last executing test programs:

2.373910177s ago: executing program 3 (id=7351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@bridge_getlink={0x3c, 0x12, 0x1, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x100, 0x44400}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x90)
r6 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x2, 0xfff00001}, {0x16, 0x0, 0x1}]}, 0x10)
sendto$inet6(r6, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000280)=0x2)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffee}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b0100004ec6"})

2.276759223s ago: executing program 0 (id=7352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40d0)

2.156151804s ago: executing program 0 (id=7354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x2054, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"/4096}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"/4096}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2054}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
syz_emit_ethernet(0xd3, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0)

2.020276205s ago: executing program 4 (id=7356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x2e8f, 0x8, 0x8}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x310, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x4d}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb6, 0x5b, "46648dd8a7f7c3f98c5da677d5ebf708635620013256e09c9be3b54ba10cb0afeaf7b012c400ce3898c2d1bdc39d499ef20589fce6980f302289c659fe5f42d073900e92649c94faa149f0368683c1e99f9edbca59c2873fffb439b6cfba9d9c49b1687a5efa0eb0e60322fa5e0c6a239da10336a696717a9fe77e17ba8d591f2676a100669f76fb4ef906740a77b447b7c2e90816fa0b96cdfa84fd20ac696be01eb02546951bb528a8431cea88b7f798b8"}, @NL80211_ATTR_FRAME_MATCH={0xa3, 0x5b, "f74b285e127fb78f9de982e28b45b21e606b4b2085e9c667888e9edaf1851a703cc55f91db5d1cf7adfe14d4be4531bd5306d842a10939237fbadf6c53a562d02119d5c6a3df586feffcb1b8e66a2c742b76fa6f58ba17e8017363908f1ace645afd76bd2c4f5659b1e989b7e901956460bad7336ce458b93dd52e2f3e259c6de628f82108e5b5927b6b42f3a8c002d7dc680ec707565261b12a8dffdf06f3"}, @NL80211_ATTR_FRAME_MATCH={0x7a, 0x5b, "d6daade062a5c394b392d5f406fc50999edaf77f99af9ecf4f605e5a071ac8a579119c3f060947f94dafc8975f94211af0818aa28d686f515c23c53b72a2b73e7034274223c95f69d6c9310b553f88f8a85bc2c123ee5cdbb8ea03ddc8806994d9eb763b9b3b703b75bef10cf70adfd6bffccac46b77"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "4ec0b7171ac20fa6146da34bdd4969c963e1b8669e9a068340d009603f2d3fcf0b2fafb51ac6836839f1264b730228685a9d2edb86c61d76dc7b267b62d63fcdf9ae119865fe674408fbd73d9823e1ad7ee942823c54ad"}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "a48b9e2fca551fd83d18cb6487738f0320690c4cf00998c63f0235f7a2007f21e89e2c7e6ede3e040063d81a754f2db9aa529d5d4a4ec5ef2fab749f9d87f9212bc4de65ee1804a2c903f0e0087ed2515db992815dc0f51bb01fcc0be657c40f2ba9283a0059d4c61eee2322f116c8e5450b0f439544a473299e4c56e968d10600c2df75fffc89183fd1e207"}, @NL80211_ATTR_FRAME_MATCH={0x12, 0x5b, "c56c2fdf2240666bde1778610a0a"}]}, 0x310}, 0x1, 0x0, 0x0, 0x2000888c}, 0x40000)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f00000004c0)="ec0f87b7bf22ad522005b66a25a10efbf7eb6240c2671a2b16a5bf9779d326893ab92a44716682b6b70cc23c1cc00161bc157982626a2f7d8839451b89f5ff3591fb9f05fe8fc2c764d90b0c29d09150c6075a7c97a6cb7cd4c890288eb74dd9afdaafe790ddbf81b5048b9a1e5eea993b0b6e21194ccdc41b81936fe4bdabb0e3df5a3a6025c0e9d3bf721fa9b0fed3feaa99eb66be20fe15ae39366be182d6b4c60acfe196a5ad1d8dc33d23c7") (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000580)={'team0\x00', 0x4000}) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{<r4=>r0, &(0x7f00000006c0)='nl80211\x00', 0x80040, &(0x7f0000000700)={@align=0x6, {0x4, 0xc, 0xfffff800, 0x3}}, 0x4, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x7}, 0x1, &(0x7f0000000900)=[{0x1, 0x60, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="7ba46d72b1f26c85b222dea7a1d37ecc828a923c8edd53b2399a43fbf826e180b5227ff3effbe37df2e998670b24b06aee9dff2e56708b3d06921267d3ae88c8e476002e8776e3d532cf75e1a492ff4cc826d65e09762fc4d638c03d180eb76763b9fd4531bd03ee155a727dac77f739ff575300fa2ac6a954be3d88b8ed058708077bb292f06dcde924f42b24d77508e2a608941d50e90393289775379ee1585aabc01e6d067b648b69fd5c17b6f979b7db028ce43dc03cbc2bca89bd416cc8bb331280381d7bdcf0b5ada01bffe3942ec4dcba0a65acaa8573389ba3f8d8822c98d7", 0xe3, 0xa}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x31e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x16, &(0x7f0000000680)=""/22, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, 0x1, r1, r4, r1, r1], 0x0, 0x10, 0x200}, 0x94) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0), r4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000b00)=0x2, 0x4) (async)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@multicast1, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000c40)=0xe8) (async)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r1)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc8, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2a270616}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x44}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000814}, 0x85)
sendto$rxrpc(r4, &(0x7f0000000f00)="1c14d46de9de425d1bc8f65938f6e4b8a78422a5ecec", 0x16, 0x1040, &(0x7f0000000f40)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000041) (async)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001b00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001140)={0x964, 0x0, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x9}, 0x7, 0x2, 0x5, 0x8001, 0x1e, 'syz0\x00', "dfe6ff9087a088ba3580d6ee4f62c36061d9704d86119628f8de47b7a16919a9", "78c1e8e65a0a66cdbc4add7ea4edc966c1e8eb81f641061c2af8e97b9c2a5574", [{0x800, 0x3, {0x1, 0xb9}}, {0x2, 0x3ff, {0x1, 0x7}}, {0x400, 0x99c, {0x2, 0x400}}, {0x40, 0x3, {0x1, 0x4}}, {0x6, 0x101, {0x1, 0x353}}, {0x4, 0x0, {0x1, 0x8}}, {0x140, 0x0, {0x1, 0x3}}, {0x4, 0x6, {0x1}}, {0x0, 0x7, {0x2}}, {0x10, 0x5, {0x3, 0x8}}, {0x9, 0x4, {0x0, 0x3}}, {0x2000, 0x5, {0x1, 0xbf}}, {0x6226, 0x40, {0x0, 0xfffffffa}}, {0xbeb6, 0x1, {0x2, 0x7}}, {0x34bb, 0x7, {0x2, 0x5}}, {0x5, 0xea81, {0x3, 0x40}}, {0x40, 0x8, {0x0, 0x3}}, {0x5, 0x2e, {0x3, 0x6}}, {0x5, 0x7, {0x2, 0x1}}, {0x7, 0x6, {0x2, 0x401}}, {0xb, 0x8, {0x3, 0xffff}}, {0x8ce3, 0x215, {0x3, 0xa6}}, {0x3, 0x1, {0x0, 0xffff47dc}}, {0x5318, 0xb, {0x1, 0x3c}}, {0x5, 0x7, {0x2, 0x4}}, {0x200, 0x3, {0x3, 0x5f59}}, {0x6, 0xfff, {0x0, 0x9}}, {0x7f, 0x2, {0x0, 0x401}}, {0xbe0, 0x1, {0x3, 0xba0}}, {0x7f, 0x0, {0x2, 0x5}}, {0x0, 0x1ff, {0x2, 0x2}}, {0x8, 0x2e6, {0x0, 0x9}}, {0x9, 0x9, {0x1, 0x8}}, {0x0, 0x8, {0x0, 0x7fff}}, {0x100, 0x2, {0x0, 0x4}}, {0x1, 0x4, {0x1, 0x8}}, {0x2, 0x100, {0x0, 0x3}}, {0x1, 0x401, {0x3, 0x4}}, {0x2743, 0x0, {0x3, 0xfffffff8}}, {0xfffd, 0xfffa, {0x1, 0x67a}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x2, 0x8, 0x7, 0x22f4, 0x14, 'syz1\x00', "7b9b218d0e36c9277c49886511a4f523d83f1a3f4fbad10cf0ffe724b6085f80", "ca11f5c640140138d9214560551e7a735cc2352c8a7af75fad178ab9d4cf380e", [{0x9, 0x27, {0x2, 0x1}}, {0x4, 0xfff, {0x2, 0xbe}}, {0x6, 0x80, {0x0, 0x400}}, {0x0, 0x0, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0x67}}, {0xf45, 0x400, {0x0, 0xfffffffe}}, {0x8, 0x5, {0x1, 0x1000}}, {0x5, 0xa, {0x2, 0xdf6}}, {0x6, 0x4, {0x0, 0x5}}, {0xda86, 0x8, {0x3, 0x8}}, {0xf, 0xfff, {0x3, 0x1}}, {0xc, 0x4bb, {0x2, 0x6}}, {0x12c, 0x7, {0x3, 0xc}}, {0x9, 0xc, {0x3, 0x8dd}}, {0x7, 0xf1ad, {0x0, 0x5}}, {0x5, 0x8, {0x1, 0x7}}, {0xfffa, 0x3, {0x0, 0x2}}, {0x94f, 0x2, {0x1, 0x3}}, {0x1, 0x1ff, {0x1, 0x1}}, {0x4, 0x7fff, {0x2, 0x9d5}}, {0x2, 0x1fd, {0x1, 0x6}}, {0xf, 0x7, {0x3, 0x6}}, {0x80, 0xfbaf, {0x2, 0x5}}, {0x9, 0x8, {0x3, 0xf}}, {0xee87, 0x500, {0x3, 0x3}}, {0x1, 0xfffb, {0x0, 0x86}}, {0xfff, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0xcae}}, {0x2, 0x8, {0x3, 0x10001}}, {0x8, 0x5, {0x0, 0x7}}, {0x80, 0x3, {0x1, 0x7}}, {0x77b, 0x0, {0x1}}, {0x5, 0xfc41, {0x2, 0x3}}, {0x401, 0xfff8, {0x0, 0x1}}, {0x9, 0x0, {0x3, 0x80000}}, {0x9, 0x1, {0x3, 0x39}}, {0x100, 0x8, {0x1, 0x2}}, {0x67, 0xff80, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x3c}}, {0x46c2, 0x0, {0x3, 0x1ff}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x4, 0x2, 0x1, 0x0, 0x4, 'syz1\x00', "2c80d5821b3400c7de91bbcb144b3ad4c9d466e194454c6327b51ad89274b0fe", "f0b58c16afef457615964615c68dd7407c1b32d96f5c48501045546a931d4af3", [{0x400, 0x8, {0x0, 0x5}}, {0x1ff, 0x0, {0x2, 0x400}}, {0xc00f, 0x8000, {0x1, 0x6}}, {0x7, 0xfff7, {0x2}}, {0x1, 0x7, {0x0, 0x6}}, {0x6, 0x0, {0x1, 0x7}}, {0x3, 0x2800, {0x3, 0x7}}, {0x5, 0x8, {0x3, 0x2}}, {0x6, 0x5, {0x1, 0xffff}}, {0x4, 0x7, {0x1, 0x9}}, {0x80, 0x9, {0x1, 0x8625}}, {0x1, 0x9, {0x1}}, {0x6, 0xc9d3, {0x2, 0xff}}, {0x7, 0x4, {0x1, 0x2}}, {0x5, 0x101, {0x2, 0xa}}, {0x1000, 0x56, {0x3, 0x34}}, {0x5, 0xffff, {0x2, 0x34}}, {0x8, 0x9, {0x1}}, {0x9, 0x2, {0x2, 0xbe3}}, {0xee9d, 0xff7f, {0x1, 0x7fffffff}}, {0x0, 0x5, {0x1, 0xd}}, {0x4, 0xbc, {0x0, 0x6}}, {0x3, 0x9, {0x1, 0x9}}, {0x1, 0x200, {0x1, 0x2}}, {0x8, 0x1000, {0x0, 0x5}}, {0x101, 0x7fff, {0x1, 0xff}}, {0xa2, 0x7, {0x0, 0x200}}, {0x1, 0x9, {0x3, 0x4}}, {0x6, 0x401, {0x3, 0x7}}, {0x400, 0xdf9, {0x2, 0x48c}}, {0x8, 0x1, {0x2, 0x1}}, {0xfff7, 0x8, {0x2, 0x4199}}, {0x5, 0x8001, {0x0, 0x5}}, {0x0, 0x8, {0x2, 0xffff}}, {0xc, 0x12, {0xb2e8385cceda2085, 0x24}}, {0x2d3f, 0x3, {0x0, 0xaf2}}, {0x10, 0x7f, {0x2, 0x2}}, {0x2, 0x1e1, {0x1, 0x8}}, {0x8, 0x7, {0x2, 0x80000000}}, {0xd1, 0x6, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x4, 0x2, 0x3cb9, 0x0, 0x28, 'syz1\x00', "0244fa6026c89b40b165c626ae49c5b1bb0cdfaaeace0a4901712c5903caf815", "2f11c1de38b510c55986ba865dfd811006593ee543be8ec8aabc5ead0b010599", [{0x6c, 0x1}, {0x4, 0x1ff, {0x1, 0x4}}, {0x7f, 0x3, {0x2, 0x6}}, {0x519, 0x5, {0x1, 0xfffffd7a}}, {0x1000, 0x3, {0x0, 0x189f}}, {0x401, 0xcd, {0x3, 0x40}}, {0x5, 0x81, {0x1, 0x1}}, {0xd, 0x1, {0x2, 0xc}}, {0x2, 0x6, {0x2, 0x8}}, {0x4, 0xfffb, {0x1, 0x4}}, {0xa, 0x3, {0x1, 0x6}}, {0x0, 0xa, {0x3, 0x800}}, {0x6, 0xa83a, {0x2, 0x5}}, {0x657, 0x3, {0x0, 0x5}}, {0x82, 0x5, {0x0, 0x2}}, {0x400, 0x1000, {0x1, 0x1}}, {0x7, 0x8001, {0x1, 0x8}}, {0x3dc4, 0x9, {0x0, 0x48f4}}, {0x9, 0x6, {0x0, 0x8}}, {0x4, 0x7f, {0x0, 0x3}}, {0x6, 0x81, {0x3, 0xb5}}, {0x6, 0x1514, {0x0, 0x7}}, {0xfffd, 0xd42, {0x2, 0xb7800000}}, {0x8, 0x7, {0x1, 0x9}}, {0x8000, 0x800, {0x1, 0x7f}}, {0x3, 0x10, {0x2}}, {0x7, 0x7, {0x1, 0x3}}, {0xfd23, 0x0, {0x3, 0x7}}, {0xdd, 0xfff, {0x0, 0x7}}, {0x4, 0xe7d7, {0x0, 0x100}}, {0x7, 0xef1, {0x0, 0xc079}}, {0x3, 0xff, {0x0, 0x10}}, {0x4, 0x3, {0x2, 0x376}}, {0x3, 0x7e, {0x0, 0xc64a}}, {0x5, 0xb, {0x1, 0xfffffff8}}, {0x40bf, 0xffff, {0x2, 0x2}}, {0xfffa, 0x860, {0x2, 0x2}}, {0x8, 0x7, {0x2, 0x55a}}, {0x2, 0x7fff, {0x2, 0x3}}, {0x3ff, 0x2, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000014}, 0x4040800) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x1b0, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1dc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ad}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x317}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e00), r6)
sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000002040)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)={0x1a4, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xb2, 0x19, "36f8ddc711ce29573e365d1358f45cc53f9efaab9c178e7734d197d82972a0ad5d37aef90f42bd07e8385161423093cc5e3b8bf36b2cdd95beb200cc0f9952549093bb889909a97a9e7c070733b9450a4ca0e22435f8bfa3c83b181043ba7a327d91a92630e85d10d4bdddf2fad628e4e68a12feae1e824ae8ff330bea89ecf676cab890b7db874c5114fe057ad2a4a3d9e20b1d501b5d35530afd07fca152cac6869b8ee75792eaca8111540dfb"}, @NFC_ATTR_SE_APDU={0xda, 0x19, "03dfba5ff637719b6bcd465f621be666b6844024b99471c446bee87157ba5b7332a6c26260b5f808282cd90efb4847fde5eb3ab0b46becf5205538bfe201724236ae1f958300d3bc6bdd05f2558c5035af65453448d362ff5a772a939860e417291d8d1a5289ca90e03dee94a7291cfde412b78a769969d0c8433eeadd4e81f07546e937c43d19df5626cd31d44d6009ef3b4107a083d57afd31be8800baa74ce1dd67130c89ed8ab7265f6c7b9cf14b5c3f5af093d53c2f26c074327cac77e2bfebc0977da9d20974223357c9479320fbd4fe539cba"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000002080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002140), r6)
sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r11, 0x425, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40014) (async)
sendmsg(r9, &(0x7f0000003800)={&(0x7f0000002240)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000022c0)="f481de82b81b0a34a649699d467f14ec9e0a76488e62eab68ec12aae65a2c66dd16a2aa587247df2a8cfce0b143908ef9292553bff4cd969bc069d86956d020c981bb403ad640e792527d6b76aed8aa40355bfe05870481c1442fad37afdb7be134b7083cdf6c8a7e9fcb2444030c805701fedfd5bc2fcff11a59b07a442b09b8fb7362fc14d5b791cc2141b86c2abebc51bdde539f7d60e0f263f25cb32a410b90cc63870a645e7d175cff831292580a3081b1ef7e2394fbd72e2861a7b3ce31b1994a7c417ee607d7d01b2dc818f337aad53441118b3905a3ab848109b0be3", 0xe0}, {&(0x7f00000023c0)="1bc815ad30275642a137f06c78960b324e6465c105f9e7c617014f52dc849d50167bc71c1798ee4b6b4ab88f60785465f5abd6a825873014fa7d846da894c827742da11a752d282bfb76a9e0b14b1feb1b1bcd0eb4b6e6e9ae613b0739c3dff35e2a3a8ee10a40dc1783c72b8b0c52c201e58bcc2186af15606f914df720a0470a3c97cb38afea7e2af93b71e93abfc35243b8b6602592cfbbb963641fcfb8b30ef92fc04f9ccb2c6eb65c4a389309cb9195c1d50647cbf94860217860c8813e556eb242ddefd25d826157c8", 0xcc}], 0x2, &(0x7f0000002500)=[{0xb8, 0xf, 0x5, "b5bf98ab0bdeb7b82b9b4abf932961b924067af1e29c75938af0b9246ec70542972fbde9d4ced27709499a568e910da1491bcec51da0edcb7a70025afdfb92deff35cd542bfc76e497740d8608518ac4ace3c5b78a05a786840e110dda82584933d7e6d9d02de5c719822b5280e52db1aa52e6ac1405cbd83fc62f2f5dea71574da2be8a44f5a6117d5cfb4c6a1838a4aa55350d8aa9ca75311c7c51a71f0cead5"}, {0x100, 0x103, 0x58, "0296e9d66d264d5afada98e4ccc0a9435465654a77c0aa5f30f49de4f5c152f6b224f3b25ad2987d553952c1dcb969e254480d78f6a33bfb2e1e836336ebc57cb5876196c6b7ce571feaa5d8801915dca9479a76ca6dafa3816e69fc5a605823da499f108294aa1c8452bfcfdefb5a22e097e9e654d56bfe5e89af11b2641034e3e227d02694f8e4f5119cd57b3e66479ed3dab9c114acee16bcc4ac9927dba004aefdf61706a4e86e596ab2ef4969236b1e6b71fbb4170882a8396090a0415530ac8e44ef99692a689d0f291e363578a5facd726794dc3c5c0e7977b69ca8f4f6a3a6b20780903edd6c28"}, {0x30, 0x11, 0x0, "5124229815e17cd40cb21f7371e08152c41546a37feacae14d2b11b4"}, {0xa0, 0x10d, 0x4, "ad71f4623f818017857460461aa3ff1ffdfb16d5a6831eede8b3a2be3151d688074476351649f204c2c5c1aa447ff2f583e2e61cfd919d2e91f07e419e159f14f202509c6c9ade2e81cdd536502a235fbe7f27dc8d57984042e447e8b0c1762c2834ee2cac297fa82adcb2ca57d210322bc5d8b5223896836971e7b65394fe2c439c3d5e47a77ec17b986812d2"}, {0x38, 0x88, 0x101, "e55ba19af4b5718373cadd9025e562dd508d9c0d99f385fe684697c7db4b2ec3683b"}, {0x1010, 0x102, 0xc, "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"}], 0x12d0}, 0x4800) (async)
socket$nl_route(0x10, 0x3, 0x0)

2.016558422s ago: executing program 2 (id=7357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socket(0x2a, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000007000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000620000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)

2.011513248s ago: executing program 1 (id=7358):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@empty, @in=@remote, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x83, 0x4}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d4, 0x32}, 0x0, @in6=@local, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in6=@mcast1, 0x3505}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x3c}, 0x2, @in=@remote, 0x10, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x1fc}}, 0x4080) (fail_nth: 8)

1.915072543s ago: executing program 0 (id=7359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100300101002800128009000100766c61065ed4ba496411d580040003801000048003000100f74508001700000014003971c4eb92919900"/72], 0x5c}}, 0x24004004)
r1 = socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580)="06", 0x2000cc0, r2}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000280), &(0x7f0000000280), 0x1, r2}, 0x38)
r8 = socket$kcm(0x2b, 0x1, 0x0)
close(r8)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f00000007c0)={&(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000b80)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
connect$unix(r10, &(0x7f0000000100)=@abs={0x27}, 0x6e)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
close(r8)

1.865186747s ago: executing program 3 (id=7360):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x100000}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3501, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x884)

1.864943692s ago: executing program 4 (id=7361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe0000012})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x9) (async)
epoll_create1(0x0) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe0000012}) (async)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)

1.864226561s ago: executing program 1 (id=7362):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6, 0x15}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000))

1.748635931s ago: executing program 2 (id=7363):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xb9, 0x3, 0xa01, 0x7, 0x7, {0xd, 0x1, 0x18, 0x7fff, 0x6, 0x3}, {0x6, 0x0, 0x40, 0x0, 0x0, 0x1ff}, 0x8, 0x6496921f, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x37, 0x2, 0x5, 0x2, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x2, 0x6, 0x3, 0x81, 0x5, 0x0, 0x401, 0x4, 0x8aad, 0x5585, 0x0, 0xffffb331, 0x2, 0xf2, 0x6, 0x1, 0x81, 0x7fffffff, 0x8, 0x7, 0xfff, 0x8, 0xde9a, 0x10, 0x6, 0x0, 0x8, 0x8, 0x6, 0x218, 0xf, 0x2, 0xd, 0x10001, 0x10, 0x1, 0x0, 0x7b9, 0xffffffff, 0x4, 0x8, 0x5, 0xb, 0xc3, 0x55df3b9f, 0x398, 0x401, 0x8, 0x2, 0x3, 0x8, 0x79ff, 0x8, 0x80000000, 0x9, 0x6a95, 0xf5f, 0x4, 0x7, 0x3, 0x4, 0x4, 0x8d6, 0x5, 0x401, 0xbdb2, 0xa, 0x1, 0x4, 0xe1, 0x3d2, 0xd4e9, 0x942, 0x6, 0x1000000, 0x7, 0x2, 0x7, 0x9, 0x27, 0x1, 0x2, 0xd6f4, 0x3, 0xfffffffd, 0x3, 0x235, 0x75d, 0x1, 0x0, 0x5, 0x97e00000, 0x3, 0x0, 0x1, 0xf780, 0x3, 0x10001, 0xf63, 0xd, 0x2, 0x4, 0x3, 0x1, 0x2, 0x3e, 0x80, 0x138, 0x6, 0x2, 0x8, 0xffff, 0x8, 0x5, 0x5, 0x5, 0x4b, 0x0, 0x800, 0x7ff, 0x2, 0x10, 0x7d76, 0xfffffff9, 0x7, 0x9, 0x6, 0x5, 0x81, 0x40563f31, 0x7fffffff, 0x5, 0x5, 0xe70, 0xd, 0x719, 0xd, 0x5, 0x5, 0xa, 0x6, 0x3, 0x0, 0x9, 0x800000, 0x22bb, 0x1, 0x7, 0xfbfc, 0x1ff, 0xad2, 0x1, 0x7, 0x400, 0x9, 0xfffffeff, 0x3ff, 0x0, 0x2, 0x6, 0xff, 0xf, 0x2, 0x8000, 0x4, 0x8, 0x4, 0x9, 0x4, 0xbdb, 0x5, 0x0, 0x2, 0x70000000, 0x8000, 0xffffff89, 0x4, 0x3a4b, 0x6, 0x8, 0x1, 0x1, 0x7aa8, 0x3, 0x1, 0x5e0, 0x7fffffff, 0x7fffffff, 0x9, 0xffffffff, 0xfffffff9, 0x3, 0x6, 0x9, 0x4, 0x2, 0x606193b0, 0x9, 0x2, 0x1, 0xcc6, 0x0, 0x81, 0x0, 0x6, 0x5, 0x6, 0x0, 0x9, 0x1, 0x3, 0x8001, 0xc, 0x40, 0xd062, 0x7f, 0xb, 0x0, 0x7, 0x8000, 0x9f5, 0xa, 0x900, 0xffffffff, 0x2724, 0x6, 0x3279, 0x7fffffff, 0x1, 0x2, 0x200, 0x3, 0xa66, 0x5, 0x7, 0x9, 0x7f, 0x99f, 0xdc, 0x9f, 0x3, 0xffff, 0x5, 0x80000000, 0x7ee, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x4, 0x9, 0x5, 0x1, 0x8, 0x0, 0x9, 0x5, 0x296, 0x5, 0x2, 0xe, 0x0, 0x1, 0x40, 0x4, 0xbf64, 0x8, 0x15e, 0x0, 0x94b, 0x2, 0x9, 0x1, 0x9, 0x7ff, 0x6, 0x5, 0x35af, 0x6, 0x6e, 0x2, 0x6, 0x6a9b0b88, 0xfffffff7, 0x1, 0x6, 0xdb, 0x1, 0x72, 0x1, 0x86, 0x2, 0x2, 0x2682, 0x1cac, 0x7ff, 0x8, 0xe64, 0x4, 0x5, 0x8, 0x20000, 0x7, 0x7, 0x2, 0x2, 0x0, 0x1a41, 0x8, 0xfffffffb, 0xfffffffd, 0x5, 0x4, 0xfffff231, 0x2, 0x5, 0x2, 0x5, 0x7, 0x8001, 0x7, 0x1608, 0x8000, 0x7fff, 0x6, 0x3, 0x9dd5, 0x7fffffff, 0x887, 0x4, 0x0, 0x4, 0x9, 0x87d, 0x8, 0x1, 0x74, 0x0, 0x0, 0x0, 0x2, 0xa, 0x1, 0x0, 0x7fffffff, 0xf1, 0x6, 0x3c75, 0x6, 0x8, 0x1, 0xb45, 0x800, 0x7, 0x3ff, 0x2, 0xa76, 0x2, 0x337e, 0x3000, 0x1, 0x1, 0x0, 0x7, 0x2, 0xd35, 0x5, 0xd, 0x2, 0x4, 0x8, 0x5, 0x10002000, 0xee, 0x8, 0x15d06edb, 0x7ff, 0x8, 0x57413365, 0x0, 0x7, 0x2, 0x9, 0x0, 0x9f9, 0x7, 0x7, 0x101, 0x7fffffff, 0x4945, 0x9, 0x5, 0x7, 0x3, 0x5, 0x5, 0x8a, 0x5, 0x9, 0xf, 0x2, 0xfffffffa, 0x47, 0x0, 0xfffffd0d, 0x9, 0xfffffff5, 0x7, 0x4afa, 0x85, 0x8, 0x0, 0x6d, 0x6, 0x8, 0x8d, 0x0, 0xba, 0x8, 0x8, 0x5, 0x4e1c, 0x2, 0x2, 0x2, 0xff, 0x718b, 0x7ff, 0x5b1, 0xf, 0x6, 0x9, 0x7fff, 0x7fff, 0x1, 0x40, 0x562d, 0x6e, 0x5, 0x2, 0x400, 0x1, 0x81, 0x7fff, 0x7, 0xcc, 0x2, 0x0, 0x9, 0xffff, 0x8, 0x3, 0x95, 0x1, 0x6, 0xffff, 0xda9, 0x10000, 0xd, 0x3, 0x4, 0x3d37fffa, 0x5, 0x2, 0x1, 0x6, 0x2, 0x40, 0x50890da4, 0x7, 0xcd64, 0x6, 0xce05, 0x9, 0x8, 0x10001, 0x64e, 0x2, 0x5, 0x9, 0x5, 0x9, 0x5153, 0x3, 0x87ec, 0x5, 0x9, 0x6, 0xe, 0x1, 0x1000, 0x1b2, 0x5, 0xf76, 0x8, 0x81f, 0xfffffffb, 0x2, 0xffffff80, 0x1, 0xe, 0x0, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x6c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x9ab}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5c}, {0x8, 0xb, 0x63}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x788d}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x22005810)

1.718420755s ago: executing program 3 (id=7364):
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @fastopen={0x22, 0xa, "b643f1bc5c4cc99e"}]}}}}}}}}, 0x0) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000017140197"], 0x20}}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b020000140000008500000083000000790900000000000055090100000009009500000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.645112647s ago: executing program 1 (id=7365):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r1 = epoll_create(0x7ff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x70bd27, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x3fff, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x34e8802, 0x7, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000002})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
sendto$inet6(r3, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000100)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/228, 0xe4, 0x0, &(0x7f0000000800)=""/192, 0xc0}, &(0x7f0000000780)=0x40)
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000200)={r7, r8/1000+10000}, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, 0x0, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fcdbdf250100000000000000014100000008001700"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x44)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20000000)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r10)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x44, r12, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0xc010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x7, &(0x7f00000007c0)=""/7, 0x40f00, 0xc, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.58483979s ago: executing program 3 (id=7366):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x800)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x1, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x16000}}}, 0x32)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x25}, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x2f, "04a6aaed25476b145c4a935fa54f323c1829a00700e5cd0516f25e0000794168f19253c24ec8da005f19a83852a3b3"}})
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fc}, 0xe)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2)
r4 = socket$inet6(0xa, 0x80002, 0x0)
unshare(0x400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x602000, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_emit_ethernet(0x46, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x1a071, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x3308, 0xa32, 0xfffb, 0x8, 0x8, 0x6, [0xe, 0xfb]}})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xfff2}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c)

1.451071193s ago: executing program 2 (id=7367):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async)
listen(r0, 0x5) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0xa}]}, 0x10) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) (async)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000080)={0x8, 'wg1\x00', {'lo\x00'}, 0x9})
bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg$unix(r7, &(0x7f0000002300)=[{{&(0x7f0000003600), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/94, 0x66}, {&(0x7f0000000800)=""/192, 0xc0}], 0x2, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000f40)=""/38, 0x26}, {&(0x7f0000000f80)=""/117, 0x75}, {&(0x7f0000001000)=""/153, 0x99}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x212, &(0x7f0000001100)}}], 0x5, 0x0, 0x0)
connect$netrom(r7, &(0x7f0000000000)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) (async)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)

1.309103334s ago: executing program 4 (id=7368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000500)="0482aeb79f5cc605f3f10192bf2813d8", 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0xc000)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x40000000})
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000010401020100004bfa3ea4000000000a080003400000000306000640000402000500010004000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2)

1.231186103s ago: executing program 2 (id=7369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="34a7c72d5690000000", @ANYRES64, @ANYRES8=0x0], 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x5c}}, 0x4040800)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$kcm(0x21, 0x2, 0xa)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.147634038s ago: executing program 4 (id=7370):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x2, @val=@tracing={0x0, 0x40}}, 0x20)

1.054268329s ago: executing program 0 (id=7371):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$tipc(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000600)="034d5cdd", 0x4}, {&(0x7f00000006c0)="b324d9f1", 0x4}], 0x2, 0x0, 0x0, 0x4000001}, 0x400c1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398add"], 0x1000f)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0901000158965433aaba1e2050"], 0x128}, 0x1)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1f, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x2}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40)
close(r9)
r11 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r11, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r12, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r11}, 0x20)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

991.531331ms ago: executing program 4 (id=7372):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002', @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2, r1}, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c)

437.200482ms ago: executing program 1 (id=7373):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

356.420896ms ago: executing program 3 (id=7374):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x58, r1, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x44042)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'vcan0\x00'})
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

355.909506ms ago: executing program 2 (id=7375):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50)
close(0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000099f30600000000000000000001000000ed06479e54ebff1e1c9562dccef6dc438e258ecf0a0ccadc7f946bd37f90159da89828698947977bc0aca432e6a0e48ecdfc820cb607f10af74b136c8a849cb534ada57051d530ca4d46c48accbbe3343bdde98e85f2db84d4b81f39956273a8dce10e8d9a0285d8343f08e91f43644e88b59f04053419420f3d721a1c4db2fc87ff22398878f1c690a8ffe03abdd0a47ccca024e1715ebd9d8605298730dc4805904030b6b63bab2c191f9abd8cdb10bf82b207"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc)
sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r6=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, 0xb, 0x8, 0x4, 0x0, 0x9, 0x200201, r9})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x0, 0x7, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x1f, 0xd8, [@broadcast, @multicast1, @broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x57, 0x3, {{0x1b, 0x4, 0x1, 0x3c, 0x6c, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x1f, 0x55, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @multicast1, @private=0xa010101, @multicast2, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0x9, [{@remote, 0x9}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0xa, [{@loopback, 0x1}, {@empty, 0x10001}, {@multicast2, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x1}, {@private=0xa010100, 0x4}]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000580)}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'vlan0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x8001, 0x9, {{0x1f, 0x4, 0x3, 0x28, 0x7c, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x50, 0x3, [{0x1, 0x10, "ab14501c00fc2ff03acaae0cf1e4"}, {0x0, 0x3, ','}, {0x7, 0x12, "7dda80118276d31b828d3385b63c1f5a"}, {0x2, 0x6, "eda728fc"}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0xa, "787aa2bb37ddf23c"}, {0x2, 0x11, "92a6073be993448f0fdd6b5624e210"}]}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x9, [{@private=0xa010100, 0x9}, {@empty, 0x3ff}]}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000840)={'syztnl0\x00', r10, 0x8000, 0x700, 0x1ecb800, 0x1ff, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x1b, 0x4, 0x0, @local, @loopback, {[@lsrr={0x83, 0xb, 0x34, [@multicast2, @multicast2]}]}}}}})
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)

339.367047ms ago: executing program 1 (id=7376):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000800)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sec_ctx={0x1, 0x18, 0x4, 0xf8}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080087000000000073112300000000008510000002000000b7000000000000009500c2000000000095000012000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @multicast1}}, [0x7fffffff, 0xfffffffffffffff9, 0x9, 0x7, 0x8, 0x3, 0x11b, 0x4, 0x5, 0x1fe, 0xded, 0x8, 0x1, 0x100, 0x2]}, &(0x7f0000000280)=0x100)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r5=>0x0, @broadcast, @local}, &(0x7f0000000100)=0xc)
bind$packet(r1, &(0x7f0000000140)={0x11, 0x8, r5, 0x1, 0x0, 0x6, @random="526ff0965e92"}, 0x14)

185.900222ms ago: executing program 1 (id=7377):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x0, 0x65, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8}, {0x3, 0xc}, {0x6, 0xb}}, [@TCA_RATE={0x0, 0x5, {0x40, 0x3}}]}, 0x4}, 0x1, 0x0, 0x0, 0x10}, 0x20004041)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25df9bfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x200c4885)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18002500a7eb3042099cf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e20, 0x7, @empty, 0x200}, 0x1c)
listen(r8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='\x00', 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1)

112.821693ms ago: executing program 0 (id=7378):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@empty, @in=@remote, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x500, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x83, 0x4}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d4, 0x32}, 0x0, @in6=@local, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in6=@mcast1, 0x3505}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x3c}, 0x2, @in=@remote, 0x10, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x1fc}}, 0x4080)

101.815192ms ago: executing program 2 (id=7379):
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08002800000000002f907864010102ac1414aa40018807", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01000090780000"], 0x0) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)=ANY=[@ANYBLOB="20000000130001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e70402c64fcf0700e4dd6ce7ef6def70e852fbb8f9128960b4aba99f76d2e6cdc1e405c115ca7552a95c7e052235421896"], 0x20}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000053c0)=""/244, 0xf4}, {&(0x7f00000054c0)=""/187, 0xbb}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000005740)=""/222, 0xde}, {&(0x7f0000000080)=""/67, 0x43}], 0x9}, 0xfffffffc}], 0x7, 0x2120, 0x0) (async, rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 64)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000d40)={r3, &(0x7f0000000c40)='GPL\x00', 0x100, &(0x7f0000000c80)={@align=0xab9, {0x0, 0x2, 0x80000000, 0x8}}, 0x300000, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8})
accept4(r0, 0x0, &(0x7f0000000e00), 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008435593048f6a19d667131aaa530a76e1442c554455b82595f056253a9205ea5020000496b30d2c23d0a43b30822a89c2079a944025fe7ce4e6b392d45324790cb84fe3d9bc0f231857eb665b22eb704e1"], 0x48) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (rerun: 32)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x4) (async)
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x2b, 0x1}) (async, rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) (rerun: 64)

4.62817ms ago: executing program 4 (id=7380):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a40000000100000003157a452a25ac81d8ed595c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025cccade003c0db798262f3d40fad9", 0xfffffffffffffe4a}], 0x1}, 0x0) (async)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
r4 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0x0, 0xc}, {0xfffffffffffffffe, 0x200000000, 0x2, 0x20000a0de, 0x40000000000001, 0x4, 0x100200000003, 0x9}, {0x9, 0x0, 0x9, 0xfffffffffffffffc}, 0x4, 0x0, 0x1}, {{@in=@private=0xa010105, 0x4d3, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x2b, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c00000040001901feffffff00000000017c00000c004280080009008f3492280c00018004000600800a0000d2854e833094b76e70f2bdce8805dd2bc9e7d24cc289f62414f05d1e85995d8e32722ba4bb5e84731741afa7ec36dca98e5e3cef92a94374160dbed18239cf6b3a0fa97bc636cce25a2de806b50254690400000031270a80ea7c13cbc7500479c808a7e91f17fc1b689a77e73502710358c4e6015f3257b6831f77663929706f7ba61d71f188e1c3dce0ef79784b3b229a92003c1bab0a3313b2a8fd981d14edee9e05e251fb14b9b10d065f809e7943fbb966a9a11fe3431bec90c276eebf62d4071d04750f1f776b52bfdf0d07f41ef42c5595f8d686644136ceb3bb7c1d6c4471628f1257a786555d591d7c6777ad43"], 0x2c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async)
sendmmsg$inet6(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x40) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000004c0)={<r6=>0x0}, &(0x7f0000000500)=0x10) (async)
r7 = socket(0x10, 0x803, 0x0)
write(r7, &(0x7f0000000840)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b0000000000087aafc6121799e62e662e2a887dfad964f1440862231663ceaf2cf2e8feaa5fd0ae74f6ef4a714b893d8f56e6900e83c6b387e74a2f7dc616b49f33022c41409f0910d1b3ed838b82afe2a0dbb9adc03c97bb57bdcbe4807ffce3cc901e0345becb477e756f8172ee26b34fd5a40154f7aaca4b3dbd8b0f1361ae0813621a7293728c571039fb29036068fd1355fd3f80bdcc52bbb5a772d7d893a5b23750000000000657871df925f0c88cb8b3ae5bee4386e6fd424f8c37fc592c638e369ff29f5ac2633f009e476550089e31508158fd1c864838de48d5813037f56bf5221e09bdc1197b0bd4b914d864da71ab80b623411fc453d93f46c8e1a768f6b50fab12e9203b96caa9067b44fd7aecee86b5618a27bccea6d2fa19c8e943d219e9c6e9822160414f159203019630709df662040542152336ce1183c4d7491b6a45925bc2ee5d510", 0x16c) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async)
setsockopt$RDS_RECVERR(r7, 0x114, 0x3f, &(0x7f0000000000)=0x3, 0x4)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x4000010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0300002e0009002fbd70000000000004000000480311802e7984"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10)
ioctl(0xffffffffffffffff, 0xfffffffc, 0x0)

4.320633ms ago: executing program 3 (id=7381):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf251a00000008000300", @ANYRES32=<r7=>r6, @ANYBLOB='\f\x00.'], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc01c)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB, @ANYRESOCT=r2, @ANYRESDEC=r6], 0xa0}, 0x1, 0x0, 0x0, 0x20040090}, 0x4044041)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
unshare(0x2040400)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200000004"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000200), &(0x7f0000000140)=r11}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r10, 0x0, &(0x7f00000007c0)=""/168}, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x2, 0x70bd27, 0xfffffffd, {0x60, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000000906010200000200000400000199057ebd0b0c789d3e63df0000030900020073797a3100000000050001000700000028fc0f0007090000000000000040e00000010c0014806170bd84c02689119cfb663f5e68bff200891be91bbca0bc1ea45c42c86c625ae06f7987cfe1bc8585f53467c4c0ee7446fec06248e2282da4192d0b5299571e3dee071219133e80b72c30195988218ecd509130d16c0eeb3ceb9747dd4efef4988faadf81e6ca2cd8b05a5039608607ce7eaee54e9476be7fa7232410ad72d97eebc202bd02dc4363ca3602e8d8e3f955f1adb1f64e25b8185c50e9"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES8=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3", @ANYRES32=r7, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7a)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
socket(0x22, 0x6, 0x5)

0s ago: executing program 0 (id=7382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, &(0x7f00000002c0), &(0x7f0000000240), 0x5, r2}, 0x38)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fadbdf46070000002800018014000400fe80000000000000000000000000002208000700", @ANYRES32=0x0, @ANYBLOB="060001000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000850)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, 0x0)
r7 = socket$inet(0x2, 0x5, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045070028006400000402907800000000e000000211009078e00000020001000108000000000000001b1491d72cb069285d743d500a680b6631957aec0619e6dc132ce8d6972f62bd827691978a67a77c47be18ec1847a6fd1da414d1106958681d8026b96d71738e7a3db2393c"], 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4, 0x10, 0x2}, 0xffffffffffffff3c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}]}, &(0x7f0000000140)=0x10)
getpeername(r9, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r10], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0xffffffc2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000002}, 0x50)

kernel console output (not intermixed with test programs):

2.6129'.
[  838.717510][T29757] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6129'.
[  838.738604][T29757] netlink: 'syz.2.6129': attribute type 9 has an invalid length.
[  838.747208][T29757] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6129'.
[  838.756605][T29757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6129'.
[  838.905845][T29502] veth0_vlan: entered promiscuous mode
[  838.920678][T29502] veth1_vlan: entered promiscuous mode
[  838.964797][T29502] veth0_macvtap: entered promiscuous mode
[  838.987936][T29502] veth1_macvtap: entered promiscuous mode
[  839.020591][T29502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.037234][T29762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'.
[  839.046357][T29502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.060643][T27800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.074701][T27800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.092752][ T5837] Bluetooth: hci5: command tx timeout
[  839.105537][T27800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.114933][T27800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.287812][T27795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.306494][T27795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.356536][T27800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.367812][T27800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.430206][T29780] netlink: 'syz.0.6138': attribute type 4 has an invalid length.
[  839.446647][T29780] netlink: 'syz.0.6138': attribute type 4 has an invalid length.
[  839.465921][T29780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.488560][T29780] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6138'.
[  839.553727][T29786] xt_hashlimit: size too large, truncated to 1048576
[  839.570667][T29785] C: renamed from team_slave_0 (while UP)
[  839.585379][T29786] xt_hashlimit: max too large, truncated to 1048576
[  839.596209][T29785] netlink: 'syz.4.6061': attribute type 4 has an invalid length.
[  839.609410][T29785] netlink: 'syz.4.6061': attribute type 1 has an invalid length.
[  839.617968][T29785] netlink: 'syz.4.6061': attribute type 2 has an invalid length.
[  839.626360][T29785] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6061'.
[  839.636731][T29785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  839.847489][T29797] netlink: 'syz.4.6143': attribute type 1 has an invalid length.
[  839.864784][T29797] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6143'.
[  840.029198][T17603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  840.038718][T17603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  840.048868][T17603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  840.064645][T17603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  840.073096][T17603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  840.187576][T29801] lo speed is unknown, defaulting to 1000
[  840.207158][T29801] lo speed is unknown, defaulting to 1000
[  840.474818][T29819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6147'.
[  840.644989][T29819] veth1_macvtap: renamed from macvlan0
[  840.678264][T29828] netlink: 'syz.1.6149': attribute type 1 has an invalid length.
[  840.710748][T29829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6151'.
[  840.755019][T29831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6151'.
[  840.822146][T29828] bond7: entered promiscuous mode
[  840.841578][T29828] bond7: entered allmulticast mode
[  840.849210][T29828] 8021q: adding VLAN 0 to HW filter on device bond7
[  840.857643][T29801] wlan1 speed is unknown, defaulting to 1000
[  840.881871][T29830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6149'.
[  841.044866][T29845] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6155'.
[  841.138277][T29853] netlink: 'syz.2.6156': attribute type 21 has an invalid length.
[  841.174423][ T5837] Bluetooth: hci5: command tx timeout
[  841.212016][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6156'.
[  841.485253][T29801] chnl_net:caif_netlink_parms(): no params data found
[  841.754760][T29801] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.776349][T29801] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.792144][T29801] bridge_slave_0: entered allmulticast mode
[  841.811706][T29801] bridge_slave_0: entered promiscuous mode
[  841.882949][T29801] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.890403][T29801] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.908275][T29801] bridge_slave_1: entered allmulticast mode
[  841.921597][T29801] bridge_slave_1: entered promiscuous mode
[  841.988453][T29880] macvlan0: entered allmulticast mode
[  842.078315][T29801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  842.108114][T29801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  842.133494][ T5837] Bluetooth: hci3: command tx timeout
[  842.180898][T29801] team0: Port device team_slave_0 added
[  842.200586][T29801] team0: Port device team_slave_1 added
[  842.268955][T29890] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  842.286276][T29801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  842.304476][T29801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  842.354329][T29801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.387476][T29801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.434300][T29801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  842.552438][T29801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.691222][T29801] hsr_slave_0: entered promiscuous mode
[  842.729648][T29801] hsr_slave_1: entered promiscuous mode
[  842.759620][T29801] debugfs: 'hsr0' already exists in 'hsr'
[  842.790077][T29801] Cannot create hsr debugfs directory
[  843.366991][T29801] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.481428][T29801] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.604619][T29801] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.694202][T29801] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.729407][T29936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  843.784154][T29935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  844.111785][T29951] __nla_validate_parse: 4 callbacks suppressed
[  844.111807][T29951] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6172'.
[  844.154799][T29801] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  844.203912][T29801] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  844.213550][ T5837] Bluetooth: hci3: command tx timeout
[  844.263137][T29801] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  844.317339][T29801] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  844.714884][T29801] 8021q: adding VLAN 0 to HW filter on device bond0
[  844.771859][T29982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6180'.
[  844.827023][T29801] 8021q: adding VLAN 0 to HW filter on device team0
[  844.884208][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.891415][ T9220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  844.914248][T29986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6179'.
[  844.967183][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.974392][ T9220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.730860][T30016] netlink: 558 bytes leftover after parsing attributes in process `syz.4.6187'.
[  845.822758][T29801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  846.019475][T30028] lo speed is unknown, defaulting to 1000
[  846.028533][T29801] veth0_vlan: entered promiscuous mode
[  846.061807][T30027] netlink: 'syz.4.6191': attribute type 1 has an invalid length.
[  846.086547][T30028] lo speed is unknown, defaulting to 1000
[  846.108306][T29801] veth1_vlan: entered promiscuous mode
[  846.142988][T30032] syz.3.6193: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  846.163266][T30032] CPU: 0 UID: 0 PID: 30032 Comm: syz.3.6193 Not tainted syzkaller #0 PREEMPT(full) 
[  846.163295][T30032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  846.163309][T30032] Call Trace:
[  846.163318][T30032]  <TASK>
[  846.163328][T30032]  dump_stack_lvl+0xe8/0x150
[  846.163364][T30032]  warn_alloc+0x249/0x340
[  846.163391][T30032]  ? stack_trace_save+0xa9/0x100
[  846.163418][T30032]  ? __pfx_warn_alloc+0x10/0x10
[  846.163460][T30032]  ? kasan_save_track+0x4f/0x80
[  846.163482][T30032]  ? kasan_save_track+0x3e/0x80
[  846.163503][T30032]  ? __kasan_kmalloc+0x93/0xb0
[  846.163526][T30032]  ? __kmalloc_cache_noprof+0x31c/0x660
[  846.163550][T30032]  ? xskq_create+0x56/0x170
[  846.163578][T30032]  ? xsk_setsockopt+0x54c/0x990
[  846.163602][T30032]  ? do_sock_setsockopt+0x17c/0x1b0
[  846.163635][T30032]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  846.163668][T30032]  ? do_syscall_64+0x14d/0xf80
[  846.163704][T30032]  __vmalloc_node_range_noprof+0x132/0x1730
[  846.163765][T30032]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  846.163797][T30032]  ? __kasan_kmalloc+0x93/0xb0
[  846.163830][T30032]  vmalloc_user_noprof+0xad/0xe0
[  846.163865][T30032]  ? xskq_create+0xbf/0x170
[  846.163894][T30032]  xskq_create+0xbf/0x170
[  846.163925][T30032]  xsk_init_queue+0x8a/0xe0
[  846.163955][T30032]  xsk_setsockopt+0x54c/0x990
[  846.163984][T30032]  ? __pfx_xsk_setsockopt+0x10/0x10
[  846.164010][T30032]  ? __pfx_aa_sk_perm+0x10/0x10
[  846.164040][T30032]  ? aa_sock_opt_perm+0xff/0x1a0
[  846.164072][T30032]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  846.164096][T30032]  ? __pfx_xsk_setsockopt+0x10/0x10
[  846.164124][T30032]  do_sock_setsockopt+0x17c/0x1b0
[  846.164162][T30032]  __x64_sys_setsockopt+0x13d/0x1b0
[  846.164201][T30032]  do_syscall_64+0x14d/0xf80
[  846.164231][T30032]  ? trace_irq_disable+0x3b/0x150
[  846.164261][T30032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.164283][T30032]  ? clear_bhb_loop+0x40/0x90
[  846.164310][T30032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.164332][T30032] RIP: 0033:0x7ffa65f9c799
[  846.164352][T30032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.164370][T30032] RSP: 002b:00007ffa66e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  846.164393][T30032] RAX: ffffffffffffffda RBX: 00007ffa66215fa0 RCX: 00007ffa65f9c799
[  846.164409][T30032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000024
[  846.164422][T30032] RBP: 00007ffa66032c99 R08: 0000000000000004 R09: 0000000000000000
[  846.164436][T30032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  846.164457][T30032] R13: 00007ffa66216038 R14: 00007ffa66215fa0 R15: 00007ffe63bee3d8
[  846.164493][T30032]  </TASK>
[  846.164785][T30032] Mem-Info:
[  846.293423][ T5837] Bluetooth: hci3: command tx timeout
[  846.474415][T30032] active_anon:9216 inactive_anon:0 isolated_anon:0
[  846.474415][T30032]  active_file:3314 inactive_file:40238 isolated_file:0
[  846.474415][T30032]  unevictable:768 dirty:49 writeback:0
[  846.474415][T30032]  slab_reclaimable:13102 slab_unreclaimable:116071
[  846.474415][T30032]  mapped:29841 shmem:1371 pagetables:1251
[  846.474415][T30032]  sec_pagetables:0 bounce:0
[  846.474415][T30032]  kernel_misc_reclaimable:0
[  846.474415][T30032]  free:1250901 free_pcp:32381 free_cma:0
[  846.588453][T30039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6192'.
[  846.629877][T30032] Node 0 active_anon:36864kB inactive_anon:0kB active_file:13256kB inactive_file:160748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82300kB dirty:196kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15008kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  846.675007][T29801] veth0_macvtap: entered promiscuous mode
[  846.720810][T29801] veth1_macvtap: entered promiscuous mode
[  846.734440][T30032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  846.799069][T29801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  846.814506][T30032] Node 0 DMA free:11100kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:68kB free_cma:0kB
[  846.851595][T29801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.871016][T30044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6194'.
[  846.887502][T30032] lowmem_reserve[]: 0 2492 2493 2493 2493
[  846.898417][T30032] Node 0 DMA32 free:1301560kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37116kB inactive_anon:0kB active_file:13256kB inactive_file:160748kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:73992kB local_pcp:53796kB free_cma:0kB
[  846.941428][T30032] lowmem_reserve[]: 0 0 0 0 0
[  846.976054][T27800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.985898][T27800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.006555][T30032] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  847.056854][T27800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.067051][T27800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.119676][T30032] lowmem_reserve[]: 0 0 0 0 0
[  847.144986][T30032] Node 1 Normal free:3735928kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56496kB local_pcp:28180kB free_cma:0kB
[  847.254163][T30032] lowmem_reserve[]: 0 0 0 0 0
[  847.259298][T30032] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 11100kB
[  847.296897][T27796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.315239][T27796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.344559][T30032] Node 0 DMA32: 7638*4kB (UME) 6401*8kB (UME) 4307*16kB (UME) 726*32kB (UME) 438*64kB (UME) 545*128kB (UME) 569*256kB (UM) 451*512kB (UME) 326*1024kB (UM) 158*2048kB (UM) 0*4096kB = 1305680kB
[  847.366180][T30028] wlan1 speed is unknown, defaulting to 1000
[  847.426529][T30032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  847.469984][T30032] Node 1 Normal: 5*4kB (U) 6*8kB (UM) 13*16kB (UM) 2*32kB (UM) 7*64kB (UM) 7*128kB (UM) 8*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 911*4096kB (UM) = 3752084kB
[  847.510371][T30032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  847.530653][T30032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  847.549105][T27801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.562087][T30059] netlink: 784 bytes leftover after parsing attributes in process `syz.4.6198'.
[  847.578946][T27801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.583166][T30032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  847.641938][T30032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  847.716818][T30032] 44920 total pagecache pages
[  847.721575][T30032] 1 pages in swap cache
[  847.740983][T30032] Free swap  = 124480kB
[  847.750038][T30032] Total swap = 124996kB
[  847.759233][T30032] 2097051 pages RAM
[  847.769340][T30032] 0 pages HighMem/MovableOnly
[  847.782680][T30032] 427072 pages reserved
[  847.786868][T30032] 0 pages cma reserved
[  847.804818][T30063] bond2: option arp_all_targets: invalid value (129)
[  847.809873][T30066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6200'.
[  847.846543][T30063] bond2 (unregistering): Released all slaves
[  848.373471][T30083] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.381046][T30083] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.441513][T17603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  848.444445][T30083] bridge0: entered allmulticast mode
[  848.454634][T17603] Bluetooth: hci3: command tx timeout
[  848.461459][T17603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  848.470261][T17603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  848.479656][T17603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  848.489575][T17603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  848.540903][T30089] dvmrp1: entered allmulticast mode
[  848.559919][T30089] dvmrp1: left allmulticast mode
[  848.602074][T30083] bridge_slave_1: left allmulticast mode
[  848.621828][T30083] bridge_slave_1: left promiscuous mode
[  848.629099][T30083] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.657326][T30083] bridge_slave_0: left allmulticast mode
[  848.665139][T30083] bridge_slave_0: left promiscuous mode
[  848.670956][T30083] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.807999][T30084] lo speed is unknown, defaulting to 1000
[  848.824384][T30084] lo speed is unknown, defaulting to 1000
[  849.017415][T30107] macsec1: entered promiscuous mode
[  849.032911][T30107] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  849.046734][T30111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6213'.
[  849.062556][T30113] netlink: 'syz.2.6211': attribute type 1 has an invalid length.
[  849.370829][T30128] lo speed is unknown, defaulting to 1000
[  849.478344][T30128] lo speed is unknown, defaulting to 1000
[  849.487574][T30084] wlan1 speed is unknown, defaulting to 1000
[  849.525984][T30137] lo speed is unknown, defaulting to 1000
[  849.859832][T30084] chnl_net:caif_netlink_parms(): no params data found
[  849.918355][T30151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6219'.
[  850.017420][T30137] lo speed is unknown, defaulting to 1000
[  850.023424][T30128] wlan1 speed is unknown, defaulting to 1000
[  850.157082][T30084] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.171749][T30084] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.210154][T30084] bridge_slave_0: entered allmulticast mode
[  850.245595][T30084] bridge_slave_0: entered promiscuous mode
[  850.301850][T30084] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.319779][T30084] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.327105][T30084] bridge_slave_1: entered allmulticast mode
[  850.342822][T30084] bridge_slave_1: entered promiscuous mode
[  850.431514][T30159] syzkaller0: entered promiscuous mode
[  850.439792][T30159] syzkaller0: entered allmulticast mode
[  850.534387][ T5837] Bluetooth: hci2: command tx timeout
[  850.556516][T30084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  850.630461][T30137] wlan1 speed is unknown, defaulting to 1000
[  850.646037][T30084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  851.028830][T30180] sctp: [Deprecated]: syz.4.6225 (pid 30180) Use of int in max_burst socket option.
[  851.028830][T30180] Use struct sctp_assoc_value instead
[  851.045512][T30180] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6225'.
[  852.201279][T30084] team0: Port device team_slave_0 added
[  852.238445][T30084] team0: Port device team_slave_1 added
[  852.259716][T30187] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6227'.
[  852.396410][T30084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  852.411345][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.460319][T30084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  852.529742][T30084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  852.539856][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.566188][T30084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  852.614013][ T5837] Bluetooth: hci2: command tx timeout
[  852.694301][T30188] syzkaller0: entered promiscuous mode
[  852.699831][T30188] syzkaller0: entered allmulticast mode
[  852.709811][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'.
[  852.762343][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'.
[  852.824162][T30084] hsr_slave_0: entered promiscuous mode
[  852.866816][T30084] hsr_slave_1: entered promiscuous mode
[  852.883431][T30084] debugfs: 'hsr0' already exists in 'hsr'
[  852.889215][T30084] Cannot create hsr debugfs directory
[  852.903396][T30202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6230'.
[  852.985991][T30205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6231'.
[  854.467828][T30207] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  854.479031][T30207] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  854.692638][ T5837] Bluetooth: hci2: command tx timeout
[  854.892934][T30236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6240'.
[  855.000936][T30246] lo speed is unknown, defaulting to 1000
[  855.040988][T30246] lo speed is unknown, defaulting to 1000
[  855.345965][T30260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6244'.
[  855.358531][T30084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  855.376119][T30084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  855.417744][T30084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  855.454351][T30084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  855.622042][T30246] wlan1 speed is unknown, defaulting to 1000
[  855.745679][T30084] 8021q: adding VLAN 0 to HW filter on device bond0
[  855.798673][T30084] 8021q: adding VLAN 0 to HW filter on device team0
[  855.823755][T30280] gretap0: entered promiscuous mode
[  855.830638][T30280] gretap0: left promiscuous mode
[  855.946866][T27801] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.954298][T27801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.016483][T27801] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.023719][T27801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.772956][ T5837] Bluetooth: hci2: command tx timeout
[  856.857878][T30084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  856.999495][T30290] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  857.020207][T30290] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  857.448956][T30290] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  857.481590][T30290] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  857.548413][T30334] lo speed is unknown, defaulting to 1000
[  857.586690][T30334] lo speed is unknown, defaulting to 1000
[  857.620689][T30290] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  857.648742][T30084] veth0_vlan: entered promiscuous mode
[  857.662821][T30290] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  857.690331][T30084] veth1_vlan: entered promiscuous mode
[  857.728764][T30356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6262'.
[  857.738488][T30355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6262'.
[  857.918666][T30290] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  857.953203][T30290] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  858.034858][T30084] veth0_macvtap: entered promiscuous mode
[  858.060933][T30084] veth1_macvtap: entered promiscuous mode
[  858.170417][T30084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  858.218716][T30084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  858.304572][ T9220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.342432][ T9220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.384045][ T9220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.399236][T30373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6265'.
[  858.412573][ T9220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  858.440358][T30376] netlink: 'syz.4.6264': attribute type 1 has an invalid length.
[  858.557064][T30334] wlan1 speed is unknown, defaulting to 1000
[  858.871185][T30385] macvtap0: entered promiscuous mode
[  858.877231][T30385] macvtap0: entered allmulticast mode
[  858.883311][T30388] netlink: 644 bytes leftover after parsing attributes in process `syz.4.6268'.
[  858.887326][T30385] veth0_macvtap: entered allmulticast mode
[  858.920375][T30391] xt_TCPMSS: Only works on TCP SYN packets
[  858.987412][T30385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'.
[  858.997127][T27795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.010801][T27795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.197346][T27795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.213725][T27795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.362047][T30402] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6270'.
[  859.837914][T30422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6275'.
[  859.926116][T30421] lo speed is unknown, defaulting to 1000
[  859.937072][T30421] lo speed is unknown, defaulting to 1000
[  859.943520][T30424] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  860.140150][T30429] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  860.452256][T30451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6282'.
[  860.637523][T30461] xt_hashlimit: overflow, rate too high: 0
[  860.666392][T30421] wlan1 speed is unknown, defaulting to 1000
[  860.701615][T30461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6284'.
[  860.763069][T30461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6284'.
[  860.772107][T27801] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  860.795176][T27801] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  860.832785][T30465] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6284'.
[  860.885553][T30468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6286'.
[  860.885629][T30465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  860.949256][T30465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  860.980422][T30465] bond0 (unregistering): Released all slaves
[  861.000178][T27801] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  861.033670][T30477] netlink: 'syz.3.6287': attribute type 1 has an invalid length.
[  861.075319][T27801] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  861.167706][T30475] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  861.281470][T30481] lo speed is unknown, defaulting to 1000
[  861.330176][T30484] netlink: 'syz.0.6290': attribute type 10 has an invalid length.
[  861.358432][T30484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6290'.
[  861.388978][T30481] lo speed is unknown, defaulting to 1000
[  861.423958][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'.
[  861.434885][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'.
[  861.584350][T30498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6294'.
[  861.744295][T30503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6295'.
[  861.882820][T30481] wlan1 speed is unknown, defaulting to 1000
[  862.273218][T30522] lo speed is unknown, defaulting to 1000
[  862.302071][T30522] lo speed is unknown, defaulting to 1000
[  862.787290][T30547] IPv6: Can't replace route, no match found
[  863.000123][T30522] wlan1 speed is unknown, defaulting to 1000
[  863.619416][T30588] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  863.818253][T30586] lo: entered allmulticast mode
[  863.856648][T30586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  863.918443][T30594] netlink: 'syz.0.6322': attribute type 27 has an invalid length.
[  864.099250][T30594] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.106997][T30594] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.476535][T17603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  864.494764][T17603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  864.503383][T17603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  864.511437][T17603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  864.520990][T17603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  864.572866][T30594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  864.628447][T30594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  864.729849][T30594] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  864.738494][T30594] macsec1: left promiscuous mode
[  864.780422][T30599] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.789015][T30599] 8021q: adding VLAN 0 to HW filter on device team0
[  864.801670][T30599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  864.894430][T30600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  864.919928][T27796] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  864.968930][T30609] team_slave_1: Caught tx_queue_len zero misconfig
[  864.995453][T27796] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.004730][T27796] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.029485][T30602] lo speed is unknown, defaulting to 1000
[  865.055343][T27796] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.065832][T30602] lo speed is unknown, defaulting to 1000
[  865.071614][T30604] lo speed is unknown, defaulting to 1000
[  865.103223][T30607] lo speed is unknown, defaulting to 1000
[  865.124776][T30611] netlink: 'syz.0.6326': attribute type 13 has an invalid length.
[  865.133257][T30611] netlink: 'syz.0.6326': attribute type 17 has an invalid length.
[  865.206543][T30611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  865.335022][T30613] nbd4: detected capacity change from 0 to 63
[  865.346169][T30615] block nbd4: NBD_DISCONNECT
[  865.372429][T30615] block nbd4: Disconnected due to user request.
[  865.390884][T30602] wlan1 speed is unknown, defaulting to 1000
[  865.397675][T30615] block nbd4: shutting down sockets
[  865.397929][T30604] lo speed is unknown, defaulting to 1000
[  865.431037][    C0] blk_print_req_error: 138 callbacks suppressed
[  865.431057][    C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.446926][    C0] buffer_io_error: 138 callbacks suppressed
[  865.446942][    C0] Buffer I/O error on dev nbd4, logical block 0, async page read
[  865.465904][    C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.475486][    C0] Buffer I/O error on dev nbd4, logical block 1, async page read
[  865.483381][    C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.492908][    C0] Buffer I/O error on dev nbd4, logical block 2, async page read
[  865.500743][    C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.510288][    C0] Buffer I/O error on dev nbd4, logical block 3, async page read
[  865.519902][T30383] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.529553][T30383] Buffer I/O error on dev nbd4, logical block 0, async page read
[  865.544166][T30383] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.582099][T30383] Buffer I/O error on dev nbd4, logical block 1, async page read
[  865.601482][T30383] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.616618][T30383] Buffer I/O error on dev nbd4, logical block 2, async page read
[  865.625240][T30383] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.635118][T30383] Buffer I/O error on dev nbd4, logical block 3, async page read
[  865.663912][T30383] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.686035][T30383] Buffer I/O error on dev nbd4, logical block 0, async page read
[  865.724008][T30383] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  865.740475][T30383] Buffer I/O error on dev nbd4, logical block 1, async page read
[  865.750500][T30383] ldm_validate_partition_table(): Disk read failed.
[  865.760315][T30383] Dev nbd4: unable to read RDB block 0
[  865.766713][T30383]  nbd4: unable to read partition table
[  865.798575][T30383] ldm_validate_partition_table(): Disk read failed.
[  865.823060][T30383] Dev nbd4: unable to read RDB block 0
[  865.833526][T30383]  nbd4: unable to read partition table
[  866.003121][T30607] lo speed is unknown, defaulting to 1000
[  866.041283][T30627] __nla_validate_parse: 15 callbacks suppressed
[  866.041304][T30627] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6333'.
[  866.382928][T30641] netlink: 'syz.0.6337': attribute type 2 has an invalid length.
[  866.401224][T30607] wlan1 speed is unknown, defaulting to 1000
[  866.505662][T30604] wlan1 speed is unknown, defaulting to 1000
[  866.613265][T17603] Bluetooth: hci4: command tx timeout
[  867.388772][T30643] syzkaller0: entered promiscuous mode
[  867.394399][T30643] syzkaller0: entered allmulticast mode
[  867.660320][T30650] syzkaller0: entered promiscuous mode
[  867.668893][T30650] syzkaller0: entered allmulticast mode
[  867.889119][T30604] chnl_net:caif_netlink_parms(): no params data found
[  867.982029][T30666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6344'.
[  868.090223][T30604] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.098174][T30604] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.105712][T30604] bridge_slave_0: entered allmulticast mode
[  868.114159][T30604] bridge_slave_0: entered promiscuous mode
[  868.124481][T30604] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.131750][T30604] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.139554][T30604] bridge_slave_1: entered allmulticast mode
[  868.147698][T30604] bridge_slave_1: entered promiscuous mode
[  868.189512][T30604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.205287][T30604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.233516][T30678] netlink: 'syz.1.6347': attribute type 2 has an invalid length.
[  868.289958][T30604] team0: Port device team_slave_0 added
[  868.305617][T30681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6348'.
[  868.306319][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'.
[  868.331400][T30604] team0: Port device team_slave_1 added
[  868.401888][T30604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.449889][T30604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.513051][T30604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.553549][T30604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.572082][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6352'.
[  868.581131][T30604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.581165][T30604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.695129][T17603] Bluetooth: hci4: command tx timeout
[  868.866484][T30604] hsr_slave_0: entered promiscuous mode
[  868.895983][T30604] hsr_slave_1: entered promiscuous mode
[  868.902862][T30604] debugfs: 'hsr0' already exists in 'hsr'
[  868.908629][T30604] Cannot create hsr debugfs directory
[  868.951701][T30710] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6356'.
[  869.095010][T27801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.104158][T27801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.139341][T30718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.160482][T30720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.218836][T30721] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6358'.
[  869.267487][T30719] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6358'.
[  869.379320][T30604] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.392708][T30604] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  869.490339][T30604] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.534909][T30604] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  869.657225][T30604] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.733273][T30604] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  869.925416][T30604] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.937480][T30604] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  870.341636][T30604] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  870.422378][T30604] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  870.445404][T30738] lo speed is unknown, defaulting to 1000
[  870.451266][T30604] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  870.473926][T30604] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  870.495930][T30738] lo speed is unknown, defaulting to 1000
[  870.767036][T30604] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.782652][T17603] Bluetooth: hci4: command tx timeout
[  870.848910][T30604] 8021q: adding VLAN 0 to HW filter on device team0
[  870.880144][T27796] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.887495][T27796] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.958106][T30738] wlan1 speed is unknown, defaulting to 1000
[  870.977174][T27800] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.984390][T27800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  871.227974][T30771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6374'.
[  871.797169][T30789] netlink: 'syz.1.6378': attribute type 58 has an invalid length.
[  871.805621][T30789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6378'.
[  871.970182][T30604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  871.999877][T30795] atomic_op ffff88802a4d2998 conn xmit_atomic 0000000000000000
[  872.043047][T30797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6382'.
[  872.053427][T30797] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6382'.
[  872.110486][T30604] veth0_vlan: entered promiscuous mode
[  872.136582][T30604] veth1_vlan: entered promiscuous mode
[  872.181654][T30604] veth0_macvtap: entered promiscuous mode
[  872.196746][T30799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6382'.
[  872.575006][T30814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6386'.
[  872.679182][T30810] wg1: entered promiscuous mode
[  872.709757][T30810] wg1: entered allmulticast mode
[  872.726488][T30604] veth1_macvtap: entered promiscuous mode
[  872.788704][T30604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  872.817644][T30604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.862436][T17603] Bluetooth: hci4: command tx timeout
[  872.886281][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6387'.
[  872.901218][T27793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.947171][T27793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.997263][T27793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  873.052898][T27793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  873.360355][T27795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.387916][T30835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6393'.
[  873.389175][T27795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.549600][T27795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.575447][T30861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6400'.
[  873.623273][T27795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.750751][T30870] bond0 (unregistering): Released all slaves
[  873.802589][T30871] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  873.825633][T30871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  874.035009][T30889] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.043648][T30889] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.263210][T30896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.434897][T30896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.496270][T30924] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003
[  874.570954][T30896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.616126][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6413'.
[  874.751344][T30896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.810738][T30929] C: renamed from team_slave_0 (while UP)
[  874.836065][T30929] netlink: 'syz.1.6416': attribute type 4 has an invalid length.
[  874.845245][T30929] netlink: 'syz.1.6416': attribute type 1 has an invalid length.
[  874.858070][T30929] netlink: 'syz.1.6416': attribute type 2 has an invalid length.
[  874.866233][T30929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  874.933853][T30943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  874.941145][T30943] IPv6: NLM_F_CREATE should be set when creating new route
[  875.073846][T27796] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.127998][T27796] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  875.160705][T27796] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.189845][T30960] gretap0: entered promiscuous mode
[  875.196221][T30960] vlan1: entered promiscuous mode
[  875.230396][T27796] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.401667][T30970] veth0: Caught tx_queue_len zero misconfig
[  875.816521][   T29] audit: type=1800 audit(1773671257.374:19): pid=30993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6431" name="memory.events" dev="tmpfs" ino=665 res=0 errno=0
[  876.014045][T30957] delete_channel: no stack
[  876.343263][T31015] __nla_validate_parse: 5 callbacks suppressed
[  876.343284][T31015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6439'.
[  876.561040][T31033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6446'.
[  876.597599][T31030] lo speed is unknown, defaulting to 1000
[  876.615594][T31033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6446'.
[  876.630918][T31030] lo speed is unknown, defaulting to 1000
[  876.649118][T31033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6446'.
[  876.788509][T31039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6447'.
[  876.812538][T31039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6447'.
[  877.017161][T31030] wlan1 speed is unknown, defaulting to 1000
[  877.126390][T31047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6448'.
[  877.150309][T31041] syzkaller1: entered promiscuous mode
[  877.169512][T31041] syzkaller1: entered allmulticast mode
[  877.506202][T31057] netlink: 'syz.3.6451': attribute type 1 has an invalid length.
[  877.515409][T31057] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6451'.
[  877.524881][T31057] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6451'.
[  879.660047][T31079] lo speed is unknown, defaulting to 1000
[  879.726475][T31079] lo speed is unknown, defaulting to 1000
[  879.856677][T31091] lo speed is unknown, defaulting to 1000
[  879.919704][T31097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6463'.
[  880.026027][T31099] lo speed is unknown, defaulting to 1000
[  880.160258][T31103] lo speed is unknown, defaulting to 1000
[  880.179065][T31101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  880.333957][T31079] wlan1 speed is unknown, defaulting to 1000
[  880.340517][T31091] lo speed is unknown, defaulting to 1000
[  880.691092][T31099] lo speed is unknown, defaulting to 1000
[  880.900023][T31103] lo speed is unknown, defaulting to 1000
[  881.154654][T31103] wlan1 speed is unknown, defaulting to 1000
[  881.175843][T31091] wlan1 speed is unknown, defaulting to 1000
[  881.212024][T31099] wlan1 speed is unknown, defaulting to 1000
[  881.845251][T31132] macvtap1: entered promiscuous mode
[  881.850620][T31132] macvtap1: entered allmulticast mode
[  881.863178][T31132] dummy0: entered promiscuous mode
[  881.868342][T31132] dummy0: entered allmulticast mode
[  881.876003][T31132] team0: Device macvtap1 failed to register rx_handler
[  881.903426][T31132] dummy0: left allmulticast mode
[  881.927085][T31132] dummy0: left promiscuous mode
[  882.168135][T31134] bond1: option lp_interval: invalid value (0)
[  882.174764][T31134] bond1: option lp_interval: allowed values 1 - 2147483647
[  882.185737][T31134] bond1 (unregistering): Released all slaves
[  882.528525][T31153] xt_hashlimit: size too large, truncated to 1048576
[  883.121731][T31189] xt_l2tp: missing protocol rule (udp|l2tpip)
[  883.465292][T31203] lo speed is unknown, defaulting to 1000
[  883.482539][T31200] __nla_validate_parse: 3 callbacks suppressed
[  883.482559][T31200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6486'.
[  883.500372][T31203] lo speed is unknown, defaulting to 1000
[  883.614214][T31200] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.621506][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.629130][T31200] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.636340][T31200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.709492][T31200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  883.928814][T31203] wlan1 speed is unknown, defaulting to 1000
[  884.053933][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.308337][T31238] syzkaller0: entered promiscuous mode
[  884.314703][T31238] syzkaller0: entered allmulticast mode
[  884.430749][T31250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.439478][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.594339][T31260] netlink: 'syz.0.6507': attribute type 1 has an invalid length.
[  884.629194][T31248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6504'.
[  884.647853][T31248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6504'.
[  884.705619][T31260] 8021q: adding VLAN 0 to HW filter on device bond1
[  884.845143][T31276] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6511'.
[  884.900133][T31273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  884.913238][T31273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  884.933557][T31273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  884.940994][T31273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  884.950378][T31281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6512'.
[  885.098544][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.175828][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.208628][T31299] netlink: 776 bytes leftover after parsing attributes in process `syz.4.6515'.
[  885.293231][T31303] syzkaller0: entered promiscuous mode
[  885.298849][T31303] syzkaller0: entered allmulticast mode
[  885.390948][T31308] sctp: [Deprecated]: syz.0.6518 (pid 31308) Use of struct sctp_assoc_value in delayed_ack socket option.
[  885.390948][T31308] Use struct sctp_sack_info instead
[  885.410046][T31308] sctp: [Deprecated]: syz.0.6518 (pid 31308) Use of struct sctp_assoc_value in delayed_ack socket option.
[  885.410046][T31308] Use struct sctp_sack_info instead
[  885.512910][T31313] syzkaller1: entered allmulticast mode
[  885.557885][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'.
[  885.676860][T31321] netlink: 'syz.1.6523': attribute type 1 has an invalid length.
[  885.705126][T31321] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6523'.
[  885.785434][T31321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'.
[  885.790055][T31326] syzkaller0: entered promiscuous mode
[  886.250844][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.346874][T31347] lo speed is unknown, defaulting to 1000
[  886.380865][T31347] lo speed is unknown, defaulting to 1000
[  886.523306][T31361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6533'.
[  886.559352][T31368] netlink: 'syz.4.6534': attribute type 3 has an invalid length.
[  886.903337][T31375] syzkaller0: entered promiscuous mode
[  886.909072][T31375] syzkaller0: entered allmulticast mode
[  886.920788][T31347] wlan1 speed is unknown, defaulting to 1000
[  886.923453][T31375] syzkaller0: mtu less than device minimum
[  887.254784][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.212547][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.302513][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.776548][T31390] lo speed is unknown, defaulting to 1000
[  888.790153][T31390] lo speed is unknown, defaulting to 1000
[  888.802949][T31412] __nla_validate_parse: 3 callbacks suppressed
[  888.802967][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6545'.
[  889.048351][T31420] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6548'.
[  889.060596][T31420] syzkaller0: entered promiscuous mode
[  889.092231][T31420] syzkaller0: entered allmulticast mode
[  889.118550][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.126038][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.133060][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.140027][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.147036][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.154063][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.161057][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.168081][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.175083][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.182048][T31420] tc action pedit 'at' offset -2147483647 out of bounds
[  889.189084][T31420] 0: reclassify loop, rule prio 0, protocol 800
[  889.293398][T31390] wlan1 speed is unknown, defaulting to 1000
[  889.299410][T31425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'.
[  889.337176][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.345354][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.581665][T31436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  889.594723][T31437] netlink: 'syz.0.6552': attribute type 1 has an invalid length.
[  889.693688][T31437] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  889.845635][T31445] dummy0: entered promiscuous mode
[  889.890208][T31445] dummy0: entered allmulticast mode
[  889.924517][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6553'.
[  889.944659][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6553'.
[  890.199042][T31456] can: request_module (can-proto-5) failed.
[  890.372616][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.393608][T31474] syzkaller1: entered promiscuous mode
[  890.402650][T31474] syzkaller1: entered allmulticast mode
[  890.593689][T31482] vlan1: entered promiscuous mode
[  891.260821][T10072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.319808][T31517] netlink: 'syz.2.6577': attribute type 6 has an invalid length.
[  891.414006][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.505006][T31526] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6579'.
[  891.514350][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6579'.
[  891.532752][T31528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6580'.
[  891.617056][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6580'.
[  891.685105][T31545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6585'.
[  891.799767][T31542] team1: entered promiscuous mode
[  891.805379][T31542] team1: entered allmulticast mode
[  891.813510][T31542] 8021q: adding VLAN 0 to HW filter on device team1
[  891.853364][T31553] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  891.949284][T31553] team2: entered promiscuous mode
[  891.954854][T31553] team2: entered allmulticast mode
[  891.960463][T31553] 8021q: adding VLAN 0 to HW filter on device team2
[  892.023870][T31565] syzkaller1: entered promiscuous mode
[  892.039774][T31565] syzkaller1: entered allmulticast mode
[  892.077888][T31572] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  892.454005][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.573236][T31593] tc_dump_action: action bad kind
[  892.594302][T31604] veth0_to_hsr: entered allmulticast mode
[  892.604352][T31605] netlink: 'syz.1.6600': attribute type 1 has an invalid length.
[  892.974310][T31623] netlink: 'syz.3.6603': attribute type 1 has an invalid length.
[  893.031063][T31623] bond7: entered promiscuous mode
[  893.042841][T31623] 8021q: adding VLAN 0 to HW filter on device bond7
[  893.143236][T31623] 8021q: adding VLAN 0 to HW filter on device bond7
[  893.152079][T31623] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[  893.165477][T31623] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  893.183780][T31623] bond7: (slave vti0): making interface the new active one
[  893.201295][T31623] vti0: entered promiscuous mode
[  893.208530][T31623] bond7: (slave vti0): Enslaving as an active interface with an up link
[  893.239272][T31632] IPVS: set_ctl: invalid protocol: 39555 229.182.219.106:43509
[  893.373017][T31640] lo speed is unknown, defaulting to 1000
[  893.439445][T31640] lo speed is unknown, defaulting to 1000
[  893.492894][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.767074][T31640] wlan1 speed is unknown, defaulting to 1000
[  893.779016][T31648] lo speed is unknown, defaulting to 1000
[  893.843833][T31648] lo speed is unknown, defaulting to 1000
[  893.891623][T31661] __nla_validate_parse: 7 callbacks suppressed
[  893.891642][T31661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6612'.
[  894.226830][T31648] wlan1 speed is unknown, defaulting to 1000
[  894.262564][T31672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6614'.
[  894.292578][T10072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.536041][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.746105][T31697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6620'.
[  895.141663][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6624'.
[  895.214017][T31708] bond8 (unregistering): Released all slaves
[  895.308858][T31693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'.
[  895.347569][T31712] 8021q: adding VLAN 0 to HW filter on device bond1
[  895.575061][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.038601][T31756] sctp: [Deprecated]: syz.3.6632 (pid 31756) Use of struct sctp_assoc_value in delayed_ack socket option.
[  896.038601][T31756] Use struct sctp_sack_info instead
[  896.304395][T31763] 8021q: VLANs not supported on gre0
[  896.470062][T31770] netlink: zone id is out of range
[  896.481922][T31770] netlink: zone id is out of range
[  896.515836][T31770] netlink: zone id is out of range
[  896.521054][T31770] netlink: zone id is out of range
[  896.526437][T31770] netlink: zone id is out of range
[  896.535889][T31770] netlink: zone id is out of range
[  896.541181][T31770] netlink: zone id is out of range
[  896.547335][T31770] netlink: zone id is out of range
[  896.585945][T31770] netlink: zone id is out of range
[  896.604790][T31770] netlink: zone id is out of range
[  896.706617][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6644'.
[  896.742095][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6644'.
[  897.188987][T31807] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6650'.
[  897.330927][T31821] netlink: 'syz.0.6656': attribute type 1 has an invalid length.
[  897.364479][T31821] bond2: entered promiscuous mode
[  897.370235][T31821] 8021q: adding VLAN 0 to HW filter on device bond2
[  897.383232][T31824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6657'.
[  897.416297][T31821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'.
[  897.531592][T31832] ip6_vti0: entered promiscuous mode
[  897.552336][T31832] ip6_vti0: entered allmulticast mode
[  897.774246][T31838] sch_fq: defrate 4294967293 ignored.
[  897.923451][T31850] netlink: 'syz.3.6661': attribute type 27 has an invalid length.
[  898.489750][T31877] xt_hashlimit: size too large, truncated to 1048576
[  898.575889][T31884] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  898.748525][T31893] netlink: 'syz.2.6673': attribute type 3 has an invalid length.
[  898.906285][T31900] x_tables: duplicate underflow at hook 2
[  901.108191][T31858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  901.301129][T31930] __nla_validate_parse: 7 callbacks suppressed
[  901.301149][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6683'.
[  901.494852][    C1] net_ratelimit: 20 callbacks suppressed
[  901.494872][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.539182][T31947] batman_adv: batadv0: Adding interface: dummy0
[  901.578696][T31947] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  901.618262][T31956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6688'.
[  901.631696][T31947] batman_adv: batadv0: Interface activated: dummy0
[  901.802969][T31961] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6691'.
[  901.812612][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.835265][T31961] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  901.889184][T31967] team_slave_1: Caught tx_queue_len zero misconfig
[  901.917001][T31967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6693'.
[  901.917001][T31968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6693'.
[  902.023919][T31972] x_tables: duplicate underflow at hook 3
[  902.248829][T31981] netlink: 'syz.0.6697': attribute type 1 has an invalid length.
[  902.257035][T31981] nbd: couldn't find device at index -427251215
[  902.398041][T31981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6697'.
[  902.718231][T32004] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  902.779602][T10072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.795627][T32004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6704'.
[  902.808315][T32004] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6704'.
[  902.852944][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.011651][T32020] bridge2: entered promiscuous mode
[  903.092790][T32020] bridge2: entered allmulticast mode
[  903.131439][T32025] macvtap1: entered promiscuous mode
[  903.150045][T32025] macvtap1: entered allmulticast mode
[  903.174699][T32025] dummy0: entered promiscuous mode
[  903.187484][T32025] dummy0: entered allmulticast mode
[  903.206586][T32025] team0: Device macvtap1 failed to register rx_handler
[  903.218382][T31990] lec:lec_atm_close: lec0: Shut down!
[  903.228380][T32025] dummy0: left allmulticast mode
[  903.237004][T32025] dummy0: left promiscuous mode
[  903.354924][T32028] bond8: option lp_interval: invalid value (0)
[  903.361445][T32028] bond8: option lp_interval: allowed values 1 - 2147483647
[  903.388099][T32028] bond8 (unregistering): Released all slaves
[  903.459093][T32037] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6710'.
[  903.785906][T32056] syzkaller0: entered promiscuous mode
[  903.791443][T32056] syzkaller0: entered allmulticast mode
[  903.892929][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.901094][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.048416][T32070] syzkaller0: entered promiscuous mode
[  904.093329][T32070] syzkaller0: entered allmulticast mode
[  904.225185][T32056] lo speed is unknown, defaulting to 1000
[  904.531391][T32056] lo speed is unknown, defaulting to 1000
[  904.809185][T32099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6727'.
[  904.828237][T32099] netlink: 'syz.4.6727': attribute type 21 has an invalid length.
[  904.843569][ T5877] lec:lec_start_xmit: lec0:No lecd attached
[  904.935878][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.205980][T32056] wlan1 speed is unknown, defaulting to 1000
[  905.260551][T32118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  905.728512][T32143] netlink: 'syz.4.6736': attribute type 6 has an invalid length.
[  905.977285][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.004333][T32150] lo speed is unknown, defaulting to 1000
[  906.038666][T32150] lo speed is unknown, defaulting to 1000
[  906.414016][T32163] lo speed is unknown, defaulting to 1000
[  906.429816][T32163] lo speed is unknown, defaulting to 1000
[  906.443307][T32150] wlan1 speed is unknown, defaulting to 1000
[  907.010415][T32181] tap0: tun_chr_ioctl cmd 2148553947
[  907.110645][T32187] __nla_validate_parse: 8 callbacks suppressed
[  907.110666][T32187] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6748'.
[  907.172517][T32163] wlan1 speed is unknown, defaulting to 1000
[  907.448668][T32195] lo speed is unknown, defaulting to 1000
[  907.528457][T32195] lo speed is unknown, defaulting to 1000
[  907.835625][T32210] tipc: Started in network mode
[  907.840572][T32210] tipc: Node identity ee7f75ab33ef, cluster identity 4711
[  907.859492][T32210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  907.937954][T32210] syzkaller0: entered promiscuous mode
[  907.952507][T32210] syzkaller0: entered allmulticast mode
[  907.963386][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6756'.
[  907.975157][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6756'.
[  907.992993][T32210] netlink: 'syz.2.6756': attribute type 6 has an invalid length.
[  908.000749][T32210] netlink: 'syz.2.6756': attribute type 5 has an invalid length.
[  908.029139][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6756'.
[  908.035959][T27801] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  908.047224][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6756'.
[  908.062924][T32210] netlink: 'syz.2.6756': attribute type 6 has an invalid length.
[  908.070863][T32210] netlink: 'syz.2.6756': attribute type 5 has an invalid length.
[  908.102676][T27801] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  908.122824][T27801] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  908.148962][T27801] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  908.171433][T32210] tipc: Resetting bearer <eth:syzkaller0>
[  908.251652][T32210] tipc: Resetting bearer <eth:syzkaller0>
[  908.310230][T32222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6758'.
[  908.331599][T32222] netlink: 'syz.0.6758': attribute type 10 has an invalid length.
[  908.348541][T32222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6758'.
[  908.394122][T32210] tipc: Disabling bearer <eth:syzkaller0>
[  908.498860][T32222] dummy0: left allmulticast mode
[  908.505460][T32222] batman_adv: batadv0: Interface deactivated: dummy0
[  908.513302][T32222] batman_adv: batadv0: Removing interface: dummy0
[  908.601977][T32222] bridge0: port 3(dummy0) entered blocking state
[  908.611172][T32222] bridge0: port 3(dummy0) entered disabled state
[  908.667933][T32222] dummy0: entered allmulticast mode
[  908.688703][T32229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  908.733460][T32222] bridge0: port 3(dummy0) entered blocking state
[  908.739970][T32222] bridge0: port 3(dummy0) entered forwarding state
[  908.769767][T32229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6761'.
[  908.781422][T32195] wlan1 speed is unknown, defaulting to 1000
[  908.803612][T32236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6763'.
[  908.810924][T32229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6761'.
[  908.932638][T32243] netlink: 'syz.4.6763': attribute type 1 has an invalid length.
[  909.010311][T32248] netlink: 'syz.1.6766': attribute type 1 has an invalid length.
[  909.053077][T32248] netlink: 'syz.1.6766': attribute type 1 has an invalid length.
[  909.218833][T32236] bond0: (slave bridge0): Enslaving as a backup interface with an up link
[  909.230930][T32250] bond0: entered promiscuous mode
[  909.237154][T32250] bridge0: entered promiscuous mode
[  909.263053][T32250] bond0: entered allmulticast mode
[  909.273508][T32250] bridge0: entered allmulticast mode
[  909.810310][T32277] bridge0: port 3(dummy0) entered disabled state
[  910.008128][T32285] syzkaller0: entered promiscuous mode
[  910.016485][T32285] syzkaller0: entered allmulticast mode
[  910.027624][T32287] syzkaller0: entered promiscuous mode
[  910.033436][T32287] syzkaller0: entered allmulticast mode
[  910.131922][T32293] validate_nla: 65 callbacks suppressed
[  910.131944][T32293] netlink: 'syz.1.6778': attribute type 1 has an invalid length.
[  910.205448][T32293] netlink: 'syz.1.6778': attribute type 2 has an invalid length.
[  910.338516][T32297] syzkaller0: entered promiscuous mode
[  910.362871][T32297] syzkaller0: entered allmulticast mode
[  910.444256][T32314] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  910.462362][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms
[  910.470796][    C1] lec:lec_tx_timeout: lec0
[  910.475873][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  912.290592][T32320] mac80211_hwsim hwsim89 wlan0: default FDB implementation only supports local addresses
[  912.305860][T32316] __nla_validate_parse: 43 callbacks suppressed
[  912.305877][T32316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6784'.
[  912.568071][T32359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6792'.
[  912.578759][T32356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6790'.
[  912.593806][T32360] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  912.693323][T32364] netlink: 'syz.2.6794': attribute type 2 has an invalid length.
[  912.704481][T32364] netlink: 'syz.2.6794': attribute type 1 has an invalid length.
[  912.713592][T32364] netlink: 'syz.2.6794': attribute type 2 has an invalid length.
[  912.721423][T32364] netlink: 'syz.2.6794': attribute type 1 has an invalid length.
[  912.729610][T32364] netlink: 'syz.2.6794': attribute type 1 has an invalid length.
[  912.767866][T32371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6795'.
[  912.862942][T32373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6796'.
[  912.924070][T32373] 8021q: adding VLAN 0 to HW filter on device bond8
[  912.948605][T32375] macsec1: entered promiscuous mode
[  912.958231][T32375] bond8: entered promiscuous mode
[  912.990440][T32375] bond8: left promiscuous mode
[  913.331183][T32397] syzkaller0: entered promiscuous mode
[  913.345039][T32397] syzkaller0: entered allmulticast mode
[  913.375109][T32401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6802'.
[  913.629757][T32411] 8021q: adding VLAN 0 to HW filter on device bond2
[  913.669241][T32412] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  913.711354][T32422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6809'.
[  913.727804][T32422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  916.212437][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  916.220539][T32386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  916.220543][    C1] lec:lec_tx_timeout: lec0
[  916.230723][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  916.360916][T32453] netlink: 'syz.3.6815': attribute type 10 has an invalid length.
[  916.378614][T32453] bond0: (slave wlan1): Opening slave failed
[  916.466219][T32459] C: renamed from team_slave_0 (while UP)
[  916.501870][T32459] netlink: 'syz.2.6816': attribute type 4 has an invalid length.
[  916.523212][T32459] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6816'.
[  916.548772][T32459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  916.893400][T32487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'.
[  917.290743][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'.
[  917.373840][T32514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6835'.
[  917.401334][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6835'.
[  917.426320][T32514] batadv1: entered promiscuous mode
[  917.431783][T32514] batadv1: entered allmulticast mode
[  917.438809][T32514] 8021q: adding VLAN 0 to HW filter on device batadv1
[  917.491109][T32515] xt_check_target: 1 callbacks suppressed
[  917.491128][T32515] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  917.719653][T32526] openvswitch: netlink: Flow actions attr not present in new flow.
[  918.431956][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6847'.
[  918.451134][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6847'.
[  918.584463][T32574] siw: device registration error -23
[  918.685158][T32581] lo speed is unknown, defaulting to 1000
[  918.754217][T32581] lo speed is unknown, defaulting to 1000
[  919.245754][T32581] wlan1 speed is unknown, defaulting to 1000
[  919.517104][T32634] lo speed is unknown, defaulting to 1000
[  919.526979][T32634] lo speed is unknown, defaulting to 1000
[  919.636058][T32641] netlink: 'syz.1.6867': attribute type 1 has an invalid length.
[  919.866266][T32641] bond1: entered promiscuous mode
[  919.871931][T32641] 8021q: adding VLAN 0 to HW filter on device bond1
[  919.893847][T32644] macvtap1: entered allmulticast mode
[  919.941660][T32634] wlan1 speed is unknown, defaulting to 1000
[  920.380224][   T29] audit: type=1804 audit(1773671301.934:20): pid=32670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6878" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=546 res=1 errno=0
[  920.467657][T32675] macvtap2: entered promiscuous mode
[  920.482586][   T29] audit: type=1800 audit(1773671301.934:21): pid=32670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6878" name="cgroup.controllers" dev="tmpfs" ino=546 res=0 errno=0
[  920.504114][T32675] macvtap2: entered allmulticast mode
[  920.522008][T32675] dummy0: entered promiscuous mode
[  920.564402][   T29] audit: type=1800 audit(1773671301.934:22): pid=32670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6878" name="cgroup.controllers" dev="tmpfs" ino=546 res=0 errno=0
[  920.572981][T32675] dummy0: entered allmulticast mode
[  920.639982][T32675] team0: Device macvtap2 failed to register rx_handler
[  920.687580][T32675] dummy0: left allmulticast mode
[  920.702398][T32675] dummy0: left promiscuous mode
[  920.789869][T32690] netlink: 'syz.2.6881': attribute type 1 has an invalid length.
[  920.838884][T32690] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6881'.
[  920.871362][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.929487][T32676] bond2: option lp_interval: invalid value (0)
[  920.936254][T32676] bond2: option lp_interval: allowed values 1 - 2147483647
[  920.945803][T32676] bond2 (unregistering): Released all slaves
[  921.138618][T32695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6882'.
[  921.163713][T32695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6882'.
[  921.199791][T32695] netlink: 'syz.4.6882': attribute type 14 has an invalid length.
[  921.215978][T32695] netlink: 'syz.4.6882': attribute type 13 has an invalid length.
[  921.428167][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6886'.
[  921.455818][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6886'.
[  921.736084][T32723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6890'.
[  921.779964][T32723] 8021q: adding VLAN 0 to HW filter on device bond3
[  921.793512][T32724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.843770][T32723] ipvlan2: entered promiscuous mode
[  921.855131][T32723] ipvlan2: entered allmulticast mode
[  921.872227][T32723] bond3: entered allmulticast mode
[  921.887828][T32723] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  921.906864][T32723] team0: Device ipvlan2 failed to register rx_handler
[  921.953998][T32724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.972356][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  921.980431][    C1] lec:lec_tx_timeout: lec0
[  921.992387][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  922.253434][T32746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.436547][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  922.472388][T32717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.512721][T32724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.599352][T30383] udevd[30383]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory
[  922.621400][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  922.638468][T32717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.724685][T32724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.821584][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  922.858178][T32717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.898992][  T302] sctp: [Deprecated]: syz.2.6901 (pid 302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  922.898992][  T302] Use struct sctp_sack_info instead
[  922.919963][  T303] __nla_validate_parse: 3 callbacks suppressed
[  922.919982][  T303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6902'.
[  923.043088][T32763] delete_channel: no stack
[  923.049369][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  923.068693][T32717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.147351][T27800] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  923.215104][T27800] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  923.245412][T27793] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  923.270207][T27793] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.357415][T27800] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  923.372951][T27800] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  923.399486][T32717] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  923.427871][T32717] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.710543][  T342] lo speed is unknown, defaulting to 1000
[  923.725463][  T342] lo speed is unknown, defaulting to 1000
[  923.741380][  T344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'.
[  923.747794][  T345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6911'.
[  923.824157][  T348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6913'.
[  923.959153][  T353] netlink: 'syz.3.6915': attribute type 1 has an invalid length.
[  924.065027][  T342] wlan1 speed is unknown, defaulting to 1000
[  924.082919][  T357] netlink: 'syz.0.6916': attribute type 1 has an invalid length.
[  924.099750][  T357] nbd: couldn't find device at index -427251215
[  924.215679][  T320] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  925.412679][T17603] Bluetooth: hci4: command 0x0401 tx timeout
[  927.002389][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  927.010453][    C1] lec:lec_tx_timeout: lec0
[  927.015186][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  927.341655][  T392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6925'.
[  927.691193][  T406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6929'.
[  927.731678][  T413] macvtap1: entered promiscuous mode
[  927.746811][  T413] macvtap1: entered allmulticast mode
[  927.762872][  T413] dummy0: entered promiscuous mode
[  927.768037][  T413] dummy0: entered allmulticast mode
[  927.773471][  T406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6929'.
[  927.795582][  T413] team0: Device macvtap1 failed to register rx_handler
[  927.817848][  T413] dummy0: left allmulticast mode
[  927.825331][  T413] dummy0: left promiscuous mode
[  927.874003][  T425] netlink: 'syz.0.6929': attribute type 2 has an invalid length.
[  927.881781][  T425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6929'.
[  927.966579][  T417] bond9: option lp_interval: invalid value (0)
[  927.973070][  T417] bond9: option lp_interval: allowed values 1 - 2147483647
[  927.986784][  T417] bond9 (unregistering): Released all slaves
[  928.183824][  T437] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.191230][  T437] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.201561][  T434] netlink: 840 bytes leftover after parsing attributes in process `syz.2.6934'.
[  928.212865][  T437] bridge0: entered allmulticast mode
[  928.225718][  T429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6934'.
[  928.311714][  T437] bridge_slave_1: left allmulticast mode
[  928.328260][  T437] bridge_slave_1: left promiscuous mode
[  928.357637][  T437] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.380014][  T437] bridge_slave_0: left allmulticast mode
[  928.388275][  T437] bridge_slave_0: left promiscuous mode
[  928.396775][  T437] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.427880][  T453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'.
[  928.793739][  T466] netlink: 'syz.0.6946': attribute type 10 has an invalid length.
[  928.802866][  T466] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  928.825221][  T466] Bluetooth: MGMT ver 1.23
[  928.852865][  T466] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  928.976110][  T469] lo speed is unknown, defaulting to 1000
[  929.002470][  T469] lo speed is unknown, defaulting to 1000
[  929.066249][  T486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6949'.
[  929.082928][  T486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6949'.
[  929.133514][  T473] lo speed is unknown, defaulting to 1000
[  929.150597][  T485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'.
[  929.206563][  T486] lo speed is unknown, defaulting to 1000
[  929.258094][  T491] macsec2: entered promiscuous mode
[  929.273837][  T491] team0: entered promiscuous mode
[  929.287692][  T491] team_slave_0: entered promiscuous mode
[  929.305793][  T491] team_slave_1: entered promiscuous mode
[  929.324976][  T491] team0: Device macsec2 is already an upper device of the team interface
[  929.352599][  T491] team0: left promiscuous mode
[  929.367701][  T491] team_slave_0: left promiscuous mode
[  929.378036][  T491] team_slave_1: left promiscuous mode
[  929.526021][  T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6955'.
[  929.536577][  T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6955'.
[  929.546681][  T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6955'.
[  929.563629][  T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6955'.
[  929.617611][  T469] wlan1 speed is unknown, defaulting to 1000
[  929.617723][  T473] lo speed is unknown, defaulting to 1000
[  929.676977][  T502] lo speed is unknown, defaulting to 1000
[  930.023586][  T524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  930.137541][  T486] lo speed is unknown, defaulting to 1000
[  930.280787][  T534] x_tables: ip_tables: sctp match: only valid for protocol 132
[  930.351866][  T502] lo speed is unknown, defaulting to 1000
[  930.568619][  T502] wlan1 speed is unknown, defaulting to 1000
[  930.605845][  T486] wlan1 speed is unknown, defaulting to 1000
[  930.691586][  T473] wlan1 speed is unknown, defaulting to 1000
[  931.145854][  T543] pim6reg: entered allmulticast mode
[  931.513298][  T554] hsr0: entered promiscuous mode
[  931.521535][  T553] hsr0: left promiscuous mode
[  931.805827][  T560] "syz.1.6972" (560) uses obsolete ecb(arc4) skcipher
[  932.022295][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  932.030351][    C1] lec:lec_tx_timeout: lec0
[  932.038415][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  932.268203][  T585] macvtap1: entered promiscuous mode
[  932.285207][  T585] macvtap1: entered allmulticast mode
[  932.384624][  T590] bond3: option lp_interval: invalid value (0)
[  932.401071][  T590] bond3: option lp_interval: allowed values 1 - 2147483647
[  932.414249][  T590] bond3 (unregistering): Released all slaves
[  932.585170][  T602] macvlan4: entered promiscuous mode
[  932.590603][  T602] bond0: entered promiscuous mode
[  932.596931][  T602] bond_slave_0: entered promiscuous mode
[  932.603620][  T602] bond_slave_1: entered promiscuous mode
[  932.611877][  T602] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  932.624765][  T602] bond0: left promiscuous mode
[  932.629762][  T602] bond_slave_0: left promiscuous mode
[  932.635824][  T602] bond_slave_1: left promiscuous mode
[  932.994699][  T624] netlink: 'syz.2.6993': attribute type 10 has an invalid length.
[  933.064500][  T624] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.083749][  T624] team0: Port device bond0 added
[  933.298554][  T641] netlink: 'syz.4.6997': attribute type 3 has an invalid length.
[  933.313740][  T641] __nla_validate_parse: 6 callbacks suppressed
[  933.313759][  T641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6997'.
[  933.336387][  T641] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6997'.
[  933.369168][  T643] bond0: (slave sit0): Error: Device type is different from other slaves
[  933.444259][  T647] netlink: 'syz.4.7000': attribute type 10 has an invalid length.
[  933.458653][  T651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7000'.
[  933.555627][  T652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6999'.
[  933.566544][  T652] lo: Caught tx_queue_len zero misconfig
[  933.619497][  T656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  933.631957][  T654] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  933.737938][  T668] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7004'.
[  933.765611][  T670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7006'.
[  933.857745][  T674] netlink: 'syz.3.7007': attribute type 27 has an invalid length.
[  933.988492][  T677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7008'.
[  934.088593][  T674] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.096330][  T674] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.197445][  T698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7009'.
[  934.240563][  T698] netlink: 'syz.2.7009': attribute type 2 has an invalid length.
[  934.290703][  T674] wg1: left promiscuous mode
[  934.296170][  T674] wg1: left allmulticast mode
[  934.411410][  T674] veth0_to_hsr: left allmulticast mode
[  934.797192][  T674] veth0_macvtap: left allmulticast mode
[  934.864874][  T674] macvtap0: left promiscuous mode
[  934.870407][  T674] macvtap0: left allmulticast mode
[  934.946385][  T674] bond2: left promiscuous mode
[  935.000526][  T674] veth3: left promiscuous mode
[  935.116933][  T674] bond7: left promiscuous mode
[  935.121913][  T674] vti0: left promiscuous mode
[  935.284110][  T675] 8021q: adding VLAN 0 to HW filter on device bond0
[  935.293529][  T675] 8021q: adding VLAN 0 to HW filter on device team0
[  935.321791][  T675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  935.364396][  T677] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  935.380287][  T677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  935.391927][  T677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  935.466307][  T699] syzkaller0: entered promiscuous mode
[  935.471839][  T699] syzkaller0: entered allmulticast mode
[  935.481355][T27796] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  935.500722][T27796] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  935.516926][T27800] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  935.537204][T27800] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  935.555450][T27800] bond0: now running without any active interface!
[  937.062319][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  937.070427][    C1] lec:lec_tx_timeout: lec0
[  937.075179][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  937.224801][T27796] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.242408][  T737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7016'.
[  937.251563][  T737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7016'.
[  937.272600][  T737] netlink: 'syz.4.7016': attribute type 4 has an invalid length.
[  937.292837][T27796] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.374296][  T741] netlink: 'syz.4.7018': attribute type 10 has an invalid length.
[  937.449861][  T741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  938.308564][  T796] lo speed is unknown, defaulting to 1000
[  938.386548][  T796] lo speed is unknown, defaulting to 1000
[  938.490284][  T806] __nla_validate_parse: 3 callbacks suppressed
[  938.490306][  T806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7034'.
[  938.665600][  T811] netlink: 'syz.1.7036': attribute type 1 has an invalid length.
[  938.787043][  T817] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  938.798772][  T817] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  938.871662][  T811] bond2: (slave gretap1): making interface the new active one
[  938.882836][  T796] wlan1 speed is unknown, defaulting to 1000
[  938.890801][  T811] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  939.165357][  T837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7042'.
[  939.186954][  T837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7042'.
[  939.208055][  T831] lo speed is unknown, defaulting to 1000
[  939.238475][  T831] lo speed is unknown, defaulting to 1000
[  939.404237][  T844] lo speed is unknown, defaulting to 1000
[  939.487448][T10056] IPVS: starting estimator thread 0...
[  939.490711][  T841] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  939.582369][  T849] IPVS: using max 28 ests per chain, 67200 per kthread
[  939.623662][  T851] macsec2: entered promiscuous mode
[  939.639012][  T851] macvlan0: entered promiscuous mode
[  939.648296][  T851] macvlan0: left promiscuous mode
[  939.669400][  T831] wlan1 speed is unknown, defaulting to 1000
[  939.678856][  T844] lo speed is unknown, defaulting to 1000
[  939.882740][  T854] delete_channel: no stack
[  939.893896][  T854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7047'.
[  939.903479][  T854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7047'.
[  940.008917][  T844] wlan1 speed is unknown, defaulting to 1000
[  940.015670][  T854] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.7047'.
[  940.139768][  T857] syzkaller0: entered promiscuous mode
[  940.155538][  T857] syzkaller0: entered allmulticast mode
[  942.862274][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[  942.870362][    C1] lec:lec_tx_timeout: lec0
[  942.875663][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  943.023811][  T902] syzkaller0: entered promiscuous mode
[  943.029474][  T902] syzkaller0: entered allmulticast mode
[  943.395173][  T921] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7061'.
[  943.605529][  T937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'.
[  943.654200][  T937] ip6gre1: entered promiscuous mode
[  943.659476][  T937] ip6gre1: entered allmulticast mode
[  943.677043][T27799] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  943.697536][  T937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  943.703064][T10061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  943.706052][  T937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  943.715353][T27799] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  943.972557][T10061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  944.093668][  T959] netlink: 'syz.1.7067': attribute type 1 has an invalid length.
[  944.142540][T10061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  944.201872][  T959] bond3: entered promiscuous mode
[  944.233235][  T959] 8021q: adding VLAN 0 to HW filter on device bond3
[  944.262075][  T967] ip6gre1: entered promiscuous mode
[  944.267824][  T967] ip6gre1: entered allmulticast mode
[  944.318843][  T974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7069'.
[  944.386786][  T978] bridge2: entered promiscuous mode
[  944.451172][  T984] team0 (unregistering): Port device team_slave_0 removed
[  944.469131][  T984] team0 (unregistering): Port device team_slave_1 removed
[  944.492144][  T981] syzkaller1: entered promiscuous mode
[  944.501690][  T981] syzkaller1: entered allmulticast mode
[  944.532211][  T991] openvswitch: netlink: Tunnel attr 10416 out of range max 16
[  944.691856][ T1002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7078'.
[  944.847224][ T1021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.866459][ T1021] syzkaller0: entered promiscuous mode
[  944.871971][ T1021] syzkaller0: entered allmulticast mode
[  944.888582][ T9205] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  944.897204][ T9205] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  944.929678][ T9205] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  944.938187][ T9205] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  944.953135][ T1021] tipc: Resetting bearer <eth:syzkaller0>
[  944.979389][T18364] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  944.993862][T18364] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  945.003541][ T1020] tipc: Resetting bearer <eth:syzkaller0>
[  945.034094][ T1020] tipc: Disabling bearer <eth:syzkaller0>
[  945.054239][ T1028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7085'.
[  945.059935][T27793] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  945.079816][T27793] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  945.205130][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7086'.
[  945.240981][ T1040] batadv_slave_1: Caught tx_queue_len zero misconfig
[  945.249461][ T1040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7088'.
[  945.439197][ T1051] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7090'.
[  945.496549][ T1051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7090'.
[  945.549376][ T1051] vlan2: entered allmulticast mode
[  945.554948][ T1051] gretap0: entered allmulticast mode
[  945.680086][ T1070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7096'.
[  945.690722][ T1070] block nbd10: Unsupported socket: should be TCP or UNIX.
[  945.875097][ T1076] tipc: Started in network mode
[  945.925549][ T1076] tipc: Node identity f6cf64bd2f9d, cluster identity 4711
[  945.974802][ T1076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  945.981927][ T1089] syzkaller0: entered promiscuous mode
[  946.007612][ T1089] syzkaller0: entered allmulticast mode
[  946.036119][ T1088] syzkaller0: entered promiscuous mode
[  946.048020][ T1093] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7102'.
[  946.064588][ T1088] syzkaller0: entered allmulticast mode
[  946.120971][ T1089] tipc: Resetting bearer <eth:syzkaller0>
[  946.180984][ T1089] tipc: Disabling bearer <eth:syzkaller0>
[  946.438806][ T1112] netlink: 'syz.4.7105': attribute type 39 has an invalid length.
[  946.667129][ T1125] lo speed is unknown, defaulting to 1000
[  946.683620][ T1125] lo speed is unknown, defaulting to 1000
[  946.702463][T10056] IPVS: starting estimator thread 0...
[  946.793832][ T1133] IPVS: using max 24 ests per chain, 57600 per kthread
[  947.271373][ T1125] wlan1 speed is unknown, defaulting to 1000
[  947.652780][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  947.892305][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  947.900364][    C1] lec:lec_tx_timeout: lec0
[  947.905406][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  948.792014][ T1183] __nla_validate_parse: 4 callbacks suppressed
[  948.792036][ T1183] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7126'.
[  949.524519][ T1172] bridge0: entered allmulticast mode
[  949.607250][ T1178] dummy0: left allmulticast mode
[  949.613863][ T1178] bridge0: port 3(dummy0) entered disabled state
[  949.624522][ T1178] bridge_slave_1: left allmulticast mode
[  949.630205][ T1178] bridge_slave_1: left promiscuous mode
[  949.640456][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.656174][ T1178] bridge_slave_0: left allmulticast mode
[  949.664556][ T1178] bridge_slave_0: left promiscuous mode
[  949.670423][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.866179][ T1198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  949.873542][ T1198] IPv6: NLM_F_CREATE should be set when creating new route
[  950.038631][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7133'.
[  950.058177][ T1209] dummy0: entered promiscuous mode
[  950.074513][ T1209] dummy0: entered allmulticast mode
[  950.078470][ T1210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7133'.
[  950.114350][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7133'.
[  950.133522][ T1210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7133'.
[  950.215925][ T1216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7135'.
[  950.275464][ T1209] bond3: entered promiscuous mode
[  950.344271][ T1217] macvlan2: entered promiscuous mode
[  950.367012][ T1217] macvlan2: entered allmulticast mode
[  950.396877][ T1217] bond3: (slave macvlan2): Opening slave failed
[  950.688862][ T1233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7139'.
[  950.711117][ T1234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7139'.
[  950.748496][ T1236] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  950.793625][ T1236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7140'.
[  950.803898][ T1236] netlink: 'syz.3.7140': attribute type 9 has an invalid length.
[  950.811665][ T1236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7140'.
[  951.137829][ T1258] lo speed is unknown, defaulting to 1000
[  951.194305][ T1258] lo speed is unknown, defaulting to 1000
[  951.707875][ T1258] wlan1 speed is unknown, defaulting to 1000
[  952.912315][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  952.920420][    C1] lec:lec_tx_timeout: lec0
[  952.925160][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  953.393055][ T1335] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  953.449459][ T1342] lo speed is unknown, defaulting to 1000
[  953.486414][ T1342] lo speed is unknown, defaulting to 1000
[  953.507762][ T1345] netlink: 'syz.2.7163': attribute type 22 has an invalid length.
[  953.536929][ T1345] netlink: 'syz.2.7163': attribute type 1 has an invalid length.
[  953.705572][ T1354] netlink: 'syz.4.7164': attribute type 3 has an invalid length.
[  953.781895][ T1342] wlan1 speed is unknown, defaulting to 1000
[  953.989617][ T1366] __nla_validate_parse: 5 callbacks suppressed
[  953.990287][ T1366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7166'.
[  954.475465][ T1391] netlink: 'syz.4.7172': attribute type 15 has an invalid length.
[  954.747699][ T1411] netlink: 'syz.1.7178': attribute type 1 has an invalid length.
[  954.780803][ T1413] ip6tnl1: entered allmulticast mode
[  954.789794][ T1414] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001
[  954.811710][ T1411] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7178'.
[  954.972020][ T1419] netlink: 'syz.1.7178': attribute type 1 has an invalid length.
[  955.353996][ T1424] gretap0: entered promiscuous mode
[  955.360935][ T1424] vlan3: entered promiscuous mode
[  955.549816][ T1432] netlink: 'syz.3.7182': attribute type 2 has an invalid length.
[  955.579558][ T1432] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.7182'.
[  955.865870][ T1443] vxcan2: entered allmulticast mode
[  955.892441][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  957.052450][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7188'.
[  957.064275][ T1453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7188'.
[  957.101436][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7189'.
[  957.163682][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7187'.
[  957.771088][ T1503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  957.932338][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  957.934751][ T1514] nbd: couldn't find a device at index 1
[  957.940427][    C1] lec:lec_tx_timeout: lec0
[  957.952711][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  958.075713][ T1519] bond2: option mode: unable to set because the bond device has slaves
[  958.151651][ T1517] vlan2: entered allmulticast mode
[  958.167915][ T1517] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7209'.
[  958.192600][ T1517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'.
[  958.310390][ T1527] netlink: 'syz.4.7213': attribute type 33 has an invalid length.
[  958.345675][ T1527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7213'.
[  958.381789][ T1537] batman_adv: batadv0: Adding interface: wlan1
[  958.392299][ T1537] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  958.475631][ T1537] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[  958.500046][ T1542] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  958.573482][ T1536] bond9: option min_links: invalid value (18446744073709551612)
[  958.585862][ T1545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  958.615274][ T1536] bond9: option min_links: allowed values 0 - 2147483647
[  958.649998][ T1536] bond9 (unregistering): Released all slaves
[  959.479593][ T1563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  959.492146][ T1563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.666277][ T1563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  959.682174][ T1563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.194333][ T1563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  960.234208][ T1563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.327451][ T1563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  960.338263][ T1563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.455034][ T1614] lo speed is unknown, defaulting to 1000
[  960.461478][ T1621] syzkaller0: entered promiscuous mode
[  960.469003][ T1621] syzkaller0: entered allmulticast mode
[  960.487629][ T1614] lo speed is unknown, defaulting to 1000
[  960.533861][ T1621] tipc: Started in network mode
[  960.540579][ T1621] tipc: Node identity 469047c4e3df, cluster identity 4711
[  960.551331][ T1621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  960.586663][T27801] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  960.596535][T27801] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.628629][T27801] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  960.637913][T27801] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.660080][ T1621] tipc: Resetting bearer <eth:syzkaller0>
[  960.674600][ T1620] tipc: Resetting bearer <eth:syzkaller0>
[  960.696073][ T1620] tipc: Disabling bearer <eth:syzkaller0>
[  960.714955][ T1632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  960.746514][T27801] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  960.763830][T27801] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.823948][ T1633] Cannot find set identified by id 65534 to match
[  960.847606][T27801] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  960.871925][T27801] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.916185][ T1614] wlan1 speed is unknown, defaulting to 1000
[  961.021037][ T1642] netlink: 'syz.4.7243': attribute type 21 has an invalid length.
[  961.250672][ T1653] __nla_validate_parse: 1 callbacks suppressed
[  961.250692][ T1653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7248'.
[  961.355054][ T1653] netlink: 'syz.2.7248': attribute type 1 has an invalid length.
[  961.438250][ T1662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7249'.
[  961.581116][ T1668] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20002
[  961.667530][ T1671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7253'.
[  961.760729][ T1675] netlink: 'syz.3.7255': attribute type 21 has an invalid length.
[  961.778926][ T1675] IPv6: NLM_F_CREATE should be specified when creating new route
[  961.827021][ T1675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  961.834330][ T1675] IPv6: NLM_F_CREATE should be set when creating new route
[  961.841622][ T1675] IPv6: NLM_F_CREATE should be set when creating new route
[  961.848909][ T1675] IPv6: NLM_F_CREATE should be set when creating new route
[  961.990556][ T1686] lo speed is unknown, defaulting to 1000
[  962.035527][ T1686] lo speed is unknown, defaulting to 1000
[  962.125735][ T1687] lo speed is unknown, defaulting to 1000
[  962.132049][ T1689] tunl0: Caught tx_queue_len zero misconfig
[  962.174738][ T1693] syzkaller0: entered promiscuous mode
[  962.184534][ T1693] syzkaller0: entered allmulticast mode
[  962.354894][ T1701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7262'.
[  962.546992][ T1686] wlan1 speed is unknown, defaulting to 1000
[  962.554808][ T1687] lo speed is unknown, defaulting to 1000
[  962.972431][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  962.980484][    C1] lec:lec_tx_timeout: lec0
[  962.985061][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  963.118076][ T1717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7267'.
[  963.148473][ T1717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7267'.
[  963.164862][ T1687] wlan1 speed is unknown, defaulting to 1000
[  963.238639][ T1718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7267'.
[  963.477666][ T1722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7268'.
[  963.522177][ T1722] netlink: zone id is out of range
[  963.544858][ T1722] netlink: zone id is out of range
[  963.569847][ T1722] netlink: zone id is out of range
[  963.599453][ T1722] netlink: zone id is out of range
[  963.615681][ T1722] netlink: zone id is out of range
[  963.630694][ T1722] netlink: zone id is out of range
[  963.663534][ T1722] netlink: zone id is out of range
[  963.689539][ T1722] netlink: zone id is out of range
[  963.702549][ T1722] netlink: zone id is out of range
[  963.715656][ T1722] netlink: zone id is out of range
[  963.725568][ T1734] lo speed is unknown, defaulting to 1000
[  963.732733][ T1722] netlink: zone id is out of range
[  963.745435][ T1722] netlink: zone id is out of range
[  963.754420][ T1734] lo speed is unknown, defaulting to 1000
[  963.763034][ T1722] netlink: zone id is out of range
[  964.131603][ T1739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7273'.
[  964.250204][ T1745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7271'.
[  964.267934][ T1737] bond9: Removing last arp target with arp_interval on
[  964.275575][ T1734] wlan1 speed is unknown, defaulting to 1000
[  964.327247][ T1745] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  964.527490][ T1764] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  964.544198][ T1765] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  964.832853][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  964.974353][ T1784] lo speed is unknown, defaulting to 1000
[  965.039370][ T1784] lo speed is unknown, defaulting to 1000
[  965.394518][ T1798] lo speed is unknown, defaulting to 1000
[  965.617002][ T1804] block nbd3: NBD_DISCONNECT
[  965.626909][ T1804] block nbd3: Send disconnect failed -32
[  965.671260][ T1784] wlan1 speed is unknown, defaulting to 1000
[  965.671627][ T1798] lo speed is unknown, defaulting to 1000
[  965.732609][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  965.750686][T18366] bridge_slave_1: left allmulticast mode
[  965.762870][T18366] bridge_slave_1: left promiscuous mode
[  965.788996][T18366] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.815235][T18366] ¾x9ÿ: left allmulticast mode
[  965.822393][T18366] ¾x9ÿ: left promiscuous mode
[  965.827338][T18366] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  967.011951][T18366] bond1 (unregistering): Released all slaves
[  967.044786][T18366] bond2 (unregistering): Released all slaves
[  967.076220][T18366] bond3 (unregistering): Released all slaves
[  967.100899][T18366] bond4 (unregistering): Released all slaves
[  967.140161][T18366] bond5 (unregistering): Released all slaves
[  967.166913][T18366] bond6 (unregistering): Released all slaves
[  967.191683][T18366] bond7 (unregistering): Released all slaves
[  967.219935][T18366] bond8 (unregistering): Released all slaves
[  967.245885][ T1813] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  967.246141][ T1798] wlan1 speed is unknown, defaulting to 1000
[  967.293385][ T1820] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  967.487941][T18366] tipc: Left network mode
[  967.495010][ T1827] netlink: 'syz.3.7295': attribute type 7 has an invalid length.
[  967.515702][ T1827] netlink: 'syz.3.7295': attribute type 8 has an invalid length.
[  967.683361][ T1827] __nla_validate_parse: 2 callbacks suppressed
[  967.683383][ T1827] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7295'.
[  967.739048][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7295'.
[  967.866248][ T1826] lo speed is unknown, defaulting to 1000
[  967.914528][ T1826] lo speed is unknown, defaulting to 1000
[  968.002282][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  968.010338][    C1] lec:lec_tx_timeout: lec0
[  968.015062][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  968.819275][ T1845] syzkaller0: entered promiscuous mode
[  968.842710][ T1845] syzkaller0: entered allmulticast mode
[  968.906224][ T1849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7302'.
[  969.668795][ T1857] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7303'.
[  970.420136][ T1826] wlan1 speed is unknown, defaulting to 1000
[  970.918370][ T1880] net_ratelimit: 43 callbacks suppressed
[  970.918392][ T1880] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  971.249298][ T1891] FAULT_INJECTION: forcing a failure.
[  971.249298][ T1891] name failslab, interval 1, probability 0, space 0, times 0
[  971.293189][ T1895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7312'.
[  971.315205][ T1891] CPU: 0 UID: 0 PID: 1891 Comm: syz.3.7311 Not tainted syzkaller #0 PREEMPT(full) 
[  971.315235][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  971.315250][ T1891] Call Trace:
[  971.315259][ T1891]  <TASK>
[  971.315269][ T1891]  dump_stack_lvl+0xe8/0x150
[  971.315306][ T1891]  should_fail_ex+0x412/0x560
[  971.315339][ T1891]  should_failslab+0xa8/0x100
[  971.315367][ T1891]  ? skb_clone+0x212/0x3a0
[  971.315390][ T1891]  kmem_cache_alloc_noprof+0x87/0x650
[  971.315412][ T1891]  ? __netlink_lookup+0xc6/0x8b0
[  971.315452][ T1891]  skb_clone+0x212/0x3a0
[  971.315478][ T1891]  __netlink_deliver_tap+0x404/0x850
[  971.315521][ T1891]  ? netlink_deliver_tap+0x2e/0x1b0
[  971.315553][ T1891]  netlink_deliver_tap+0x19c/0x1b0
[  971.315585][ T1891]  netlink_unicast+0x7e3/0x9b0
[  971.315623][ T1891]  ? __pfx_netlink_unicast+0x10/0x10
[  971.315653][ T1891]  ? netlink_sendmsg+0x650/0xb40
[  971.315682][ T1891]  ? skb_put+0x11b/0x210
[  971.315718][ T1891]  netlink_sendmsg+0x813/0xb40
[  971.315760][ T1891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  971.315795][ T1891]  ? aa_sock_msg_perm+0xf1/0x1b0
[  971.315826][ T1891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  971.315864][ T1891]  ____sys_sendmsg+0x972/0x9f0
[  971.315901][ T1891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  971.315934][ T1891]  ? import_iovec+0x73/0xa0
[  971.315973][ T1891]  ___sys_sendmsg+0x2a5/0x360
[  971.316002][ T1891]  ? __pfx____sys_sendmsg+0x10/0x10
[  971.316066][ T1891]  ? __fget_files+0x2a/0x420
[  971.316097][ T1891]  ? __fget_files+0x3a0/0x420
[  971.316141][ T1891]  __x64_sys_sendmsg+0x1bd/0x2a0
[  971.316167][ T1891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  971.316205][ T1891]  ? __pfx_ksys_write+0x10/0x10
[  971.316248][ T1891]  do_syscall_64+0x14d/0xf80
[  971.316280][ T1891]  ? trace_irq_disable+0x3b/0x150
[  971.316312][ T1891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.316335][ T1891]  ? clear_bhb_loop+0x40/0x90
[  971.316364][ T1891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.316387][ T1891] RIP: 0033:0x7ffa65f9c799
[  971.316408][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.316428][ T1891] RSP: 002b:00007ffa66e50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  971.316451][ T1891] RAX: ffffffffffffffda RBX: 00007ffa66215fa0 RCX: 00007ffa65f9c799
[  971.316468][ T1891] RDX: 0000000000004080 RSI: 0000200000000480 RDI: 0000000000000003
[  971.316483][ T1891] RBP: 00007ffa66e50090 R08: 0000000000000000 R09: 0000000000000000
[  971.316497][ T1891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.316510][ T1891] R13: 00007ffa66216038 R14: 00007ffa66215fa0 R15: 00007ffe63bee3d8
[  971.316547][ T1891]  </TASK>
[  971.763570][T18366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  971.771507][T18366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  971.807441][ T1905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7315'.
[  972.138372][ T1900] netem: unknown loss type 0
[  972.143712][ T1900] netem: change failed
[  972.440414][ T1917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7319'.
[  972.449570][ T1917] netlink: 'syz.3.7319': attribute type 7 has an invalid length.
[  972.459274][ T1917] netlink: 'syz.3.7319': attribute type 8 has an invalid length.
[  972.468057][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7319'.
[  972.495482][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7323'.
[  972.528089][ T1927] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  972.537158][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  972.570567][ T1932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  972.844119][ T1944] x_tables: duplicate underflow at hook 2
[  972.874387][ T1942] lo speed is unknown, defaulting to 1000
[  972.894793][ T1942] lo speed is unknown, defaulting to 1000
[  972.924941][T18366] IPVS: stop unused estimator thread 0...
[  973.022287][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  973.030385][    C1] lec:lec_tx_timeout: lec0
[  973.035248][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  973.309546][ T1974] FAULT_INJECTION: forcing a failure.
[  973.309546][ T1974] name failslab, interval 1, probability 0, space 0, times 0
[  973.322526][ T1974] CPU: 0 UID: 0 PID: 1974 Comm: syz.1.7334 Not tainted syzkaller #0 PREEMPT(full) 
[  973.322550][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  973.322562][ T1974] Call Trace:
[  973.322578][ T1974]  <TASK>
[  973.322586][ T1974]  dump_stack_lvl+0xe8/0x150
[  973.322618][ T1974]  should_fail_ex+0x412/0x560
[  973.322646][ T1974]  should_failslab+0xa8/0x100
[  973.322672][ T1974]  __kmalloc_cache_noprof+0x88/0x660
[  973.322694][ T1974]  ? xfrm_policy_alloc+0x78/0x2b0
[  973.322727][ T1974]  xfrm_policy_alloc+0x78/0x2b0
[  973.322756][ T1974]  xfrm_policy_construct+0x39/0x6b0
[  973.322806][ T1974]  xfrm_add_policy+0x286/0x820
[  973.322830][ T1974]  ? __pfx_xfrm_add_policy+0x10/0x10
[  973.322848][ T1974]  ? apparmor_capable+0x126/0x170
[  973.322882][ T1974]  ? __nla_parse+0x40/0x60
[  973.322914][ T1974]  xfrm_user_rcv_msg+0x746/0xb20
[  973.322938][ T1974]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  973.322990][ T1974]  ? __pfx___mutex_trylock_common+0x10/0x10
[  973.323022][ T1974]  ? rcu_is_watching+0x15/0xb0
[  973.323048][ T1974]  ? trace_contention_end+0x3d/0x150
[  973.323080][ T1974]  ? __mutex_lock+0x319/0x1300
[  973.323116][ T1974]  netlink_rcv_skb+0x232/0x4b0
[  973.323143][ T1974]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  973.323164][ T1974]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  973.323204][ T1974]  ? netlink_deliver_tap+0x2e/0x1b0
[  973.323228][ T1974]  ? netlink_deliver_tap+0x2e/0x1b0
[  973.323257][ T1974]  xfrm_netlink_rcv+0x79/0x90
[  973.323275][ T1974]  netlink_unicast+0x80f/0x9b0
[  973.323307][ T1974]  ? __pfx_netlink_unicast+0x10/0x10
[  973.323333][ T1974]  ? netlink_sendmsg+0x650/0xb40
[  973.323357][ T1974]  ? skb_put+0x11b/0x210
[  973.323389][ T1974]  netlink_sendmsg+0x813/0xb40
[  973.323423][ T1974]  ? __pfx_netlink_sendmsg+0x10/0x10
[  973.323453][ T1974]  ? aa_sock_msg_perm+0xf1/0x1b0
[  973.323480][ T1974]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  973.323504][ T1974]  ____sys_sendmsg+0x972/0x9f0
[  973.323537][ T1974]  ? __pfx_____sys_sendmsg+0x10/0x10
[  973.323589][ T1974]  ? import_iovec+0x73/0xa0
[  973.323623][ T1974]  ___sys_sendmsg+0x2a5/0x360
[  973.323647][ T1974]  ? __pfx____sys_sendmsg+0x10/0x10
[  973.323699][ T1974]  ? __fget_files+0x2a/0x420
[  973.323727][ T1974]  ? __fget_files+0x3a0/0x420
[  973.323764][ T1974]  __x64_sys_sendmsg+0x1bd/0x2a0
[  973.323786][ T1974]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  973.323815][ T1974]  ? __pfx_ksys_write+0x10/0x10
[  973.323847][ T1974]  do_syscall_64+0x14d/0xf80
[  973.323874][ T1974]  ? trace_irq_disable+0x3b/0x150
[  973.323901][ T1974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  973.323920][ T1974]  ? clear_bhb_loop+0x40/0x90
[  973.323944][ T1974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  973.323975][ T1974] RIP: 0033:0x7f9a0e39c799
[  973.323993][ T1974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  973.324008][ T1974] RSP: 002b:00007f9a0f33e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  973.324029][ T1974] RAX: ffffffffffffffda RBX: 00007f9a0e615fa0 RCX: 00007f9a0e39c799
[  973.324043][ T1974] RDX: 0000000000004080 RSI: 0000200000000480 RDI: 0000000000000003
[  973.324054][ T1974] RBP: 00007f9a0f33e090 R08: 0000000000000000 R09: 0000000000000000
[  973.324066][ T1974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  973.324079][ T1974] R13: 00007f9a0e616038 R14: 00007f9a0e615fa0 R15: 00007ffd9f782b78
[  973.324109][ T1974]  </TASK>
[  973.712517][ T1942] wlan1 speed is unknown, defaulting to 1000
[  973.758001][ T1979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  973.776451][ T1979] syzkaller0: entered promiscuous mode
[  973.785727][ T1979] syzkaller0: entered allmulticast mode
[  973.885814][ T1979] tipc: Resetting bearer <eth:syzkaller0>
[  973.985478][ T1977] tipc: Resetting bearer <eth:syzkaller0>
[  974.001177][ T1977] tipc: Disabling bearer <eth:syzkaller0>
[  974.250305][ T1999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7340'.
[  974.293737][ T1997] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[  974.467343][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'.
[  974.487695][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'.
[  974.526892][ T2015] bridge3: entered promiscuous mode
[  974.533131][ T2015] bridge3: entered allmulticast mode
[  974.625856][ T2020] netlink: 2076 bytes leftover after parsing attributes in process `syz.2.7347'.
[  974.653006][ T2020] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 !
[  974.883436][ T2032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7350'.
[  975.062633][ T2035] tipc: Started in network mode
[  975.067659][ T2035] tipc: Node identity 4a1b5615005c, cluster identity 4711
[  975.076029][ T2035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  975.084614][ T2035] syzkaller0: entered promiscuous mode
[  975.090277][ T2035] syzkaller0: entered allmulticast mode
[  975.218659][ T2035] tipc: Resetting bearer <eth:syzkaller0>
[  975.237699][ T2034] tipc: Resetting bearer <eth:syzkaller0>
[  975.258155][ T2044] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7354'.
[  975.299825][ T2034] tipc: Disabling bearer <eth:syzkaller0>
[  975.502735][ T2066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7359'.
[  975.654361][ T2079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7364'.
[  976.044469][ T2098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7368'.
[  976.226693][ T2101] lo speed is unknown, defaulting to 1000
[  976.248597][ T2101] lo speed is unknown, defaulting to 1000
[  976.769291][ T2101] wlan1 speed is unknown, defaulting to 1000
[  977.022746][ T2120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7375'.
[  977.351083][ T2134] 
[  977.353482][ T2134] ======================================================
[  977.360522][ T2134] WARNING: possible circular locking dependency detected
[  977.367573][ T2134] syzkaller #0 Not tainted
[  977.372004][ T2134] ------------------------------------------------------
[  977.379036][ T2134] syz.4.7380/2134 is trying to acquire lock:
[  977.385038][ T2134] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  977.394242][ T2134] 
[  977.394242][ T2134] but task is already holding lock:
[  977.401628][ T2134] ffff888030eeb970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  977.410912][ T2134] 
[  977.410912][ T2134] which lock already depends on the new lock.
[  977.410912][ T2134] 
[  977.421337][ T2134] 
[  977.421337][ T2134] the existing dependency chain (in reverse order) is:
[  977.430373][ T2134] 
[  977.430373][ T2134] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  977.438414][ T2134]        _raw_spin_lock_bh+0x36/0x50
[  977.443736][ T2134]        nr_rt_ioctl+0x215/0xf90
[  977.448715][ T2134]        sock_do_ioctl+0x101/0x320
[  977.453863][ T2134]        sock_ioctl+0x5c6/0x7f0
[  977.458752][ T2134]        __se_sys_ioctl+0xfc/0x170
[  977.463911][ T2134]        do_syscall_64+0x14d/0xf80
[  977.469101][ T2134]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.475523][ T2134] 
[  977.475523][ T2134] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  977.483357][ T2134]        _raw_spin_lock_bh+0x36/0x50
[  977.488668][ T2134]        nr_rt_device_down+0xbe/0x860
[  977.494052][ T2134]        nr_device_event+0x137/0x150
[  977.499374][ T2134]        notifier_call_chain+0x1be/0x400
[  977.505049][ T2134]        __dev_notify_flags+0x16d/0x310
[  977.510642][ T2134]        netif_change_flags+0xe8/0x1a0
[  977.516137][ T2134]        dev_change_flags+0x130/0x260
[  977.521518][ T2134]        dev_ioctl+0x7b4/0x1150
[  977.526376][ T2134]        sock_do_ioctl+0x23e/0x320
[  977.531542][ T2134]        sock_ioctl+0x5c6/0x7f0
[  977.536409][ T2134]        __se_sys_ioctl+0xfc/0x170
[  977.541529][ T2134]        do_syscall_64+0x14d/0xf80
[  977.546655][ T2134]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.553068][ T2134] 
[  977.553068][ T2134] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  977.561022][ T2134]        __lock_acquire+0x15a5/0x2cf0
[  977.566404][ T2134]        lock_acquire+0xf0/0x2e0
[  977.571380][ T2134]        _raw_spin_lock_bh+0x36/0x50
[  977.576699][ T2134]        nr_rt_ioctl+0x40c/0xf90
[  977.581664][ T2134]        sock_do_ioctl+0x101/0x320
[  977.586876][ T2134]        sock_ioctl+0x5c6/0x7f0
[  977.591761][ T2134]        __se_sys_ioctl+0xfc/0x170
[  977.596886][ T2134]        do_syscall_64+0x14d/0xf80
[  977.602010][ T2134]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.608451][ T2134] 
[  977.608451][ T2134] other info that might help us debug this:
[  977.608451][ T2134] 
[  977.618675][ T2134] Chain exists of:
[  977.618675][ T2134]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  977.618675][ T2134] 
[  977.632499][ T2134]  Possible unsafe locking scenario:
[  977.632499][ T2134] 
[  977.639946][ T2134]        CPU0                    CPU1
[  977.645319][ T2134]        ----                    ----
[  977.650711][ T2134]   lock(&nr_node->node_lock);
[  977.655486][ T2134]                                lock(nr_node_list_lock);
[  977.662629][ T2134]                                lock(&nr_node->node_lock);
[  977.669975][ T2134]   lock(nr_neigh_list_lock);
[  977.674688][ T2134] 
[  977.674688][ T2134]  *** DEADLOCK ***
[  977.674688][ T2134] 
[  977.682853][ T2134] 2 locks held by syz.4.7380/2134:
[  977.687986][ T2134]  #0: ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  977.697603][ T2134]  #1: ffff888030eeb970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  977.707309][ T2134] 
[  977.707309][ T2134] stack backtrace:
[  977.713309][ T2134] CPU: 0 UID: 0 PID: 2134 Comm: syz.4.7380 Not tainted syzkaller #0 PREEMPT(full) 
[  977.713336][ T2134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  977.713351][ T2134] Call Trace:
[  977.713360][ T2134]  <TASK>
[  977.713369][ T2134]  dump_stack_lvl+0xe8/0x150
[  977.713401][ T2134]  print_circular_bug+0x2e1/0x300
[  977.713438][ T2134]  check_noncircular+0x12e/0x150
[  977.713475][ T2134]  __lock_acquire+0x15a5/0x2cf0
[  977.713505][ T2134]  ? kasan_save_track+0x4f/0x80
[  977.713540][ T2134]  lock_acquire+0xf0/0x2e0
[  977.713567][ T2134]  ? nr_rt_ioctl+0x40c/0xf90
[  977.713600][ T2134]  ? nr_rt_ioctl+0x40c/0xf90
[  977.713629][ T2134]  _raw_spin_lock_bh+0x36/0x50
[  977.713656][ T2134]  ? nr_rt_ioctl+0x40c/0xf90
[  977.713685][ T2134]  nr_rt_ioctl+0x40c/0xf90
[  977.713721][ T2134]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  977.713756][ T2134]  ? apparmor_capable+0x126/0x170
[  977.713794][ T2134]  ? capable+0x88/0xe0
[  977.713822][ T2134]  ? nr_ioctl+0x1b1/0x3b0
[  977.713848][ T2134]  sock_do_ioctl+0x101/0x320
[  977.713876][ T2134]  ? __pfx_sock_do_ioctl+0x10/0x10
[  977.713900][ T2134]  ? do_futex+0x395/0x420
[  977.713936][ T2134]  sock_ioctl+0x5c6/0x7f0
[  977.713961][ T2134]  ? __pfx_sock_ioctl+0x10/0x10
[  977.713986][ T2134]  ? __fget_files+0x2a/0x420
[  977.714028][ T2134]  ? __fget_files+0x3a0/0x420
[  977.714058][ T2134]  ? __fget_files+0x2a/0x420
[  977.714088][ T2134]  ? bpf_lsm_file_ioctl+0x9/0x20
[  977.714122][ T2134]  ? __pfx_sock_ioctl+0x10/0x10
[  977.714145][ T2134]  __se_sys_ioctl+0xfc/0x170
[  977.714171][ T2134]  do_syscall_64+0x14d/0xf80
[  977.714200][ T2134]  ? trace_irq_disable+0x3b/0x150
[  977.714230][ T2134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.714251][ T2134]  ? clear_bhb_loop+0x40/0x90
[  977.714275][ T2134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.714296][ T2134] RIP: 0033:0x7fbfaa39c799
[  977.714316][ T2134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.714335][ T2134] RSP: 002b:00007fbfa85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  977.714358][ T2134] RAX: ffffffffffffffda RBX: 00007fbfaa615fa0 RCX: 00007fbfaa39c799
[  977.714373][ T2134] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  977.714387][ T2134] RBP: 00007fbfaa432c99 R08: 0000000000000000 R09: 0000000000000000
[  977.714401][ T2134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.714414][ T2134] R13: 00007fbfaa616038 R14: 00007fbfaa615fa0 R15: 00007ffef3b3cdc8
[  977.714441][ T2134]  </TASK>
[  977.974104][ T2142] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4c
[  978.052323][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  978.060404][    C1] lec:lec_tx_timeout: lec0
[  978.062584][ T2141] lo speed is unknown, defaulting to 1000
[  978.065881][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  978.091077][ T2141] lo speed is unknown, defaulting to 1000
[  978.162145][ T2141] wlan1 speed is unknown, defaulting to 1000
[  983.892257][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  983.900335][    C1] lec:lec_tx_timeout: lec0
[  983.904896][    C1] lec:lec_start_xmit: lec0:No lecd attached