321] veth1_macvtap: left promiscuous mode
[  348.140706][T14321] veth0_macvtap: left promiscuous mode
[  348.148026][T14321] veth0_macvtap: entered promiscuous mode
[  348.156358][T14321] veth1_macvtap: entered promiscuous mode
[  348.169392][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  348.179035][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  348.188871][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  348.197949][T14321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  348.216978][T14321] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.231093][T14321] 8021q: adding VLAN 0 to HW filter on device bond2
[  348.241678][T14321] batman_adv: batadv0: Interface activated: vlan2
[  348.250695][T14321] ip6gretap0: entered promiscuous mode
[  348.262830][T14321] 8021q: adding VLAN 0 to HW filter on device bond3
[  348.277026][T14321] batman_adv: batadv0: Interface activated: vlan4
[  348.285032][T14321] 8021q: adding VLAN 0 to HW filter on device bond4
[  348.296964][T14321] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.307617][T14321] 8021q: adding VLAN 0 to HW filter on device bond6
[  348.315834][T14321] 8021q: adding VLAN 0 to HW filter on device bond7
[  348.332917][T14321] 8021q: adding VLAN 0 to HW filter on device bond8
[  348.341300][T14321] 8021q: adding VLAN 0 to HW filter on device bond9
[  348.363349][T14321] 8021q: adding VLAN 0 to HW filter on device bond10
[  348.373582][ T2176] bond_slave_0: entered promiscuous mode
[  348.381010][ T2176] bond_slave_1: entered promiscuous mode
[  348.391348][ T1156] bond10: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  348.394738][   T24] syz0: Port: 1 Link ACTIVE
[  348.433712][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.441052][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.462326][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.469673][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.556463][T14352] netlink: 'syz.3.2168': attribute type 1 has an invalid length.
[  348.578514][T14348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.588625][ T1014] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.597550][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.644672][T14352] bond12: entered promiscuous mode
[  348.650994][T14352] bond12: entered allmulticast mode
[  348.656803][T14352] 8021q: adding VLAN 0 to HW filter on device bond12
[  348.670697][T14358] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2169'.
[  348.682681][T14355] erspan1: entered allmulticast mode
[  348.692211][T14355] bond12: (slave erspan1): making interface the new active one
[  348.700205][T14355] erspan1: entered promiscuous mode
[  348.707066][T14355] bond12: (slave erspan1): Enslaving as an active interface with an up link
[  348.721054][ T1014] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  348.746099][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.842134][ T1175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  348.861194][ T1175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.908450][ T1165] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  348.920715][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'.
[  348.930394][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.946368][T14360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.992913][T14360] syzkaller0: mtu less than device minimum
[  349.000644][   T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.026023][   T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.034128][ T2176] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.318640][T10049] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.500186][ T1014] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  349.546283][ T1014] bond7: (slave veth3): making interface the new active one
[  349.560784][ T1014] bond7: active interface up!
[  349.626644][T14385] openvswitch: netlink: IP tunnel dst address not specified
[  349.769704][T10049] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  350.073976][T14403] bond0: (slave ip6tnl0): refused to change device type
[  350.584460][T14416] Set syz1 is full, maxelem 2076 reached
[  350.726411][T14431] netlink: 'syz.0.2187': attribute type 1 has an invalid length.
[  350.739911][T14431] netlink: 'syz.0.2187': attribute type 2 has an invalid length.
[  350.864606][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'.
[  350.877680][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'.
[  351.155294][T14444] veth1_to_hsr: entered promiscuous mode
[  351.178476][T14444] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2191'.
[  351.189036][T14444] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  351.224137][T14444] tc action pedit 'at' offset 20 out of bounds
[  351.247164][T14450] netlink: 'syz.2.2193': attribute type 10 has an invalid length.
[  351.374836][ T1175] IPVS: starting estimator thread 0...
[  351.479285][T14454] IPVS: using max 27 ests per chain, 64800 per kthread
[  351.693891][T14470] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2198'.
[  351.832151][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'.
[  352.103521][T14485] syzkaller0: Caught tx_queue_len zero misconfig
[  352.191765][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'.
[  352.329773][T14495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2204'.
[  352.539806][T14507] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2208'.
[  352.564757][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'.
[  352.946896][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'.
[  353.208490][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  353.281995][T14536] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  353.775009][T14546] bond13: option fail_over_mac: invalid value (127)
[  353.798024][T14546] bond13 (unregistering): Released all slaves
[  354.154694][T14553] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.162091][T14553] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.292109][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.305315][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.455402][T14553] tipc: Resetting bearer <eth:syzkaller0>
[  354.468087][T14553] batman_adv: batadv0: Interface deactivated: gretap3
[  354.640931][T10049] syz0: Port: 1 Link DOWN
[  354.658536][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  354.694576][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.745101][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  354.759540][T14581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.774520][T14584] netlink: 'syz.2.2230': attribute type 2 has an invalid length.
[  354.781902][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.878305][ T1175] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  354.900192][ T1175] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.929534][ T1175] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  354.949049][T14592] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  354.963353][ T1175] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.053566][T14595] syz_tun: entered allmulticast mode
[  355.076910][T14596] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  355.255641][T14608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  355.455290][T14618] netlink: 'syz.1.2238': attribute type 7 has an invalid length.
[  355.872632][T14632] syzkaller1: entered promiscuous mode
[  355.888271][T14632] syzkaller1: entered allmulticast mode
[  355.900517][T14635] __nla_validate_parse: 9 callbacks suppressed
[  355.900537][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'.
[  355.955933][T14633] netlink: 'syz.5.2241': attribute type 1 has an invalid length.
[  356.310165][T14656] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  356.341553][T14652] lo speed is unknown, defaulting to 1000
[  356.396001][T14656] bond18: option mode: invalid value (7)
[  356.403907][T14656] bond18 (unregistering): Released all slaves
[  356.497922][T14656] netlink: 'syz.1.2248': attribute type 10 has an invalid length.
[  356.519112][T14656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2248'.
[  356.585056][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'.
[  356.611014][T14660] netlink: 'syz.0.2250': attribute type 5 has an invalid length.
[  356.619184][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'.
[  356.653014][T14660] geneve4: entered promiscuous mode
[  356.658635][T14660] geneve4: entered allmulticast mode
[  356.688587][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 50497 - 0
[  356.699033][ T1175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 50497 - 0
[  356.709448][ T1175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 50497 - 0
[  356.719429][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 50497 - 0
[  356.742105][T14667] x_tables: duplicate underflow at hook 1
[  356.751408][T14667] sock: sock_timestamping_bind_phc: sock not bind to device
[  356.845478][T14668] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  356.861945][T14668] sctp: [Deprecated]: syz.5.2251 (pid 14668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.861945][T14668] Use struct sctp_sack_info instead
[  357.009781][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'.
[  357.045176][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2253'.
[  357.290372][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'.
[  357.338211][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2255'.
[  358.466547][T14708] netlink: 'syz.5.2262': attribute type 18 has an invalid length.
[  358.576992][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'.
[  358.598746][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'.
[  358.669893][T14714] sit1: entered promiscuous mode
[  358.788564][T14727] syzkaller0: entered promiscuous mode
[  358.794251][T14727] syzkaller0: entered allmulticast mode
[  359.053120][T14733] netlink: 'syz.5.2269': attribute type 1 has an invalid length.
[  359.217488][T14733] bond7: entered promiscuous mode
[  359.227952][T14733] 8021q: adding VLAN 0 to HW filter on device bond7
[  359.260320][T14737] 8021q: adding VLAN 0 to HW filter on device bond7
[  359.267851][T14737] bond7: (slave gre3): The slave device specified does not support setting the MAC address
[  359.278625][T14737] bond7: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  359.294667][T14737] bond7: (slave gre3): making interface the new active one
[  359.305145][T14737] gre3: entered promiscuous mode
[  359.316863][T14737] bond7: (slave gre3): Enslaving as an active interface with an up link
[  359.329147][T14746] netlink: 'syz.1.2272': attribute type 21 has an invalid length.
[  359.349777][T14746] IPv6: NLM_F_CREATE should be specified when creating new route
[  359.579522][T14763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.133344][T14782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.150976][T14783] bridge0: entered allmulticast mode
[  360.193053][T14786] pim6reg: entered allmulticast mode
[  360.335102][T14783] netlink: 'syz.2.2282': attribute type 21 has an invalid length.
[  360.413140][T14800] netlink: 'syz.1.2288': attribute type 1 has an invalid length.
[  360.443726][T14800] 8021q: adding VLAN 0 to HW filter on device bond18
[  360.560751][T14800] bond18: (slave veth13): Enslaving as a backup interface with a down link
[  360.575833][T14807] netlink: 'syz.1.2288': attribute type 10 has an invalid length.
[  360.843544][T14815] xt_hashlimit: size too large, truncated to 1048576
[  360.970091][T14827] pim6reg1: entered promiscuous mode
[  360.995865][T14827] pim6reg1: entered allmulticast mode
[  361.022563][T14832] netlink: 'syz.2.2296': attribute type 3 has an invalid length.
[  361.368347][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  361.657498][T14865] netlink: 'syz.2.2303': attribute type 21 has an invalid length.
[  361.948951][T14879] lo speed is unknown, defaulting to 1000
[  362.192443][T14892] __nla_validate_parse: 11 callbacks suppressed
[  362.192464][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'.
[  362.429959][T14896] netlink: 'syz.0.2312': attribute type 11 has an invalid length.
[  362.457669][T14896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2312'.
[  362.516659][T14903] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2314'.
[  362.811062][T14912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.378324][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'.
[  366.268613][T14956] syzkaller0: entered promiscuous mode
[  366.343510][T14956] syzkaller0: entered allmulticast mode
[  366.402410][T14965] netlink: 'syz.2.2329': attribute type 1 has an invalid length.
[  366.427150][T14965] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2329'.
[  366.462617][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'.
[  366.941660][T14986] tipc: Resetting bearer <eth:syzkaller0>
[  366.949523][T14986] syzkaller0: left promiscuous mode
[  366.961212][T14986] syzkaller0: left allmulticast mode
[  366.988869][T14986] geneve4: left promiscuous mode
[  367.001701][T14986] geneve4: left allmulticast mode
[  367.028273][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 50497 - 0
[  367.047707][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 50497 - 0
[  367.081881][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 50497 - 0
[  367.103162][T14990] syzkaller1: entered promiscuous mode
[  367.125411][T14990] syzkaller1: entered allmulticast mode
[  367.168359][T13301] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 50497 - 0
[  367.254360][T14996] netlink: 'syz.0.2335': attribute type 1 has an invalid length.
[  367.312828][T14998] x_tables: duplicate underflow at hook 2
[  367.437364][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'.
[  367.587328][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'.
[  367.630431][T15012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2340'.
[  367.728075][T15012] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  367.936653][T15030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.045502][T15012] bond11 (unregistering): Released all slaves
[  368.345344][T15032] pim6reg1: entered promiscuous mode
[  368.367415][T15032] pim6reg1: entered allmulticast mode
[  368.614118][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'.
[  369.680285][T15062] syzkaller1: entered promiscuous mode
[  369.699453][T15062] syzkaller1: entered allmulticast mode
[  369.806629][T15069] netlink: 'syz.2.2353': attribute type 1 has an invalid length.
[  370.063648][T15080] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  370.382907][T15098] ieee802154 phy0 wpan0: encryption failed: -22
[  370.472962][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2365'.
[  370.688884][T15099] bridge0: port 3(gretap0) entered disabled state
[  370.970278][T15099] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.977840][T15099] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.023591][T15099] bond_slave_0: left promiscuous mode
[  371.043572][T15099] bond_slave_1: left promiscuous mode
[  371.377429][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.420547][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.867743][T15099] tipc: Resetting bearer <eth:syzkaller0>
[  371.951081][T15099] batman_adv: batadv0: Interface deactivated: vlan2
[  372.098611][T15099] batman_adv: batadv0: Interface deactivated: vlan4
[  372.340817][ T1156] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.365656][ T1156] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.388744][   T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.431442][   T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.466039][   T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.485262][   T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.508552][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'.
[  372.522483][   T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.542100][T15136] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  372.560664][   T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.641754][T15136] ipt_ECN: cannot use operation on non-tcp rule
[  372.686014][T15137] netlink: 'syz.3.2372': attribute type 1 has an invalid length.
[  372.698007][T15137] netlink: 'syz.3.2372': attribute type 3 has an invalid length.
[  372.706864][T15137] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2372'.
[  373.197311][T15171] netlink: 712 bytes leftover after parsing attributes in process `syz.3.2383'.
[  373.207397][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'.
[  373.222297][T15171] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.2383'.
[  373.232043][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2383'.
[  373.242902][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'.
[  373.254703][T15168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2382'.
[  373.267965][T15171] dvmrp0: entered allmulticast mode
[  373.385806][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'.
[  373.502521][T15182] IPv6: NLM_F_CREATE should be specified when creating new route
[  373.524391][T15182] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2385'.
[  374.011162][T15208] netlink: 'syz.2.2395': attribute type 1 has an invalid length.
[  374.053722][T15208] 8021q: adding VLAN 0 to HW filter on device bond12
[  374.252612][T15216] bond13 (unregistering): Released all slaves
[  374.361294][T15218] smc: net device lo applied user defined pnetid SYZ0
[  374.751206][T15227] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  375.013173][T15227] bond8 (unregistering): Released all slaves
[  375.419180][T15255] netlink: 'syz.0.2408': attribute type 1 has an invalid length.
[  375.497395][T15255] 8021q: adding VLAN 0 to HW filter on device bond11
[  375.986592][T15286] sctp: [Deprecated]: syz.2.2418 (pid 15286) Use of int in max_burst socket option.
[  375.986592][T15286] Use struct sctp_assoc_value instead
[  376.019201][T15286] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  376.037972][T15283] sctp: [Deprecated]: syz.2.2418 (pid 15283) Use of int in max_burst socket option.
[  376.037972][T15283] Use struct sctp_assoc_value instead
[  376.331327][T15297] IPv6: ·: Disabled Multicast RS
[  376.370910][T15301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.676403][T15317] netlink: 'syz.0.2426': attribute type 4 has an invalid length.
[  376.734370][T15319] netlink: 'syz.1.2425': attribute type 1 has an invalid length.
[  376.876790][T15319] 8021q: adding VLAN 0 to HW filter on device bond19
[  377.728457][T15377] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.760189][T15380] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.781821][T15377] syzkaller0: entered promiscuous mode
[  377.787864][T15376] netlink: 'syz.2.2439': attribute type 1 has an invalid length.
[  377.806482][T15377] syzkaller0: entered allmulticast mode
[  377.813584][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  377.950625][T15376] 8021q: adding VLAN 0 to HW filter on device bond13
[  377.971009][T15377] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  378.008339][T15388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.024739][T15388] bond13: (slave batadv0): making interface the new active one
[  378.036633][T15388] bond13: (slave batadv0): Enslaving as an active interface with an up link
[  378.047494][T15380] __nla_validate_parse: 5 callbacks suppressed
[  378.047511][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'.
[  378.070877][T15391] bond13: entered promiscuous mode
[  378.076233][T15391] batadv0: entered promiscuous mode
[  378.088518][T15391] bond13: entered allmulticast mode
[  378.102549][T15391] batadv0: entered allmulticast mode
[  378.367179][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'.
[  378.392400][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2446'.
[  378.583411][T15417] netlink: 'syz.0.2447': attribute type 32 has an invalid length.
[  378.655011][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  378.668281][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  378.837191][T15424] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  378.883706][T15424] bond12 (unregistering): Released all slaves
[  379.687890][T15468] gretap4: entered promiscuous mode
[  379.714370][T15441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  379.823842][T15480] syzkaller0: left allmulticast mode
[  380.380079][T15504] syzkaller1: tun_chr_ioctl cmd 1074025677
[  380.399254][T15504] syzkaller1: linktype set to 780
[  380.419224][T15503] syzkaller1: tun_chr_ioctl cmd 1074025677
[  380.440346][T15503] syzkaller1: linktype set to 780
[  380.976334][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'.
[  380.991930][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'.
[  381.018601][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'.
[  381.064255][T15522] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2467'.
[  381.426223][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'.
[  381.510618][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'.
[  381.533054][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'.
[  382.138297][T15575] netlink: 'syz.5.2483': attribute type 58 has an invalid length.
[  382.451715][T15591] netlink: 'syz.3.2485': attribute type 1 has an invalid length.
[  382.632434][T15598] netlink: 'syz.1.2489': attribute type 1 has an invalid length.
[  382.777443][T15598] bond20: entered promiscuous mode
[  382.814293][T15598] 8021q: adding VLAN 0 to HW filter on device bond20
[  382.942108][T15602] macvtap1: entered allmulticast mode
[  383.054945][T15608] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  383.099441][T15603] bond20: (slave bridge3): making interface the new active one
[  383.114574][T15608] __nla_validate_parse: 6 callbacks suppressed
[  383.114592][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'.
[  383.131701][T15603] bridge3: entered promiscuous mode
[  383.149050][T15603] bond20: (slave bridge3): Enslaving as an active interface with an up link
[  383.166303][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'.
[  383.234854][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'.
[  383.440524][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2493'.
[  383.764483][T15635] bridge0: port 1(macvlan2) entered blocking state
[  383.784092][T15635] bridge0: port 1(macvlan2) entered disabled state
[  383.800346][T15635] macvlan2: entered allmulticast mode
[  383.812786][T15635] gretap0: entered allmulticast mode
[  384.082907][T15650] netlink: 'syz.5.2503': attribute type 15 has an invalid length.
[  384.147142][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2503'.
[  384.187274][T15650] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2503'.
[  384.963239][T15686] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2515'.
[  384.979617][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2515'.
[  384.997485][T15692] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) !
[  385.392234][T15710] openvswitch: netlink: Missing valid actions attribute.
[  385.410493][T15710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.437419][T15710] vlan1: entered allmulticast mode
[  385.468281][T15710] veth0_vlan: entered allmulticast mode
[  385.588068][T15716] netlink: 'syz.1.2522': attribute type 1 has an invalid length.
[  385.598524][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'.
[  385.625850][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'.
[  385.758868][T15721] bridge10: entered promiscuous mode
[  385.795934][T15721] tap0: tun_chr_ioctl cmd 1074025692
[  385.839362][T15727] syzkaller0: mtu less than device minimum
[  386.381229][T15750] netlink: 'syz.1.2534': attribute type 1 has an invalid length.
[  386.396259][T15752] 8021q: VLANs not supported on gre1
[  386.504084][T15750] 8021q: adding VLAN 0 to HW filter on device bond21
[  387.176762][T15783] syzkaller0: entered promiscuous mode
[  387.190723][T15783] syzkaller0: entered allmulticast mode
[  387.218587][T15795] netlink: 'syz.3.2545': attribute type 49 has an invalid length.
[  387.652696][T15803] netlink: Unknown conntrack attr (type=12, max=9)
[  387.673868][T15803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.803549][T15812] netlink: 'syz.3.2550': attribute type 2 has an invalid length.
[  389.838040][T15816] __nla_validate_parse: 9 callbacks suppressed
[  389.838058][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'.
[  392.300996][T15836] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  392.344973][T15836] bond14 (unregistering): Released all slaves
[  392.446614][T15840] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  392.500533][T15840] bond14 (unregistering): Released all slaves
[  392.568029][T15850] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[  392.599250][T15852] bridge6: entered promiscuous mode
[  392.616602][T15859] sctp: [Deprecated]: syz.5.2559 (pid 15859) Use of int in max_burst socket option deprecated.
[  392.616602][T15859] Use struct sctp_assoc_value instead
[  392.954325][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'.
[  393.005812][T15890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.228599][T15881] tipc: Disabling bearer <eth:syzkaller0>
[  393.476750][T15914] "syz.3.2570" (15914) uses obsolete ecb(arc4) skcipher
[  393.591788][T15913] lo speed is unknown, defaulting to 1000
[  394.023684][T15927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2574'.
[  394.520585][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'.
[  394.675775][T15945] netlink: 'syz.5.2578': attribute type 4 has an invalid length.
[  394.701532][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'.
[  394.750686][T15943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2579'.
[  394.780461][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'.
[  395.114555][T15959] netlink: 'syz.2.2582': attribute type 29 has an invalid length.
[  395.147668][T15959] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2582'.
[  395.157059][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'.
[  395.166156][T15959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2582'.
[  395.906002][T15989] FAULT_INJECTION: forcing a failure.
[  395.906002][T15989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.922623][T15988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2590'.
[  395.942817][T15989] CPU: 0 UID: 0 PID: 15989 Comm: syz.5.2591 Not tainted syzkaller #0 PREEMPT(full) 
[  395.942839][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.942857][T15989] Call Trace:
[  395.942864][T15989]  <TASK>
[  395.942871][T15989]  dump_stack_lvl+0xe8/0x150
[  395.942901][T15989]  should_fail_ex+0x40c/0x560
[  395.942926][T15989]  _copy_from_user+0x2d/0xb0
[  395.942965][T15989]  ___sys_sendmsg+0x1c6/0x360
[  395.942992][T15989]  ? __lock_acquire+0x683/0x2cf0
[  395.943034][T15989]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.943080][T15989]  ? __fget_files+0x2a/0x420
[  395.943102][T15989]  ? __fget_files+0x3a2/0x420
[  395.943133][T15989]  __x64_sys_sendmsg+0x1b1/0x290
[  395.943155][T15989]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.943188][T15989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.943205][T15989]  do_syscall_64+0x174/0x580
[  395.943227][T15989]  ? trace_irq_disable+0x3b/0x140
[  395.943248][T15989]  ? clear_bhb_loop+0x40/0x90
[  395.943267][T15989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.943282][T15989] RIP: 0033:0x7fc65ed9e019
[  395.943296][T15989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.943309][T15989] RSP: 002b:00007fc65fd4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.943326][T15989] RAX: ffffffffffffffda RBX: 00007fc65f025fa0 RCX: 00007fc65ed9e019
[  395.943337][T15989] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003
[  395.943346][T15989] RBP: 00007fc65fd4f090 R08: 0000000000000000 R09: 0000000000000000
[  395.943356][T15989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.943365][T15989] R13: 00007fc65f026038 R14: 00007fc65f025fa0 R15: 00007ffe98563018
[  395.943388][T15989]  </TASK>
[  396.166215][T15992] netlink: 'syz.3.2592': attribute type 1 has an invalid length.
[  396.363269][T15998] x_tables: duplicate underflow at hook 2
[  396.466856][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'.
[  396.660094][T15992] 8021q: adding VLAN 0 to HW filter on device bond13
[  396.916008][T15996] bond13: (slave veth7): Enslaving as an active interface with a down link
[  397.012399][T15999] 8021q: adding VLAN 0 to HW filter on device batadv1
[  397.036054][T15999] bond13: (slave batadv1): making interface the new active one
[  397.063284][T15999] batadv1: entered promiscuous mode
[  397.074225][T15999] bond13: (slave batadv1): Enslaving as an active interface with an up link
[  397.365931][T16018] netlink: 'syz.5.2598': attribute type 2 has an invalid length.
[  397.395470][T16016] netlink: 'syz.3.2597': attribute type 8 has an invalid length.
[  397.469948][T16018] : entered promiscuous mode
[  397.693386][T16037] FAULT_INJECTION: forcing a failure.
[  397.693386][T16037] name failslab, interval 1, probability 0, space 0, times 0
[  397.764054][T16037] CPU: 1 UID: 0 PID: 16037 Comm: syz.5.2603 Not tainted syzkaller #0 PREEMPT(full) 
[  397.764086][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.764101][T16037] Call Trace:
[  397.764111][T16037]  <TASK>
[  397.764121][T16037]  dump_stack_lvl+0xe8/0x150
[  397.764163][T16037]  should_fail_ex+0x40c/0x560
[  397.764201][T16037]  should_failslab+0xa8/0x100
[  397.764241][T16037]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  397.764272][T16037]  ? local_lock_release+0x9c/0x160
[  397.764300][T16037]  ? __alloc_skb+0x1d7/0x7a0
[  397.764325][T16037]  ? __alloc_skb+0x1d7/0x7a0
[  397.764359][T16037]  __alloc_skb+0x1d7/0x7a0
[  397.764391][T16037]  netlink_sendmsg+0x5d4/0xb40
[  397.764436][T16037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.764474][T16037]  ? aa_sock_msg_perm+0xf1/0x1b0
[  397.764506][T16037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.764548][T16037]  sock_sendmsg_nosec+0x13a/0x180
[  397.764590][T16037]  ____sys_sendmsg+0x54e/0x850
[  397.764628][T16037]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.764669][T16037]  ? import_iovec+0x73/0xa0
[  397.764696][T16037]  ___sys_sendmsg+0x2a5/0x360
[  397.764726][T16037]  ? __lock_acquire+0x683/0x2cf0
[  397.764765][T16037]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.764838][T16037]  ? __fget_files+0x2a/0x420
[  397.764876][T16037]  ? __fget_files+0x3a2/0x420
[  397.764921][T16037]  __x64_sys_sendmsg+0x1b1/0x290
[  397.764956][T16037]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  397.765009][T16037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.765037][T16037]  do_syscall_64+0x174/0x580
[  397.765074][T16037]  ? trace_irq_disable+0x3b/0x140
[  397.765105][T16037]  ? clear_bhb_loop+0x40/0x90
[  397.765135][T16037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.765160][T16037] RIP: 0033:0x7fc65ed9e019
[  397.765183][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.765204][T16037] RSP: 002b:00007fc65fd4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.765230][T16037] RAX: ffffffffffffffda RBX: 00007fc65f025fa0 RCX: 00007fc65ed9e019
[  397.765249][T16037] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003
[  397.765264][T16037] RBP: 00007fc65fd4f090 R08: 0000000000000000 R09: 0000000000000000
[  397.765280][T16037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.765295][T16037] R13: 00007fc65f026038 R14: 00007fc65f025fa0 R15: 00007ffe98563018
[  397.765334][T16037]  </TASK>
[  398.071414][T16039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.111319][T16038] tipc: Disabling bearer <eth:syzkaller0>
[  398.301746][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2611'.
[  398.483522][T16067] xt_hashlimit: size too large, truncated to 1048576
[  398.577071][T16071] syzkaller0: left promiscuous mode
[  398.606340][T16071] syzkaller0: left allmulticast mode
[  398.714962][    C0] ------------[ cut here ]------------
[  398.721941][    C0] 1
[  398.721974][    C0] WARNING: net/core/sock.c:782 at sk_mc_loop+0x126/0x160, CPU#0: syz.5.2614/16071
[  398.733751][    C0] Modules linked in:
[  398.739378][    C0] CPU: 0 UID: 0 PID: 16071 Comm: syz.5.2614 Not tainted syzkaller #0 PREEMPT(full) 
[  398.748834][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  398.758967][    C0] RIP: 0010:sk_mc_loop+0x126/0x160
[  398.764133][    C0] Code: 08 48 89 df e8 0b b7 9b f8 48 8b 1b 81 e3 00 00 10 00 31 ff 48 89 de e8 78 24 2e f8 48 89 d8 c1 e8 14 eb 0b e8 8b 1f 2e f8 90 <0f> 0b 90 b0 01 5b 41 5e 41 5f 5d e9 1a 33 3c 02 cc 44 89 f1 80 e1
[  398.783879][    C0] RSP: 0018:ffffc90000007708 EFLAGS: 00010246
[  398.790047][    C0] RAX: ffffffff8998f475 RBX: ffff8880583c6000 RCX: ffff88802639be00
[  398.798069][    C0] RDX: 0000000000000100 RSI: ffffffff900116a0 RDI: 0000000000000011
[  398.806124][    C0] RBP: 0000000000000000 R08: ffff88802639be00 R09: 0000000000000002
[  398.814183][    C0] R10: 000000000000000a R11: 0000000000000100 R12: ffff88802adafb40
[  398.822243][    C0] R13: 0000000000000010 R14: 0000000000000011 R15: dffffc0000000000
[  398.830342][    C0] FS:  00007fc65fd4f6c0(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
[  398.839364][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.846000][    C0] CR2: 000020000000f000 CR3: 0000000077886000 CR4: 00000000003526f0
[  398.854062][    C0] Call Trace:
[  398.857384][    C0]  <IRQ>
[  398.860306][    C0]  ip6_finish_output2+0x62b/0x13c0
[  398.865484][    C0]  ? ip6_mtu+0x38c/0x490
[  398.869816][    C0]  ? ip6_output+0x11e/0x540
[  398.874379][    C0]  ip6_output+0x337/0x540
[  398.878806][    C0]  ip6_mr_output+0x53e/0x1170
[  398.883533][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  398.888774][    C0]  ? ip6_mr_output+0x1f3/0x1170
[  398.893672][    C0]  ? __pfx_ip6_mr_output+0x10/0x10
[  398.898871][    C0]  ? nf_hook+0xa5/0x6a0
[  398.903084][    C0]  ? nf_hook+0x4c0/0x6a0
[  398.907439][    C0]  ? nf_hook+0xa5/0x6a0
[  398.911680][    C0]  ? get_random_u16+0x139/0x910
[  398.916642][    C0]  ? __pfx_ip6_mr_output+0x10/0x10
[  398.921854][    C0]  vrf_xmit+0x1a60/0x1b40
[  398.926235][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  398.931547][    C0]  ? __pfx_vrf_xmit+0x10/0x10
[  398.936285][    C0]  ? __pfx_netif_skb_features+0x10/0x10
[  398.941924][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  398.947182][    C0]  ? cake_dequeue_one+0x343/0x620
[  398.952330][    C0]  dev_hard_start_xmit+0x2cd/0x830
[  398.957559][    C0]  sch_direct_xmit+0x257/0x4c0
[  398.962445][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  398.967830][    C0]  __qdisc_run+0xb11/0x1620
[  398.972473][    C0]  net_tx_action+0x7cb/0xc30
[  398.977125][    C0]  ? net_tx_action+0x5bb/0xc30
[  398.981985][    C0]  handle_softirqs+0x225/0x840
[  398.986814][    C0]  ? do_softirq+0x76/0xd0
[  398.991235][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  398.996441][    C0]  do_softirq+0x76/0xd0
[  399.000687][    C0]  </IRQ>
[  399.003661][    C0]  <TASK>
[  399.006630][    C0]  __local_bh_enable_ip+0xf8/0x130
[  399.011823][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  399.016998][    C0]  __dev_queue_xmit+0x1edc/0x3820
[  399.022140][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  399.027418][    C0]  ? _copy_from_iter+0x21b/0x1660
[  399.032541][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  399.038046][    C0]  ? virtio_net_hdr_to_skb+0xa2a/0x1620
[  399.043769][    C0]  ? __pfx_virtio_net_hdr_to_skb+0x10/0x10
[  399.049933][    C0]  ? packet_xmit+0x68/0x330
[  399.054498][    C0]  packet_sendmsg+0x3d95/0x5040
[  399.059467][    C0]  ? trace_hrtimer_start+0x82/0x200
[  399.064760][    C0]  ? trace_sched_exit_tp+0x3a/0x130
[  399.070070][    C0]  ? __pfx_packet_sendmsg+0x10/0x10
[  399.075364][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  399.080343][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  399.085346][    C0]  ? __pfx_packet_sendmsg+0x10/0x10
[  399.090648][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  399.095750][    C0]  ____sys_sendmsg+0x54e/0x850
[  399.100631][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.105989][    C0]  ? import_iovec+0x73/0xa0
[  399.110584][    C0]  ___sys_sendmsg+0x2a5/0x360
[  399.115321][    C0]  ? __lock_acquire+0x683/0x2cf0
[  399.120457][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.125774][    C0]  ? futex_wait+0x2a2/0x390
[  399.130461][    C0]  ? __fget_files+0x2a/0x420
[  399.135161][    C0]  ? __fget_files+0x3a2/0x420
[  399.139963][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  399.144985][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.150687][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.156822][    C0]  do_syscall_64+0x174/0x580
[  399.161552][    C0]  ? clear_bhb_loop+0x40/0x90
[  399.166297][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.172333][    C0] RIP: 0033:0x7fc65ed9e019
[  399.176805][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.196583][    C0] RSP: 002b:00007fc65fd4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.205102][    C0] RAX: ffffffffffffffda RBX: 00007fc65f025fa0 RCX: 00007fc65ed9e019
[  399.213379][    C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d
[  399.221616][    C0] RBP: 00007fc65ee3500c R08: 0000000000000000 R09: 0000000000000000
[  399.229676][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.237702][    C0] R13: 00007fc65f026038 R14: 00007fc65f025fa0 R15: 00007ffe98563018
[  399.245777][    C0]  </TASK>
[  399.248891][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  399.256241][    C0] CPU: 0 UID: 0 PID: 16071 Comm: syz.5.2614 Not tainted syzkaller #0 PREEMPT(full) 
[  399.265654][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.275763][    C0] Call Trace:
[  399.279081][    C0]  <IRQ>
[  399.281975][    C0]  vpanic+0x56c/0xa60
[  399.286016][    C0]  ? __pfx__printk+0x10/0x10
[  399.290655][    C0]  ? __pfx_vpanic+0x10/0x10
[  399.295296][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  399.300655][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  399.305912][    C0]  panic+0xc5/0xd0
[  399.309699][    C0]  ? __pfx_panic+0x10/0x10
[  399.314159][    C0]  __warn+0x315/0x4c0
[  399.318160][    C0]  ? sk_mc_loop+0x126/0x160
[  399.322694][    C0]  ? sk_mc_loop+0x126/0x160
[  399.327216][    C0]  __report_bug+0x276/0x570
[  399.331778][    C0]  ? sk_mc_loop+0x126/0x160
[  399.336309][    C0]  ? __pfx___report_bug+0x10/0x10
[  399.341390][    C0]  ? ip6table_mangle_hook+0x2b8/0x730
[  399.346792][    C0]  ? __lock_acquire+0x683/0x2cf0
[  399.351768][    C0]  ? sk_mc_loop+0x126/0x160
[  399.356292][    C0]  report_bug+0x16a/0x220
[  399.360652][    C0]  ? sk_mc_loop+0x126/0x160
[  399.365178][    C0]  ? sk_mc_loop+0x128/0x160
[  399.369705][    C0]  handle_bug+0x9c/0x200
[  399.373969][    C0]  exc_invalid_op+0x1a/0x50
[  399.378518][    C0]  asm_exc_invalid_op+0x1a/0x20
[  399.383395][    C0] RIP: 0010:sk_mc_loop+0x126/0x160
[  399.388558][    C0] Code: 08 48 89 df e8 0b b7 9b f8 48 8b 1b 81 e3 00 00 10 00 31 ff 48 89 de e8 78 24 2e f8 48 89 d8 c1 e8 14 eb 0b e8 8b 1f 2e f8 90 <0f> 0b 90 b0 01 5b 41 5e 41 5f 5d e9 1a 33 3c 02 cc 44 89 f1 80 e1
[  399.408187][    C0] RSP: 0018:ffffc90000007708 EFLAGS: 00010246
[  399.414291][    C0] RAX: ffffffff8998f475 RBX: ffff8880583c6000 RCX: ffff88802639be00
[  399.422374][    C0] RDX: 0000000000000100 RSI: ffffffff900116a0 RDI: 0000000000000011
[  399.431014][    C0] RBP: 0000000000000000 R08: ffff88802639be00 R09: 0000000000000002
[  399.439106][    C0] R10: 000000000000000a R11: 0000000000000100 R12: ffff88802adafb40
[  399.447104][    C0] R13: 0000000000000010 R14: 0000000000000011 R15: dffffc0000000000
[  399.455109][    C0]  ? sk_mc_loop+0x125/0x160
[  399.459651][    C0]  ? sk_mc_loop+0x125/0x160
[  399.464187][    C0]  ip6_finish_output2+0x62b/0x13c0
[  399.469371][    C0]  ? ip6_mtu+0x38c/0x490
[  399.473659][    C0]  ? ip6_output+0x11e/0x540
[  399.478205][    C0]  ip6_output+0x337/0x540
[  399.482583][    C0]  ip6_mr_output+0x53e/0x1170
[  399.487278][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  399.492428][    C0]  ? ip6_mr_output+0x1f3/0x1170
[  399.497311][    C0]  ? __pfx_ip6_mr_output+0x10/0x10
[  399.502458][    C0]  ? nf_hook+0xa5/0x6a0
[  399.506667][    C0]  ? nf_hook+0x4c0/0x6a0
[  399.510934][    C0]  ? nf_hook+0xa5/0x6a0
[  399.515132][    C0]  ? get_random_u16+0x139/0x910
[  399.520032][    C0]  ? __pfx_ip6_mr_output+0x10/0x10
[  399.525268][    C0]  vrf_xmit+0x1a60/0x1b40
[  399.529633][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  399.534881][    C0]  ? __pfx_vrf_xmit+0x10/0x10
[  399.539592][    C0]  ? __pfx_netif_skb_features+0x10/0x10
[  399.545165][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  399.550398][    C0]  ? cake_dequeue_one+0x343/0x620
[  399.555468][    C0]  dev_hard_start_xmit+0x2cd/0x830
[  399.560626][    C0]  sch_direct_xmit+0x257/0x4c0
[  399.565531][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  399.570865][    C0]  __qdisc_run+0xb11/0x1620
[  399.575411][    C0]  net_tx_action+0x7cb/0xc30
[  399.580061][    C0]  ? net_tx_action+0x5bb/0xc30
[  399.584849][    C0]  handle_softirqs+0x225/0x840
[  399.589643][    C0]  ? do_softirq+0x76/0xd0
[  399.594005][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  399.599147][    C0]  do_softirq+0x76/0xd0
[  399.603336][    C0]  </IRQ>
[  399.606356][    C0]  <TASK>
[  399.609393][    C0]  __local_bh_enable_ip+0xf8/0x130
[  399.614536][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  399.619677][    C0]  __dev_queue_xmit+0x1edc/0x3820
[  399.624739][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  399.629881][    C0]  ? _copy_from_iter+0x21b/0x1660
[  399.634942][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  399.640384][    C0]  ? virtio_net_hdr_to_skb+0xa2a/0x1620
[  399.645975][    C0]  ? __pfx_virtio_net_hdr_to_skb+0x10/0x10
[  399.651804][    C0]  ? packet_xmit+0x68/0x330
[  399.656330][    C0]  packet_sendmsg+0x3d95/0x5040
[  399.661211][    C0]  ? trace_hrtimer_start+0x82/0x200
[  399.666481][    C0]  ? trace_sched_exit_tp+0x3a/0x130
[  399.671716][    C0]  ? __pfx_packet_sendmsg+0x10/0x10
[  399.676954][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  399.681828][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  399.686793][    C0]  ? __pfx_packet_sendmsg+0x10/0x10
[  399.692042][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  399.697115][    C0]  ____sys_sendmsg+0x54e/0x850
[  399.701918][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.707245][    C0]  ? import_iovec+0x73/0xa0
[  399.711778][    C0]  ___sys_sendmsg+0x2a5/0x360
[  399.716483][    C0]  ? __lock_acquire+0x683/0x2cf0
[  399.721454][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.726705][    C0]  ? futex_wait+0x2a2/0x390
[  399.731271][    C0]  ? __fget_files+0x2a/0x420
[  399.735919][    C0]  ? __fget_files+0x3a2/0x420
[  399.740652][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  399.745639][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.751154][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.757271][    C0]  do_syscall_64+0x174/0x580
[  399.761916][    C0]  ? clear_bhb_loop+0x40/0x90
[  399.766653][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.772608][    C0] RIP: 0033:0x7fc65ed9e019
[  399.777058][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.796699][    C0] RSP: 002b:00007fc65fd4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.805154][    C0] RAX: ffffffffffffffda RBX: 00007fc65f025fa0 RCX: 00007fc65ed9e019
[  399.813160][    C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d
[  399.821157][    C0] RBP: 00007fc65ee3500c R08: 0000000000000000 R09: 0000000000000000
[  399.829153][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.837165][    C0] R13: 00007fc65f026038 R14: 00007fc65f025fa0 R15: 00007ffe98563018
[  399.845186][    C0]  </TASK>
[  399.848424][    C0] Kernel Offset: disabled
[  399.852770][    C0] Rebooting in 86400 seconds..