last executing test programs:

4.515583172s ago: executing program 0 (id=1593):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x2809c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)

4.336241118s ago: executing program 2 (id=1597):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
splice(r0, &(0x7f0000000040)=0x4, r0, 0x0, 0xe6, 0xc) (async)
syz_emit_ethernet(0xfc1, &(0x7f00000023c0)=ANY=[], 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@private}]}})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = socket$kcm(0x11, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffffff0000000000feffff182b0000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018550000020000000000000000000000185a0000070000000000000000000000950000000000000018280000976d87c989c312a6166dc9a78c7f0b22f1c2d78f65d4e9d6d68180b0622e9853e84bf0a57b2a36d5af17663281bab5c6fb187199ae6e0ee805c242dae9ccb07e4713e94c15b4383aab2bc1f186f90bd949ebff8e7de20638d6a0214c7d698ae2b58546ca61a894bdb26a874ae2ef971fbb5c60e3f60354d5570dbfe74ccf44764179d86e7183464a88404c8aab446c93c7ed193296a69aeea52bed0e0f4fba71b891503e04300b9ce6814ef01d548236d48b38930d239c51dd6da6782517973f6bab691f3738baa44e6ddcc9ff4c1c093d5f662b0c2a0d55d3e64c506c93a873a70912c136a10c4387ab294810e67a99d0c2f98f5d59f25119564587d423ce", @ANYRES32, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7}, 0x94) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = socket(0x28, 0x5, 0x800000)
bind$vsock_stream(r6, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket(0x28, 0x5, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x9}, 0xe) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

4.239894176s ago: executing program 0 (id=1598):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x72bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000001000000000024294af9f437979a729fd8f609ac4b0c770012800b00010067726574617000001400028008000700ac14142806000300", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

3.887292376s ago: executing program 2 (id=1602):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000a9c39a079f2bbf2f4b110044000000000000ac14142e00000400"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f00000100000000000000000000000020010000000000000000000000000000640101020000000000000000000000003c040000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000ac14142c000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)

3.886650647s ago: executing program 0 (id=1603):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"9102fb09b95cd846f38d86bd744d83eb", r5, r6, {0x2755, 0x7}, {0x1, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8000000000000000, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002840)={{r1}, r5, 0xa, @inherit={0x48, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x604, {0x4, 0xfffffffffffffcbf, 0xbb, 0x9, 0x4}}}, @name="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"})
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000080), 0x97ff}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f58263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f686f8f4ae905e573b200d669e65d56", 0x7f}, {&(0x7f00000015c0)}, {&(0x7f0000000e00)="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", 0x270}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa000000001c00000000000000000000000700000001940400e4b9078a4100000000000000"], 0x40}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1)

3.725364016s ago: executing program 2 (id=1608):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r2, 0x0, 0x80, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100f00000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)

3.404042188s ago: executing program 1 (id=1610):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xe33, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x42)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00010002200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000ff7f0000080200000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000900)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f00000057c0)=[{{&(0x7f0000002200)={0xa, 0x4e23, 0x4, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000005580)=[@hopopts={{0x18, 0x29, 0x36, {0x1d}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0xbe457afb34e93f81}}}], 0x30}}], 0x1, 0x40)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="58110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x27}, 0x94)

2.505486815s ago: executing program 3 (id=1613):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x4) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100000000000000000200000205000100070000000900"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
writev(r5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x9}, 0x28) (async)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x24004040}, 0x8004)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300))
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

1.559457262s ago: executing program 1 (id=1614):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7}, 0x8)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), 0x4)
r2 = accept4(r0, 0x0, &(0x7f0000000140), 0xc0800)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={<r3=>0x0, 0x7, 0x701a}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x800, 0x71, "cc457f5dd111a7d659534fd567592dd8fe27926c50e77c9b04f4243810ac915dea0783db70a0187c0a97227d3ca6be9e1bd9a768fa61e9e5d5794fb4aa7736457814233dd3a4bd7ea7e0ef752afb69dd32be81c042255c8655f9558f8a97b25b9c58e1cddbb30bdd62b73d52f46dd9384f"}, 0x79)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4(r1, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000300)=0x80, 0x800)
ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000340)={'veth1_to_team\x00', @ifru_hwaddr=@random="d331500d68ad"})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000004)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000540)={r3, 0x9}, 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000580)="1a92036aa01878b2bbdf5813ce780d05c3570237f18b0858147614de7050773b1c57948712a55121fa7a852ecc61177ffb1ff86015efc108235ee4958c08240d00aa5acd6a2c958eb7ef7109ac5c61e317a0c3035b8f96da4adf41afaed9452a2db1a01ba1dbf8d9200c8b961b9d3a6a0c9a8fd4ccc0e7e5d80863bbc3c90d08b691e08a50efde9dcb9f1c2e5c697ffeb62fda2110e7d72598735a799802d663f023bea383abfbb544ca5b3308958c472a87947750067bd8600556ebf8cb30d5477df903a122301a7f1365e758c254", &(0x7f0000000680)=""/201}, 0x20)
writev(r5, &(0x7f00000018c0)=[{&(0x7f00000007c0)="31ea98ac8fc34e9d7d2efbf7e8c059e666fa0a49f5f33db8b532cadd78c86a60c92c3fdc850ffef6493a86a9210bc151a2857abfe1ad1dc83de948c8c2af3a8e47b005af462cb9339286513fed6518c071b9d126116420d60c83c6b7", 0x5c}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="aa0fcad565935f2180e848c1d4bab144d645036da5a1f9037ab9132da75535ade74cd67dee9697ff6f9437ffeb17ea7e74b7e4096e5135005835932fced1fd6c349dd87274d029d9d1d81cf265a4c8b8fdef303db4054a6fce79f09acd64488c6dc1503685", 0x65}], 0x3)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
socket$nl_audit(0x10, 0x3, 0x9)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x3c, r8, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7616fe203b7201a5}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
bind$inet6(r1, &(0x7f0000001a40)={0xa, 0x4e22, 0x8a43, @private2, 0x7}, 0x1c)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000001a80)=0x6, 0x4)
getpeername$l2tp(r4, &(0x7f0000001ac0)={0x2, 0x0, @loopback}, &(0x7f0000001b00)=0x10)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001b40)={r3, @in={{0x2, 0x4e24, @private=0xa010102}}}, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001c00)={'vcan0\x00'})
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000001c40)={0x0, 0x1, 0x10, 0x0, 0x2}, 0xc)

1.493351197s ago: executing program 3 (id=1615):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x4000) (async)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x12142, 0x0)

1.415353273s ago: executing program 0 (id=1617):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, 0x3, 0x1, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "eb090b08ece8dca0"}}, 0x48}, 0x300}, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async)
listen(r1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000003d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000002400)=@newchain={0x1890, 0x64, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0xfff2, 0x5}, {0xffe0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x1864, 0x2, [@TCA_U32_POLICE={0x181c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x7fff, 0x0, 0x8, 0x1, 0xfffffffd, 0xd5, 0x1, 0x100, 0x0, 0x4, 0x9, 0x9, 0xfffffff8, 0x8, 0x4, 0x0, 0x3, 0x2, 0x8, 0x8, 0x3, 0x0, 0xfffffff5, 0x1, 0x8, 0xa, 0x2, 0x5, 0x8, 0x8, 0x7d, 0x6, 0x9, 0x0, 0x2c6, 0x8, 0x7fff, 0x5, 0x3, 0x8001, 0x0, 0x6, 0x3ffc000, 0xfffffff7, 0x8, 0x10000, 0x4e3, 0x9, 0x8000, 0x8, 0x7, 0x9, 0x994e, 0x10000, 0x3, 0x0, 0xf, 0x7, 0x9, 0x9, 0xe89a, 0x3, 0x5, 0x4, 0x6, 0xd4, 0x7, 0x7fff, 0x0, 0x7f, 0xfff, 0xfffffffc, 0x7fffffff, 0x6, 0xb, 0xffff15ca, 0x33, 0x1000, 0x10001, 0x1, 0x8001, 0x7fc0, 0x3, 0x9, 0xfffffffc, 0x1, 0x5, 0x2, 0x6, 0x2, 0x29, 0x7, 0x4, 0x8, 0xd0, 0x6, 0xd, 0x1, 0x504b, 0x101, 0x8, 0x9, 0x19, 0x3ff, 0x1, 0x7, 0x9, 0x8, 0x400, 0x5, 0x3de, 0x8, 0x2, 0x4, 0x42, 0x8, 0xfffff000, 0x0, 0xc, 0x1, 0x101, 0x8, 0x7, 0x2, 0x6, 0x5, 0xbd, 0x0, 0x3ff, 0x8, 0x1171, 0x400, 0x6, 0xfffffffd, 0x5c23, 0x1ede, 0x1e0, 0x3, 0x9, 0x9, 0xffff8001, 0x4, 0x7, 0x7f, 0x8, 0x0, 0x5, 0x1, 0x6, 0x10, 0x4, 0x9, 0x5, 0x3, 0x0, 0x10, 0x1, 0x10000, 0xfff, 0x9, 0x77, 0x4, 0x1, 0xc, 0xff, 0x101, 0x3, 0x1, 0x3, 0x5c, 0x7, 0x5, 0x84a0, 0x800, 0x2, 0x4, 0x401, 0x4, 0x83, 0x8, 0x6, 0xa5c0, 0x0, 0x1ff, 0x1, 0x286, 0x8, 0x8, 0x9, 0x2, 0x2, 0x4, 0x2, 0x7, 0x529c, 0x4, 0x5, 0x8, 0x9, 0x0, 0x8, 0x0, 0x400, 0x5, 0x8, 0x7ff, 0x80000000, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x6, 0x7ff, 0xfffffffb, 0x0, 0x329, 0x9, 0x3, 0x4, 0x2, 0x2, 0x0, 0x1, 0xf, 0x2, 0x6, 0x3, 0x3, 0x7fffffff, 0x81, 0xa, 0x200, 0xfffffffe, 0xff, 0x0, 0x200, 0x8000, 0x8001, 0xffff, 0x3, 0x800, 0x3, 0x2, 0xa918, 0x8, 0xb, 0x6, 0x97, 0x7, 0x10000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x14, 0x7, 0x3, 0x2, 0x9d, 0xe33e, 0x3, 0xb2a6, 0x4, 0x3, 0x5, 0x7ff, 0xcc51, 0x7, 0x9, 0x4, 0x5974, 0x800, 0xfffffffe, 0xfffffffa, 0xfff, 0xd, 0x6, 0x3ff, 0x3, 0x7, 0x200, 0x7, 0x9, 0x1, 0x1, 0x3, 0x7, 0x7, 0x1, 0x9, 0x2848, 0x81, 0x6, 0x3, 0x100, 0x4, 0x8, 0x6, 0xfffffff8, 0xfff, 0x4, 0x9, 0x5, 0x40, 0xc, 0x37, 0x9, 0x8, 0xfb0a, 0x0, 0x6, 0x9, 0x0, 0x2, 0x8000, 0x4, 0x7fffffff, 0xdd000000, 0x8, 0x2060, 0x3, 0xe, 0x2, 0x0, 0x1, 0x12a0, 0xefd1, 0xff, 0x6, 0x10001, 0x9, 0x3, 0x2, 0x6, 0xc, 0x0, 0x0, 0x4, 0xffffffc0, 0x5, 0x8, 0xe2b, 0x101, 0x401, 0xe, 0x3ff, 0x8, 0xe, 0x2, 0x4, 0x9, 0x0, 0x7, 0x6, 0x5, 0x9d5, 0xfffffffe, 0x764a, 0x400, 0x4, 0x5, 0x2, 0x8, 0x9, 0x9, 0x2, 0x579b, 0x2, 0x5, 0x800, 0xb, 0x40, 0xcd5, 0xe38, 0x8, 0xfffffffb, 0x4df, 0xe, 0x8000, 0x8, 0x0, 0x7a, 0x8, 0x9, 0xc9, 0x2, 0x5, 0x2f96, 0x3, 0x68e, 0x9, 0x210, 0x3, 0x0, 0x8, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x1, 0x7fffffff, 0x5, 0x3, 0xec1, 0x1, 0x9, 0x4, 0x368, 0x4, 0x8001, 0x6, 0x0, 0x3, 0x8, 0x7, 0x3, 0x4, 0xff, 0x6, 0x80000001, 0x4, 0x9, 0x6, 0x0, 0x7, 0x9, 0xd1d, 0x8000, 0xe2, 0x18000, 0x7, 0xe, 0xde, 0x3, 0x9, 0x5, 0x80000001, 0x5, 0x3, 0xcd, 0x2, 0x8, 0xba1, 0x7c14, 0xa, 0x4, 0xa, 0x6, 0x45, 0x3, 0x7, 0xffffff25, 0x101, 0x7, 0xfffffff8, 0xff, 0x1, 0x9, 0x10000, 0xb415, 0xf8d, 0x9730, 0x7, 0x4, 0x0, 0x6, 0x7fff, 0xc1, 0x9, 0x1, 0x5, 0x1, 0x0, 0x80000, 0x518, 0x800, 0x4, 0x31, 0x9, 0x4, 0x10000, 0x6, 0xfffffffe, 0x3, 0x2, 0x900000, 0x0, 0x9, 0x4, 0xf931, 0x10000, 0x200, 0xffffff36, 0x100, 0x10001, 0x0, 0x3, 0xfffffffb, 0x5, 0x10, 0xffff0001, 0x66be, 0x3, 0x1, 0x10, 0xffff, 0xbd6, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x819, 0xd, 0x4, 0xf, 0x0, 0x3, 0x3, 0x2, 0x4, 0x7, 0x1, 0x2, 0x7, 0x40, 0x3, 0x3, 0x53, 0x9, 0x0, 0x401, 0x401, 0xfffffff8, 0x9, 0x7, 0x7a, 0x8, 0x7, 0x1, 0x3, 0x8001, 0x3, 0x5e2316b2, 0xfffffb29, 0xe, 0x3, 0xffffffb5, 0x7, 0x9, 0x400, 0x4, 0x401, 0x8001, 0x2, 0x2, 0xffff, 0x0, 0x8, 0x101, 0x6, 0x7fff, 0x7, 0x0, 0x8000, 0x0, 0x9, 0x401, 0x80000000, 0x3, 0x0, 0x3, 0x338, 0xfffffffa, 0x1, 0x8, 0x3, 0x4, 0x4, 0x1, 0x0, 0xffff, 0xfffffff7, 0x8, 0x2, 0x7fff, 0xbee8, 0x4, 0x8, 0x7, 0x8, 0x0, 0x5, 0xff, 0xfffffffe, 0x7, 0x1, 0x7fff, 0xfffffff2, 0x3, 0xfffffffb, 0xf, 0x9, 0xe, 0x6, 0x2, 0x200, 0xfa4, 0x6, 0x0, 0xb61, 0xb7f, 0x525, 0x3, 0xfff, 0x5, 0x1, 0xffffff1e, 0x70, 0xc5, 0x4bc, 0x5, 0x1, 0x1, 0x8001, 0x9, 0x3, 0x7, 0x1, 0x2, 0x3, 0x2, 0x73982f17, 0xc0b7, 0x113, 0x1000, 0x8, 0x31d6073, 0x65a, 0x9, 0x101, 0x9, 0x3, 0x1ce, 0x2, 0x7, 0x18b, 0x3, 0x4, 0xa3af, 0x7, 0x2, 0x1, 0x9, 0xfab, 0xd, 0xffffffff, 0xfffffff8, 0x2, 0x2, 0x7, 0x800, 0x80000001, 0x7, 0x6, 0x8, 0x4, 0x1, 0x3, 0x3, 0xfffffff8, 0xaa, 0x4, 0x0, 0xffffce2f, 0x40, 0x3, 0xc8, 0xffff8000, 0x0, 0x0, 0x4, 0x5, 0xb, 0xffffff00, 0x1, 0x1, 0x3, 0x1, 0x3, 0x3, 0x2, 0x8, 0x63d5, 0x5, 0x7, 0x5a, 0x5, 0xfffffeff, 0x1ff, 0x4fd, 0x6, 0x0, 0x5, 0x1, 0x7, 0x8, 0x4, 0x9, 0x0, 0x9, 0x1ff, 0x9, 0x7fffffff, 0x5, 0x0, 0x4, 0xe82, 0x3, 0x4, 0x40, 0x7, 0x9, 0x40, 0x200, 0xffffffff, 0xff, 0x8001, 0x40, 0x633, 0x9a, 0x0, 0x9, 0x40000, 0x3b71, 0x9, 0x6, 0x3ff, 0x1, 0x7, 0x7fffffff, 0xffff, 0xf, 0x7ff, 0x5, 0x400, 0x8, 0x400, 0x10000, 0xe, 0x5, 0x7, 0x40, 0xffffffff, 0x43, 0x577, 0x7810, 0x2, 0xc91, 0x0, 0xd81f, 0x5, 0x3, 0x400, 0x10, 0x4, 0xe43]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0xfff, 0x40, 0x8441, 0x73b, 0x7, 0xa7, 0x6, 0xa601, 0xb1, 0x1000, 0x401, 0xdb74, 0x8, 0x0, 0x0, 0xba, 0x53e9e559, 0x2, 0x4, 0xc4a, 0x4, 0x1000, 0xbd, 0x1000, 0x9, 0x7, 0xfa, 0x5, 0x6b1b, 0xab4, 0x6, 0x80000000, 0xfff, 0x1, 0x10, 0x3, 0x7, 0x6, 0x1, 0x0, 0x7, 0x7f, 0x5, 0x8, 0x190, 0x10000, 0x8, 0x9, 0x8, 0x80, 0x5, 0xffff8001, 0x6, 0x2, 0x62b2, 0x4c0f, 0x6, 0x3, 0x0, 0x4c, 0x7a, 0x3, 0x2, 0x10, 0x6, 0x7, 0x8, 0x5, 0x9, 0x4, 0x6, 0x81, 0xc9, 0x80, 0xd6c, 0x2, 0x63, 0x1ff, 0x285, 0x9, 0x9, 0x10, 0x0, 0x5, 0x3, 0x4, 0xb96b, 0x8, 0x9, 0x5, 0x400, 0x4, 0x4, 0x5, 0x3, 0x20, 0x3, 0xfa, 0xff, 0x8, 0x1ff, 0x0, 0x4, 0x10000, 0x9, 0x6, 0x5, 0x6, 0x80000000, 0x5, 0x80, 0x5, 0x81, 0x8000, 0x80000000, 0x7fffffff, 0xe, 0x9, 0x6b, 0x7ff, 0x5, 0x46, 0x9, 0x6, 0x3, 0xfff, 0xc, 0x5, 0x401, 0x0, 0x0, 0x9, 0x1, 0x2, 0xd6f2, 0x1, 0x7e8, 0x8, 0x1, 0xffff, 0x9, 0x100, 0x2, 0xf8, 0x9, 0x4, 0x3, 0x6, 0x2, 0xfff, 0x6, 0x1, 0x6, 0x5, 0x7, 0x3, 0x1, 0x3ff, 0x7ff, 0x8, 0x9, 0x6, 0x6, 0x7, 0x9, 0x7, 0xaf, 0x9, 0x7, 0x8000, 0xcd, 0x1, 0x4, 0x2, 0xfffffff2, 0x3ff, 0x5, 0x400, 0x5260, 0x9, 0x0, 0x3, 0xfffff185, 0x400, 0x81, 0x1, 0x9, 0x10000, 0x101, 0x6, 0xf0d, 0x9, 0x1000, 0xffffffde, 0x9, 0x5130, 0xd91, 0x2, 0x4, 0x3, 0x3ff, 0x2, 0x8, 0xffffffff, 0x1, 0xa, 0x7, 0xae, 0x8, 0x800, 0x2, 0x7, 0x3, 0x39f, 0x2, 0x5, 0x62e1, 0x3, 0x0, 0x2, 0x9e, 0x3, 0x5, 0x0, 0x1, 0x7, 0x0, 0x3, 0x8, 0xfffffff4, 0x2, 0x2, 0x10000, 0xe, 0x3, 0x800, 0xbdd, 0x2, 0x1, 0x9, 0x5, 0xa9, 0xcc, 0x9, 0x4, 0x8, 0x8e, 0x4, 0x7f, 0xd33, 0x0, 0x5, 0x80000000, 0xfffffff9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x7893c6af, 0xe8a00000, 0x9, 0x7d, 0x2, 0xfffffffa, 0x80000000, 0x4, 0x75cf, 0x0, 0x8, 0x5, 0x760, 0x8, 0x9, 0xbe, 0x3, 0x9, 0x7fffffff, 0x0, 0x3, 0x10001, 0x1, 0xb, 0xd, 0x6a, 0x8, 0x51, 0x3, 0xe000, 0xb, 0x8, 0xd, 0x3, 0xac, 0x4, 0x7, 0x1, 0x75, 0x2, 0x2, 0x2, 0x101, 0x8, 0x0, 0x1, 0x8000, 0x5c, 0x8, 0x92, 0x9, 0x9, 0x0, 0x9, 0x4, 0x7ff, 0x9, 0x75, 0xf4f1, 0x6, 0x7fff, 0x6, 0x8, 0xd8bc, 0xe79a, 0x2, 0x5, 0x200, 0x1, 0x4, 0x7, 0x5, 0xb0, 0xfca1, 0x9, 0x7fff, 0x9, 0x6, 0xd, 0x9, 0xfffffffd, 0x7, 0x3, 0x6, 0xf3, 0x8, 0x4, 0x4, 0x1ff, 0x6a, 0x7bb5, 0x3, 0x2, 0x0, 0x2, 0x6, 0x7, 0x8, 0x6, 0x7, 0x7, 0x9, 0x8, 0x6, 0xfffffc01, 0xd, 0x7, 0x1000, 0x9, 0x0, 0xff, 0x6973, 0x3, 0x2, 0x5, 0x6, 0x8, 0x7ff, 0x1e870000, 0x10001, 0x10000, 0x3, 0x1ff, 0x68, 0xfffffff2, 0x9, 0xd1, 0xd, 0x8, 0x800, 0x7, 0x7, 0x0, 0x5, 0x5, 0x7, 0x6e2c, 0x1, 0xffffffff, 0x8a, 0x5, 0x4, 0xc, 0x1, 0x0, 0x0, 0x1ff, 0x5, 0x4, 0xf1d, 0x5, 0x6, 0x8001, 0x2, 0x4, 0x4, 0x6, 0x3796, 0x13, 0x4, 0x10, 0x9, 0x0, 0x0, 0x6, 0x40, 0x6, 0x2, 0x4e, 0x8, 0x7fff, 0xce, 0xfff, 0x1, 0xfffffffe, 0xb, 0x101, 0x8, 0x5, 0x7, 0x3, 0x0, 0x4, 0x8, 0xe85, 0x80000000, 0x4, 0xffff, 0x3ff, 0x80, 0xfffffc00, 0x8001, 0xefbc, 0x5, 0x7, 0xa, 0xf2f5, 0xf, 0x4, 0x96fa, 0x2, 0x1, 0x0, 0x3, 0x3, 0x401, 0x8, 0x5, 0x0, 0x4, 0x5, 0xb, 0xfffffffa, 0xc725, 0x7, 0xa181, 0x9, 0x0, 0x3, 0x3, 0x6, 0x6, 0xb25, 0x4, 0x81, 0x2, 0x80000001, 0x47, 0xc, 0x5, 0x4, 0x7, 0x4, 0x5, 0x8001, 0x2, 0x7, 0x0, 0x3, 0xffffffff, 0x200, 0x1ff, 0x4, 0xff, 0xfffffff3, 0xffff2ec5, 0x7ff, 0x1, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0xfffffffb, 0x8001, 0x0, 0x6, 0xff, 0x2, 0x80000000, 0x7fff, 0x8, 0xf, 0x0, 0x2, 0x1d, 0x0, 0x9, 0x8000, 0x97, 0xc7e4, 0xceb, 0x9, 0x2, 0x1000, 0x9, 0x3, 0x6, 0xe8c, 0x0, 0xffffff00, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0xffffffb0, 0x0, 0xefb, 0x1, 0x5, 0x7fffffff, 0x4, 0x0, 0x4, 0x1ff, 0x1, 0x2e4, 0xbcb, 0x7fff, 0xe5b15cb, 0xf, 0x8, 0x6, 0x1be1, 0xab55, 0x5, 0x8, 0x53a, 0xfffffffa, 0x5, 0x3, 0xa6b, 0x7ff, 0x63b, 0x4985, 0x1, 0x8, 0x4, 0xfffffffd, 0x7f, 0xaef, 0xe89, 0x6, 0x5c1c, 0x1ff, 0x8, 0x5cd4, 0x1, 0x80, 0x9, 0x6, 0x6, 0x6c7, 0x101, 0x7, 0x8e, 0x640, 0x7, 0x9, 0x1, 0x7, 0x7, 0x6, 0x80, 0xa23, 0xc, 0x4, 0x3, 0xb, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x10000, 0x3, 0x9, 0x0, 0x6, 0x401, 0x8, 0xffff, 0x3, 0x3, 0x9, 0x9, 0x7, 0x34d2dd18, 0x80, 0x9, 0x2, 0x4965, 0x80, 0x5334, 0x94, 0x5, 0x3, 0x8, 0xe7, 0x4, 0x3ff, 0x6, 0x401, 0x0, 0x8, 0xe, 0x100, 0x4, 0x5, 0x0, 0x5, 0x3, 0x800, 0x0, 0x6, 0xfffffffb, 0x0, 0x4, 0xefb, 0x8001, 0x2, 0x9, 0xfffff000, 0x1, 0xd0, 0xfffffff4, 0x2, 0xa4b2, 0x2, 0x3, 0x7, 0xfffffffd, 0x5, 0x64, 0xe, 0x2, 0xc, 0x101, 0x2, 0x8, 0x3d99, 0x6, 0x10, 0x8001, 0x3, 0x7bf, 0x9, 0x800, 0x80, 0x4, 0x0, 0x6, 0x1ff, 0x5, 0x8001, 0x1b, 0x8001, 0x7, 0x0, 0x3, 0x6, 0x7, 0x81, 0x10, 0x4, 0x6114, 0xfffffffe, 0x2, 0xd0, 0x4, 0x9, 0x8, 0xc, 0x0, 0xd81d, 0x6, 0x3, 0x0, 0x7fffffff, 0x10001, 0x5, 0x2, 0xac, 0x0, 0x10001, 0x400, 0x9, 0x8, 0xfffffffe, 0xb01e, 0x9, 0x6, 0x5, 0x6, 0x1, 0x4, 0x1, 0x1, 0x2, 0x8, 0x100, 0x9, 0x3, 0x6, 0x1, 0x3, 0x9, 0x9a6, 0x101, 0xd, 0x8b, 0x4, 0x6, 0x0, 0x2, 0xd, 0x1, 0x4, 0x3, 0xfffffffc, 0x1, 0x5, 0x4, 0x9, 0xfffffa34]}]}, @TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_LINK={0x8, 0x3, 0xc68}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x7}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bond\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_LINK={0x8, 0x3, 0x74f2}]}}]}, 0x1890}, 0x1, 0x0, 0x0, 0x4008994}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) (async)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) (async)
shutdown(r8, 0x1) (async)
setsockopt(r8, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r3, 0x4000, r1}, 0x18)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="01", 0x1}, {&(0x7f0000000000)="b485df364b2099ce50e7", 0xa}], 0x2}}], 0x2, 0x4) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x4e22, @multicast2}})

1.324610097s ago: executing program 3 (id=1618):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000a9c39a079f2bbf2f4b110044000000000000ac14142e00000400"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f00000100000000000000000000000020010000000000000000000000000000640101020000000000000000000000003c040000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000ac14142c00"/152], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)

1.252590944s ago: executing program 1 (id=1619):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000dee6000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000001c000000060a010400000000000000000100000308000b40000000001100010000000000000000000000000a00000000"], 0x90}, 0x1, 0x0, 0x0, 0x180}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRES16], 0x64}}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r1], 0x33)
sendfile(r4, r3, 0x0, 0x10000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="a99ef5077241972063fec55e0af5b85d87a345529aa665474dc7545520a56f52f5f3814303acd0d99e2f30f503f2b6cb907b005c2919674a3e732969f32354d90eb77a51b317bddb0d9a982030f5488def052a045572b2080612f32a5b9e022519c2402021d276b63ef92403cf8603ec77f38142790fc20a103df6d11c95b381fbf43a0dd61864e13e146132f531d18fc00507c3bb82096a0117d0755908be647623ccea774bb697a16ec2ec02506c258881140fb5dbbf2ed6620cda76f496b99b4f", @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000000006001000000000000600ab000000"], 0x48}}, 0x20000000) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000f80))
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r8, 0x28) (async)
poll(&(0x7f0000000080)=[{r8, 0x408}], 0x1, 0x40000400) (async)
shutdown(r8, 0x0) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r9, &(0x7f0000000fc0), 0x0, 0x0)
shutdown(r9, 0x1)

1.22924308s ago: executing program 4 (id=1621):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000)
accept$nfc_llcp(r4, 0x0, 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe2f}, 0x94)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x80800) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) (async)
accept$nfc_llcp(r4, 0x0, 0x0) (async)
accept4(r2, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe2f}, 0x94) (async)

1.143587052s ago: executing program 0 (id=1622):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r3}, &(0x7f0000000280)=0x8)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xdbe}, &(0x7f0000000100)=0x8)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa4}}, 0x4)
socket$kcm(0xa, 0x1, 0x106)

1.123735087s ago: executing program 3 (id=1623):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003000800170004"]}, 0x58}}, 0x0)
syz_emit_ethernet(0x7c, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0xe, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xffffffffffffff26, 0xffff}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)

1.060758603s ago: executing program 1 (id=1624):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x18, 0x14, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x9a}}, 0x18}, 0x1, 0x0, 0x0, 0x400c001}, 0x8004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000)

927.971417ms ago: executing program 4 (id=1625):
unshare(0x22020600)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xe9}, 0x8)

912.421416ms ago: executing program 3 (id=1626):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
unshare(0xe040400)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x25, 0x301, 0x670bd22, 0x25dfdbfc, {0x15}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="4dc3ad498a5608e73f89a6d3681e134b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', r9, 0x4000, r10}, 0x18)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

808.742268ms ago: executing program 4 (id=1627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0xfffffffffffffd91, 0x10008095, 0x0, 0x0) (async, rerun: 64)
r4 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3}}, 0xe8) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async, rerun: 64)
connect$inet6(r5, &(0x7f00000000c0), 0x1c) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xbdc1d0af1494ad1f, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40)

723.055675ms ago: executing program 4 (id=1628):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x140f, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x44051}, 0x0)

596.827619ms ago: executing program 4 (id=1629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ip_vti0\x00', 0x1})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x81, 0x80, 0x80, 0x1, 0x40, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0xb0, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x9a, 0x6, "8d66f58132cf891dfbb3fc5de778f8892090527193057bb525e018ba79be7aeff3ba7b70efa4f6272ad22a6c4e9aa58fdfa6d500187b9f6f974557728abde5fa64d759c73072ad39bc97ee479fba5a242a631303711f06e520ee18b8bd18d87260773361c8548a19c5a75634368d1e34cfbf4973e44d8555ad077365fa65b84be0442f63af9de22466973e07f123d830d240eb43073f"}]}, @NFT_MSG_NEWSET={0x1d0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x81}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa9}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x128, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x19a3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb293}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x965a}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6b2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x858}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x2a8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) (async)
recvmsg$can_raw(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x40010042) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2) (async)
r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r11 = socket$unix(0x1, 0x3, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r10, 0xc0205866, &(0x7f0000000900)={&(0x7f0000000100)=0x9ae, 0x5, &(0x7f0000000140), &(0x7f00000008c0)}) (async)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r12 = getpid() (async)
r13 = getuid() (async)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000780)=0xc)
sendmmsg$unix(r10, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0ccca7b31f488f5c91423f9973840ed68ad7db6ae203c8710ab16e7b7e7520c605595a12b5a0ed477c7b117b603afb7f500042d42164f921f038938bfcc7e13c8a9e65eba5e73a32219a8bd519ebd9f06e784a59c5d87217e2f99752f27762140f04d7a2e", 0x90}, {&(0x7f00000002c0)="9bf90ffad6256eb22875ac98fdd367bab7665b5e1f358ddf60f7d7f59ffb121076b7eaa8cccf", 0x26}, {&(0x7f0000000300)="b011d862636f56ed22209d89529858f2d9fd13f4e81035bfab48b5ebbde82c8f2d3bcd33f2c4f357b359a33794e6f7a21648a2f5f80ab596c6ecadd62ad333e3269af588d1ffc43211a8b508a07315010d6f3c844ff26074e48ab991a306009ab5cd446e7e70250d8dc138c6c0b69c21f18095d5670c7ab79a8c39b72ad1ac87824bae12d9ce6572886438d2278e51c4b9840ebe3cc7d1677c0f4bb1ba5fd051a1ca68c80db7b1e950ab0d8d55f175b5a8181ea77f76f5d34c59cfba8c49c7b8d6d990f71c7cbaacd2dde67307b0dd81770c58a900609c09fa646886c30dabec48e7ad49635227f3bedea810ecd649b2", 0xf0}, {&(0x7f0000000400)="83bafab85dd3bdc1b34e5ac50cd7faa45dcd29204bc15bcfbe8c41023adc0de15acec469349014962ddf1127f4e9d8b8ee05332c166eff7fe772d56f4fc172f8ad24679d5547df9a9e53b2c7c857f8a43c1be068b75f6560737e832df058f61e159052baaacd218060cdf8e0da6080da1381c3d362424bffc9158bdddb91d1019b2b96d51bdb195be5b382861764e575fc2a4dc526524fb22874a9b77e98b63dc1797b3760d5f665e99eafe6fbbe7f15470cbcfe57e5c02d6cbcc8f74f50e701c392ed22b749c1e7c7cf", 0xca}, {&(0x7f0000000580)="3fe1ef4299cd0644bda3015117426307d67e2bcf252668d5a45524fee5fc5970cc15df1f03b1a5ffd02b3213bfa04d97a04f2c5620a1083230281674dd0231588284e73fdccb6baad2f926eabad77375c224b6837eabf836bdb1421b0b175e05f45f1eed89747e50efccab259c5f07db6e06e0e38c13ff26dcfca78ddd198e3e0fc13dae49098aff055cb3b1f36bfa04643a6d30e3e29e51d072bc62ad1d94557f33b7fbb0788287a8", 0xa9}, {&(0x7f0000000640)="c9e07db553caa1f43222d27df491d5fc6cdf3065e453e685ce34099e9bad06b9d20f0decf840b8efec566b92d6afa92110cceab21fbf0a211a9ab264e99d35597462d4aab357c8206714b6c709d8f91af947842dd27f8b1e1d17d9f2b41e59", 0x5f}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8800}}], 0x1, 0x4)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32], 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="23ffffed", @ANYRES16=r7, @ANYBLOB="020027bd7000fbdbdf251200000008003b000d00000008003b008d000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

512.737638ms ago: executing program 2 (id=1630):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x11, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x22, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c"], 0x28}], 0x1}, 0x14008010) (async)
r2 = socket$inet6(0x10, 0x3, 0x0) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0xb, 0x0, @val=@iter={0x0}}, 0x20) (async)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0)

331.930375ms ago: executing program 3 (id=1631):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c)
setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40408c4)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00050300000001fedbdf250000000068b7b708bb01be976766548a0b38bdb96a53fc470836949471bf9a48a2f0eb8d96a1a46b63d0456f6409d353e83447e771118b286de581bc2c55b75971d1d9450cbbde3a2c22d388b3c7816875"], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0)
recvfrom$phonet(r5, 0x0, 0x0, 0x2020, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c000180"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
accept4(r6, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000180)=0x80, 0x800)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x1, 0x25dfdc02, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x3, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

272.501954ms ago: executing program 4 (id=1632):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x2, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}}, 0xea5bc50b6199d77e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4408000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x5c040}, 0x20000000)

266.774772ms ago: executing program 2 (id=1633):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000a9c39a079f2bbf2f4b110044000000000000ac14142e00000400"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f00000100000000000000000000000020010000000000000000000000000000640101020000000000000000000000003c040000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000ac14142c00"/152], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)

208.846449ms ago: executing program 1 (id=1634):
r0 = socket(0x10, 0x803, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x400})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

153.288057ms ago: executing program 0 (id=1635):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100b7000000000000020000020500010007000000090002"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x40b6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "6efec5ba49f98a78", "36317ffba7da20dc59235df348a1aca8", "90bc96ef", "b2a452c6d105af7d"}, 0x28) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400d}, 0x841) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003042cbd7000000000000000000093bad970cd580a03c640ff495b125f2e152b8f82cfb43a9fa88125a4ded51b36753e853ea52f111f0d1343cfc47002c7ede19c0659bc724ed86cbfb25abf545450f3387a60a8816b21eabe8031c6eab27b24118324f9", @ANYRES32=0x0, @ANYBLOB="a428040000000000140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x8000) (async)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="ec03000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
socket(0x28, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r7, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async, rerun: 32)
socket(0x28, 0x5, 0x0) (rerun: 32)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

102.804501ms ago: executing program 2 (id=1636):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f2ffffff850000002d000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r4=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x7c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}]}, 0x7c}, 0x1, 0x0, 0x0, 0x49}, 0x48894)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01"], 0xfc}}, 0x840)
writev(r5, &(0x7f0000000380), 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x2, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)

0s ago: executing program 1 (id=1637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket(0x1e, 0x80000, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001e00))
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

ive interface with an up link
[   95.500433][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.507995][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.515252][ T5614] bridge_slave_1: entered allmulticast mode
[   95.522957][ T5614] bridge_slave_1: entered promiscuous mode
[   95.540086][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.547252][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.556309][ T5612] bridge_slave_0: entered allmulticast mode
[   95.565708][ T5612] bridge_slave_0: entered promiscuous mode
[   95.576250][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.590835][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.603246][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.635891][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.643437][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.651497][ T5612] bridge_slave_1: entered allmulticast mode
[   95.659095][ T5612] bridge_slave_1: entered promiscuous mode
[   95.701353][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.710971][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.738925][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.788476][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.800504][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.811123][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.819433][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.847438][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.874460][ T5616] team0: Port device team_slave_0 added
[   95.883665][ T5613] team0: Port device team_slave_0 added
[   95.914893][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.928559][ T5616] team0: Port device team_slave_1 added
[   95.936419][ T5613] team0: Port device team_slave_1 added
[   95.956526][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.001341][ T5614] team0: Port device team_slave_0 added
[   96.041659][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.049786][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.076478][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.090397][ T5614] team0: Port device team_slave_1 added
[   96.108117][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.115275][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.141532][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.165923][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.173820][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.200491][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.233348][ T5612] team0: Port device team_slave_0 added
[   96.239944][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.247144][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.273262][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.290507][ T5615] hsr_slave_0: entered promiscuous mode
[   96.298035][ T5615] hsr_slave_1: entered promiscuous mode
[   96.320808][ T5612] team0: Port device team_slave_1 added
[   96.338678][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.346143][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.373116][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.428209][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.435436][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.462237][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.522978][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.530169][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.556788][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.575362][ T5613] hsr_slave_0: entered promiscuous mode
[   96.582918][ T5613] hsr_slave_1: entered promiscuous mode
[   96.589588][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   96.595918][ T5613] Cannot create hsr debugfs directory
[   96.626301][ T5616] hsr_slave_0: entered promiscuous mode
[   96.634600][ T5616] hsr_slave_1: entered promiscuous mode
[   96.641168][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   96.647453][ T5616] Cannot create hsr debugfs directory
[   96.655365][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.662434][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.689329][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.846844][ T5614] hsr_slave_0: entered promiscuous mode
[   96.853772][ T5614] hsr_slave_1: entered promiscuous mode
[   96.860397][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   96.866213][ T5614] Cannot create hsr debugfs directory
[   96.943492][ T5612] hsr_slave_0: entered promiscuous mode
[   96.951251][ T5612] hsr_slave_1: entered promiscuous mode
[   96.958085][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   96.965379][ T5612] Cannot create hsr debugfs directory
[   97.148260][ T5626] Bluetooth: hci3: command tx timeout
[   97.148986][   T50] Bluetooth: hci0: command tx timeout
[   97.154336][ T4923] Bluetooth: hci1: command tx timeout
[   97.164741][ T5618] Bluetooth: hci4: command tx timeout
[   97.171052][ T5620] Bluetooth: hci2: command tx timeout
[   97.455737][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.470211][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.480082][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.492313][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.500468][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.511549][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.520118][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.532889][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.619905][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.633997][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.642887][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.654504][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.673328][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.686300][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.698098][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.709597][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.819010][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.831854][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.841743][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.852629][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.875389][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.886154][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.894491][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.905783][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.044548][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.057049][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.073583][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.087075][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.100225][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.109205][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.119461][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.145160][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.156313][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.199897][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   98.272201][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.281157][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.316300][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.330634][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.341295][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.349202][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.372370][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.386471][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.396909][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.409566][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.432315][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.445093][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.493158][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.545693][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.590438][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   98.623950][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   98.669212][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.677249][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.712881][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.721197][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.761123][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.769001][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.781493][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.789074][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.802644][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.913375][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   98.969669][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.977082][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.016542][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.024342][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.115025][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.205824][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   99.230389][ T5620] Bluetooth: hci2: command tx timeout
[   99.238292][ T5618] Bluetooth: hci0: command tx timeout
[   99.245583][ T5626] Bluetooth: hci4: command tx timeout
[   99.248734][ T4923] Bluetooth: hci3: command tx timeout
[   99.254042][ T5618] Bluetooth: hci1: command tx timeout
[   99.293352][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.300894][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.339526][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.346854][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.861672][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.070510][ T5615] veth0_vlan: entered promiscuous mode
[  100.135490][ T5615] veth1_vlan: entered promiscuous mode
[  100.285655][ T5615] veth0_macvtap: entered promiscuous mode
[  100.337581][ T5615] veth1_macvtap: entered promiscuous mode
[  100.444731][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.483717][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.512344][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.580972][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.650398][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.669257][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.724150][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.947959][ T5613] veth0_vlan: entered promiscuous mode
[  100.960866][  T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.974307][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.998900][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.042509][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.074819][ T5613] veth1_vlan: entered promiscuous mode
[  101.110964][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.145274][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.160740][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.182278][ T5614] veth0_vlan: entered promiscuous mode
[  101.215786][ T5614] veth1_vlan: entered promiscuous mode
[  101.276877][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.297317][ T5613] veth0_macvtap: entered promiscuous mode
[  101.309515][ T5618] Bluetooth: hci3: command tx timeout
[  101.317881][ T5620] Bluetooth: hci0: command tx timeout
[  101.324504][ T5626] Bluetooth: hci1: command tx timeout
[  101.324553][   T50] Bluetooth: hci4: command tx timeout
[  101.341174][ T4923] Bluetooth: hci2: command tx timeout
[  101.366675][ T5613] veth1_macvtap: entered promiscuous mode
[  101.446438][ T5616] veth0_vlan: entered promiscuous mode
[  101.477400][ T5612] veth0_vlan: entered promiscuous mode
[  101.495639][ T5614] veth0_macvtap: entered promiscuous mode
[  101.506395][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[  101.516588][ T5616] veth1_vlan: entered promiscuous mode
[  101.535263][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.550631][ T5804] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[  101.561221][ T5612] veth1_vlan: entered promiscuous mode
[  101.573761][ T5805] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[  101.583963][ T5614] veth1_macvtap: entered promiscuous mode
[  101.597439][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.701591][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.749211][ T3266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.765764][ T5616] veth0_macvtap: entered promiscuous mode
[  101.781026][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.818264][  T161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.857306][ T5616] veth1_macvtap: entered promiscuous mode
[  101.921579][ T5612] veth0_macvtap: entered promiscuous mode
[  101.943644][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[  101.956968][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[  102.022672][ T5612] veth1_macvtap: entered promiscuous mode
[  102.048298][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.056826][ T3266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.065229][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.088285][ T3266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.096751][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.163661][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.191715][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.215377][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.231788][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.246024][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.286056][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.351767][  T161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.398023][   T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.474685][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.500700][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.533248][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.559836][ T5822] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.607207][ T5822] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[  102.631976][ T5821] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[  102.677815][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.697391][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.733816][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.768198][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.876292][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.885309][  T161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.904204][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.914786][  T161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.024029][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.053891][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.093937][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.112939][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.124477][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.134833][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.145324][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.159469][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.170221][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[  103.208410][ T5841] netlink: 'syz.3.4': attribute type 9 has an invalid length.
[  103.309153][ T3266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.350017][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.360150][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.384602][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.456153][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.496581][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.511457][  T161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.539547][  T161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.408356][ T5868] Bluetooth: MGMT ver 1.23
[  104.531965][ T5874] syzkaller1: entered promiscuous mode
[  104.559483][ T5874] syzkaller1: entered allmulticast mode
[  105.539092][ T5910] Zero length message leads to an empty skb
[  106.621609][ T5939] x_tables: unsorted entry at hook 4
[  106.867658][ T5941] team0: entered promiscuous mode
[  106.885969][ T5941] team_slave_0: entered promiscuous mode
[  106.904660][ T5941] team_slave_1: entered promiscuous mode
[  106.916295][ T5941] team0: entered allmulticast mode
[  106.924941][ T5941] team_slave_0: entered allmulticast mode
[  106.940106][ T5954] __nla_validate_parse: 68 callbacks suppressed
[  106.940126][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[  106.942525][ T5941] team_slave_1: entered allmulticast mode
[  106.974477][ T5941] team0: Cannot enslave team device to itself
[  106.982875][ T5957] netlink: 'syz.3.41': attribute type 1 has an invalid length.
[  106.997211][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[  107.021573][ T5954] netlink: 3 bytes leftover after parsing attributes in process `syz.0.42'.
[  107.055544][ T5952] gretap1: entered allmulticast mode
[  107.236363][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[  107.474207][ T5978] netlink: 52 bytes leftover after parsing attributes in process `syz.0.48'.
[  107.586682][ T5982] netlink: ct family unspecified
[  107.625838][ T5982] openvswitch: netlink: Actions may not be safe on all matching packets
[  107.671708][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.49'.
[  107.961434][ T5994] syzkaller0: entered promiscuous mode
[  107.973926][ T5994] syzkaller0: entered allmulticast mode
[  108.395941][ T6011] netlink: 56 bytes leftover after parsing attributes in process `syz.4.53'.
[  108.491596][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'.
[  108.586694][ T6018] netlink: 'syz.3.54': attribute type 1 has an invalid length.
[  108.642085][ T6023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'.
[  108.741913][ T6030] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET)
[  109.212049][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[  109.525448][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.663421][ T6063] Driver unsupported XDP return value 0 on prog  (id 24) dev N/A, expect packet loss!
[  109.864839][ T6050] syzkaller1: entered promiscuous mode
[  109.893464][ T6050] syzkaller1: entered allmulticast mode
[  110.296946][ T6082] tipc: Started in network mode
[  110.317910][ T6082] tipc: Node identity , cluster identity 4711
[  110.345928][ T6082] tipc: Failed to obtain node identity
[  110.370034][ T6082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.502955][ T6098] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  110.516364][ T6089] syzkaller0: entered promiscuous mode
[  110.522568][ T6098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.535677][ T6089] syzkaller0: entered allmulticast mode
[  110.692243][ T6053] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  112.274804][ T6112] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  112.341416][ T6129] __nla_validate_parse: 1 callbacks suppressed
[  112.341437][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[  112.659073][ T6147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'.
[  112.694950][ T6144] netlink: 'syz.0.78': attribute type 2 has an invalid length.
[  112.822671][ T6144] 
: entered promiscuous mode
[  113.175134][ T6165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.85'.
[  113.371987][ T6167] netlink: 'syz.4.86': attribute type 2 has an invalid length.
[  113.380422][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.86'.
[  113.471149][ T6167] : entered promiscuous mode
[  113.969836][ T6172] netlink: 176 bytes leftover after parsing attributes in process `syz.1.87'.
[  114.049538][ T6178] xt_CT: No such helper "snmp_trap"
[  114.332085][ T6196] netlink: 168 bytes leftover after parsing attributes in process `syz.3.93'.
[  114.346038][ T6196] netlink: 196 bytes leftover after parsing attributes in process `syz.3.93'.
[  114.396165][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.513112][ T6199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.618558][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.856306][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'.
[  115.034621][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[  115.077672][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[  115.093211][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  115.104376][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  115.113772][ T6218] netlink: 'syz.2.97': attribute type 14 has an invalid length.
[  115.126099][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  115.153579][ T6218] netlink: 'syz.2.97': attribute type 13 has an invalid length.
[  115.517664][ T6203] syz.3.95 (6203) used greatest stack depth: 18280 bytes left
[  115.545305][ T6234] syz_tun: entered promiscuous mode
[  115.585743][ T6234] macsec1: entered allmulticast mode
[  115.607126][ T6234] syz_tun: entered allmulticast mode
[  115.641567][ T6234] batman_adv: batadv0: Adding interface: macsec1
[  115.665477][ T6234] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.718255][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.741331][ T6234] batman_adv: batadv0: Interface activated: macsec1
[  115.903808][ T5718] xfrm0 speed is unknown, defaulting to 1000
[  115.914977][ T6226] infiniband syz0: set active
[  115.940041][ T6226] infiniband syz0: added xfrm0
[  115.967791][ T6245] IPVS: set_ctl: invalid protocol: 39 224.0.0.2:20002
[  116.005715][ T6226] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  116.018647][ T6226] infiniband syz0: Couldn't open port 1
[  116.049753][ T6226] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  116.095942][ T6248] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[  116.110156][ T6226] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  116.157751][ T6226] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  116.331564][ T6226] RDS/IB: syz0: added
[  116.344622][ T6226] smc: adding ib device syz0 with port count 1
[  116.359985][ T6226] smc:    ib device syz0 port 1 has no pnetid
[  116.378080][   T10] xfrm0 speed is unknown, defaulting to 1000
[  116.414290][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  116.483652][ T6267] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  117.275059][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  117.707320][ T6322] __nla_validate_parse: 5 callbacks suppressed
[  117.707339][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[  117.774366][ T6315] bond1: entered allmulticast mode
[  117.799779][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'.
[  117.821049][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'.
[  117.839710][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[  117.893588][ T6326] netlink: 'syz.3.129': attribute type 12 has an invalid length.
[  117.938246][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[  118.187041][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  118.322048][ T6337] netlink: 56 bytes leftover after parsing attributes in process `syz.4.133'.
[  118.392312][ T6337] xt_bpf: check failed: parse error
[  118.418413][ T6340] netlink: 'syz.2.134': attribute type 32 has an invalid length.
[  118.442551][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[  118.544039][ T6340] bond1: Setting coupled_control to off (0)
[  118.742861][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[  119.269369][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'.
[  119.280984][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  119.317671][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'.
[  119.526397][ T6398] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[  119.544184][ T6390] bond2: option tlb_dynamic_lb: invalid value (128)
[  119.573456][ T6390] bond2 (unregistering): Released all slaves
[  119.700650][ T6393] ip6gretap0: entered promiscuous mode
[  119.830900][ T6398] bond1: entered promiscuous mode
[  119.889697][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.989889][ T6419] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[  120.057174][ T6405] bond1: (slave bridge1): making interface the new active one
[  120.105671][ T6405] bridge1: entered promiscuous mode
[  120.154575][ T6405] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  120.365971][ T6226] xfrm0 speed is unknown, defaulting to 1000
[  120.570200][ T6440] netlink: 'syz.3.160': attribute type 29 has an invalid length.
[  120.748141][ T6450] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.950912][ T6457] vlan0: entered promiscuous mode
[  120.990971][ T6457] vlan0: entered allmulticast mode
[  121.009785][ T6457] veth0_vlan: entered allmulticast mode
[  121.029034][ T6457] team0: Port device vlan0 added
[  122.042752][ T6513] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  122.804981][ T6546] ieee802154 phy0 wpan0: encryption failed: -22
[  122.850162][ T6546] ieee802154 phy0 wpan0: encryption failed: -22
[  122.883088][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.895287][ T6553] netlink: 'syz.4.182': attribute type 10 has an invalid length.
[  122.933602][ T6553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  123.000266][ T6553] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  123.365466][ T6582] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  123.365466][ T6582] Please contact the netfilter-devel mailing list or update your nftables rules.
[  123.651910][ T6599] __nla_validate_parse: 1 callbacks suppressed
[  123.651929][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'.
[  123.716950][ T6598] bond2 (unregistering): Released all slaves
[  124.174428][ T6625] netlink: 88 bytes leftover after parsing attributes in process `syz.3.199'.
[  124.204649][ T6636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.491714][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[  124.544994][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[  124.591772][ T6499] syzkaller0: tun_net_xmit 76
[  124.611712][ T6499] syzkaller0: tun_net_xmit 48
[  124.618090][   T42] syzkaller0: tun_net_xmit 76
[  125.854165][ T6651] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  125.920979][ T6648] syzkaller0: entered promiscuous mode
[  125.926533][ T6648] syzkaller0: entered allmulticast mode
[  127.039194][ T6641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.272192][ T6499] IPVS: starting estimator thread 0...
[  127.368448][ T6674] IPVS: using max 30 ests per chain, 72000 per kthread
[  127.623324][ T6687] sctp: [Deprecated]: syz.2.217 (pid 6687) Use of int in maxseg socket option.
[  127.623324][ T6687] Use struct sctp_assoc_value instead
[  127.652226][ T6687] sctp: [Deprecated]: syz.2.217 (pid 6687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.652226][ T6687] Use struct sctp_sack_info instead
[  128.028754][ T6703] netlink: 208 bytes leftover after parsing attributes in process `syz.4.222'.
[  128.095963][ T6704] syzkaller0: entered promiscuous mode
[  128.113384][ T6704] syzkaller0: entered allmulticast mode
[  129.259064][ T6757] netlink: 'syz.0.233': attribute type 1 has an invalid length.
[  129.320260][ T6763] sctp: [Deprecated]: syz.2.232 (pid 6763) Use of int in maxseg socket option.
[  129.320260][ T6763] Use struct sctp_assoc_value instead
[  129.371347][ T6757] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.498083][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'.
[  129.661509][ T6770] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.878031][ T6772] bond3: (slave batadv1): Opening slave failed
[  129.893658][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'.
[  130.006643][ T6780] erspan0: entered promiscuous mode
[  130.252715][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  130.375534][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'.
[  130.402263][ T6793] macsec1: entered promiscuous mode
[  130.429224][ T6793] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  130.487418][ T6793] macsec1: entered allmulticast mode
[  130.503224][ T6793] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  130.541286][ T6793] 8021q: adding VLAN 0 to HW filter on device macsec1
[  130.575124][   T29] audit: type=1800 audit(1786289244.810:2): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.247" name="memory.events" dev="tmpfs" ino=258 res=0 errno=0
[  130.629016][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'.
[  130.805657][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'.
[  130.950930][ T6824] syzkaller0: entered promiscuous mode
[  130.964794][ T6824] syzkaller0: entered allmulticast mode
[  131.028359][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.060016][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.399567][ T6837] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[  131.443135][ T6829] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  131.454163][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'.
[  131.675278][ T6843] netlink: 112 bytes leftover after parsing attributes in process `syz.2.255'.
[  131.690261][ T6843] netlink: 56 bytes leftover after parsing attributes in process `syz.2.255'.
[  131.701873][ T6837] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.733382][ T6845] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[  131.751847][ T6846] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  131.767757][ T6846] bond1 (unregistering): Released all slaves
[  131.932315][ T6493] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.988486][ T6493] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.333504][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'.
[  132.364936][ T6873] openvswitch: netlink: IP tunnel TTL not specified.
[  132.372637][ T6873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.472954][ T6878] syzkaller0: entered promiscuous mode
[  132.479170][ T6878] syzkaller0: entered allmulticast mode
[  132.875868][ T6888] xt_hashlimit: size too large, truncated to 1048576
[  132.924644][ T6890] batadv0: entered promiscuous mode
[  132.941491][ T6890] macsec2: entered promiscuous mode
[  132.959538][ T6890] macsec2: entered allmulticast mode
[  132.982545][ T6890] batadv0: entered allmulticast mode
[  133.015997][ T6890] 8021q: adding VLAN 0 to HW filter on device macsec2
[  133.052052][ T6890] batadv0: left allmulticast mode
[  133.082791][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  133.090934][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  133.111560][ T6890] batadv0: left promiscuous mode
[  133.169797][ T6909] netlink: 'syz.4.274': attribute type 30 has an invalid length.
[  133.459031][ T6909] bond2: option arp_missed_max: invalid value (0)
[  133.486657][ T6909] bond2: option arp_missed_max: allowed values 1 - 255
[  133.516921][ T6909] bond2 (unregistering): Released all slaves
[  134.034899][ T6943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.157263][ T6937] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[  134.258182][ T6959] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  134.371777][ T6962] xfrm0 speed is unknown, defaulting to 1000
[  134.757300][ T6973] netlink: 'syz.4.292': attribute type 30 has an invalid length.
[  134.867103][ T6976] sctp: [Deprecated]: syz.0.293 (pid 6976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.867103][ T6976] Use struct sctp_sack_info instead
[  134.944481][ T6976] sctp: [Deprecated]: syz.0.293 (pid 6976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.944481][ T6976] Use struct sctp_sack_info instead
[  135.174892][ T6980] __nla_validate_parse: 12 callbacks suppressed
[  135.174913][ T6980] netlink: 27 bytes leftover after parsing attributes in process `syz.4.295'.
[  135.447940][ T6996] netlink: 104 bytes leftover after parsing attributes in process `syz.0.299'.
[  135.487283][ T6995] netlink: 104 bytes leftover after parsing attributes in process `syz.0.299'.
[  135.562626][ T6997] tun0: tun_chr_ioctl cmd 1074025680
[  135.593165][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.301'.
[  135.656538][ T7003] netlink: 598 bytes leftover after parsing attributes in process `syz.0.302'.
[  135.673869][ T6997] Bluetooth: MGMT ver 1.23
[  136.340577][ T7020] netlink: 252 bytes leftover after parsing attributes in process `syz.2.307'.
[  137.112509][ T7050] tipc: Started in network mode
[  137.127683][ T7050] tipc: Node identity 822e37f9f50a, cluster identity 4711
[  137.161646][ T7050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.194129][ T7050] syzkaller0: entered promiscuous mode
[  137.216994][ T7050] syzkaller0: entered allmulticast mode
[  137.277106][ T7050] tipc: Resetting bearer <eth:syzkaller0>
[  137.328795][ T7049] tipc: Resetting bearer <eth:syzkaller0>
[  137.430788][ T7049] tipc: Disabling bearer <eth:syzkaller0>
[  137.510750][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.318'.
[  137.564002][ T7070] IPVS: set_ctl: invalid protocol: 92 172.30.1.4:20001
[  137.780963][ T7082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.075060][ T7088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.128207][ T7088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.309873][ T7067] vxcan0: tx address claim with dlc 0
[  138.390703][ T7101] tipc: Started in network mode
[  138.396376][ T7101] tipc: Node identity ac1414aa, cluster identity 4711
[  138.421308][ T7101] tipc: Enabled bearer <udp:s>, priority 10
[  138.421332][ T7104] netlink: 300 bytes leftover after parsing attributes in process `syz.3.328'.
[  138.444367][ T7103] rdma_rxe: rxe_newlink: failed to add xfrm0
[  138.624031][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.331'.
[  138.662690][ T7109] netlink: 'syz.2.332': attribute type 12 has an invalid length.
[  138.711749][ T7109] netlink: 'syz.2.332': attribute type 29 has an invalid length.
[  138.734216][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'.
[  138.744730][ T7109] netlink: 'syz.2.332': attribute type 3 has an invalid length.
[  138.773166][ T7109] netlink: 'syz.2.332': attribute type 2 has an invalid length.
[  138.917075][ T7119] xt_hashlimit: size too large, truncated to 1048576
[  139.540484][ T5738] tipc: Node number set to 2886997162
[  140.051895][ T7173] netlink: 'syz.3.350': attribute type 1 has an invalid length.
[  140.072890][ T7164] bond2 (unregistering): Released all slaves
[  140.444158][ T7190] ieee802154 phy0 wpan0: encryption failed: -22
[  140.667693][   T50] Bluetooth: hci4: command tx timeout
[  142.760835][ T7273] __nla_validate_parse: 8 callbacks suppressed
[  142.760869][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.365'.
[  142.876346][ T7274] ip6gre1: entered promiscuous mode
[  142.900407][ T7274] ip6gre1: entered allmulticast mode
[  143.099669][ T7273] bond5: Unable to set down delay as MII monitoring is disabled
[  143.127777][ T7273] bond5 (unregistering): Released all slaves
[  143.475966][ T7296] syzkaller0: entered promiscuous mode
[  143.494019][ T7296] syzkaller0: entered allmulticast mode
[  143.578438][ T7287] tipc: Started in network mode
[  143.607678][ T7287] tipc: Node identity 36efacbfcac3, cluster identity 4711
[  143.634689][ T7287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.690924][   T10] bridge0: entered promiscuous mode
[  143.804480][ T7287] tipc: Resetting bearer <eth:syzkaller0>
[  143.862486][ T7285] tipc: Resetting bearer <eth:syzkaller0>
[  143.871346][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'.
[  143.959818][ T7285] tipc: Disabling bearer <eth:syzkaller0>
[  144.474421][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  144.505309][ T7353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.723371][ T7353] syzkaller0: entered promiscuous mode
[  144.734503][ T7353] syzkaller0: entered allmulticast mode
[  145.231331][ T7387] tipc: New replicast peer: 255.255.255.255
[  145.251640][ T7387] tipc: Enabled bearer <udp:syz2>, priority 10
[  145.260388][ T7385] syzkaller0: entered promiscuous mode
[  145.268497][ T7387] netlink: 220 bytes leftover after parsing attributes in process `syz.2.385'.
[  145.281447][ T7385] syzkaller0: entered allmulticast mode
[  145.447705][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.473503][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.484880][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.493118][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.501234][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.513206][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.520918][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.528580][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.536478][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.544274][ T5738] hid-generic 0005:16C0:5509.0001: unknown main item tag 0x0
[  145.673071][ T5738] hid-generic 0005:16C0:5509.0001: hidraw0: BLUETOOTH HID v0.88 Device [syz0] on aa:aa:aa:aa:aa:aa
[  146.376458][ T5718] tipc: Node number set to 4230786239
[  146.409670][ T7431] syzkaller1: tun_chr_ioctl cmd 1074025677
[  146.442783][ T7431] syzkaller1: linktype set to 1
[  146.925112][ T7457] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[  147.043794][ T7457] bond3: entered promiscuous mode
[  147.049487][ T7457] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.070833][ T7466] nbd: must specify a size in bytes for the device
[  147.164283][ T7465] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.180829][ T7465] bond3: (slave ipip1): The slave device specified does not support setting the MAC address
[  147.192805][ T7465] bond3: (slave ipip1): Setting fail_over_mac to active for active-backup mode
[  147.235564][ T7465] bond3: (slave ipip1): making interface the new active one
[  147.241579][ T7470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.258531][ T7465] ipip1: entered promiscuous mode
[  147.265581][ T7465] bond3: (slave ipip1): Enslaving as an active interface with an up link
[  147.750487][ T7470] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.770386][ T7470] 8021q: adding VLAN 0 to HW filter on device bond2
[  147.780648][ T7470] ip6gre1: left promiscuous mode
[  147.786678][ T7470] ip6gretap0: entered promiscuous mode
[  147.844329][ T7498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.410'.
[  148.151491][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.180003][   T35] openvswitch: cpu_id mismatch with handler threads
[  148.243184][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  148.440454][ T7532] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[  148.714092][ T7540] bond9: (slave bridge1): making interface the new active one
[  148.737267][ T7540] bond9: (slave bridge1): Enslaving as an active interface with an up link
[  148.764582][ T7546] netlink: 'syz.3.423': attribute type 6 has an invalid length.
[  149.060343][ T7554] syzkaller0: entered promiscuous mode
[  149.074357][ T7554] syzkaller0: entered allmulticast mode
[  149.175229][ T7554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.426'.
[  149.304095][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'.
[  149.721120][ T7576] syzkaller0: entered promiscuous mode
[  149.734575][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.428'.
[  149.746647][ T7576] syzkaller0: entered allmulticast mode
[  149.827432][ T7582] netlink: 'syz.1.433': attribute type 62 has an invalid length.
[  149.841940][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.852284][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.506948][ T7619] netlink: 7 bytes leftover after parsing attributes in process `syz.1.442'.
[  150.808745][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'.
[  151.345324][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'.
[  151.664844][ T7676] netlink: 260 bytes leftover after parsing attributes in process `syz.3.461'.
[  151.716552][ T7676] netlink: 160 bytes leftover after parsing attributes in process `syz.3.461'.
[  151.969376][ T7693] raw_sendmsg: syz.2.465 forgot to set AF_INET. Fix it!
[  151.984572][ T7695] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  152.008096][ T7694] netlink: 'syz.1.466': attribute type 1 has an invalid length.
[  152.042581][ T7698] netlink: 'syz.0.467': attribute type 2 has an invalid length.
[  152.167378][ T7708] FAULT_INJECTION: forcing a failure.
[  152.167378][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  152.182293][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(full) 
[  152.182318][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  152.182336][ T7708] Call Trace:
[  152.182343][ T7708]  <TASK>
[  152.182350][ T7708]  dump_stack_lvl+0xe8/0x150
[  152.182378][ T7708]  should_fail_ex+0x40c/0x560
[  152.182401][ T7708]  _copy_to_user+0x31/0xb0
[  152.182426][ T7708]  simple_read_from_buffer+0xe1/0x170
[  152.182452][ T7708]  proc_fail_nth_read+0x1bb/0x230
[  152.182479][ T7708]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.182507][ T7708]  ? rw_verify_area+0x24a/0x4c0
[  152.182536][ T7708]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.182560][ T7708]  vfs_read+0x213/0xa80
[  152.182591][ T7708]  ? __pfx___mutex_lock+0x10/0x10
[  152.182622][ T7708]  ? __pfx_vfs_read+0x10/0x10
[  152.182649][ T7708]  ? __fget_files+0x2a/0x420
[  152.182674][ T7708]  ? __fget_files+0x3a2/0x420
[  152.182697][ T7708]  ? __fget_files+0x2a/0x420
[  152.182731][ T7708]  ksys_read+0x150/0x270
[  152.182762][ T7708]  ? __pfx_ksys_read+0x10/0x10
[  152.182808][ T7708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.182830][ T7708]  do_syscall_64+0x174/0x580
[  152.182859][ T7708]  ? trace_irq_disable+0x3b/0x140
[  152.182884][ T7708]  ? clear_bhb_loop+0x70/0xc0
[  152.182910][ T7708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.182930][ T7708] RIP: 0033:0x7fbe5a55e90e
[  152.182949][ T7708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  152.182965][ T7708] RSP: 002b:00007fbe5b40bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  152.182993][ T7708] RAX: ffffffffffffffda RBX: 00007fbe5b40c6c0 RCX: 00007fbe5a55e90e
[  152.183008][ T7708] RDX: 000000000000000f RSI: 00007fbe5b40c0a0 RDI: 0000000000000008
[  152.183019][ T7708] RBP: 00007fbe5b40c090 R08: 0000000000000000 R09: 0000000000000000
[  152.183030][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.183041][ T7708] R13: 00007fbe5a826038 R14: 00007fbe5a825fa0 R15: 00007ffe4d065948
[  152.183074][ T7708]  </TASK>
[  152.715265][ T7717] netlink: 'syz.4.471': attribute type 1 has an invalid length.
[  152.814446][ T7717] bond3: option mode: invalid value (10)
[  152.842442][ T7717] bond3 (unregistering): Released all slaves
[  152.980931][ T7741] x_tables: duplicate underflow at hook 1
[  153.017270][ T7740] xt_TCPMSS: Only works on TCP SYN packets
[  153.121818][ T7729] syzkaller0: entered promiscuous mode
[  153.128323][ T7729] syzkaller0: entered allmulticast mode
[  155.025181][ T7761] hsr0: entered promiscuous mode
[  155.044799][ T7761] hsr0: entered allmulticast mode
[  155.050398][ T7761] hsr_slave_0: entered allmulticast mode
[  155.062969][ T7761] hsr_slave_1: entered allmulticast mode
[  155.215999][ T7766] netlink: 'syz.0.487': attribute type 10 has an invalid length.
[  155.693079][ T7784] syzkaller0: entered promiscuous mode
[  155.701917][ T7784] syzkaller0: entered allmulticast mode
[  155.722880][ T7792] __nla_validate_parse: 5 callbacks suppressed
[  155.722899][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'.
[  155.750955][ T7792] openvswitch: netlink: Message has 1 unknown bytes.
[  156.101009][ T7816] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[  156.292755][ T7816] bond4: entered promiscuous mode
[  156.303971][ T7820] netlink: zone id is out of range
[  156.309733][ T7816] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.311329][ T7820] netlink: zone id is out of range
[  156.326573][ T7820] netlink: zone id is out of range
[  156.334556][ T7820] netlink: zone id is out of range
[  156.340297][ T7820] netlink: zone id is out of range
[  156.345797][ T7820] netlink: zone id is out of range
[  156.352361][ T7817] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  156.365269][ T7820] netlink: zone id is out of range
[  156.370721][ T7817] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  156.383376][ T7817] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  156.398348][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[  156.413708][ T7820] netlink: zone id is out of range
[  156.427736][ T7820] netlink: zone id is out of range
[  156.542094][ T7834] netlink: 'syz.4.507': attribute type 1 has an invalid length.
[  156.637713][ T7834] 8021q: adding VLAN 0 to HW filter on device bond3
[  156.741699][ T7841] netlink: 'syz.1.508': attribute type 13 has an invalid length.
[  156.947176][ T7852] nft_compat: unsupported protocol 5
[  157.134465][ T4934] xfrm0 speed is unknown, defaulting to 1000
[  157.197403][ T7860] netlink: 'syz.4.513': attribute type 1 has an invalid length.
[  157.231359][ T7860] netlink: 'syz.4.513': attribute type 2 has an invalid length.
[  157.266320][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.371802][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'.
[  157.700953][ T7872] batadv0: Caught tx_queue_len zero misconfig
[  157.751685][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.519'.
[  157.913509][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'.
[  158.101379][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'.
[  158.664040][ T7916] netlink: 104 bytes leftover after parsing attributes in process `syz.4.527'.
[  159.132922][ T7936] netlink: 88 bytes leftover after parsing attributes in process `syz.4.535'.
[  159.219451][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'.
[  159.273965][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'.
[  160.049088][ T7941] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.074316][ T7941] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  160.163717][ T7941] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  160.173214][ T7941] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  160.245583][ T7941] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.268080][ T7941] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  160.318284][ T7941] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  160.337644][ T7941] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  160.935993][ T8008] xt_hashlimit: size too large, truncated to 1048576
[  161.812110][ T8045] __nla_validate_parse: 3 callbacks suppressed
[  161.812130][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'.
[  162.041538][ T8070] batman_adv: batadv0: Adding interface: dummy0
[  162.061846][ T8070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.100333][ T8070] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  162.120290][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'.
[  162.212346][ T8076] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  162.501945][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.563'.
[  162.556203][ T8090] net_ratelimit: 1706 callbacks suppressed
[  162.556226][ T8090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.591830][ T8094] x_tables: duplicate underflow at hook 2
[  162.692256][ T8090] netlink: 'syz.4.562': attribute type 4 has an invalid length.
[  163.268643][ T8125] IPVS: rr: UDP 127.0.0.1:10000 - no destination available
[  163.270037][  T999] IPVS: starting estimator thread 0...
[  163.294792][ T8124] IPVS: rr: UDP 127.0.0.1:10000 - no destination available
[  163.399760][ T8127] IPVS: using max 30 ests per chain, 72000 per kthread
[  163.554558][ T8143] openvswitch: netlink: IP tunnel dst address not specified
[  164.152829][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  164.166260][ T8167] netlink: 'syz.3.585': attribute type 2 has an invalid length.
[  164.187340][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  164.213313][ T8167] netlink: 'syz.3.585': attribute type 2 has an invalid length.
[  164.281184][ T8170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'.
[  164.370133][ T8168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.586'.
[  164.426721][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.071820][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'.
[  165.542793][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.744940][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'.
[  166.151524][ T8241] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  166.179730][ T8237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.605'.
[  166.426576][ T8252] netlink: 'syz.4.609': attribute type 12 has an invalid length.
[  166.497404][ T8252] sctp: [Deprecated]: syz.4.609 (pid 8252) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.497404][ T8252] Use struct sctp_sack_info instead
[  166.576642][ T8259] syzkaller0: entered promiscuous mode
[  166.582606][ T8259] syzkaller0: entered allmulticast mode
[  166.597610][ T8244] xfrm0 speed is unknown, defaulting to 1000
[  168.562034][ T8272] bridge0: port 3(vlan2) entered blocking state
[  168.568846][ T8272] bridge0: port 3(vlan2) entered disabled state
[  168.575319][ T8272] vlan2: entered allmulticast mode
[  168.582570][ T8272] geneve0: entered allmulticast mode
[  168.590582][ T8272] vlan2: entered promiscuous mode
[  168.595675][ T8272] geneve0: entered promiscuous mode
[  169.102424][ T8316] __nla_validate_parse: 2 callbacks suppressed
[  169.102442][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'.
[  169.143876][ T8306] bond6: option lp_interval: invalid value (0)
[  169.153432][ T8306] bond6: option lp_interval: allowed values 1 - 2147483647
[  169.184377][ T8306] bond6 (unregistering): Released all slaves
[  169.520598][ T8325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  169.563041][ T8328] netlink: 'syz.0.626': attribute type 1 has an invalid length.
[  169.696813][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[  169.882855][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'.
[  169.897185][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'.
[  169.925357][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'.
[  169.938772][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'.
[  169.979461][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  170.133169][ T8344] vlan3: entered promiscuous mode
[  170.148898][ T8344] bridge0: entered promiscuous mode
[  170.872116][ T8370] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  171.021205][ T8372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  171.079934][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.087070][ T8388] xt_hl: Unknown Hop Limit match mode: 206
[  171.088951][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.117413][ T8387] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[  171.271761][ T8392] tipc: Started in network mode
[  171.279958][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'.
[  171.293199][ T8392] tipc: Node identity 3837, cluster identity 8
[  171.316546][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'.
[  171.335124][ T8392] tipc: Node number set to 14391
[  171.384539][ T8397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.645'.
[  171.478023][ T8391] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  171.506509][ T8391] bond4 (unregistering): Released all slaves
[  171.600192][ T8412] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.694749][ T8400] bond7: option fail_over_mac: invalid value (127)
[  171.743637][ T8400] bond7 (unregistering): Released all slaves
[  171.813145][ T8413] virt_wifi0: entered promiscuous mode
[  173.598253][ T8482] openvswitch: netlink: Duplicate or invalid key (type 0).
[  173.830335][ T8496] pim6reg: entered allmulticast mode
[  174.091584][ T8500] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.117932][ T8513] __nla_validate_parse: 6 callbacks suppressed
[  174.117951][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[  174.157011][ T8509] netlink: 92 bytes leftover after parsing attributes in process `syz.1.667'.
[  174.205674][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[  174.455583][ T8523] sock: sock_timestamping_bind_phc: sock not bind to device
[  174.650565][ T8520] syzkaller0: entered promiscuous mode
[  174.695342][ T8520] syzkaller0: entered allmulticast mode
[  175.001034][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'.
[  176.700819][ T8556] hsr_slave_1 (unregistering): left promiscuous mode
[  176.880201][ T8567] syzkaller0: entered promiscuous mode
[  176.917694][ T8567] syzkaller0: entered allmulticast mode
[  176.944504][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[  177.204878][ T8576] trusted_key: syz.1.685 sent an empty control message without MSG_MORE.
[  177.573253][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'.
[  177.604643][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'.
[  177.770781][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  177.897422][ T8608] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  178.103563][ T1004] IPVS: starting estimator thread 0...
[  178.207598][ T8623] IPVS: using max 29 ests per chain, 69600 per kthread
[  178.337114][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'.
[  178.385645][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.505181][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.579157][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'.
[  178.843460][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.851391][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.998164][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.201971][ T8631] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  179.215827][ T8631] macsec1: left promiscuous mode
[  179.227061][ T8631] macsec1: left allmulticast mode
[  179.241885][ T8631] bond3: left promiscuous mode
[  179.247060][ T8631] ipip1: left promiscuous mode
[  179.254578][ T8631] bond4: left promiscuous mode
[  179.273993][ T8638] =v: renamed from veth0_to_bond (while UP)
[  179.310686][   T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.329507][   T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.367236][ T8653] xfrm0 speed is unknown, defaulting to 1000
[  179.382393][ T6503] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.388983][ T8653] syz0: Port: 1 Link DOWN
[  179.415988][ T6503] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.541496][ T8653] xfrm0 speed is unknown, defaulting to 1000
[  179.887046][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.709'.
[  181.794135][ T8709] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  182.451486][ T8757] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  182.513809][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'.
[  182.576815][ T8757] 8021q: adding VLAN 0 to HW filter on device bond10
[  182.615721][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'.
[  182.635540][ T8757] bond10: (slave gretap1): making interface the new active one
[  182.647439][ T8757] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  182.753603][ T8766] netlink: 'syz.2.723': attribute type 1 has an invalid length.
[  182.937986][   T29] audit: type=1804 audit(1786289297.170:3): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.726" name="/newroot/148/memory.events" dev="tmpfs" ino=775 res=1 errno=0
[  182.986953][   T29] audit: type=1800 audit(1786289297.180:4): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.726" name="memory.events" dev="tmpfs" ino=775 res=0 errno=0
[  183.012838][ T8780] nbd: must specify a device to reconfigure
[  183.058869][   T29] audit: type=1804 audit(1786289297.210:5): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.726" name="/newroot/148/memory.events" dev="tmpfs" ino=775 res=1 errno=0
[  183.270054][ T8778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.297109][ T8791] ip_vti0: entered promiscuous mode
[  183.329509][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[  183.872122][ T8817] bond6: Removing last ns target with arp_interval on
[  184.403946][ T8832] netlink: 'syz.3.736': attribute type 3 has an invalid length.
[  184.609974][ T8840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'.
[  184.715508][ T8852] netlink: 596 bytes leftover after parsing attributes in process `syz.2.739'.
[  184.739011][ T8836] syzkaller0: entered promiscuous mode
[  184.759209][ T8836] syzkaller0: entered allmulticast mode
[  184.771116][ T8855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.742'.
[  184.793606][ T8851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'.
[  185.029212][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  185.212303][ T8865] "syz.1.743" (8865) uses obsolete ecb(arc4) skcipher
[  185.367068][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.4.745'.
[  185.571849][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'.
[  185.637204][ T8885] sctp: [Deprecated]: syz.4.748 (pid 8885) Use of int in max_burst socket option.
[  185.637204][ T8885] Use struct sctp_assoc_value instead
[  185.757549][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  185.805906][ T8894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.749'.
[  185.831331][ T8892] syzkaller0: entered promiscuous mode
[  185.837027][ T8892] syzkaller0: entered allmulticast mode
[  186.043348][ T8903] netlink: 104 bytes leftover after parsing attributes in process `syz.4.753'.
[  186.146477][ T8908] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[  186.182927][ T8909] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[  186.239128][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  186.258232][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  186.287239][ T8901] netlink: 'syz.3.751': attribute type 1 has an invalid length.
[  187.682457][ T8904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.704521][ T8908] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  187.723169][ T8909] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  187.741326][ T8901] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  187.832048][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'.
[  188.019424][ T8926] netlink: 'syz.3.759': attribute type 1 has an invalid length.
[  188.055441][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'.
[  188.318369][ T8926] 8021q: adding VLAN 0 to HW filter on device bond1
[  188.527179][ T8954] smc: net device vlan1 applied user defined pnetid SYZ2
[  188.643902][ T8954] xt_hashlimit: size too large, truncated to 1048576
[  188.789879][ T8962] netlink: 'syz.3.767': attribute type 1 has an invalid length.
[  188.846878][ T8968] tipc: Can't bind to reserved service type 0
[  188.899122][ T8962] 8021q: adding VLAN 0 to HW filter on device bond2
[  189.001921][ T8970] bond2: (slave geneve3): making interface the new active one
[  189.039743][ T8970] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  189.329624][ T8980] pim6reg99999999: entered allmulticast mode
[  189.496618][ T8985] netlink: 'syz.4.772': attribute type 1 has an invalid length.
[  190.061872][ T9009] syzkaller0: entered promiscuous mode
[  190.089173][ T9009] syzkaller0: entered allmulticast mode
[  190.607985][ T9030] wg2: entered promiscuous mode
[  190.640792][ T9030] wg2: entered allmulticast mode
[  190.889458][ T9044] __nla_validate_parse: 7 callbacks suppressed
[  190.889477][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  190.925084][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'.
[  191.273327][ T9052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.324238][ T9054] ip6tnl1: entered allmulticast mode
[  191.422377][ T9051] tipc: Disabling bearer <eth:syzkaller0>
[  193.940858][ T9070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.795'.
[  193.966414][ T9070] netlink: 248 bytes leftover after parsing attributes in process `syz.3.795'.
[  193.995421][ T9072] netlink: 'syz.4.794': attribute type 3 has an invalid length.
[  194.010903][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'.
[  194.028318][ T9073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.796'.
[  194.145247][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'.
[  194.397381][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'.
[  194.421547][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'.
[  194.433449][ T9087] veth0_macvtap: Caught tx_queue_len zero misconfig
[  194.512069][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  195.111638][ T9101] geneve2: entered allmulticast mode
[  195.126495][   T50] block nbd0: Receive control failed (result -32)
[  195.290526][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  195.341886][ T9109] syzkaller1: entered promiscuous mode
[  195.358420][ T9109] syzkaller1: entered allmulticast mode
[  195.598965][ T9122] ieee802154 phy0 wpan0: encryption failed: -22
[  196.018633][ T9130] netlink: 72 bytes leftover after parsing attributes in process `syz.4.814'.
[  196.933638][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  196.970868][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  197.320897][ T9202] vlan0: entered promiscuous mode
[  197.569617][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'.
[  197.922988][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'.
[  198.135197][ T9243] tc_dump_action: action bad kind
[  198.305047][ T9252] netlink: 'syz.1.841': attribute type 4 has an invalid length.
[  198.799043][ T9276] ip_tables: iptables: counters copy to user failed while replacing table
[  198.811876][ T9276] ip6t_srh: unknown srh match flags  4000
[  199.050757][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  199.078357][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  199.100529][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  199.111703][ T9292] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[  199.136273][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  199.152238][ T9292] netlink: 756 bytes leftover after parsing attributes in process `syz.1.850'.
[  199.169999][ T9294] netlink: 'syz.4.854': attribute type 39 has an invalid length.
[  200.400687][ T9312] batadv_slave_0: Caught tx_queue_len zero misconfig
[  200.500743][ T9312] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  200.833162][ T9330] C: renamed from veth1_to_team (while UP)
[  201.090568][ T9345] syz_tun: entered allmulticast mode
[  201.175315][   T12] IPVS: starting estimator thread 0...
[  201.193159][ T9348] netlink: 'syz.2.867': attribute type 1 has an invalid length.
[  201.193547][ T9342] syz_tun: left allmulticast mode
[  201.317990][ T9349] IPVS: using max 29 ests per chain, 69600 per kthread
[  201.490558][ T9362] hsr0: entered allmulticast mode
[  201.501079][ T9362] hsr_slave_0: entered allmulticast mode
[  201.523283][ T9362] hsr_slave_1: entered allmulticast mode
[  201.563725][ T9362] __nla_validate_parse: 3 callbacks suppressed
[  201.563746][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'.
[  201.629725][ T9362] hsr_slave_0: left promiscuous mode
[  201.652502][ T9362] hsr_slave_1: left promiscuous mode
[  201.689226][ T9362] hsr0 (unregistering): left allmulticast mode
[  201.926003][ T9378] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  202.046611][ T9389] netlink: 'syz.3.876': attribute type 1 has an invalid length.
[  202.111261][ T9389] bond3: entered promiscuous mode
[  202.121399][ T9389] 8021q: adding VLAN 0 to HW filter on device bond3
[  202.186963][ T9389] 8021q: adding VLAN 0 to HW filter on device bond3
[  202.200456][ T9389] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address
[  202.211331][ T9389] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  202.243340][ T9389] bond3: (slave xfrm1): making interface the new active one
[  202.257941][ T9389] xfrm1: entered promiscuous mode
[  202.290495][ T9389] xfrm1: left promiscuous mode
[  202.441532][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'.
[  202.556716][ T9404] tipc: New replicast peer: 255.255.255.255
[  202.563624][ T9404] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.856659][ T9415] syzkaller0: entered promiscuous mode
[  202.878816][ T9415] syzkaller0: entered allmulticast mode
[  203.005996][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'.
[  203.450013][ T9437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.461222][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'.
[  203.719031][ T8660] tipc: Node number set to 1998862329
[  204.656806][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'.
[  204.723681][ T9482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.744965][ T9482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.774534][ T9482] bond0 (unregistering): Released all slaves
[  204.983065][ T9497] netlink: Unknown conntrack attr (type=16383, max=9)
[  204.997660][ T9497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.244892][ T9502] sctp: [Deprecated]: syz.3.913 (pid 9502) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.244892][ T9502] Use struct sctp_sack_info instead
[  205.456287][ T9502] xfrm0 speed is unknown, defaulting to 1000
[  205.465176][ T9508] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  205.653217][ T9521] Cannot find add_set index 2 as target
[  206.127302][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'.
[  206.709094][ T9546] pim6reg: entered allmulticast mode
[  206.736540][ T9546] pim6reg: left allmulticast mode
[  207.223501][ T9556] IPv6: Can't replace route, no match found
[  207.630046][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.929'.
[  208.246227][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'.
[  208.328319][   T50] block nbd1: Receive control failed (result -107)
[  208.701286][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  208.739000][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  208.866687][ T9609] xfrm0 speed is unknown, defaulting to 1000
[  209.080032][ T9617] batman_adv: batadv0: Adding interface: vlan2
[  209.097978][ T9617] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.158619][ T9617] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  209.174610][ T9622] tipc: Started in network mode
[  209.180044][ T9622] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  209.190627][ T9622] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  209.421634][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  209.506169][ T9629] netlink: 10 bytes leftover after parsing attributes in process `syz.3.946'.
[  209.553997][ T9632] netlink: 'syz.4.947': attribute type 12 has an invalid length.
[  209.624778][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'.
[  210.317954][ T8653] tipc: Node number set to 43690
[  210.606637][ T9666] tipc: Enabled bearer <eth:vlan0>, priority 30
[  211.305881][ T9697] netlink: 92 bytes leftover after parsing attributes in process `syz.1.963'.
[  211.461306][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.964'.
[  212.822232][ T9748] syzkaller0: entered promiscuous mode
[  212.833667][ T9754] IPv6: NLM_F_REPLACE set, but no existing node found!
[  212.852509][ T9748] syzkaller0: entered allmulticast mode
[  212.883192][ T9756] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[  212.899295][ T9756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.977'.
[  213.228897][ T9771] netlink: 52 bytes leftover after parsing attributes in process `syz.3.980'.
[  213.342505][ T9775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.386970][ T9780] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002
[  213.412351][ T9775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.882074][ T9795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.092665][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'.
[  214.432827][ T9805] xt_CT: No such helper "snmp_trap"
[  214.549775][ T9817] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  214.956264][ T9830] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.018606][ T9830] veth0: Caught tx_queue_len zero misconfig
[  215.033691][ T9830] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  216.823772][ T9881] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20002
[  216.903576][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'.
[  217.135973][ T1004] IPVS: starting estimator thread 0...
[  217.427699][ T9887] IPVS: using max 27 ests per chain, 64800 per kthread
[  217.477328][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  217.693643][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1006'.
[  218.583438][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  218.660816][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  218.698013][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  218.720488][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  218.728636][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  218.735237][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  218.741887][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  218.748528][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  218.756609][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'.
[  218.825253][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  218.851032][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  218.891179][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  218.920169][ T9876] geneve3: entered promiscuous mode
[  218.942443][ T9876] geneve3: entered allmulticast mode
[  218.954013][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  219.006237][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  219.053090][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  219.068550][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.103548][ T6503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.164086][ T6503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.224961][ T6503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.505025][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802b3ed400: rx timeout, send abort
[  219.605364][ T9927] netlink: 'syz.4.1015': attribute type 1 has an invalid length.
[  220.013860][ T9927] 8021q: adding VLAN 0 to HW filter on device bond5
[  220.020650][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802b3ed400: abort rx timeout. Force session deactivation
[  220.233520][ T9930] vlan3: entered promiscuous mode
[  220.251165][ T9930] bond5: entered promiscuous mode
[  220.290830][ T9930] vlan3: entered allmulticast mode
[  220.306350][ T9930] bond5: entered allmulticast mode
[  220.543000][ T9942] ip6tnl1: entered allmulticast mode
[  221.563807][T10001] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  221.594083][T10001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  222.248495][T10019] team0: Cannot enslave team device to itself
[  222.559406][T10035] netlink: 'syz.2.1038': attribute type 2 has an invalid length.
[  222.773841][T10040] tipc: Enabled bearer <eth:batadv0>, priority 10
[  223.757594][T10055] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.766022][T10055] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.133884][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.145589][T10079] __nla_validate_parse: 7 callbacks suppressed
[  224.145610][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1046'.
[  224.176999][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.244581][T10055] tipc: Resetting bearer <eth:vlan0>
[  224.306033][T10055] batman_adv: batadv0: Interface deactivated: macsec1
[  224.313147][T10055] syz_tun: left allmulticast mode
[  224.538260][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.583224][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.630775][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.666850][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.675954][T10085] netlink: 'syz.0.1048': attribute type 1 has an invalid length.
[  224.704601][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[  225.302560][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1055'.
[  225.483326][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1057'.
[  225.898928][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'.
[  226.069235][T10139] netlink: 'syz.2.1063': attribute type 1 has an invalid length.
[  226.084643][T10141] netlink: 'syz.2.1063': attribute type 1 has an invalid length.
[  226.130623][T10139] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.138958][T10141] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  226.393503][T10153] openvswitch: netlink: Key type 65 is out of range max 32
[  226.482375][T10155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1065'.
[  228.253629][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'.
[  228.397748][T10181] netlink: 'syz.4.1070': attribute type 3 has an invalid length.
[  228.838484][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'.
[  229.312636][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'.
[  231.488440][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1077'.
[  231.605318][T10224] netlink: 'syz.1.1085': attribute type 1 has an invalid length.
[  231.710593][T10224] 8021q: adding VLAN 0 to HW filter on device bond7
[  231.719497][T10211] xfrm0 speed is unknown, defaulting to 1000
[  231.757277][T10224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1085'.
[  231.822899][T10224] 8021q: adding VLAN 0 to HW filter on device batadv1
[  231.858760][T10224] bond7: (slave batadv1): making interface the new active one
[  231.869819][T10224] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  232.672889][T10277] sctp: [Deprecated]: syz.2.1100 (pid 10277) Use of int in max_burst socket option.
[  232.672889][T10277] Use struct sctp_assoc_value instead
[  232.700200][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'.
[  232.752341][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1101'.
[  233.067042][T10299] SET target dimension over the limit!
[  233.477136][T10313] xt_CT: No such helper "netbios-ns"
[  233.905627][T10323] IPVS: Unknown mcast interface: veth0_to_bond
[  234.002869][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.376243][T10351] netlink: 'syz.4.1116': attribute type 39 has an invalid length.
[  235.753099][T10337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1111'.
[  235.932336][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1117'.
[  235.979683][T10353] ip6gre1: entered promiscuous mode
[  236.006117][T10353] ip6gre1: entered allmulticast mode
[  236.026407][T10355] netlink: 'syz.2.1117': attribute type 2 has an invalid length.
[  236.033944][ T6503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.036456][ T6503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.058162][ T5801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.176201][ T5801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.255468][T10366] vlan0: entered promiscuous mode
[  236.262069][T10366] bridge0: entered promiscuous mode
[  236.279624][T10366] team0: Port device vlan0 added
[  236.310302][T10374] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  236.568027][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'.
[  236.610125][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'.
[  236.646169][T10385] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1123'.
[  236.701327][T10397] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1125'.
[  236.908731][ T5801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.976130][T10406] netlink: 'syz.1.1128': attribute type 1 has an invalid length.
[  237.164794][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'.
[  237.190098][T10412] xt_l2tp: v2 sid > 0xffff: 33554432
[  237.283381][T10419] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1130'.
[  237.610448][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'.
[  238.105408][T10459] bond12: entered promiscuous mode
[  238.117332][T10471] netlink: 'syz.3.1141': attribute type 178 has an invalid length.
[  238.130899][T10459] 8021q: adding VLAN 0 to HW filter on device bond12
[  238.226925][T10458] pimreg: entered allmulticast mode
[  238.250916][T10458] pimreg: left allmulticast mode
[  238.250931][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'.
[  238.450243][T10462] veth5: entered allmulticast mode
[  238.469888][T10479] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  238.486955][T10479] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  238.498292][T10479] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.302486][T10522] netlink: 'syz.1.1157': attribute type 5 has an invalid length.
[  239.680044][T10520] vlan0 (unregistering): left allmulticast mode
[  239.704695][T10520] veth0_vlan (unregistering): left allmulticast mode
[  239.923042][T10520] team0: Port device vlan0 removed
[  239.947887][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  240.008879][T10534] vlan0: entered promiscuous mode
[  240.199281][T10552] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  240.371605][T10565] netlink: 'syz.4.1168': attribute type 12 has an invalid length.
[  240.828236][T10581] __nla_validate_parse: 13 callbacks suppressed
[  240.828257][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'.
[  240.845467][T10582] §: renamed from sit0 (while UP)
[  241.424037][T10609] lo: entered allmulticast mode
[  241.441302][T10608] lo: left allmulticast mode
[  241.694036][T10616] netlink: 'syz.3.1181': attribute type 39 has an invalid length.
[  241.746732][T10616] tipc: Disabling bearer <eth:syz_tun>
[  241.918328][T10632] syzkaller0: entered promiscuous mode
[  241.924179][T10632] syzkaller0: entered allmulticast mode
[  242.049666][T10637] IPv6: NLM_F_CREATE should be specified when creating new route
[  242.076697][T10637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.084082][T10637] IPv6: NLM_F_CREATE should be set when creating new route
[  242.091437][T10637] IPv6: NLM_F_CREATE should be set when creating new route
[  242.098754][T10637] IPv6: NLM_F_CREATE should be set when creating new route
[  242.153709][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'.
[  242.405678][T10655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1191'.
[  242.423132][T10655] netlink: 'syz.3.1191': attribute type 11 has an invalid length.
[  242.666500][T10673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1193'.
[  242.725476][T10674] dvmrp0: entered allmulticast mode
[  242.745164][T10675] netlink: 'syz.3.1195': attribute type 12 has an invalid length.
[  245.911772][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1204'.
[  246.090916][T10783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.110664][T10783] syzkaller0: entered promiscuous mode
[  246.147085][T10783] syzkaller0: entered allmulticast mode
[  246.236073][T10785] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  246.383930][T10785] tipc: Resetting bearer <eth:syzkaller0>
[  246.471251][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  246.476102][T10785] tipc: Disabling bearer <eth:syzkaller0>
[  246.528737][T10811] hsr_slave_0: left promiscuous mode
[  246.551360][T10811] hsr_slave_1: left promiscuous mode
[  246.811974][T10828] netlink: 'syz.1.1217': attribute type 25 has an invalid length.
[  246.820686][T10828] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1217'.
[  247.042111][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'.
[  247.513873][T10863] syz_tun: entered allmulticast mode
[  247.574931][T10864] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1226'.
[  247.753707][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1231'.
[  247.779705][T10861] syz_tun: left allmulticast mode
[  247.922592][T10881] xfrm0 speed is unknown, defaulting to 1000
[  248.164682][T10906] openvswitch: netlink: IP tunnel dst address not specified
[  248.187382][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'.
[  248.267655][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  248.540458][T10918] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1240'.
[  248.556668][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1240'.
[  248.570077][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'.
[  248.659272][T10923] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  248.733916][T10918] batman_adv: batadv0: Removing interface: macsec1
[  248.811133][T10876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.863430][T10928] bridge0: port 3(wlan1) entered blocking state
[  248.882444][T10928] bridge0: port 3(wlan1) entered disabled state
[  248.891615][T10928] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  248.949631][T10928] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  249.902380][T10983] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.755850][T10997] tipc: Enabled bearer <udp:s>, priority 10
[  251.320076][T11009] syzkaller0: entered promiscuous mode
[  251.344912][T11009] syzkaller0: entered allmulticast mode
[  253.590633][T11050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.905866][T11084] __nla_validate_parse: 3 callbacks suppressed
[  253.905885][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'.
[  254.056952][T11080] syz_tun: entered allmulticast mode
[  254.090386][T11080] syz_tun: left allmulticast mode
[  254.913408][T11137] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  254.921710][T11138] netlink: 'syz.2.1291': attribute type 4 has an invalid length.
[  254.942765][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'.
[  255.075617][T11137] veth1: entered allmulticast mode
[  255.409822][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'.
[  255.855710][T11174] rdma_rxe: rxe_newlink: failed to add xfrm0
[  255.900763][T11180] tipc: Failed to remove unknown binding: 66,1,1/43690:747051943/747051945
[  255.943442][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'.
[  256.041029][T11182] syzkaller0: entered promiscuous mode
[  256.057331][T11182] syzkaller0: entered allmulticast mode
[  256.078328][T11188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1301'.
[  256.087537][T11188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1301'.
[  256.199122][T11193] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1303'.
[  256.228955][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'.
[  256.605897][T11204] x_tables: duplicate underflow at hook 1
[  256.654505][T11210] netlink: 'syz.1.1308': attribute type 2 has an invalid length.
[  256.783269][T11190] infiniband syz2: set active
[  256.797699][T11190] infiniband syz2: added bridge_slave_0
[  256.860931][T11190] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  256.918824][T11190] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  256.966569][T11190] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  256.975044][T11210] 
: entered promiscuous mode
[  256.988118][T11225] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1310'.
[  257.088898][T11190] RDS/IB: syz2: added
[  257.107363][T11190] smc: adding ib device syz2 with port count 1
[  257.119893][T11190] smc:    ib device syz2 port 1 has no pnetid
[  257.361158][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'.
[  257.414114][T11234] syzkaller0: entered promiscuous mode
[  257.434792][T11234] syzkaller0: entered allmulticast mode
[  257.482918][T11230] vlan1: entered promiscuous mode
[  257.491185][T11230] bridge0: entered promiscuous mode
[  257.589395][T11244] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  257.681498][T11239] team0: left promiscuous mode
[  257.702668][T11239] team_slave_0: left promiscuous mode
[  257.719736][T11239] team_slave_1: left promiscuous mode
[  257.739918][T11239] team0: left allmulticast mode
[  257.752825][T11239] team_slave_0: left allmulticast mode
[  257.774231][T11239] team_slave_1: left allmulticast mode
[  257.927174][T11239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.943296][T11239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.977218][T11239] virt_wifi0: left promiscuous mode
[  258.040485][T11239] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  258.068366][T11239] geneve2: left allmulticast mode
[  258.076318][T11239] ip6tnl1: left allmulticast mode
[  258.085880][T11239] ip6gre1: left promiscuous mode
[  258.091501][T11239] ip6gre1: left allmulticast mode
[  258.099701][T11239] bond12: left promiscuous mode
[  258.105702][T11239] vlan0: left promiscuous mode
[  258.124202][T11240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.141033][T11251] tipc: Resetting bearer <eth:syzkaller0>
[  258.168522][ T6499] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.183693][ T6499] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.217151][ T6499] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.262801][ T6499] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.313060][T11233] tipc: Resetting bearer <eth:syzkaller0>
[  258.404177][T11233] tipc: Disabling bearer <eth:syzkaller0>
[  258.570298][ T1004] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.612937][ T1004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.651727][ T1004] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.679292][ T1004] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.924927][T11282] __nla_validate_parse: 5 callbacks suppressed
[  258.924951][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'.
[  258.996435][T11282] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  259.060745][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'.
[  259.100038][T11285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1327'.
[  259.332143][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'.
[  259.355025][T11299] netlink: 'syz.0.1329': attribute type 30 has an invalid length.
[  259.364508][T11299] netlink: 'syz.0.1329': attribute type 29 has an invalid length.
[  259.375358][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  259.442928][T11293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1329'.
[  259.679614][T11312] syzkaller0: entered promiscuous mode
[  259.685656][T11312] syzkaller0: entered allmulticast mode
[  259.734318][T11312] lo: Caught tx_queue_len zero misconfig
[  259.741311][T11312] netlink: 'syz.1.1332': attribute type 3 has an invalid length.
[  259.765189][T11316] bond0: entered promiscuous mode
[  259.777563][T11316] bond_slave_0: entered promiscuous mode
[  259.791620][T11316] bond_slave_1: entered promiscuous mode
[  259.818728][T11316] batadv0: entered promiscuous mode
[  259.831921][T11316] debugfs: 'hsr0' already exists in 'hsr'
[  259.842110][T11316] Cannot create hsr debugfs directory
[  259.857903][T11316] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  259.874614][T11316] 8021q: adding VLAN 0 to HW filter on device hsr0
[  259.922260][T11319] netlink: 'syz.0.1335': attribute type 4 has an invalid length.
[  260.199256][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'.
[  260.724744][   T29] audit: type=1800 audit(1786289374.960:6): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1337" name="memory.events" dev="tmpfs" ino=1511 res=0 errno=0
[  261.088309][T11344] netlink: 'syz.0.1343': attribute type 1 has an invalid length.
[  261.236207][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  261.255677][T11348] netlink: 'syz.4.1344': attribute type 10 has an invalid length.
[  261.276219][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'.
[  261.328698][T11348] geneve0: entered promiscuous mode
[  261.334153][T11348] geneve0: entered allmulticast mode
[  261.393130][T11354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1345'.
[  261.854856][T11389] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.914534][T11389] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.354490][T11411] syzkaller0: entered promiscuous mode
[  262.360375][T11411] syzkaller0: entered allmulticast mode
[  262.941910][T11453] netlink: 'syz.1.1370': attribute type 6 has an invalid length.
[  263.468304][T11477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.475625][T11477] IPv6: NLM_F_CREATE should be set when creating new route
[  263.482973][T11477] IPv6: NLM_F_CREATE should be set when creating new route
[  263.497399][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.520943][T11475] netlink: 'syz.0.1368': attribute type 8 has an invalid length.
[  264.134079][T11510] syzkaller0: entered promiscuous mode
[  264.139981][T11510] syzkaller0: entered allmulticast mode
[  264.246357][T11513] bridge_slave_0: left allmulticast mode
[  264.260483][T11513] bridge_slave_0: left promiscuous mode
[  264.266788][T11513] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.318921][T11513] bridge_slave_1: left allmulticast mode
[  264.345202][T11513] bridge_slave_1: left promiscuous mode
[  264.359382][T11513] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.445530][T11513] bond0: (slave bond_slave_0): Releasing backup interface
[  264.500853][T11513] bond0: (slave bond_slave_1): Releasing backup interface
[  264.560406][T11513] team0: Port device team_slave_0 removed
[  264.600219][T11513] team0: Port device team_slave_1 removed
[  264.634491][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.669641][T11513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.694451][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.721604][T11513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.762207][T11513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  264.893808][T11539] netlink: 'syz.2.1392': attribute type 2 has an invalid length.
[  264.902348][T11538] netlink: 'syz.2.1392': attribute type 2 has an invalid length.
[  265.151030][T11545] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication
[  265.393337][T11563] x_tables: duplicate underflow at hook 1
[  265.421654][T11563] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  265.439932][T11563] __nla_validate_parse: 16 callbacks suppressed
[  265.439951][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'.
[  265.465517][T11569] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1398'.
[  265.474985][T11563] sch_tbf: peakrate 12 is lower than or equals to rate 3850 !
[  265.489808][T11568] veth1_to_bond: entered allmulticast mode
[  265.491227][T11563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1399'.
[  265.507011][T11568] veth1_to_bond: entered promiscuous mode
[  265.518299][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'.
[  265.555669][T11568] veth1_to_bond (unregistering): left allmulticast mode
[  265.574377][T11568] veth1_to_bond (unregistering): left promiscuous mode
[  265.632498][T11568] bond0: (slave bond_slave_1): Releasing backup interface
[  265.781378][T11578] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1402'.
[  265.804628][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'.
[  266.080279][T11592] wg2: left promiscuous mode
[  266.096733][T11592] wg2: left allmulticast mode
[  266.158374][T11592] geneve3: left promiscuous mode
[  266.165141][T11592] geneve3: left allmulticast mode
[  266.388452][ T1004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.470312][T11607] ipvlan2: entered promiscuous mode
[  266.475922][T11607] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  266.492112][T11607] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  266.512192][T11607] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  266.758064][ T1004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.786230][ T1004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.835914][ T1004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.913244][T11632] netlink: 'syz.3.1415': attribute type 1 has an invalid length.
[  266.945588][T11632] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1415'.
[  266.989769][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'.
[  267.099787][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'.
[  267.159237][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'.
[  267.178136][T11641] netlink: 'syz.1.1418': attribute type 11 has an invalid length.
[  267.354715][T11648] openvswitch: netlink: Message has -2 unknown bytes.
[  267.362128][T11648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.397119][T11650] syzkaller0: entered promiscuous mode
[  267.403273][T11650] syzkaller0: entered allmulticast mode
[  267.492945][T11655] 8021q: VLANs not supported on ipvlan0
[  267.666035][T11658] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  267.751467][T11664] bridge0: port 3(batadv2) entered blocking state
[  267.772641][T11664] bridge0: port 3(batadv2) entered disabled state
[  267.798354][T11664] batadv2: entered allmulticast mode
[  267.834016][T11664] batadv2: entered promiscuous mode
[  267.985923][T11680] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  268.183284][T11685] nbd: must specify at least one socket
[  268.228011][ T6499] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  268.238523][ T6499] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  268.373284][T11698] bond0: Caught tx_queue_len zero misconfig
[  268.553674][T11709] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  268.581189][T11709] netlink: 'syz.1.1440': attribute type 7 has an invalid length.
[  268.589999][T11711] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  268.604213][T11711] bond14 (unregistering): Released all slaves
[  268.610704][T11709] netlink: 'syz.1.1440': attribute type 8 has an invalid length.
[  268.632754][T11709] NCSI netlink: No device for ifindex 1073545264
[  268.682930][T11718] vlan4: entered promiscuous mode
[  268.718997][T11718] macvlan0: entered promiscuous mode
[  268.742899][T11719] netlink: 'syz.4.1442': attribute type 1 has an invalid length.
[  269.424686][T11755] wg0: Caught tx_queue_len zero misconfig
[  269.455908][T11763] tipc: Disabling bearer <udp:syz2>
[  269.780220][T11776] ip6gre1: entered promiscuous mode
[  269.788310][T11776] ip6gre1: entered allmulticast mode
[  269.795838][ T1004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.808057][T11776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.818021][ T1004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.825913][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.951499][T11781] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  270.282294][T11802] netlink: 'syz.1.1461': attribute type 2 has an invalid length.
[  270.344092][T11805] netlink: zone id is out of range
[  270.365265][T11802] netlink: 'syz.1.1461': attribute type 2 has an invalid length.
[  270.397166][T11805] netlink: zone id is out of range
[  270.428902][T11805] netlink: zone id is out of range
[  270.456888][T11805] netlink: zone id is out of range
[  270.475586][T11805] netlink: zone id is out of range
[  270.495004][T11805] netlink: zone id is out of range
[  270.515812][T11805] netlink: zone id is out of range
[  270.536574][T11805] netlink: zone id is out of range
[  270.557688][T11805] netlink: zone id is out of range
[  270.576334][T11805] netlink: zone id is out of range
[  270.588557][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.667944][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.724490][T11811] __nla_validate_parse: 10 callbacks suppressed
[  270.724510][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  270.771607][T11814] ipvlan0: Caught tx_queue_len zero misconfig
[  271.091745][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'.
[  271.107768][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'.
[  271.326605][T11834] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1471'.
[  271.408235][T11836] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1470'.
[  271.687060][T11840] 8021q: adding VLAN 0 to HW filter on device team0
[  271.705728][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.801477][T11840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.852157][T11840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.927619][T11840] veth1_macvtap: left promiscuous mode
[  271.935273][T11840] veth0_macvtap: left promiscuous mode
[  271.942984][T11840] veth0_macvtap: entered promiscuous mode
[  271.952792][T11840] veth1_macvtap: entered promiscuous mode
[  271.970892][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  271.982923][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  271.993298][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  272.002988][T11840] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.026290][T11840] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.038853][T11840] 8021q: adding VLAN 0 to HW filter on device bond2
[  272.048480][T11840] 8021q: adding VLAN 0 to HW filter on device bond3
[  272.059654][T11840] 8021q: adding VLAN 0 to HW filter on device bond4
[  272.069748][T11840] 8021q: adding VLAN 0 to HW filter on device bond5
[  272.080012][T11840] 8021q: adding VLAN 0 to HW filter on device bond6
[  272.100782][T11840] 8021q: adding VLAN 0 to HW filter on device bond7
[  272.120153][T11840] 8021q: adding VLAN 0 to HW filter on device bond8
[  272.141881][T11840] 8021q: adding VLAN 0 to HW filter on device bond9
[  272.175231][T11840] 8021q: adding VLAN 0 to HW filter on device bond10
[  272.192843][T11840] 8021q: adding VLAN 0 to HW filter on device bond11
[  272.204193][T11840] 8021q: adding VLAN 0 to HW filter on device batadv1
[  272.231417][T11840] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.257807][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.273801][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.298034][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.305311][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.316684][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.324005][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.405333][T11864] geneve6: entered promiscuous mode
[  272.460766][ T1004] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.488678][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.515285][ T1004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.556680][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.605417][ T1004] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.636933][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.677613][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.713166][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.752053][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.783517][ T1004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.823119][T11886] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  272.877992][T11885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'.
[  272.953566][T11895] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1485'.
[  272.992671][T11893] batman_adv: batadv0: Adding interface: macvlan3
[  273.008690][T11893] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.102332][T11893] batman_adv: batadv0: Interface activated: macvlan3
[  273.896745][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  274.022456][ T5632] udevd[5632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  274.028200][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.184622][T11937] vlan0: left promiscuous mode
[  274.190430][T11945] netlink: 'syz.1.1493': attribute type 10 has an invalid length.
[  274.201540][T11945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1493'.
[  274.229580][T11937] 8021q: adding VLAN 0 to HW filter on device bond4
[  274.241078][T11937] batman_adv: batadv0: Interface activated: vlan2
[  274.250590][T11937] vlan3: left promiscuous mode
[  274.255447][T11937] bond5: left promiscuous mode
[  274.262373][ T8659] openvswitch: cpu_id mismatch with handler threads
[  274.267168][T11943] batman_adv: batadv0: Removing interface: dummy0
[  274.420173][T11945] dummy0: entered promiscuous mode
[  274.688068][ T8658] openvswitch: cpu_id mismatch with handler threads
[  274.937203][T11971] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  274.973153][T11966] macsec3: entered allmulticast mode
[  275.041619][T11966] veth0_to_bridge: entered allmulticast mode
[  275.064806][T11966] veth0_to_bridge: left allmulticast mode
[  275.082965][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  275.155234][T11980] netlink: 'syz.1.1501': attribute type 12 has an invalid length.
[  275.168568][T11980] netlink: 'syz.1.1501': attribute type 29 has an invalid length.
[  275.878975][T12016] netlink: 'syz.3.1512': attribute type 24 has an invalid length.
[  275.916137][   T50] block nbd2: Receive control failed (result -32)
[  275.917376][ T4923] block nbd2: Receive control failed (result -32)
[  276.053581][T12016] xfrm0 speed is unknown, defaulting to 1000
[  276.253015][T12036] netlink: 'syz.4.1517': attribute type 8 has an invalid length.
[  276.292736][T12036] __nla_validate_parse: 4 callbacks suppressed
[  276.292754][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'.
[  276.315580][T12038] dummy0: Caught tx_queue_len zero misconfig
[  276.339793][T12040] netlink: 'syz.0.1519': attribute type 1 has an invalid length.
[  276.355806][T12036] bridge4: entered promiscuous mode
[  276.381051][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'.
[  276.606159][T12048] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1522'.
[  276.687902][T12053] netlink: 'syz.1.1520': attribute type 10 has an invalid length.
[  277.151013][T12064] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1525'.
[  277.211989][T12055] tipc: Resetting bearer <eth:vlan0>
[  277.305384][T12069] sctp: [Deprecated]: syz.2.1527 (pid 12069) Use of int in max_burst socket option.
[  277.305384][T12069] Use struct sctp_assoc_value instead
[  277.342592][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1526'.
[  277.410407][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1528'.
[  278.086678][T12092] xt_CT: No such helper "netbios-ns"
[  278.114660][T12099] netlink: 'syz.0.1535': attribute type 322 has an invalid length.
[  278.410144][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'.
[  278.474574][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1539'.
[  278.729168][T12120] syzkaller1: entered promiscuous mode
[  278.744873][T12120] syzkaller1: entered allmulticast mode
[  279.113662][T12127] nbd3: detected capacity change from 0 to 63
[  279.143876][ T4923] block nbd3: Receive control failed (result -32)
[  279.172432][ T1570] block nbd3: Dead connection, failed to find a fallback
[  279.181564][ T1570] block nbd3: shutting down sockets
[  279.193718][ T1570] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.204169][ T1570] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.216487][ T1570] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.226433][ T1570] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.239012][ T1570] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.248660][ T1570] Buffer I/O error on dev nbd3, logical block 2, async page read
[  279.256596][ T1570] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.266253][ T1570] Buffer I/O error on dev nbd3, logical block 3, async page read
[  279.274726][ T1570] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.284638][ T1570] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.292636][ T1570] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.302299][ T1570] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.311001][ T1570] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.320686][ T1570] Buffer I/O error on dev nbd3, logical block 2, async page read
[  279.328835][ T1570] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.338841][ T1570] Buffer I/O error on dev nbd3, logical block 3, async page read
[  279.347314][ T1570] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.357078][ T1570] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.365095][ T1570] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.375123][ T1570] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.384984][ T5621] ldm_validate_partition_table(): Disk read failed.
[  279.394028][ T5621] Dev nbd3: unable to read RDB block 0
[  279.401324][ T5621]  nbd3: unable to read partition table
[  279.420256][T12143] netlink: 'syz.4.1547': attribute type 62 has an invalid length.
[  279.443777][ T5621] ldm_validate_partition_table(): Disk read failed.
[  279.454489][T12145] netlink: 'syz.4.1547': attribute type 62 has an invalid length.
[  279.489916][ T5621] Dev nbd3: unable to read RDB block 0
[  279.515531][ T5621]  nbd3: unable to read partition table
[  279.851265][T12159] veth0_to_bridge: entered promiscuous mode
[  279.868499][T12159] macsec2: entered allmulticast mode
[  279.886620][T12159] veth0_to_bridge: entered allmulticast mode
[  279.930073][T12159] veth0_to_bridge: left allmulticast mode
[  279.946527][T12159] veth0_to_bridge: left promiscuous mode
[  280.021412][T12164] net_ratelimit: 498 callbacks suppressed
[  280.021434][T12164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.062523][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'.
[  280.202011][T12170] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1556'.
[  280.223453][T12177] netlink: 'syz.4.1557': attribute type 21 has an invalid length.
[  280.260514][T12177] IPv6: NLM_F_CREATE should be specified when creating new route
[  280.302633][T12177] netlink: 'syz.4.1557': attribute type 1 has an invalid length.
[  280.473521][T12184] netlink: 'syz.3.1559': attribute type 10 has an invalid length.
[  280.513296][T12187] netlink: 'syz.0.1561': attribute type 21 has an invalid length.
[  280.565917][T12191] netlink: 'syz.0.1561': attribute type 10 has an invalid length.
[  280.603078][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  280.650515][T12184] team0: Port device netdevsim1 added
[  280.674262][T12187] netlink: 'syz.0.1561': attribute type 1 has an invalid length.
[  280.775498][T12191] geneve3: entered promiscuous mode
[  280.804800][T12191] geneve3: entered allmulticast mode
[  280.861482][T12202] netlink: 'syz.2.1564': attribute type 16 has an invalid length.
[  280.937208][T12205] netlink: 'syz.3.1566': attribute type 39 has an invalid length.
[  281.365943][T12229] syzkaller0: entered promiscuous mode
[  281.381310][T12229] syzkaller0: entered allmulticast mode
[  281.405456][T12234] __nla_validate_parse: 4 callbacks suppressed
[  281.405475][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'.
[  281.447822][T12234] tc_dump_action: action bad kind
[  281.464580][T12229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.525333][T12227] tipc: Resetting bearer <eth:syzkaller0>
[  281.608592][T12227] tipc: Disabling bearer <eth:syzkaller0>
[  281.883661][T12256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1580'.
[  281.927125][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1580'.
[  282.187634][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  282.280182][T12276] xt_HMARK: spi-set and port-set can't be combined
[  282.294907][T12276] xt_hashlimit: size too large, truncated to 1048576
[  282.302864][T12276] xt_hashlimit: max too large, truncated to 1048576
[  282.505386][T12284] Cannot find del_set index 17 as target
[  282.523320][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'.
[  284.324229][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'.
[  284.385822][T12295] 8021q: adding VLAN 0 to HW filter on device bond9
[  284.445594][T12297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.713974][T12321] validate_nla: 2 callbacks suppressed
[  284.713994][T12321] netlink: 'syz.0.1598': attribute type 1 has an invalid length.
[  284.809222][T12328] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1598'.
[  284.889218][T12321] 8021q: adding VLAN 0 to HW filter on device bond8
[  285.325563][T12344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.427011][T12344] syzkaller0: entered promiscuous mode
[  285.434195][T12344] syzkaller0: entered allmulticast mode
[  285.443433][T12344] tipc: Resetting bearer <eth:syzkaller0>
[  285.485686][T12343] tipc: Resetting bearer <eth:syzkaller0>
[  285.565983][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'.
[  287.306720][T12343] tipc: Disabling bearer <eth:syzkaller0>
[  287.907126][T12417] netlink: 'syz.1.1624': attribute type 1 has an invalid length.
[  288.005357][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1624'.
[  288.029072][T12419] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1622'.
[  288.073386][T12419] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1622'.
[  288.096372][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1622'.
[  288.107327][T12417] 8021q: adding VLAN 0 to HW filter on device bond10
[  288.280647][T12423] dummy0: left promiscuous mode
[  288.388218][T12423] bond10: (slave dummy0): making interface the new active one
[  288.430255][T12423] bond10: (slave dummy0): Enslaving as an active interface with an up link
[  288.464035][T12447] netlink: 'syz.2.1630': attribute type 15 has an invalid length.
[  288.514632][T12420] bond10: entered promiscuous mode
[  288.525687][T12420] dummy0: entered promiscuous mode
[  288.550018][T12420] bond10: entered allmulticast mode
[  288.561220][T12420] dummy0: entered allmulticast mode
[  288.715733][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'.
[  289.045094][T12466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1636'.
[  289.360299][T12458] 
[  289.362689][T12458] ======================================================
[  289.369745][T12458] WARNING: possible circular locking dependency detected
[  289.376810][T12458] syzkaller #0 Not tainted
[  289.381278][T12458] ------------------------------------------------------
[  289.388319][T12458] syz.0.1635/12458 is trying to acquire lock:
[  289.394405][T12458] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650
[  289.403689][T12458] 
[  289.403689][T12458] but task is already holding lock:
[  289.411082][T12458] ffff8880124adcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  289.420624][T12458] 
[  289.420624][T12458] which lock already depends on the new lock.
[  289.420624][T12458] 
[  289.431058][T12458] 
[  289.431058][T12458] the existing dependency chain (in reverse order) is:
[  289.440097][T12458] 
[  289.440097][T12458] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  289.447702][T12458]        __might_fault+0xcb/0x130
[  289.452903][T12458]        _copy_from_user+0x28/0xb0
[  289.458049][T12458]        csum_and_copy_from_iter_full+0x210/0x1fb0
[  289.464607][T12458]        ip_generic_getfrag+0x149/0x2d0
[  289.470190][T12458]        __ip6_append_data+0x3b26/0x40c0
[  289.475855][T12458]        ip6_append_data+0x108/0x270
[  289.481520][T12458]        rawv6_sendmsg+0x1298/0x18c0
[  289.486856][T12458]        sock_sendmsg_nosec+0x10e/0x180
[  289.492444][T12458]        ____sys_sendmsg+0x54e/0x850
[  289.497779][T12458]        ___sys_sendmsg+0x2a5/0x360
[  289.503019][T12458]        __x64_sys_sendmsg+0x1b1/0x290
[  289.508511][T12458]        do_syscall_64+0x174/0x580
[  289.513668][T12458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.520211][T12458] 
[  289.520211][T12458] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  289.528029][T12458]        lock_sock_nested+0x41/0x100
[  289.533355][T12458]        inet_shutdown+0x6a/0x390
[  289.538409][T12458]        nbd_mark_nsock_dead+0x2cb/0x550
[  289.544085][T12458]        recv_work+0x1cee/0x1e10
[  289.549053][T12458]        process_scheduled_works+0xa8e/0x14e0
[  289.555151][T12458]        worker_thread+0xa47/0xfb0
[  289.560300][T12458]        kthread+0x388/0x470
[  289.564920][T12458]        ret_from_fork+0x514/0xb70
[  289.570058][T12458]        ret_from_fork_asm+0x1a/0x30
[  289.575378][T12458] 
[  289.575378][T12458] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  289.583055][T12458]        __mutex_lock+0x19d/0x1550
[  289.588219][T12458]        nbd_queue_rq+0x373/0x1150
[  289.593365][T12458]        blk_mq_dispatch_rq_list+0x499/0x1990
[  289.599453][T12458]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  289.606325][T12458]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  289.612880][T12458]        blk_mq_run_work_fn+0x16c/0x300
[  289.618463][T12458]        process_scheduled_works+0xa8e/0x14e0
[  289.624548][T12458]        worker_thread+0xa47/0xfb0
[  289.629672][T12458]        kthread+0x388/0x470
[  289.634287][T12458]        ret_from_fork+0x514/0xb70
[  289.639413][T12458]        ret_from_fork_asm+0x1a/0x30
[  289.644717][T12458] 
[  289.644717][T12458] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  289.652034][T12458]        __mutex_lock+0x19d/0x1550
[  289.657166][T12458]        nbd_queue_rq+0xc1/0x1150
[  289.662216][T12458]        blk_mq_dispatch_rq_list+0x499/0x1990
[  289.668296][T12458]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  289.675168][T12458]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  289.681683][T12458]        blk_mq_run_work_fn+0x16c/0x300
[  289.687248][T12458]        process_scheduled_works+0xa8e/0x14e0
[  289.693328][T12458]        worker_thread+0xa47/0xfb0
[  289.698453][T12458]        kthread+0x388/0x470
[  289.703071][T12458]        ret_from_fork+0x514/0xb70
[  289.708211][T12458]        ret_from_fork_asm+0x1a/0x30
[  289.713531][T12458] 
[  289.713531][T12458] -> #3 (set->srcu){.+.+}-{0:0}:
[  289.720675][T12458]        __synchronize_srcu+0xc9/0x2f0
[  289.726151][T12458]        elevator_switch+0x1e8/0x7b0
[  289.731447][T12458]        elevator_change+0x2fa/0x480
[  289.736752][T12458]        elevator_set_default+0x375/0x440
[  289.742486][T12458]        blk_register_queue+0x3f3/0x4e0
[  289.748052][T12458]        __add_disk+0x6cb/0xe30
[  289.752925][T12458]        add_disk_fwnode+0x100/0x3a0
[  289.758233][T12458]        nbd_dev_add+0x733/0xb60
[  289.763201][T12458]        nbd_init+0x15f/0x1e0
[  289.767896][T12458]        do_one_initcall+0x250/0x870
[  289.773210][T12458]        do_initcall_level+0x10a/0x1a0
[  289.778690][T12458]        do_initcalls+0x59/0xa0
[  289.783558][T12458]        kernel_init_freeable+0x29d/0x3e0
[  289.789299][T12458]        kernel_init+0x1d/0x1d0
[  289.794177][T12458]        ret_from_fork+0x514/0xb70
[  289.799316][T12458]        ret_from_fork_asm+0x1a/0x30
[  289.804630][T12458] 
[  289.804630][T12458] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  289.812469][T12458]        __mutex_lock+0x19d/0x1550
[  289.817607][T12458]        elevator_change+0x1af/0x480
[  289.822921][T12458]        elevator_set_none+0xb5/0x140
[  289.828309][T12458]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  289.834664][T12458]        nbd_start_device+0x189/0xb30
[  289.840067][T12458]        nbd_genl_connect+0x1597/0x1c10
[  289.845650][T12458]        genl_family_rcv_msg_doit+0x233/0x340
[  289.851759][T12458]        genl_rcv_msg+0x614/0x7a0
[  289.856853][T12458]        netlink_rcv_skb+0x226/0x4a0
[  289.862165][T12458]        genl_rcv+0x28/0x40
[  289.866699][T12458]        netlink_unicast+0x7bb/0x940
[  289.872000][T12458]        netlink_sendmsg+0x813/0xb40
[  289.877340][T12458]        sock_sendmsg_nosec+0x13a/0x180
[  289.882909][T12458]        ____sys_sendmsg+0x54e/0x850
[  289.888215][T12458]        ___sys_sendmsg+0x2a5/0x360
[  289.893431][T12458]        __x64_sys_sendmsg+0x1b1/0x290
[  289.898906][T12458]        do_syscall_64+0x174/0x580
[  289.904040][T12458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.910466][T12458] 
[  289.910466][T12458] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  289.919092][T12458]        blk_alloc_queue+0x544/0x690
[  289.924406][T12458]        __blk_mq_alloc_disk+0x194/0x390
[  289.930060][T12458]        nbd_dev_add+0x494/0xb60
[  289.935024][T12458]        nbd_init+0x15f/0x1e0
[  289.939735][T12458]        do_one_initcall+0x250/0x870
[  289.945049][T12458]        do_initcall_level+0x10a/0x1a0
[  289.950534][T12458]        do_initcalls+0x59/0xa0
[  289.955412][T12458]        kernel_init_freeable+0x29d/0x3e0
[  289.961149][T12458]        kernel_init+0x1d/0x1d0
[  289.966022][T12458]        ret_from_fork+0x514/0xb70
[  289.971157][T12458]        ret_from_fork_asm+0x1a/0x30
[  289.976466][T12458] 
[  289.976466][T12458] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  289.983695][T12458]        __lock_acquire+0x1520/0x2cf0
[  289.989092][T12458]        lock_acquire+0x106/0x350
[  289.994137][T12458]        fs_reclaim_acquire+0x71/0x100
[  289.999613][T12458]        prepare_alloc_pages+0x15b/0x650
[  290.005262][T12458]        __alloc_frozen_pages_noprof+0x12f/0x380
[  290.011605][T12458]        alloc_pages_mpol+0x212/0x380
[  290.017000][T12458]        alloc_pages_noprof+0xac/0x2a0
[  290.022507][T12458]        pte_alloc_one+0x22/0x370
[  290.027555][T12458]        __pte_alloc+0x25/0x1a0
[  290.032443][T12458]        do_pte_missing+0x2db7/0x34b0
[  290.037835][T12458]        handle_mm_fault+0x1b36/0x3080
[  290.043317][T12458]        do_user_addr_fault+0x744/0x1340
[  290.048973][T12458]        exc_page_fault+0x6a/0xc0
[  290.054014][T12458]        asm_exc_page_fault+0x26/0x30
[  290.059394][T12458]        rep_movs_alternative+0x4a/0xa0
[  290.064954][T12458]        _copy_from_iter+0x21b/0x1660
[  290.070343][T12458]        sk_msg_memcopy_from_iter+0x35e/0x700
[  290.076424][T12458]        tls_sw_sendmsg+0x1bc1/0x2b50
[  290.081807][T12458]        sock_sendmsg_nosec+0x90/0x180
[  290.087282][T12458]        __sys_sendto+0x408/0x5a0
[  290.092321][T12458]        __x64_sys_sendto+0xde/0x100
[  290.097627][T12458]        do_syscall_64+0x174/0x580
[  290.102768][T12458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.109200][T12458] 
[  290.109200][T12458] other info that might help us debug this:
[  290.109200][T12458] 
[  290.119442][T12458] Chain exists of:
[  290.119442][T12458]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  290.119442][T12458] 
[  290.132065][T12458]  Possible unsafe locking scenario:
[  290.132065][T12458] 
[  290.139634][T12458]        CPU0                    CPU1
[  290.145013][T12458]        ----                    ----
[  290.150390][T12458]   rlock(&mm->mmap_lock);
[  290.154828][T12458]                                lock(sk_lock-AF_INET6);
[  290.161884][T12458]                                lock(&mm->mmap_lock);
[  290.168749][T12458]   lock(fs_reclaim);
[  290.172750][T12458] 
[  290.172750][T12458]  *** DEADLOCK ***
[  290.172750][T12458] 
[  290.180900][T12458] 3 locks held by syz.0.1635/12458:
[  290.186104][T12458]  #0: ffff888058f628e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x13a/0x2b50
[  290.195623][T12458]  #1: ffff888035fc5360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_stream_wait_memory+0x8d8/0xf80
[  290.205928][T12458]  #2: ffff8880124adcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  290.215876][T12458] 
[  290.215876][T12458] stack backtrace:
[  290.221781][T12458] CPU: 1 UID: 0 PID: 12458 Comm: syz.0.1635 Not tainted syzkaller #0 PREEMPT(full) 
[  290.221803][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.221833][T12458] Call Trace:
[  290.221842][T12458]  <TASK>
[  290.221851][T12458]  dump_stack_lvl+0xe8/0x150
[  290.221877][T12458]  print_circular_bug+0x2e1/0x300
[  290.221907][T12458]  check_noncircular+0x12e/0x150
[  290.221935][T12458]  __lock_acquire+0x1520/0x2cf0
[  290.221959][T12458]  ? __lock_acquire+0x683/0x2cf0
[  290.221986][T12458]  ? prepare_alloc_pages+0x15b/0x650
[  290.222007][T12458]  lock_acquire+0x106/0x350
[  290.222027][T12458]  ? prepare_alloc_pages+0x15b/0x650
[  290.222049][T12458]  ? mt_find+0x186/0x630
[  290.222068][T12458]  fs_reclaim_acquire+0x71/0x100
[  290.222087][T12458]  ? prepare_alloc_pages+0x15b/0x650
[  290.222108][T12458]  prepare_alloc_pages+0x15b/0x650
[  290.222131][T12458]  __alloc_frozen_pages_noprof+0x12f/0x380
[  290.222156][T12458]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  290.222180][T12458]  ? __pfx_policy_nodemask+0x10/0x10
[  290.222207][T12458]  alloc_pages_mpol+0x212/0x380
[  290.222233][T12458]  alloc_pages_noprof+0xac/0x2a0
[  290.222257][T12458]  pte_alloc_one+0x22/0x370
[  290.222274][T12458]  __pte_alloc+0x25/0x1a0
[  290.222296][T12458]  do_pte_missing+0x2db7/0x34b0
[  290.222317][T12458]  ? mtree_range_walk+0x707/0x8b0
[  290.222340][T12458]  handle_mm_fault+0x1b36/0x3080
[  290.222362][T12458]  ? handle_mm_fault+0xec/0x3080
[  290.222381][T12458]  ? __pfx_handle_mm_fault+0x10/0x10
[  290.222404][T12458]  ? __lock_acquire+0x683/0x2cf0
[  290.222426][T12458]  ? lock_mm_and_find_vma+0xa7/0x340
[  290.222447][T12458]  do_user_addr_fault+0x744/0x1340
[  290.222476][T12458]  exc_page_fault+0x6a/0xc0
[  290.222501][T12458]  asm_exc_page_fault+0x26/0x30
[  290.222518][T12458] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  290.222539][T12458] Code: 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  290.222553][T12458] RSP: 0018:ffffc900058277b8 EFLAGS: 00050206
[  290.222568][T12458] RAX: 00007ffffffff001 RBX: ffff888026048000 RCX: 0000000000000300
[  290.222580][T12458] RDX: 0000000000000001 RSI: 0000200000200000 RDI: ffff8880260487ef
[  290.222600][T12458] RBP: ffffc90005827918 R08: ffff888026048aee R09: 1ffff11004c0915d
[  290.222612][T12458] R10: dffffc0000000000 R11: ffffed1004c0915e R12: ffffc90005827dd8
[  290.222624][T12458] R13: 00002000001ff811 R14: 0000000000000aef R15: 1ffff92000b04fbb
[  290.222645][T12458]  _copy_from_iter+0x21b/0x1660
[  290.222669][T12458]  ? alloc_pages_noprof+0x13b/0x2a0
[  290.222697][T12458]  ? __pfx__copy_from_iter+0x10/0x10
[  290.222721][T12458]  ? sk_msg_clone+0xcec/0xd90
[  290.222738][T12458]  sk_msg_memcopy_from_iter+0x35e/0x700
[  290.222762][T12458]  tls_sw_sendmsg+0x1bc1/0x2b50
[  290.222798][T12458]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  290.222818][T12458]  ? __pfx_aa_sk_perm+0x10/0x10
[  290.222839][T12458]  ? sock_rps_record_flow+0x19/0x350
[  290.222860][T12458]  ? inet_send_prepare+0x5b/0x260
[  290.222879][T12458]  ? inet6_sendmsg+0x101/0x120
[  290.222902][T12458]  ? __pfx_inet6_sendmsg+0x10/0x10
[  290.222923][T12458]  sock_sendmsg_nosec+0x90/0x180
[  290.222947][T12458]  __sys_sendto+0x408/0x5a0
[  290.222961][T12458]  ? __local_bh_enable_ip+0xd0/0x130
[  290.222980][T12458]  ? __pfx___sys_sendto+0x10/0x10
[  290.223008][T12458]  ? rcu_is_watching+0x15/0xb0
[  290.223035][T12458]  __x64_sys_sendto+0xde/0x100
[  290.223051][T12458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.223068][T12458]  do_syscall_64+0x174/0x580
[  290.223091][T12458]  ? trace_irq_disable+0x3b/0x140
[  290.223112][T12458]  ? clear_bhb_loop+0x70/0xc0
[  290.223131][T12458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.223147][T12458] RIP: 0033:0x7f0366d9e0d9
[  290.223162][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.223176][T12458] RSP: 002b:00007f0367c94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  290.223192][T12458] RAX: ffffffffffffffda RBX: 00007f0367025fa0 RCX: 00007f0366d9e0d9
[  290.223204][T12458] RDX: fffffffffffffe94 RSI: 0000200000000300 RDI: 0000000000000003
[  290.223215][T12458] RBP: 00007f0366e35024 R08: 0000000000000000 R09: 0000000000000000
[  290.223225][T12458] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000
[  290.223235][T12458] R13: 00007f0367026038 R14: 00007f0367025fa0 R15: 00007ffc33387ad8
[  290.223255][T12458]  </TASK>
[  298.187906][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!