last executing test programs:

12.472335602s ago: executing program 4 (id=3022):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048011}, 0xc0)
listen(r0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
r4 = accept(r0, 0x0, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) (async, rerun: 64)
recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64)
getsockname$packet(r4, 0x0, &(0x7f0000000180))

12.061125351s ago: executing program 4 (id=3025):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0x0, 0x7ffffffe}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
socket$nl_xfrm(0x10, 0x3, 0x6)
shutdown(r0, 0x1)
recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
readv(r1, &(0x7f0000005080)=[{&(0x7f0000003d80)=""/4096, 0x1000}], 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000000000009da6", 0x8b}], 0x1}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r0)

11.755141085s ago: executing program 4 (id=3030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x78bd28}, 0x20}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000074918fda000000000100000061107d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

11.535648844s ago: executing program 4 (id=3031):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={<r3=>0x0, 0x3}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r4=>r3, 0x0, &(0x7f0000000140)}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, 0x8)

11.189749239s ago: executing program 4 (id=3033):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x40)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x39e2b000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x743bb000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000b14000129bd7000fcdbdf2508000300010000000800030002000000080003000000f0fc08000100020000000800030003000000080001000000000008003f000000000008003f00050000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040090}, 0x4010)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d0000000000080003252d3a440008000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)

10.766478675s ago: executing program 4 (id=3036):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c4c00001000850600000000000004"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000100feffffff000100006401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d00000000000000950000000000000055e7d5d720f9ee2b3aa350e692e44d5f98e7e7e58bd3e88b1553396f381ae48a287f6710465f9319dec584f884dbbf3545cf615c475052771905b7f941db5e5df74f4acb0735ace6dc491acbd1de22049a87116c6cbe0e493686e1"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000700)={r1, r1, 0xa, 0x3, &(0x7f0000000100)="2ff4b4", 0x7, 0x3, 0x458, 0x5c, 0x8, 0x3, 0x1, 'syz1\x00'})

4.500857178s ago: executing program 0 (id=3073):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6c, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500))
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000001100)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="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"/504], 0x208}, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getae={0xb8, 0x1f, 0x20, 0x70bd28, 0x25dfdbff, {{@in=@local, 0x4d2, 0xa}, @in6=@local, 0x7}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @lifetime_val={0x24, 0x9, {0x8, 0x7, 0xc631, 0x6}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x2a, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@typed={0x11, 0x1, 0x0, 0x0, @str='hm\xf33)\xf3\xff\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'pimreg\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="4200000021200000340012800c0001006d6163766c616e002400028008000300030000000800010010000000040005800a000400aaaaaaaaaaaa000008000500", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000002)

4.002687494s ago: executing program 2 (id=3075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef)

3.873558426s ago: executing program 0 (id=3076):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000001508000240000000002400018009000100686173680000000014000280080002400000001708000740"], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES8=r3], 0x30}}], 0x1, 0xc0)

3.666098177s ago: executing program 0 (id=3077):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="080001006e71"], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x15, 0x4, 0x7)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_macvtap\x00'}, 0x18)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r6)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', <r8=>0x0, 0x29, 0x1, 0x1, 0xfff, 0x20, @mcast2, @mcast1, 0x20, 0x0, 0xfffffff9, 0x80000000}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x54, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4815}, 0x800)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010103000000000000000000050000020c00188008000140000000092f203098b5845118e51c0daeb93dbd4c9ba8a01ec824ba200034d911cedfa01774d03cc7be05f72b13869e984880cfca9af38bb2812dee337d20f76c4a218931dc273b5b209630dc5a1bdbfecd245bef9193a851a40101009071aa5cf2101c5a4eff"], 0x20}, 0x1, 0x0, 0x0, 0x20008050}, 0x40880)
sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000d6e200000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797ab0000000006c000000160a01040000000000000000020000020900020073797a30000000000900010073797a30000000004000038008000140000000002c000380140001007465616d5f736c6176655f300000000014000100766c616e3100000000000000000000000800024000000200140000001100010000000000000000000100000a"], 0xc0}}, 0x0)

3.43861893s ago: executing program 2 (id=3078):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000008c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000008c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000000c0)={@remote, @multicast2, 0x0, "251f170935b22bbc40c3af9da94eb7b1c99fbd9f97c5468074f7ac6df1864e46", 0xd8, 0x7fff, 0x1, 0x1ff}, 0x3c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={0x24, r5, 0x62c21a4ade68aba1, 0x0, 0x6, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18f1eee002000008000100400090000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29}, 0x94)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.499391424s ago: executing program 0 (id=3081):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000101040000000000000000020000002400018014000180"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0xfffffffe}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8)
sendmmsg$alg(r7, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="cb", 0x1}, {&(0x7f00000001c0)}], 0x2, 0x0, 0x0, 0x20044044}], 0x1, 0x44001)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r9 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r9, &(0x7f00000003c0)="1002102d060748641bdebfe79fb1eeac908cfc6d974485c0fe7552aebf5faed5b92c6737ceadee6f2786a2cc225be3cca8cc6dfff018da8e1f8ee349213768e008cb7d1a1e6cb41ad5b5a18289bdf32ea18d1c3eb53cad4a5f533ae9d96009423b0a770918d6e65752ca68ac3e0566bba071b742f241400b0bbb39649d44251e4166ffcf9382e6daf743c986c8b8d02579885ef39ba5ea33f860d205444aff76c1b8674f54cc5837c706ab782c674005f2883e4be408aabfd8eed119630e45340d347d7164ec40162b22b7", 0xcb, 0x4004802, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtclass={0x58, 0x28, 0x110, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xfff2, 0x7}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x3}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x10, 0x6}}, @TCA_RATE={0x6, 0x5, {0xfd, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfc}}]}, 0x58}}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)

2.338974187s ago: executing program 3 (id=3082):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x4, 0x0, 0x6], 0x0, [0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x5, 0x0, 0x0, 0x682], [0x0, 0x4, 0x0, 0x0, 0x0, 0x1f3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r3, 0x0, 0x2, 0x1000, &(0x7f0000000080)="b777", &(0x7f00000003c0)=""/4096, 0x1, 0x0, 0x5f, 0x91, &(0x7f00000013c0)="e64f59b348fa13559a6ec5df2b12c2290a8a66fd576a62cdf208cc75afd7e58eb1c2e162cf3d4df83553bbd5791f258c6ff062c6d1b7e7177c0cb16e42b2ec79048ccead18c0af3b007f55266fbc32d4a0ebdc1c46e81e4ef7156ca6386460", &(0x7f0000001440)="958c00cff7d145afbb73859debb2349d8f1b66215381dd7aa1f8018b98780f8790e9bae75b62e04ebcdc3dca4634baa57a775e898ddec665a7810ae5b5921de94e3daea3a93eb70d7f7f68a8d84e1b44f2dfa263942d6c8d10c156c0c9c948c539c0d768cd6abcafc5930ed5bef3bcda8ad8a7f5efa7167cd756fd30378957092098ae56ce9e275e491c99a6df6a7b56ea", 0x7, 0x0, 0x5}, 0x50)

2.139478318s ago: executing program 2 (id=3084):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r1, &(0x7f0000000340)="38a65c16fe6d248cef3b6978b1b9b1facbc9682eb7e4116e1a5811ea0a05ff067f99e6281a95114c03e884d5aeae2e8feec97592c22a2a6a742a1b3814460c8235c7cf2e11d7f8db349a9fac1c3f6806e7a3f08c16a5e024cd9f72e1ef18dce8d31ccab521c6c5eea2132033f3f0929439858dd1c87366c613e0504cc9c5bdf0988dddfa2dce8af104ea9d748280d35db3933009e0f000d13fd4acdf3825e3d3f5f0b5e3623d6e20f3f145122da4b81d72302b126ab3d8340f730bb214f2a8771bf4b0ae00d753db60a7c4663ec40d5e0a9a9d17098c3b519d4393ccbb9fb622b6e0bf", &(0x7f0000000440)=""/254}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x34}}, 0x200080d4)

2.124585447s ago: executing program 3 (id=3085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0xc, 0x0, 0x4, @vifc_lcl_addr=@private=0xa010102, @loopback}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xe3, 0x8, "55f458fef8609418c65eae51630779118a65304e62fdfbf39ae9c759c2520bc8d0ca555d7085f20ce9b84ba3dc63aedd12e3734deaef90be4574a4afc104607e155f5908c2fabc2032f008f88881954282cdc5b282aa533ccbd76c0725ef8a29d82fa67941702e2258cabacdcd5eb30e728b09ecabaf496aa348f0dc34823d374f451ef132f98a242c0722fe7bb8689cb902c1a9918dbf3d05b16cca57f79c2d2bf6557d32ff794b0dc18923f2f58c0969f66a903eaab007aae4545858f4cf487dad6c798004a09bc63e39a1bfabb690d4cc2230f39cf9c7755a1853ce6d20"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "1f030000e27d"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1b0}}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000500)=""/161, 0xa1}], 0x3, &(0x7f0000000600)=""/44, 0x2c}, 0xffffff81}, {{&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/119, 0x77}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f00000008c0)=""/130, 0x82}], 0x5, &(0x7f0000000a00)=""/62, 0x3e}, 0x8}, {{&(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/183, 0xb7}], 0x3, &(0x7f0000000cc0)=""/191, 0xbf}, 0xbb}, {{&(0x7f0000000d80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e00)=""/97, 0x61}, {&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/6, 0x6}, {&(0x7f0000000f80)=""/244, 0xf4}], 0x4, &(0x7f00000010c0)=""/220, 0xdc}, 0x9}, {{&(0x7f00000011c0)=@isdn, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/230, 0xe6}, {&(0x7f0000002340)=""/34, 0x22}, {&(0x7f0000002380)=""/14, 0xe}, {&(0x7f00000023c0)=""/144, 0x90}, {&(0x7f0000002480)=""/88, 0x58}, {&(0x7f0000002500)=""/180, 0xb4}], 0x7, &(0x7f0000002640)=""/100, 0x64}, 0x7}, {{&(0x7f00000026c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002740)=""/227, 0xe3}, {&(0x7f0000002840)=""/129, 0x81}, {&(0x7f0000002900)=""/8, 0x8}, {&(0x7f0000002940)=""/168, 0xa8}, {&(0x7f0000002a00)=""/67, 0x43}, {&(0x7f0000002a80)=""/98, 0x62}, {&(0x7f0000002b00)=""/207, 0xcf}, {&(0x7f0000002c00)=""/183, 0xb7}, {&(0x7f0000002cc0)=""/143, 0x8f}], 0x9, &(0x7f0000002e40)=""/210, 0xd2}, 0x2}, {{&(0x7f0000002f40)=@nfc_llcp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/124, 0x7c}], 0x1, &(0x7f0000003080)=""/188, 0xbc}}], 0x7, 0x2020, &(0x7f0000003300))
socket(0x2, 0x80805, 0x0)
close(0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

2.048936314s ago: executing program 0 (id=3086):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x400}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)

1.964526477s ago: executing program 1 (id=3087):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6d8, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24004081)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @loopback, 0x4e22, 0x0, 'nq\x00', 0x0, 0x9, 0x5a}, 0x2c)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffda6)

1.91377442s ago: executing program 2 (id=3088):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
shutdown(r2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000001800))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = accept4$inet6(r3, 0x0, &(0x7f0000000140), 0x0)
close(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e677977a0085000000560000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.669054588s ago: executing program 1 (id=3089):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x3, 0x4, 0x80000000}, {0x80, 0x3}, {0x80, 0xfd}, {0x7, 0x6, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x3, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

1.668266471s ago: executing program 3 (id=3090):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="aefa68752c9cb2b6a29232d4f89819aa", 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x7}, {0x0, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xba, 0x6, 0x2, 0x9, 0x1, 0x2, 0x6, 0x6}}, {0x10, 0x2, [0xa, 0x4, 0x5, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0x0, 0x5, 0x3896, 0x80, 0x2, 0xf, 0xb, 0x4}}, {0xc, 0x2, [0x2, 0xfff, 0x7f, 0x6]}}, {{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa, 0x4}}, {0xc, 0x2, [0x3389, 0x4, 0x600, 0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xa}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0xe0}}, 0x48851)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x40)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r8, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/41, 0x29}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}, 0x48004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r9 = socket$xdp(0x2c, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r11, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1bfe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000280)=0x1002000, 0x4)

1.467645975s ago: executing program 1 (id=3091):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0x100000000)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1e5c0e76424ec320, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0x20000801)
write(r1, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10)
write(r1, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x80000001, 0x0, 0x6c, 0x0, 0x0, 0xbffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x16, 0xcc, 0x0, 0x8008, 0x7ffffffffffffffc}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fff, 0x36cc, 0xa3e8, 0x6, 0x9}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040080}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES32=r3], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0)

1.438673978s ago: executing program 3 (id=3092):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}], 0x38}}, {{&(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000dc0)="84fde25db79530bf60353ff4b4121bbb8d2eb00751c9c61d8b05ed8c26be9bad29e25aa8644d1bb01df4e3110d1a5b024c4166fa6445a1473c3874782bea172ae8f97f56546558881a1275e2b9c7a076af9c46527c42979aff88d3684674830865afa0d84754051c5b0f9f0e39efc9fd4672c10890cb2830136e963a56f3566a27baa58b3205fbc4", 0x88}, {&(0x7f00000003c0)="951c6770bc6b0ce8e321ae1801ac7763b2bb319fa1fcbf7749a9dfa7fe77f97c317095c0a94911f4de0a87d4522b4f77a12f530c39dd6f7a30895f5986517959", 0x40}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)="64c32c5c00055e97e37f7cc6c19b50a5b743d5975bc3aa5fb8b577c0243344b5ccb4ce6a5b0f1dc8bd468344785e165b77ad01763da8df934091be8b6e8e76d407f4e4e62774508bdaf185aa34be7288d18d9afbf195038af4b0032ffa93a23b556554d72fa0eb4b61fa58f804541d4a32fd9fe3a23a4b0540dfe7cea92bf2e6af", 0x81}], 0x1, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x50}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="3f5c8ca3891c0fe661058f48557da0330db73af1559728218052e410979378c03c92a0f643128875218977c2b7f70aa0b2fc644718fc04dbe490357846d4b4c18f7a00"/81, 0x51}, {&(0x7f0000000b80)="40334731cefdb6c52c01b8024bd3308fb7b21f3dccb846f2d364b276", 0x1c}], 0x2}}], 0x4, 0x5422236e3a74f2d3)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1)
ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0xffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000200)=0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0500000004000000ff0f0000077a9625654472"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002380)={{r5}, r7, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid})
unshare(0x20000400)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000406050000000000000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "3e5a7ddb", "2fd9060000003b5d"}, 0x28)
setsockopt$inet6_tcp_int(r9, 0x11a, 0x4, &(0x7f0000000040), 0x44)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r10, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"94a99c62cce22029a00b927b6a1d28c9", 0x0, r7, {0x8, 0x5}, {0x0, 0x80000080}, 0xffffffff, [0x6, 0x8, 0x10, 0xffffffffffffffff, 0x3, 0xd7c4, 0x7, 0x7c, 0x6, 0x8, 0x5, 0xfffffffffffffffa, 0x3, 0x8000, 0x204, 0x9]})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"1b14d2f92e758fb0afb7b8226bb1c9db", r7, r6, {0x4, 0x26}, {0x0, 0x80000000}, 0x9, [0x1, 0xffffffff, 0x1, 0x1, 0x9, 0x3, 0x2, 0x2, 0xc218, 0xff, 0x7, 0x0, 0x0, 0x8, 0x1fb, 0x1200000]})

1.020242977s ago: executing program 3 (id=3093):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={<r7=>r2, &(0x7f0000000000)='matchall\x00', 0x2880, &(0x7f0000000140)={@align=0xd4, {0x9, 0x101, 0x80000000, 0x4}}, 0x7, &(0x7f0000000180), &(0x7f0000000340)=0xa})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vxcan0\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$tun(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r4, <r10=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pB    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @generic={0x7, 0x4, 0x9, 0x6, 0x83}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xcd, &(0x7f0000000900)=""/205, 0x1f00, 0x30, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000a40)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r5, 0xffffffffffffffff, 0x1, r10], &(0x7f0000000b80)=[{0x1, 0x4, 0x8, 0x9}, {0x0, 0x5, 0x3, 0xb}], 0x10, 0xfffffff8}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xf3}}, @TCA_CHAIN={0x8, 0xb, 0x58}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c800)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)

922.718876ms ago: executing program 1 (id=3094):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x71}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x11, 0x6}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x52, 0xac, "3274a185f0fcf9743cd115bb4530b94dd0a2e68e64fabf6009f14b713813247ae49491eadf59e667c5b6a6dbab04851e2b6e231dd882574b575eb190428fbd91f75656f0549132e6893d6579fb02"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2f, 0xbe, "1709ead2e0792bfcb6815fb93dde52f249643a4959a8afcb9edcefc8ed8e11903633295cdc993254fb941c"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48004}, 0x4008000)
setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000040), 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5c52, 0x32}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7308}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x40, 0xbe, "fffc5821a7f0598f0a2603b7bc9ecae89fdcc4fc9d9f6f29e676ea5a0592de9ffb6b1d783a4011d386e68fe5a92fc1dafe555a1727716b571a1ad228"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10)
unshare(0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bind$pptp(r7, 0x0, 0x0)

856.619914ms ago: executing program 2 (id=3095):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"fde2f9e66bf0903d0f95b654b993ee45", <r1=>0x0, 0x0, {0x4, 0x2}, {0xffffffffffffffd1}, 0x6, [0x8, 0x1, 0x918c, 0x6, 0x4, 0xd, 0x6, 0x4, 0x6, 0xd, 0x1, 0x0, 0xfffffffffffffc01, 0xffffffff, 0x6, 0x3]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"a1ae6476027444ba55661c8a17f8b84c", <r2=>0x0, 0x0, {0x0, 0x401}, {0x3c, 0x101}, 0x81, [0x6, 0x1, 0xc, 0x8, 0x258e, 0x303c8bf6, 0x73e8, 0x7, 0x0, 0x3ff, 0x4, 0x100, 0xffff, 0x8, 0x10001, 0x1000]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"2b050c8f67aad51b76ee1d7a62f790c1", r1, r2, {0xa2, 0x1000}, {0x1, 0xffffff1b}, 0xffffffffffffc000, [0xc4b, 0x6, 0x9, 0x5, 0x5, 0x6, 0x1, 0xcefb, 0x8000, 0xffffffffffffff2c, 0xffffffffffffd1ed, 0xfff0000000000000, 0x6, 0x9, 0xc40, 0xb4a1]})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x4, @remote, 0xffff}}, 0x7, 0xd3b}, &(0x7f00000003c0)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000400)={r3, 0x7, 0x5}, 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={<r5=>0x0}, &(0x7f0000000480)=0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000004c0)={<r7=>r5, 0x947, 0x10, 0x3, 0x20}, &(0x7f0000000500)=0x18)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000f, 0x2010, r6, 0x6fbe6000)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r3, 0x1}, 0x8)
ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000580)={0x0, r0, r0, 0x0, 0x6, '\x00', {0x4, 0x3ff, 0x3, 0x83b6, 0x10001, 0x0, 0x6, 0x3, {0xfffffffffffffffc, 0x4}, {0x1, 0xc82}, {0x7a000, 0x9}, 0x9644, 0x22, 0x0, 0x3, 0x9, 0x8, 0x80, 0x2, 0x1, 0x4, '\x00', 0x40, 0x9, 0xed, 0x8}})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000640)=0x21b2e4f8a0104d11, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000680)={r7, 0x176}, 0x8)
r9 = socket(0x2e, 0x3, 0x4)
r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r10, 0x40046721, &(0x7f00000006c0)={r6})
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r9)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r11, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x240000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x24040000)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000840)={<r12=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000008c0), 0x3)
getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000900)={<r13=>r3, 0x5, 0xfffffe01, 0xf}, &(0x7f0000000940)=0x10)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r13, 0x43e9, 0x136}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0))
r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r14, 0x1, 0x1d, &(0x7f0000000a00)=0x4, 0x4)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETSNDBUF(r12, 0x400454d4, &(0x7f0000000a40)=0x9)

597.557533ms ago: executing program 2 (id=3096):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x6, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd23, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000300366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet6(0xa, 0x3, 0x1) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
socket$inet6(0xa, 0x3, 0x1) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x6, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd23, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000300366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) (async)

536.674458ms ago: executing program 0 (id=3097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20001800}, 0x40004)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x2000)
listen(r0, 0x6)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa, 0x1f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={<r4=>r0})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc8, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000740)={<r6=>r0, 0xa, 0x3, 0xfffffffffffff360})
r7 = openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r6)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5295db64c0104c09}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48e0}, 0x800)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
getpeername$packet(r6, &(0x7f0000000a80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)=@bridge_newvlan={0x90, 0x70, 0x400, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xa}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x6e}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x44, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x200}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xcc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x10}}]}, 0x90}}, 0x4000840)
epoll_create1(0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000004}, 0x10)
ioctl$int_in(r12, 0x5452, &(0x7f0000000e00)=0x8)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={<r14=>r7, 0x6, 0xfffffffffffff2d3, 0x267})
sendmsg$nl_crypto(r14, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)=@alg={0xe8, 0x10, 0x708, 0x70bd27, 0x25dfdbfd, {{'rfc4543(rfc4106(aegis128-aesni))\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40041}, 0x20000040)
recvmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001180)=[{&(0x7f00000010c0)=""/190, 0xbe}], 0x1, &(0x7f00000011c0)=""/218, 0xda}, 0x400}, {{&(0x7f00000012c0)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)=""/9, 0x9}], 0x1, &(0x7f00000013c0)=""/159, 0x9f}, 0x7}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001480)=""/244, 0xf4}, {&(0x7f0000001580)=""/93, 0x5d}, {&(0x7f0000001600)=""/213, 0xd5}, {&(0x7f0000001700)=""/175, 0xaf}, {&(0x7f00000017c0)=""/255, 0xff}, {&(0x7f00000018c0)=""/73, 0x49}], 0x6}, 0x80000001}, {{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a40)=""/8, 0x8}, {&(0x7f0000001a80)=""/3, 0x3}, {&(0x7f0000001ac0)=""/200, 0xc8}, {&(0x7f0000001bc0)=""/126, 0x7e}, {&(0x7f0000001c40)=""/190, 0xbe}], 0x5, &(0x7f0000001d80)=""/59, 0x3b}, 0x2}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/194, 0xc2}], 0x1, &(0x7f0000001f80)=""/73, 0x49}, 0x540}], 0x5, 0x40002060, &(0x7f0000002140)={0x0, 0x3938700})

495.548072ms ago: executing program 1 (id=3098):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept(r0, 0x0, 0x0)

434.871483ms ago: executing program 3 (id=3099):
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRES16, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

0s ago: executing program 1 (id=3100):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0xad)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x70bd2c, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd49920d356510752}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a600000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c0002800800014000000800140000001100010000000000000000000100000a3ba32465568e2705260013e504fa9205bbe330b0a8f9a6200a941cce4afbaf66b5fbcb9450e78eb609bfb84aaa68f9bf87febc9dc67099c8443ddf6259f4d58a8a474a28242063429ab2c8a008"], 0x88}}, 0x4000040)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfd6c)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000001c0)=0x6)

kernel console output (not intermixed with test programs):

ready. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  351.245012][T13088] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  353.308947][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  353.308986][T13115] netlink: 'syz.1.1685': attribute type 30 has an invalid length.
[  353.446124][T13119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'.
[  353.461854][T13115] vxlan0: entered promiscuous mode
[  353.461890][T13115] vxlan0: entered allmulticast mode
[  354.962777][T13145] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  354.962803][T13145] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1692'.
[  355.701182][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1695'.
[  355.835770][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'.
[  355.904200][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.904390][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.906001][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.906227][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.906638][T13161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.966199][T13159] syzkaller0: left promiscuous mode
[  355.966227][T13159] syzkaller0: left allmulticast mode
[  356.644970][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1698'.
[  356.740322][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1699'.
[  356.770879][T13173] syzkaller1: entered promiscuous mode
[  356.770907][T13173] syzkaller1: entered allmulticast mode
[  356.902450][T13178] netlink: 'syz.2.1697': attribute type 10 has an invalid length.
[  357.008388][T13179] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  357.329188][T13188] netlink: 'syz.4.1704': attribute type 7 has an invalid length.
[  357.329215][T13188] netlink: 'syz.4.1704': attribute type 8 has an invalid length.
[  358.177715][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'.
[  358.253097][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'.
[  358.279083][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'.
[  358.431508][T13212] netlink: 'syz.4.1713': attribute type 12 has an invalid length.
[  358.435106][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'.
[  358.731949][T13221] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  358.830023][T13227] syzkaller0: entered promiscuous mode
[  358.830051][T13227] syzkaller0: entered allmulticast mode
[  358.852602][T13227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.876073][T13227] tipc: Resetting bearer <eth:syzkaller0>
[  358.900559][T13226] tipc: Resetting bearer <eth:syzkaller0>
[  358.933677][T13226] tipc: Disabling bearer <eth:syzkaller0>
[  359.195312][T13239] ipt_rpfilter: unknown options
[  359.295996][T13239] bridge_slave_1: entered allmulticast mode
[  359.340463][T13245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1722'.
[  359.341708][T13245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1722'.
[  359.653416][T13249] netlink: 'syz.3.1724': attribute type 10 has an invalid length.
[  359.663617][T13255] sctp: [Deprecated]: syz.1.1727 (pid 13255) Use of int in maxseg socket option.
[  359.663617][T13255] Use struct sctp_assoc_value instead
[  359.682203][T13256] sctp: [Deprecated]: syz.1.1727 (pid 13256) Use of int in maxseg socket option.
[  359.682203][T13256] Use struct sctp_assoc_value instead
[  359.709670][T13249] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  359.866485][T13263] netlink: 'syz.2.1728': attribute type 12 has an invalid length.
[  359.934774][T13274] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  359.934817][T13274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.486547][T13295] netlink: 'syz.3.1737': attribute type 21 has an invalid length.
[  360.486648][T13295] netlink: 'syz.3.1737': attribute type 5 has an invalid length.
[  360.509440][T13285] ip_tables: iptables: counters copy to user failed while replacing table
[  361.082759][T13322] __nla_validate_parse: 7 callbacks suppressed
[  361.082784][T13322] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1742'.
[  361.164088][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'.
[  361.207975][T13328] netlink: 'syz.3.1743': attribute type 1 has an invalid length.
[  361.241871][T13327] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.417143][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.493050][T13332] bond5: entered promiscuous mode
[  361.493137][T13332] bond5: entered allmulticast mode
[  361.495168][T13332] 8021q: adding VLAN 0 to HW filter on device bond5
[  361.555875][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  361.630126][T13330] macvlan2: entered promiscuous mode
[  361.630154][T13330] macvlan2: entered allmulticast mode
[  361.633295][T13330] bond0: entered promiscuous mode
[  361.635823][T13330] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  361.662536][ T7615] page_pool_release_retry() stalled pool shutdown: id 104, 1 inflight 61 sec
[  361.695157][T13330] bond0: left promiscuous mode
[  361.813668][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  362.031800][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.050910][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.051150][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.051386][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.051607][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.051833][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  362.057405][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  362.238137][T13370] netlink: 'syz.4.1753': attribute type 1 has an invalid length.
[  362.506993][T13385] tc_dump_action: action bad kind
[  362.739158][T13398] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  363.084591][   T52] Bluetooth: hci0: link tx timeout
[  363.084618][   T52] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  363.173979][T13412] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  363.308479][T13417] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  363.809016][T13438] ip_tables: iptables: counters copy to user failed while replacing table
[  363.831544][T13438] sock: sock_timestamping_bind_phc: sock not bind to device
[  363.856501][T13441] netlink: 'syz.0.1771': attribute type 9 has an invalid length.
[  363.856529][T13441] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  364.297165][T13457] netlink: 'syz.0.1776': attribute type 1 has an invalid length.
[  364.437782][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.463388][T13457] bond8: entered promiscuous mode
[  364.463916][T13457] 8021q: adding VLAN 0 to HW filter on device bond8
[  365.108351][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  365.175626][T13498] veth0_virt_wifi: entered promiscuous mode
[  365.191018][T13498] veth0_virt_wifi: left promiscuous mode
[  365.465412][T13506] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  366.160591][T13526] macsec0: entered promiscuous mode
[  366.160619][T13526] hsr0: entered promiscuous mode
[  366.192504][T13526] hsr0: left promiscuous mode
[  366.203421][T13533] x_tables: duplicate underflow at hook 1
[  366.245673][T13535] x_tables: duplicate underflow at hook 1
[  366.451153][T13542] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  366.499368][T13544] __nla_validate_parse: 41 callbacks suppressed
[  366.499393][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1799'.
[  366.533422][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'.
[  366.553543][T13552] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  366.967850][T13581] netlink: 5320 bytes leftover after parsing attributes in process `syz.2.1803'.
[  367.000537][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  367.000577][T13579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.058194][T13579] netlink: 'syz.1.1804': attribute type 9 has an invalid length.
[  367.518795][T13602] atomic_op ffff888079ef51e0 conn xmit_atomic 0000000000000000
[  367.909937][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'.
[  368.664729][T13641] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  369.947181][T13680] syzkaller0: entered promiscuous mode
[  369.947207][T13680] syzkaller0: entered allmulticast mode
[  370.155669][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1836'.
[  370.270296][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'.
[  370.270325][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'.
[  370.338939][T13675] lo: entered allmulticast mode
[  370.400264][T13675] dvmrp8: entered allmulticast mode
[  370.423014][T13674] lo: left allmulticast mode
[  370.808885][T13709] netlink: 'syz.2.1838': attribute type 1 has an invalid length.
[  370.856695][T13715] netlink: 'syz.3.1840': attribute type 2 has an invalid length.
[  370.957329][T13723] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1842'.
[  370.985347][T13709] bond5: entered promiscuous mode
[  371.000501][T13709] 8021q: adding VLAN 0 to HW filter on device bond5
[  371.145377][T13725] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1841'.
[  371.351352][T13729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.057172][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  424.777234][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  465.737271][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  468.293681][T13752] syzkaller0: entered promiscuous mode
[  468.293707][T13752] syzkaller0: entered allmulticast mode
[  468.317823][T13750] __nla_validate_parse: 1 callbacks suppressed
[  468.317846][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1847'.
[  468.562624][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'.
[  468.580933][T13740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.738121][T13764] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  468.881904][   T52] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  468.919101][T13768] netlink: 'syz.3.1852': attribute type 1 has an invalid length.
[  468.919128][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1852'.
[  469.601215][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1855'.
[  469.637857][T13786] netlink: 14776 bytes leftover after parsing attributes in process `syz.1.1858'.
[  469.648507][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'.
[  472.442050][T13782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.686662][T13812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1863'.
[  472.830514][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'.
[  472.847696][T13821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.855001][T13821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.882289][T13821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.900742][T13821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1866'.
[  472.900777][T13821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1866'.
[  472.925968][T13821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.926466][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.926785][T13821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.930461][T10789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.967028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.976546][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.978343][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.011096][T13863] __nla_validate_parse: 1 callbacks suppressed
[  475.011119][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1875'.
[  475.703726][T13867] netlink: 'syz.2.1876': attribute type 1 has an invalid length.
[  475.747915][T13869] xt_CONNSECMARK: invalid mode: 254
[  475.807996][T12827] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  475.809151][T13869] x_tables: duplicate underflow at hook 1
[  475.825463][T13867] bond6: entered promiscuous mode
[  475.825883][T13867] 8021q: adding VLAN 0 to HW filter on device bond6
[  475.846199][T13867] ipvlan2: entered allmulticast mode
[  475.846220][T13867] bond6: entered allmulticast mode
[  475.863255][T13867] bond6: (slave bridge4): making interface the new active one
[  475.863277][T13867] bridge4: entered promiscuous mode
[  475.863446][T13867] bridge4: entered allmulticast mode
[  475.865561][T13867] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  475.912406][T13870] ipvlan3: entered allmulticast mode
[  475.913778][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'.
[  475.913804][T13878] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1879'.
[  476.148384][T10791] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  476.427427][T12829] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  476.987995][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'.
[  477.182204][   T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  477.182479][   T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  477.435454][T13930] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  477.537635][T12829] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  477.676241][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'.
[  477.689146][T13941] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1895'.
[  477.799337][T13931] ipvlan0: entered promiscuous mode
[  477.803205][T13941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1895'.
[  478.608648][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'.
[  478.608818][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'.
[  478.608961][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'.
[  479.838972][T12829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  480.090655][T14043] netlink: 'syz.2.1916': attribute type 1 has an invalid length.
[  480.094342][T14040] __nla_validate_parse: 172 callbacks suppressed
[  480.094364][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1915'.
[  480.121973][T14044] syzkaller0: left promiscuous mode
[  480.121998][T14044] syzkaller0: left allmulticast mode
[  480.143616][T14043] veth7: entered allmulticast mode
[  480.154679][T14043] bond7: (slave veth7): Enslaving as an active interface with a down link
[  480.154824][T14046] netlink: 'syz.4.1917': attribute type 62 has an invalid length.
[  480.172762][T14043] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1916'.
[  480.208104][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.208418][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.208729][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.399057][T12829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  480.525961][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'.
[  480.550464][T14050] tipc: Disabling bearer <udp:syz2>
[  481.116268][  T703] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.116310][  T703] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  481.116352][  T703] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.116378][  T703] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  481.116415][  T703] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.116441][  T703] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  481.116506][  T703] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.116532][  T703] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  481.159383][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'.
[  481.418487][T14092] netlink: 'syz.0.1926': attribute type 10 has an invalid length.
[  481.430010][T14092] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  481.436967][T14092] team0: Port device netdevsim1 added
[  481.577179][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  481.684695][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1928'.
[  481.722119][T14108] netlink: 'syz.1.1930': attribute type 21 has an invalid length.
[  481.750090][T14108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1930'.
[  481.750136][T14108] netlink: 'syz.1.1930': attribute type 1 has an invalid length.
[  481.753703][T14107] IPVS: Unknown mcast interface: vlan1
[  481.757342][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'.
[  481.757366][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'.
[  481.757380][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'.
[  481.757535][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'.
[  481.757550][T14108] netlink: 'syz.1.1930': attribute type 6 has an invalid length.
[  481.761244][T14112] netlink: 'syz.1.1930': attribute type 6 has an invalid length.
[  482.034948][T14120] openvswitch: netlink: IP tunnel dst address not specified
[  482.373173][T14133] syzkaller0: entered promiscuous mode
[  482.373198][T14133] syzkaller0: entered allmulticast mode
[  482.382654][T14133] tipc: Started in network mode
[  482.382684][T14133] tipc: Node identity 8e28861b1292, cluster identity 4711
[  482.383067][T14133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.459338][   T52] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  482.460151][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  482.854759][T14160] netlink: 'syz.4.1942': attribute type 10 has an invalid length.
[  482.908737][T14162] netlink: 'syz.4.1942': attribute type 10 has an invalid length.
[  482.961375][T14166] netlink: 'syz.4.1942': attribute type 10 has an invalid length.
[  482.962726][T14168] netlink: 'syz.4.1942': attribute type 10 has an invalid length.
[  483.009660][T14160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  483.016148][T14160] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  483.025203][T14160] team0: Device netdevsim1 is of different type
[  483.080451][T14166] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  483.101648][T14166] team0: Device netdevsim1 is of different type
[  483.191015][T14165] bond9: entered promiscuous mode
[  483.192732][T14165] 8021q: adding VLAN 0 to HW filter on device bond9
[  483.498365][T12829] tipc: Node number set to 2629469723
[  484.271574][T14211] netlink: 'syz.3.1951': attribute type 12 has an invalid length.
[  484.830345][T14218] tipc: Resetting bearer <eth:team0>
[  484.835410][T14218] 8021q: adding VLAN 0 to HW filter on device team0
[  484.852748][T14218] tipc: Resetting bearer <eth:team0>
[  485.052604][T14218] veth1_macvtap: left promiscuous mode
[  485.055034][T14218] veth0_macvtap: left promiscuous mode
[  485.070369][T14218] veth0_macvtap: entered promiscuous mode
[  485.721570][T14268] __nla_validate_parse: 10 callbacks suppressed
[  485.721592][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'.
[  486.981520][T14308] netlink: 'syz.3.1971': attribute type 25 has an invalid length.
[  486.986609][T14312] netlink: 'syz.2.1974': attribute type 1 has an invalid length.
[  487.102474][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'.
[  487.181226][T14312] veth9: entered allmulticast mode
[  487.186150][T14312] bond8: (slave veth9): Enslaving as an active interface with a down link
[  487.283530][T14330] netlink: 'syz.2.1974': attribute type 1 has an invalid length.
[  487.912001][T14348] netlink: 'syz.0.1979': attribute type 1 has an invalid length.
[  488.299489][T14318] tipc: Resetting bearer <eth:syzkaller0>
[  488.355924][T14317] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  488.357758][ T7636] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.357790][ T7636] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.358555][ T7636] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.358582][ T7636] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.358617][ T7636] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.358640][ T7636] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.358672][ T7636] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.358695][ T7636] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.500142][T14328] veth11: entered allmulticast mode
[  488.523162][T14328] bond8: (slave veth11): Enslaving as an active interface with a down link
[  488.675566][T14348] 8021q: adding VLAN 0 to HW filter on device bond10
[  488.700552][T14349] bond4: (slave veth0_to_bond): Releasing active interface
[  489.138402][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'.
[  489.242156][T14390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1987'.
[  489.261248][T14390] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  489.332089][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'.
[  489.405255][T14385] bond9: option updelay: invalid value (18446744073709518847)
[  489.405284][T14385] bond9: option updelay: allowed values 0 - 2147483647
[  489.440270][T14385] bond9 (unregistering): Released all slaves
[  489.826552][T14390] syzkaller0: entered promiscuous mode
[  489.826581][T14390] syzkaller0: entered allmulticast mode
[  489.833450][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1989'.
[  490.240000][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'.
[  491.262425][T14453] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1997'.
[  491.265549][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1997'.
[  493.264981][T14467] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1998'.
[  494.238903][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1998'.
[  494.434877][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'.
[  494.434909][T14472] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  494.473446][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'.
[  494.473480][T14473] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  494.715595][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2002'.
[  495.619132][T14511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.712067][T14536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2017'.
[  496.262594][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'.
[  496.811992][T14574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2026'.
[  496.849359][T14574] syzkaller0: entered promiscuous mode
[  496.849378][T14574] syzkaller0: entered allmulticast mode
[  497.235615][T14557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  497.247739][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2029'.
[  497.406451][T14587] xt_hl: Unknown TTL match mode: 237
[  497.406712][T14590] xt_hl: Unknown TTL match mode: 237
[  497.451708][T14589] netlink: 'syz.0.2032': attribute type 83 has an invalid length.
[  497.522321][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2031'.
[  497.828190][T14604] dvmrp0: entered allmulticast mode
[  497.962667][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2035'.
[  498.326636][T14623] No such timeout policy "syz0"
[  498.366236][T14623] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  498.606109][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2042'.
[  498.757947][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'.
[  498.758100][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'.
[  498.758235][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'.
[  498.758363][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'.
[  498.758484][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'.
[  499.151255][T14642] syzkaller0: left promiscuous mode
[  499.151282][T14642] syzkaller0: left allmulticast mode
[  499.169685][   T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  499.173003][T10789] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  499.173055][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  499.173094][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  499.522133][T14657] .`: (slave team0): Releasing backup interface
[  499.539606][T14657] team0: mtu less than device minimum
[  499.539953][T14657] wg1: left promiscuous mode
[  499.560233][T14657] team0: Port device wg1 removed
[  499.579204][T14657] bond10: (slave veth0_to_bond): Releasing active interface
[  499.599935][T14658] netlink: 'syz.4.2049': attribute type 11 has an invalid length.
[  499.617131][T14657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  500.029799][T14684] bridge5: entered promiscuous mode
[  501.908549][T14767] bond9: option lacp_active: invalid value (5)
[  501.909844][T14767] bond9 (unregistering): Released all slaves
[  501.965007][T14773] __nla_validate_parse: 39 callbacks suppressed
[  501.965032][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'.
[  501.965812][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'.
[  501.965834][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'.
[  502.225553][T14779] syzkaller1: entered promiscuous mode
[  502.225581][T14779] syzkaller1: entered allmulticast mode
[  502.255960][ T5623] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  502.882746][T14808] netlink: 'syz.2.2083': attribute type 1 has an invalid length.
[  502.954830][T14819] netlink: 'syz.3.2085': attribute type 1 has an invalid length.
[  503.079487][T14819] 8021q: adding VLAN 0 to HW filter on device bond6
[  503.347710][T14838] bond6: (slave geneve4): making interface the new active one
[  503.352912][T14838] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  503.427186][T10792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.427235][T10792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.427269][T10792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.427303][T10792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.493384][T14840] dvmrp0: entered allmulticast mode
[  503.577288][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'.
[  503.845319][T14831] pimreg: tun_chr_ioctl cmd 1074025677
[  503.845432][T14831] pimreg: linktype set to 270
[  504.485431][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  504.494626][T14879] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  504.494648][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2097'.
[  504.732752][ T5623] block nbd4: Receive control failed (result -32)
[  504.736559][   T52] block nbd4: Receive control failed (result -32)
[  505.246373][T14895] bond0: (slave veth0_to_bond): Releasing backup interface
[  505.423765][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2104'.
[  505.636819][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'.
[  505.662112][T14914] netlink: 'syz.3.2106': attribute type 2 has an invalid length.
[  505.681893][T14915] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  505.734397][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'.
[  505.849700][T14921] xt_bpf: check failed: parse error
[  505.890225][T14918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2108'.
[  506.494174][T14954] syz.1.2117: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  506.494299][T14954] CPU: 1 UID: 0 PID: 14954 Comm: syz.1.2117 Not tainted syzkaller #0 PREEMPT(full) 
[  506.494323][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  506.494336][T14954] Call Trace:
[  506.494406][T14954]  <TASK>
[  506.494461][T14954]  dump_stack_lvl+0xe8/0x150
[  506.494670][T14954]  warn_alloc+0x24d/0x270
[  506.494732][T14954]  ? kasan_save_track+0x4f/0x80
[  506.494791][T14954]  ? kasan_save_track+0x3e/0x80
[  506.494817][T14954]  ? __pfx_warn_alloc+0x10/0x10
[  506.494836][T14954]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  506.494974][T14954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.495043][T14954]  __vmalloc_node_range_noprof+0x127/0x1540
[  506.495100][T14954]  ? rcu_is_watching+0x16/0xb0
[  506.495163][T14954]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  506.495195][T14954]  ? __kmalloc_cache_noprof+0x321/0x600
[  506.495218][T14954]  ? __kmalloc_cache_noprof+0x14d/0x600
[  506.495239][T14954]  ? xskq_create+0x56/0x220
[  506.495331][T14954]  xskq_create+0x148/0x220
[  506.495352][T14954]  ? xsk_init_queue+0x8a/0xe0
[  506.495388][T14954]  xsk_init_queue+0x8a/0xe0
[  506.495423][T14954]  xsk_setsockopt+0x52a/0x960
[  506.495458][T14954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  506.495497][T14954]  ? __pfx_aa_sk_perm+0x10/0x10
[  506.495618][T14954]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  506.495668][T14954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  506.495699][T14954]  do_sock_setsockopt+0x17c/0x1b0
[  506.495730][T14954]  __x64_sys_setsockopt+0x13d/0x1b0
[  506.495760][T14954]  do_syscall_64+0x166/0x520
[  506.495830][T14954]  ? trace_irq_disable+0x3b/0x140
[  506.495867][T14954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.495888][T14954]  ? clear_bhb_loop+0x70/0xc0
[  506.495913][T14954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.495933][T14954] RIP: 0033:0x7f1b84b9e159
[  506.495960][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.495978][T14954] RSP: 002b:00007f1b85ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  506.496023][T14954] RAX: ffffffffffffffda RBX: 00007f1b84e25fa0 RCX: 00007f1b84b9e159
[  506.496039][T14954] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  506.496052][T14954] RBP: 00007f1b84c3503b R08: 0000000000000004 R09: 0000000000000000
[  506.496066][T14954] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  506.496078][T14954] R13: 00007f1b84e26038 R14: 00007f1b84e25fa0 R15: 00007ffeafed9468
[  506.496114][T14954]  </TASK>
[  506.510648][T14954] Mem-Info:
[  506.510664][T14954] active_anon:6424 inactive_anon:0 isolated_anon:0
[  506.510664][T14954]  active_file:0 inactive_file:43371 isolated_file:0
[  506.510664][T14954]  unevictable:0 dirty:97 writeback:0
[  506.510664][T14954]  slab_reclaimable:11791 slab_unreclaimable:107104
[  506.510664][T14954]  mapped:29479 shmem:526 pagetables:1268
[  506.510664][T14954]  sec_pagetables:0 bounce:0
[  506.510664][T14954]  kernel_misc_reclaimable:0
[  506.510664][T14954]  free:1239990 free_pcp:12710 free_cma:0
[  506.510715][T14954] Node 0 active_anon:25696kB inactive_anon:0kB active_file:0kB inactive_file:173288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117916kB dirty:388kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15120kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  506.510769][T14954] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  506.510819][T14954] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.510877][T14954] lowmem_reserve[]: 0 2486 2486 2486 2486
[  506.510913][T14954] Node 0 DMA32 free:1008576kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25696kB inactive_anon:0kB active_file:0kB inactive_file:173288kB unevictable:0kB writepending:388kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:50840kB local_pcp:28288kB free_cma:0kB
[  506.510971][T14954] lowmem_reserve[]: 0 0 0 0 0
[  506.511006][T14954] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.511056][T14954] lowmem_reserve[]: 0 0 0 0 0
[  506.511090][T14954] Node 1 Normal free:3936024kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.511144][T14954] lowmem_reserve[]: 0 0 0 0 0
[  506.511177][T14954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  506.511290][T14954] Node 0 DMA32: 641*4kB (UME) 648*8kB (UME) 608*16kB (UM) 1015*32kB (UME) 288*64kB (UME) 63*128kB (UME) 27*256kB (UME) 11*512kB (UME) 4*1024kB (UM) 1*2048kB (U) 223*4096kB (UM) = 1008548kB
[  506.511446][T14954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  506.511551][T14954] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3936024kB
[  506.515918][T14954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.515936][T14954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  506.515952][T14954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.515967][T14954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  506.515982][T14954] 43893 total pagecache pages
[  506.515990][T14954] 0 pages in swap cache
[  506.515998][T14954] Free swap  = 124996kB
[  506.516005][T14954] Total swap = 124996kB
[  506.516014][T14954] 2097051 pages RAM
[  506.516021][T14954] 0 pages HighMem/MovableOnly
[  506.516029][T14954] 428780 pages reserved
[  506.516036][T14954] 0 pages cma reserved
[  506.712856][T14959] netlink: 'syz.3.2116': attribute type 2 has an invalid length.
[  507.797851][T14996] x_tables: duplicate underflow at hook 3
[  507.896017][T15003] netlink: 'syz.0.2125': attribute type 1 has an invalid length.
[  507.896044][T15003] __nla_validate_parse: 2 callbacks suppressed
[  507.896058][T15003] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2125'.
[  507.909317][T15005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2126'.
[  507.909342][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'.
[  507.909355][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2126'.
[  508.248741][T15005] syzkaller0: entered promiscuous mode
[  508.248768][T15005] syzkaller0: entered allmulticast mode
[  508.310740][T15014] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  508.322044][T15016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  509.425853][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'.
[  511.465935][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2137'.
[  511.472125][T15054] netlink: 'syz.4.2137': attribute type 1 has an invalid length.
[  511.525018][T15061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'.
[  511.546695][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'.
[  511.699687][T15073] netlink: 'syz.2.2141': attribute type 21 has an invalid length.
[  511.699721][T15073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2141'.
[  511.784559][T15066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2141'.
[  512.061039][T15073] netlink: 'syz.2.2141': attribute type 5 has an invalid length.
[  512.710159][T15091] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  512.712138][T15091] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  512.712615][T15091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  512.918717][T15102] dvmrp8: entered allmulticast mode
[  513.104031][T15095] can: request_module (can-proto-5) failed.
[  513.272578][T15114] __nla_validate_parse: 5 callbacks suppressed
[  513.272601][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'.
[  513.364081][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.364107][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.521972][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522143][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522328][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522482][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522630][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522769][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.522973][T15112] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2155'.
[  513.667105][T15127] ipvlan2: entered allmulticast mode
[  513.667129][T15127] macvlan1: entered allmulticast mode
[  513.824187][T15124] ipvlan2: entered allmulticast mode
[  513.874581][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.874684][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.874777][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.874888][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.874979][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.875073][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.875160][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.875257][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.875350][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.880212][T15132] pim6reg0: tun_chr_ioctl cmd 1074025675
[  513.880233][T15132] pim6reg0: persist disabled
[  513.880365][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.880451][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.880540][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.880620][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.880701][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884399][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884542][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884636][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884728][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884821][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.884940][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.885032][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.885122][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.885214][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.885329][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.890689][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.890783][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.890890][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.890970][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.905675][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.905766][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.905848][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.905928][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.906010][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.906090][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.907573][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.907657][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.909694][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.909783][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.909866][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.911891][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.911978][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.913329][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.913414][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.915612][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.915708][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.915800][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.915891][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.916010][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.916101][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.919963][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920049][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920154][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920234][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920313][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920392][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920503][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920610][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920690][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.920770][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.927315][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.927659][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.927746][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.928593][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  513.928680][T15131] pim6reg0: tun_chr_ioctl cmd 1074025673
[  514.847370][T15164] netlink: 'syz.0.2172': attribute type 12 has an invalid length.
[  515.127560][T15169] bond11: entered promiscuous mode
[  515.127632][T15169] bond11: entered allmulticast mode
[  515.128049][T15169] 8021q: adding VLAN 0 to HW filter on device bond11
[  515.306271][T15177] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.362024][T15184] bond0 (unregistering): Released all slaves
[  515.779051][T15197] netlink: 'syz.2.2178': attribute type 1 has an invalid length.
[  515.839855][T15197] bond9: entered promiscuous mode
[  515.840329][T15197] 8021q: adding VLAN 0 to HW filter on device bond9
[  516.762800][T15249] netlink: 'syz.2.2191': attribute type 32 has an invalid length.
[  516.933177][T15249] bond10: option coupled_control: invalid value (16)
[  517.063748][T15249] bond10 (unregistering): Released all slaves
[  518.102149][T15289] vlan1: entered promiscuous mode
[  518.102180][T15289] bond0: entered promiscuous mode
[  518.102196][T15289] bond_slave_0: entered promiscuous mode
[  518.102437][T15289] bond_slave_1: entered promiscuous mode
[  518.438990][T15300] __nla_validate_parse: 102 callbacks suppressed
[  518.439017][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.541684][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.541864][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.542059][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.542243][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.542425][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.542601][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.542775][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.575646][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.578254][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  518.708935][T15301] veth13: entered promiscuous mode
[  518.708962][T15301] veth13: entered allmulticast mode
[  518.872341][T15300] veth15: entered promiscuous mode
[  518.872378][T15300] veth15: entered allmulticast mode
[  518.978705][T15316] netlink: Failed to add %pK     helper -22
[  518.978766][T15316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.645488][T15353] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  521.117072][T15397] IPVS: Unknown mcast interface: vcan0
[  521.353405][T15405] pimreg9: entered allmulticast mode
[  521.922059][T15423] syzkaller0: entered promiscuous mode
[  521.922084][T15423] syzkaller0: entered allmulticast mode
[  521.928764][T15423] simple: /dev/video#_1
[  521.928781][T15423] simple: /dev/video#_2
[  521.928789][T15423] simple: /dev/video#_3
[  521.928798][T15423] simple: /dev/video#_4
[  521.928806][T15423] simple: /dev/video#_5
[  521.928814][T15423] simple: /dev/video#_6
[  521.928823][T15423] simple: /dev/video#_7
[  521.928831][T15423] simple: /dev/video#_8
[  521.928839][T15423] simple: /dev/video#_9
[  521.928848][T15423] simple: /dev/video#_10
[  521.928857][T15423] simple: /dev/video#_11
[  521.928865][T15423] simple: /dev/video#_12
[  521.928874][T15423] simple: /dev/video#_13
[  521.928882][T15423] simple: /dev/video#_14
[  521.928891][T15423] simple: /dev/video#_15
[  521.928899][T15423] simple: /dev/video#_16
[  521.928907][T15423] simple: /dev/video#_17
[  521.928916][T15423] simple: /dev/video#_18
[  521.928924][T15423] simple: /dev/video#_19
[  521.928933][T15423] simple: /dev/video#_20
[  521.928941][T15423] simple: /dev/video#_21
[  521.928950][T15423] simple: /dev/video#_22
[  521.928958][T15423] simple: /dev/video#_23
[  521.928967][T15423] simple: /dev/video#_24
[  521.928976][T15423] simple: /dev/video#_25
[  521.928984][T15423] simple: /dev/video#_26
[  521.928992][T15423] simple: /dev/video#_27
[  521.929001][T15423] simple: /dev/video#_28
[  521.929009][T15423] simple: /dev/video#_29
[  521.929018][T15423] simple: /dev/video#_30
[  521.929026][T15423] simple: /dev/video#_31
[  521.929035][T15423] simple: /dev/video#_32
[  521.929044][T15423] TC_ACT_REPEAT abuse ?
[  521.960349][T15424] simple: /dev/video#_33
[  521.960367][T15424] simple: /dev/video#_34
[  521.960386][T15424] simple: /dev/video#_35
[  521.960395][T15424] simple: /dev/video#_36
[  521.960403][T15424] simple: /dev/video#_37
[  521.960412][T15424] simple: /dev/video#_38
[  521.960421][T15424] simple: /dev/video#_39
[  521.960430][T15424] simple: /dev/video#_40
[  521.960439][T15424] simple: /dev/video#_41
[  521.960447][T15424] simple: /dev/video#_42
[  521.960456][T15424] simple: /dev/video#_43
[  521.960464][T15424] simple: /dev/video#_44
[  521.960473][T15424] simple: /dev/video#_45
[  521.960482][T15424] simple: /dev/video#_46
[  521.960490][T15424] simple: /dev/video#_47
[  521.960499][T15424] simple: /dev/video#_48
[  521.961888][T15424] simple: /dev/video#_49
[  521.961901][T15424] simple: /dev/video#_50
[  521.961911][T15424] simple: /dev/video#_51
[  521.961919][T15424] simple: /dev/video#_52
[  521.961928][T15424] simple: /dev/video#_53
[  521.961937][T15424] simple: /dev/video#_54
[  521.961946][T15424] simple: /dev/video#_55
[  521.961954][T15424] simple: /dev/video#_56
[  521.961963][T15424] simple: /dev/video#_57
[  521.961972][T15424] simple: /dev/video#_58
[  521.961980][T15424] simple: /dev/video#_59
[  521.961989][T15424] simple: /dev/video#_60
[  521.961997][T15424] simple: /dev/video#_61
[  521.962006][T15424] simple: /dev/video#_62
[  521.962014][T15424] simple: /dev/video#_63
[  521.962023][T15424] simple: /dev/video#_64
[  521.962033][T15424] TC_ACT_REPEAT abuse ?
[  522.267879][T15430] netlink: 'syz.4.2236': attribute type 2 has an invalid length.
[  522.376394][T15430] netlink: 'syz.4.2236': attribute type 2 has an invalid length.
[  523.110581][T15463] ip_tables: iptables: counters copy to user failed while replacing table
[  523.723016][T15493] netlink: 'syz.3.2254': attribute type 21 has an invalid length.
[  523.723048][T15493] IPv6: NLM_F_CREATE should be specified when creating new route
[  524.646637][T15515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.909725][T15519] __nla_validate_parse: 27 callbacks suppressed
[  524.909750][T15519] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2260'.
[  525.016191][T15521] syzkaller0: entered promiscuous mode
[  525.016217][T15521] syzkaller0: entered allmulticast mode
[  525.566185][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  525.567983][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  526.114233][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'.
[  526.468414][T15579] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2275'.
[  526.594129][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2277'.
[  526.822224][T15600] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2277'.
[  526.822251][T15600] netlink: 'syz.3.2277': attribute type 9 has an invalid length.
[  526.869536][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'.
[  526.869574][T15601] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  527.074888][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'.
[  527.440204][T15624] ovs-s: entered promiscuous mode
[  527.444506][T15624] netlink: 'syz.1.2289': attribute type 11 has an invalid length.
[  527.464586][T15624] sctp: [Deprecated]: syz.1.2289 (pid 15624) Use of struct sctp_assoc_value in delayed_ack socket option.
[  527.464586][T15624] Use struct sctp_sack_info instead
[  527.595508][T15631] netlink: 'syz.0.2291': attribute type 3 has an invalid length.
[  527.595532][T15631] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2291'.
[  527.889002][T15648] block nbd3: NBD_DISCONNECT
[  527.889094][T15648] block nbd3: Send disconnect failed -32
[  527.889115][T15648] block nbd3: Send disconnect failed -32
[  527.903567][T15648] block nbd3: shutting down sockets
[  527.951954][T15644] netlink: 'syz.3.2295': attribute type 1 has an invalid length.
[  528.012139][T15650] netlink: 'syz.3.2295': attribute type 9 has an invalid length.
[  528.150062][T15644] 8021q: adding VLAN 0 to HW filter on device bond7
[  528.310588][T15646] bond7: (slave veth1): Enslaving as an active interface with a down link
[  528.355501][T15666] geneve3: entered promiscuous mode
[  528.981951][T15689] batadv_slave_0: entered promiscuous mode
[  529.001930][T15689] veth1_to_batadv: entered promiscuous mode
[  529.005456][T15689] debugfs: 'hsr0' already exists in 'hsr'
[  529.005480][T15689] Cannot create hsr debugfs directory
[  529.397729][   T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  529.399055][   T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  529.399098][   T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  529.399134][   T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  529.441834][T15727] openvswitch: netlink: Message has 512 unknown bytes.
[  529.443776][T15726] openvswitch: netlink: Message has 512 unknown bytes.
[  530.426182][T15763] __nla_validate_parse: 13 callbacks suppressed
[  530.426206][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'.
[  530.626084][T15770] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2327'.
[  530.784504][T15777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.846907][T15770] bond8: (slave veth0_to_bond): Releasing active interface
[  530.979996][T15770] bond0: (slave bond_slave_0): Releasing backup interface
[  530.998081][T15770] bond0: (slave bond_slave_1): Releasing backup interface
[  531.018304][T15770] team0: Port device team_slave_1 removed
[  531.018756][T15770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.023386][T15770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.049211][T15770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  531.605910][T15801] netlink: 'syz.3.2332': attribute type 1 has an invalid length.
[  531.746552][T15801] bond8: entered promiscuous mode
[  531.753720][T15801] 8021q: adding VLAN 0 to HW filter on device bond8
[  531.878290][T15805] bond8: (slave bridge4): making interface the new active one
[  531.878318][T15805] bridge4: entered promiscuous mode
[  531.953231][T15805] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  532.386553][T15817] sctp: [Deprecated]: syz.1.2336 (pid 15817) Use of int in max_burst socket option.
[  532.386553][T15817] Use struct sctp_assoc_value instead
[  532.450833][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2338'.
[  532.454297][T15822] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2338'.
[  533.071440][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'.
[  534.033330][T15883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2351'.
[  534.162899][T15896] netlink: 'syz.2.2355': attribute type 11 has an invalid length.
[  534.228479][T15888] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2353'.
[  534.498157][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'.
[  534.612773][T15915] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2358'.
[  535.018858][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  535.509310][T15949] __nla_validate_parse: 3 callbacks suppressed
[  535.509333][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  535.608270][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  535.689767][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  535.733277][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  535.779027][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'.
[  536.115011][T15972] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  536.115472][T15972] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  536.116014][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2370'.
[  536.116384][T15972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  536.170823][T15960] syzkaller1: entered promiscuous mode
[  536.170850][T15960] syzkaller1: entered allmulticast mode
[  536.264130][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'.
[  536.267568][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'.
[  536.267609][T15976] block nbd3: Unsupported socket: should be TCP or UNIX.
[  536.283081][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'.
[  536.637440][T15986] openvswitch: netlink: Flow actions attr not present in new flow.
[  536.675330][T15986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2374'.
[  536.855692][T15993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.013355][T16000] netlink: 'syz.0.2379': attribute type 8 has an invalid length.
[  537.051438][ T7623] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  537.161771][T16009] nbd: nbd4 already in use
[  537.165107][T16009] block nbd4: NBD_DISCONNECT
[  537.165136][T16009] block nbd4: Send disconnect failed -32
[  537.165157][T16009] block nbd4: Send disconnect failed -32
[  537.165175][T16009] block nbd4: shutting down sockets
[  537.258093][T16011] bond8: entered promiscuous mode
[  537.258571][T16011] 8021q: adding VLAN 0 to HW filter on device bond8
[  537.907196][ T7623] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  538.082348][T16061] Bluetooth: ISO socket layer initialized
[  538.442395][T16036] tipc: Resetting bearer <eth:team0>
[  539.027185][T16083] Bluetooth: hci0: invalid length 0, exp 2 for type 21
[  539.200171][  T703] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.200269][  T703] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.200305][  T703] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.200338][  T703] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.226739][T16091] netlink: 'syz.2.2399': attribute type 1 has an invalid length.
[  539.256706][T16091] netlink: 'syz.2.2399': attribute type 1 has an invalid length.
[  539.510927][T16102] syz_tun: entered allmulticast mode
[  539.581061][T16102] syz_tun (unregistering): left allmulticast mode
[  540.924004][T16150] __nla_validate_parse: 13 callbacks suppressed
[  540.924027][T16150] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2409'.
[  540.985105][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2411'.
[  540.997412][T16160] netlink: 3596 bytes leftover after parsing attributes in process `syz.3.2411'.
[  541.667769][T16188] netlink: 'syz.2.2418': attribute type 39 has an invalid length.
[  541.779205][T16191] xt_l2tp: unknown flags: e7
[  541.779386][T16191] xt_l2tp: unknown flags: e7
[  541.779500][T16191] xt_l2tp: unknown flags: e7
[  541.779608][T16191] xt_l2tp: unknown flags: e7
[  541.779726][T16191] xt_l2tp: unknown flags: e7
[  541.779843][T16191] xt_l2tp: unknown flags: e7
[  541.779960][T16191] xt_l2tp: unknown flags: e7
[  541.780081][T16191] xt_l2tp: unknown flags: e7
[  541.780197][T16191] xt_l2tp: unknown flags: e7
[  541.780315][T16191] xt_l2tp: unknown flags: e7
[  542.304261][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'.
[  542.312599][T16204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2422'.
[  542.646621][T16215] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  542.792528][T16215] bond9: option mode: invalid value (11)
[  542.815066][T16215] bond9 (unregistering): Released all slaves
[  543.463021][T16254] netlink: 'syz.3.2436': attribute type 11 has an invalid length.
[  543.905047][T16275] xt_IDLETIMER: label is empty or not nul-terminated
[  544.044276][T16281] netlink: 'syz.3.2442': attribute type 1 has an invalid length.
[  544.044302][T16281] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2442'.
[  544.166726][T16285] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  544.166784][T16286] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  544.262505][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  544.441937][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2448'.
[  544.441974][T16302] bond0: ARP target 0.0.0.2 is already present
[  544.441995][T16302] bond0: option arp_ip_target: invalid value (33554432)
[  544.484810][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2448'.
[  544.484858][T16308] bond0: ARP target 0.0.0.2 is already present
[  544.484879][T16308] bond0: option arp_ip_target: invalid value (33554432)
[  544.956086][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'.
[  545.077814][T16336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.422493][T16349] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20002
[  545.714128][T16358] netlink: 'syz.4.2457': attribute type 3 has an invalid length.
[  545.884644][T16362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.051346][T16375] netlink: 'syz.2.2462': attribute type 7 has an invalid length.
[  546.051374][T16375] netlink: 'syz.2.2462': attribute type 8 has an invalid length.
[  546.124237][   T31] audit: type=1800 audit(1789360552.783:10): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2461" name=680B20 dev="tmpfs" ino=2667 res=0 errno=0
[  546.373552][T16382] __nla_validate_parse: 6 callbacks suppressed
[  546.373576][T16382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2463'.
[  546.394363][T16382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2463'.
[  546.524800][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'.
[  546.858667][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'.
[  546.883140][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'.
[  546.960665][T16402] netlink: 'syz.3.2470': attribute type 34 has an invalid length.
[  546.960699][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'.
[  547.004270][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'.
[  547.022582][T16402] bond9: option lacp_strict: invalid value (99)
[  547.032151][T16402] bond9 (unregistering): Released all slaves
[  547.640107][T16438] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2476'.
[  548.689505][T16470] syzkaller0: entered promiscuous mode
[  548.689532][T16470] syzkaller0: entered allmulticast mode
[  548.793722][T16470] netlink: 'syz.4.2484': attribute type 7 has an invalid length.
[  548.793749][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'.
[  548.793781][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'.
[  548.862634][T16472] netlink: 'syz.1.2485': attribute type 1 has an invalid length.
[  549.018974][T16481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  549.960898][T16524] xt_hashlimit: size too large, truncated to 1048576
[  551.432561][T16573] __nla_validate_parse: 3 callbacks suppressed
[  551.432585][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'.
[  551.432640][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'.
[  551.726113][   T43] tipc: Subscription rejected, illegal request
[  552.320043][T16594] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  552.320073][T16594] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2517'.
[  552.346459][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'.
[  552.416277][T16592] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.434883][T16592] 8021q: adding VLAN 0 to HW filter on device team0
[  552.802351][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2519'.
[  552.992479][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'.
[  553.072932][T16606] 8021q: adding VLAN 0 to HW filter on device team0
[  553.073454][T16606] tipc: Resetting bearer <eth:team0>
[  553.532763][T16606] veth0_macvtap: left promiscuous mode
[  553.534191][T16606] veth0_macvtap: entered promiscuous mode
[  553.535782][T16606] veth1_macvtap: entered promiscuous mode
[  553.545920][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  553.547888][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.549111][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  553.550769][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  553.554061][T16606] vti0: left promiscuous mode
[  553.555940][T16606] 8021q: adding VLAN 0 to HW filter on device bond1
[  553.574598][T16606] 8021q: adding VLAN 0 to HW filter on device bond2
[  553.575184][T16606] ip6gre1: left promiscuous mode
[  553.583336][T16606] 8021q: adding VLAN 0 to HW filter on device bond3
[  553.602060][T16606] 8021q: adding VLAN 0 to HW filter on device bond4
[  553.604073][T16606] bond5: left promiscuous mode
[  553.604527][T16606] 8021q: adding VLAN 0 to HW filter on device bond5
[  553.610512][T16606] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  553.648885][T12826] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.685258][T16612] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2523'.
[  553.693642][T16033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  553.693869][T16033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  553.705712][T16033] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  553.714320][T16033] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  553.721491][T12826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  553.735389][T12826] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  553.740494][T12826] openvswitch: cpu_id mismatch with handler threads
[  553.742206][T16033] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  553.742244][T16033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.742288][T16033] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  553.742311][T16033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.742345][T16033] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  553.742368][T16033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.742401][T16033] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  553.742424][T16033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.958964][T16638] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2530'.
[  554.177765][T12826] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  554.238689][T12826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  554.258655][T12826] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  554.267851][T12826] openvswitch: cpu_id mismatch with handler threads
[  554.874584][T16673] bond12: entered promiscuous mode
[  554.876125][T16673] bond12: entered allmulticast mode
[  554.876694][T16673] 8021q: adding VLAN 0 to HW filter on device bond12
[  555.372251][T16705] netlink: 'syz.4.2543': attribute type 2 has an invalid length.
[  555.403759][T16705] team_slave_0: entered promiscuous mode
[  555.403785][T16705] team_slave_0: entered allmulticast mode
[  555.414410][T16711] syzkaller0: left promiscuous mode
[  555.414432][T16711] syzkaller0: left allmulticast mode
[  555.736560][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'.
[  555.978319][   T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  555.978679][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  556.206062][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'.
[  556.353484][   T31] audit: type=1804 audit(1789360563.013:11): pid=16736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2549" name="/newroot/495/cgroup.controllers" dev="tmpfs" ino=2585 res=1 errno=0
[  556.353545][   T31] audit: type=1800 audit(1789360563.013:12): pid=16736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2549" name="cgroup.controllers" dev="tmpfs" ino=2585 res=0 errno=0
[  556.382432][   T31] audit: type=1804 audit(1789360563.023:13): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2549" name="/newroot/495/cgroup.controllers" dev="tmpfs" ino=2585 res=1 errno=0
[  556.450571][T16739] __nla_validate_parse: 2 callbacks suppressed
[  556.450593][T16739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2550'.
[  556.479783][T16735] bond9: entered promiscuous mode
[  556.481135][T16735] 8021q: adding VLAN 0 to HW filter on device bond9
[  556.752010][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'.
[  556.766753][T16754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2554'.
[  556.803947][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'.
[  556.815498][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'.
[  556.914625][T16761] vlan4: entered allmulticast mode
[  556.914650][T16761] bridge6: entered allmulticast mode
[  556.943446][T16754] bridge6: port 1(erspan0) entered blocking state
[  556.943751][T16754] bridge6: port 1(erspan0) entered disabled state
[  556.943944][T16754] erspan0: entered allmulticast mode
[  556.987102][T16754] erspan0: entered promiscuous mode
[  557.104532][T16766] netlink: 'syz.4.2556': attribute type 1 has an invalid length.
[  557.528739][T16773] syzkaller0: entered promiscuous mode
[  557.528765][T16773] syzkaller0: entered allmulticast mode
[  557.893287][T16798] SET target dimension over the limit!
[  558.029850][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'.
[  558.160569][T16805] netlink: 'syz.4.2564': attribute type 1 has an invalid length.
[  558.302756][T16805] veth1: entered allmulticast mode
[  558.315028][T16807] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  558.334585][T16805] macvlan2: entered promiscuous mode
[  558.334609][T16805] macvlan2: entered allmulticast mode
[  558.335507][T16805] bond15: entered promiscuous mode
[  558.340980][T16805] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  558.341910][T16805] bond15: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  558.367178][T16805] bond15: left promiscuous mode
[  558.405683][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'.
[  558.471374][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2565'.
[  558.500838][T16811] ipvlan2: entered allmulticast mode
[  558.500864][T16811] virt_wifi0: entered allmulticast mode
[  558.580187][T16817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2567'.
[  558.927684][T16826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.559444][T16852] netlink: 'syz.3.2577': attribute type 1 has an invalid length.
[  559.601576][T16857] Bluetooth: hci0: unsupported parameter 5135
[  559.601603][T16857] Bluetooth: hci0: unsupported parameter 8192
[  559.601668][T16857] Bluetooth: hci0: unsupported parameter 5135
[  559.601683][T16857] Bluetooth: hci0: unsupported parameter 8192
[  559.604815][T16857] Bluetooth: hci0: unsupported parameter 5135
[  559.604838][T16857] Bluetooth: hci0: unsupported parameter 8192
[  559.604851][T16857] Bluetooth: hci0: unsupported parameter 5135
[  559.604864][T16857] Bluetooth: hci0: unsupported parameter 8192
[  559.707967][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'.
[  559.763871][T16863] netlink: 'syz.0.2578': attribute type 13 has an invalid length.
[  559.817486][    C1] ip6_tnl_xmit_ctl: 13 callbacks suppressed
[  559.817511][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.871960][T16871] sctp: [Deprecated]: syz.1.2583 (pid 16871) Use of struct sctp_assoc_value in delayed_ack socket option.
[  559.871960][T16871] Use struct sctp_sack_info instead
[  559.872216][T16871] sctp: [Deprecated]: syz.1.2583 (pid 16871) Use of struct sctp_assoc_value in delayed_ack socket option.
[  559.872216][T16871] Use struct sctp_sack_info instead
[  560.346413][T16885] hsr_slave_1 (unregistering): left promiscuous mode
[  560.371933][T16890] netlink: 'syz.0.2587': attribute type 4 has an invalid length.
[  560.626037][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.626062][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.738500][T16914] bridge0: port 1(bond0) entered blocking state
[  560.738579][T16914] bridge0: port 1(bond0) entered disabled state
[  560.738716][T16914] bond0: entered allmulticast mode
[  560.741720][T16914] bond0: entered promiscuous mode
[  560.793529][T16914] hsr_slave_1 (unregistering): left promiscuous mode
[  561.119515][T16931] team_slave_0: left promiscuous mode
[  561.119541][T16931] team_slave_0: left allmulticast mode
[  561.179711][T16931] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  561.342357][T16931] xfrm1: left allmulticast mode
[  561.390317][T16931] bond6: left promiscuous mode
[  561.390343][T16931] bond6: left allmulticast mode
[  561.671679][T16931] ip6gre1: left promiscuous mode
[  561.671707][T16931] ip6gre1: left allmulticast mode
[  561.920125][T16931] veth13: left promiscuous mode
[  561.920154][T16931] veth13: left allmulticast mode
[  561.925217][T16931] veth15: left promiscuous mode
[  561.925245][T16931] veth15: left allmulticast mode
[  562.060204][T16931] bond12: left promiscuous mode
[  562.060233][T16931] bond12: left allmulticast mode
[  562.062722][T16931] veth1: left allmulticast mode
[  562.162823][T16957] bond11: option all_slaves_active: invalid value (255)
[  562.179378][T16957] bond11 (unregistering): Released all slaves
[  562.307168][   T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.307377][   T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.307466][   T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.307503][   T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.693409][T16979] __nla_validate_parse: 13 callbacks suppressed
[  562.693437][T16979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2606'.
[  562.731267][T16979] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  562.884309][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2608'.
[  563.359167][T17002] netlink: 'syz.4.2610': attribute type 1 has an invalid length.
[  563.513081][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'.
[  563.609253][T17007] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  563.726219][T17022] netlink: 'syz.0.2616': attribute type 23 has an invalid length.
[  563.813047][T17022] No such timeout policy "s	"
[  563.813069][T17022] netlink: Failed to associated timeout policy 's	'
[  564.555617][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2621'.
[  564.874831][T17043] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2625'.
[  564.874861][T17043] nbd: illegal input index -1721480071
[  565.119554][T17048] netlink: 'syz.0.2626': attribute type 1 has an invalid length.
[  565.119582][T17048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2626'.
[  565.215536][T17046] bridge6: entered promiscuous mode
[  565.261946][T17053] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2627'.
[  565.706262][T17071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2633'.
[  565.745040][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'.
[  565.752835][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2632'.
[  565.791035][T17073] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  565.815790][T17073] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  565.837136][T17073] bond0 (unregistering): Released all slaves
[  566.217903][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  566.218412][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  566.306369][T17085] block nbd3: Unsupported socket: should be TCP or UNIX.
[  566.824785][T17107] netlink: 'syz.4.2640': attribute type 1 has an invalid length.
[  566.963003][T17107] bond0: entered promiscuous mode
[  566.963615][T17107] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.964093][T17105] tipc: Enabling of bearer <ud
:s> rejected, media not registered
[  566.996539][T17113] vlan3: entered allmulticast mode
[  566.996563][T17113] bond0: entered allmulticast mode
[  567.004669][T17116] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  567.118877][T17103] bond0: (slave bridge6): making interface the new active one
[  567.118907][T17103] bridge6: entered promiscuous mode
[  567.120700][T17103] bridge6: entered allmulticast mode
[  567.155154][T17103] bond0: (slave bridge6): Enslaving as an active interface with an up link
[  567.859387][T17141] __nla_validate_parse: 4 callbacks suppressed
[  567.859412][T17141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2650'.
[  567.891681][T17141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'.
[  567.903351][T17141] bridge0: port 2(veth0) entered blocking state
[  567.903462][T17141] bridge0: port 2(veth0) entered disabled state
[  567.903641][T17141] veth0: entered allmulticast mode
[  567.911545][T17141] veth0: entered promiscuous mode
[  568.007383][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'.
[  568.193125][T17151] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[  568.214166][T17154] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  568.322471][T17157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2653'.
[  568.322917][T17152] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2653'.
[  568.755998][T17172] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  568.778736][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  569.114245][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'.
[  569.768157][T17189] dvmrp8: entered allmulticast mode
[  570.216411][T17227] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  570.390257][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  570.391413][T17219] syzkaller0: entered promiscuous mode
[  570.391436][T17219] syzkaller0: entered allmulticast mode
[  570.417251][T17219] netlink: 'syz.2.2669': attribute type 10 has an invalid length.
[  570.498250][T17219] team0 (unregistering): Port device netdevsim1 removed
[  570.499278][T17240] Bluetooth: hci0: unsupported parameter 1280
[  570.499299][T17240] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[  570.746184][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'.
[  570.840087][T17258] netlink: 'syz.0.2679': attribute type 13 has an invalid length.
[  571.006664][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'.
[  571.302063][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'.
[  574.260712][T17294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2688'.
[  574.263822][T17281] ipvlan3: entered promiscuous mode
[  574.812315][T17321] vti0: entered promiscuous mode
[  574.812341][T17321] vti0: entered allmulticast mode
[  574.828524][T17320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2696'.
[  574.828551][T17320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2696'.
[  574.894502][T17323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2696'.
[  575.068785][T17323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2696'.
[  575.235212][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'.
[  575.334939][T17342] netlink: 'syz.4.2698': attribute type 44 has an invalid length.
[  575.428787][T17338] syzkaller1: entered promiscuous mode
[  575.428812][T17338] syzkaller1: entered allmulticast mode
[  576.100794][T17369] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2706'.
[  577.006770][T17409] netlink: Invalid conntrack helper
[  577.017250][T17409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.803804][T17436] netlink: 'syz.1.2717': attribute type 20 has an invalid length.
[  577.803829][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'.
[  577.805227][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'.
[  578.557700][T17448] netlink: 'syz.0.2722': attribute type 1 has an invalid length.
[  578.557726][T17448] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2722'.
[  578.588545][T17448] xt_l2tp: invalid flags combination: 0
[  578.610866][T17450] netlink: 'syz.0.2722': attribute type 1 has an invalid length.
[  578.612364][T17450] xt_l2tp: invalid flags combination: 0
[  578.763940][   T31] audit: type=1804 audit(1789360585.423:14): pid=17456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2723" name="/newroot/529/cgroup.controllers" dev="tmpfs" ino=2740 res=1 errno=0
[  578.763999][   T31] audit: type=1800 audit(1789360585.423:15): pid=17456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2723" name="cgroup.controllers" dev="tmpfs" ino=2740 res=0 errno=0
[  578.875744][T17458] netlink: 'syz.2.2724': attribute type 4 has an invalid length.
[  579.243741][T17467] 8021q: adding VLAN 0 to HW filter on device bond11
[  579.305923][T17467] netlink: 'syz.2.2728': attribute type 10 has an invalid length.
[  579.305950][T17467] __nla_validate_parse: 4 callbacks suppressed
[  579.305964][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2728'.
[  579.371767][T17476] bond11: (slave dummy0): Enslaving as an active interface with an up link
[  579.377308][T17467] dummy0: entered promiscuous mode
[  579.398901][T17467] bond11: (slave dummy0): Releasing backup interface
[  580.210080][T17514] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  580.373980][T17529] openvswitch: netlink: Missing valid actions attribute.
[  580.407378][T17529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'.
[  580.817849][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.817876][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.988768][T17540] netlink: 'syz.1.2739': attribute type 2 has an invalid length.
[  580.988796][T17540] netlink: 'syz.1.2739': attribute type 2 has an invalid length.
[  581.301147][T17567] netlink: 'syz.0.2748': attribute type 72 has an invalid length.
[  581.301170][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  581.305800][T17569] netlink: 'syz.0.2748': attribute type 72 has an invalid length.
[  581.305824][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  582.217573][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  582.643029][T17592] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  582.681074][T17592] bond10 (unregistering): Released all slaves
[  583.498260][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  583.687995][T17641] openvswitch: netlink: IP tunnel dst address not specified
[  583.690329][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'.
[  583.820351][T17647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'.
[  583.820382][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'.
[  583.820396][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'.
[  583.918962][T17643] syzkaller1: tun_chr_ioctl cmd 1074812117
[  584.099541][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'.
[  584.141184][T17669] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  584.164080][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'.
[  584.166303][T17665] tipc: Failed to remove unknown binding: 66,1,1/11578026:2188240403/2188240405
[  584.247457][   T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  584.247839][   T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  584.247877][   T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  584.247914][   T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  584.250690][T17669] netlink: 'syz.1.2770': attribute type 1 has an invalid length.
[  584.296496][T17669] 8021q: adding VLAN 0 to HW filter on device bond10
[  584.311316][T17666] netlink: 'syz.4.2771': attribute type 21 has an invalid length.
[  584.320679][T17669] bond10: entered promiscuous mode
[  584.320705][T17669] bond10: entered allmulticast mode
[  584.375524][T17679] __nla_validate_parse: 3 callbacks suppressed
[  584.375546][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'.
[  584.886244][T17699] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2774'.
[  585.248312][T17707] syzkaller1: entered promiscuous mode
[  585.248340][T17707] syzkaller1: entered allmulticast mode
[  585.606293][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'.
[  585.879437][T17721] nbd: socks must be embedded in a SOCK_ITEM attr
[  585.894749][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'.
[  585.894787][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'.
[  585.921306][T17724] netlink: 'syz.3.2786': attribute type 2 has an invalid length.
[  586.003646][T17721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2784'.
[  586.563429][T17714] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  586.697224][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  586.930405][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'.
[  586.954902][T17777] macvtap0: entered promiscuous mode
[  586.954920][T17777] ip6gretap0: entered promiscuous mode
[  586.956703][T17777] macvtap0: entered allmulticast mode
[  586.956723][T17777] ip6gretap0: entered allmulticast mode
[  587.082107][T17777] ip6gretap0: left allmulticast mode
[  587.082126][T17777] ip6gretap0: left promiscuous mode
[  587.088138][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'.
[  587.128198][T17777] macvtap0: left promiscuous mode
[  587.128223][T17777] macvtap0: left allmulticast mode
[  587.149699][T17778] macvtap0: entered promiscuous mode
[  587.149724][T17778] ip6gretap0: entered promiscuous mode
[  587.154584][T17778] macvtap0: entered allmulticast mode
[  587.154608][T17778] ip6gretap0: entered allmulticast mode
[  587.191844][T17779] ip6gretap0: left allmulticast mode
[  587.191872][T17779] ip6gretap0: left promiscuous mode
[  587.199967][T17779] macvtap0: left promiscuous mode
[  587.199990][T17779] macvtap0: left allmulticast mode
[  587.869777][T17823] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2805'.
[  587.958000][T17826] netlink: 'syz.1.2804': attribute type 32 has an invalid length.
[  587.958037][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  588.082409][T17826] bond11: option coupled_control: invalid value (10)
[  588.104621][T17826] bond11 (unregistering): Released all slaves
[  588.272301][T17840] netlink: 'syz.2.2812': attribute type 8 has an invalid length.
[  588.412811][T17848] netlink: 'syz.2.2812': attribute type 8 has an invalid length.
[  588.651295][ T7640] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  588.654327][T17860] netlink: 'syz.4.2816': attribute type 2 has an invalid length.
[  588.671298][T17860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.689918][ T7640] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  588.712935][ T7640] bond0: now running without any active interface!
[  588.801132][T17872] netlink: 'syz.1.2818': attribute type 5 has an invalid length.
[  588.880124][T17882] netlink: 'syz.1.2818': attribute type 5 has an invalid length.
[  589.088797][T17890] netlink: 'syz.4.2822': attribute type 1 has an invalid length.
[  589.401679][T17900] __nla_validate_parse: 16 callbacks suppressed
[  589.401704][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'.
[  589.427150][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'.
[  589.427813][T17902] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000
[  589.448218][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2827'.
[  589.891474][T17918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2833'.
[  589.990004][T17918] nft_compat: unsupported protocol 0
[  590.009938][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'.
[  590.009938][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'.
[  590.381268][T17934] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  590.582599][T17936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.784373][T17936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.860427][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'.
[  591.039555][T17954] veth13: entered allmulticast mode
[  591.107322][T17936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.186582][T17972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2847'.
[  591.265863][T17936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.778453][ T7640] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.947359][ T7640] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.947887][ T7640] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.947940][ T7640] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.017119][T17994] xt_CONNSECMARK: invalid mode: 254
[  592.104699][T17999] syzkaller0: left promiscuous mode
[  592.104723][T17999] syzkaller0: left allmulticast mode
[  592.502098][T18025] netlink: 'syz.4.2857': attribute type 10 has an invalid length.
[  593.060725][T18009] syzkaller0: entered promiscuous mode
[  593.060756][T18009] syzkaller0: entered allmulticast mode
[  593.064181][T18025] bond15: (slave veth0_to_bond): Releasing active interface
[  593.523474][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'.
[  593.523502][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'.
[  593.662240][T18049] netlink: 'syz.2.2862': attribute type 1 has an invalid length.
[  593.667656][   T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.668219][   T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.668263][   T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.668299][   T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.932473][T18051] veth13: entered allmulticast mode
[  593.949767][T18051] bond12: (slave veth13): Enslaving as an active interface with a down link
[  593.992171][T18052] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  593.993780][T18061] netlink: 'syz.0.2865': attribute type 7 has an invalid length.
[  593.993802][T18061] netlink: 'syz.0.2865': attribute type 8 has an invalid length.
[  594.029244][T18065] macvlan5: entered promiscuous mode
[  594.029270][T18065] macvlan5: entered allmulticast mode
[  594.030125][T18065] bond12: entered promiscuous mode
[  594.030939][T18065] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  594.035100][T18065] bond12: left promiscuous mode
[  594.223993][T18069] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  594.251643][T18068] dummy0: entered promiscuous mode
[  594.259049][T18063] netlink: 'syz.3.2866': attribute type 1 has an invalid length.
[  594.274312][T18068] dummy0: left promiscuous mode
[  594.385555][T18072] netlink: 'syz.0.2867': attribute type 4 has an invalid length.
[  594.442696][T18075] netlink: 'syz.0.2867': attribute type 4 has an invalid length.
[  594.524777][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  594.541390][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  594.543543][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  594.562276][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  594.565726][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  594.653892][T18080] __nla_validate_parse: 3 callbacks suppressed
[  594.653915][T18080] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2870'.
[  594.920957][T18087] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2871'.
[  595.279365][T18105] netlink: 'syz.4.2874': attribute type 30 has an invalid length.
[  595.319467][   T31] audit: type=1107 audit(1789360601.983:16): pid=18106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  595.352940][T18111] netlink: 'syz.0.2876': attribute type 3 has an invalid length.
[  595.702416][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'.
[  595.727954][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'.
[  595.742780][T17632] udevd[17632]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory
[  595.853651][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'.
[  595.860770][T18089] netlink: 'syz.3.2873': attribute type 1 has an invalid length.
[  595.860790][T18089] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2873'.
[  596.153475][T18144] netlink: 'syz.4.2881': attribute type 8 has an invalid length.
[  596.153500][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'.
[  596.617241][ T5623] Bluetooth: hci5: command tx timeout
[  596.633836][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'.
[  596.933185][T18164] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  597.145328][T18180] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2893'.
[  597.746435][T18203] sch_fq: defrate 1025 ignored.
[  597.803541][T18209] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2899'.
[  597.877564][T18077] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.877755][T18077] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.877902][T18077] bridge_slave_0: entered allmulticast mode
[  597.883878][T18077] bridge_slave_0: entered promiscuous mode
[  597.914662][T18077] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.914773][T18077] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.914922][T18077] bridge_slave_1: entered allmulticast mode
[  597.933461][T18077] bridge_slave_1: entered promiscuous mode
[  597.990781][T18077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.994798][T18077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.094078][T18207] syzkaller0: entered promiscuous mode
[  598.094105][T18207] syzkaller0: entered allmulticast mode
[  598.110679][T18077] team0: Port device team_slave_0 added
[  598.121516][T18077] team0: Port device team_slave_1 added
[  598.311554][T18077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.311576][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.311604][T18077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.341035][T18230] xt_TPROXY: Can be used only with -p tcp or -p udp
[  598.355121][T18077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.355141][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.355167][T18077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.573501][T18077] hsr_slave_0: entered promiscuous mode
[  598.576554][T18077] hsr_slave_1: entered promiscuous mode
[  598.594554][T18077] debugfs: 'hsr0' already exists in 'hsr'
[  598.594581][T18077] Cannot create hsr debugfs directory
[  598.692482][T18242] xt_l2tp: invalid flags combination: 8
[  598.692739][T18242] netlink: 'syz.2.2907': attribute type 1 has an invalid length.
[  598.700256][ T5623] Bluetooth: hci5: command tx timeout
[  599.178223][T18077] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.235366][T18249] tipc: New replicast peer: 172.20.20.187
[  599.253648][T18249] tipc: Enabled bearer <udp:syz0>, priority 10
[  599.353758][T18077] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.580845][T18077] team0: Port device netdevsim1 removed
[  599.587885][T18077] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.669758][T18281] __nla_validate_parse: 2 callbacks suppressed
[  599.669781][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'.
[  599.669798][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'.
[  599.669821][T18281] netlink: 'syz.4.2913': attribute type 6 has an invalid length.
[  599.669834][T18281] netlink: 'syz.4.2913': attribute type 5 has an invalid length.
[  599.670847][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'.
[  599.670868][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'.
[  599.670888][T18281] netlink: 'syz.4.2913': attribute type 6 has an invalid length.
[  599.670902][T18281] netlink: 'syz.4.2913': attribute type 5 has an invalid length.
[  599.674184][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'.
[  599.885906][T18077] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  600.139219][T18291] pim6reg: entered allmulticast mode
[  600.145449][T18291] pim6reg: left allmulticast mode
[  600.450292][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'.
[  600.504365][T18315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2921'.
[  600.663621][T18077] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  600.674138][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  600.675910][T18077] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  600.694770][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  600.712108][T18077] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  600.740593][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  600.743161][T18077] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  600.766241][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  600.777453][ T5623] Bluetooth: hci5: command tx timeout
[  600.849633][T18340] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  600.892557][T18343] ip6tnl2: entered allmulticast mode
[  600.893959][T10791] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  600.894221][T10791] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  600.920503][T18329] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  600.971966][T18077] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.010003][T18077] 8021q: adding VLAN 0 to HW filter on device team0
[  601.036870][T10791] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.036993][T10791] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.072645][  T703] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.072711][  T703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.358245][T18329] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  601.456347][T18358] netlink: 'syz.4.2931': attribute type 5 has an invalid length.
[  601.457150][T18358] netlink: 'syz.4.2931': attribute type 5 has an invalid length.
[  601.498237][T18358] pim6reg1: entered promiscuous mode
[  601.498255][T18358] pim6reg1: entered allmulticast mode
[  601.505193][T18365] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2929'.
[  601.737242][T18332] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  601.739303][T18372] netlink: 'syz.2.2932': attribute type 1 has an invalid length.
[  601.862132][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'.
[  601.882392][T18372] 8021q: adding VLAN 0 to HW filter on device bond13
[  602.315700][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2937'.
[  602.345732][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  602.355320][T18395] netlink: 'syz.0.2936': attribute type 16 has an invalid length.
[  602.355346][T18395] netlink: 'syz.0.2936': attribute type 17 has an invalid length.
[  602.455627][T18395] bridge_slave_1: left allmulticast mode
[  602.466226][ T5745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.571073][T18395] ip6gre1: left allmulticast mode
[  602.594034][T18395] bond5: left allmulticast mode
[  602.595334][T18395] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  602.630772][T12816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  602.631286][T12816] openvswitch: cpu_id mismatch with handler threads
[  602.642146][T12816] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  602.811211][T18077] veth0_vlan: entered promiscuous mode
[  602.823116][T18077] veth1_vlan: entered promiscuous mode
[  602.857316][ T5623] Bluetooth: hci5: command tx timeout
[  602.890620][T12816] openvswitch: cpu_id mismatch with handler threads
[  602.896827][T18077] veth0_macvtap: entered promiscuous mode
[  602.919907][T18077] veth1_macvtap: entered promiscuous mode
[  602.938430][T12816] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  602.994728][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.005082][T12816] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  603.025002][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.069591][T10791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.177541][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.198711][ T7640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.199735][ T7640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.299178][T10791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.299212][T10791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.369169][ T7640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.369195][ T7640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.618728][T18437] syzkaller0: entered promiscuous mode
[  603.618774][T18437] syzkaller0: entered allmulticast mode
[  603.625308][T18440] IPv6: NLM_F_CREATE should be specified when creating new route
[  603.625416][T18440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  603.625428][T18440] IPv6: NLM_F_CREATE should be set when creating new route
[  603.625478][T18440] IPv6: NLM_F_CREATE should be set when creating new route
[  603.627134][T18440] IPv6: NLM_F_CREATE should be set when creating new route
[  604.481982][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  604.488081][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  604.496402][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  604.515693][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  604.517893][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  605.083486][T18488] __nla_validate_parse: 1 callbacks suppressed
[  605.083512][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'.
[  606.417116][T18533] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2968'.
[  606.618067][ T5623] Bluetooth: hci0: command tx timeout
[  607.073104][T18467] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.073284][T18467] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.073437][T18467] bridge_slave_0: entered allmulticast mode
[  607.075982][T18467] bridge_slave_0: entered promiscuous mode
[  607.109698][T18467] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.109925][T18467] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.110071][T18467] bridge_slave_1: entered allmulticast mode
[  607.112372][T18467] bridge_slave_1: entered promiscuous mode
[  607.261860][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'.
[  607.293151][T18467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.312887][T18467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.470373][T18467] team0: Port device team_slave_0 added
[  607.558614][T18559] block nbd4: Unsupported socket: should be TCP or UNIX.
[  607.871151][T18467] team0: Port device team_slave_1 added
[  608.094146][T18467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.094167][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.094213][T18467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.102816][T18467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.102833][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.102858][T18467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.261131][T18578] Bluetooth: MGMT ver 1.23
[  608.261172][T18578] Bluetooth: hci0: unsupported parameter 5135
[  608.261186][T18578] Bluetooth: hci0: unsupported parameter 65
[  608.261199][T18578] Bluetooth: hci0: unsupported parameter 5135
[  608.261211][T18578] Bluetooth: hci0: unsupported parameter 65
[  608.356010][T18586] netlink: 'syz.1.2978': attribute type 1 has an invalid length.
[  608.400371][T18588] netlink: 'syz.1.2978': attribute type 10 has an invalid length.
[  608.400396][T18588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2978'.
[  608.424112][T18467] hsr_slave_0: entered promiscuous mode
[  608.431720][T18467] hsr_slave_1: entered promiscuous mode
[  608.432220][T18467] debugfs: 'hsr0' already exists in 'hsr'
[  608.432242][T18467] Cannot create hsr debugfs directory
[  608.509095][T18588] dummy0: entered promiscuous mode
[  608.529566][T18595] netlink: 'syz.3.2979': attribute type 1 has an invalid length.
[  608.697742][ T5623] Bluetooth: hci0: command tx timeout
[  608.720520][T18603] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  608.853828][T18606] netlink: 'syz.3.2982': attribute type 4 has an invalid length.
[  608.983127][T18615] block nbd0: reconnected socket
[  608.984601][T18615] netlink: 'syz.2.2984': attribute type 9 has an invalid length.
[  609.492649][ T5623] block nbd0: Receive control failed (result -32)
[  609.828155][T18641] netlink: 'syz.2.2991': attribute type 4 has an invalid length.
[  609.922371][T18467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  609.922413][T18467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.022290][T18635] syzkaller0: entered promiscuous mode
[  610.022322][T18635] syzkaller0: entered allmulticast mode
[  610.370678][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'.
[  610.779928][ T5623] Bluetooth: hci0: command tx timeout
[  611.677074][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  611.677111][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  612.858327][ T5623] Bluetooth: hci0: command tx timeout
[  612.866288][T18653] bridge0: port 1(wlan1) entered blocking state
[  612.866394][T18653] bridge0: port 1(wlan1) entered disabled state
[  612.867699][T18653] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  612.869400][T18653] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  612.886305][T18658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2994'.
[  612.886334][T18658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2994'.
[  613.064430][T18467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.064472][T18467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.193019][T18467] team0: Port device netdevsim1 removed
[  613.202826][T18467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.202863][T18467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.375409][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'.
[  613.375456][T18467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.375489][T18467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.413617][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413617][T18684] Use struct sctp_sack_info instead
[  613.413681][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413681][T18684] Use struct sctp_sack_info instead
[  613.413729][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413729][T18684] Use struct sctp_sack_info instead
[  613.413777][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413777][T18684] Use struct sctp_sack_info instead
[  613.413824][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413824][T18684] Use struct sctp_sack_info instead
[  613.413871][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413871][T18684] Use struct sctp_sack_info instead
[  613.413917][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413917][T18684] Use struct sctp_sack_info instead
[  613.413964][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.413964][T18684] Use struct sctp_sack_info instead
[  613.414011][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.414011][T18684] Use struct sctp_sack_info instead
[  613.414057][T18684] sctp: [Deprecated]: syz.4.2999 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.414057][T18684] Use struct sctp_sack_info instead
[  613.551681][T18678] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3001'.
[  613.551740][T18678] bond_slave_0: entered promiscuous mode
[  613.577681][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.422012][T18717] syzkaller0: entered promiscuous mode
[  614.422039][T18717] syzkaller0: entered allmulticast mode
[  614.622563][T18724] netlink: 480 bytes leftover after parsing attributes in process `syz.3.3006'.
[  614.622655][T18724] netlink: 480 bytes leftover after parsing attributes in process `syz.3.3006'.
[  614.691993][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'.
[  614.707150][T18721] block nbd0: Unsupported socket: should be TCP or UNIX.
[  614.747569][T18467] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  614.755927][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  614.799541][T18467] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  614.816391][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  614.831495][T18467] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  614.851623][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  614.864654][T18467] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  614.880668][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  614.902042][T18727] syzkaller0: entered promiscuous mode
[  614.902069][T18727] syzkaller0: entered allmulticast mode
[  614.943265][T18727] tipc: Started in network mode
[  614.943300][T18727] tipc: Node identity 72205c1c30bb, cluster identity 4711
[  614.943606][T18727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  615.000894][T18726] tipc: Resetting bearer <eth:syzkaller0>
[  615.029985][T18726] tipc: Disabling bearer <eth:syzkaller0>
[  615.301193][T18467] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.349234][T18467] 8021q: adding VLAN 0 to HW filter on device team0
[  615.409908][T18593] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.410043][T18593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.469533][T18594] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.469651][T18594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.474894][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  615.474931][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  615.528061][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  615.528099][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  615.533503][T18754] vxcan2: entered allmulticast mode
[  615.569680][T18753] vxcan2: entered allmulticast mode
[  615.773978][T18770] nbd: couldn't find device at index 3
[  615.774219][T18769] nbd: couldn't find device at index 3
[  616.450400][T18801] 8021q: VLANs not supported on ip6tnl0
[  616.500974][T18806] netlink: 'syz.2.3023': attribute type 1 has an invalid length.
[  616.590929][T18806] bond14: entered promiscuous mode
[  616.592946][T18806] 8021q: adding VLAN 0 to HW filter on device bond14
[  616.658987][T18810] bond14: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  616.659016][T18810] bond14: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  616.659033][T18810] bond14: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  616.767269][T18814] netlink: 'syz.3.3027': attribute type 1 has an invalid length.
[  616.767972][T18815] netlink: 'syz.3.3027': attribute type 1 has an invalid length.
[  616.797408][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3027'.
[  616.999719][T18467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.121617][T18467] veth0_vlan: entered promiscuous mode
[  617.138602][T18467] veth1_vlan: entered promiscuous mode
[  617.199921][T18467] veth0_macvtap: entered promiscuous mode
[  617.206147][T18467] veth1_macvtap: entered promiscuous mode
[  617.244279][T18467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.267865][T18467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.361061][T14252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.478301][T14252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.478967][T14252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.479056][T14252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.677824][  T670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.677851][  T670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.862865][  T670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.862892][  T670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.058108][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  618.165435][T18850] x_tables: duplicate underflow at hook 1
[  618.277528][ T7619] hid-generic 0005:0458:005C.0001: item fetching failed at offset 0/3
[  618.310893][ T7619] hid-generic 0005:0458:005C.0001: probe with driver hid-generic failed with error -22
[  618.661886][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'.
[  618.938516][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  618.939932][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  618.942751][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  618.954715][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  618.972035][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  619.024236][ T5623] block nbd4: Receive control failed (result -1)
[  620.063767][T18914] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  620.668331][T18918] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT
[  620.775595][T18594] IPVS: starting estimator thread 0...
[  620.786122][T18932] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  620.816572][T18932] netlink: 'syz.1.3053': attribute type 1 has an invalid length.
[  620.867892][T18933] IPVS: using max 30 ests per chain, 72000 per kthread
[  620.896330][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'.
[  620.927806][T18941] netlink: 'syz.0.3054': attribute type 2 has an invalid length.
[  620.934655][T18932] 8021q: adding VLAN 0 to HW filter on device bond2
[  621.005876][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'.
[  621.037319][T18941] : entered promiscuous mode
[  621.097305][   T52] Bluetooth: hci2: command tx timeout
[  621.257055][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  621.665945][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  621.825999][T18877] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.826197][T18877] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.826356][T18877] bridge_slave_0: entered allmulticast mode
[  621.845037][T18877] bridge_slave_0: entered promiscuous mode
[  621.859732][T18877] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.863225][T18877] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.863394][T18877] bridge_slave_1: entered allmulticast mode
[  621.872320][T18877] bridge_slave_1: entered promiscuous mode
[  621.945629][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.959711][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  622.015001][T18877] team0: Port device team_slave_0 added
[  622.025077][T18877] team0: Port device team_slave_1 added
[  622.025119][T18978] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3060'.
[  622.086290][T18978] netlink: 'syz.0.3060': attribute type 1 has an invalid length.
[  622.086318][T18978] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3060'.
[  622.192137][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  622.192158][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.192185][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  622.201872][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  622.201890][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.201913][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  622.376609][T18877] hsr_slave_0: entered promiscuous mode
[  622.388220][T18877] hsr_slave_1: entered promiscuous mode
[  622.396144][T18877] debugfs: 'hsr0' already exists in 'hsr'
[  622.396171][T18877] Cannot create hsr debugfs directory
[  622.639908][T18999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  622.923552][T19006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3068'.
[  623.188818][   T52] Bluetooth: hci2: command tx timeout
[  623.220373][T18877] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.372994][T18877] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.581494][T18877] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.822805][T18877] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.042393][T19026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3072'.
[  624.095121][T19024] pim6reg1: entered promiscuous mode
[  624.095147][T19024] pim6reg1: entered allmulticast mode
[  624.263147][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'.
[  624.687287][T19038] ksmbd: Unknown IPC event: 1, ignore.
[  625.257119][   T52] Bluetooth: hci2: command tx timeout
[  625.293201][T18877] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  625.330683][T18877] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  625.332079][T18877] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  625.370687][T18877] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  625.372937][T18877] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  625.411482][T18877] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  625.431799][T18877] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  625.455026][T18877] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  625.740234][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  625.917485][T18877] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.965089][T18877] 8021q: adding VLAN 0 to HW filter on device team0
[  625.991346][T16030] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.991470][T16030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  626.010635][T16030] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.010745][T16030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  626.487364][T19080] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  626.797456][T19092] syzkaller0: entered promiscuous mode
[  626.797485][T19092] syzkaller0: entered allmulticast mode
[  627.345715][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  627.348575][   T52] Bluetooth: hci2: command tx timeout
[  628.252187][T19142] xt_hashlimit: size too large, truncated to 1048576
[  628.328754][T19144] xt_hashlimit: size too large, truncated to 1048576
[  628.416377][T19153] xt_hashlimit: size too large, truncated to 1048576
[  628.710384][T19146] nbd3: detected capacity change from 0 to 63
[  628.716491][T19159] block nbd3: NBD_DISCONNECT
[  628.728092][T19159] block nbd3: Disconnected due to user request.
[  628.730402][T19159] block nbd3: shutting down sockets
[  628.744315][T18877] veth0_vlan: entered promiscuous mode
[  628.765350][  T620] 
[  628.767748][  T620] ======================================================
[  628.774877][  T620] WARNING: possible circular locking dependency detected
[  628.781975][  T620] syzkaller #0 Not tainted
[  628.786586][  T620] ------------------------------------------------------
[  628.793693][  T620] kworker/1:1H/620 is trying to acquire lock:
[  628.799869][  T620] ffff888077737068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0
[  628.809077][  T620] 
[  628.809077][  T620] but task is already holding lock:
[  628.816451][  T620] ffff88803995e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  628.825261][  T620] 
[  628.825261][  T620] which lock already depends on the new lock.
[  628.825261][  T620] 
[  628.836219][  T620] 
[  628.836219][  T620] the existing dependency chain (in reverse order) is:
[  628.845352][  T620] 
[  628.845352][  T620] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  628.852764][  T620]        __mutex_lock+0x19d/0x1550
[  628.857987][  T620]        nbd_queue_rq+0xc1/0xff0
[  628.863311][  T620]        blk_mq_dispatch_rq_list+0x499/0x1990
[  628.869621][  T620]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  628.876742][  T620]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  628.878686][T18877] veth1_vlan: entered promiscuous mode
[  628.889389][  T620]        blk_mq_run_work_fn+0x16c/0x300
[  628.895095][  T620]        process_scheduled_works+0xc3d/0x1630
[  628.901756][  T620]        worker_thread+0xa47/0xfb0
[  628.906892][  T620]        kthread+0x38b/0x480
[  628.911688][  T620]        ret_from_fork+0x514/0xb70
[  628.916871][  T620]        ret_from_fork_asm+0x1a/0x30
[  628.922212][  T620] 
[  628.922212][  T620] -> #5 (set->srcu){.+.+}-{0:0}:
[  628.929634][  T620]        __synchronize_srcu+0xc9/0x2f0
[  628.935280][  T620]        elevator_switch+0x1e8/0x7b0
[  628.940752][  T620]        elevator_change+0x2fa/0x480
[  628.946040][  T620]        elevator_set_default+0x375/0x440
[  628.951760][  T620]        blk_register_queue+0x3f3/0x4e0
[  628.957520][  T620]        __add_disk+0x6b8/0xdb0
[  628.962584][  T620]        add_disk_fwnode+0x100/0x3a0
[  628.967917][  T620]        nbd_dev_add+0x733/0xb60
[  628.973051][  T620]        nbd_init+0x168/0x1f0
[  628.979489][  T620]        do_one_initcall+0x250/0x870
[  628.984984][  T620]        do_initcall_level+0x10a/0x1a0
[  628.990667][  T620]        do_initcalls+0x59/0xa0
[  628.995546][  T620]        kernel_init_freeable+0x29d/0x3e0
[  629.001363][  T620]        kernel_init+0x22/0x1d0
[  629.006472][  T620]        ret_from_fork+0x514/0xb70
[  629.011961][  T620]        ret_from_fork_asm+0x1a/0x30
[  629.017275][  T620] 
[  629.017275][  T620] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  629.025383][  T620]        __mutex_lock+0x19d/0x1550
[  629.030620][  T620]        elevator_change+0x1af/0x480
[  629.036020][  T620]        elevator_set_none+0xb5/0x140
[  629.042121][  T620]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  629.048666][  T620]        nbd_start_device+0x189/0xb30
[  629.054221][  T620]        nbd_genl_connect+0x167d/0x1cd0
[  629.059845][  T620]        genl_family_rcv_msg_doit+0x233/0x340
[  629.066095][  T620]        genl_rcv_msg+0x614/0x7a0
[  629.071212][  T620]        netlink_rcv_skb+0x226/0x4a0
[  629.076873][  T620]        genl_rcv+0x28/0x40
[  629.081382][  T620]        netlink_unicast+0x7bd/0x940
[  629.087042][  T620]        netlink_sendmsg+0x813/0xb40
[  629.092381][  T620]        sock_sendmsg_nosec+0x13a/0x180
[  629.098144][  T620]        ____sys_sendmsg+0x54e/0x850
[  629.103471][  T620]        ___sys_sendmsg+0x2a5/0x360
[  629.108791][  T620]        __x64_sys_sendmsg+0x1b1/0x290
[  629.114818][  T620]        do_syscall_64+0x166/0x520
[  629.120059][  T620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.126596][  T620] 
[  629.126596][  T620] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  629.135543][  T620]        blk_alloc_queue+0x544/0x690
[  629.141228][  T620]        __blk_mq_alloc_disk+0x194/0x390
[  629.147038][  T620]        nbd_dev_add+0x494/0xb60
[  629.152342][  T620]        nbd_init+0x168/0x1f0
[  629.157214][  T620]        do_one_initcall+0x250/0x870
[  629.162711][  T620]        do_initcall_level+0x10a/0x1a0
[  629.168288][  T620]        do_initcalls+0x59/0xa0
[  629.173424][  T620]        kernel_init_freeable+0x29d/0x3e0
[  629.179348][  T620]        kernel_init+0x22/0x1d0
[  629.184426][  T620]        ret_from_fork+0x514/0xb70
[  629.189736][  T620]        ret_from_fork_asm+0x1a/0x30
[  629.195147][  T620] 
[  629.195147][  T620] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  629.202479][  T620]        fs_reclaim_acquire+0x71/0x100
[  629.208067][  T620]        __kmalloc_noprof+0xbc/0x720
[  629.213369][  T620]        tls_sw_sendmsg+0x59b/0x2b50
[  629.218758][  T620]        sock_sendmsg_nosec+0x90/0x180
[  629.224236][  T620]        sock_sendmsg+0x1ca/0x2d0
[  629.229321][  T620]        splice_to_socket+0xb5e/0x12a0
[  629.234820][  T620]        direct_splice_actor+0x101/0x160
[  629.240511][  T620]        splice_direct_to_actor+0x57b/0xcb0
[  629.246537][  T620]        do_splice_direct+0x195/0x290
[  629.252199][  T620]        do_sendfile+0x52e/0x7c0
[  629.257291][  T620]        __se_sys_sendfile64+0x144/0x1a0
[  629.262960][  T620]        do_syscall_64+0x166/0x520
[  629.268367][  T620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.274807][  T620] 
[  629.274807][  T620] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  629.283179][  T620]        lock_sock_nested+0x41/0x100
[  629.288661][  T620]        inet_shutdown+0x6a/0x390
[  629.293881][  T620]        nbd_mark_nsock_dead+0x2cb/0x550
[  629.299881][  T620]        recv_work+0x1cee/0x1e10
[  629.305089][  T620]        process_scheduled_works+0xc3d/0x1630
[  629.311202][  T620]        worker_thread+0xa47/0xfb0
[  629.316439][  T620]        kthread+0x38b/0x480
[  629.321144][  T620]        ret_from_fork+0x514/0xb70
[  629.326361][  T620]        ret_from_fork_asm+0x1a/0x30
[  629.331772][  T620] 
[  629.331772][  T620] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  629.339698][  T620]        __lock_acquire+0x164c/0x2de0
[  629.345210][  T620]        lock_acquire+0x115/0x350
[  629.350350][  T620]        __mutex_lock+0x19d/0x1550
[  629.355600][  T620]        nbd_queue_rq+0x373/0xff0
[  629.360673][  T620]        blk_mq_dispatch_rq_list+0x499/0x1990
[  629.366943][  T620]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  629.373940][  T620]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  629.380591][  T620]        blk_mq_run_work_fn+0x16c/0x300
[  629.386328][  T620]        process_scheduled_works+0xc3d/0x1630
[  629.392425][  T620]        worker_thread+0xa47/0xfb0
[  629.398081][  T620]        kthread+0x38b/0x480
[  629.402865][  T620]        ret_from_fork+0x514/0xb70
[  629.407993][  T620]        ret_from_fork_asm+0x1a/0x30
[  629.413407][  T620] 
[  629.413407][  T620] other info that might help us debug this:
[  629.413407][  T620] 
[  629.424006][  T620] Chain exists of:
[  629.424006][  T620]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  629.424006][  T620] 
[  629.436352][  T620]  Possible unsafe locking scenario:
[  629.436352][  T620] 
[  629.444057][  T620]        CPU0                    CPU1
[  629.449432][  T620]        ----                    ----
[  629.455098][  T620]   lock(&cmd->lock);
[  629.459178][  T620]                                lock(set->srcu);
[  629.466654][  T620]                                lock(&cmd->lock);
[  629.473187][  T620]   lock(&nsock->tx_lock);
[  629.477827][  T620] 
[  629.477827][  T620]  *** DEADLOCK ***
[  629.477827][  T620] 
[  629.486048][  T620] locks held by kworker/1:1H/620: 4, last CPU#1:
[  629.492568][  T620]  #0: ffff88801f692540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  629.503839][  T620]  #1: ffffc90003f57c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  629.517356][  T620]  #2: ffff8880752de598 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  629.526929][  T620]  #3: ffff88803995e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  629.536040][  T620] 
[  629.536040][  T620] stack backtrace:
[  629.541971][  T620] CPU: 1 UID: 0 PID: 620 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) 
[  629.551500][  T620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.561817][  T620] Workqueue: kblockd blk_mq_run_work_fn
[  629.567533][  T620] Call Trace:
[  629.570847][  T620]  <TASK>
[  629.573888][  T620]  dump_stack_lvl+0xe8/0x150
[  629.578939][  T620]  print_circular_bug+0x2e2/0x300
[  629.584243][  T620]  check_noncircular+0x12f/0x150
[  629.589217][  T620]  __lock_acquire+0x164c/0x2de0
[  629.594373][  T620]  lock_acquire+0x115/0x350
[  629.598987][  T620]  ? nbd_queue_rq+0x373/0xff0
[  629.603912][  T620]  __mutex_lock+0x19d/0x1550
[  629.608803][  T620]  ? nbd_queue_rq+0x373/0xff0
[  629.613802][  T620]  ? do_raw_spin_lock+0x12b/0x2f0
[  629.619124][  T620]  ? nbd_queue_rq+0x373/0xff0
[  629.624983][  T620]  ? __pfx___mutex_lock+0x10/0x10
[  629.630140][  T620]  ? rcu_is_watching+0x16/0xb0
[  629.635321][  T620]  ? trace_sched_exit_tp+0x3a/0x130
[  629.641349][  T620]  nbd_queue_rq+0x373/0xff0
[  629.646088][  T620]  ? __pfx_nbd_queue_rq+0x10/0x10
[  629.651410][  T620]  ? irqentry_exit+0x218/0x910
[  629.656198][  T620]  ? __pfx___schedule+0x10/0x10
[  629.661238][  T620]  ? irqentry_exit+0x218/0x910
[  629.666203][  T620]  blk_mq_dispatch_rq_list+0x499/0x1990
[  629.671786][  T620]  ? sbitmap_get+0x229/0x390
[  629.677124][  T620]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  629.683580][  T620]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  629.689594][  T620]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  629.696206][  T620]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  629.702987][  T620]  ? lock_acquire+0x115/0x350
[  629.707715][  T620]  ? process_scheduled_works+0x97a/0x1630
[  629.713455][  T620]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  629.719751][  T620]  ? blk_mq_run_work_fn+0x144/0x300
[  629.725361][  T620]  blk_mq_run_work_fn+0x16c/0x300
[  629.730446][  T620]  ? process_scheduled_works+0x97a/0x1630
[  629.736293][  T620]  process_scheduled_works+0xc3d/0x1630
[  629.741959][  T620]  ? __pfx_process_scheduled_works+0x10/0x10
[  629.748068][  T620]  ? assign_work+0x3cf/0x5d0
[  629.752885][  T620]  worker_thread+0xa47/0xfb0
[  629.757513][  T620]  ? __kthread_parkme+0x71/0x1f0
[  629.762580][  T620]  kthread+0x38b/0x480
[  629.766683][  T620]  ? __pfx_worker_thread+0x10/0x10
[  629.771892][  T620]  ? __pfx_kthread+0x10/0x10
[  629.777032][  T620]  ret_from_fork+0x514/0xb70
[  629.781733][  T620]  ? __pfx_ret_from_fork+0x10/0x10
[  629.786875][  T620]  ? __switch_to+0xc89/0x1420
[  629.791684][  T620]  ? __pfx_kthread+0x10/0x10
[  629.796470][  T620]  ret_from_fork_asm+0x1a/0x30
[  629.801519][  T620]  </TASK>
[  629.812339][  T620] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  629.812378][  T620] Buffer I/O error on dev nbd3, logical block 0, async page read
[  629.812410][  T620] Buffer I/O error on dev nbd3, logical block 1, async page read
[  629.812425][  T620] Buffer I/O error on dev nbd3, logical block 2, async page read
[  629.812439][  T620] Buffer I/O error on dev nbd3, logical block 3, async page read
[  629.812661][   T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  629.812687][   T26] Buffer I/O error on dev nbd3, logical block 0, async page read
[  629.812703][   T26] Buffer I/O error on dev nbd3, logical block 1, async page read
[  629.812717][   T26] Buffer I/O error on dev nbd3, logical block 2, async page read
[  629.812731][   T26] Buffer I/O error on dev nbd3, logical block 3, async page read
[  629.812824][   T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.812850][   T26] Buffer I/O error on dev nbd3, logical block 0, async page read
[  629.812922][   T26] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.812947][   T26] Buffer I/O error on dev nbd3, logical block 1, async page read
[  629.813023][   T26] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.813112][   T26] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.813210][   T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.813297][   T26] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.813413][   T26] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.813511][   T26] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  629.817746][T17295] ldm_validate_partition_table(): Disk read failed.
[  629.818247][T17295] Dev nbd3: unable to read RDB block 0
[  629.818881][T17295]  nbd3: unable to read partition table
[  629.842037][T18877] veth0_macvtap: entered promiscuous mode
[  629.844781][T18877] veth1_macvtap: entered promiscuous mode
[  629.880413][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.885087][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.909837][T19167] syzkaller1: entered promiscuous mode
[  629.909862][T19167] syzkaller1: entered allmulticast mode
[  629.948301][T17295] ldm_validate_partition_table(): Disk read failed.
[  629.948761][T17295] Dev nbd3: unable to read RDB block 0
[  629.949274][T17295]  nbd3: unable to read partition table
[  630.107939][T18593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.109500][T16033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.109558][T16033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.109586][T16033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.118065][T18877] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  630.172432][T14252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.172453][T14252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.174077][T18877] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht'
[  630.205619][T14252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.205643][T14252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50