last executing test programs:

3.500453457s ago: executing program 1 (id=6150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]})

3.203803338s ago: executing program 1 (id=6155):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000079b2cf2c000004160000000200000008000b000e000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async, rerun: 32)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32)
bind$can_raw(r2, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) (async)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) (async, rerun: 32)
r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x60}}, 0x0) (async)
r5 = socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000002000000040049d981804edf1ff2e912f13b9ccf426f9e56e85732717373bb81e390daed685c798f9f158a7a3f6d33072c3bc665a6eb23ba75f47d27e7ba88882097f50f8e082f198dc08e8a934ccc30224a6939128337fae235aa6c6fe42546c1ed3d1ee49ca5c69fe5aeab779664c822945987334706fc96af91b9c170623319bd460234e73a04e18ed632c81dfa2f751d6afce175a9022a54f1d86552e933"], 0x48}}, 0x0) (async)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) (async)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000100)=0x1) (async)
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000680)="ea45731eeb7a2af12e3da98eaf42e3147cf611656ce585cb31ad54473defb963914359a9a9f0edffe9fdd150e22139671d7e7bf3024446fb028665202649ef33285270831dc9e5bcc63e0cc1bf550dc0d3ba9603773987ebd64c01a4d8d8a3dac9ae75c32f18a8e00949cc90343a951a0901a0037dafe9d1dc870f9dd2b47301b83b7dcfb36de03cfc2f5a75280e2894", 0x90}, {&(0x7f0000000480)="4d26e33fd370164cf88df84ba1a908d561", 0x11}, {&(0x7f00000004c0)="31703eaab7d9a9752b646409824d9a091fd43c409b7ed6c7e1355b3ced7b04f15a94257da932dd294a5d3e5b1853837d08", 0x31}], 0x3) (async)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000580)=0x1, 0x4) (async)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000300), 0x10) (async)
sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
r10 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
sendto$packet(r10, &(0x7f00000003c0)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abdc0886878", 0x88, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @multicast}, 0x14)

2.831916526s ago: executing program 1 (id=6158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000500000000000000000000060a0104000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
accept4(r1, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000500000000000000000000060a0104000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) (async)
socket$inet(0xa, 0x801, 0x84) (async)
listen(r1, 0x8) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800080007000000000014000000466f00b400660000401190780a010102ac14141244041c604e204e20004c9078010000000400000031150048e56e0573239361bd8f05c60ff304e7fee8a3221b0000000000000000b54970b8807c69e8aba2815ebe67451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be998215153aaf76bbf0aead9a5cd7bcd4dc8e1acb0a78f4793cfd119c7d22524afb527cb2f863faf11cd9523de620413362d274eaadc2f99642428d1a6d01e7c93053f2d363d1da501b22360b24234115e6d3d6bd695c5a140006420e76a18584caa6647356aac0c3ed2ce7f6969c44e2b98100613300fc4fe005950280e020668f320238e8396af61545fca52ed5944e65cccebe28f56564bd0b6dad5b1619a8e680c181d572"], 0xc2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async)

2.400634156s ago: executing program 0 (id=6161):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x0, 0x2, 0x2})
ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x20})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)

2.295347918s ago: executing program 0 (id=6163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x1d, 0x4, 0x0, 0x3f, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0xb, 0x34, [@rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xb}, {@multicast1, 0xf99}, {@broadcast, 0x5}, {@private=0xa010101, 0x2}, {@multicast2, 0x8001}]}, @end, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xff}, {@empty, 0x7}, {@loopback, 0x6}, {@broadcast, 0x8}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r6, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)
bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, 0x0, &(0x7f0000000240))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r11, 0x25, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000440)={'ip_vti0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c0}, 0x4040800)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000004c0)={0x6, 0x4, '\x00', [@padn, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @jumbo]}, 0x30)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001340)={<r12=>0x0, "f0c7a33628e21433cb57a9aa157ddfdc"})
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r13, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080001000d000000", 0x24)
ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000001c0)={{r0}, {@val={r12}, @max}})

2.236448143s ago: executing program 1 (id=6164):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) (async, rerun: 32)
sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040)

2.100744216s ago: executing program 1 (id=6167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x1, 0x9, 0x903, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x21})
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r5, 0x0, 0x0, 0x80800)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000440)={0x80, 0x6, 0x8, 0x0, 0x0, [{{r0}, 0x5}, {{r3}, 0x9b}, {{r4}, 0xe9d3}, {{r0}, 0xfb43}, {{r0}, 0x7}, {{r5}, 0x10000}, {{r0}, 0x170d}, {{r0}, 0x2}]})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a000480100001800c0001006e6f747261636b000900010073797a3000797a3200000000140000001100010000000000000000000000000a00000000000000f200000000000000"], 0x68}}, 0x0)

1.944937025s ago: executing program 2 (id=6169):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010300", 0x94}], 0x1)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r0}, 0x1, &(0x7f00000001c0)=[0xc00], 0x9, 0x0, 0x1})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x30011, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.855906567s ago: executing program 2 (id=6170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x109, 0xfffffffffffffff9, 0x2, 0xc, 0x2800000000000009, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1a03a8fd", @ANYRES16=r3, @ANYBLOB="070000000000000000000500000014000380100003800c0001800800010006000000180001801400020073797a5f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1a03a8fd", @ANYRES16=r3, @ANYBLOB="070000000000000000000500000014000380100003800c0001800800010006000000180001801400020073797a5f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

1.807741926s ago: executing program 0 (id=6171):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480080fa", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000c8014000b80080009000000000008000a004b42000004000b80080002000100000004000480080001000000000004000880"], 0x48}}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@union={0x5, 0x2, 0x0, 0x5, 0x1, 0x9, [{0x9, 0x3, 0x96}, {0xb, 0x3, 0x5}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000000)=""/55, 0x67, 0x37, 0x0, 0xcd7b, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x20, &(0x7f00000001c0)={&(0x7f00000004c0)=""/4096, 0x1000, <r3=>0x0, &(0x7f0000000300)=""/118, 0x76}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)

1.770982927s ago: executing program 1 (id=6173):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000040)=0x9, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x42, 0x0, 0x0, 0x7}, 0x4000800)
setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0)

1.726788104s ago: executing program 0 (id=6174):
r0 = socket$caif_stream(0x25, 0x1, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e}, 0x20)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x4e21, 0x8, 0x4e22, 0x0, 0x2, 0xc0, 0xa0, 0x89, 0x0, 0xee00}, {0x8, 0x2, 0x6, 0x5, 0x9, 0x4, 0xffffffffffffffff, 0x1eb3}, {0x9, 0x5, 0x1000, 0x8}, 0x4, 0x6e6bb6, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x33}, 0xa, @in=@multicast2, 0x3502, 0x1, 0x2, 0x6, 0x1, 0x8000, 0x1}}, 0xe8)

1.643899672s ago: executing program 0 (id=6175):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0}) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4, 0x2, 0xff, 0x18, 0x3, 0x5}, &(0x7f0000000240)=0x20)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0xcd, 0x6, 0x2, 0x800, 0x1, 0x3a2d, '\x00', r1, r3, 0x0, 0x2, 0x1}, 0x50) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000380)={0xa0000001}) (async)
ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r5, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async)
sendmmsg$inet_sctp(r0, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084000000020000000a000800080000000f000000", @ANYRES32=0x0, @ANYBLOB="18eefd00000000b484000000050000002000000081000000"], 0x38, 0x4040000}], 0x1, 0x0)

1.56748404s ago: executing program 0 (id=6178):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0)

1.071952193s ago: executing program 4 (id=6185):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c)

1.071146442s ago: executing program 3 (id=6186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.046696167s ago: executing program 4 (id=6187):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={<r2=>0x0, @loopback, @empty}, &(0x7f0000000200)=0xc)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "0247b5e57846d8956f917c7575f628dc492445c3223510e0933d7440d15af291800a13bc46f628a6ace1b87de1b81894e680f075296bb9507a8f19701daa3afa2e186b4f155d6a4daac1"}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "012e4165c9447c6f7ccf2a8a9869337728cceb9af234cdbb9de90129f15d20db4a38fc16291e27b7db755fa126c1c10066d7bc4fa0674ce0e62b3aca639f162b5b9b481baa1721d228b0145d941599bc1441a5f97aa7632e3f30df112cd54d69208228d84906868bb0a1d9eaf87636f3fd747e97c4584902"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "ee"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000024}, 0x4)
socket$kcm(0x29, 0x7, 0x0)
socket$inet6(0xa, 0xa, 0x5155) (async)
socket$inet6(0xa, 0xa, 0x5155)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc84ef0f98bb756ed}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004894}, 0x52eb45be3b79b708)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pK    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@fwd={0xd}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x5}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x800}, {0x0, 0x81}, {0x2}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000900)=""/16, 0x70, 0x10, 0x0, 0x81, 0xdbf599b53ec5c5ac, @value=r0}, 0x28) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@fwd={0xd}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x5}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x800}, {0x0, 0x81}, {0x2}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000900)=""/16, 0x70, 0x10, 0x0, 0x81, 0xdbf599b53ec5c5ac, @value=r0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r0, 0x20, &(0x7f0000000b40)={&(0x7f0000000a00)=""/231, 0xe7, 0x0, &(0x7f0000000b00)=""/22, 0x16}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r0, 0x20, &(0x7f0000000b40)={&(0x7f0000000a00)=""/231, 0xe7, <r5=>0x0, &(0x7f0000000b00)=""/22, 0x16}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0x7, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000780)='GPL\x00', 0x7, 0xac, &(0x7f00000007c0)=""/172, 0x41000, 0x8, '\x00', r2, 0x1b, r4, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0xc3, 0x10100}, 0x10, r5, 0x0, 0x2, 0x0, &(0x7f0000000bc0)=[{0x3, 0x4, 0x3, 0xa}, {0x3, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0x7, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000780)='GPL\x00', 0x7, 0xac, &(0x7f00000007c0)=""/172, 0x41000, 0x8, '\x00', r2, 0x1b, r4, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0xc3, 0x10100}, 0x10, r5, 0x0, 0x2, 0x0, &(0x7f0000000bc0)=[{0x3, 0x4, 0x3, 0xa}, {0x3, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000cc0))
r7 = socket$kcm(0x29, 0x7, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001d00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000d80)={0xe88, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x13c, 0x91, "43248771653091e10ad7a19b7d692b587eed5675517896ae6203ffe0622e9b13a41e57931ed9b350be96e7d843054b2fea5b80358060a9625547ac76f04c2461fc9859c7dc9bb68afbda240e513564ed0f1af7ffd6bc852f722c26ad2f265462d6a7bf604c31ffde7e38a468222b4684055d47cf41ba24db38543d136a9ce87b00b52c73b294447821f0a32a06e4adb6e673f0ce7131ce9997c75564826ef0889230372c1cbe5481a7c50f12d20331595c656f2b2b222b12c2bbaf162f488fdbb74b32f3ce02096d34fd2631faf99fa8845e5a89d85d9b582d040dfcc17434547cc669648a669617b7da1beb95e165474197025fae658e019bccd70099a3fa71209650ea111fece8a35f7d8c16ac609c5270311a1e538d48d1c61ad41aa442249b4ad573e118ad463a99be1efa4a0c4f7e41ef3d54619f9c"}, @NL80211_ATTR_IE={0x55, 0x2a, [@dsss={0x3, 0x1, 0xb4}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x8, @broadcast, 0x9, @value=@device_b, 0xfffffff3, 0x8, @device_a, 0xd}}, @challenge={0x10, 0x1, 0xa9}, @cf={0x4, 0x6, {0x80, 0x0, 0x3, 0x3}}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x3, 0x0, {0x7fffffffffffffff, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0xfffffff7, 0x20}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x196, 0x7f, [@perr={0x84, 0x122, {0x5e, 0x12, [{{}, @broadcast, 0x9, @void, 0x28}, {{0x0, 0x1}, @device_b, 0xf7, @value, 0x23}, {{0x0, 0x1}, @broadcast, 0xa8c4, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x7}, {{}, @broadcast, 0x4, @void, 0x18}, {{}, @broadcast, 0x1, @void, 0x3e}, {{}, @device_a, 0x6, @void, 0x26}, {{}, @device_b, 0x7, @void, 0x34}, {{}, @device_a, 0x0, @void, 0x26}, {{}, @device_a, 0xbaf, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x24ee, @value, 0x23}, {{}, @device_a, 0x1000, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x10}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x7bc, @value=@broadcast, 0x23}, {{}, @device_a, 0x5892e8b5, @void, 0x32}]}}, @perr={0x84, 0x55, {0x97, 0x5, [{{0x0, 0x1}, @device_b, 0x7f, @value, 0x3d}, {{}, @broadcast, 0x3, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x6}, {{}, @device_b, 0x4, @void, 0x2a}]}}, @rann={0x7e, 0x15, {{0x1, 0x1f}, 0x2, 0x3, @device_b, 0x1, 0x5, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x22f, 0x7f, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x3, 0x6, 0x6, @broadcast, 0x1, @void, 0x6, 0x919, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x7fffffff}, {{0x1}, @device_b, 0xfffffffd}]}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random_vendor={0xdd, 0x42, "a0bf5ba309ecac91d6871290f50d7b0197aafc38795355b80c9ceef1009128d1d7b94bf64f48242b580f3ecfc004a21659a21d849516a836c02762745eb3d53a2201"}, @perr={0x84, 0x5b, {0x6, 0x5, [{{0x0, 0x1}, @device_a, 0xffffc60d, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x9}, {{}, @device_b, 0x3, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x1a}, {{0x0, 0x1}, @device_b, 0xf5, @value, 0x42}]}}, @tim={0x5, 0x3a, {0x8, 0x6, 0x4, "e3820e667c49c17119078bd52176b90b8b92ecb71eac3eb997d859d99fd058f67f5622a4da3697f1ca2e2df21225f95f44fbe5717713e5"}}, @measure_req={0x26, 0xb7, {0xff, 0x1, 0x2, "209392fb436b6f00b69b0837cc7a609d80868a231c5c68b6e28d054ac8a4cdf15ee30fcfca22c2a7476c747a0875b8ead96624624da48647b8f0c00d8e1f7afe865877c47318eb29ffdcc6f2f5a158daa66c3d01d3220fe0b44d26675dac5bb344f4ee27ab288c17b1055be75b61d47b7a448670a375ddc2d0d4e9431dcadc5e34d33734a063d89dfdf0644364dcd35eba7481976473adf14dfcef9affa4646fafd75a1dead248b63d3bf3b1f2e061ea22ddc684"}}, @ht={0x2d, 0x1a, {0xee9a98b22c6a2bef, 0x0, 0x3, 0x0, {0x1, 0xe25, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x7}}, @measure_req={0x26, 0x2e, {0x40, 0x9, 0xa, "3c6ca100cde4a39c0066db854408bb09423f072af3134b67c0ee373dee57fc8749f8b01bfcb30a4639a17a"}}]}, @NL80211_ATTR_PROBE_RESP={0x774, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xd2, 0x80, [@preq={0x82, 0x46, {{0x0, 0x1}, 0x0, 0x1, 0x5, @device_a, 0x5, @void, 0x101, 0x10001, 0x4, [{{0x1}, @device_a, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{}, @device_b, 0x10000}, {{}, @broadcast, 0x400}]}}, @cf={0x4, 0x6, {0xa9, 0x41, 0xfff, 0xf800}}, @random={0x0, 0x7c, "524b0f2686c19a3062ca80c2c471bf592f6bdc31db3dbca7838a55ad8afb9dc952ada07d05cab8f41f16e03992cfbbdfa421b9041354f856355a09b985012a59d47e9d5b2d5112209e246eed38c73862d58fbae7897a541d2e744f32b8c324e44cbe459749e96dddeef5339e3cf0f811d2b150b09a0ee4d769ad2bc2"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xcd, 0x7f, [@dsss={0x3, 0x1, 0xae}, @supported_rates={0x1, 0x5, [{}, {0x2}, {0xb}, {0x11, 0x1}, {0x0, 0x1}]}, @perr={0x84, 0xbd, {0x4, 0xd, [{{}, @device_b, 0x8001, @void, 0x4}, {{}, @broadcast, 0x6, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x19}, {{}, @device_b, 0xffffffff, @void, 0x39}, {{}, @device_b, 0x2, @void, 0x38}, {{}, @device_a, 0x3, @void, 0x3c}, {{}, @device_b, 0x3, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x3}, {{}, @broadcast, 0x57b, @void, 0x30}, {{}, @device_b, 0x1fffe, @void, 0x39}, {{}, @broadcast, 0x1, @void, 0x3a}, {{}, @device_b, 0x2}]}}]}]}, 0xe88}, 0x1, 0x0, 0x0, 0x4000864}, 0x4000000) (async)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001d00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000d80)={0xe88, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x13c, 0x91, "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"}, @NL80211_ATTR_IE={0x55, 0x2a, [@dsss={0x3, 0x1, 0xb4}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x8, @broadcast, 0x9, @value=@device_b, 0xfffffff3, 0x8, @device_a, 0xd}}, @challenge={0x10, 0x1, 0xa9}, @cf={0x4, 0x6, {0x80, 0x0, 0x3, 0x3}}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x3, 0x0, {0x7fffffffffffffff, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0xfffffff7, 0x20}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x196, 0x7f, [@perr={0x84, 0x122, {0x5e, 0x12, [{{}, @broadcast, 0x9, @void, 0x28}, {{0x0, 0x1}, @device_b, 0xf7, @value, 0x23}, {{0x0, 0x1}, @broadcast, 0xa8c4, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x7}, {{}, @broadcast, 0x4, @void, 0x18}, {{}, @broadcast, 0x1, @void, 0x3e}, {{}, @device_a, 0x6, @void, 0x26}, {{}, @device_b, 0x7, @void, 0x34}, {{}, @device_a, 0x0, @void, 0x26}, {{}, @device_a, 0xbaf, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x24ee, @value, 0x23}, {{}, @device_a, 0x1000, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x10}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x7bc, @value=@broadcast, 0x23}, {{}, @device_a, 0x5892e8b5, @void, 0x32}]}}, @perr={0x84, 0x55, {0x97, 0x5, [{{0x0, 0x1}, @device_b, 0x7f, @value, 0x3d}, {{}, @broadcast, 0x3, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x6}, {{}, @device_b, 0x4, @void, 0x2a}]}}, @rann={0x7e, 0x15, {{0x1, 0x1f}, 0x2, 0x3, @device_b, 0x1, 0x5, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x22f, 0x7f, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x3, 0x6, 0x6, @broadcast, 0x1, @void, 0x6, 0x919, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x7fffffff}, {{0x1}, @device_b, 0xfffffffd}]}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random_vendor={0xdd, 0x42, "a0bf5ba309ecac91d6871290f50d7b0197aafc38795355b80c9ceef1009128d1d7b94bf64f48242b580f3ecfc004a21659a21d849516a836c02762745eb3d53a2201"}, @perr={0x84, 0x5b, {0x6, 0x5, [{{0x0, 0x1}, @device_a, 0xffffc60d, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x9}, {{}, @device_b, 0x3, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x1a}, {{0x0, 0x1}, @device_b, 0xf5, @value, 0x42}]}}, @tim={0x5, 0x3a, {0x8, 0x6, 0x4, "e3820e667c49c17119078bd52176b90b8b92ecb71eac3eb997d859d99fd058f67f5622a4da3697f1ca2e2df21225f95f44fbe5717713e5"}}, @measure_req={0x26, 0xb7, {0xff, 0x1, 0x2, "209392fb436b6f00b69b0837cc7a609d80868a231c5c68b6e28d054ac8a4cdf15ee30fcfca22c2a7476c747a0875b8ead96624624da48647b8f0c00d8e1f7afe865877c47318eb29ffdcc6f2f5a158daa66c3d01d3220fe0b44d26675dac5bb344f4ee27ab288c17b1055be75b61d47b7a448670a375ddc2d0d4e9431dcadc5e34d33734a063d89dfdf0644364dcd35eba7481976473adf14dfcef9affa4646fafd75a1dead248b63d3bf3b1f2e061ea22ddc684"}}, @ht={0x2d, 0x1a, {0xee9a98b22c6a2bef, 0x0, 0x3, 0x0, {0x1, 0xe25, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x7}}, @measure_req={0x26, 0x2e, {0x40, 0x9, 0xa, "3c6ca100cde4a39c0066db854408bb09423f072af3134b67c0ee373dee57fc8749f8b01bfcb30a4639a17a"}}]}, @NL80211_ATTR_PROBE_RESP={0x774, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xd2, 0x80, [@preq={0x82, 0x46, {{0x0, 0x1}, 0x0, 0x1, 0x5, @device_a, 0x5, @void, 0x101, 0x10001, 0x4, [{{0x1}, @device_a, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{}, @device_b, 0x10000}, {{}, @broadcast, 0x400}]}}, @cf={0x4, 0x6, {0xa9, 0x41, 0xfff, 0xf800}}, @random={0x0, 0x7c, "524b0f2686c19a3062ca80c2c471bf592f6bdc31db3dbca7838a55ad8afb9dc952ada07d05cab8f41f16e03992cfbbdfa421b9041354f856355a09b985012a59d47e9d5b2d5112209e246eed38c73862d58fbae7897a541d2e744f32b8c324e44cbe459749e96dddeef5339e3cf0f811d2b150b09a0ee4d769ad2bc2"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xcd, 0x7f, [@dsss={0x3, 0x1, 0xae}, @supported_rates={0x1, 0x5, [{}, {0x2}, {0xb}, {0x11, 0x1}, {0x0, 0x1}]}, @perr={0x84, 0xbd, {0x4, 0xd, [{{}, @device_b, 0x8001, @void, 0x4}, {{}, @broadcast, 0x6, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xc}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x19}, {{}, @device_b, 0xffffffff, @void, 0x39}, {{}, @device_b, 0x2, @void, 0x38}, {{}, @device_a, 0x3, @void, 0x3c}, {{}, @device_b, 0x3, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x3}, {{}, @broadcast, 0x57b, @void, 0x30}, {{}, @device_b, 0x1fffe, @void, 0x39}, {{}, @broadcast, 0x1, @void, 0x3a}, {{}, @device_b, 0x2}]}}]}]}, 0xe88}, 0x1, 0x0, 0x0, 0x4000864}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001dc0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001dc0)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x3c, r10, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001ec0)=0x8, 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001f00), 0x4)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x68, r12, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffb, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040041}, 0x800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000020c0)={0x2, 'hsr0\x00', {0x2}, 0x5})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000002100)={0x0, r4, 0x3, 0x6, 0x7af4, 0x3})
openat$cgroup_ro(r0, &(0x7f0000002140)='memory.current\x00', 0x0, 0x0) (async)
r13 = openat$cgroup_ro(r0, &(0x7f0000002140)='memory.current\x00', 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r13, 0x89ed, 0x0) (async)
ioctl$SIOCPNENABLEPIPE(r13, 0x89ed, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002180)={@multicast1, @private=0xa010100}, 0x8) (async)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002180)={@multicast1, @private=0xa010100}, 0x8)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000021c0)={@empty, @broadcast, 0x0, "5059ec1e3a50cb70db073c1dd2d2e5e0f789c050cac179d8240d091fb9b503a2", 0xc, 0x9, 0x8}, 0x3c)

978.222676ms ago: executing program 4 (id=6188):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={<r0=>0xffffffffffffffff, 0x6, 0x0, 0x1})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x4c, &(0x7f0000000380)='\xf2n4\xe7up\x10\x01\xc3\xf2=(]p#\x81\x04Y\xdf\xeb4\xdfO\xfe2\x94^\x12\x81Hy\x1c(\xe9\xfc\x121xE&2\xeb\x884/\x93\xcb,\x19\xf3\xbf9\x19N//,2\x15\x06\x1bj\x81\x99(j\'v\xb7\xbb\x0f\x00\x00\x00\xebz'}, 0x30)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x20008040)
recvmsg$can_raw(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x8001)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010e9f204000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280080001006772650018000280060003000000000006000e000200000004001200"], 0x44}}, 0x0)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r5, &(0x7f00000000c0)=ANY=[], 0x138)

851.36765ms ago: executing program 4 (id=6189):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x9e, 0x86, 0x9, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x700, 0x3, 0x401}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@dev, @multicast1, <r5=>0x0}, &(0x7f0000000600)=0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x244, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x244}}, 0x48801)

791.607197ms ago: executing program 2 (id=6191):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000000000000000000000000000000000033dde4a45187a82d196fedf46d524fac12c3f830630f17022ea292ae25fd645949c76eadf57b49249aaadb08d408b9c53621d8df9dcfac15c1e41f82f4115e2400a20392a0ba3a5178a01ce665bd08b5db03684b539bf17c58673faa5808d160f4c5eafe6778d8e8f679b924c2595", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000100)=""/20, 0x14}], 0x3, &(0x7f0000000300)=[{0xc8, 0x0, 0x0, ""/177}], 0xc8, 0x2000}, 0x38, 0x2020)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0)
sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000440), 0x4)

789.112037ms ago: executing program 3 (id=6192):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0)

659.899387ms ago: executing program 3 (id=6193):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', <r1=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$PNPIPE_INITSTATE(r3, 0x6a, 0x3, 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1f, 0x20, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000240)=0x8)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

576.490223ms ago: executing program 2 (id=6194):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd2b, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94)

517.600322ms ago: executing program 3 (id=6195):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb)
setsockopt$inet6_tcp_int(r1, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24)
r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x3, 0x2) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8942, &(0x7f00000011c0)={'ip6_vti0\x00'})
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) (async)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async, rerun: 32)
close(r2) (async, rerun: 32)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x18) (async)
getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x2c, 0x26, 0x8, 0x9, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xd, 0x5}, {0xfff2, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000084)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r7 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) (async)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async)
getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0)

424.578545ms ago: executing program 2 (id=6196):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000008000000000000850000007a00000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x42}, 0x94)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/4096, &(0x7f0000000080)=0x1000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

263.89262ms ago: executing program 2 (id=6197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000400)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000440)=0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r4, 0x29, 0x7, 0x10, 0x1, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', 0x10, 0x10, 0x8, 0x7}})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x2c, 0x1, 0xa359)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001028008000a00"/32, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r12, @ANYBLOB="890524ac35f1d3453cea92be372ab279edcb922462c92a5ea2a1a7b3b5f548e27cc7240243aa17498a4bdc01401b8a9af43f56aaeeab90a2f3a1c5521de01d63daa9bd8734e9d0ef959b2edb40000000", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

262.485849ms ago: executing program 4 (id=6198):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xcd}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
socket(0x5, 0x3, 0x4)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x20, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

222.775495ms ago: executing program 3 (id=6199):
syz_emit_ethernet(0xda, &(0x7f0000000000)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xcc, 0x68, 0x0, 0x0, 0x3a, 0x0, @loopback, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0xb4, 0x0, @opaque="c879d95446043cab81e97da7f9bec4dc466de2752b263dd87fd0f30a6f61ee8714f1cb70be856934eaf58640d71e5d3dd93acc70e58c757ef6d7b221b20ed8a908e221fdcce3be9ce587230ddc5466ef437a43c8759403f4b87dcab15696d2c50c2559e56a1d14595cc867496ed8a9c1792b9fdf956cd753d7ef55bd24a385948ae3c72352186dd170808eec026a440ff0a4c53084512964be685c582ae562f603ba8c98583d0e8c4c263ea1"}}}}}, 0x0)

71.404351ms ago: executing program 3 (id=6200):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000005680), 0x0, 0xe140, 0x0) (async)
recvmmsg(r1, &(0x7f0000005680), 0x0, 0xe140, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)

0s ago: executing program 4 (id=6201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x12a7, <r2=>0x0}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20060054}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r6, 0x89e2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r8, 0x29, 0x16, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "e59f1dd11910a0402ac1584af6e285f3f68ffdba061ddd80d2f50d"}]}, 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

743] tc_dump_action: action bad kind
[  319.447696][T18743] netlink: 'syz.2.3687': attribute type 2 has an invalid length.
[  319.484721][T18746] netem: unknown loss type 0
[  319.502042][T18746] netem: change failed
[  319.728233][T18762] vlan2: entered promiscuous mode
[  319.733651][T18762] vlan2: entered allmulticast mode
[  319.740933][T18762] hsr_slave_1: entered allmulticast mode
[  320.248613][T18788] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  320.870796][T18825] netlink: 'syz.3.3709': attribute type 13 has an invalid length.
[  321.053487][T18841] netlink: 'syz.1.3711': attribute type 30 has an invalid length.
[  321.166218][ T1136] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.178712][ T1136] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.225622][ T1136] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.245769][T18853] team_slave_0: entered promiscuous mode
[  321.251754][T18853] team_slave_1: entered promiscuous mode
[  321.260244][T18853] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  321.301991][ T1136] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.783210][T18880] ip6_vti0 speed is unknown, defaulting to 1000
[  321.998450][T18896] syzkaller0: entered promiscuous mode
[  322.014665][T18896] syzkaller0: entered allmulticast mode
[  322.773417][T18946] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0
[  322.782317][T18946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.935962][T18948] __nla_validate_parse: 22 callbacks suppressed
[  322.935981][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3745'.
[  322.981900][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3745'.
[  323.246535][T18952] syzkaller1: entered promiscuous mode
[  323.285221][T18952] syzkaller1: entered allmulticast mode
[  323.459203][T18962] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.682351][T18975] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3750'.
[  323.780010][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3753'.
[  323.820561][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3753'.
[  324.112839][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'.
[  324.299110][T19020] ieee802154 phy0 wpan0: encryption failed: -22
[  324.361304][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'.
[  324.436387][T19025] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3765'.
[  324.600328][T19035] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3771'.
[  324.688786][T19041] netlink: 'syz.3.3773': attribute type 14 has an invalid length.
[  324.711929][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3773'.
[  324.741580][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  324.741698][T19041] netlink: 'syz.3.3773': attribute type 14 has an invalid length.
[  324.752856][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  324.781253][T19045] netlink: 'syz.4.3775': attribute type 1 has an invalid length.
[  324.786056][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  324.836687][T19045] veth3: entered promiscuous mode
[  324.842849][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  324.920533][T19049] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000
[  325.005099][T19051] veth5: entered promiscuous mode
[  325.029439][T19056] netlink: 'syz.1.3780': attribute type 7 has an invalid length.
[  325.158572][T19067] openvswitch: netlink: IPv4 tun info is not correct
[  325.449587][T19093] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  325.457415][T19093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.527382][T19097] netlink: 'syz.4.3791': attribute type 14 has an invalid length.
[  325.539890][T19097] netlink: 'syz.4.3791': attribute type 13 has an invalid length.
[  325.553482][T19096] veth5: entered promiscuous mode
[  325.578134][T19096] veth5: entered allmulticast mode
[  325.648152][T19103] netlink: 'syz.0.3793': attribute type 1 has an invalid length.
[  325.690979][T19103] bond1: entered promiscuous mode
[  325.697076][T19103] 8021q: adding VLAN 0 to HW filter on device bond1
[  325.943417][T19123] bond1: (slave bridge2): making interface the new active one
[  325.951534][T19123] bridge2: entered promiscuous mode
[  325.958133][T19123] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  325.968148][T19117] syzkaller0: entered promiscuous mode
[  325.973785][T19117] syzkaller0: entered allmulticast mode
[  326.275970][T19151] tipc: Started in network mode
[  326.291214][T19151] tipc: Node identity 92f66edefe59, cluster identity 4711
[  326.302502][T19151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.333827][T19147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.355229][T19154] syzkaller0: entered promiscuous mode
[  326.358900][T19159] netlink: 'syz.0.3807': attribute type 10 has an invalid length.
[  326.360726][T19154] syzkaller0: entered allmulticast mode
[  326.428344][T19159] dummy0: entered promiscuous mode
[  326.463980][T19159] team0: Port device dummy0 added
[  326.470029][T19158] tipc: Resetting bearer <eth:syzkaller0>
[  326.541897][T19158] tipc: Disabling bearer <eth:syzkaller0>
[  326.712304][T19181] netlink: 'syz.4.3812': attribute type 3 has an invalid length.
[  327.117802][T19211] vlan0: left allmulticast mode
[  327.123011][T19211] mac80211_hwsim hwsim34 wlan0: left allmulticast mode
[  327.503149][T19241] netlink: 'syz.3.3829': attribute type 12 has an invalid length.
[  327.673298][T19252] tipc: Started in network mode
[  327.678455][T19252] tipc: Node identity 1eb73bff7d17, cluster identity 4711
[  327.704672][T19252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.748506][T19261] syzkaller0: entered promiscuous mode
[  327.754009][T19261] syzkaller0: entered allmulticast mode
[  327.839271][T19266] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.859101][T19261] tipc: Resetting bearer <eth:syzkaller0>
[  327.859110][T19272] x_tables: duplicate underflow at hook 3
[  327.871681][    C1] Unknown status report in ack skb
[  327.895827][T19245] tipc: Resetting bearer <eth:syzkaller0>
[  327.966686][T19281] delete_channel: no stack
[  327.975471][T19245] tipc: Disabling bearer <eth:syzkaller0>
[  328.063094][T19289] __nla_validate_parse: 32 callbacks suppressed
[  328.063112][T19289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3842'.
[  328.236131][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'.
[  328.245953][T19291] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  328.254283][T19295] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3844'.
[  328.284279][T19295] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3844'.
[  328.343283][T19300] 8021q: adding VLAN 0 to HW filter on device bond1
[  328.351497][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3848'.
[  328.376666][T19306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3848'.
[  328.395602][T19308] x_tables: ip_tables: icmp match: only valid for protocol 1
[  328.632856][T19323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3855'.
[  328.701223][T19327] bridge_slave_0: left allmulticast mode
[  328.713755][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'.
[  328.725304][T19327] bridge_slave_0: left promiscuous mode
[  328.741102][T19327] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.809895][T19327] bridge_slave_1: left allmulticast mode
[  328.820453][T19327] bridge_slave_1: left promiscuous mode
[  328.826395][T19327] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.859273][T19327] bond0: (slave bond_slave_0): Releasing backup interface
[  328.880238][T19327] bond0: (slave bond_slave_1): Releasing backup interface
[  328.905535][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.913202][T19327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.927543][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.935617][T19327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.947703][T19327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  328.991553][T19337] geneve2: entered promiscuous mode
[  328.997542][T19337] geneve2: entered allmulticast mode
[  329.021879][ T3498] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  329.046345][ T3498] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  329.080352][   T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  329.106621][   T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  329.179003][T19344] xt_l2tp: unknown flags: 10
[  329.256853][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3865'.
[  329.280831][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'.
[  329.350943][T19355] bridge7: entered promiscuous mode
[  329.382595][T19355] bridge7: entered allmulticast mode
[  329.400449][T19363] caif0: mtu less than device minimum
[  329.683388][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.717363][T19368] validate_nla: 22 callbacks suppressed
[  329.717380][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.740238][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.766306][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.775070][T19397] netlink: 'syz.1.3878': attribute type 15 has an invalid length.
[  329.810586][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.844096][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.866189][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.873232][T19401] netlink: 'syz.0.3880': attribute type 9 has an invalid length.
[  329.877098][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  329.893036][T19368] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  330.080063][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.314233][T19423] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  330.327603][T19423] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  330.339439][T19423] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  330.490093][T19421] syzkaller0: entered promiscuous mode
[  330.504308][T19421] syzkaller0: entered allmulticast mode
[  330.717972][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.757549][T19454] netlink: 'syz.2.3890': attribute type 11 has an invalid length.
[  331.761850][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.923312][T19428] ip6_vti0 speed is unknown, defaulting to 1000
[  332.090409][T19463] xt_l2tp: invalid flags combination: 8
[  332.327911][T19474] syzkaller1: entered promiscuous mode
[  332.333417][T19474] syzkaller1: entered allmulticast mode
[  332.459006][T19476] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  332.796030][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.117030][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.136482][T19519] __nla_validate_parse: 14 callbacks suppressed
[  333.136499][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3913'.
[  333.159187][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'.
[  333.172574][T19519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3913'.
[  333.211289][T19523] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  333.224928][T19523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.278721][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'.
[  333.605600][T19542] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3920'.
[  333.786404][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'.
[  333.812333][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'.
[  333.841915][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.029062][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.042371][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.064764][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.268820][T19578] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  334.269252][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'.
[  334.405222][T19590] vlan2: entered promiscuous mode
[  334.418483][T19590] geneve1: entered promiscuous mode
[  334.428134][T19590] vlan2: entered allmulticast mode
[  334.433383][T19590] geneve1: entered allmulticast mode
[  334.739639][T19610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3941'.
[  334.827190][T19612] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3941'.
[  335.108821][T19633] xt_hashlimit: overflow, rate too high: 0
[  335.346578][T19652] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  335.400467][T19657] validate_nla: 14 callbacks suppressed
[  335.400484][T19657] netlink: 'syz.0.3957': attribute type 1 has an invalid length.
[  335.565167][T19672] netlink: 'syz.0.3961': attribute type 1 has an invalid length.
[  335.618496][T19672] 8021q: adding VLAN 0 to HW filter on device bond3
[  335.792176][T19672] bond3: (slave ip6gretap1): making interface the new active one
[  335.802980][T19672] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  335.922288][   T50] net_ratelimit: 7 callbacks suppressed
[  335.922304][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.156366][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.191869][T19725] netlink: 'syz.3.3975': attribute type 8 has an invalid length.
[  336.264857][T19732] netlink: 'syz.0.3977': attribute type 12 has an invalid length.
[  336.354770][T19741] netlink: 'syz.2.3979': attribute type 5 has an invalid length.
[  336.426356][T19745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.435082][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.457803][T19746] tipc: Started in network mode
[  336.470561][T19746] tipc: Node identity f2efc074698, cluster identity 4711
[  336.484518][T19746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.492287][T19746] syzkaller0: entered promiscuous mode
[  336.499178][T19746] syzkaller0: entered allmulticast mode
[  336.515278][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.536503][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.546255][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.562410][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.576999][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.580836][T19746] tipc: Resetting bearer <eth:syzkaller0>
[  336.592663][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.601918][T19747] xt_l2tp: missing protocol rule (udp|l2tpip)
[  336.648979][T19759] bond6: up delay (7941) is not a multiple of miimon (4), value rounded to 7940 ms
[  336.687979][T19743] tipc: Resetting bearer <eth:syzkaller0>
[  336.710579][T19743] tipc: Disabling bearer <eth:syzkaller0>
[  337.393727][T19814] siw: device registration error -23
[  337.547662][T19827] netlink: 'syz.2.4006': attribute type 10 has an invalid length.
[  337.649382][T19839] veth0: entered promiscuous mode
[  337.671956][T19839] veth0: left promiscuous mode
[  338.091719][T19871] netlink: 'syz.1.4019': attribute type 1 has an invalid length.
[  338.159466][T19871] __nla_validate_parse: 15 callbacks suppressed
[  338.159483][T19871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4019'.
[  338.355585][T19890] ip6_vti0 speed is unknown, defaulting to 1000
[  338.584291][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4025'.
[  338.622067][T19886] ip6_vti0 speed is unknown, defaulting to 1000
[  338.632027][T19904] netlink: 'syz.3.4025': attribute type 1 has an invalid length.
[  338.674570][T19904] netlink: 'syz.3.4025': attribute type 1 has an invalid length.
[  338.682335][T19904] netlink: 'syz.3.4025': attribute type 2 has an invalid length.
[  338.706788][T19904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4025'.
[  339.006915][ T5979] syzkaller0: tun_net_xmit 76
[  339.022922][ T5979] syzkaller0: tun_net_xmit 48
[  339.035653][T17895] syzkaller0: tun_net_xmit 76
[  339.042946][T19909] syzkaller0: tun_chr_ioctl cmd 1074025677
[  339.059897][T19909] syzkaller0: Linktype set failed because interface is up
[  339.144767][T17895] syzkaller0: tun_net_xmit 76
[  340.469040][T19919] tipc: Started in network mode
[  340.473909][T19919] tipc: Node identity ac14140f, cluster identity 4711
[  340.482257][T19919] tipc: New replicast peer: 255.255.255.255
[  340.490566][T19919] tipc: Enabled bearer <udp:s>, priority 10
[  340.586070][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4032'.
[  340.595581][T19923] tipc: Invalid UDP bearer configuration
[  340.595631][T19923] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  340.632018][T19926] bridge_slave_0: left allmulticast mode
[  340.640357][T19926] bridge_slave_0: left promiscuous mode
[  340.655947][T19926] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.673849][T19926] bridge_slave_1: left allmulticast mode
[  340.683108][T19926] bridge_slave_1: left promiscuous mode
[  340.690767][T19926] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.702743][T19926] bond0: (slave bond_slave_0): Releasing backup interface
[  340.720674][T19926] bond0: (slave bond_slave_1): Releasing backup interface
[  340.756412][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'.
[  340.767128][T19926] team0: Port device team_slave_0 removed
[  340.785403][T19926] team0: Port device team_slave_1 removed
[  340.791863][T19926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.799982][T19926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.809483][T19926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.817192][T19926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.932069][T19941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4036'.
[  340.942099][T19941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4036'.
[  341.126231][T17895] net_ratelimit: 57 callbacks suppressed
[  341.126247][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.330735][T19963] netlink: 'syz.1.4041': attribute type 10 has an invalid length.
[  341.357245][T19963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4041'.
[  341.402639][T19963] dummy0: entered promiscuous mode
[  341.450135][T19963] bridge0: port 4(dummy0) entered blocking state
[  341.483211][T19963] bridge0: port 4(dummy0) entered disabled state
[  341.498799][T19963] dummy0: entered allmulticast mode
[  341.604621][T17895] tipc: Node number set to 2886997007
[  342.165774][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.256561][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.302322][T20010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4051'.
[  342.321461][T20015] netlink: 'syz.3.4054': attribute type 1 has an invalid length.
[  342.338040][T20015] netlink: 'syz.3.4054': attribute type 2 has an invalid length.
[  342.489221][T20028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4058'.
[  342.583059][T20030] bond2: invalid ARP target 0.0.0.0 specified for addition
[  342.590546][T20030] bond2: option arp_ip_target: invalid value (0)
[  342.598546][T20030] bond2 (unregistering): Released all slaves
[  342.720231][T20031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.734948][T20031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.772817][T20038] netdevsim netdevsim1 v: renamed from netdevsim0 (while UP)
[  342.870191][T20031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.882679][T20031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.000984][T20031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.019558][T20031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.055991][T20061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.087678][T20064] ip6_vti0 speed is unknown, defaulting to 1000
[  343.132326][T20031] netdevsim netdevsim1 v (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.153723][T20031] netdevsim netdevsim1 v (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.195239][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.370120][ T1136] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.392839][ T1136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.429565][T11637] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.440945][T11637] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.453387][T20084] netlink: 'syz.0.4073': attribute type 11 has an invalid length.
[  343.462585][T20084] __nla_validate_parse: 1 callbacks suppressed
[  343.462602][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'.
[  343.507447][T20084] pim6reg527: entered allmulticast mode
[  343.573138][   T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.597739][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.631874][   T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.644578][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.789669][T20101] 8021q: VLANs not supported on ipvlan1
[  343.838301][T20105] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20002
[  343.903119][T20111] netlink: 'syz.3.4080': attribute type 1 has an invalid length.
[  343.977611][T20111] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  344.235467][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.353672][T20128] bond2 (unregistering): Released all slaves
[  345.133402][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4095'.
[  345.145960][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4095'.
[  345.188346][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4095'.
[  345.220598][T20167] netlink: 'syz.2.4096': attribute type 1 has an invalid length.
[  345.259595][T20170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4097'.
[  345.276076][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.288605][T17870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.299336][T20173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4096'.
[  345.303523][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.309822][T20173] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4096'.
[  345.340365][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'.
[  345.350257][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'.
[  345.362850][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4095'.
[  345.841757][T20167] bond0: entered promiscuous mode
[  345.849680][T20167] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.143408][T20206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  346.314897][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.321296][T20212] netlink: 'syz.2.4108': attribute type 32 has an invalid length.
[  346.382390][T20212] bond4: option coupled_control: invalid value (52)
[  346.392582][T20212] bond4 (unregistering): Released all slaves
[  346.436790][T20202] syzkaller0: entered promiscuous mode
[  346.442486][T20202] syzkaller0: entered allmulticast mode
[  346.473587][T20219] syzkaller0: entered promiscuous mode
[  346.480586][T20219] syzkaller0: entered allmulticast mode
[  346.628702][T20222] vlan3: entered promiscuous mode
[  346.633836][T20222] bridge0: entered promiscuous mode
[  346.730408][T20224] bond2: entered promiscuous mode
[  346.737703][T20224] bond2: entered allmulticast mode
[  346.743392][T20224] 8021q: adding VLAN 0 to HW filter on device bond2
[  346.812250][T20229] syzkaller1: entered promiscuous mode
[  346.818189][T20229] syzkaller1: entered allmulticast mode
[  346.917182][T20236] syzkaller0: entered promiscuous mode
[  346.922827][T20236] syzkaller0: entered allmulticast mode
[  347.171581][ T5899] IPVS: starting estimator thread 0...
[  347.180511][T20245] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  347.264871][T20256] IPVS: using max 31 ests per chain, 74400 per kthread
[  347.364292][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.370085][T20263] netlink: 'syz.3.4121': attribute type 18 has an invalid length.
[  347.385443][T20263] netlink: 'syz.3.4121': attribute type 18 has an invalid length.
[  347.779678][T20295] netlink: 'syz.0.4132': attribute type 1 has an invalid length.
[  347.797544][T20296] openvswitch: netlink: Flow key attribute not present in set flow.
[  347.877322][T20301] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  347.900557][T20306] x_tables: duplicate underflow at hook 2
[  347.935999][T20301] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  347.947489][T20301] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  348.330034][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.396189][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.497338][T20334] __nla_validate_parse: 15 callbacks suppressed
[  348.497354][T20334] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4142'.
[  348.518693][T20323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.549465][T20323] syzkaller0: entered promiscuous mode
[  348.562642][T20323] syzkaller0: entered allmulticast mode
[  348.622655][T20345] bond4: option mode: invalid value (133)
[  348.630834][T20345] bond4 (unregistering): Released all slaves
[  348.644329][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'.
[  348.668703][T20351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4148'.
[  348.683075][T20323] tipc: Resetting bearer <eth:syzkaller0>
[  348.710292][T20322] tipc: Resetting bearer <eth:syzkaller0>
[  348.733597][T20351] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4148'.
[  348.743567][T20322] tipc: Disabling bearer <eth:syzkaller0>
[  349.228753][T20372] !€ÿ: renamed from bond_slave_0 (while UP)
[  349.382137][T20386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4156'.
[  349.437252][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.493441][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'.
[  349.560798][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4158'.
[  349.586725][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4158'.
[  349.736019][T20407] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4163'.
[  349.829182][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4164'.
[  350.166803][T20434] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  350.475154][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.773891][T20480] netlink: 'syz.1.4182': attribute type 12 has an invalid length.
[  350.800167][T20480] netlink: 'syz.1.4182': attribute type 29 has an invalid length.
[  350.833349][T20482] netlink: 'syz.2.4183': attribute type 21 has an invalid length.
[  350.940236][T20490] batadv1: entered allmulticast mode
[  351.166797][T20505] netlink: 'syz.1.4190': attribute type 7 has an invalid length.
[  351.357992][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.450026][T20526] sock: sock_set_timeout: `syz.1.4197' (pid 20526) tries to set negative timeout
[  351.465219][T20528] 8021q: VLANs not supported on xfrm0
[  351.520930][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.716809][T20547] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.731093][T20547] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.825685][T20547] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.845192][T20547] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.869821][T20563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.881889][T20563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.900410][T20563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.910623][T20563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.008577][T20547] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.027442][T20547] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.315843][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.555025][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.519225][T20547] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.530126][T20547] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.596833][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.679832][T20603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.702457][ T4355] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.714655][T20603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.733211][ T4355] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.755032][T20603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.776298][T20606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.811780][T20610] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  353.811800][ T4355] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.851246][ T4355] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.932452][T20606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.951258][T11637] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.967982][T11637] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.982420][T11637] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.991363][T11637] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.253824][T20603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.289585][T20641] __nla_validate_parse: 19 callbacks suppressed
[  354.289602][T20641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4223'.
[  354.306326][T17895] IPVS: starting estimator thread 0...
[  354.328787][T20644] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4227'.
[  354.395314][T20643] IPVS: using max 36 ests per chain, 86400 per kthread
[  354.537079][T20653] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4225'.
[  354.602709][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4232'.
[  355.044186][T20686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4238'.
[  355.089628][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'.
[  355.233700][T20700] netlink: 'syz.3.4242': attribute type 29 has an invalid length.
[  355.253029][T20701] netlink: 'syz.3.4242': attribute type 29 has an invalid length.
[  355.399156][T20714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4247'.
[  355.493289][T20720] netlink: 'syz.1.4250': attribute type 12 has an invalid length.
[  355.513442][T20721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4249'.
[  355.522024][T20720] netlink: 'syz.1.4250': attribute type 10 has an invalid length.
[  355.530508][T20720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4250'.
[  355.537619][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'.
[  355.639570][T20729] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  355.773636][T20721] team0 (unregistering): Port device team_slave_0 removed
[  355.809339][T20721] team0 (unregistering): Port device team_slave_1 removed
[  355.824233][T20742] netlink: 'syz.0.4255': attribute type 1 has an invalid length.
[  355.886548][T20726] netem: incorrect gi model size
[  355.891904][T20726] netem: change failed
[  355.898680][T20730] veth1_to_bond: entered allmulticast mode
[  355.942914][T20733] bond0: (slave bond_slave_1): Releasing backup interface
[  355.985848][T20733] veth1_to_bond (unregistering): left allmulticast mode
[  356.127183][T20753] bond3 (unregistering): Released all slaves
[  356.414132][T20777] syzkaller0: entered promiscuous mode
[  356.427199][T20777] syzkaller0: entered allmulticast mode
[  356.438755][T20780] Bluetooth: MGMT ver 1.23
[  356.549948][T20777] net_ratelimit: 6 callbacks suppressed
[  356.549967][T20777] netlink: zone id is out of range
[  356.728119][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.991325][T20822] netlink: 'syz.0.4274': attribute type 9 has an invalid length.
[  357.190570][T20840] syzkaller0: entered promiscuous mode
[  357.201416][T20840] syzkaller0: entered allmulticast mode
[  357.263095][T20841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.270706][T20846] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.281806][T20839] tipc: Resetting bearer <eth:syzkaller0>
[  357.356023][T20839] tipc: Disabling bearer <eth:syzkaller0>
[  357.446290][T17870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.610732][T20863] syz_tun: left allmulticast mode
[  357.620932][T20863] syz_tun: left promiscuous mode
[  357.628274][T20863] bridge0: port 3(syz_tun) entered disabled state
[  357.652116][T20863] dummy0: left allmulticast mode
[  357.668526][T20863] bridge0: port 4(dummy0) entered disabled state
[  357.700173][T20863] bridge_slave_0: left allmulticast mode
[  357.706220][T20863] bridge_slave_0: left promiscuous mode
[  357.732313][T20863] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.755986][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.827473][T20863] bridge_slave_1: left allmulticast mode
[  357.854514][T20863] bridge_slave_1: left promiscuous mode
[  357.864941][T20863] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.948941][T20863] bond0: (slave bond_slave_0): Releasing backup interface
[  357.987193][T20863] team0: Port device team_slave_0 removed
[  358.028246][T20863] team0: Port device team_slave_1 removed
[  358.047926][T20863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.059566][T20863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.069829][T20863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.082705][T20863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.093844][T20863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  358.123451][T20873] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  358.191585][T20881] syzkaller0: entered promiscuous mode
[  358.197287][T20881] syzkaller0: entered allmulticast mode
[  358.285870][T20913] netlink: 'syz.4.4293': attribute type 7 has an invalid length.
[  358.296507][T20913] netlink: 'syz.4.4293': attribute type 8 has an invalid length.
[  358.334681][T20914] netlink: 'syz.1.4292': attribute type 21 has an invalid length.
[  358.795174][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.838614][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.009279][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.477028][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.876324][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.917104][T20912] : entered promiscuous mode
[  360.925253][T20914] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  361.277814][T20954] __nla_validate_parse: 13 callbacks suppressed
[  361.277832][T20954] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4300'.
[  361.298370][T20953] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4304'.
[  361.508569][T20946] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  361.691136][T20984] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0
[  361.752054][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'.
[  361.793022][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4313'.
[  361.808840][T20992] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4315'.
[  361.917736][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.420874][T21028] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  362.428020][T21039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4329'.
[  362.428055][T21039] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4329'.
[  362.588745][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'.
[  362.624151][T21055] netlink: 'syz.2.4332': attribute type 3 has an invalid length.
[  362.653506][T21055] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4332'.
[  362.752553][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4337'.
[  362.847186][T21066] netlink: 'syz.0.4337': attribute type 1 has an invalid length.
[  362.954989][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.125389][T21085] 
: renamed from bond_slave_0
[  363.498027][T21112] netlink: 'syz.4.4350': attribute type 13 has an invalid length.
[  363.498169][T21114] netlink: 'syz.2.4352': attribute type 1 has an invalid length.
[  363.518411][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.538172][T21118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.835212][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.909806][T21145] sctp: [Deprecated]: syz.3.4359 (pid 21145) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.909806][T21145] Use struct sctp_sack_info instead
[  363.996313][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.211006][T21169] syzkaller0: entered promiscuous mode
[  364.216831][T21169] syzkaller0: entered allmulticast mode
[  364.236102][T21169] netlink: 'syz.0.4367': attribute type 2 has an invalid length.
[  364.305250][T21175] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  364.394297][T21186] xt_CT: You must specify a L4 protocol and not use inversions on it
[  364.462268][T21192] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  364.471144][T21191] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  364.554184][T21200] netlink: 'syz.0.4377': attribute type 2 has an invalid length.
[  364.701007][T21209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.741640][T21209] syzkaller1: entered promiscuous mode
[  364.748367][T21209] syzkaller1: entered allmulticast mode
[  365.058829][T21209] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.066607][T21209] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.109867][T21209] team_slave_0: left promiscuous mode
[  365.127228][T21209] team_slave_1: left promiscuous mode
[  365.166314][T21209] dummy0: left promiscuous mode
[  365.396729][T21209] ipvlan2: left promiscuous mode
[  365.403483][T21209] vlan2: left promiscuous mode
[  365.418892][T21209] bond1: left promiscuous mode
[  365.423664][T21209] bridge2: left promiscuous mode
[  365.447766][T21209] syzkaller1: left promiscuous mode
[  365.490074][   T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.584271][   T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.615297][   T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.624262][   T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.754166][T21256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  365.823192][T21255] openvswitch: netlink: Missing valid actions attribute.
[  365.933500][T21266] syz_tun: entered allmulticast mode
[  365.953466][T21265] syz_tun: left allmulticast mode
[  366.807085][T21275] veth0: entered promiscuous mode
[  366.813150][T21275] __nla_validate_parse: 7 callbacks suppressed
[  366.813166][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4401'.
[  366.837790][T21276] macsec1: entered promiscuous mode
[  366.907499][T21283] macsec1: entered promiscuous mode
[  366.973547][T21275] veth0 (unregistering): left promiscuous mode
[  367.300067][T21318] smc: net device gre0 applied user defined pnetid SYZ1
[  367.363845][T21327] net_ratelimit: 1 callbacks suppressed
[  367.363863][T21327] openvswitch: netlink: Actions may not be safe on all matching packets
[  367.471401][T21336] netlink: 'syz.0.4418': attribute type 1 has an invalid length.
[  367.501115][T21336] netlink: 'syz.0.4418': attribute type 4 has an invalid length.
[  367.538228][T21336] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4418'.
[  368.002696][T21370] nbd: must specify at least one socket
[  368.157255][T21387] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4434'.
[  368.172567][T21387] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4434'.
[  368.216365][T21387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4434'.
[  369.045918][   T36] bond0 (unregistering): (slave team0): Releasing backup interface
[  369.056279][   T36] bond0 (unregistering): Released all slaves
[  369.154499][   T36] bond1 (unregistering): Released all slaves
[  369.246787][   T36] bond2 (unregistering): Released all slaves
[  369.361764][   T36] bond3 (unregistering): Released all slaves
[  369.374023][   T36] bond4 (unregistering): Released all slaves
[  369.461956][   T36] bond6 (unregistering): Released all slaves
[  369.475199][   T36] bond5 (unregistering): (slave lo): Releasing backup interface
[  369.483148][   T36] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  369.495642][   T36] bond5 (unregistering): Released all slaves
[  369.510270][T21412] lo: entered allmulticast mode
[  369.515513][T21412] lo: left allmulticast mode
[  369.625938][T21441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4448'.
[  369.679598][T21447] netlink: 'syz.3.4451': attribute type 1 has an invalid length.
[  369.714597][   T36] : left promiscuous mode
[  369.966108][   T36] tipc: Left network mode
[  370.110500][T21483] netlink: 'syz.1.4459': attribute type 1 has an invalid length.
[  370.142497][T21483] netlink: 'syz.1.4459': attribute type 4 has an invalid length.
[  370.153361][T21483] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4459'.
[  370.153825][T21485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4460'.
[  370.217857][T21485] nbd: illegal input index -8454144
[  370.237290][T21485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.369996][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4463'.
[  370.383029][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'.
[  370.920429][T21515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.125068][   T36] hsr_slave_0: left promiscuous mode
[  371.140747][   T36] hsr_slave_1: left promiscuous mode
[  371.165985][   T36] veth1_macvtap: left promiscuous mode
[  371.172665][   T36] veth0_macvtap: left promiscuous mode
[  371.228726][   T36] pimreg (unregistering): left allmulticast mode
[  371.596744][ T5979] smc: removing ib device !yz!
[  371.857161][   T36] team0 (unregistering): Port device dummy0 removed
[  372.025902][T21526] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.038658][T21526] bond0: (slave rose0): Enslaving as an active interface with an up link
[  372.187139][T21559] __nla_validate_parse: 2 callbacks suppressed
[  372.187157][T21559] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4483'.
[  372.234190][T21565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4484'.
[  372.660807][T21587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4492'.
[  372.684600][T21585] syzkaller0: entered promiscuous mode
[  372.720462][T21585] syzkaller0: entered allmulticast mode
[  372.908779][T21596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4495'.
[  372.952529][T21604] netlink: 'syz.4.4499': attribute type 13 has an invalid length.
[  373.339019][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4503'.
[  373.377040][T21627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4503'.
[  373.570705][T21642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4507'.
[  373.580364][T21643] x_tables: duplicate underflow at hook 1
[  373.580618][T21643] netlink: 'syz.2.4508': attribute type 1 has an invalid length.
[  373.669440][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'.
[  373.747056][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4511'.
[  373.799311][T21642] xt_TCPMSS: Only works on TCP SYN packets
[  373.861865][T21655] bond0: invalid ARP target 0.0.0.0 specified for addition
[  373.899776][T21655] bond0: option arp_ip_target: invalid value (0)
[  374.366872][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4523'.
[  374.395107][T21697] netlink: 'syz.4.4524': attribute type 18 has an invalid length.
[  374.753558][   T36] IPVS: stop unused estimator thread 0...
[  374.853126][T21688] ieee802154 phy0 wpan0: encryption failed: -22
[  374.898393][T21718] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  375.351283][T21746] syzkaller0: entered promiscuous mode
[  375.357817][T21746] syzkaller0: entered allmulticast mode
[  375.525591][T21759] sctp: [Deprecated]: syz.0.4537 (pid 21759) Use of int in max_burst socket option.
[  375.525591][T21759] Use struct sctp_assoc_value instead
[  375.670314][T21761] bond3 (unregistering): Released all slaves
[  375.775594][T21776] bond0: entered promiscuous mode
[  375.838685][T21784] netlink: 'syz.0.4546': attribute type 11 has an invalid length.
[  375.915730][T21792] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  376.420797][T21190] udevd[21190]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  376.442057][T21822] geneve2: entered promiscuous mode
[  376.447434][T21822] geneve2: entered allmulticast mode
[  376.798672][T21848] tipc: Started in network mode
[  376.808649][T21848] tipc: Node identity 7e6962cd3915, cluster identity 4711
[  376.830265][T21848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.841446][T21848] syzkaller0: entered promiscuous mode
[  376.847697][T21848] syzkaller0: entered allmulticast mode
[  376.860706][T21848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  376.924557][T21848] tipc: Resetting bearer <eth:syzkaller0>
[  376.941442][T21846] tipc: Resetting bearer <eth:syzkaller0>
[  376.983249][T21846] tipc: Disabling bearer <eth:syzkaller0>
[  377.156700][T21864] syzkaller0: entered promiscuous mode
[  377.162282][T21864] syzkaller0: entered allmulticast mode
[  377.201744][T21870] netlink: 'syz.1.4571': attribute type 10 has an invalid length.
[  377.211308][T21870] netlink: 'syz.1.4571': attribute type 10 has an invalid length.
[  377.262071][T21874] netlink: 'syz.4.4572': attribute type 1 has an invalid length.
[  377.469928][T21885] __nla_validate_parse: 8 callbacks suppressed
[  377.469946][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4576'.
[  377.470032][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4576'.
[  377.747425][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'.
[  377.776820][T21898] netlink: 'syz.3.4581': attribute type 1 has an invalid length.
[  377.786123][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4579'.
[  377.788897][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'.
[  377.904240][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4581'.
[  378.011854][T21905] 8021q: adding VLAN 0 to HW filter on device bond4
[  378.030974][T21905] bond3: (slave bond4): making interface the new active one
[  378.048704][T21905] bond3: (slave bond4): Enslaving as an active interface with an up link
[  378.095631][T21920] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4584'.
[  378.133116][T21898] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.146668][T21898] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  378.326095][T21928] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4589'.
[  378.355351][T21932] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4589'.
[  378.381947][T21928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4589'.
[  378.570070][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  378.962547][T21988] netlink: 'syz.1.4604': attribute type 1 has an invalid length.
[  379.032846][T21988] 8021q: adding VLAN 0 to HW filter on device bond6
[  379.045903][T21999] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  379.093131][T21999] bond6: entered allmulticast mode
[  379.121144][T21988] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  379.287984][T22028] nbd: socks must be embedded in a SOCK_ITEM attr
[  379.493127][T22069] sctp: [Deprecated]: syz.4.4614 (pid 22069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  379.493127][T22069] Use struct sctp_sack_info instead
[  379.784268][T22103] openvswitch: netlink: Duplicate or invalid key (type 0).
[  379.795889][T22103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.343602][T22138] netlink: 'syz.4.4623': attribute type 26 has an invalid length.
[  380.612554][T22151] netlink: 'syz.1.4626': attribute type 2 has an invalid length.
[  380.712815][T22165] netlink: 'syz.2.4631': attribute type 1 has an invalid length.
[  380.821086][T22165] 8021q: adding VLAN 0 to HW filter on device bond6
[  380.933102][T22166] bond6: entered allmulticast mode
[  381.160783][T22195] vcan0: tx drop: invalid sa for name 0x0040000000000000
[  381.300078][T22206] ip6gre0: Master is either lo or non-ether device
[  381.426119][T22214] macvtap1: entered allmulticast mode
[  381.431542][T22214] veth0_macvtap: entered allmulticast mode
[  381.613388][T22230] C: renamed from lo (while UP)
[  381.641144][T22230] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  381.740747][T22227] ip6_vti0 speed is unknown, defaulting to 1000
[  382.060427][T22245] syzkaller1: entered promiscuous mode
[  382.095023][T22245] syzkaller1: entered allmulticast mode
[  382.480427][T22272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.543195][T22278] __nla_validate_parse: 15 callbacks suppressed
[  382.543211][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'.
[  382.558583][T22278] netlink: 'syz.2.4657': attribute type 30 has an invalid length.
[  382.602606][T22272] syzkaller0: entered promiscuous mode
[  382.608656][T22272] syzkaller0: entered allmulticast mode
[  382.615032][T22272] tipc: Resetting bearer <eth:syzkaller0>
[  382.627023][T22231] ip6_vti0 speed is unknown, defaulting to 1000
[  382.681784][   T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.702428][   T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.725995][T22271] tipc: Resetting bearer <eth:syzkaller0>
[  384.125508][T22271] tipc: Disabling bearer <eth:syzkaller0>
[  384.141432][T22280] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  384.156685][   T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  384.203302][ T5939] tipc: Node number set to 1823436510
[  384.209592][   T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  384.346183][T22299] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4661'.
[  384.369743][T22299] 8021q: VLANs not supported on gre0
[  384.392948][T22304] netlink: 'syz.4.4663': attribute type 1 has an invalid length.
[  384.426272][T22303] netlink: 'syz.4.4663': attribute type 1 has an invalid length.
[  384.505254][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4667'.
[  384.514310][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'.
[  384.565415][T22303] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  384.568094][T22304] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  384.616893][T22315] xt_CT: No such helper "snmp_trap"
[  384.621013][T22322] openvswitch: netlink: Unknown nsh attribute 0
[  384.654086][T22322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.034042][T22344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4674'.
[  385.110279][T22346] openvswitch: netlink: IP tunnel TTL not specified.
[  385.213299][T22356] netlink: 'syz.4.4677': attribute type 4 has an invalid length.
[  385.490692][T22366] sctp: [Deprecated]: syz.4.4679 (pid 22366) Use of int in max_burst socket option.
[  385.490692][T22366] Use struct sctp_assoc_value instead
[  385.533262][T22372] netlink: 'syz.1.4683': attribute type 83 has an invalid length.
[  385.750451][T22379] syzkaller0: entered promiscuous mode
[  385.765295][T22379] syzkaller0: entered allmulticast mode
[  385.841777][T22384] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4687'.
[  386.116388][T22396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4692'.
[  386.206768][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4695'.
[  386.250839][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4695'.
[  386.270274][T22409] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4697'.
[  386.306707][T22409] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  386.321694][T22416] netlink: 'syz.1.4699': attribute type 1 has an invalid length.
[  386.399686][T22416] 8021q: adding VLAN 0 to HW filter on device bond7
[  386.462234][T22425] pim6reg: entered allmulticast mode
[  386.526986][T22431] bridge8: port 1(veth0_to_bond) entered blocking state
[  386.534200][T22431] bridge8: port 1(veth0_to_bond) entered disabled state
[  386.541714][T22431] veth0_to_bond: entered allmulticast mode
[  386.551939][T22431] veth0_to_bond: entered promiscuous mode
[  386.638658][T22433] lo: entered promiscuous mode
[  386.652220][T22433] lo: entered allmulticast mode
[  386.675170][T22433] tunl0: entered promiscuous mode
[  386.686121][T22433] tunl0: entered allmulticast mode
[  386.697116][T22433] gre0: entered promiscuous mode
[  386.702179][T22433] gre0: entered allmulticast mode
[  386.740428][T22433] gretap0: entered promiscuous mode
[  386.748249][T22433] gretap0: entered allmulticast mode
[  386.758100][T22433] erspan0: entered promiscuous mode
[  386.763336][T22433] erspan0: entered allmulticast mode
[  386.772077][T22433] ip_vti0: entered promiscuous mode
[  386.777594][T22433] ip_vti0: entered allmulticast mode
[  386.834041][T22452] netlink: 'syz.4.4709': attribute type 10 has an invalid length.
[  387.413599][T22493] x_tables: duplicate underflow at hook 1
[  387.493929][T22500] netlink: 'syz.0.4728': attribute type 25 has an invalid length.
[  387.593190][T22504] gtp0: entered promiscuous mode
[  387.598593][T22504] gtp0: entered allmulticast mode
[  387.739363][T22512] __nla_validate_parse: 14 callbacks suppressed
[  387.739381][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4731'.
[  387.793554][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4731'.
[  387.852604][T22520] syzkaller0: entered promiscuous mode
[  387.889709][T22520] syzkaller0: entered allmulticast mode
[  387.930542][T22532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4737'.
[  388.022320][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'.
[  388.034164][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4740'.
[  388.035854][T22537] syzkaller0: entered promiscuous mode
[  388.057154][T22537] syzkaller0: entered allmulticast mode
[  388.159535][T22547] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  388.336699][T22554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4746'.
[  388.409190][T22563] xt_ecn: cannot match TCP bits for non-tcp packets
[  388.462797][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4748'.
[  388.701409][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4753'.
[  389.274291][T22598] netlink: 'syz.2.4761': attribute type 1 has an invalid length.
[  389.336331][T22598] netlink: 'syz.2.4761': attribute type 4 has an invalid length.
[  389.371763][T22598] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4761'.
[  389.472109][T22607] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4.
[  389.696404][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'.
[  389.719701][T22628] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  390.308988][T22651] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.316129][T22651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.328595][T22651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.632882][T22673] tap0: tun_chr_ioctl cmd 2148553947
[  390.931484][T22693] bond0 (unregistering): (slave gretap1): Releasing backup interface
[  390.946129][T22693] bond0 (unregistering): Released all slaves
[  391.103183][T22706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.705951][T22760] ip6tnl0: Caught tx_queue_len zero misconfig
[  391.768825][T22750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.967715][T22776] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  391.987081][T22776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.024943][T22782] bridge_slave_1: mtu less than device minimum
[  392.032209][T22784] bridge_slave_1: mtu less than device minimum
[  392.166579][T22791] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660
[  392.202189][T22791] gre0: mtu less than device minimum
[  392.232790][T22798] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  392.261437][T22802] netlink: 'syz.3.4819': attribute type 8 has an invalid length.
[  392.269504][T22798] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  392.278873][T22798] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  392.383873][T22796] ip6_vti0 speed is unknown, defaulting to 1000
[  393.247030][T22837] netlink: 'syz.2.4826': attribute type 13 has an invalid length.
[  394.202267][T22828] C: Caught tx_queue_len zero misconfig
[  394.418390][T22847] vlan2: entered allmulticast mode
[  394.437339][T22847] bridge_slave_0: entered allmulticast mode
[  394.497171][T22853] __nla_validate_parse: 5 callbacks suppressed
[  394.497190][T22853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4829'.
[  394.748990][T22865] sctp: [Deprecated]: syz.0.4834 (pid 22865) Use of struct sctp_assoc_value in delayed_ack socket option.
[  394.748990][T22865] Use struct sctp_sack_info instead
[  394.776004][T22865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'.
[  394.880208][T22872] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4835'.
[  394.925243][T22872] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4835'.
[  395.083677][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4839'.
[  395.175708][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4841'.
[  395.222811][T22889] netlink: 'syz.3.4841': attribute type 30 has an invalid length.
[  395.277270][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4841'.
[  395.369563][T22899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4844'.
[  396.937469][T22925] netlink: 'syz.2.4852': attribute type 2 has an invalid length.
[  396.983596][T22930] pim6reg: entered allmulticast mode
[  397.007670][T22933] bridge0: port 1(ipvlan2) entered blocking state
[  397.022241][T22933] bridge0: port 1(ipvlan2) entered disabled state
[  397.064884][T22933] ipvlan2: entered allmulticast mode
[  397.071534][T22933] bridge0: entered allmulticast mode
[  397.113015][T22933] ipvlan2: left allmulticast mode
[  397.119622][T22933] bridge0: left allmulticast mode
[  397.478951][T22964] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000
[  397.493822][T22965] netlink: 'syz.4.4864': attribute type 10 has an invalid length.
[  397.522410][T22965] mac80211_hwsim hwsim26 wlan1: left allmulticast mode
[  397.536404][T22965] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[  397.545096][T22965] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  397.621159][T22965] sctp: [Deprecated]: syz.4.4864 (pid 22965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.621159][T22965] Use struct sctp_sack_info instead
[  397.957182][T22992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4871'.
[  397.979028][T22986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.991239][T22996] syzkaller0: entered promiscuous mode
[  398.012329][T22996] syzkaller0: entered allmulticast mode
[  398.028456][T22989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4869'.
[  398.038556][T22986] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  398.087955][T22986] tipc: Resetting bearer <eth:syzkaller0>
[  398.164586][T22984] tipc: Resetting bearer <eth:syzkaller0>
[  398.209563][T22984] tipc: Disabling bearer <eth:syzkaller0>
[  398.545059][T23028] netlink: 'syz.2.4880': attribute type 2 has an invalid length.
[  398.568249][T23032] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  398.722849][T23045] nbd: must specify at least one socket
[  398.990639][T23063] netlink: 'syz.1.4891': attribute type 2 has an invalid length.
[  400.082200][T23123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.393067][T23133] __nla_validate_parse: 9 callbacks suppressed
[  400.393087][T23133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4914'.
[  400.465943][T23133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4914'.
[  400.546748][T23145] netlink: 552 bytes leftover after parsing attributes in process `syz.1.4919'.
[  400.591905][T23143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4918'.
[  400.658988][T23149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  400.673012][T23149] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  400.681644][T23149] gretap1: entered promiscuous mode
[  400.703412][T23151] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  400.725180][T23149] gretap1: entered allmulticast mode
[  400.748407][T23158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4924'.
[  400.813039][T23162] netlink: 'syz.2.4926': attribute type 6 has an invalid length.
[  400.840441][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4926'.
[  400.855632][T23166] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4927'.
[  400.950284][T23170] netlink: 'syz.3.4928': attribute type 21 has an invalid length.
[  400.999365][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4930'.
[  401.014447][T23170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4928'.
[  401.032147][T23172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4929'.
[  401.100181][T23170] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  401.146127][T23185] netlink: 'syz.4.4932': attribute type 9 has an invalid length.
[  401.197896][T23185] netlink: 'syz.4.4932': attribute type 9 has an invalid length.
[  401.243220][   T30] audit: type=1107 audit(1764939977.688:3): pid=23191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='î:ãÕñúûl’m>z=jÍm'
[  401.667872][T23222] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  401.692197][T23222] bond7 (unregistering): Released all slaves
[  402.133349][T23248] batman_adv: batadv0: Adding interface: dummy0
[  402.159020][T23248] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.194262][T23248] batman_adv: batadv0: Interface activated: dummy0
[  402.237456][T23249] batadv0: mtu less than device minimum
[  402.244856][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.257006][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.268155][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.279271][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.290449][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.301592][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.312746][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.323884][T23249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.347664][T23259] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  402.455220][T23266] veth0: entered promiscuous mode
[  402.521085][T23265] veth0: left promiscuous mode
[  402.822610][T23294] bond0: Caught tx_queue_len zero misconfig
[  402.874132][T23299] netlink: 'syz.1.4974': attribute type 1 has an invalid length.
[  403.312095][T23338] netlink: 'syz.0.4982': attribute type 12 has an invalid length.
[  404.235734][T23402] netlink: 'syz.4.5003': attribute type 1 has an invalid length.
[  404.302976][T23414] netlink: 'syz.0.5006': attribute type 1 has an invalid length.
[  404.726720][T23382] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  405.214244][T23475] bond10: option arp_all_targets: invalid value (18446744073709551613)
[  405.257857][T23475] bond10 (unregistering): Released all slaves
[  405.290517][T23466] udevd[23466]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  405.323232][T23486] Unsupported ieee802154 address type: 0
[  405.477690][T23495] macvlan0: entered promiscuous mode
[  405.742195][T23520] netlink: 'syz.2.5034': attribute type 1 has an invalid length.
[  405.842420][T23528] __nla_validate_parse: 223 callbacks suppressed
[  405.842438][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'.
[  405.879348][T23528] bond7: (slave bridge6): making interface the new active one
[  405.889329][T23528] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  405.993346][T23534] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  406.359883][T23555] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5041'.
[  406.420363][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'.
[  406.482662][T23563] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  406.571410][T23562] veth0_to_team: entered promiscuous mode
[  406.858734][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5051'.
[  406.942987][T23583] syzkaller1: entered promiscuous mode
[  406.961100][T23583] syzkaller1: entered allmulticast mode
[  407.176199][T23603] xt_cluster: node mask cannot exceed total number of nodes
[  407.308883][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5060'.
[  407.318507][T23615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.396442][T23613] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5060'.
[  407.416031][T23615] tipc: Resetting bearer <eth:syzkaller0>
[  407.476068][T23614] tipc: Disabling bearer <eth:syzkaller0>
[  407.520257][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5064'.
[  407.532159][T23636] netlink: 'syz.1.5066': attribute type 1 has an invalid length.
[  407.626958][T23636] bond10: (slave ip6gretap2): making interface the new active one
[  407.647724][T23636] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link
[  407.870846][T23654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5070'.
[  407.881869][T23657] xt_TPROXY: Can be used only with -p tcp or -p udp
[  407.939019][T23661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5074'.
[  407.977164][T23660] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5074'.
[  408.256092][T23679] netlink: 'syz.0.5080': attribute type 1 has an invalid length.
[  408.326841][T23687] : entered promiscuous mode
[  408.562538][T23707] xt_TCPMSS: Only works on TCP SYN packets
[  408.643493][T23712] netlink: 'syz.2.5089': attribute type 10 has an invalid length.
[  408.672441][T23712] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  408.760166][T23716] net_ratelimit: 11 callbacks suppressed
[  408.760182][T23716] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  409.625116][T23775] netlink: 'syz.4.5110': attribute type 22 has an invalid length.
[  410.425916][T23830] netlink: 'syz.4.5124': attribute type 8 has an invalid length.
[  410.783899][T23851] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  410.828166][T23853] nbd: couldn't find a device at index 0
[  410.872928][T23856] __nla_validate_parse: 9 callbacks suppressed
[  410.872946][T23856] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.5131'.
[  410.905734][T23856] openvswitch: netlink: Message has 6 unknown bytes.
[  411.165920][T23873] IPv6: sit1: Disabled Multicast RS
[  411.182650][T23873] sit1: entered allmulticast mode
[  411.411227][T23898] IPv6: sit2: Disabled Multicast RS
[  411.437694][T23898] sit2: entered allmulticast mode
[  411.514013][T23906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  411.521308][T23906] IPv6: NLM_F_CREATE should be set when creating new route
[  411.528565][T23906] IPv6: NLM_F_CREATE should be set when creating new route
[  411.717963][T23916] netlink: 'syz.4.5151': attribute type 1 has an invalid length.
[  411.784958][T23924] netlink: 'syz.4.5151': attribute type 1 has an invalid length.
[  411.842034][T23922] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  411.887966][T23931] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5155'.
[  412.300676][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'.
[  412.345358][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5162'.
[  412.519944][T23966] veth1_to_bond: entered allmulticast mode
[  412.646548][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5168'.
[  412.683390][T23895] udevd[23895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  412.746586][T23895] udevd[23895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  412.804671][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5171'.
[  412.880721][T23966] veth1_to_bond (unregistering): left allmulticast mode
[  413.105239][T23983] syzkaller0: entered promiscuous mode
[  413.110814][T23983] syzkaller0: entered allmulticast mode
[  413.299823][T23999] netlink: 'syz.3.5175': attribute type 10 has an invalid length.
[  413.317251][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5176'.
[  413.317342][T23999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5175'.
[  414.671675][T24009] pimreg: entered allmulticast mode
[  414.693483][T24012] pimreg: left allmulticast mode
[  414.756944][T24018] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5179'.
[  414.863287][T22291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  414.875822][   T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  414.892217][   T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  414.920135][   T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  415.175721][T24054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5188'.
[  415.226070][T24052] xfrm1: entered promiscuous mode
[  415.231145][T24052] xfrm1: entered allmulticast mode
[  415.308772][T24062] ieee802154 phy0 wpan0: encryption failed: -22
[  415.338212][T24062] netlink: 'syz.4.5191': attribute type 2 has an invalid length.
[  415.447075][T24068] ip6_vti0 speed is unknown, defaulting to 1000
[  415.876248][T24104] __nla_validate_parse: 5 callbacks suppressed
[  415.876265][T24104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5205'.
[  416.231139][T24129] pim6reg: entered allmulticast mode
[  416.400091][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5218'.
[  416.456738][T24151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5220'.
[  416.521255][T24151] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5220'.
[  416.548446][T24154] sit0: Caught tx_queue_len zero misconfig
[  416.554665][T24151] netlink: 'syz.3.5220': attribute type 5 has an invalid length.
[  416.563681][T24151] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5220'.
[  416.588026][T24152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5220'.
[  416.603204][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'.
[  416.627996][T24158] netlink: 'syz.1.5222': attribute type 1 has an invalid length.
[  416.644251][T24158] netlink: 'syz.1.5222': attribute type 2 has an invalid length.
[  416.669261][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5221'.
[  416.703833][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5221'.
[  416.752629][T24154] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5221'.
[  416.829706][T24165] netlink: 'syz.2.5224': attribute type 9 has an invalid length.
[  416.873305][T24170] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  416.937943][T24173] veth0: entered promiscuous mode
[  416.958000][T24172] veth0: left promiscuous mode
[  417.295787][T24200] dvmrp6: entered allmulticast mode
[  417.487868][T24212] netlink: 'syz.3.5243': attribute type 10 has an invalid length.
[  417.502580][T24212] batman_adv: batadv0: Interface deactivated: dummy0
[  417.532053][T24212] batman_adv: batadv0: Removing interface: dummy0
[  417.913468][T24254] syzkaller0: entered promiscuous mode
[  417.919842][T24254] syzkaller0: entered allmulticast mode
[  418.637937][T24270] syzkaller1: tun_chr_ioctl cmd 1074025677
[  418.655042][T24270] syzkaller1: linktype set to 823
[  418.769399][T24280] delete_channel: no stack
[  419.162461][T24298] syzkaller0: entered promiscuous mode
[  419.172431][T24298] syzkaller0: entered allmulticast mode
[  419.190235][T24310] atomic_op ffff88807c42e198 conn xmit_atomic 0000000000000000
[  419.274226][T24317] xt_hashlimit: size too large, truncated to 1048576
[  419.284223][T24318] netlink: 'syz.2.5276': attribute type 1 has an invalid length.
[  421.033508][T24318] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  421.063901][T24342] veth1_macvtap: left promiscuous mode
[  421.366646][T24379] __nla_validate_parse: 7 callbacks suppressed
[  421.366665][T24379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5288'.
[  421.447009][T24379] bond8: (slave gre0): Device is not bonding slave
[  421.453532][T24379] bond8: option active_slave: invalid value (gre0)
[  421.483132][T24379] bond8 (unregistering): Released all slaves
[  421.560613][T24384] netlink: 'syz.1.5290': attribute type 1 has an invalid length.
[  421.684112][T24393] team0: Port device geneve0 removed
[  421.759618][T24393] veth0_virt_wifi: renamed from geneve0
[  421.775681][T24384] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  421.886114][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5294'.
[  421.905237][T24405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5294'.
[  422.087583][T24418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5298'.
[  422.201643][T24428] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5302'.
[  422.287019][T24418] bond11: (slave syz_tun): Enslaving as an active interface with an up link
[  422.299962][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5300'.
[  422.320927][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5300'.
[  422.334216][T24435] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.409228][T24440] ip_vti0: entered promiscuous mode
[  422.415843][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5304'.
[  422.445685][T24435] netlink: 'syz.2.5303': attribute type 10 has an invalid length.
[  422.485383][T24435] openvswitch: netlink: Invalid VLAN frame
[  422.572498][T24447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.641345][T24447] syzkaller0: entered promiscuous mode
[  422.650093][T24447] syzkaller0: entered allmulticast mode
[  422.656631][T24447] tipc: Resetting bearer <eth:syzkaller0>
[  422.670344][T24447] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  422.687875][T24458] netlink: 'syz.0.5312': attribute type 8 has an invalid length.
[  422.700948][T24446] tipc: Resetting bearer <eth:syzkaller0>
[  424.091296][T24446] tipc: Disabling bearer <eth:syzkaller0>
[  424.100590][T24456] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  424.140036][ T5939] tipc: Node number set to 2607792244
[  424.213740][T24478] syzkaller1: entered promiscuous mode
[  424.219373][T24478] syzkaller1: entered allmulticast mode
[  424.238102][T24477] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5316'.
[  424.269454][T24482] netlink: 'syz.3.5318': attribute type 33 has an invalid length.
[  424.278409][T24482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5318'.
[  424.345778][T24482] sysctl duplicate entry: /net/ipv4/neigh/geneve0/mcast_solicit
[  424.375663][T24483] netlink: 'syz.4.5317': attribute type 10 has an invalid length.
[  424.376204][T24485] netlink: 'syz.1.5319': attribute type 1 has an invalid length.
[  424.610852][T24504] xt_socket: unknown flags 0x50
[  424.715953][T24512] ip6gre2: entered allmulticast mode
[  425.079429][T24545] netlink: 'syz.1.5336': attribute type 21 has an invalid length.
[  425.192751][T24557] ieee802154 phy0 wpan0: encryption failed: -22
[  425.354335][T24569] netlink: 'syz.1.5346': attribute type 83 has an invalid length.
[  425.478630][T24579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  425.523153][T24579] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  425.564942][T24579] gretap1: entered promiscuous mode
[  425.596788][T24579] gretap1: entered allmulticast mode
[  425.774816][T24606] bridge0: entered promiscuous mode
[  425.783470][T24606] vlan2: entered promiscuous mode
[  426.011611][T24628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.022244][T24621] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  426.041307][T24628] nbd: must specify an index to disconnect
[  426.266285][T24645] netlink: 'syz.4.5365': attribute type 1 has an invalid length.
[  426.454145][T24656] netlink: 'syz.2.5368': attribute type 12 has an invalid length.
[  426.464681][T24656] netlink: 'syz.2.5368': attribute type 29 has an invalid length.
[  426.472740][T24656] __nla_validate_parse: 10 callbacks suppressed
[  426.472757][T24656] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5368'.
[  426.493977][T24656] netlink: 59 bytes leftover after parsing attributes in process `syz.2.5368'.
[  426.560148][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5369'.
[  426.579175][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5369'.
[  426.613679][T24666] netlink: 'syz.4.5370': attribute type 3 has an invalid length.
[  427.003614][T24691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5378'.
[  427.174319][T24703] policy can only be matched on NF_INET_PRE_ROUTING
[  427.174338][T24703] unable to load match
[  427.343501][T24720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5387'.
[  427.395846][T24724] vxcan1: tx drop: invalid da for name 0x0000000000000006
[  427.743428][T24750] syzkaller1: entered promiscuous mode
[  427.749323][T24750] syzkaller1: entered allmulticast mode
[  427.868039][T24755] xt_TPROXY: Can be used only with -p tcp or -p udp
[  428.163398][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5401'.
[  428.456916][T24783] vxcan2: entered allmulticast mode
[  428.672128][T24799] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  428.702470][T24802] vlan5: entered promiscuous mode
[  428.721879][T24802] bridge0: entered promiscuous mode
[  428.752620][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5412'.
[  428.763062][T24807] netlink: 'syz.3.5413': attribute type 29 has an invalid length.
[  428.783388][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5413'.
[  428.877105][T24816] mac80211_hwsim hwsim26 ÿ
: renamed from wlan1 (while UP)
[  428.943272][T24822] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.5416'.
[  429.267754][T24845] tipc: MTU too low for tipc bearer
[  429.778160][T24869] SET target dimension over the limit!
[  429.861304][T24876] 8021q: VLANs not supported on bond0
[  430.172911][T24898] netlink: 'syz.0.5440': attribute type 1 has an invalid length.
[  430.250217][T24900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.307515][T24908] tc_dump_action: action bad kind
[  430.601993][T24925] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.609942][T24925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.623534][T24925] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.631565][T24925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.641015][T24925] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.649420][T24925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.677837][T24925] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.696093][T24926] syzkaller1: entered promiscuous mode
[  430.701591][T24926] syzkaller1: entered allmulticast mode
[  430.709095][T24925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.879956][T24941] can: request_module (can-proto-0) failed.
[  431.109877][T24963] syzkaller0: entered promiscuous mode
[  431.119673][T24963] syzkaller0: entered allmulticast mode
[  431.193788][T24963] can: request_module (can-proto-0) failed.
[  431.490659][T24983] __nla_validate_parse: 20 callbacks suppressed
[  431.490685][T24983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5466'.
[  431.546030][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5467'.
[  431.716567][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5471'.
[  431.965019][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5471'.
[  432.037847][T25030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.199928][T25038] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20004
[  432.235579][T25041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5478'.
[  432.275038][T25041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5478'.
[  432.364900][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'.
[  432.388508][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5480'.
[  432.397617][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5479'.
[  432.409408][T25045] netlink: 'syz.0.5479': attribute type 12 has an invalid length.
[  432.470567][T25048] bond12 (unregistering): Released all slaves
[  432.818775][T25080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5487'.
[  432.854712][T25080] gre0: entered promiscuous mode
[  432.859688][T25080] gre0: entered allmulticast mode
[  433.181032][T25098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.230145][T25098] tipc: Disabling bearer <eth:syzkaller0>
[  433.287737][T25109] netlink: 'syz.2.5495': attribute type 3 has an invalid length.
[  433.349570][T25113] syzkaller0: entered promiscuous mode
[  433.356626][T25113] syzkaller0: entered allmulticast mode
[  433.508193][T25129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  433.560368][T25132] x_tables: duplicate underflow at hook 2
[  433.727704][T25141] xt_TCPMSS: Only works on TCP SYN packets
[  434.041124][T25168] netlink: 'syz.1.5511': attribute type 5 has an invalid length.
[  434.347067][T25181] vcan1: entered allmulticast mode
[  434.357236][T25185] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  434.928443][T25222] bond8 (unregistering): Released all slaves
[  435.130572][T25231] bridge5: port 1(veth0_to_bond) entered blocking state
[  435.147423][T25231] bridge5: port 1(veth0_to_bond) entered disabled state
[  435.172987][T25231] veth0_to_bond: entered allmulticast mode
[  435.196658][T25231] veth0_to_bond: entered promiscuous mode
[  435.987973][T25287] netlink: 'syz.4.5545': attribute type 1 has an invalid length.
[  436.108548][T25287] 8021q: adding VLAN 0 to HW filter on device bond10
[  436.162877][T25290] pim6reg: entered allmulticast mode
[  436.177112][T25291] pim6reg: left allmulticast mode
[  436.232489][T25293] bond10: (slave ip6erspan0): making interface the new active one
[  436.283463][T25293] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link
[  436.336954][T25301] veth0_vlan: left promiscuous mode
[  436.697719][T25334] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  436.770677][T25341] __nla_validate_parse: 19 callbacks suppressed
[  436.770694][T25341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5555'.
[  436.873653][T25341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5555'.
[  436.905504][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5555'.
[  437.062699][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5557'.
[  437.143608][T25371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5557'.
[  437.186760][T25372] netlink: 'syz.1.5561': attribute type 10 has an invalid length.
[  437.287459][T25378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5563'.
[  437.684155][T25411] netlink: 'syz.1.5575': attribute type 1 has an invalid length.
[  438.585143][T25476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5588'.
[  438.596625][T25477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5588'.
[  438.764736][T25485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5592'.
[  438.853859][T25489] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5591'.
[  439.088298][T25501] netlink: 'syz.0.5597': attribute type 7 has an invalid length.
[  439.096241][T25501] netlink: 'syz.0.5597': attribute type 8 has an invalid length.
[  439.128086][T25503] netlink: 'syz.4.5598': attribute type 3 has an invalid length.
[  439.157122][T25509] xt_cgroup: invalid path, errno=-2
[  439.249227][T25523] netlink: 'syz.4.5598': attribute type 1 has an invalid length.
[  439.998978][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  440.120231][T25595] set match dimension is over the limit!
[  440.477744][T25616] netlink: 'syz.0.5630': attribute type 1 has an invalid length.
[  442.072355][T25640] x_tables: unsorted underflow at hook 3
[  442.367988][T25657] __nla_validate_parse: 7 callbacks suppressed
[  442.368005][T25657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5641'.
[  442.787170][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5651'.
[  442.803029][T25692] netlink: 'syz.3.5651': attribute type 2 has an invalid length.
[  442.963550][T25702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5655'.
[  443.038393][T25706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5655'.
[  443.427158][T25710] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  443.510643][T25716] net_ratelimit: 3 callbacks suppressed
[  443.510660][T25716] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  443.534465][T25716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.569271][T25717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5658'.
[  444.979325][T25747] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.159415][T25768] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5674'.
[  445.205888][T25770] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5673'.
[  445.332459][T25778] netlink: 'syz.4.5677': attribute type 12 has an invalid length.
[  445.390357][T25778] bond11: option primary_reselect: invalid value (255)
[  445.400224][T25778] bond11 (unregistering): Released all slaves
[  445.530059][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'.
[  445.545219][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5684'.
[  445.569715][T25798] netlink: 'syz.3.5684': attribute type 15 has an invalid length.
[  446.035864][T25829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5691'.
[  446.569546][T25879] netlink: 'syz.4.5707': attribute type 29 has an invalid length.
[  446.578245][T25874] netlink: 'syz.4.5707': attribute type 29 has an invalid length.
[  446.593828][T25882] netlink: 'syz.2.5708': attribute type 4 has an invalid length.
[  447.218271][T25910] xt_hashlimit: invalid interval
[  447.407498][T25921] __nla_validate_parse: 9 callbacks suppressed
[  447.407515][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'.
[  447.437364][T25922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'.
[  447.491145][T25929] netlink: 'syz.3.5725': attribute type 21 has an invalid length.
[  447.524160][T25929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5725'.
[  447.543557][T25936] IPv6: NLM_F_REPLACE set, but no existing node found!
[  447.549050][T25934] bond0: entered promiscuous mode
[  447.551523][T25929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5725'.
[  447.559693][T25934] batadv0: entered promiscuous mode
[  447.572187][T25934] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  447.587025][T25934] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  447.608149][T25934] 8021q: adding VLAN 0 to HW filter on device hsr1
[  447.749711][T25945] netlink: 'syz.2.5730': attribute type 12 has an invalid length.
[  447.764165][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5730'.
[  447.843424][T25955] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5732'.
[  447.954562][T25961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5735'.
[  448.055189][T25966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5737'.
[  448.141077][T25972] bridge11: entered promiscuous mode
[  448.147517][T25972] bridge11: entered allmulticast mode
[  448.283269][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'.
[  448.314532][T25986] netlink: 'syz.1.5743': attribute type 11 has an invalid length.
[  448.329117][T25990] netlink: 'syz.2.5744': attribute type 1 has an invalid length.
[  448.508989][T26000] bond8: (slave gretap1): making interface the new active one
[  448.522064][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5748'.
[  448.548677][T26005] netlink: 'syz.3.5748': attribute type 5 has an invalid length.
[  448.565872][T26000] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  448.610823][T26009] netlink: 'syz.3.5748': attribute type 1 has an invalid length.
[  448.636072][T26005] sysctl duplicate entry: /net/ipv4/conf/geneve0/forwarding
[  448.758279][T26013] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  448.770681][T26013] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  448.815004][T26005] bond0: (slave gretap2): making interface the new active one
[  448.844502][T26005] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  448.863675][T26031] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  448.991501][T26034] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  449.058303][T26034] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  449.073574][T26034] gretap3: entered promiscuous mode
[  449.082844][T26034] gretap3: entered allmulticast mode
[  449.539672][T26064] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.547799][T26064] bond0: (slave wg1): The slave device specified does not support setting the MAC address
[  449.558100][T26064] bond0: (slave wg1): Setting fail_over_mac to active for active-backup mode
[  449.572900][T26064] bond0: (slave wg1): making interface the new active one
[  449.583227][T26064] wg1: entered promiscuous mode
[  449.590525][T26064] bond0: (slave wg1): Enslaving as an active interface with an up link
[  449.600261][T26077] batadv_slave_1: entered promiscuous mode
[  449.625836][T26081] netlink: 'syz.4.5769': attribute type 14 has an invalid length.
[  449.627195][T26076] batadv_slave_1: left promiscuous mode
[  449.641163][T26081] netlink: 'syz.4.5769': attribute type 14 has an invalid length.
[  449.768299][T26087] delete_channel: no stack
[  449.916210][T26104] ieee802154 phy0 wpan0: encryption failed: -22
[  450.000533][T26113] xt_cluster: node mask cannot exceed total number of nodes
[  450.180414][T26127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.213467][T26126] netlink: 'syz.3.5781': attribute type 1 has an invalid length.
[  450.215496][T26131] siw: device registration error -23
[  450.281048][T26126] 8021q: adding VLAN 0 to HW filter on device bond5
[  450.385319][T26138] veth5: entered promiscuous mode
[  450.414015][T26138] bond5: (slave veth5): Enslaving as an active interface with an up link
[  450.489629][   T36] geneve2: left allmulticast mode
[  450.512676][   T36] geneve2: left promiscuous mode
[  450.544623][   T36] bridge0: port 1(geneve2) entered disabled state
[  450.872940][T26171] netlink: 'syz.3.5788': attribute type 1 has an invalid length.
[  450.928578][T26173] Set syz0 is full, maxelem 0 reached
[  451.026870][T11637] smc: removing ib device syz2
[  451.475546][   T36] bond2 (unregistering): (slave bridge4): Releasing backup interface
[  451.676064][   T36] bond7 (unregistering): (slave bridge9): Releasing backup interface
[  451.735961][   T36] bond9 (unregistering): (slave bridge10): Releasing backup interface
[  451.744162][   T36] bridge10 (unregistering): left promiscuous mode
[  451.775753][   T36] bond0 (unregistering): Released all slaves
[  451.874695][   T36] bond1 (unregistering): Released all slaves
[  451.968669][   T36] bond2 (unregistering): Released all slaves
[  451.980912][   T36] bond3 (unregistering): Released all slaves
[  451.993179][   T36] bond4 (unregistering): Released all slaves
[  452.005827][   T36] bond5 (unregistering): Released all slaves
[  452.020308][   T36] bond6 (unregistering): Released all slaves
[  452.117450][   T36] bond7 (unregistering): Released all slaves
[  452.214940][   T36] bond8 (unregistering): Released all slaves
[  452.311577][   T36] bond9 (unregistering): Released all slaves
[  452.347448][T26161] syzkaller0: entered promiscuous mode
[  452.352952][T26161] syzkaller0: entered allmulticast mode
[  452.385805][T26173] netem: change failed
[  452.536586][T26183] __nla_validate_parse: 9 callbacks suppressed
[  452.536603][T26183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5790'.
[  452.758463][T26197] xt_TCPMSS: Only works on TCP SYN packets
[  452.840631][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'.
[  452.987216][T26213] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5798'.
[  453.012192][T26213] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5798'.
[  453.326033][T26243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5811'.
[  453.376004][T26245] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5812'.
[  453.416982][T26245] vlan5: entered allmulticast mode
[  453.428664][T26245] gretap0: entered allmulticast mode
[  453.575460][T26266] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5817'.
[  453.776372][T26285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5821'.
[  453.841654][T26290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5822'.
[  453.910751][T26297] SET target dimension over the limit!
[  453.933107][T26297] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5825'.
[  454.056789][T26308] netlink: 'syz.2.5827': attribute type 2 has an invalid length.
[  454.693247][T26352] bridge0: port 1(vlan6) entered blocking state
[  454.700013][T26352] bridge0: port 1(vlan6) entered disabled state
[  454.707212][T26352] vlan6: entered allmulticast mode
[  454.712363][T26352] bridge0: entered allmulticast mode
[  454.721265][T26352] vlan6: left allmulticast mode
[  454.726633][T26352] bridge0: left allmulticast mode
[  454.735132][T26357] netlink: 'syz.4.5843': attribute type 19 has an invalid length.
[  455.170184][T26391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.313978][T26398] ip6_vti0 speed is unknown, defaulting to 1000
[  455.503272][T26405] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  455.568281][T26422] netlink: 'syz.1.5860': attribute type 83 has an invalid length.
[  455.607324][T26424] ieee802154 phy0 wpan0: encryption failed: -22
[  455.681372][T26405] bond6 (unregistering): Released all slaves
[  455.843579][T26433] netlink: 'syz.4.5864': attribute type 17 has an invalid length.
[  455.924319][T26439] netlink: 'syz.3.5866': attribute type 17 has an invalid length.
[  455.977271][T26440] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001
[  456.099637][T26445] team0: Port device dummy0 removed
[  456.284508][T26456] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  456.334245][T26472] netlink: 'syz.0.5874': attribute type 13 has an invalid length.
[  456.372625][T26461] vlan1: entered allmulticast mode
[  456.397174][T26461] veth0_vlan: entered allmulticast mode
[  456.405808][T26475] netlink: 'syz.3.5875': attribute type 20 has an invalid length.
[  456.421727][T26475] netlink: 'syz.3.5875': attribute type 20 has an invalid length.
[  456.590642][T26486] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  456.627473][T26490] x_tables: duplicate underflow at hook 1
[  456.635303][T26489] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  456.742803][T26494] syzkaller0: entered promiscuous mode
[  456.749136][T26494] syzkaller0: entered allmulticast mode
[  456.863652][T26508] netlink: 'syz.2.5884': attribute type 3 has an invalid length.
[  457.049127][T26517] syzkaller0: entered promiscuous mode
[  457.077322][T26517] syzkaller0: entered allmulticast mode
[  457.079694][T26521] netlink: 'syz.0.5887': attribute type 4 has an invalid length.
[  457.227275][T26531] netlink: 'syz.0.5891': attribute type 11 has an invalid length.
[  457.497771][T26542] IPVS: Unknown mcast interface: vcan0
[  457.509108][T26543] IPVS: Unknown mcast interface: vcan0
[  457.581043][T26545] __nla_validate_parse: 25 callbacks suppressed
[  457.581061][T26545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5896'.
[  457.731966][T26551] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5898'.
[  457.955487][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.973297][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.981823][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.991865][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.999937][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  458.044610][T26562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5902'.
[  458.053691][T26562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5902'.
[  458.055737][T26563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5902'.
[  458.073510][T26563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5902'.
[  458.076924][T26553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5899'.
[  458.131367][T26562] gretap2: entered promiscuous mode
[  458.137301][T26562] gretap2: entered allmulticast mode
[  458.509487][T26589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5910'.
[  458.595987][T26596] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5911'.
[  458.626813][T26559] chnl_net:caif_netlink_parms(): no params data found
[  458.659302][T26603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5915'.
[  458.743189][T26607] gre0: entered promiscuous mode
[  458.857420][T26559] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.871842][T26559] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.890111][T26559] bridge_slave_0: entered allmulticast mode
[  458.900907][T26559] bridge_slave_0: entered promiscuous mode
[  458.910651][T26559] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.918128][T26559] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.931044][T26559] bridge_slave_1: entered allmulticast mode
[  458.950416][T26559] bridge_slave_1: entered promiscuous mode
[  459.019610][T26559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.050243][T26559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.144052][T26559] team0: Port device team_slave_0 added
[  459.179190][T26559] team0: Port device team_slave_1 added
[  459.329517][T26636] veth0_to_bond: entered promiscuous mode
[  459.363954][T26559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.385218][T26559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.445068][T26559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.487395][T26645] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  459.510276][T26559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.520606][T26559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.547394][T26559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.574308][T26645] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  459.748164][T26559] hsr_slave_0: entered promiscuous mode
[  459.762203][T26559] hsr_slave_1: entered promiscuous mode
[  459.768774][T26559] debugfs: 'hsr0' already exists in 'hsr'
[  459.775201][T26559] Cannot create hsr debugfs directory
[  459.817875][T26658] validate_nla: 2 callbacks suppressed
[  459.817891][T26658] netlink: 'syz.0.5930': attribute type 5 has an invalid length.
[  460.074927][ T5846] Bluetooth: hci0: command tx timeout
[  460.243889][T26687] netlink: 'syz.4.5939': attribute type 10 has an invalid length.
[  460.264151][T26686] netlink: 'syz.0.5940': attribute type 1 has an invalid length.
[  460.287412][T26559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.301628][T26559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.312243][T26559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  460.402263][T26693] bond7: (slave geneve2): making interface the new active one
[  460.410975][T26693] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  460.432892][T22286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  460.462968][T22286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  460.599562][T26559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.630946][T26559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.655279][T26559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  460.672646][T22286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  460.681681][T22286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  460.751700][T26559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.763500][T26559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.775056][T26559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  460.887745][T26559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.903851][T26559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.915135][T26559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  460.928864][T26725] xt_NFQUEUE: number of total queues is 0
[  461.297416][T26559] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  461.321725][T26559] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  461.352110][T26559] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  461.383308][T26559] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  461.699176][T26559] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.787957][T26559] 8021q: adding VLAN 0 to HW filter on device team0
[  461.802235][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.809443][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.830060][T22288] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.837255][T22288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.056732][T26800] netlink: 'syz.3.5964': attribute type 1 has an invalid length.
[  462.156320][ T5846] Bluetooth: hci0: command tx timeout
[  462.259551][T26800] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  462.430896][T26559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.545845][T26559] veth0_vlan: entered promiscuous mode
[  462.583397][T26559] veth1_vlan: entered promiscuous mode
[  462.651857][T26559] veth0_macvtap: entered promiscuous mode
[  462.678410][T26559] veth1_macvtap: entered promiscuous mode
[  462.715017][T26559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.738960][T26559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.768362][ T6067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.782146][ T6067] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.802041][ T6067] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.813734][ T6067] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.925761][T26837] ip6_vti0: entered allmulticast mode
[  462.949519][T26837] __nla_validate_parse: 47 callbacks suppressed
[  462.949538][T26837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'.
[  462.971009][T22286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.987520][T22286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.019791][T26837] bond11: (slave syz_tun): Releasing backup interface
[  463.060184][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.068425][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.082768][T26834] ip6_vti0: left allmulticast mode
[  463.358927][T26844] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5980'.
[  463.370395][T26844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5980'.
[  463.707587][T26877] veth1_macvtap: left promiscuous mode
[  463.713276][T26877] macsec0: entered promiscuous mode
[  463.725259][T26877] veth1_macvtap: entered promiscuous mode
[  463.731307][T26877] macsec0: left promiscuous mode
[  463.790776][T26882] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  463.804307][T26882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5995'.
[  463.814770][T26882] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  464.040149][T26898] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6003'.
[  464.149127][T26906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6006'.
[  464.234565][ T5846] Bluetooth: hci0: command tx timeout
[  464.267017][T26913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6010'.
[  464.305152][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6011'.
[  464.593340][T26926] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6014'.
[  464.663977][T26933] netlink: 'syz.0.6015': attribute type 4 has an invalid length.
[  464.857109][T26942] netlink: 'syz.3.6021': attribute type 1 has an invalid length.
[  464.912458][T26942] bond6: (slave ip6gretap1): making interface the new active one
[  464.921677][T26942] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  464.931228][T26945] lo: entered promiscuous mode
[  464.939185][T26943] lo: left promiscuous mode
[  465.018935][T26947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6024'.
[  465.397235][T26975] xt_cgroup: path and classid specified
[  465.812145][T27007] syzkaller0: entered promiscuous mode
[  465.817991][T27007] syzkaller0: entered allmulticast mode
[  466.314519][ T5846] Bluetooth: hci0: command tx timeout
[  466.362223][T27036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  466.505874][T27045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.519018][T27052] x_tables: duplicate underflow at hook 2
[  466.533115][T27052] syzkaller0: entered promiscuous mode
[  466.539528][T27052] syzkaller0: entered allmulticast mode
[  466.576946][T27054] netlink: 'syz.1.6060': attribute type 2 has an invalid length.
[  466.592214][T27052] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  466.620250][T27052] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  466.832327][T27069] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  466.859549][T27069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.171703][T27077] syzkaller0: entered promiscuous mode
[  467.197118][T27077] syzkaller0: entered allmulticast mode
[  467.209784][T27082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  467.220261][T27080] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  467.344949][T27088] Bluetooth: MGMT ver 1.23
[  467.357553][T27090] bond0: (slave wg1): Error: Device can not be enslaved while up
[  467.532712][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  467.549564][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  467.576261][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  467.584259][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  467.601636][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  469.622382][T27097] chnl_net:caif_netlink_parms(): no params data found
[  469.678222][ T5847] Bluetooth: hci3: command tx timeout
[  469.846873][   T60] nci: nci_rx_work: unknown MT 0x7
[  469.905463][T27160] __nla_validate_parse: 21 callbacks suppressed
[  469.905482][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6085'.
[  469.906734][T27170] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6087'.
[  469.959278][T27097] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.964969][T27160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6085'.
[  469.966900][T27097] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.983603][T27097] bridge_slave_0: entered allmulticast mode
[  469.991749][T27097] bridge_slave_0: entered promiscuous mode
[  470.012560][T27097] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.020970][T27097] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.029321][T27097] bridge_slave_1: entered allmulticast mode
[  470.038010][T27097] bridge_slave_1: entered promiscuous mode
[  470.052685][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6087'.
[  470.112032][T27166] syzkaller0: entered promiscuous mode
[  470.119431][T27166] syzkaller0: entered allmulticast mode
[  470.135483][T27097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.148358][T27179] Set syz0 is full, maxelem 0 reached
[  470.154765][T27179] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6089'.
[  470.176302][T27097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.246860][T27181] bond13: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  470.259574][T27181] bond13 (unregistering): Released all slaves
[  470.281918][T27097] team0: Port device team_slave_0 added
[  470.291525][T27097] team0: Port device team_slave_1 added
[  470.332870][T27097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.348069][T27097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.375511][T27097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.388591][T27097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.410709][T27097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.473162][T27097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.717378][T27097] hsr_slave_0: entered promiscuous mode
[  470.724237][T27097] hsr_slave_1: entered promiscuous mode
[  470.736196][T27097] debugfs: 'hsr0' already exists in 'hsr'
[  470.741969][T27097] Cannot create hsr debugfs directory
[  470.859602][T27202] sock: sock_timestamping_bind_phc: sock not bind to device
[  471.163856][T27217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6099'.
[  471.185619][T27097] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.214180][T27097] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.372669][T27097] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.382615][T27097] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.458338][T27227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6103'.
[  471.477347][T27097] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.488957][T27097] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.656586][T27097] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.690032][T27097] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.756031][ T5847] Bluetooth: hci3: command tx timeout
[  471.942725][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'.
[  472.078284][T27097] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  472.107542][T27097] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  472.146752][T27097] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  472.181229][T27097] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  472.275739][T27266] vlan1: entered allmulticast mode
[  472.297577][T27266] veth0_vlan: entered allmulticast mode
[  472.562688][T27097] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.618923][T27280] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6118'.
[  472.629204][T27097] 8021q: adding VLAN 0 to HW filter on device team0
[  472.661061][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6118'.
[  472.682319][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.689803][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.719205][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.726404][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.825518][T27282] IPVS: Unknown mcast interface: vcan0
[  472.881265][T27282] veth9: entered allmulticast mode
[  472.926536][T27097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  472.967854][T27097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  473.012843][T27297] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  473.166540][T27309] netlink: 'syz.1.6126': attribute type 5 has an invalid length.
[  473.348582][T27097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.629732][T27339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.835009][ T5847] Bluetooth: hci3: command tx timeout
[  475.914867][ T5847] Bluetooth: hci3: command tx timeout
[  476.761037][T27356] syzkaller0: entered promiscuous mode
[  476.774821][T27356] syzkaller0: entered allmulticast mode
[  476.789407][T27372] __nla_validate_parse: 5 callbacks suppressed
[  476.789424][T27372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6140'.
[  476.808664][T27371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'.
[  476.985964][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'.
[  477.008079][T27383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6141'.
[  478.422750][T27097] veth0_vlan: entered promiscuous mode
[  478.451985][T27387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6144'.
[  478.482115][T27097] veth1_vlan: entered promiscuous mode
[  478.595664][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6149'.
[  478.607253][T27097] veth0_macvtap: entered promiscuous mode
[  478.637721][T27097] veth1_macvtap: entered promiscuous mode
[  478.732809][T27097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.776622][T27097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.810163][T11635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.832104][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'.
[  478.842435][T11635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.851793][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6153'.
[  478.875942][T11635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.889406][T27416] netlink: 'syz.2.6153': attribute type 12 has an invalid length.
[  478.891210][T11635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.933387][T27416] netlink: 'syz.2.6153': attribute type 11 has an invalid length.
[  479.253093][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.281127][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.416601][T27447] syzkaller1: entered promiscuous mode
[  479.422109][T27447] syzkaller1: entered allmulticast mode
[  479.459282][T27442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.498109][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.514099][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.909400][T27473] IPVS: Error connecting to the multicast addr
[  479.997794][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6165'.
[  480.018139][T27480] netlink: 'syz.4.6065': attribute type 6 has an invalid length.
[  480.037190][T27481] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6165'.
[  480.332490][T27501] Cannot find add_set index 2 as target
[  480.542731][T27522] unsupported nla_type 33542
[  480.673252][T27535] dvmrp0: entered allmulticast mode
[  480.679028][T27536] dvmrp0: left allmulticast mode
[  480.709406][T27535] dvmrp0: entered allmulticast mode
[  480.777883][T27539] sctp: [Deprecated]: syz.4.6181 (pid 27539) Use of struct sctp_assoc_value in delayed_ack socket option.
[  480.777883][T27539] Use struct sctp_sack_info instead
[  481.923401][T27600] netlink: 'syz.2.6197': attribute type 1 has an invalid length.
[  481.985428][T27604] __nla_validate_parse: 3 callbacks suppressed
[  481.985445][T27604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'.
[  482.045326][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  482.066327][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  482.083346][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  482.091522][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  482.094530][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'.
[  482.104736][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6197'.
[  482.111451][T27611] 
[  482.118513][T27611] ======================================================
[  482.124527][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  482.125518][T27611] WARNING: possible circular locking dependency detected
[  482.125546][T27611] syzkaller #0 Not tainted
[  482.143864][T27611] ------------------------------------------------------
[  482.150889][T27611] syz.4.6201/27611 is trying to acquire lock:
[  482.156955][T27611] ffffffff8f4576f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  482.166096][T27611] 
[  482.166096][T27611] but task is already holding lock:
[  482.173454][T27611] ffff888027415270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  482.182673][T27611] 
[  482.182673][T27611] which lock already depends on the new lock.
[  482.182673][T27611] 
[  482.193061][T27611] 
[  482.193061][T27611] the existing dependency chain (in reverse order) is:
[  482.202058][T27611] 
[  482.202058][T27611] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  482.210056][T27611]        _raw_spin_lock_bh+0x36/0x50
[  482.215336][T27611]        nr_rt_ioctl+0x193/0xd50
[  482.220275][T27611]        sock_do_ioctl+0xdc/0x300
[  482.225292][T27611]        sock_ioctl+0x576/0x790
[  482.230127][T27611]        __se_sys_ioctl+0xfc/0x170
[  482.235228][T27611]        do_syscall_64+0xfa/0xf80
[  482.240238][T27611]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.246634][T27611] 
[  482.246634][T27611] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  482.254437][T27611]        _raw_spin_lock_bh+0x36/0x50
[  482.259712][T27611]        nr_rt_device_down+0xa9/0x720
[  482.265074][T27611]        nr_device_event+0x137/0x150
[  482.270352][T27611]        notifier_call_chain+0x19d/0x3a0
[  482.275986][T27611]        __dev_notify_flags+0x18d/0x2e0
[  482.281523][T27611]        netif_change_flags+0xe8/0x1a0
[  482.286970][T27611]        dev_change_flags+0x130/0x260
[  482.292329][T27611]        dev_ioctl+0x7b4/0x1150
[  482.297194][T27611]        sock_do_ioctl+0x22c/0x300
[  482.302286][T27611]        sock_ioctl+0x576/0x790
[  482.307118][T27611]        __se_sys_ioctl+0xfc/0x170
[  482.312213][T27611]        do_syscall_64+0xfa/0xf80
[  482.317230][T27611]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.323628][T27611] 
[  482.323628][T27611] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  482.331520][T27611]        __lock_acquire+0x15a6/0x2cf0
[  482.336876][T27611]        lock_acquire+0x117/0x340
[  482.341880][T27611]        _raw_spin_lock_bh+0x36/0x50
[  482.347146][T27611]        nr_rt_ioctl+0x390/0xd50
[  482.352069][T27611]        sock_do_ioctl+0xdc/0x300
[  482.357507][T27611]        sock_ioctl+0x576/0x790
[  482.362338][T27611]        __se_sys_ioctl+0xfc/0x170
[  482.367442][T27611]        do_syscall_64+0xfa/0xf80
[  482.372454][T27611]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.378856][T27611] 
[  482.378856][T27611] other info that might help us debug this:
[  482.378856][T27611] 
[  482.389245][T27611] Chain exists of:
[  482.389245][T27611]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  482.389245][T27611] 
[  482.403048][T27611]  Possible unsafe locking scenario:
[  482.403048][T27611] 
[  482.410482][T27611]        CPU0                    CPU1
[  482.415830][T27611]        ----                    ----
[  482.421190][T27611]   lock(&nr_node->node_lock);
[  482.425937][T27611]                                lock(nr_node_list_lock);
[  482.433027][T27611]                                lock(&nr_node->node_lock);
[  482.440297][T27611]   lock(nr_neigh_list_lock);
[  482.444958][T27611] 
[  482.444958][T27611]  *** DEADLOCK ***
[  482.444958][T27611] 
[  482.453092][T27611] 2 locks held by syz.4.6201/27611:
[  482.458269][T27611]  #0: ffffffff8f457758 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  482.467741][T27611]  #1: ffff888027415270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  482.477386][T27611] 
[  482.477386][T27611] stack backtrace:
[  482.483285][T27611] CPU: 1 UID: 0 PID: 27611 Comm: syz.4.6201 Not tainted syzkaller #0 PREEMPT(full) 
[  482.483317][T27611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  482.483339][T27611] Call Trace:
[  482.483347][T27611]  <TASK>
[  482.483353][T27611]  dump_stack_lvl+0x189/0x250
[  482.483378][T27611]  ? __pfx_dump_stack_lvl+0x10/0x10
[  482.483391][T27611]  ? __pfx__printk+0x10/0x10
[  482.483406][T27611]  ? stack_trace_save+0x9c/0xe0
[  482.483429][T27611]  print_circular_bug+0x2e2/0x300
[  482.483446][T27611]  check_noncircular+0x12e/0x150
[  482.483463][T27611]  __lock_acquire+0x15a6/0x2cf0
[  482.483477][T27611]  ? stack_depot_save_flags+0x40/0x850
[  482.483494][T27611]  ? kasan_save_track+0x4f/0x80
[  482.483510][T27611]  ? kasan_save_track+0x3e/0x80
[  482.483524][T27611]  ? __kasan_save_free_info+0x46/0x50
[  482.483536][T27611]  ? __kasan_slab_free+0x5c/0x80
[  482.483551][T27611]  ? kfree+0x1c0/0x660
[  482.483564][T27611]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  482.483581][T27611]  ? security_file_ioctl+0xcb/0x2d0
[  482.483596][T27611]  ? __se_sys_ioctl+0x47/0x170
[  482.483609][T27611]  ? do_syscall_64+0xfa/0xf80
[  482.483626][T27611]  ? nr_rt_ioctl+0x390/0xd50
[  482.483642][T27611]  lock_acquire+0x117/0x340
[  482.483653][T27611]  ? nr_rt_ioctl+0x390/0xd50
[  482.483671][T27611]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  482.483688][T27611]  ? nr_rt_ioctl+0x390/0xd50
[  482.483704][T27611]  _raw_spin_lock_bh+0x36/0x50
[  482.483718][T27611]  ? nr_rt_ioctl+0x390/0xd50
[  482.483734][T27611]  nr_rt_ioctl+0x390/0xd50
[  482.483754][T27611]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  482.483775][T27611]  ? apparmor_capable+0x137/0x1a0
[  482.483792][T27611]  ? capable+0x89/0xe0
[  482.483804][T27611]  ? nr_ioctl+0x1b1/0x3b0
[  482.483819][T27611]  sock_do_ioctl+0xdc/0x300
[  482.483834][T27611]  ? __pfx_sock_do_ioctl+0x10/0x10
[  482.483848][T27611]  ? do_futex+0x333/0x420
[  482.483865][T27611]  sock_ioctl+0x576/0x790
[  482.483878][T27611]  ? __pfx_sock_ioctl+0x10/0x10
[  482.483892][T27611]  ? __fget_files+0x3a0/0x420
[  482.483904][T27611]  ? __fget_files+0x2a/0x420
[  482.483916][T27611]  ? bpf_lsm_file_ioctl+0x9/0x20
[  482.483928][T27611]  ? __pfx_sock_ioctl+0x10/0x10
[  482.483941][T27611]  __se_sys_ioctl+0xfc/0x170
[  482.483956][T27611]  do_syscall_64+0xfa/0xf80
[  482.483972][T27611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.483985][T27611]  ? clear_bhb_loop+0x60/0xb0
[  482.483999][T27611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.484011][T27611] RIP: 0033:0x7f696b38f749
[  482.484028][T27611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.484040][T27611] RSP: 002b:00007f696c208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  482.484054][T27611] RAX: ffffffffffffffda RBX: 00007f696b5e5fa0 RCX: 00007f696b38f749
[  482.484064][T27611] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007
[  482.484072][T27611] RBP: 00007f696b413f91 R08: 0000000000000000 R09: 0000000000000000
[  482.484080][T27611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.484088][T27611] R13: 00007f696b5e6038 R14: 00007f696b5e5fa0 R15: 00007fff53bce2d8
[  482.484104][T27611]  </TASK>