last executing test programs:

4.035942293s ago: executing program 1 (id=3900):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000001640)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='cpuacct.usage_sys\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$TUNDETACHFILTER(r4, 0x8903, 0x1000000000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000940)=0x1)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000800)={0x77359400}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0xc6e9f000)
mmap(&(0x7f0000131000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000)
write$cgroup_freezer_state(r8, &(0x7f0000000080)='FROZEN\x00', 0x7)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r10=>0x0})
r11 = accept4$netrom(r8, 0x0, &(0x7f0000000ac0), 0x0)
sendfile(r11, r8, &(0x7f0000000b00)=0x7, 0x1)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x3, '\x00', 0x0, r8, 0x5, 0x5, 0x1}, 0x50)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r8, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="050000a0000000000400000000000000000000000000000000090000"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xc7, &(0x7f0000000280)=""/199, 0x41000, 0x71, '\x00', r10, 0x17, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x5, 0x2}, 0x10, 0x1819c, r8, 0x4, &(0x7f0000000400)=[r8, 0x1, r12, r8, r8, r8, r13], &(0x7f0000000480)=[{0x1, 0x4, 0x6, 0x3}, {0x0, 0x5, 0x8, 0x5}, {0x4, 0x1, 0xa, 0xb}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x9}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000004c0)="fc18b58472b0", 0x6}], 0x1)
syz_emit_ethernet(0x2e0, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "3df6ca", 0x2aa, 0x6, 0x1, @loopback, @empty, {[@routing={0x6, 0x10, 0x2, 0x1, 0x0, [@loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @mcast2]}, @routing={0x2b, 0x8, 0x1, 0x5, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @loopback]}, @fragment={0x2b, 0x0, 0x3d, 0x0, 0x0, 0x8, 0x67}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x1, 0x68}, @dstopts={0x3b, 0x33, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x4}, @ra, @enc_lim={0x4, 0x1, 0x3}, @generic={0x9, 0xfd, "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"}, @generic={0xa2, 0x79, "3f91e888e6768d3fff481021b40893f8a16cfe32e65532662aab6a25512ff61b2b8387a029c586cf09edab15fd2f09d62abb0f7743e3145c9999fcebef334c87e5d779ccc787621ce7fcf736f55c489964f82a7f9e3da11dcf4dccab9d83ab2d23e362c1e50f0d9bc10a19e93027a6e12d5cae5bd926e91fae"}, @pad1]}, @fragment={0x32, 0x0, 0x21, 0x0, 0x0, 0x1, 0x66}], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x1, 0x6, 0x1, 0x2, 0x1, 0x0, 0x3, 0x9, 0x4, 0x0, 0x400, 0x1, 0x2, 0x4e21, 0x4e20}}, [0x0, 0x0]}}}}}}, 0x0)

3.938109461s ago: executing program 4 (id=3901):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
clock_gettime(0x0, 0x0)
socket$inet6(0xa, 0x1, 0x8010800000000084)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0xfffffe7a, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$netlink(0x10, 0x3, 0x8000000004)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)

3.801283918s ago: executing program 3 (id=3902):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r1, 0x400448e6, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24000844}, 0x24044000)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c0001800800108d040007800c0002010000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x4008094)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000009"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0), 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003340), r2)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000003380), &(0x7f00000033c0)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034008000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace801fcbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="bf000000000000003c001a803800058034"], 0x5c}}, 0x8000)

3.643978967s ago: executing program 1 (id=3903):
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000d18001406ff00000000000000000000ffffe0000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5022a473dc228139f41d93780202"], 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)=""/232, 0xe8}], 0x2}, 0x7fffffff}], 0x1, 0x2110, 0x0)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r2], 0x48}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x148}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3fd}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtclass={0x5c, 0x28, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0xffe0}, {0xfff1, 0x3}, {0x9, 0xffff}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x10, 0x1}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfb={0x8}]}, 0x5c}}, 0xc1)
setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f00000000c0), 0x4)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
close(r8)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x6, 0x80, 0x1, 0x4e, 0x9, 0x61, 0xff, 0x5, 0x7, 0x8, 0x7, 0x1, 0x9}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={<r10=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xdcdf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x10000}]}, &(0x7f0000000000)=0x10)
socket$kcm(0x29, 0x4, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={@empty, 0x1, 0x0, 0x60, 0x0, [{@initdev}, {@loopback}, {@local}, {@empty}, {}, {@multicast1}]}})
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000008000000000000d000000911176000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000200)={r10}, &(0x7f0000000100)=0x8)

3.544652488s ago: executing program 3 (id=3905):
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000003c0)=0xa, 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10}}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.539308512s ago: executing program 1 (id=3907):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010c000000020000000000000000f3ff0c00000000000099cef54b93a150074f76fab1b55ffe449ccd0a24572e2dd8c5cda2421e1f09a61f9302c811b0f3d13c44635f32a2e5ee666f0d6547b7cd1c0ea0cc16215cb52f23ddb592fcaa986b59c3f785ea242da3f4009ccc80c7c5983c8d23e5028c538d10cd6d442947dc862f00000000000000000000200000"], 0x0, 0x26}, 0x28)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x7, 0x4})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000400009c46b26bfef5080001000100000080000000878914dc54f697426997fb7be8187806c493385d6558726136e9f175b9bcbf77fc2ca5011618d3db83f598bfd6c5ccf5272e13547f85de0abd9f19e4f083a4e0f7d7000bf0961d3d78d208e94c221d24cd14ad8969c12929158b2641c9024bc497805b520034ccf2f9e11e08f610cf2b349ce6c505bb4bf7b0edb040760c3ca7f98b3024c3439406e3c980e0c3279087ee77d41b60a1d773469f66198cc7bbb245eeed8e2337a0a55faf1d51b13647eb4f492d3ef5b5c7ed956d4fb5c3cbec87e35c2a6486981a7e23c970474a3f37c0650b392e", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) (async)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000980))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="2584c0ff08000000dd7180000000060000000000000000000d00040100000000000000000221ff7f10000000850000003a000000"], &(0x7f0000000b00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000b40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0xc, 0x0, 0xdee}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[r1, r1, r1, r1], &(0x7f0000000c00)=[{0x0, 0x5, 0xe, 0x1}, {0x3, 0x4, 0x9, 0x2}, {0x1, 0x2, 0xa, 0x4}, {0x0, 0x2, 0xe, 0x4}, {0x1, 0x3, 0xa, 0x8}], 0x10, 0x4000000}, 0x94) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000007000000000a0000010900010073797a3100000000200004801c000180090001006d617371000000000c000280080003400000000006000740bee100000900020073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020050010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x48, &(0x7f0000001040)=""/72, 0x40f00, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x38c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94) (async)
ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000001000)=0xadf) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000d40)={0x0, @bcast, @bpq0, 0x0, 'syz1\x00', @null, 0x9, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x8) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

2.383018514s ago: executing program 0 (id=3908):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x10040)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x30, 0x8, 0x0, "b1fe7b779247268df98ef8cd7caab7214fff8cc97a293da124d1d50fd4b19062f9fb50fa588055d6bc3d45e132"}, @exp_fastopen={0xfe, 0xb, 0xf989, "01653deba5836d"}, @mss={0x2, 0x4, 0xbe2b}, @md5sig={0x13, 0x12, "2901aa44cd132b4148ca13e8c23d88ad"}]}}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x84, 0x80, 0x4, 0x9, 0x0, 0x0, 0x3, 0x4}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7fff, @default, @bpq0, 0x90, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0x10040) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x30, 0x8, 0x0, "b1fe7b779247268df98ef8cd7caab7214fff8cc97a293da124d1d50fd4b19062f9fb50fa588055d6bc3d45e132"}, @exp_fastopen={0xfe, 0xb, 0xf989, "01653deba5836d"}, @mss={0x2, 0x4, 0xbe2b}, @md5sig={0x13, 0x12, "2901aa44cd132b4148ca13e8c23d88ad"}]}}}}}}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x84, 0x80, 0x4, 0x9, 0x0, 0x0, 0x3, 0x4}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000) (async)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7fff, @default, @bpq0, 0x90, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) (async)

2.290091247s ago: executing program 3 (id=3909):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1800f0ff00040000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018570000100000800000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000007c0)="f2d08e22a666dbfd3e8aef1409533c905fb5d0d377c4b32b62bb0b48943c66f2a10eef40903955964d390289113df24d9f45b917c57e343a11b89c9597d4bde434e4551fc6621027ef9b6cdcb07a24513b8c6a9c6b149ffa4f86449971f418bf3a1c021c0d70823c5190816463cb1edb8c06700ecee024c9de8041e42d34efc03b0c312af8d8aa0da0ba444e", 0x8c}], 0x1}, 0x4800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0)

2.169187957s ago: executing program 0 (id=3910):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100000ebfa30000000000000703000004feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a00fe000000007303feff00000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0)

2.139737032s ago: executing program 2 (id=3911):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0xcc, 0x31, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0xcc, 0x31, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

2.053419274s ago: executing program 0 (id=3912):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000f9ff81461d7107ba0000f2ffffff0000000400000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.916426148s ago: executing program 2 (id=3913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'caif0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000400)={<r12=>0xffffffffffffffff})
splice(r4, 0x0, r11, 0x0, 0x1c, 0x4) (async)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@struct={0x5, 0x7, 0x0, 0x4, 0x0, 0x3, [{0xe, 0x5, 0x10001}, {0x2, 0x3, 0x1fe}, {0x6, 0x0, 0x140}, {0x9, 0x3, 0x3}, {0xc, 0x1, 0x7}, {0x4, 0x1, 0x100}, {0x0, 0xfffffffd, 0xce}]}]}}, &(0x7f0000000500)=""/150, 0x7a, 0x96, 0x3, 0x0, 0x10000, @value=r12}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2a, 0x0, 0xffffffff, 0x9d, 0x100, 0xffffffffffffffff, 0x7, '\x00', r1, r13, 0x20000005, 0x3, 0x5}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000ed009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.907443003s ago: executing program 1 (id=3914):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffd2, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @loopback}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x1, r1})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.906739489s ago: executing program 0 (id=3915):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r1, 0x400448e6, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24000844}, 0x24044000)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c0001800800108d040007800c0002010000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x4008094)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000009"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0), 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003340), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003480)={'gretap0\x00', &(0x7f0000003400)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x5, 0x5, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x68, 0x0, 0xfc, 0x4, 0x0, @loopback, @private=0xa010100, {[@noop, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x0, [0x1]}, @noop, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0x4, [{@private=0xa010101, 0x81}, {@multicast2, 0x7d9}, {@multicast2, 0x29c7}, {@private=0xa010100, 0xffffffc0}, {@multicast2, 0x7}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034008000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace801fcbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="bf000000000000003c001a803800058034"], 0x5c}}, 0x8000)

1.856559826s ago: executing program 4 (id=3916):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000510000a240000000c0a010100000000000000000a0000060900010073797a310000000004000380140000001100010000000000000000000200000a"], 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8576b92dde)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) (async)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

1.720141936s ago: executing program 2 (id=3917):
syz_emit_ethernet(0x7e, &(0x7f0000000680)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0xb, 0xe5, [@remote, @loopback]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private=0xfffffffe}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x2000000000000215, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x6}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@can_delroute={0x6c, 0x19, 0x4, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x0, 0x0, "b7ef82f2ef61bf35"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "a730f479eeb88a17"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "3c1c47abf53acacf"}, 0x1}}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x155555f9, 0x0, 0x5, 0x0, 0x98}]}, {0x0, [0x30, 0x30, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x1f, 0x9, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)="5d57e040c9bc60688ae6c5b55fe503bf8cf0209951e44864cc1273c6fdb89713b85d189de43f59c9fc92c28832fee8a8da2f9b2c98f9fd94fa9a6aedf94678c817f89f14a8867a4c0e006f6a0b58aad186ecd3c2c0177dede9d72f13a907b39fc6120b32934236d815a8b5d27d25449ea399569b840da6b98f68d2add3bf5fbe760540a0e0d6540d34244e8819dcbb13", 0x90}, {&(0x7f0000000340)="caa42cc23c7390412ab6f348dc438c0f97bc2ffd5f882d", 0x17}, {&(0x7f0000000ac0)="ba6e1197064d72664a03c67e705881772255c9e1b74f90036041d8244fb3b609145f925b3e665b831c5306b31479f3ada5673bbb3d15f2727e6cd267f4a9d9aa57eae3425cf22bc7e3efa8fb6083c801b72b61a0fd4e9773ee10c893e0d7916bc01c5085fa3db6a9b45c9c8ef11a1822f48ecae000fdddb912889898c19eda2835fb79e799ab286bd0ac090320afd5354f35b5547dd400000000", 0x9a}, {&(0x7f0000000440)="692358eaee44499ede4a1f919254283e0e6234eb458d1b6cc09a7d4d4ada1d7b5a08cf61a935f415535138ed6ad8219c30bcc25abe94aca6787f96c75c512f313b99d07402816719347d5bc98186ddef48b55225644a7f0894643c62628d3d70724cf9811861ef4dce13046358ee9497a0", 0x71}, {&(0x7f0000000700)="15f0d3159c42a8913c9c8ac0df92b31bcb5c573f1fa288da0bea598d177f1555b57cb1b166ff38f943bb0fe6bc8afc2099859690240e7bd40420ecb85f2ae3752ad9abca5076e34d10e2029fc670e05ec28f5efeb09560d9e1ee51204d58f5244d512e5a4f76cc4f929276252ba7e45bc7e88487488e2cf95e5f8b103a7b87417b7eae385cee888d446e66c44653d133b354607db744b8fd9d0abf083f0608c45f724ec4229c6b8d8f5076f9fd73afc5489d6d5b357dfbe6d8319fd2db400b8eee9a568e6638999db97c4be89ae953d6131cad498bb7d860c4ef13b7633a82784e311c", 0xe3}, {&(0x7f0000000380)="7af0c41bf10de591f24c2f1ea740a758bdaa27fb00"/34, 0x22}, {&(0x7f0000000800)="7981a6e5515c3e04d652be64b3f2c32c49426a74bd0761d7ded4ccbabc51913c53462d680a98ff98450f24e79d613550d0b8479561176f5272c0b9b6e942867f7343d53d0af92a80dff2f6c9dcd165fa9926575146d39870adbe0504a0bf5dafb7a574e1452d2f400677b7064fe00b64e132ad72d87ebddfe3c3fcb993a0abdb5b5bf438183f6f9d3db4760f478b459a34c8c530eaa3ad6e50df56cb326b15a796a9443804d3958c64cadd6b92fc26157df8c39143276b7401aa6916d051074ed145c5244df8f29d0a02ab496be3ffdf35ada51e617ddbbb2471bd97cffbde", 0xdf}, {&(0x7f0000000540)="45ec5a002d1c7a74a858c9aa", 0xc}, {&(0x7f0000000940)="28628fde58b04b2da100fc1a880346d3fbca6ecc4e640302165156ce748540a6d5d3d5168df60e78d9d3267ee76f1ff5cac9476306bcb3fd421e4cc251b5ce9fb5d46bd97de5f9195d7014346c753ab428a7dc2c02bb8c3588b08ccc86842f11b0df5ffee98bde9caa", 0x69}, {&(0x7f00000009c0)="fb74edd5a411b0df5e", 0x9}], 0xa, 0x0, 0x0, 0x7400}, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84100, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, &(0x7f0000000080))
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r5, 0x4004743c, &(0x7f0000000080)=0xc)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000007c5dde"], 0x14}}, 0x8000)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x1, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))

1.719364321s ago: executing program 0 (id=3918):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x58, "cfeec7fdbe3791889675844206a0e921205c51608bc65f38944a5f0639f6d6e144ab29e9559f6033faf251bdd0ce26a583df6a97969bd21cb789188064b2f8023309268fcdb4a9043ed78d260beef8ce7b6b47ce6233403a"}, &(0x7f0000000300)=0x7c)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x18, 0x40, 0x107, 0xfffffefe, 0x0, {0x81, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

1.657732476s ago: executing program 1 (id=3919):
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000003c0)=0xa, 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10}}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1.656322485s ago: executing program 4 (id=3920):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x10001}, 0x1c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4004800)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendto$inet6(r0, 0x0, 0x0, 0x240044d5, &(0x7f00000001c0)={0xa, 0x2, 0x10002, @loopback, 0x8d8}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
close(0x3)

1.57199035s ago: executing program 4 (id=3921):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000e000000240012800b000100677265746170000014800280080004000800000006fb"], 0x44}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000640)=' 2+', 0x3}], 0x1, 0x8, 0x2)
ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="da80aec014ba426356a63ef350af5fdefbfb8ce6a7da230dbaf1daa8d8b8b1ec9a70f2c0bf740ede41e11ccdb10dc05da2277d0dfdf2469e2e3522f31078851ffbe9b48d02d2043396ccd6eb23aa4067bac8915c3e63a4a11788686ae04fef552b0df8a3175e3bc40aa0523d6e56f6acd105262dceaf2e7108e936ed80a598428d424dd23a837ecf121212e810e22735ac0c4ab6da8241158f4138f3293b16eb567b3d93f9d416d1edb9f9ba094a055368dbea62f1")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

1.542289178s ago: executing program 3 (id=3922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f0000000180), 0x43)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x8000)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)

1.281032681s ago: executing program 4 (id=3923):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x8, 0xea, 0xaa}, {0x4, 0x4, 0x10, 0x5}, {0xf757, 0x66, 0x5, 0x401}]}, 0x10)

1.172005292s ago: executing program 0 (id=3924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x90}}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)

1.026924279s ago: executing program 3 (id=3925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x80000000) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) (async)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0)

885.080043ms ago: executing program 2 (id=3926):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

813.702547ms ago: executing program 4 (id=3927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket$unix(0x1, 0x1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r5, 0x2)
recvmsg(r5, 0x0, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = gettid()
sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x10, 0x80000)
getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000b4f100818b465c16517a8da242a4785876640000001d17f600800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'pim6reg\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)

200.232131ms ago: executing program 2 (id=3928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f00000013c0)=0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
splice(r1, 0x0, r7, 0x0, 0x39000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c005)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0a010200000000000000000a000300"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
close(0x3)

65.419752ms ago: executing program 2 (id=3929):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe69, 0x298d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2800c004)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x10, 0x0, 0x8}, &(0x7f0000000100)=0x18) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x10, 0x0, 0x8}, &(0x7f0000000100)=0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xcb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xcb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, {0xa, 0x4e21, 0x5, @remote}, 0xffffffffffffffff, {[0xfff, 0xfd, 0x5, 0x4, 0x8, 0x8, 0x5578, 0x6]}}, 0x5c)
socket$kcm(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4) (async)
close(r4)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2543, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2543, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r4, 0x4004743b, &(0x7f0000001440))

65.006631ms ago: executing program 3 (id=3930):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)

0s ago: executing program 1 (id=3931):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000100)=0x80000, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008004000", @ANYRES32, @ANYBLOB="01c61c4c97a5d22f2424063b3ef20a2a21846749ee02013d2a0a6beea945a6ea8d3d5dcdeadb000000000000000000000010f13d231538d65d96c37d0300000000000000762643b77c1d704b956d4ebb"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20040000", @ANYRES16=r3, @ANYBLOB="0d882dbd7000fddbdf250100000004000180100002800c0001800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r4=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000740)=0x1c, 0x1000)
getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000400)={@remote, <r7=>0x0}, &(0x7f00000009c0)=0x14)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', <r9=>0x0, 0xf207a1345e582f06, 0x7, 0xa, 0xfadc, {{0x16, 0x4, 0x2, 0xd, 0x58, 0x68, 0x0, 0x66, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0x18, 0x36, 0x0, 0xe, [0x9, 0x40, 0x1, 0x9, 0x7ff]}, @lsrr={0x83, 0x2b, 0x13, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102, @multicast1, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x148, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x200400c4}, 0x810)
r10 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r10})
close(0x3)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="d77a861643e3a8e67292a2283cfeaf767bcd8ade31bcc9a5e1e8da41308b86a7b87bebbf8def53a35bca", @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES16=r11, @ANYBLOB="0000000000000000b702000020000000850000001700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="9a0efe2c7eb089b83d015e12bee1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=3937):
ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x8000000000000000, 0xccd})
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000040)='{^]%/\xd6,$\x00', 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd27, 0x42, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4008011)
socketpair(0x9, 0x4, 0x4, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x33, 0x3, "63ede1db6b671962212935a889235c5dba1afd2343d918866a5beafe974fbec7b81d5acfa5b9937d7acd768448dc89"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc557}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x4020000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000480)=0x4010, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000500)=0xc)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000540)=r5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$ax25(r2, &(0x7f0000000580)={{0x3, @rose}, [@remote, @rose, @rose, @default, @bcast, @default, @null, @netrom]}, &(0x7f0000000600)=0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x47d4dda5c4929ecd}, 0x4000010)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000880)={0x1, 'pimreg1\x00', {}, 0x8001})
ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000940)={&(0x7f00000008c0)=[{0xea0f, 0x8}, {0x3a, 0x9}, {0x4, 0x8}, {0x0, 0xfc, 0x2}, {0x400, 0xc413}, {0x8, 0x1, 0x2}], 0x6, 0x10, 0x10, 0x2})
r12 = accept(r9, &(0x7f0000000cc0)=@ethernet={0x0, @dev}, &(0x7f0000000d40)=0x80)
r13 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000e80)=0xe8)
r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$netlink(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)={0x54, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@generic="f2a9c23cb87c65f7007d29a8043f9a86064a3de1b0e630baa743ed8cb8d59d71251c0408350fac83119750fb263fb11ab7741a07ad4eccd639d564", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x8001}]}, 0x54}, {&(0x7f0000000a00)={0x10c, 0x35, 0x1, 0x70bd27, 0x25dfdbff, "", [@nested={0xa2, 0x2c, 0x0, 0x1, [@generic="3b3d05e0c22110380adbcefdb0751605d87542ffb3c2cc0992864621bfc8868d02a6adac5fe2acf1b2c656948fc65b25a2413bc730f7894b9056fbfddb265fec11246f6105757c260dc1984844efa82012079e2f6a5b911de265f07e2902baf5b2d04297a6e1d13b22773927218fd6f6279bc71c9a760f31ef7c52928c3c95218998316e04a2db4c5857c70985b7253d7f6088b5c3b1cd0ba57eb221273a"]}, @generic="74aacab8b3acce09ec8c25a9d22f1504cc0c586f98", @generic="16cd1f8b14df46924e2d9ecb81befee13bfbdf15361eb98cbb073a5ae2ac93dfe176292b48cb465c959580b026b15bba53c9d1e7cbfa6ed79fb31a6f711f34a55b"]}, 0x10c}, {&(0x7f0000000b40)={0x10c, 0x38, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="59ed42e1f0cc107f7bd3293d59c1c42721cf0da111eb58b4b627e616661637e6c761d079a7b5fd8a0048b846015d313ff612cf1e5b520be97d3744e138def813866c050201469b5a2a916247f87790738a713548a861882fbd3f78e22c57fac01be974736fbf139cceb7e2982c8c618220e57a0eb9bd44818299e289e8371c1fdc4a1e83884ae051e0b3a1ba7547c1093e8103574291d14ed71efb4cf887237c540abadf0afac1ad213659b539506465a55817f08e06e2be256340395e08aea9a5a5b6681a218ec7adb1fc979b28f9d7e1f352d34c0ae0e29bdfbe91d7978c75fa0dbf7484cf0b49c4cf1e77a62fe0286d2fca401c86987ab5"]}, 0x10c}], 0x3, &(0x7f0000000ec0)=[@rights={{0x30, 0x1, 0x1, [r12, r0, 0xffffffffffffffff, r13, r0, r8, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r14, r7}}}, @rights={{0x28, 0x1, 0x1, [r9, r8, r2, r9, r15, r9]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x20000084}, 0x4)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r11)
sendmsg$IEEE802154_ASSOCIATE_REQ(r16, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r17, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x24008004)
socket(0xf, 0x5, 0x6)

kernel console output (not intermixed with test programs):

gth.
[  492.305727][T16405] !: entered promiscuous mode
[  493.030989][T16437] wg1 speed is unknown, defaulting to 1000
[  493.051910][T16443] TCP: TCP_TX_DELAY enabled
[  493.483241][T16437] lo speed is unknown, defaulting to 1000
[  493.490534][T16437] gre0 speed is unknown, defaulting to 1000
[  494.241514][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  494.249842][    C1] lec:lec_tx_timeout: lec0
[  494.254663][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  494.321565][   T61] net_ratelimit: 27 callbacks suppressed
[  494.321607][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  494.441670][ T1156] bond3: (slave bridge2): failed to get link speed/duplex
[  494.552006][ T1156] bond3: (slave bridge2): failed to get link speed/duplex
[  494.661532][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  494.781784][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  494.891558][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  495.011743][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  495.121555][  T773] bond3: (slave bridge2): failed to get link speed/duplex
[  495.231740][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  495.341678][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  499.137138][T16460] nbd: must specify at least one socket
[  499.391951][   T61] net_ratelimit: 35 callbacks suppressed
[  499.391974][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  499.424469][T16480] __nla_validate_parse: 6 callbacks suppressed
[  499.424491][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'.
[  499.447449][T16476] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2746'.
[  499.491592][T16476] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  499.519282][T16485] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2750'.
[  499.561859][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  499.683907][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  499.812312][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  499.951510][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  500.018347][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2754'.
[  500.181651][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  500.321725][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  500.381389][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms
[  500.382374][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'.
[  500.389888][    C1] lec:lec_tx_timeout: lec0
[  500.405330][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  500.432885][ T1156] bond3: (slave bridge2): failed to get link speed/duplex
[  500.454623][T16515] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  500.492267][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2757'.
[  500.641544][ T1156] bond3: (slave bridge2): failed to get link speed/duplex
[  500.892549][T16539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2766'.
[  500.936690][T16543] netlink: 'syz.2.2767': attribute type 1 has an invalid length.
[  501.078091][T16548] netlink: 'syz.3.2769': attribute type 21 has an invalid length.
[  501.090718][T16548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2769'.
[  501.284329][T16567] syzkaller1: entered promiscuous mode
[  501.311063][T16567] syzkaller1: entered allmulticast mode
[  501.346751][T16573] tipc: Enabled bearer <ib:batadv_slave_1>, priority 27
[  501.523478][T16582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2781'.
[  501.552607][T16584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'.
[  501.606160][T16579] wg1 speed is unknown, defaulting to 1000
[  501.668874][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  502.052415][T16579] lo speed is unknown, defaulting to 1000
[  502.065635][T16579] gre0 speed is unknown, defaulting to 1000
[  502.462303][ T7832] tipc: Node number set to 3027085571
[  503.245914][T16668] wg1 speed is unknown, defaulting to 1000
[  503.514121][T16677] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  503.527009][T16677] bond9 (unregistering): Released all slaves
[  503.907330][T16687] netlink: 'syz.1.2815': attribute type 4 has an invalid length.
[  504.240103][T16668] lo speed is unknown, defaulting to 1000
[  504.304955][T16668] gre0 speed is unknown, defaulting to 1000
[  504.483653][   T61] net_ratelimit: 30 callbacks suppressed
[  504.483677][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  504.552417][T16721] __nla_validate_parse: 6 callbacks suppressed
[  504.552448][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2826'.
[  504.596407][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2826'.
[  504.639476][T16726] wg1 speed is unknown, defaulting to 1000
[  504.651606][ T6588] bond3: (slave bridge2): failed to get link speed/duplex
[  504.763266][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'.
[  504.771544][ T6588] bond3: (slave bridge2): failed to get link speed/duplex
[  504.836651][T16735] 8021q: adding VLAN 0 to HW filter on device bond6
[  505.043905][  T773] bond3: (slave bridge2): failed to get link speed/duplex
[  505.120592][T16749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2833'.
[  505.172291][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2833'.
[  505.219107][T16726] lo speed is unknown, defaulting to 1000
[  505.228222][T16726] gre0 speed is unknown, defaulting to 1000
[  505.242015][  T773] bond3: (slave bridge2): failed to get link speed/duplex
[  505.382165][   T61] bond3: (slave bridge2): failed to get link speed/duplex
[  505.491481][  T773] bond3: (slave bridge2): failed to get link speed/duplex
[  505.602329][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  505.693179][T16774] IPVS: set_ctl: invalid protocol: 41 10.65.1.0:20001
[  505.760116][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  506.091926][  T106] bond3: (slave bridge2): failed to get link speed/duplex
[  506.141326][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms
[  506.150256][    C1] lec:lec_tx_timeout: lec0
[  506.155047][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  506.391807][T16774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2843'.
[  506.426598][T16781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  506.448842][T16781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  506.467927][T16781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  506.489814][T16781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  506.497889][T16781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  506.557558][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  506.566271][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  506.586106][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  506.620842][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  506.626411][  T106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  506.662839][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  506.783975][  T106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  506.845672][T16779] wg1 speed is unknown, defaulting to 1000
[  506.892281][  T106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  507.020001][  T106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  507.360943][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2848'.
[  507.395144][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2848'.
[  507.453947][  T106] veth0_to_bond: left allmulticast mode
[  507.480848][  T106] veth0_to_bond: left promiscuous mode
[  507.500502][  T106] bridge6: port 1(veth0_to_bond) entered disabled state
[  507.664503][  T106] bond5 (unregistering): (slave ip6gre5): Releasing backup interface
[  507.945246][  T106] bond3 (unregistering): (slave bridge2): Removing an active aggregator
[  507.955427][  T106] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  507.963875][  T106] bond3 (unregistering): (slave bridge2): the permanent HWaddr of slave - 8a:2c:14:d4:8c:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  507.984056][  T106] bridge2 (unregistering): left promiscuous mode
[  507.993203][  T106] bridge2 (unregistering): left allmulticast mode
[  508.055809][  T106] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  508.066032][  T106] bridge3 (unregistering): left promiscuous mode
[  508.072990][  T106] bridge3 (unregistering): left allmulticast mode
[  508.294599][  T106] bond0 (unregistering): Released all slaves
[  508.305378][  T106] bond1 (unregistering): Released all slaves
[  508.318875][  T106] bond2 (unregistering): Released all slaves
[  508.333659][  T106] bond3 (unregistering): Released all slaves
[  508.349462][  T106] bond4 (unregistering): Released all slaves
[  508.364595][  T106] bond5 (unregistering): Released all slaves
[  508.378981][  T106] bond6 (unregistering): Released all slaves
[  508.426190][T16779] lo speed is unknown, defaulting to 1000
[  508.446169][T16779] gre0 speed is unknown, defaulting to 1000
[  508.534103][  T106] : left promiscuous mode
[  508.695432][  T106] !: left promiscuous mode
[  508.701826][ T5827] Bluetooth: hci5: command tx timeout
[  508.781442][T16789] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  508.796445][T16789] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  508.865295][  T106] tipc: Disabling bearer <ib:batadv_slave_1>
[  508.922878][  T106] tipc: Left network mode
[  508.965034][T16824] netlink: 'syz.0.2851': attribute type 1 has an invalid length.
[  509.264680][T16835] netlink: 'syz.1.2855': attribute type 13 has an invalid length.
[  509.287395][T16835] netlink: 'syz.1.2855': attribute type 27 has an invalid length.
[  509.338151][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'.
[  509.577416][T16833] wg1 speed is unknown, defaulting to 1000
[  510.016472][T16779] chnl_net:caif_netlink_parms(): no params data found
[  510.185370][T16869] netlink: 'syz.0.2860': attribute type 1 has an invalid length.
[  510.344813][T16779] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.354692][T16779] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.364868][T16779] bridge_slave_0: entered allmulticast mode
[  510.373285][T16779] bridge_slave_0: entered promiscuous mode
[  510.382190][T16854] wg1 speed is unknown, defaulting to 1000
[  510.390754][T16779] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.401487][T16779] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.410836][T16779] bridge_slave_1: entered allmulticast mode
[  510.420411][T16779] bridge_slave_1: entered promiscuous mode
[  510.508278][T16779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.536298][T16779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.623783][T16779] team0: Port device team_slave_0 added
[  510.644073][T16779] team0: Port device team_slave_1 added
[  510.728590][T16779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.747306][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.811380][T16779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.834114][T16779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.858020][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.886630][T16779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.907849][T16854] lo speed is unknown, defaulting to 1000
[  510.949400][T16833] lo speed is unknown, defaulting to 1000
[  510.955376][T16854] gre0 speed is unknown, defaulting to 1000
[  511.038026][T16779] hsr_slave_0: entered promiscuous mode
[  511.062527][T16779] hsr_slave_1: entered promiscuous mode
[  511.161415][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  511.169798][    C1] lec:lec_tx_timeout: lec0
[  511.175325][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  511.412825][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2865'.
[  511.509761][T16901] wg1 speed is unknown, defaulting to 1000
[  511.678649][T16833] gre0 speed is unknown, defaulting to 1000
[  512.133711][T16901] lo speed is unknown, defaulting to 1000
[  512.443796][T16901] gre0 speed is unknown, defaulting to 1000
[  513.117195][  T106] hsr_slave_0: left promiscuous mode
[  513.204812][  T106] pim6reg (unregistering): left allmulticast mode
[  514.367581][T16928] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  514.443400][T16927] macsec0: entered promiscuous mode
[  514.514834][T16779] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  514.605955][T16779] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  514.756409][T16779] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  514.817087][T16779] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  514.904756][T16931] IPv6: sit3: Disabled Multicast RS
[  515.147619][  T106] IPVS: stop unused estimator thread 0...
[  515.460246][T16779] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.537190][T16779] 8021q: adding VLAN 0 to HW filter on device team0
[  515.596055][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.603638][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.674987][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.682759][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.759873][T16966] netlink: 'syz.2.2873': attribute type 3 has an invalid length.
[  515.804212][T16963] netlink: 'syz.2.2873': attribute type 13 has an invalid length.
[  515.883042][T16969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'.
[  515.958263][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2876'.
[  516.058679][T16976] FAULT_INJECTION: forcing a failure.
[  516.058679][T16976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  516.117446][T16976] CPU: 1 UID: 0 PID: 16976 Comm: syz.2.2877 Not tainted syzkaller #0 PREEMPT(full) 
[  516.117476][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  516.117488][T16976] Call Trace:
[  516.117497][T16976]  <TASK>
[  516.117505][T16976]  dump_stack_lvl+0xe8/0x150
[  516.117539][T16976]  should_fail_ex+0x412/0x560
[  516.117570][T16976]  _copy_from_user+0x2d/0xb0
[  516.117601][T16976]  kstrtouint_from_user+0xd6/0x180
[  516.117630][T16976]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  516.117672][T16976]  proc_fail_nth_write+0x8e/0x210
[  516.117702][T16976]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  516.117736][T16976]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  516.117765][T16976]  vfs_write+0x29a/0xb90
[  516.117799][T16976]  ? __pfx_vfs_write+0x10/0x10
[  516.117823][T16976]  ? __fget_files+0x2a/0x420
[  516.117858][T16976]  ? __fget_files+0x3a0/0x420
[  516.117884][T16976]  ? __fget_files+0x2a/0x420
[  516.117922][T16976]  ksys_write+0x150/0x270
[  516.117947][T16976]  ? __pfx_ksys_write+0x10/0x10
[  516.117984][T16976]  do_syscall_64+0x14d/0xf80
[  516.118011][T16976]  ? trace_irq_disable+0x3b/0x150
[  516.118040][T16976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.118061][T16976]  ? clear_bhb_loop+0x40/0x90
[  516.118087][T16976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.118116][T16976] RIP: 0033:0x7efd25b5cfce
[  516.118136][T16976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  516.118153][T16976] RSP: 002b:00007efd2696dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  516.118176][T16976] RAX: ffffffffffffffda RBX: 00007efd2696e6c0 RCX: 00007efd25b5cfce
[  516.118191][T16976] RDX: 0000000000000001 RSI: 00007efd2696e0a0 RDI: 0000000000000004
[  516.118204][T16976] RBP: 00007efd2696e090 R08: 0000000000000000 R09: 0000000000000000
[  516.118216][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.118228][T16976] R13: 00007efd25e16038 R14: 00007efd25e15fa0 R15: 00007ffc41c43dd8
[  516.118263][T16976]  </TASK>
[  516.333491][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms
[  516.342433][    C1] lec:lec_tx_timeout: lec0
[  516.348571][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  516.417429][T16983] netlink: 'syz.4.2878': attribute type 11 has an invalid length.
[  516.556197][T16986] : entered promiscuous mode
[  516.840681][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.886464][T17003] netlink: 'syz.4.2882': attribute type 20 has an invalid length.
[  516.926411][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'.
[  516.978935][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'.
[  517.025914][T17012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2883'.
[  517.054262][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  517.071744][T17009] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2883'.
[  517.152632][T16779] veth0_vlan: entered promiscuous mode
[  517.186303][T16779] veth1_vlan: entered promiscuous mode
[  517.274216][T16779] veth0_macvtap: entered promiscuous mode
[  517.295329][T17017] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2884'.
[  517.326728][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'.
[  517.344184][T16779] veth1_macvtap: entered promiscuous mode
[  517.442869][T16779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  517.477296][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.508788][  T106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.538071][  T106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.592135][  T106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.687123][  T106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.759776][T17023] wg1 speed is unknown, defaulting to 1000
[  518.211645][  T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.221875][  T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.364788][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.397036][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.580663][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'.
[  518.650711][T17069] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  518.707579][T17069] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  518.781183][T17069] tipc: Resetting bearer <eth:syzkaller0>
[  518.849822][  T106] tipc: Resetting bearer <eth:syzkaller0>
[  518.900567][T17072] wg1 speed is unknown, defaulting to 1000
[  518.906998][T17023] lo speed is unknown, defaulting to 1000
[  518.924150][T17023] gre0 speed is unknown, defaulting to 1000
[  519.138384][T17088] ieee802154 phy0 wpan0: encryption failed: -22
[  519.455711][T17103] IPVS: set_ctl: invalid protocol: 14385 114.56.32.61:8240
[  519.980954][T17101] wg1 speed is unknown, defaulting to 1000
[  520.003602][T17072] lo speed is unknown, defaulting to 1000
[  520.120888][T16781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.133566][T16781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.144445][T16781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.154054][T16781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.163583][T16781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.172680][T17072] gre0 speed is unknown, defaulting to 1000
[  520.873437][T17143] netlink: 'syz.2.2902': attribute type 1 has an invalid length.
[  520.931823][T17143] 8021q: adding VLAN 0 to HW filter on device bond8
[  520.951407][T17124] wg1 speed is unknown, defaulting to 1000
[  521.200786][T17155] sysfs: cannot create duplicate filename '/class/ieee80211/

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥”!'
[  521.262663][T17155] CPU: 1 UID: 0 PID: 17155 Comm: syz.2.2903 Not tainted syzkaller #0 PREEMPT(full) 
[  521.262697][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  521.262711][T17155] Call Trace:
[  521.262720][T17155]  <TASK>
[  521.262730][T17155]  dump_stack_lvl+0xe8/0x150
[  521.262767][T17155]  sysfs_warn_dup+0x8e/0xa0
[  521.262799][T17155]  sysfs_do_create_link_sd+0xc0/0x110
[  521.262832][T17155]  device_add_class_symlinks+0x1cf/0x240
[  521.262860][T17155]  device_add+0x475/0xb70
[  521.262889][T17155]  wiphy_register+0x1d73/0x2d50
[  521.262935][T17155]  ? __pfx_wiphy_register+0x10/0x10
[  521.262961][T17155]  ? __pfx_netdev_run_todo+0x10/0x10
[  521.262985][T17155]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  521.263018][T17155]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  521.263053][T17155]  ieee80211_register_hw+0x35f0/0x42c0
[  521.263092][T17155]  ? ieee80211_register_hw+0x14f1/0x42c0
[  521.263127][T17155]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  521.263170][T17155]  ? __hrtimer_setup+0x181/0x200
[  521.263199][T17155]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  521.263229][T17155]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  521.263301][T17155]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  521.263323][T17155]  ? kstrndup+0xbf/0x160
[  521.263364][T17155]  hwsim_new_radio_nl+0xf6a/0x1c00
[  521.263416][T17155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  521.263452][T17155]  ? rcu_is_watching+0x15/0xb0
[  521.263484][T17155]  ? trace_kmalloc+0x2a/0x110
[  521.263516][T17155]  ? __nla_parse+0x40/0x60
[  521.263552][T17155]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  521.263576][T17155]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  521.263611][T17155]  genl_family_rcv_msg_doit+0x22a/0x330
[  521.263643][T17155]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  521.263682][T17155]  ? bpf_lsm_capable+0x9/0x20
[  521.263709][T17155]  ? security_capable+0x7e/0x2c0
[  521.263745][T17155]  genl_rcv_msg+0x61c/0x7a0
[  521.263776][T17155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.263798][T17155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  521.263822][T17155]  ? __lock_acquire+0x6b5/0x2cf0
[  521.263863][T17155]  netlink_rcv_skb+0x232/0x4b0
[  521.263894][T17155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.263919][T17155]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.263969][T17155]  ? down_read+0x272/0x2e0
[  521.263988][T17155]  ? genl_rcv+0xd/0x40
[  521.264013][T17155]  genl_rcv+0x28/0x40
[  521.264033][T17155]  netlink_unicast+0x80f/0x9b0
[  521.264071][T17155]  ? __pfx_netlink_unicast+0x10/0x10
[  521.264099][T17155]  ? netlink_sendmsg+0x650/0xb40
[  521.264129][T17155]  ? skb_put+0x11b/0x210
[  521.264166][T17155]  netlink_sendmsg+0x813/0xb40
[  521.264205][T17155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.264239][T17155]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.264269][T17155]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.264307][T17155]  ____sys_sendmsg+0x972/0x9f0
[  521.264327][T17155]  ? futex_unqueue+0x211/0x240
[  521.264360][T17155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.264394][T17155]  ? import_iovec+0x73/0xa0
[  521.264432][T17155]  ___sys_sendmsg+0x2a5/0x360
[  521.264462][T17155]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.264492][T17155]  ? futex_wait+0x29a/0x380
[  521.264555][T17155]  ? __fget_files+0x2a/0x420
[  521.264584][T17155]  ? __fget_files+0x3a0/0x420
[  521.264628][T17155]  __x64_sys_sendmsg+0x1bd/0x2a0
[  521.264654][T17155]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.264688][T17155]  ? rcu_is_watching+0x15/0xb0
[  521.264734][T17155]  do_syscall_64+0x14d/0xf80
[  521.264764][T17155]  ? trace_irq_disable+0x3b/0x150
[  521.264794][T17155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.264816][T17155]  ? clear_bhb_loop+0x40/0x90
[  521.264844][T17155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.264865][T17155] RIP: 0033:0x7efd25b9c799
[  521.264886][T17155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.264905][T17155] RSP: 002b:00007efd2696e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.264929][T17155] RAX: ffffffffffffffda RBX: 00007efd25e15fa0 RCX: 00007efd25b9c799
[  521.264944][T17155] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  521.264958][T17155] RBP: 00007efd25c32c99 R08: 0000000000000000 R09: 0000000000000000
[  521.264971][T17155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.264983][T17155] R13: 00007efd25e16038 R14: 00007efd25e15fa0 R15: 00007ffc41c43dd8
[  521.265020][T17155]  </TASK>
[  521.850693][T17160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.996836][T17124] lo speed is unknown, defaulting to 1000
[  522.028216][T17101] lo speed is unknown, defaulting to 1000
[  522.036578][T17124] gre0 speed is unknown, defaulting to 1000
[  522.141327][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[  522.150618][    C1] lec:lec_tx_timeout: lec0
[  522.156083][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  522.302514][T16781] Bluetooth: hci0: command tx timeout
[  522.344302][  T106] tipc: Resetting bearer <eth:syzkaller0>
[  522.379084][T17171] net_ratelimit: 6 callbacks suppressed
[  522.379108][T17171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  522.585996][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'.
[  522.695381][T17192] sit4: entered allmulticast mode
[  522.777815][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2911'.
[  522.979077][T17101] gre0 speed is unknown, defaulting to 1000
[  523.626858][T17220] RDS: rds_bind could not find a transport for ::ffff:10.1.1.4, load rds_tcp or rds_rdma?
[  523.713977][T17222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'.
[  523.946121][T17124] chnl_net:caif_netlink_parms(): no params data found
[  523.963575][T17231] netlink: 'syz.4.2915': attribute type 3 has an invalid length.
[  523.981558][T17231] netlink: 586 bytes leftover after parsing attributes in process `syz.4.2915'.
[  524.046508][T17233] team0: entered promiscuous mode
[  524.071363][T17233] bridge1: entered promiscuous mode
[  524.108010][T17233] 8021q: adding VLAN 0 to HW filter on device team0
[  524.383027][T16781] Bluetooth: hci0: command tx timeout
[  524.883868][T17245] wg1 speed is unknown, defaulting to 1000
[  524.939693][T17124] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.963796][T17124] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.982135][T17124] bridge_slave_0: entered allmulticast mode
[  525.011416][T17124] bridge_slave_0: entered promiscuous mode
[  525.026052][T17124] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.035560][T17124] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.043550][T17124] bridge_slave_1: entered allmulticast mode
[  525.066863][T17124] bridge_slave_1: entered promiscuous mode
[  525.190249][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.209799][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.348521][T17124] team0: Port device team_slave_0 added
[  525.374829][T17124] team0: Port device team_slave_1 added
[  525.498846][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'.
[  525.545227][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.560491][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.589894][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.632948][T17271] bond7: entered allmulticast mode
[  525.639148][T17245] lo speed is unknown, defaulting to 1000
[  525.642138][T17270] netlink: 'syz.4.2922': attribute type 4 has an invalid length.
[  525.656077][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.663711][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.673335][T17270] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2922'.
[  525.690900][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.756757][T17245] gre0 speed is unknown, defaulting to 1000
[  525.776073][T17124] hsr_slave_0: entered promiscuous mode
[  525.793104][T17124] hsr_slave_1: entered promiscuous mode
[  525.800421][T17124] debugfs: 'hsr0' already exists in 'hsr'
[  525.819534][T17124] Cannot create hsr debugfs directory
[  525.863302][T17274] bridge3: entered promiscuous mode
[  525.868722][T17274] bridge3: entered allmulticast mode
[  525.956533][T17274] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  526.411983][T17293] syzkaller0: entered promiscuous mode
[  526.417703][T17293] syzkaller0: entered allmulticast mode
[  526.464289][T16781] Bluetooth: hci0: command tx timeout
[  527.171373][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  527.179947][    C1] lec:lec_tx_timeout: lec0
[  527.185413][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  528.544126][ T5827] Bluetooth: hci0: command tx timeout
[  529.008005][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2927'.
[  529.330683][T17357] syzkaller1: entered promiscuous mode
[  529.336823][T17357] syzkaller1: entered allmulticast mode
[  529.358837][T17346] wg1 speed is unknown, defaulting to 1000
[  529.891240][T17124] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  529.904787][T17124] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  529.926949][T17124] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  529.946592][T17346] lo speed is unknown, defaulting to 1000
[  529.955081][T17124] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  529.967285][T17346] gre0 speed is unknown, defaulting to 1000
[  530.210349][T17124] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.260990][T17124] 8021q: adding VLAN 0 to HW filter on device team0
[  530.299427][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.306681][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.339897][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.347646][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.907472][T17124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.967706][T17124] veth0_vlan: entered promiscuous mode
[  530.987093][T17124] veth1_vlan: entered promiscuous mode
[  531.037944][T17124] veth0_macvtap: entered promiscuous mode
[  531.051088][T17124] veth1_macvtap: entered promiscuous mode
[  531.076721][T17124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.097436][T17124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.135883][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.155708][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.179832][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.191810][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.319663][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.330763][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.413679][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.427982][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.201411][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  532.209620][    C1] lec:lec_tx_timeout: lec0
[  536.416989][T17421] netlink: 'syz.2.2937': attribute type 3 has an invalid length.
[  536.437414][T17421] netlink: 'syz.2.2937': attribute type 3 has an invalid length.
[  536.464236][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'.
[  536.529295][T17421] netlink: 'syz.2.2937': attribute type 6 has an invalid length.
[  536.594950][T17421] xt_hashlimit: size too large, truncated to 1048576
[  536.637335][T17431] siw: device registration error -23
[  536.669934][T17431] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2936'.
[  536.705759][T17428] syzkaller1: entered promiscuous mode
[  536.721666][T17428] syzkaller1: entered allmulticast mode
[  536.766731][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  536.785164][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  536.793983][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  536.811219][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  536.820528][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  536.969213][T17435] wg1 speed is unknown, defaulting to 1000
[  537.490824][T17435] lo speed is unknown, defaulting to 1000
[  537.515155][T17435] gre0 speed is unknown, defaulting to 1000
[  537.603932][T17449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2942'.
[  537.627758][T17449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2942'.
[  537.968717][T17466] netlink: 'syz.2.2946': attribute type 13 has an invalid length.
[  537.998409][T17466] netlink: 'syz.2.2946': attribute type 17 has an invalid length.
[  538.021464][T17466] netlink: 'syz.2.2946': attribute type 27 has an invalid length.
[  538.204019][T17475] netlink: 'syz.2.2948': attribute type 1 has an invalid length.
[  538.212518][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'.
[  538.542047][T17449] Cannot find del_set index 1 as target
[  538.650388][T17490] nbd: must specify a device to reconfigure
[  538.672848][T17435] chnl_net:caif_netlink_parms(): no params data found
[  538.870366][T17435] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.879945][T16781] Bluetooth: hci1: command tx timeout
[  538.901141][T17435] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.910920][T17435] bridge_slave_0: entered allmulticast mode
[  538.935835][T17435] bridge_slave_0: entered promiscuous mode
[  538.962748][T17435] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.979365][T17435] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.990449][T17435] bridge_slave_1: entered allmulticast mode
[  539.002400][T17435] bridge_slave_1: entered promiscuous mode
[  539.094824][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.129471][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.287246][T17515] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2957'.
[  539.391829][T17435] team0: Port device team_slave_0 added
[  539.405652][T17435] team0: Port device team_slave_1 added
[  539.534901][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.579263][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.621614][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.649893][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.681641][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.726225][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.916766][T17435] hsr_slave_0: entered promiscuous mode
[  539.936147][T17435] hsr_slave_1: entered promiscuous mode
[  539.946428][T17435] debugfs: 'hsr0' already exists in 'hsr'
[  539.952398][T17435] Cannot create hsr debugfs directory
[  539.959722][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'.
[  539.981521][T17544] netlink: 'syz.3.2964': attribute type 2 has an invalid length.
[  539.989484][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2964'.
[  540.027066][T17533] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  540.237401][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2965'.
[  540.289490][T17557] vlan2: entered promiscuous mode
[  540.295426][T17557] batadv0: entered promiscuous mode
[  540.408084][T17435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.432283][T17435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.482567][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'.
[  540.614825][T17435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.646083][T17435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.719662][T17570] netlink: 'syz.1.2970': attribute type 1 has an invalid length.
[  540.734193][T17570] netlink: 'syz.1.2970': attribute type 1 has an invalid length.
[  540.796424][T17435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.825464][T17435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.948506][T16781] Bluetooth: hci1: command tx timeout
[  540.958308][T17435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.969698][T17435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.129270][T17589] wg1 speed is unknown, defaulting to 1000
[  541.202090][T17435] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  541.279878][T17435] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  541.299379][T17435] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  541.336398][T17435] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  541.512652][T17435] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.563817][T17435] 8021q: adding VLAN 0 to HW filter on device team0
[  541.600181][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.607893][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.668428][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.676078][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.693889][T17604] __nla_validate_parse: 3 callbacks suppressed
[  541.693911][T17604] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2977'.
[  541.701633][T17589] lo speed is unknown, defaulting to 1000
[  541.737119][T17589] gre0 speed is unknown, defaulting to 1000
[  542.107399][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'.
[  542.290323][T17621] wg1 speed is unknown, defaulting to 1000
[  542.439399][T17435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.746587][T17623] wg1 speed is unknown, defaulting to 1000
[  543.002523][T17435] veth0_vlan: entered promiscuous mode
[  543.026282][T16781] Bluetooth: hci1: command tx timeout
[  543.047471][T17435] veth1_vlan: entered promiscuous mode
[  543.089851][T17435] veth0_macvtap: entered promiscuous mode
[  543.105060][T17435] veth1_macvtap: entered promiscuous mode
[  543.109271][T17647] tipc: Failed to remove unknown binding: 66,0,0/0:3991541773/3991541774
[  543.127146][T17435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.138965][T17647] tipc: Failed to remove unknown binding: 66,0,0/0:3991541773/3991541774
[  543.143589][T17435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.174051][T17649] x_tables: ip_tables: osf match: only valid for protocol 6
[  543.178798][  T106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.192422][  T106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.204657][  T106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.217058][T17623] lo speed is unknown, defaulting to 1000
[  543.224196][  T106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.269227][T17623] gre0 speed is unknown, defaulting to 1000
[  543.307035][T17621] lo speed is unknown, defaulting to 1000
[  543.463651][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.481954][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.623854][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.710507][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.051464][T17621] gre0 speed is unknown, defaulting to 1000
[  544.119904][T17660] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2939'.
[  544.152824][T17660] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  545.109448][T16781] Bluetooth: hci1: command tx timeout
[  545.608791][T17676] ip6gre1: entered promiscuous mode
[  545.616708][T17676] ip6gre1: entered allmulticast mode
[  545.864237][T17683] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2995'.
[  546.177979][T17687] wg1 speed is unknown, defaulting to 1000
[  546.306352][T17704] A link change request failed with some changes committed already. Interface bridge1 may have been left with an inconsistent configuration, please check.
[  546.425243][T17708] vlan2: entered promiscuous mode
[  546.452534][T17708] bridge0: entered promiscuous mode
[  546.969607][T17726] caif0: left allmulticast mode
[  546.982303][T17726] ip6gre1: left promiscuous mode
[  546.987652][T17726] ip6gre1: left allmulticast mode
[  546.994949][T17726] ip6gre2: left promiscuous mode
[  547.000338][T17726] ip6tnl3: left allmulticast mode
[  547.007896][T17726] gtp0: left promiscuous mode
[  547.013153][T17726] gtp0: left allmulticast mode
[  547.019885][T17726] ip6gre3: left promiscuous mode
[  547.026733][T17726] ip6gre3: left allmulticast mode
[  547.048051][T17687] lo speed is unknown, defaulting to 1000
[  547.056678][T17687] gre0 speed is unknown, defaulting to 1000
[  547.213941][T11885] lec:lec_start_xmit: lec0:No lecd attached
[  547.221936][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'.
[  547.233977][T17738] openvswitch: netlink: Flow actions attr not present in new flow.
[  547.415828][T17747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'.
[  547.428062][T17747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'.
[  547.559174][T17750] validate_nla: 1 callbacks suppressed
[  547.559198][T17750] netlink: 'syz.3.3008': attribute type 7 has an invalid length.
[  547.574048][T17750] netlink: 'syz.3.3008': attribute type 5 has an invalid length.
[  547.584967][T17750] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3008'.
[  549.009543][T17694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  549.661547][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  552.221561][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  552.230147][    C1] lec:lec_tx_timeout: lec0
[  554.399421][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'.
[  554.411398][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'.
[  554.416328][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'.
[  554.434479][T17783] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3013'.
[  554.509410][T17789] wg1 speed is unknown, defaulting to 1000
[  554.639363][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[  554.993291][T17788] wg1 speed is unknown, defaulting to 1000
[  555.002281][T17789] lo speed is unknown, defaulting to 1000
[  555.015241][T17789] gre0 speed is unknown, defaulting to 1000
[  555.126370][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3016'.
[  555.701157][T17788] lo speed is unknown, defaulting to 1000
[  555.729154][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'.
[  555.784395][T17788] gre0 speed is unknown, defaulting to 1000
[  555.798243][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'.
[  555.809797][T17815] wg1 speed is unknown, defaulting to 1000
[  555.933737][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'.
[  556.130053][T17830] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3024'.
[  556.288223][T17833] syzkaller0: entered promiscuous mode
[  556.295184][T17833] syzkaller0: entered allmulticast mode
[  556.327009][T17833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.345308][T17833] tipc: Resetting bearer <eth:syzkaller0>
[  556.395906][T17832] tipc: Resetting bearer <eth:syzkaller0>
[  556.420569][T17832] tipc: Disabling bearer <eth:syzkaller0>
[  556.472498][T17815] lo speed is unknown, defaulting to 1000
[  556.480231][T17815] gre0 speed is unknown, defaulting to 1000
[  556.612833][T17836] FAULT_INJECTION: forcing a failure.
[  556.612833][T17836] name failslab, interval 1, probability 0, space 0, times 0
[  556.627447][T17836] CPU: 0 UID: 0 PID: 17836 Comm: syz.0.3027 Not tainted syzkaller #0 PREEMPT(full) 
[  556.627484][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  556.627497][T17836] Call Trace:
[  556.627505][T17836]  <TASK>
[  556.627514][T17836]  dump_stack_lvl+0xe8/0x150
[  556.627549][T17836]  should_fail_ex+0x412/0x560
[  556.627582][T17836]  should_failslab+0xa8/0x100
[  556.627610][T17836]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  556.627633][T17836]  ? __alloc_skb+0x186/0x7d0
[  556.627663][T17836]  ? __alloc_skb+0x1d0/0x7d0
[  556.627688][T17836]  ? __local_bh_enable_ip+0xd0/0x130
[  556.627718][T17836]  __alloc_skb+0x1d0/0x7d0
[  556.627742][T17836]  ? aa_label_sk_perm+0x532/0x6e0
[  556.627766][T17836]  alloc_skb_with_frags+0xca/0x890
[  556.627792][T17836]  ? __lock_acquire+0x6b5/0x2cf0
[  556.627820][T17836]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  556.627853][T17836]  sock_alloc_send_pskb+0x878/0x990
[  556.627874][T17836]  ? __lock_acquire+0x6b5/0x2cf0
[  556.627925][T17836]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  556.627955][T17836]  ? aa_sk_perm+0x6d5/0x900
[  556.627996][T17836]  hci_sock_sendmsg+0x208/0xf40
[  556.628022][T17836]  ? __pfx_aa_sk_perm+0x10/0x10
[  556.628050][T17836]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  556.628076][T17836]  ? aa_sock_msg_perm+0xf1/0x1b0
[  556.628104][T17836]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  556.628129][T17836]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  556.628151][T17836]  sock_write_iter+0x49b/0x4f0
[  556.628179][T17836]  ? __pfx_sock_write_iter+0x10/0x10
[  556.628215][T17836]  ? bpf_lsm_file_permission+0x9/0x20
[  556.628239][T17836]  ? security_file_permission+0x75/0x260
[  556.628267][T17836]  vfs_write+0x61d/0xb90
[  556.628296][T17836]  ? __pfx_vfs_write+0x10/0x10
[  556.628341][T17836]  ? __fget_files+0x2a/0x420
[  556.628377][T17836]  ksys_write+0x150/0x270
[  556.628402][T17836]  ? __pfx_ksys_write+0x10/0x10
[  556.628435][T17836]  do_syscall_64+0x14d/0xf80
[  556.628462][T17836]  ? trace_irq_disable+0x3b/0x150
[  556.628490][T17836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.628511][T17836]  ? clear_bhb_loop+0x40/0x90
[  556.628536][T17836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.628556][T17836] RIP: 0033:0x7f3b8059c799
[  556.628577][T17836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.628594][T17836] RSP: 002b:00007f3b81469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  556.628616][T17836] RAX: ffffffffffffffda RBX: 00007f3b80815fa0 RCX: 00007f3b8059c799
[  556.628631][T17836] RDX: 0000000000000013 RSI: 0000200000000000 RDI: 0000000000000005
[  556.628644][T17836] RBP: 00007f3b81469090 R08: 0000000000000000 R09: 0000000000000000
[  556.628656][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.628668][T17836] R13: 00007f3b80816038 R14: 00007f3b80815fa0 R15: 00007ffde73ee1b8
[  556.628703][T17836]  </TASK>
[  557.513590][T17851] sctp: [Deprecated]: syz.3.3032 (pid 17851) Use of int in max_burst socket option.
[  557.513590][T17851] Use struct sctp_assoc_value instead
[  558.361990][T17869] netlink: 'syz.2.3036': attribute type 13 has an invalid length.
[  558.369969][T17869] netlink: 'syz.2.3036': attribute type 11 has an invalid length.
[  559.076338][T17888] : entered promiscuous mode
[  559.160012][T17894] netlink: 'syz.1.3044': attribute type 20 has an invalid length.
[  559.202460][T17894] netlink: 'syz.1.3044': attribute type 21 has an invalid length.
[  563.104016][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  563.113975][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  567.366566][T17925] netlink: 'syz.0.3046': attribute type 3 has an invalid length.
[  567.374681][T17925] netlink: 'syz.0.3046': attribute type 3 has an invalid length.
[  567.418991][T17925] __nla_validate_parse: 5 callbacks suppressed
[  567.419013][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3046'.
[  567.450895][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'.
[  567.452776][T17931] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3047'.
[  567.470039][T17931] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  567.481113][T17933] bond1: invalid ARP target 0.0.0.0 specified for addition
[  567.490031][T17933] bond1: option arp_ip_target: invalid value (0)
[  567.502886][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'.
[  567.519611][T17933] bond1 (unregistering): Released all slaves
[  567.538786][T17936] netlink: 'syz.0.3046': attribute type 6 has an invalid length.
[  567.605700][T17936] xt_hashlimit: size too large, truncated to 1048576
[  567.694291][T17925] syzkaller1: entered promiscuous mode
[  567.753469][T17925] syzkaller1: entered allmulticast mode
[  567.857195][T17955] dvmrp12: entered allmulticast mode
[  567.883973][T17955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.926596][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'.
[  567.942120][T17952] dvmrp12: left allmulticast mode
[  568.121327][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  568.130200][    C1] lec:lec_tx_timeout: lec0
[  568.155833][T17967] syzkaller0: entered promiscuous mode
[  568.172898][T17967] syzkaller0: entered allmulticast mode
[  568.356234][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3061'.
[  570.087396][T17979] bond0: entered promiscuous mode
[  570.092870][T17979] bond_slave_0: entered promiscuous mode
[  570.098744][T17979] bond_slave_1: entered promiscuous mode
[  570.107458][T17979] gretap0: entered promiscuous mode
[  570.114134][T17979] hsr1: entered promiscuous mode
[  570.137413][T17981] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  570.417636][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'.
[  570.489841][T18026] syz_tun: entered allmulticast mode
[  570.498508][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3068'.
[  570.509501][T18018] wg1 speed is unknown, defaulting to 1000
[  570.541492][T18010] tap0: tun_chr_ioctl cmd 35111
[  570.552172][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3073'.
[  570.564963][T18026] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  570.711085][T18026] 8021q: adding VLAN 0 to HW filter on device bond1
[  570.759096][T18032] vlan3: entered promiscuous mode
[  570.767767][T18039] netlink: 'syz.0.3076': attribute type 3 has an invalid length.
[  570.776636][T18032] bond1: entered promiscuous mode
[  570.789049][T18039] netlink: 'syz.0.3076': attribute type 3 has an invalid length.
[  570.818159][T18032] vlan3: entered allmulticast mode
[  570.834274][T18032] bond1: entered allmulticast mode
[  570.850389][T18018] lo speed is unknown, defaulting to 1000
[  570.871944][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3076'.
[  570.883943][T18018] gre0 speed is unknown, defaulting to 1000
[  570.893450][T18040] netlink: 'syz.0.3076': attribute type 6 has an invalid length.
[  570.932997][T18023] syz_tun: left allmulticast mode
[  571.073387][T18049] SET target dimension over the limit!
[  571.264708][T18055] wg1 speed is unknown, defaulting to 1000
[  571.465161][T18049] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.827380][T18055] lo speed is unknown, defaulting to 1000
[  571.836786][T18071] netlink: 'syz.3.3085': attribute type 1 has an invalid length.
[  571.845860][T18071] netlink: 'syz.3.3085': attribute type 10 has an invalid length.
[  571.854647][T18071] hsr0: entered promiscuous mode
[  571.860616][T18071] bridge0: port 3(hsr0) entered blocking state
[  571.867822][T18071] bridge0: port 3(hsr0) entered disabled state
[  571.877032][T18071] hsr0: entered allmulticast mode
[  571.882902][T18071] hsr_slave_0: entered allmulticast mode
[  571.893107][T18071] hsr_slave_1: entered allmulticast mode
[  571.914393][T18071] bridge0: port 3(hsr0) entered blocking state
[  571.920953][T18071] bridge0: port 3(hsr0) entered forwarding state
[  571.929816][T18055] gre0 speed is unknown, defaulting to 1000
[  571.938179][T18083] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  572.416079][T18092] team0: No ports can be present during mode change
[  572.568259][T18094] __nla_validate_parse: 8 callbacks suppressed
[  572.568281][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'.
[  573.420764][T18108] wg1 speed is unknown, defaulting to 1000
[  573.670447][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'.
[  573.692915][T18120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3101'.
[  573.755484][T18114] bridge_slave_1: left allmulticast mode
[  573.780018][T18114] bridge_slave_1: left promiscuous mode
[  573.811650][T18114] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.880057][T18114] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  574.041157][T18127] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3103'.
[  574.099167][T18126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3103'.
[  574.299274][T18133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3105'.
[  574.401787][T18108] lo speed is unknown, defaulting to 1000
[  574.441845][T18108] gre0 speed is unknown, defaulting to 1000
[  574.657629][T18152] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3114'.
[  574.676119][T18153] netlink: 'syz.3.3113': attribute type 9 has an invalid length.
[  574.693470][T18154] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.3111'.
[  574.706688][T18154] xt_bpf: check failed: parse error
[  574.722598][T18153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'.
[  574.735862][T18153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'.
[  574.848686][T18152] syzkaller0: entered promiscuous mode
[  574.871241][T18164] ieee802154 phy0 wpan0: encryption failed: -22
[  574.879812][T18152] syzkaller0: entered allmulticast mode
[  576.905980][T18201] tipc: Started in network mode
[  576.911495][T18201] tipc: Node identity 4, cluster identity 4711
[  576.918053][T18201] tipc: Node number set to 4
[  577.451990][T18217] gretap4: entered promiscuous mode
[  577.605236][T18223] wg1 speed is unknown, defaulting to 1000
[  577.990080][T18241] netlink: 'syz.0.3128': attribute type 3 has an invalid length.
[  577.999437][T18241] __nla_validate_parse: 2 callbacks suppressed
[  577.999457][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'.
[  578.413511][T18219] wg1 speed is unknown, defaulting to 1000
[  578.437736][T18223] lo speed is unknown, defaulting to 1000
[  578.459380][T18223] gre0 speed is unknown, defaulting to 1000
[  578.874536][T18219] lo speed is unknown, defaulting to 1000
[  578.968319][T18219] gre0 speed is unknown, defaulting to 1000
[  583.986844][ T6588] bond5 (unregistering): (slave bridge5): Releasing backup interface
[  583.995597][ T6588] bridge5 (unregistering): left promiscuous mode
[  584.045764][ T6588] bond6 (unregistering): (slave bridge6): Releasing backup interface
[  584.054070][ T6588] bridge6 (unregistering): left promiscuous mode
[  584.117999][ T6588] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  584.128502][ T6588] bond0 (unregistering): Released all slaves
[  584.139147][ T6588] bond1 (unregistering): Released all slaves
[  584.154202][ T6588] bond2 (unregistering): Released all slaves
[  584.169797][ T6588] bond3 (unregistering): (slave wireguard0): Releasing backup interface
[  584.178338][ T6588] wireguard0: left promiscuous mode
[  584.190266][ T6588] bond3 (unregistering): (slave wireguard1): Releasing backup interface
[  584.203200][ T6588] bond3 (unregistering): Released all slaves
[  584.219381][ T6588] bond4 (unregistering): Released all slaves
[  584.242553][ T6588] bond5 (unregistering): Released all slaves
[  584.255839][ T6588] bond6 (unregistering): Released all slaves
[  584.277189][ T6588] bond7 (unregistering): Released all slaves
[  584.290893][ T6588] bond8 (unregistering): Released all slaves
[  584.309109][ T6588] bond9 (unregistering): Released all slaves
[  584.458484][ T6588] : left promiscuous mode
[  584.514388][ T6588] tipc: Disabling bearer <udp:syz2>
[  584.521174][ T6588] tipc: Disabling bearer <eth:syzkaller0>
[  584.537993][ T6588] tipc: Left network mode
[  585.243649][T18285] syzkaller0: entered promiscuous mode
[  585.274258][T18285] syzkaller0: entered allmulticast mode
[  585.428254][T18277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.448216][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'.
[  585.458033][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'.
[  585.547956][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  585.561042][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  585.569854][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  585.581551][  T106] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  585.625093][  T106] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  585.634591][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  585.660573][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  585.664674][  T106] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  585.748183][  T106] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.874913][T18304] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3145'.
[  585.884903][T18304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3145'.
[  585.954572][T18276] tipc: Resetting bearer <eth:syzkaller0>
[  585.992374][T18276] tipc: Disabling bearer <eth:syzkaller0>
[  586.007688][T18292] wg1 speed is unknown, defaulting to 1000
[  586.100751][T18314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3146'.
[  586.283764][T18317] netlink: 'syz.2.3147': attribute type 13 has an invalid length.
[  586.298696][ T6588] pim6reg99999999 (unregistering): left allmulticast mode
[  586.887650][T18322] tipc: Resetting bearer <eth:syzkaller0>
[  586.941591][T18292] lo speed is unknown, defaulting to 1000
[  586.949576][T18292] gre0 speed is unknown, defaulting to 1000
[  586.966207][T18319] wg1 speed is unknown, defaulting to 1000
[  587.592514][ T6588] IPVS: stop unused estimator thread 0...
[  587.655323][T18319] lo speed is unknown, defaulting to 1000
[  587.679762][T18319] gre0 speed is unknown, defaulting to 1000
[  587.741786][T16781] Bluetooth: hci3: command tx timeout
[  587.868834][T18292] chnl_net:caif_netlink_parms(): no params data found
[  588.043296][T18292] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.061054][T18292] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.075643][T18292] bridge_slave_0: entered allmulticast mode
[  588.093892][T18292] bridge_slave_0: entered promiscuous mode
[  588.121426][T18292] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.131684][T18292] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.149583][T18292] bridge_slave_1: entered allmulticast mode
[  588.163098][T18292] bridge_slave_1: entered promiscuous mode
[  588.264652][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  588.293119][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  588.346242][T18292] team0: Port device team_slave_0 added
[  588.356478][T18292] team0: Port device team_slave_1 added
[  588.509389][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.519495][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.547586][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  588.581212][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  588.589193][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.617670][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.737838][T18292] hsr_slave_0: entered promiscuous mode
[  588.745268][T18292] hsr_slave_1: entered promiscuous mode
[  588.752406][T18292] debugfs: 'hsr0' already exists in 'hsr'
[  588.758449][T18292] Cannot create hsr debugfs directory
[  588.959031][T18308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.963926][T18359] wg1 speed is unknown, defaulting to 1000
[  589.011600][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'.
[  589.062756][T18361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3153'.
[  589.237325][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'.
[  589.484010][T18292] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  589.497793][T18359] lo speed is unknown, defaulting to 1000
[  589.498213][T18292] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  589.519700][T18359] gre0 speed is unknown, defaulting to 1000
[  589.520212][T18292] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  589.547843][T18292] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  589.739575][T18292] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.785537][T18292] 8021q: adding VLAN 0 to HW filter on device team0
[  589.799508][T18387] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3159'.
[  589.816932][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.824257][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.833006][T16781] Bluetooth: hci3: command tx timeout
[  589.850784][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.858155][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.947565][T18385] wg1 speed is unknown, defaulting to 1000
[  590.096942][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3160'.
[  590.245411][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.340925][T18292] veth0_vlan: entered promiscuous mode
[  590.364847][T18292] veth1_vlan: entered promiscuous mode
[  590.372105][T18385] lo speed is unknown, defaulting to 1000
[  590.391195][T18385] gre0 speed is unknown, defaulting to 1000
[  590.438773][T18292] veth0_macvtap: entered promiscuous mode
[  590.477533][T18292] veth1_macvtap: entered promiscuous mode
[  590.515879][T18292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.530818][T18292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.618501][   T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.646951][   T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.677949][   T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.687290][   T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.927801][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.962610][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.029866][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.050349][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.566725][T18414] wg1 speed is unknown, defaulting to 1000
[  591.902032][T16781] Bluetooth: hci3: command tx timeout
[  591.927568][T18429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  592.036406][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3169'.
[  592.217865][T18414] lo speed is unknown, defaulting to 1000
[  592.226647][T18414] gre0 speed is unknown, defaulting to 1000
[  592.668516][T18442] syzkaller0: entered promiscuous mode
[  592.675962][T18442] syzkaller0: entered allmulticast mode
[  593.981712][T16781] Bluetooth: hci3: command tx timeout
[  594.763998][T18422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  594.805660][T18460] netlink: 'syz.0.3180': attribute type 1 has an invalid length.
[  594.821508][T18460] netlink: 174 bytes leftover after parsing attributes in process `syz.0.3180'.
[  594.895057][T18460] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  595.095632][T18488] syzkaller0: entered promiscuous mode
[  595.122672][T18488] syzkaller0: entered allmulticast mode
[  595.303050][T18499] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3187'.
[  595.348700][T18499] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  595.540954][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  595.553679][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  595.565384][T18504] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  595.573489][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  595.596161][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  595.613541][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  595.795281][T18506] wg1 speed is unknown, defaulting to 1000
[  596.097803][T18506] lo speed is unknown, defaulting to 1000
[  596.106468][T18506] gre0 speed is unknown, defaulting to 1000
[  596.280920][ T6588] dummy0: left allmulticast mode
[  596.287594][ T6588] dummy0: left promiscuous mode
[  596.293275][ T6588] bridge0: port 1(dummy0) entered disabled state
[  596.323983][ T6588] dvmrp0: left allmulticast mode
[  596.449094][ T6588] bond2 (unregistering): (slave gretap1): Releasing active interface
[  596.481699][ T6599] smc: removing ib device syz1
[  596.527723][ T6588] bond4 (unregistering): (slave geneve2): Releasing active interface
[  596.819420][ T6588] bond0 (unregistering): Released all slaves
[  596.840286][ T6588] bond1 (unregistering): Released all slaves
[  596.894082][ T6588] bond2 (unregistering): Released all slaves
[  596.954930][ T6588] bond3 (unregistering): Released all slaves
[  597.012541][ T6588] bond4 (unregistering): Released all slaves
[  597.047842][ T6588] bond5 (unregistering): Released all slaves
[  597.094250][ T6588] bond6 (unregistering): (slave veth19): Releasing active interface
[  597.105278][ T6588] bond6 (unregistering): Released all slaves
[  597.144205][ T6588] bond7 (unregistering): Released all slaves
[  597.170873][ T6588] bond8 (unregistering): Released all slaves
[  597.202724][ T6588] bond9 (unregistering): Released all slaves
[  597.662304][ T5827] Bluetooth: hci4: command tx timeout
[  597.839583][T18506] chnl_net:caif_netlink_parms(): no params data found
[  598.220738][T18506] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.266176][T18506] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.311617][T18506] bridge_slave_0: entered allmulticast mode
[  598.325699][T18506] bridge_slave_0: entered promiscuous mode
[  598.344025][T18506] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.351740][T18506] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.359054][T18506] bridge_slave_1: entered allmulticast mode
[  598.368782][T18506] bridge_slave_1: entered promiscuous mode
[  598.503112][T18506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.516847][T18506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.568628][T18506] team0: Port device team_slave_0 added
[  598.578873][T18506] team0: Port device team_slave_1 added
[  598.617714][T18506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.625438][T18506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.654967][T18506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.668854][T18506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.675968][T18506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.703558][T18506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.754110][T18506] hsr_slave_0: entered promiscuous mode
[  598.761110][T18506] hsr_slave_1: entered promiscuous mode
[  598.768488][T18506] debugfs: 'hsr0' already exists in 'hsr'
[  598.774833][T18506] Cannot create hsr debugfs directory
[  598.797676][ T6588] : left promiscuous mode
[  598.866658][ T6588] tipc: Left network mode
[  599.537478][ T6588] hsr_slave_0: left promiscuous mode
[  599.741776][ T5827] Bluetooth: hci4: command tx timeout
[  599.846269][ T6599] smc: removing ib device syz0
[  600.075579][T18506] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  600.116245][T18506] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  600.205901][T18506] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  600.236026][T18506] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  600.587538][T18506] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.608899][T18506] 8021q: adding VLAN 0 to HW filter on device team0
[  600.643446][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.650854][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.669105][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.676355][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.088016][T18506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.195861][T18506] veth0_vlan: entered promiscuous mode
[  601.234921][T18506] veth1_vlan: entered promiscuous mode
[  601.277009][T18506] veth0_macvtap: entered promiscuous mode
[  601.292080][T18506] veth1_macvtap: entered promiscuous mode
[  601.358267][T18506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.377114][T18506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.397408][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.454114][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.487293][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.538971][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.540495][T18569] netlink: 'syz.1.3193': attribute type 28 has an invalid length.
[  601.641889][T18569] netlink: 'syz.1.3193': attribute type 3 has an invalid length.
[  601.675530][T18569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3193'.
[  601.822920][ T5827] Bluetooth: hci4: command tx timeout
[  602.392558][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.433939][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.707122][T18614] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3202'.
[  602.730938][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.783918][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.881563][T18614] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  603.284450][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'.
[  603.901772][ T5827] Bluetooth: hci4: command tx timeout
[  604.066158][T18681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3211'.
[  604.098185][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'.
[  604.212705][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'.
[  604.796254][T18678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  604.828302][T18714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  605.428947][T18746] netlink: 'syz.2.3226': attribute type 1 has an invalid length.
[  605.518946][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[  605.607848][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3226'.
[  605.635044][T18754] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3224'.
[  605.668735][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3226'.
[  605.682061][T18754] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  606.582740][T18792] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  606.600044][T18787] bridge_slave_0: left allmulticast mode
[  606.671590][T18787] bridge_slave_0: left promiscuous mode
[  606.721580][T18796] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  606.761657][T18787] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.766106][T18792] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  607.522875][T18813] netlink: 'syz.4.3241': attribute type 5 has an invalid length.
[  607.837504][T18821] __nla_validate_parse: 2 callbacks suppressed
[  607.837528][T18821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3243'.
[  608.602291][T18836] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3245'.
[  608.648436][T18837] pim6reg1: entered promiscuous mode
[  608.654421][T18837] pim6reg1: entered allmulticast mode
[  608.664098][T18836] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  608.776142][T18847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'.
[  608.790987][T18847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'.
[  608.922027][T18852] x_tables: duplicate underflow at hook 2
[  609.359909][T18863] syzkaller0: entered promiscuous mode
[  609.371838][T18863] syzkaller0: entered allmulticast mode
[  610.409414][T18899] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3263'.
[  610.484848][T18899] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  610.500327][T18903] ieee802154 phy0 wpan0: encryption failed: -22
[  610.560588][T18903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3267'.
[  610.954038][T18908] syzkaller0: entered promiscuous mode
[  610.980129][T18908] syzkaller0: entered allmulticast mode
[  611.080249][T18910] netlink: zone id is out of range
[  611.086007][T18910] netlink: zone id is out of range
[  611.091595][T18910] netlink: zone id is out of range
[  611.097173][T18910] netlink: zone id is out of range
[  611.107692][T18910] netlink: zone id is out of range
[  611.113346][T18910] netlink: zone id is out of range
[  611.119111][T18910] netlink: zone id is out of range
[  611.124722][T18910] netlink: zone id is out of range
[  611.194611][T18912] sctp: [Deprecated]: syz.4.3271 (pid 18912) Use of int in max_burst socket option deprecated.
[  611.194611][T18912] Use struct sctp_assoc_value instead
[  611.501684][T18927] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3275'.
[  611.549563][T11885] lec:lec_start_xmit: lec0:No lecd attached
[  611.576943][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'.
[  611.608284][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'.
[  611.756435][T18932] syzkaller0: entered promiscuous mode
[  611.764767][T18932] syzkaller0: entered allmulticast mode
[  611.818318][T18939] netlink: 'syz.0.3279': attribute type 8 has an invalid length.
[  612.168911][T18954] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3280'.
[  613.651995][T18942] kthread_run failed with err -4
[  613.902965][T18966] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  614.053643][T18975] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  614.069114][T18975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3285'.
[  614.333585][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'.
[  614.545995][T18986] syzkaller0: entered promiscuous mode
[  614.552705][T18986] syzkaller0: entered allmulticast mode
[  614.582233][T18989] veth1_to_hsr: entered promiscuous mode
[  614.588318][T18989] macvtap1: entered promiscuous mode
[  614.594605][T18989] macvtap1: entered allmulticast mode
[  614.600401][T18989] veth1_to_hsr: entered allmulticast mode
[  617.021753][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms
[  617.030115][    C0] lec:lec_tx_timeout: lec0
[  619.421609][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  623.214164][T19031] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3293'.
[  623.223220][T19033] netlink: 'syz.1.3292': attribute type 3 has an invalid length.
[  623.232969][T19032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3295'.
[  623.242980][T19033] netlink: 'syz.1.3292': attribute type 3 has an invalid length.
[  623.265560][T19027] netlink: 'syz.3.3294': attribute type 6 has an invalid length.
[  623.272104][T19033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3292'.
[  623.309714][T19037] xt_hashlimit: size too large, truncated to 1048576
[  623.426722][T19033] syzkaller1: entered promiscuous mode
[  623.449164][T19033] syzkaller1: entered allmulticast mode
[  623.701011][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'.
[  623.930880][T19060] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3298'.
[  623.940497][T19060] net_ratelimit: 47 callbacks suppressed
[  623.940518][T19060] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  624.112662][T19066] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  624.399669][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'.
[  624.438211][T19075] veth1_macvtap: left promiscuous mode
[  624.547813][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  624.561154][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  624.707130][T19080] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  624.959705][T19092] syzkaller1: entered promiscuous mode
[  624.992835][T19092] syzkaller1: entered allmulticast mode
[  625.061084][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3312'.
[  625.133967][T19105] netlink: 'syz.4.3314': attribute type 3 has an invalid length.
[  625.154101][T19105] netlink: 'syz.4.3314': attribute type 3 has an invalid length.
[  625.182709][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3314'.
[  625.271822][T19116] syzkaller1: entered promiscuous mode
[  625.277792][T19116] syzkaller1: entered allmulticast mode
[  625.389575][T19121] netlink: 'syz.1.3321': attribute type 39 has an invalid length.
[  625.410787][T19123] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.3320'.
[  625.422062][T19123] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  625.543596][T19119] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3318'.
[  625.574258][T19119] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  627.057229][T19182] openvswitch: netlink: Multiple metadata blocks provided
[  627.296054][T19188] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  628.194045][T19215] netlink: 'syz.0.3346': attribute type 21 has an invalid length.
[  628.242622][T19215] __nla_validate_parse: 5 callbacks suppressed
[  628.242644][T19215] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3346'.
[  628.276994][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'.
[  628.443372][T19227] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3350'.
[  628.458432][T19221] syzkaller0: entered promiscuous mode
[  628.478291][T19221] syzkaller0: entered allmulticast mode
[  628.498111][T19226] netlink: 'syz.2.3350': attribute type 6 has an invalid length.
[  628.512552][T19226] netlink: 'syz.2.3350': attribute type 7 has an invalid length.
[  628.520703][T19226] netlink: 'syz.2.3350': attribute type 8 has an invalid length.
[  628.777266][T19243] sctp: [Deprecated]: syz.0.3352 (pid 19243) Use of int in maxseg socket option.
[  628.777266][T19243] Use struct sctp_assoc_value instead
[  628.818855][T19243] netlink: 'syz.0.3352': attribute type 10 has an invalid length.
[  628.933310][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3355'.
[  629.340408][T19269] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3358'.
[  629.355976][T19269] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  630.071471][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  630.079950][    C1] lec:lec_tx_timeout: lec0
[  630.622200][T19243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.632815][T19243] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  630.643043][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  630.960345][T19282] xt_hashlimit: size too large, truncated to 1048576
[  630.967733][T19282] xt_hashlimit: overflow, try lower: 0/0
[  631.019727][T19285] netlink: 'syz.4.3361': attribute type 1 has an invalid length.
[  631.039688][T19285] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3361'.
[  631.088329][T19288] delete_channel: no stack
[  631.110244][   T12] bridge1 (unregistering): left promiscuous mode
[  631.120650][   T12] team0: Port device bridge1 removed
[  631.366629][   T12] bond0 (unregistering): Released all slaves
[  631.377079][   T12] bond1 (unregistering): Released all slaves
[  631.391632][   T12] bond2 (unregistering): Released all slaves
[  631.407511][   T12] bond3 (unregistering): Released all slaves
[  631.421126][   T12] bond4 (unregistering): Released all slaves
[  631.439767][   T12] bond5 (unregistering): Released all slaves
[  631.492206][T19282] syz_tun: entered allmulticast mode
[  631.615582][   T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  631.636157][   T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  631.653784][   T12] : left promiscuous mode
[  631.704243][ T6599] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  631.811433][ T6599] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.835624][T19274] syz_tun: left allmulticast mode
[  631.880637][   T12] tipc: Left network mode
[  632.360542][T19319] syzkaller0: entered promiscuous mode
[  632.434662][T19319] syzkaller0: entered allmulticast mode
[  632.632727][T19343] netlink: 'syz.2.3373': attribute type 3 has an invalid length.
[  632.640874][T19343] netlink: 'syz.2.3373': attribute type 3 has an invalid length.
[  632.690455][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3373'.
[  632.708887][T19345] xt_hashlimit: size too large, truncated to 1048576
[  632.741896][T19344] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3371'.
[  632.815980][T19344] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  634.929864][   T12] hsr_slave_0: left promiscuous mode
[  634.936636][   T12] hsr_slave_1: left promiscuous mode
[  635.531013][   T12] IPVS: stop unused estimator thread 0...
[  639.667062][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3377'.
[  639.691552][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3377'.
[  639.701081][T19384] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3377'.
[  639.735892][T19384] netlink: 'syz.2.3377': attribute type 3 has an invalid length.
[  639.755552][T19384] netlink: 'syz.2.3377': attribute type 2 has an invalid length.
[  639.771406][T19384] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3377'.
[  639.795046][T19384] netlink: 'syz.2.3377': attribute type 2 has an invalid length.
[  639.868119][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'.
[  639.953422][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'.
[  640.027012][T19410] syzkaller0: entered promiscuous mode
[  640.065601][T19410] syzkaller0: entered allmulticast mode
[  640.308424][T19420] netlink: 'syz.1.3387': attribute type 3 has an invalid length.
[  640.327127][T19420] netlink: 'syz.1.3387': attribute type 3 has an invalid length.
[  640.378452][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3387'.
[  640.404761][T19414] syzkaller0: entered promiscuous mode
[  640.413725][T19423] xt_hashlimit: size too large, truncated to 1048576
[  640.431607][T19414] syzkaller0: entered allmulticast mode
[  640.525406][T19421] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3386'.
[  640.593966][T19421] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  640.985153][T19442] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3391'.
[  643.028458][T19472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3400'.
[  643.394395][T19489] syzkaller0: entered promiscuous mode
[  643.400750][T19489] syzkaller0: entered allmulticast mode
[  644.103928][T19513] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  644.781723][T16781] Bluetooth: hci4: command 0x0405 tx timeout
[  645.571537][T19521] __nla_validate_parse: 2 callbacks suppressed
[  645.571558][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'.
[  645.774731][T19524] syzkaller0: entered promiscuous mode
[  645.781491][T19524] syzkaller0: entered allmulticast mode
[  645.977055][T19534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3417'.
[  646.032719][T19534] netlink: 'syz.2.3417': attribute type 21 has an invalid length.
[  646.040727][T19534] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3417'.
[  646.066985][T19534] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3417'.
[  646.103025][T19534] IPVS: Error connecting to the multicast addr
[  646.107864][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3419'.
[  646.130916][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  646.187889][T19534] geneve3: entered promiscuous mode
[  646.284857][T19546] netlink: 'syz.1.3420': attribute type 3 has an invalid length.
[  646.368384][T19549] syzkaller0: entered promiscuous mode
[  646.374491][T19549] syzkaller0: entered allmulticast mode
[  647.102849][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  647.322078][T19588] netlink: 'syz.4.3430': attribute type 1 has an invalid length.
[  647.330192][T19588] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3430'.
[  647.340996][T19588] netlink: 'syz.4.3430': attribute type 1 has an invalid length.
[  647.350724][T19588] netlink: 'syz.4.3430': attribute type 8 has an invalid length.
[  647.359387][T19588] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3430'.
[  648.569313][T19587] geneve3: entered promiscuous mode
[  648.609300][T19597] dvmrp0: entered allmulticast mode
[  648.777325][T19606] sit0: entered promiscuous mode
[  648.794345][T19606] netlink: 'syz.4.3434': attribute type 1 has an invalid length.
[  648.808651][T19606] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3434'.
[  648.843804][T19617] netlink: 'syz.4.3434': attribute type 11 has an invalid length.
[  648.848898][T19616] sit0: entered allmulticast mode
[  648.882202][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3437'.
[  648.891521][T19617] netlink: 'syz.4.3434': attribute type 4 has an invalid length.
[  648.909780][T19619] sit0: left allmulticast mode
[  648.928095][T19617] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.3434'.
[  648.969173][T19616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  648.976684][T19616] IPv6: NLM_F_CREATE should be set when creating new route
[  649.252256][T19616] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.260223][T19616] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.488230][T19616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.532653][T19616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.849823][T19616] vlan2: left promiscuous mode
[  649.875749][T19616] bridge0: left promiscuous mode
[  649.886093][T19616] hsr1: left promiscuous mode
[  649.896919][T19616] vlan3: left promiscuous mode
[  649.902596][T19616] bond1: left promiscuous mode
[  649.907848][T19616] vlan3: left allmulticast mode
[  649.921619][T19616] bond1: left allmulticast mode
[  650.060746][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.092255][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  650.137586][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.170800][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  650.203349][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.216109][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  650.258308][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.274210][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.289507][T19709] __nla_validate_parse: 5 callbacks suppressed
[  656.289528][T19709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3450'.
[  656.332742][T19703] syzkaller0: entered promiscuous mode
[  656.340683][T19703] syzkaller0: entered allmulticast mode
[  656.467045][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'.
[  656.624860][T19726] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003
[  656.670911][T19731] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3453'.
[  656.738427][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'.
[  656.761353][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'.
[  656.873292][T19739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3457'.
[  657.030983][T19738] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  657.104832][T19739] bond0: entered promiscuous mode
[  657.121807][T19739] bond_slave_0: entered promiscuous mode
[  657.151756][T19739] bond_slave_1: entered promiscuous mode
[  657.226358][T19739] bond0: left promiscuous mode
[  657.236534][T19739] bond_slave_0: left promiscuous mode
[  657.242498][T19739] bond_slave_1: left promiscuous mode
[  657.357690][T19752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3462'.
[  657.498930][T19756] geneve2: entered promiscuous mode
[  657.551870][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.593057][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.603698][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.620517][T19758] syzkaller0: entered promiscuous mode
[  657.627434][T19758] syzkaller0: entered allmulticast mode
[  657.719948][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.782604][T19761] netlink: 'syz.3.3466': attribute type 1 has an invalid length.
[  657.795168][T19761] netlink: 'syz.3.3466': attribute type 2 has an invalid length.
[  657.819149][T19774] sctp: [Deprecated]: syz.1.3467 (pid 19774) Use of int in maxseg socket option.
[  657.819149][T19774] Use struct sctp_assoc_value instead
[  657.946853][T19776] syzkaller0: entered promiscuous mode
[  657.956940][T19776] syzkaller0: entered allmulticast mode
[  658.122608][T19791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3474'.
[  658.136039][T19791] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  658.172047][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'.
[  658.454782][T19804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'.
[  659.371911][T19835] netlink: 'syz.3.3487': attribute type 32 has an invalid length.
[  659.587128][T19842] Cannot find add_set index 1 as target
[  659.676434][T19847] tipc: Started in network mode
[  659.690605][T19847] tipc: Node identity e0000002, cluster identity 4711
[  659.704490][T19847] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  659.749064][T19840] netlink: 'syz.1.3486': attribute type 1 has an invalid length.
[  659.766669][T19834] bond2: entered allmulticast mode
[  659.774187][T19840] netlink: 'syz.1.3486': attribute type 2 has an invalid length.
[  659.783142][T19834] 8021q: adding VLAN 0 to HW filter on device bond2
[  659.800584][T19858] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  660.135815][T19882] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  660.176342][T19887] Bluetooth: MGMT ver 1.23
[  660.210107][T19876] syzkaller0: entered promiscuous mode
[  660.216657][T19876] syzkaller0: entered allmulticast mode
[  660.401897][T19896] ipvlan2: entered promiscuous mode
[  660.407387][T19896] ipvlan2: entered allmulticast mode
[  660.413398][T19896] gretap0: entered allmulticast mode
[  660.420986][T19896] team0: Device ipvlan2 failed to register rx_handler
[  660.843000][T19653] IPVS: starting estimator thread 0...
[  660.941430][T19918] IPVS: using max 27 ests per chain, 64800 per kthread
[  661.359581][T19937] ip6t_REJECT: ECHOREPLY is not supported
[  661.490639][T19940] __nla_validate_parse: 14 callbacks suppressed
[  661.490662][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3516'.
[  661.582330][T19944] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3517'.
[  661.599814][T19944] SET target dimension over the limit!
[  661.696597][T19942] syzkaller0: entered promiscuous mode
[  661.738301][T19942] syzkaller0: entered allmulticast mode
[  661.746457][T19954] mac80211_hwsim hwsim45 wlan0: default FDB implementation only supports local addresses
[  661.878230][T19632] IPVS: starting estimator thread 0...
[  661.892317][T19958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'.
[  661.971562][T19963] IPVS: using max 26 ests per chain, 62400 per kthread
[  662.022080][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'.
[  662.462123][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  662.475062][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'.
[  664.528215][T19999] sit0: left promiscuous mode
[  664.565996][T19999] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.688320][T19999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.702023][T19999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.829052][T20021] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  664.892041][T19999] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  665.000865][T19999] geneve3: left promiscuous mode
[  665.031412][T20014] netlink: 'syz.2.3534': attribute type 29 has an invalid length.
[  665.094162][T20018] netlink: 'syz.2.3534': attribute type 29 has an invalid length.
[  665.117797][T20014] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3534'.
[  665.181731][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.191737][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.210768][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.234820][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.908085][T20031] C: renamed from team_slave_0
[  665.914458][T20031] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3537'.
[  665.990985][T20033] syzkaller0: entered promiscuous mode
[  665.996839][T20033] syzkaller0: entered allmulticast mode
[  667.328047][T19993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.518533][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'.
[  667.915910][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'.
[  667.925384][T20065] netlink: 'syz.3.3546': attribute type 1 has an invalid length.
[  667.935500][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'.
[  667.977868][T20065] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  668.016365][T20069] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  668.055107][T20069] Bluetooth: MGMT ver 1.23
[  668.095802][T20075] syzkaller0: refused to change device tx_queue_len
[  674.666434][T20107] syzkaller0: entered promiscuous mode
[  674.673666][T20107] syzkaller0: entered allmulticast mode
[  674.729077][T20113] syzkaller1: entered promiscuous mode
[  674.740381][T20113] syzkaller1: entered allmulticast mode
[  674.775066][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.807762][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.828163][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.844774][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.854606][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.868551][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.878335][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.901405][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.912547][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.928253][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'.
[  674.939353][T11885] lec:lec_start_xmit: lec0:No lecd attached
[  675.207679][T20149] netlink: 'syz.3.3560': attribute type 6 has an invalid length.
[  675.551487][T20162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  675.577484][T20162] tipc: Resetting bearer <eth:syzkaller0>
[  675.597247][T20168] netlink: 'syz.4.3566': attribute type 1 has an invalid length.
[  675.612763][T20168] netlink: 'syz.4.3566': attribute type 1 has an invalid length.
[  675.631501][T20168] netlink: 'syz.4.3566': attribute type 8 has an invalid length.
[  675.657722][T20161] tipc: Disabling bearer <eth:syzkaller0>
[  675.764017][T20167] team0 (unregistering): Port device C removed
[  675.884699][T20167] team0 (unregistering): Port device team_slave_1 removed
[  676.143076][T20191] syzkaller0: entered allmulticast mode
[  676.178199][T20191] netlink: 'syz.3.3574': attribute type 6 has an invalid length.
[  676.247329][T20190] syzkaller0: entered promiscuous mode
[  676.261374][T20190] syzkaller0: entered allmulticast mode
[  676.418279][T20195] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  678.779882][T20239] kthread_run failed with err -4
[  679.312853][T20272] veth1: entered promiscuous mode
[  679.376720][T20278] netlink: 'syz.4.3593': attribute type 1 has an invalid length.
[  679.389014][T20279] netlink: 'syz.3.3591': attribute type 58 has an invalid length.
[  679.494733][T20278] bond2: entered promiscuous mode
[  679.513104][T20278] 8021q: adding VLAN 0 to HW filter on device bond2
[  679.679802][T20269] bond0: (slave bond_slave_0): Releasing backup interface
[  679.723955][T20296] sctp: [Deprecated]: syz.2.3599 (pid 20296) Use of int in max_burst socket option.
[  679.723955][T20296] Use struct sctp_assoc_value instead
[  679.744926][T20269] bond0: (slave bond_slave_1): Releasing backup interface
[  679.780774][T20304] netlink: 'syz.0.3600': attribute type 2 has an invalid length.
[  679.789050][T20304] netlink: 'syz.0.3600': attribute type 2 has an invalid length.
[  679.839225][T20269] team0: Port device team_slave_0 removed
[  679.869839][T20269] team0: Port device team_slave_1 removed
[  679.884534][T20269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  679.892940][T20269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  679.906279][T20269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  679.914592][T20269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  679.925593][T20269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  679.963899][T20282] bond2: (slave bridge2): making interface the new active one
[  679.971938][T20282] bridge2: entered promiscuous mode
[  679.978763][T20282] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  680.009528][T20286] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  680.027414][T20286] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  680.071466][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5130 ms
[  680.079762][    C1] lec:lec_tx_timeout: lec0
[  680.126285][T20304] gre0: entered promiscuous mode
[  680.139937][T20304] gre0: entered allmulticast mode
[  680.149140][T20304] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  680.223752][T20317] netlink: 'syz.0.3603': attribute type 4 has an invalid length.
[  680.233012][T20317] netlink: 'syz.0.3603': attribute type 1 has an invalid length.
[  680.247057][T20317] __nla_validate_parse: 86 callbacks suppressed
[  680.247078][T20317] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3603'.
[  680.284718][T20318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3602'.
[  680.482152][T20325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3604'.
[  680.716751][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'.
[  681.083884][T20345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3609'.
[  681.329404][T20357] netlink: 'syz.1.3613': attribute type 11 has an invalid length.
[  681.453368][T20361] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  681.525291][T20338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  682.020186][T20382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3620'.
[  682.594187][T20411] veth1: entered allmulticast mode
[  682.629871][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'.
[  682.708262][T20394] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3621'.
[  682.732365][T20394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3621'.
[  682.771447][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3621'.
[  682.950076][T20389] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.976213][T20389] 8021q: adding VLAN 0 to HW filter on device team0
[  683.012754][T20389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  683.038595][ T1156] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  683.055651][ T1156] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  683.112212][ T1156] bond0: now running without any active interface!
[  683.759469][T20453] syzkaller0: entered promiscuous mode
[  683.765193][T20453] syzkaller0: entered allmulticast mode
[  683.824044][T20460] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  684.154874][T20477] tipc: Started in network mode
[  684.171418][T20477] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  684.180362][T20477] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  685.995022][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  686.011734][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  686.336443][T20502] __nla_validate_parse: 5 callbacks suppressed
[  686.336465][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'.
[  686.497454][T20512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3649'.
[  686.574213][T20510] netlink: 'syz.3.3648': attribute type 1 has an invalid length.
[  686.665937][T20516] Set syz1 is full, maxelem 0 reached
[  686.674384][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'.
[  686.711061][T20516] 8021q: adding VLAN 0 to HW filter on device bond1
[  686.715158][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'.
[  686.764382][T20520] syzkaller0: entered promiscuous mode
[  686.770387][T20520] syzkaller0: entered allmulticast mode
[  687.078045][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'.
[  687.139625][T20538] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3654'.
[  687.150437][T20538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'.
[  687.159830][T20538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'.
[  687.303218][T20538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  691.021281][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  691.029806][    C1] lec:lec_tx_timeout: lec0
[  691.840345][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  691.853981][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  691.864662][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  691.897887][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  691.928034][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3660'.
[  691.930710][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  692.018419][T20574] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  692.140344][T20586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3664'.
[  692.213104][T20574] bond4 (unregistering): Released all slaves
[  692.549761][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'.
[  692.601436][T20615] netlink: 'syz.0.3670': attribute type 1 has an invalid length.
[  692.661443][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'.
[  692.706574][T20615] 8021q: adding VLAN 0 to HW filter on device bond2
[  692.718319][T20612] bridge_slave_1: left allmulticast mode
[  692.726367][T20612] bridge_slave_1: left promiscuous mode
[  692.732852][T20612] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.744859][T20612] bridge_slave_0: left allmulticast mode
[  692.750939][T20612] bridge_slave_0: left promiscuous mode
[  692.757198][T20612] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.792967][T20628] netlink: 'syz.4.3673': attribute type 4 has an invalid length.
[  692.823940][T20619] bond2: (slave ip6erspan0): making interface the new active one
[  692.833289][T20619] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  692.861182][T20629] netlink: 'syz.1.3672': attribute type 3 has an invalid length.
[  692.871002][T20629] netlink: 'syz.1.3672': attribute type 3 has an invalid length.
[  692.939317][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3672'.
[  693.483616][T20664] netem: change failed
[  693.685770][T20667] netlink: 'syz.4.3683': attribute type 1 has an invalid length.
[  693.925023][T20667] ip6gre2: entered promiscuous mode
[  693.961414][T20667] ip6gre2: entered allmulticast mode
[  694.762207][T20718] netlink: 'syz.2.3697': attribute type 25 has an invalid length.
[  694.807234][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  694.807413][T20718] netlink: 'syz.2.3697': attribute type 25 has an invalid length.
[  694.834282][T20721] lo: entered allmulticast mode
[  694.840518][T20721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  694.872131][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  694.881151][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  694.938030][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  694.954278][T20716] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  694.995918][T20724] syzkaller0: entered promiscuous mode
[  695.018255][T20724] syzkaller0: entered allmulticast mode
[  695.788918][T20753] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  695.811717][T20752] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  696.515655][T20769] syzkaller0: entered promiscuous mode
[  696.556276][T20769] syzkaller0: entered allmulticast mode
[  697.682119][T20809] __nla_validate_parse: 15 callbacks suppressed
[  697.682139][T20809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3715'.
[  697.699486][T20809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3715'.
[  698.929137][T20781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  698.942923][T20781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  698.953548][T20781] hsr0: entered promiscuous mode
[  698.958517][T20781] hsr0: entered allmulticast mode
[  698.964076][T20781] hsr_slave_0: entered allmulticast mode
[  698.969749][T20781] hsr_slave_1: entered allmulticast mode
[  698.977636][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  698.996909][T20790] netlink: 'syz.1.3712': attribute type 30 has an invalid length.
[  699.022509][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  699.052649][T20790] netlink: 'syz.1.3712': attribute type 30 has an invalid length.
[  699.137881][T20815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3717'.
[  699.302064][T20824] netlink: 'syz.2.3721': attribute type 61 has an invalid length.
[  703.194766][T20854] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) !
[  703.725495][T20886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3732'.
[  703.903192][T20878] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  704.271780][T20901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3734'.
[  704.629698][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'.
[  704.679056][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3740'.
[  705.180844][T20952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3745'.
[  705.368784][T20962] syzkaller0: entered promiscuous mode
[  705.375119][T20962] syzkaller0: entered allmulticast mode
[  705.455477][T20966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3747'.
[  705.747107][T20973] syzkaller1: entered promiscuous mode
[  705.753668][T20973] syzkaller1: entered allmulticast mode
[  705.830157][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'.
[  707.628287][T20926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  707.810007][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'.
[  707.881707][T20991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3754'.
[  707.917594][T20991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.932711][T20991] netlink: 'syz.3.3754': attribute type 4 has an invalid length.
[  707.953846][T20991] netlink: 'syz.3.3754': attribute type 1 has an invalid length.
[  708.000161][T20991] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3754'.
[  708.240988][T21012] syzkaller0: entered promiscuous mode
[  708.246660][T21012] syzkaller0: entered allmulticast mode
[  708.329084][T21019] syzkaller0: entered promiscuous mode
[  708.356355][T21019] syzkaller0: entered allmulticast mode
[  708.546833][ T5827] Bluetooth: hci3: command 0x0406 tx timeout
[  708.843320][T21038] 
@0Ù: renamed from bond_slave_1
[  708.909295][T21045] __nla_validate_parse: 3 callbacks suppressed
[  708.909320][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  709.000623][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  709.016086][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  709.027587][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  709.042970][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  709.053042][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  715.883129][T21074] xt_hashlimit: size too large, truncated to 1048576
[  715.918778][T21075] ip6tnl1: entered promiscuous mode
[  715.924445][T21075] ip6tnl1: entered allmulticast mode
[  716.006801][T21067] delete_channel: no stack
[  716.596847][T19653] IPVS: starting estimator thread 0...
[  716.610263][T21114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'.
[  716.691352][T21113] IPVS: using max 25 ests per chain, 60000 per kthread
[  716.710597][T21101] syzkaller0: entered promiscuous mode
[  716.721982][T21101] syzkaller0: entered allmulticast mode
[  716.840613][T21120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3780'.
[  717.270967][  T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.284742][  T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.324730][T21149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.447037][T21159] xt_hashlimit: size too large, truncated to 1048576
[  717.598387][T21164] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  717.610413][T21161] syzkaller0: entered promiscuous mode
[  717.619381][T21161] syzkaller0: entered allmulticast mode
[  717.728995][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'.
[  718.152122][T21198] openvswitch: netlink: Flow actions attr not present in new flow.
[  718.197295][T21198] netlink: 'syz.3.3805': attribute type 21 has an invalid length.
[  718.226456][T21198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3805'.
[  718.488197][T21218] syzkaller0: entered promiscuous mode
[  718.507447][T21218] syzkaller0: entered allmulticast mode
[  718.528705][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3808'.
[  718.782870][T16781] Bluetooth: hci4: command 0x0405 tx timeout
[  718.815067][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3812'.
[  718.875890][T21239] netlink: 'syz.0.3815': attribute type 153 has an invalid length.
[  719.266106][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'.
[  719.432214][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3823'.
[  719.502917][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'.
[  719.556650][T21270] syzkaller0: entered promiscuous mode
[  719.571986][T21270] syzkaller0: entered allmulticast mode
[  719.749389][T21282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3820'.
[  722.085029][T21325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  722.092585][T21325] IPv6: NLM_F_CREATE should be set when creating new route
[  722.220576][T21327] hsr0: left promiscuous mode
[  722.226446][T21327] hsr0: left allmulticast mode
[  722.232274][T21327] hsr_slave_0: left allmulticast mode
[  722.237901][T21327] hsr_slave_1: left allmulticast mode
[  722.283696][T21327] bond2: left promiscuous mode
[  722.288699][T21327] bridge2: left promiscuous mode
[  722.304086][T21327] ip6gre2: left promiscuous mode
[  722.309299][T21327] ip6gre2: left allmulticast mode
[  722.360447][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'.
[  722.710307][T21314] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  723.981503][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  735.590738][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'.
[  735.597671][T21404] syzkaller0: entered promiscuous mode
[  735.620903][T21404] syzkaller0: entered allmulticast mode
[  735.626309][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'.
[  735.775008][T21428] netlink: 'syz.0.3845': attribute type 5 has an invalid length.
[  735.968818][T21438] syzkaller0: entered promiscuous mode
[  735.975596][T21438] syzkaller0: entered allmulticast mode
[  735.993061][T21440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'.
[  736.023991][T21440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3850'.
[  736.118645][T21449] team0: Mode "" not found
[  736.464594][T21470] syzkaller0: entered promiscuous mode
[  736.476318][T21470] syzkaller0: entered allmulticast mode
[  736.782661][T21482] xt_hashlimit: size too large, truncated to 1048576
[  736.827553][T21488] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  736.942894][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'.
[  737.034712][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3866'.
[  737.142168][T21482] xt_hashlimit: size too large, truncated to 1048576
[  737.327643][T21505] netlink: 'syz.3.3870': attribute type 9 has an invalid length.
[  737.351838][T21505] netlink: 'syz.3.3870': attribute type 6 has an invalid length.
[  737.479399][T21482] xt_hashlimit: size too large, truncated to 1048576
[  737.484256][T21508] syzkaller0: entered promiscuous mode
[  737.492667][T21508] syzkaller0: entered allmulticast mode
[  737.743564][T21519] vxcan3: entered allmulticast mode
[  737.787112][T21526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3876'.
[  737.821166][T21526] tipc: Invalid UDP bearer configuration
[  737.821909][T21526] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  737.922685][T21533] rdma_op ffff88806b3cc9f0 conn xmit_rdma 0000000000000000
[  737.938738][T21533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3880'.
[  737.958071][T21533] vlan2: entered promiscuous mode
[  737.971398][T21533] bridge0: entered promiscuous mode
[  738.066170][T21545] netlink: 'syz.3.3881': attribute type 9 has an invalid length.
[  738.090254][T21545] netlink: 'syz.3.3881': attribute type 11 has an invalid length.
[  738.121969][T21545] netlink: 'syz.3.3881': attribute type 12 has an invalid length.
[  738.135347][T21548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'.
[  738.211607][T21545] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3881'.
[  738.627269][T21565] netlink: 'syz.0.3887': attribute type 1 has an invalid length.
[  738.682713][T21565] netlink: 'syz.0.3887': attribute type 1 has an invalid length.
[  738.707436][T21563] syzkaller0: entered promiscuous mode
[  738.780207][T21563] syzkaller0: entered allmulticast mode
[  739.509843][T11885] lec:lec_start_xmit: lec0:No lecd attached
[  740.631726][T21607] __nla_validate_parse: 3 callbacks suppressed
[  740.631748][T21607] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3893'.
[  740.661851][T21607] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  745.021465][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms
[  745.029612][    C1] lec:lec_tx_timeout: lec0
[  747.424602][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  747.432671][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  752.124338][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'.
[  752.158485][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3894'.
[  752.211722][T21648] netlink: 'syz.1.3900': attribute type 3 has an invalid length.
[  752.245494][T21648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3900'.
[  752.293979][T21653] openvswitch: netlink: Flow actions attr not present in new flow.
[  752.713364][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3901'.
[  753.021812][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms
[  753.030444][    C1] lec:lec_tx_timeout: lec0
[  753.136257][T21675] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3905'.
[  753.185657][T21675] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  753.667913][T21692] xt_hashlimit: size too large, truncated to 1048576
[  754.022503][T21707] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3911'.
[  754.130256][T21713] netlink: 'syz.3.3909': attribute type 6 has an invalid length.
[  754.298122][T21725] openvswitch: netlink: Flow actions attr not present in new flow.
[  754.310144][T21726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3914'.
[  754.520790][T21732] syzkaller0: entered promiscuous mode
[  754.526845][T21732] syzkaller0: entered allmulticast mode
[  754.622941][T21736] bond2: option mode: invalid value (254)
[  754.730545][T21736] bond2 (unregistering): Released all slaves
[  754.853966][T21745] wg1: entered promiscuous mode
[  754.858916][T21745] wg1: entered allmulticast mode
[  754.900530][T21759] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3919'.
[  754.959546][T21759] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  755.017546][T21760] batman_adv: batadv0: Removing interface: batadv_slave_0
[  755.036473][T21760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  755.278150][T21768] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  755.297067][T21768] bond3 (unregistering): Released all slaves
[  756.127256][T21794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3930'.
[  756.486144][T21805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  756.496983][T21804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3933'.
[  756.506604][T21805] netlink: 'syz.3.3933': attribute type 7 has an invalid length.
[  756.514766][T21804] netlink: 'syz.3.3933': attribute type 7 has an invalid length.
[  756.550459][T21807] syzkaller0: entered promiscuous mode
[  756.550940][T21805] netlink: 'syz.3.3933': attribute type 8 has an invalid length.
[  756.565170][T21807] syzkaller0: entered allmulticast mode
[  756.574110][T21804] netlink: 'syz.3.3933': attribute type 8 has an invalid length.
[  756.640922][T21805] bond0: entered promiscuous mode
[  756.652775][T21805] bridge0: entered promiscuous mode
[  756.667420][T21805] debugfs: 'hsr1' already exists in 'hsr'
[  756.675402][T21805] Cannot create hsr debugfs directory
[  756.682617][T21805] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  756.801777][    C0] 
[  756.804303][    C0] ============================================
[  756.811286][    C0] WARNING: possible recursive locking detected
[  756.817653][    C0] syzkaller #0 Not tainted
[  756.822239][    C0] --------------------------------------------
[  756.828493][    C0] syz.2.3937/21821 is trying to acquire lock:
[  756.834585][    C0] ffff88806a908f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  756.843824][    C0] 
[  756.843824][    C0] but task is already holding lock:
[  756.851478][    C0] ffff88803546cf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  756.862047][    C0] 
[  756.862047][    C0] other info that might help us debug this:
[  756.870821][    C0]  Possible unsafe locking scenario:
[  756.870821][    C0] 
[  756.878877][    C0]        CPU0
[  756.882169][    C0]        ----
[  756.885520][    C0]   lock(&hsr->seqnr_lock);
[  756.890207][    C0]   lock(&hsr->seqnr_lock);
[  756.894889][    C0] 
[  756.894889][    C0]  *** DEADLOCK ***
[  756.894889][    C0] 
[  756.903220][    C0]  May be due to missing lock nesting notation
[  756.903220][    C0] 
[  756.911901][    C0] 12 locks held by syz.2.3937/21821:
[  756.917635][    C0]  #0: ffff888054e81bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0xa10
[  756.926802][    C0]  #1: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  756.936909][    C0]  #2: ffff8880795f4978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  756.947501][    C0]  #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x144/0x5f0
[  756.957698][    C0]  #4: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640
[  756.968285][    C0]  #5: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370
[  756.977634][    C0]  #6: ffff88803546cf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  756.988555][    C0]  #7: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860
[  756.998312][    C0]  #8: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870
[  757.008474][    C0]  #9: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980
[  757.018051][    C0]  #10: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870
[  757.028519][    C0]  #11: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  757.037883][    C0] 
[  757.037883][    C0] stack backtrace:
[  757.044140][    C0] CPU: 0 UID: 0 PID: 21821 Comm: syz.2.3937 Not tainted syzkaller #0 PREEMPT(full) 
[  757.044162][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  757.044172][    C0] Call Trace:
[  757.044182][    C0]  <IRQ>
[  757.044191][    C0]  dump_stack_lvl+0xe8/0x150
[  757.044219][    C0]  print_deadlock_bug+0x279/0x290
[  757.044243][    C0]  __lock_acquire+0x253f/0x2cf0
[  757.044264][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  757.044285][    C0]  lock_acquire+0xf0/0x2e0
[  757.044302][    C0]  ? hsr_dev_xmit+0x237/0x360
[  757.044322][    C0]  ? hsr_dev_xmit+0x237/0x360
[  757.044338][    C0]  _raw_spin_lock_bh+0x36/0x50
[  757.044356][    C0]  ? hsr_dev_xmit+0x237/0x360
[  757.044371][    C0]  hsr_dev_xmit+0x237/0x360
[  757.044386][    C0]  ? hsr_dev_xmit+0x2d/0x360
[  757.044401][    C0]  dev_hard_start_xmit+0x2d8/0x870
[  757.044422][    C0]  __dev_queue_xmit+0x1557/0x3870
[  757.044441][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  757.044460][    C0]  ? __dev_queue_xmit+0x28b/0x3870
[  757.044475][    C0]  ? ebt_do_table+0x2665/0x2830
[  757.044492][    C0]  ? ebt_do_table+0x2665/0x2830
[  757.044509][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  757.044532][    C0]  ? br_nf_post_routing+0x219/0xfe0
[  757.044559][    C0]  br_dev_queue_push_xmit+0x370/0x4a0
[  757.044581][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  757.044601][    C0]  NF_HOOK+0x360/0x3f0
[  757.044622][    C0]  ? NF_HOOK+0xa2/0x3f0
[  757.044648][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  757.044683][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  757.044715][    C0]  br_forward_finish+0xd3/0x130
[  757.044746][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  757.044766][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  757.044786][    C0]  NF_HOOK+0x360/0x3f0
[  757.044806][    C0]  ? NF_HOOK+0xa2/0x3f0
[  757.044824][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  757.044844][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  757.044864][    C0]  ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70
[  757.044881][    C0]  ? br_handle_vlan+0x3e7/0x530
[  757.044900][    C0]  __br_forward+0x397/0x540
[  757.044920][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  757.044940][    C0]  ? br_dev_xmit+0x193/0x1980
[  757.044955][    C0]  br_dev_xmit+0x12bd/0x1980
[  757.044972][    C0]  ? br_dev_xmit+0x193/0x1980
[  757.044989][    C0]  ? __pfx_br_dev_xmit+0x10/0x10
[  757.045003][    C0]  ? __skb_get_hash_net+0x13f/0x2e0
[  757.045018][    C0]  ? __pfx___skb_get_hash_net+0x10/0x10
[  757.045032][    C0]  ? qdisc_pkt_len_segs_init+0x2c4/0x970
[  757.045048][    C0]  ? skb_network_protocol+0x234/0x3f0
[  757.045064][    C0]  ? __pfx_passthru_features_check+0x10/0x10
[  757.045081][    C0]  dev_hard_start_xmit+0x2d8/0x870
[  757.045107][    C0]  __dev_queue_xmit+0x1557/0x3870
[  757.045122][    C0]  ? handle_softirqs+0x22a/0x870
[  757.045140][    C0]  ? page_ext_lookup+0x16/0x180
[  757.045157][    C0]  ? do_group_exit+0x21b/0x2d0
[  757.045171][    C0]  ? arch_do_signal_or_restart+0xbc/0x830
[  757.045188][    C0]  ? __dev_queue_xmit+0x28b/0x3870
[  757.045202][    C0]  ? do_syscall_64+0x32d/0xf80
[  757.045228][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.045246][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  757.045264][    C0]  ? __copy_skb_header+0xa3/0x4a0
[  757.045283][    C0]  ? hsr_addr_subst_dest+0x30d/0xa90
[  757.045299][    C0]  ? skb_clone+0x246/0x3a0
[  757.045314][    C0]  hsr_forward_skb+0x157b/0x2860
[  757.045337][    C0]  ? hsr_forward_skb+0xb3/0x2860
[  757.045356][    C0]  ? __pfx_hsr_forward_skb+0x10/0x10
[  757.045373][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  757.045389][    C0]  ? __asan_memset+0x22/0x50
[  757.045410][    C0]  ? __skb_pad+0x405/0x610
[  757.045426][    C0]  send_hsr_supervision_frame+0x731/0xcb0
[  757.045448][    C0]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[  757.045466][    C0]  hsr_announce+0x1db/0x370
[  757.045487][    C0]  ? hsr_announce+0x89/0x370
[  757.045503][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  757.045522][    C0]  call_timer_fn+0x192/0x640
[  757.045542][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  757.045557][    C0]  ? call_timer_fn+0xd4/0x640
[  757.045574][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  757.045600][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  757.045625][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  757.045641][    C0]  __run_timer_base+0x652/0x8b0
[  757.045658][    C0]  ? ktime_get+0x45/0x200
[  757.045676][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  757.045694][    C0]  ? sched_clock_cpu+0x74/0x440
[  757.045717][    C0]  run_timer_softirq+0xb7/0x170
[  757.045733][    C0]  handle_softirqs+0x22a/0x870
[  757.045760][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  757.045780][    C0]  __irq_exit_rcu+0x5f/0x150
[  757.045797][    C0]  irq_exit_rcu+0x9/0x30
[  757.045814][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  757.045835][    C0]  </IRQ>
[  757.045840][    C0]  <TASK>
[  757.045846][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.045864][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70
[  757.045887][    C0] Code: 70 16 00 00 83 fa 02 75 21 48 8b 91 78 16 00 00 48 8b 32 48 8d 7e 01 8b 89 74 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <e9> 8f 1a ec 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  757.045901][    C0] RSP: 0018:ffffc90004027310 EFLAGS: 00000293
[  757.045918][    C0] RAX: ffffffff823c0536 RBX: 000000000003ccc5 RCX: ffff88803173bd00
[  757.045929][    C0] RDX: 0000000000000000 RSI: ffffffff8c27b4e0 RDI: 000000000003ccc5
[  757.045939][    C0] RBP: 0000000000000001 R08: ffffffff823c1524 R09: ffffffff8e75e420
[  757.045949][    C0] R10: dffffc0000000000 R11: fffff940001e6629 R12: 000000000003ccc5
[  757.045960][    C0] R13: 000000000003ccc5 R14: ffffea0000f33148 R15: ffffea0000f33158
[  757.045973][    C0]  ? page_table_check_clear+0x144/0x5f0
[  757.045988][    C0]  ? page_ext_lookup+0x16/0x180
[  757.046006][    C0]  page_ext_lookup+0x16/0x180
[  757.046021][    C0]  page_table_check_clear+0x238/0x5f0
[  757.046036][    C0]  ? page_table_check_clear+0x144/0x5f0
[  757.046050][    C0]  ? vm_normal_page+0x10d/0x240
[  757.046069][    C0]  unmap_page_range+0x33b3/0x48f0
[  757.046101][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  757.046121][    C0]  ? mas_find+0xb0e/0xd30
[  757.046140][    C0]  ? unmap_vmas+0x1c4/0x6a0
[  757.046158][    C0]  unmap_vmas+0x48f/0x6a0
[  757.046177][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  757.046202][    C0]  exit_mmap+0x280/0xa10
[  757.046219][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  757.046240][    C0]  ? __pfx_exit_aio+0x10/0x10
[  757.046266][    C0]  ? uprobe_clear_state+0x27c/0x290
[  757.046286][    C0]  __mmput+0x118/0x430
[  757.046306][    C0]  exit_mm+0x168/0x220
[  757.046321][    C0]  do_exit+0x6a2/0x23c0
[  757.046335][    C0]  ? try_to_wake_up+0x832/0x1390
[  757.046351][    C0]  ? __pfx_do_exit+0x10/0x10
[  757.046366][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  757.046384][    C0]  do_group_exit+0x21b/0x2d0
[  757.046397][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  757.046417][    C0]  get_signal+0x1284/0x1330
[  757.046442][    C0]  arch_do_signal_or_restart+0xbc/0x830
[  757.046460][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  757.046483][    C0]  exit_to_user_mode_loop+0x86/0x480
[  757.046502][    C0]  ? rcu_is_watching+0x15/0xb0
[  757.046524][    C0]  do_syscall_64+0x32d/0xf80
[  757.046545][    C0]  ? trace_irq_disable+0x3b/0x150
[  757.046566][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.046581][    C0]  ? clear_bhb_loop+0x40/0x90
[  757.046597][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.046612][    C0] RIP: 0033:0x7fa6a239c799
[  757.046626][    C0] Code: Unable to access opcode bytes at 0x7fa6a239c76f.
[  757.046634][    C0] RSP: 002b:00007fa6a31de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  757.046649][    C0] RAX: 0000000000000001 RBX: 00007fa6a2615fa8 RCX: 00007fa6a239c799
[  757.046659][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa6a2615fac
[  757.046669][    C0] RBP: 00007fa6a2615fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  757.046679][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  757.046689][    C0] R13: 00007fa6a2616038 R14: 00007ffc67758500 R15: 00007ffc677585e8
[  757.046705][    C0]  </TASK>
[  758.025852][T21828] syzkaller0: entered promiscuous mode
[  758.036494][T21828] syzkaller0: entered allmulticast mode
[  758.049411][T21828] 8021q: VLANs not supported on ipvlan1
[  758.060513][T21828] macsec0: entered promiscuous mode