last executing test programs:

2.7788689s ago: executing program 1 (id=2576):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
r5 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r8, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xab8}, 0x8)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0)

2.698027747s ago: executing program 3 (id=2577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000104000840000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817da4b5f31a24001280110001006272696467655f736c617665000000000c0005800500090000000000140003007272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

2.493147377s ago: executing program 1 (id=2578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48005}}, 0x20}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xfff3, 0xd}, {0xd, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0}) (rerun: 64)
sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.372914026s ago: executing program 0 (id=2580):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendto$phonet(r1, &(0x7f00000000c0)="fc9e96bf49f2afde5aa24be75446983aae1cdb49857cc392030738a466062f1159122e2f3db03e9d86c67538f47e87213a2a2d8eeaaccd238bf4862723203a6a2b73860a61b5e663cdfb9f84c392dc49b23149578ce1562137060236fe34494bf05e850249b0013c2a875fc297de349e10328569d7cd54440597bf4ac1e9d0f0560f8388f8bd1e1b1433c370111d1b1bd4788d16256a0c27044064986ba5d81fa2d0535d2717075babc2aa0fc8860971b6668e65e510697685903136d0f9403fcb1a2c1fd551e37b988e8b4c7cb0b9525f51f271042d38e2f23d7213d5ddb90c70f87911b7d1", 0xe6, 0x2004011, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0xfffc, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

2.368830872s ago: executing program 4 (id=2581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = accept4(r0, &(0x7f0000000600)=@nl=@unspec, &(0x7f0000000680)=0x80, 0x80000)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000006c0)={'HL\x00'}, &(0x7f0000000700)=0x1e)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7c7ef8b2, @ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc60c}}]}, 0x70}, 0x1, 0x7}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x41b, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x44054)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071104b00000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, 0x0}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000383c944db9ba31081b699df6850dfc57d74fd66225fe77b405d411e6dc1a033e5cd4415c12d219301bc1f45167aaa866666d0d4ad39625b082"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r10}, 0x38)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x408d0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000fef7ffaa60c1e6f9bac9f17f3f07010000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
accept(r9, &(0x7f0000000bc0)=@ethernet={0x0, @local}, &(0x7f00000005c0)=0xdc)

2.183556143s ago: executing program 3 (id=2582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet(0x2, 0x3, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r11, 0x0, &(0x7f0000001700)=""/4096}, 0x20)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r12)
socket$unix(0x1, 0x5, 0x0)

2.063132561s ago: executing program 0 (id=2584):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x2d, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7, 0x6, 0x5c13}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000f903"], 0x28}}, 0x0) (async, rerun: 64)
r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xb, 0x6, @remote}, 0x14) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGROWFSDATA(r5, 0x4010586e, &(0x7f00000002c0)={0x1, 0x3}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$inet(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x27c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9619}, @TIPC_NLA_NODE_ID={0x29, 0x3, "b9b3a5f2e5e539f3e96cb49b308666f7b92f34d0db3d0ebc396fe915a38f4d6d49cfef35df"}, @TIPC_NLA_NODE_ID={0xcb, 0x3, "edfc9c2cd348ad2917d61ee0c7bd74c580add9af96554c59f694801b0af08ced908ffef6d7bf9e0b91a7771110a8ddf556b13e6d2d416401d4297fff1396129adf2fb6a75a51a795afb54f948973197652d9d9d536322651af1d4ecc6d4f970f09a33bee5892a5e666e2bac1c37e46fd78cbf0adbb323133569327d5c1b351c39a54cae3f5891273df7c9644817be83228b2391fcec2083a16f910de86004fc9445aa07643e7b0e60597c499f7a2cb018c7834eaae052580cc558c12e8de94ed3c4ef5f26bb5e7"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2b1e82a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdf}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x53}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffe3f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xb}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8811}, 0x4048804) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x17c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14c, 0x2, [@TCA_BASIC_ACT={0x148, 0x3, [@m_nat={0x144, 0x1, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0x8, 0x3}, @private=0xa010102, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x5, 0xffffffffffffffff, 0x4, 0xb}, @loopback, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xe, 0x8, 0x1, 0xaca33a74}, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, 0xff000000, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x7fd, 0x3, 0x10000, 0xa0dc}, @rand_addr=0x64010102, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7d4, 0x40, 0x10000000, 0x1, 0x7}, @remote, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x75e6, 0x7, 0xfffffffffffffffc, 0x1, 0x2}, @broadcast, @multicast2, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x17c}}, 0x0) (async)
write$tun(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0x20) (async)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48010}, 0x48000) (async)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

2.007659022s ago: executing program 1 (id=2585):
r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170fd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x2, 0x2, 0xfffffffe, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)

1.767324394s ago: executing program 4 (id=2587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x6c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xfe}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x6c}}, 0x440088c4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000400)=0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=r3, 0x31, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000300), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
recvmsg(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000013c0)=""/19, 0x13}, {&(0x7f0000001700)=""/7, 0x7}, {&(0x7f0000001740)=""/241, 0xf1}], 0x3}, 0x100)
sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x280000, 0x8000, 0xb6}}}}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x10)

1.699510954s ago: executing program 2 (id=2588):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x40004, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r4}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xd, 0x26, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xa, 0x5, 0x0, 0x5, 0x8}, @call={0x85, 0x0, 0x0, 0x30}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x9a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xffffff71)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x1d, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000280e0000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100005add67256e492c0b2663b417241530532cdb688fb0690cc4dec8717c0a98d1c035732688cae2331ef392cdeb1cb5f20e6e08d4b5bc0d0e8ed2e2fd235ed124f008f6ba0fc682d5ab7957b52117a3f9f978e2edafa6d1cb982758c1fbb511894af9d3bbe6b7e7bd1578eb4c2c073a019360f80ee6e440425dc7b34c3468", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000070000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x3a4, 0xc5, &(0x7f0000000940)=""/197, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x8, 0x9}, 0x10, r9, r4, 0x4, &(0x7f0000000a80)=[r3, r3], &(0x7f0000000ac0)=[{0x3, 0x4, 0xd, 0x8}, {0x3, 0x3, 0xe}, {0x1, 0x1, 0xc, 0x5}, {0x3, 0x5, 0x5, 0x2}]}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000005002f4ec453112517bda8c671d3cf8688860002003a00000200000000002a0000000000c52000000300000085100000fcffffff9500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x8, 0x4}, 0x10, 0x1c4db, r2, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x3, 0x1, 0x6}, {0x4, 0x2, 0xe, 0xa}], 0x10, 0x1ff}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r11, 0x0)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x3, 0x18}, 0xc)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0200000004ccedd0bada4b9fc27ec9998e0004ff070010000180000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r15=>0xffffffffffffffff})
splice(r15, 0x0, r14, 0x0, 0x10000008ebc, 0x0)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, <r17=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK    \x00'}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000b80)={<r18=>r1, 0xfffffffffffffffc, 0x1, 0x25})
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x23, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000e607000000000000070000000559fcffdbe3ffff2ba38000010000005e4c04000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000008500000066000000"], &(0x7f0000000480)='GPL\x00', 0x10001, 0xb2, &(0x7f00000005c0)=""/178, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x7, 0x9, 0xd}, 0x10, r9, r10, 0x1, &(0x7f0000000bc0)=[r11, 0x1, r12, r13, r14, r16, r17, r2, r18], &(0x7f0000000c00)=[{0x1, 0x1, 0x5, 0x6}], 0x10, 0x7}, 0x94)
r19 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r19, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_eee={0x1, 0xfffff019, 0x6, 0xd, 0x5, 0x10001, 0x401, 0x9, [0x9, 0xfffffffd]}})
sendmsg$kcm(r19, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000002c00)}, 0x20004080)

1.686157765s ago: executing program 1 (id=2589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffaf, 0x0, &(0x7f0000000000)="d172e1526b3f75c88baf73b93b7050", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2960a4ec4f4f744a2185c884a6c0aceaba4d8f20f2e4a89e1970ef09428896328d59e8520cfc813640fbc7584460f7a2e499bd935b3c3b5e051781201ab39c3852ddc70806a6222936e95b01dbed98030e7897eb7ab2ea9433ec75d9b8cb45e27dfd3225e6fe934b7d3aea56b61ae8a125701d9d7657389677f8debb39ba47015de728d944c36944e2439ed15d601fc2d5102d90bd972b7cdb1b9013dd5306644cc838a6ef773df3724eaeb84ba90225998740b2ec4e3fa131a9b103ea1a", 0xbe}, {&(0x7f00000001c0)="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", 0xff}], 0x2}, 0x44004) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001a40)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e008000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async)
shutdown(r2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e95d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a956773a90a0f4e62d86d00000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00f"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r5) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c0000000201"], 0x20}, 0x4000004) (async)
write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xfe33)

1.681379207s ago: executing program 3 (id=2590):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0xe97b44310876ac03)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000130a010100000000002ead136c6b98916a6f2cd00002007379903000000000090001000f000a00c9444979edba4b5e000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000010)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="2f2b713f069559771b480701", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000680)="b9ff03076804268c989e14f0885fa847e089021416e0885a6218be5aa3af8e40009fa799", 0x0, 0x400, 0x60000000, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e45", 0x10}], 0x3}, 0x0)

1.558446949s ago: executing program 0 (id=2591):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000002c0))
socket$inet(0x2, 0xa, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
accept$alg(r0, 0x0, 0x0)

1.468416177s ago: executing program 4 (id=2592):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = epoll_create(0xb0e)
epoll_pwait(r2, 0x0, 0x0, 0x10005, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001c00000829bd7000fedbdf25ff0a001000ac921c2f01000000eea400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x200cc0c5, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@int=0xfffffffe, 0x4)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x90}, 0x1, 0x7}, 0x0)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'macsec0\x00', {0x1}, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)

1.467070731s ago: executing program 1 (id=2593):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = accept(r0, 0x0, &(0x7f0000000040))
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x2000024, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r2=>0x0, 0x8000, 0x20, 0x8, 0xa9ec, {{0x3c, 0x4, 0x1, 0x27, 0xf0, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x35, [@private=0xa010102, @broadcast, @loopback, @local, @private=0xa010102, @loopback, @private=0xa010102]}, @end, @lsrr={0x83, 0x7, 0xdb, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x54, 0x5f, 0x1, 0x3, [{@multicast2, 0x60000}, {@loopback, 0x1}, {@local, 0x7f}, {@empty, 0x8001}, {@empty, 0xef4}, {@empty, 0x4818}, {@empty, 0x4}, {@broadcast, 0x401}, {@broadcast, 0xf850}, {@empty, 0x5}]}, @generic={0x89, 0x3, "df"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0x8, [{@multicast1}, {@remote, 0x100}, {@multicast2, 0x7}, {@rand_addr=0x64010100, 0xe1c4}]}, @rr={0x7, 0x7, 0x53, [@private=0xa010102]}, @timestamp={0x44, 0x1c, 0x2a, 0x0, 0x1, [0x8, 0xffff, 0x4, 0x80000000, 0x5, 0x5]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x2, [0x5, 0x1, 0x101]}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r2})
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280))
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ec}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c7e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8094)
setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000540)=0xb1, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000580)={0x3, 'erspan0\x00', {}, 0x4})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'gre0\x00', <r6=>r2, 0x8000, 0x8000, 0x7, 0xf4a9, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}]}}}}})
bind$xdp(r1, &(0x7f0000000640)={0x2c, 0x2, r6, 0x4}, 0x10)
setsockopt$packet_int(r1, 0x107, 0x5, &(0x7f0000000680)=0xf, 0x4)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf8, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6912}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#@!\xd9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe860}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000008c0)={<r8=>0x0, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x6, 0x5}, &(0x7f0000000980)=0x90)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000009c0)={r8, 0x7, 0x70, 0xfff}, 0x10)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={<r9=>0x0, @remote, @empty}, &(0x7f0000000a40)=0xc)
r10 = socket(0x28, 0x6, 0x4)
socket$packet(0x11, 0x3, 0x300)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000a80)={0x2, 0x9, 0xd2cc, 0x2}, 0x8)
clock_gettime(0x0, &(0x7f0000000b00)={<r11=>0x0, <r12=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x1d, r9}, 0x10, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6, 0x11, 0x8, {0x0, 0xea60}, {r11, r12/1000+60000}, {0x3}, 0x1, @can={{0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "1f57044caea94c26"}}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x2000a800)

1.439889585s ago: executing program 3 (id=2594):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c000100240001"], 0x5c}, 0x1, 0xf000}, 0x0)
recvmsg$kcm(r2, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x41)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140)=0xa, 0x63)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x2, @loopback}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25070000000c01018024000280080004000100008008000400880000000800010016000000080001000e000000080003000900000008000300060000001000010069623a6970365f76746930000d0001007564703a73797a30000000002c0004001400010002004e21ac14143d00000000000000001400020002004e217f000001000000000000000038000400200001000a004e220000000320010000000000000000000000000001ff0000001400020002004e21e00000010000000000000000170001006574683a6261746164c10d114fe4f5e0cc512db3805710765f736c6176655f300000380004001400010002004e220a0101010000000000000000200002000a004e23004b796b19862aabcc8f107db832eacc000009ff0200000000000000000000000000010100000058000580080001006574680034000280080001001e0000000800040039830000080002007600000008000100200000000800030004000000080004000a0000000800010075647000070001006962000008000100756470002c0007800c000400090000000000000008000200060000000c00030000080000000000000800010005000000140002800800"], 0x1b8}, 0x1, 0x0, 0x0, 0x4008042}, 0x800)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000240)=""/43, &(0x7f0000000280)=0x2b)
socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000016000/0x2000)=nil, 0x2000, 0x0, 0x810, r1, 0xe44e3000)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000340)={0x2, 0xff, 0x8000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80}, 0x6)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0xfd)
ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000200))
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "0b18be865dadb11e", "49e9cae38857cd44cbb5f8554615a6af", "e9410d78", "ac84ed5aa7531413"}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4)

1.396473331s ago: executing program 0 (id=2595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
close(0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x60}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080002400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0)

1.263837934s ago: executing program 1 (id=2596):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x4, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be", &(0x7f0000001a40), 0x1000009, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r5}, 0x38)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r1}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a37}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0x4, 0x5, 0x8, 0x6, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000740)=""/226, 0x41000, 0x18, '\x00', r3, 0x18, r1, 0x8, &(0x7f0000000840)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x1, 0x9, 0x9}, 0x10, 0x5ba4, r0, 0x4, &(0x7f0000000900)=[r6], &(0x7f0000000940)=[{0x5, 0x5, 0x6, 0x6}, {0x0, 0x4, 0x7, 0xa}, {0x1, 0x4, 0xb, 0xa}, {0x0, 0x2, 0x1, 0x3}], 0x10, 0x7}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x470bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24004000)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@delchain={0x2c, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x25, 0x10, @void}, 0x10)

1.230440681s ago: executing program 0 (id=2597):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x4004000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7105020001"], 0x13)
close(r1)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5, 0x7fff, 0x1, 0xffffffffffffffff, 0x7ff, '\x00', r5, r0, 0x1, 0x5, 0x5, 0x5}, 0x50)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

917.577224ms ago: executing program 3 (id=2598):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000004c0)=@xdp={0x2c, 0xa, 0x0, 0x15}, 0x80, 0x0}, 0x400c040) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x4, 0x10}, 0x28) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x800, 0x70bd23, 0xffffffff, {0xa, 0x14, 0x14, 0x40, 0x1, 0x0, 0x0, 0x5, 0x1}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048854}, 0x4004044)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044815}, 0x20004004) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$kcm(0x10, 0x2, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8073}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108)

868.492567ms ago: executing program 4 (id=2599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

797.930738ms ago: executing program 2 (id=2600):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0xfffc, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

796.884504ms ago: executing program 4 (id=2601):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {0x0, 0xd}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048800}, 0x40004)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004100070130bd7000fed5df25027c000004002d800c00ed7f08001d00", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0xc000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r5=>0x0, 0x6}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x5b23, 0x7, 0x2, 0xfffffffd, 0xd5b, 0x9, 0x78d9, 0x6a, r5}, &(0x7f0000000140)=0x20)

681.645017ms ago: executing program 2 (id=2602):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000280)=0x80)
sendmsg$kcm(r1, &(0x7f0000001c40)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="442dfabf6094f04fe25a2dd5c347ce34a2600ad4686411d164d5222d6c5bf7034d0754d81be7fe4d71029c8b557f6d8b0d0697c417a9e608ff72da9f1bddc183c221913b8e693748a761eb7ad74f2f74acd28f4532011bd88ed606cc3e7a9f7c1b8841a34d13e962283ed25f0c01a7137564b4e6ffd79cf39cc9b4cc10da31b72d8ce0", 0x83}], 0x1, &(0x7f0000000980)=[{0xf8, 0x118, 0x197f9a5, "d56f7cafd82e89bf999ccfade632d2a307fefabefec58c088b59d6fe75bfa8590f9e8b465c82dac68df103a387cbb4ecbc3fdafa79bfbf3b5da522c0f5d38b3d1ad152b91e7f2db7ade5495f3083d0a6f102335442572a75a9a754f1d5dba23fe6c81f36fa79999d28599696ede70fa488ab3eb677b35cb30e7a3cc561990da1e6b9863a4bfb84305f7fb44f2a2844b1681d054f0067bde54146b982e82b145b68e717dce5116d5498124faa4b9afd0042b2b2b632a17d285f33850a8d9bd3d92ace2d0433faabbe159b27d93279cf3f9ce35fd756b07a73266b91bbc2acee5030e6"}, {0x88, 0x119, 0xfffffff8, "8e2bb2043f10bfe479ef33bdab6b535f9f86f530ffa54258c6cf3587a3585722d08e86ee060508ec0b4ad0ed1f911672ba6f017dde1e5eb1db4a648a85882d884c94a98bdce06135774baac082aff4b448609821e665f6ea43077d63253b9b1c1ef590f73f251b69bacf4fc950035160118c00f9fd"}, {0xf0, 0x11, 0x8e, "ff14171cda424fce6ff2b48425e5300a79a164063ea4446cd1d79220ea493e8c39b637219413e3e337825677b0d10d8e9cd98bd0161e639d325e52b3562a0bdab155e9e5f471d0178f4378b7d8340a0f646a972eecb143fa01945be5b7ca38875a336d1b1d0f5e61d06e05e4cfca3a3c4e38a3aeb4c3ac79dee6ce1d6edec216850a382f3405b86b1557808d0423ac0d52435bea471031be180a107e2e2e75f1db155e68484da34341a685b6170529b115c0870adf94dff3d7894b8d9bad9fb35ebc156641479c843a56663298fd913c32938028cf7c2ae9435b84f13add80"}, {0x30, 0x103, 0x8fb, "a4dfc72d01cb0073effe4af37969ec98fdea8332b594fef4bbdf29"}, {0x1010, 0x88, 0x5, "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"}], 0x12b0}, 0x28010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xb4}}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="dae20000", @ANYRES16, @ANYBLOB="01e92cbd70000000000036000000080073000000000008000300030000000e0001006e6574646d7673696d0000000e0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x20042840)

631.48747ms ago: executing program 4 (id=2603):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x40000000, @local, 0x9}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0xff, 0x8, 0x7f, 0x0, 0x7}, 0x14) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e14060002800000129400"/46, 0x2e}], 0x1}, 0x0)

557.232078ms ago: executing program 2 (id=2604):
socket$nl_generic(0x10, 0x3, 0x10) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776", 0x80, 0x840, 0x0, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a0101"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000780)={0x0, 0x1, 0x6, @multicast}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0xc04c5ac042866009}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

240.041603ms ago: executing program 3 (id=2605):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000002c0))
socket$inet(0x2, 0xa, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
accept$alg(r0, 0x0, 0x0)

167.897569ms ago: executing program 2 (id=2606):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "4f120bef7ce6b2cd", "9f3575518fc82b7dcd6a3f44fad87b80", "75b3583d", "25c0ba5d75f7db36"}, 0x28)

120.128364ms ago: executing program 0 (id=2607):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', <r2=>0x0, 0x700, 0x8, 0x8, 0x3, {{0x27, 0x4, 0x3, 0x1, 0x9c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x5f, 0x3, 0x9, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x3}, {@private=0xa010101, 0x7}, {@loopback, 0x2a}]}, @rr={0x7, 0x27, 0x65, [@loopback, @remote, @remote, @multicast1, @multicast1, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @timestamp_addr={0x44, 0x34, 0x3a, 0x1, 0x0, [{@loopback, 0xa}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xffffffff}, {@empty, 0x974b}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80}, {@rand_addr=0x64010102, 0x4c3}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0}) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x32, 0x1, {0x5, 0x6}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x2}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r1, 0x700, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb6e}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4011}, 0x4800)

0s ago: executing program 2 (id=2608):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="3f9c0ef1d465f1ed0dfc03b12659a2c93a6790783bbe4bd4d7cdf53231d3093d89874d1e6d19ea182d49edb7d6454eb6a7bb15fbbe77816610312468fe98deebf9d086aa95fffa65e31133db868513e88259f94d25ab616f3754b395fd4d69731a07f729561bf9", 0x67}, {&(0x7f0000000140)="44f93ab52c09a7209fc24796da9ce4c7706b97706747c41cd3447a701820fdaa4fce5974b53dffdb7881bc250cb59f55f2814b78f31cd94fd5b44d90f997b5b9de9e9d917575bf4e14c7aaace1f7488f61b6b2996b483db5216c79e0da6b4bb6aee3dc00fd969f111243a4e201952bf4673e0f0c69f9dc524ce78566213406e211d5e99a18e042157964bf20040b6daad6", 0x91}, {&(0x7f0000000200)="9c7972418436079da678cc7f3ec2d3b7091f9af2b8375c2f72e26af0f3798981623defe0d3b481396e4259a925993e741d937dd41aa7ef115554332dbe9986b39dd28c5c", 0x44}, {&(0x7f0000000280)="fdd117f041ad7c1c3cbf3e085fe8b79d818e9b89310f84e4bc4de9289497c9722c4d4edb665ad68a", 0x28}], 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="4000ff8d00"})

kernel console output (not intermixed with test programs):

total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.589109][T10631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.598773][T10631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.609454][T10631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.619567][T10631] 44559 total pagecache pages
[  234.624310][T10631] 0 pages in swap cache
[  234.628882][T10631] Free swap  = 124996kB
[  234.633407][T10631] Total swap = 124996kB
[  234.638981][T10631] 2097051 pages RAM
[  234.642920][T10631] 0 pages HighMem/MovableOnly
[  234.648237][T10631] 428223 pages reserved
[  234.652562][T10631] 0 pages cma reserved
[  234.652568][T10637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.708021][T10637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.718607][T10637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.757727][T10637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.768733][T10637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.789164][   T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.904933][T10662] bridge0: port 4(wlan1) entered blocking state
[  234.934736][T10662] bridge0: port 4(wlan1) entered disabled state
[  234.962487][T10662] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  235.001806][T10662] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  235.035214][T10674] gtp1: entered promiscuous mode
[  235.040195][T10674] gtp1: entered allmulticast mode
[  235.089946][   T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.099853][   T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.134945][T10676] netlink: 'syz.4.1259': attribute type 2 has an invalid length.
[  235.153359][T10676] netlink: 'syz.4.1259': attribute type 2 has an invalid length.
[  235.235622][   T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.252154][   T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.353682][   T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.386972][   T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.501251][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'.
[  235.601080][T10689] trusted_key: syz.1.1264 sent an empty control message without MSG_MORE.
[  235.827358][T10705] netlink: 'syz.4.1268': attribute type 1 has an invalid length.
[  236.050533][T10705] 8021q: adding VLAN 0 to HW filter on device bond8
[  236.126060][T10709] bond8: (slave gretap2): Enslaving as a backup interface with an up link
[  236.341891][T10723] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1272'.
[  236.403301][T10723] syzkaller0: entered promiscuous mode
[  236.421655][T10723] syzkaller0: entered allmulticast mode
[  236.511593][T10723] netlink: 'syz.3.1272': attribute type 1 has an invalid length.
[  236.561308][T10731] IPVS: Error connecting to the multicast addr
[  236.703222][T10733] netlink: 'syz.2.1276': attribute type 1 has an invalid length.
[  236.825330][T10733] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  236.929641][T10747] bridge5: entered promiscuous mode
[  236.997095][T10747] bridge5: entered allmulticast mode
[  237.029242][T10739] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.066800][T10757] __nla_validate_parse: 3 callbacks suppressed
[  237.066821][T10757] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1279'.
[  237.378756][T10769] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1284'.
[  237.400508][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'.
[  237.619890][T10767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'.
[  238.482649][T10823] erspan0: entered promiscuous mode
[  238.546169][T10822] erspan0: left promiscuous mode
[  238.993125][T10856] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1308'.
[  239.017875][T10859] siw: device registration error -23
[  239.044128][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'.
[  239.061602][T10860] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1308'.
[  239.286983][T10866] dvmrp0: entered allmulticast mode
[  239.664383][T10882] syzkaller0: entered promiscuous mode
[  239.670523][T10882] syzkaller0: entered allmulticast mode
[  241.793074][T10847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.944265][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1317'.
[  241.993632][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  242.211396][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1322'.
[  242.250798][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'.
[  242.255431][T10912] netlink: 'syz.4.1324': attribute type 21 has an invalid length.
[  242.274287][T10910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1323'.
[  242.293531][T10912] netlink: 'syz.4.1324': attribute type 3 has an invalid length.
[  242.304438][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'.
[  242.308602][T10915] netlink: 'syz.3.1321': attribute type 13 has an invalid length.
[  242.327313][T10915] netlink: 'syz.3.1321': attribute type 17 has an invalid length.
[  242.338890][T10912] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1324'.
[  242.354043][T10910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1323'.
[  242.379528][T10915] sit0: left promiscuous mode
[  242.424396][T10915] net_ratelimit: 3197 callbacks suppressed
[  242.424418][T10915] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  242.453166][T10906] netlink: 'syz.3.1321': attribute type 13 has an invalid length.
[  242.462932][T10919] tun0: tun_chr_ioctl cmd 1074025675
[  242.501579][T10919] tun0: persist enabled
[  242.510929][T10906] netlink: 'syz.3.1321': attribute type 17 has an invalid length.
[  242.570826][T10906] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  242.591946][T10921] tun0: tun_chr_ioctl cmd 1074025675
[  242.605250][T10921] tun0: persist enabled
[  242.963337][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'.
[  242.996071][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  243.009029][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1328'.
[  243.032488][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'.
[  243.073193][T10949] netlink: 'syz.4.1330': attribute type 13 has an invalid length.
[  243.103069][T10949] netlink: 'syz.4.1330': attribute type 17 has an invalid length.
[  243.162812][T10953] IPv6: addrconf: prefix option has invalid lifetime
[  243.189288][T10949] gretap0: left promiscuous mode
[  243.341904][T10949] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.352325][T10949] 8021q: adding VLAN 0 to HW filter on device team0
[  243.370607][T10949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.453645][T10949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.487880][T10949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.526500][T10949] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  243.585401][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.592674][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.622023][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.629316][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.814178][T10961] syzkaller0: entered promiscuous mode
[  243.833686][T10961] syzkaller0: entered allmulticast mode
[  243.949555][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.950342][T10997] syzkaller1: entered promiscuous mode
[  244.962157][T10997] syzkaller1: entered allmulticast mode
[  245.639227][T11026] team0: Device ipvlan2 failed to register rx_handler
[  245.696052][T11034] ipip0: entered promiscuous mode
[  245.899373][T11048] sctp: [Deprecated]: syz.3.1355 (pid 11048) Use of int in maxseg socket option.
[  245.899373][T11048] Use struct sctp_assoc_value instead
[  246.136245][T11059] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  246.136245][T11059] Please contact the netfilter-devel mailing list or update your nftables rules.
[  247.368092][T11124] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  247.380607][T11123] __nla_validate_parse: 7 callbacks suppressed
[  247.380626][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  247.408529][T11125] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  247.624842][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  247.656168][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  247.702518][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  247.714447][T11134] openvswitch: netlink: Message has 13072 unknown bytes.
[  247.740208][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  247.754757][T11134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.786796][T11135] netlink: 'syz.1.1382': attribute type 13 has an invalid length.
[  247.809615][T11135] netlink: 'syz.1.1382': attribute type 17 has an invalid length.
[  247.886790][T11135] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.919601][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.985007][T11152] sctp: [Deprecated]: syz.0.1385 (pid 11152) Use of int in max_burst socket option.
[  247.985007][T11152] Use struct sctp_assoc_value instead
[  248.000592][T11153] sctp: [Deprecated]: syz.0.1385 (pid 11153) Use of int in max_burst socket option.
[  248.000592][T11153] Use struct sctp_assoc_value instead
[  248.125031][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.482523][T11135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  249.514632][T11135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.531567][T11135] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  249.567037][   T12] bridge0: port 2(veth0) entered blocking state
[  249.573456][   T12] bridge0: port 2(veth0) entered forwarding state
[  249.638728][T11168] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  250.492189][T11183] ipip1: entered promiscuous mode
[  250.509899][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1393'.
[  250.729138][T11143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.957848][T11191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1396'.
[  250.967288][T11191] netlink: 'syz.3.1396': attribute type 2 has an invalid length.
[  250.975766][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  250.985250][T11191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1396'.
[  251.000163][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'.
[  251.084474][T11190] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  251.108814][T11190] bond7 (unregistering): Released all slaves
[  251.454256][T11211] netlink: 'syz.0.1400': attribute type 13 has an invalid length.
[  251.467242][T11211] netlink: 'syz.0.1400': attribute type 17 has an invalid length.
[  251.510496][T11211] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  251.531937][T11217] netlink: 'syz.1.1401': attribute type 1 has an invalid length.
[  251.585768][T11217] 8021q: adding VLAN 0 to HW filter on device bond7
[  251.594384][T11220] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  251.639253][T11220] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  252.012316][T11237] netlink: 'syz.3.1408': attribute type 13 has an invalid length.
[  252.030575][T11237] netlink: 'syz.3.1408': attribute type 17 has an invalid length.
[  252.104665][T11237] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  252.130537][T11251] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[  252.155786][T11248] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004
[  252.171561][T11248] IPVS: set_ctl: invalid protocol: 48 172.20.20.170:20000
[  252.266846][T11257] x_tables: duplicate underflow at hook 1
[  252.356946][T11255] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  252.416302][T11263] __nla_validate_parse: 9 callbacks suppressed
[  252.416324][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'.
[  252.434126][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'.
[  252.449835][T11255] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  252.464968][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'.
[  252.482961][T11261] syzkaller0: entered promiscuous mode
[  252.497638][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'.
[  252.513419][T11261] syzkaller0: entered allmulticast mode
[  252.537923][T11268] netlink: 'syz.3.1416': attribute type 13 has an invalid length.
[  252.559893][T11268] netlink: 'syz.3.1416': attribute type 17 has an invalid length.
[  252.672784][T11268] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  252.896619][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1421'.
[  253.029351][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  253.374251][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'.
[  253.402960][T11320] netlink: 'syz.3.1430': attribute type 11 has an invalid length.
[  253.478954][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'.
[  253.500274][T11320] netlink: 'syz.3.1430': attribute type 11 has an invalid length.
[  253.730450][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'.
[  253.764006][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'.
[  253.780415][T11328] netlink: 'syz.2.1432': attribute type 13 has an invalid length.
[  253.789115][T11328] netlink: 'syz.2.1432': attribute type 17 has an invalid length.
[  253.857548][T11328] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  254.044188][T11341] netlink: 'syz.1.1437': attribute type 2 has an invalid length.
[  254.052649][T11341] netlink: 'syz.1.1437': attribute type 8 has an invalid length.
[  254.073190][T11341] netlink: 'syz.1.1437': attribute type 2 has an invalid length.
[  254.091209][T11341] netlink: 'syz.1.1437': attribute type 8 has an invalid length.
[  254.689960][T11384] ip6t_srh: unknown srh match flags  4000
[  254.706685][T11384] ip6t_srh: unknown srh match flags  4000
[  254.904756][T11390] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  255.082673][T11392] lo speed is unknown, defaulting to 1000
[  255.089134][T11392] lo speed is unknown, defaulting to 1000
[  255.096215][T11392] lo speed is unknown, defaulting to 1000
[  255.107686][T11392] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  255.122205][T11392] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  255.141111][T11392] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  255.162841][T11392] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  255.200386][T11392] lo speed is unknown, defaulting to 1000
[  255.211839][T11392] lo speed is unknown, defaulting to 1000
[  255.220215][T11392] lo speed is unknown, defaulting to 1000
[  255.231740][T11392] lo speed is unknown, defaulting to 1000
[  255.249452][T11392] lo speed is unknown, defaulting to 1000
[  255.270250][T11395] lo speed is unknown, defaulting to 1000
[  255.511450][T11405] 8021q: adding VLAN 0 to HW filter on device bond5
[  255.613047][T11409] syzkaller0: entered promiscuous mode
[  255.619133][T11409] syzkaller0: entered allmulticast mode
[  255.648383][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  256.926442][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  257.152747][T11347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  257.379483][   T30] audit: type=1107 audit(1785419371.360:4): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  257.501694][T11422] __nla_validate_parse: 10 callbacks suppressed
[  257.501718][T11422] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1461'.
[  257.726803][T11433] SET target dimension over the limit!
[  257.965163][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  257.987437][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'.
[  258.024150][T11445] validate_nla: 2 callbacks suppressed
[  258.024172][T11445] netlink: 'syz.2.1467': attribute type 13 has an invalid length.
[  258.082196][T11445] netlink: 'syz.2.1467': attribute type 17 has an invalid length.
[  258.114811][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'.
[  258.137557][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1468'.
[  258.139809][T11443] netlink: 'syz.2.1467': attribute type 13 has an invalid length.
[  258.154867][T11443] netlink: 'syz.2.1467': attribute type 17 has an invalid length.
[  258.188158][T11445] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  258.292192][T11443] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  258.540995][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'.
[  258.981790][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'.
[  258.991561][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'.
[  259.043860][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'.
[  259.276873][T11489] bond4: entered promiscuous mode
[  259.287834][   T57] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  259.288578][T11489] 8021q: adding VLAN 0 to HW filter on device bond4
[  259.411659][T11497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.480281][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'.
[  259.543579][T11524] netlink: 'syz.3.1484': attribute type 13 has an invalid length.
[  259.578263][T11524] netlink: 'syz.3.1484': attribute type 17 has an invalid length.
[  259.599317][T11522] netlink: 'syz.3.1484': attribute type 13 has an invalid length.
[  259.609637][T11522] netlink: 'syz.3.1484': attribute type 17 has an invalid length.
[  259.642960][T11524] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  259.767659][T11522] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  260.368931][T11551] lo speed is unknown, defaulting to 1000
[  260.449789][T11559] syzkaller0: entered promiscuous mode
[  260.469972][T11559] syzkaller0: entered allmulticast mode
[  260.534543][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.541896][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.551517][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.558838][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.566141][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.573447][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.580770][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  260.588083][T11560] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  261.010513][T11572] netlink: 'syz.0.1498': attribute type 1 has an invalid length.
[  261.242263][T11580] netlink: 'syz.3.1499': attribute type 13 has an invalid length.
[  262.172460][T11620] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  262.366027][T11636] Bluetooth: MGMT ver 1.23
[  262.440319][ T7231] lo speed is unknown, defaulting to 1000
[  262.486337][T11644] 8021q: adding VLAN 0 to HW filter on device bond4
[  262.516062][T11645] bond4: (slave veth3): Enslaving as an active interface with a down link
[  262.591475][T11655] __nla_validate_parse: 9 callbacks suppressed
[  262.591489][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'.
[  264.931114][T11614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.188355][T11679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1529'.
[  265.319740][T11688] validate_nla: 6 callbacks suppressed
[  265.319762][T11688] netlink: 'syz.1.1529': attribute type 1 has an invalid length.
[  265.339135][T11685] netlink: 'syz.2.1532': attribute type 11 has an invalid length.
[  265.358365][T11685] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1532'.
[  265.371900][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  265.765749][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  265.793702][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'.
[  265.806408][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  265.824233][T11710] netlink: 'syz.1.1538': attribute type 13 has an invalid length.
[  265.847186][T11710] netlink: 'syz.1.1538': attribute type 17 has an invalid length.
[  265.857260][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'.
[  265.879689][T11710] net_ratelimit: 3196 callbacks suppressed
[  265.879713][T11710] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  265.994129][T11718] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1542'.
[  266.005227][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.019547][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  266.862362][T11735] syzkaller0: entered promiscuous mode
[  266.869699][T11735] syzkaller0: entered allmulticast mode
[  268.762914][T11705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  268.989056][T11748] __nla_validate_parse: 1 callbacks suppressed
[  268.989077][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'.
[  269.269617][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'.
[  269.298432][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[  269.334032][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'.
[  269.379768][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[  269.392140][T11764] netlink: 'syz.1.1552': attribute type 13 has an invalid length.
[  269.426336][T11764] netlink: 'syz.1.1552': attribute type 17 has an invalid length.
[  269.511918][T11764] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  269.624184][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1558'.
[  269.789732][T11783] syzkaller0: entered promiscuous mode
[  269.810389][T11783] syzkaller0: entered allmulticast mode
[  270.182046][T11794] rdma_op ffff88801c3031f0 conn xmit_rdma 0000000000000000
[  271.006255][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  272.511901][T11770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.617179][T11804] syzkaller1: entered promiscuous mode
[  272.623052][T11804] syzkaller1: entered allmulticast mode
[  272.739065][T11808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1568'.
[  272.828498][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'.
[  272.931685][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'.
[  272.941912][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'.
[  272.961895][T11822] netlink: 'syz.4.1570': attribute type 13 has an invalid length.
[  272.978730][T11822] netlink: 'syz.4.1570': attribute type 17 has an invalid length.
[  273.013757][T11822] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  273.475228][T11839] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  273.531698][T11830] syzkaller0: entered promiscuous mode
[  273.538425][T11830] syzkaller0: entered allmulticast mode
[  273.556272][T11845] syz_tun: left allmulticast mode
[  273.565169][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.581273][T11839] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  273.595639][T11845] netlink: 'syz.4.1577': attribute type 2 has an invalid length.
[  273.667456][T11851] syzkaller0: entered promiscuous mode
[  273.675549][T11851] syzkaller0: entered allmulticast mode
[  273.957125][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  273.964561][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  273.971917][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  273.979238][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  273.986542][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  273.993789][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  274.001135][T11844] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  275.922316][T11876] __nla_validate_parse: 2 callbacks suppressed
[  275.922337][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1583'.
[  275.981334][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'.
[  276.001362][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'.
[  276.021789][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'.
[  276.040713][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'.
[  276.092537][T11876] netlink: 'syz.4.1583': attribute type 13 has an invalid length.
[  276.100543][T11876] netlink: 'syz.4.1583': attribute type 17 has an invalid length.
[  276.139201][T11876] net_ratelimit: 3194 callbacks suppressed
[  276.139223][T11876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  276.169853][T11883] can: request_module (can-proto-0) failed.
[  276.179656][T11886] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.796481][T11864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  277.028879][T11891] bond0: (slave bridge0): Releasing backup interface
[  277.119109][T11891] bond2: (slave veth0_to_bond): Releasing active interface
[  277.156364][T11891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  277.191164][T11898] team0: No ports can be present during mode change
[  277.627397][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'.
[  277.727542][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1598'.
[  277.759825][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'.
[  277.776668][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'.
[  277.805914][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'.
[  277.832513][T11943] netlink: 'syz.4.1598': attribute type 13 has an invalid length.
[  277.848860][T11943] netlink: 'syz.4.1598': attribute type 17 has an invalid length.
[  277.878979][T11943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  278.509759][T11985] netlink: 'syz.1.1611': attribute type 1 has an invalid length.
[  278.722188][T11989] netlink: 'syz.4.1612': attribute type 13 has an invalid length.
[  278.740897][T11989] netlink: 'syz.4.1612': attribute type 17 has an invalid length.
[  278.747257][T11993] ip6gre1: entered promiscuous mode
[  278.754315][T11993] ip6gre1: entered allmulticast mode
[  278.832092][T11989] veth1_macvtap: left promiscuous mode
[  278.852585][T11989] veth0_macvtap: left promiscuous mode
[  278.870550][T11989] veth0_macvtap: entered promiscuous mode
[  278.894716][T11989] veth1_macvtap: entered promiscuous mode
[  278.928538][T11989] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  278.947558][T11989] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  278.966184][T11989] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  278.984578][T11989] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.008370][T11989] 8021q: adding VLAN 0 to HW filter on device bond1
[  279.028779][T11989] 8021q: adding VLAN 0 to HW filter on device bond2
[  279.057935][T11989] 8021q: adding VLAN 0 to HW filter on device bond3
[  279.076344][T11989] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.099615][T11989] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  279.117236][ T8627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  279.132486][ T8627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  279.145856][ T7231] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  279.196149][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.205885][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.233240][ T8627] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  279.267652][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.280771][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.725194][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  279.900060][T12043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.969997][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.142070][T12061] batadv_slave_1: entered promiscuous mode
[  280.241709][T12061] syzkaller1: entered promiscuous mode
[  280.255805][T12061] syzkaller1: entered allmulticast mode
[  280.534088][T12060] batadv_slave_1: left promiscuous mode
[  280.698029][T12085] Bluetooth: MGMT ver 1.23
[  280.716104][T12089] openvswitch: netlink: IP tunnel dst address not specified
[  280.723551][T12089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.441800][T12122] netlink: 'syz.4.1645': attribute type 69 has an invalid length.
[  282.007792][T12164] team_slave_1: entered allmulticast mode
[  282.424159][T12175] netlink: 'syz.1.1659': attribute type 12 has an invalid length.
[  282.437542][T12175] __nla_validate_parse: 13 callbacks suppressed
[  282.437564][T12175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1659'.
[  282.513827][T12176] ip6gre1: entered allmulticast mode
[  282.530071][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1659'.
[  282.552599][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1659'.
[  282.638336][T12182] geneve3: entered promiscuous mode
[  282.744701][T12183] netlink: 'syz.0.1660': attribute type 3 has an invalid length.
[  282.752593][T12183] netlink: 'syz.0.1660': attribute type 1 has an invalid length.
[  282.785391][T12183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1660'.
[  283.308157][T12202] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1666'.
[  283.374011][   T30] audit: type=1804 audit(1785419397.350:5): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1667" name="/newroot/335/cgroup.controllers" dev="tmpfs" ino=1762 res=1 errno=0
[  283.399782][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  283.409272][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  283.446363][   T30] audit: type=1800 audit(1785419397.400:6): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1667" name="cgroup.controllers" dev="tmpfs" ino=1762 res=0 errno=0
[  283.485160][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  283.693039][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1669'.
[  283.742106][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1670'.
[  283.757215][T12221] netlink: 'syz.2.1670': attribute type 3 has an invalid length.
[  283.785580][T12228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1669'.
[  283.887398][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1671'.
[  284.501245][T12267] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  284.806995][T12269] bond5: (slave geneve3): Opening slave failed
[  284.880367][T12273] 8021q: adding VLAN 0 to HW filter on device bond5
[  285.351262][T12294] netlink: 'syz.3.1689': attribute type 23 has an invalid length.
[  285.507457][T12300] dummy0: entered allmulticast mode
[  285.543855][T12299] dummy0: left allmulticast mode
[  286.336395][T12327] tipc: Enabled bearer <eth:gre0>, priority 25
[  287.460804][ T5743] tipc: Node number set to 2911937207
[  288.024326][T12374] tipc: New replicast peer: 255.255.255.255
[  288.040130][T12374] tipc: Enabled bearer <udp:syz2>, priority 10
[  288.046627][T12372] xt_hashlimit: size too large, truncated to 1048576
[  288.283860][T12385] __nla_validate_parse: 6 callbacks suppressed
[  288.283883][T12385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1712'.
[  288.337226][T12385] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1712'.
[  288.407283][T12385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1712'.
[  288.453941][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'.
[  288.698453][T12394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1715'.
[  288.739395][T12396] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  288.919107][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1720'.
[  288.948321][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1720'.
[  290.260947][T12436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1729'.
[  290.464956][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'.
[  290.475994][T12445] siw: device registration error -23
[  290.645765][T12447] bridge5: entered allmulticast mode
[  290.735275][T12452] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  290.845638][  T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.022880][T12462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.150167][T12467] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1739'.
[  291.262228][T12468] nbd1: detected capacity change from 0 to 63
[  291.274043][T12467] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.281539][T12467] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.302447][T12480] netlink: 'syz.3.1740': attribute type 1 has an invalid length.
[  291.344592][T12473] block nbd1: NBD_DISCONNECT
[  291.359166][T12473] block nbd1: Disconnected due to user request.
[  291.401204][T12484] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  291.409122][T12484] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  291.419636][T12473] block nbd1: shutting down sockets
[  291.441602][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.451524][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  291.460273][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.469892][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  291.492174][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.493079][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.501194][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.510800][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  291.522616][T12484] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  291.526599][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.526670][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  291.554187][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.554234][T12484] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  291.575317][ T1635] Buffer I/O error on dev nbd1, logical block 0, async page read
[  291.585109][ T1635] Buffer I/O error on dev nbd1, logical block 1, async page read
[  291.592922][ T1635] Buffer I/O error on dev nbd1, logical block 2, async page read
[  291.601029][ T1635] Buffer I/O error on dev nbd1, logical block 3, async page read
[  291.612335][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.622361][ T1635] Buffer I/O error on dev nbd1, logical block 0, async page read
[  291.631638][ T1635] Buffer I/O error on dev nbd1, logical block 1, async page read
[  291.640094][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.650931][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.661334][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.676438][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  291.688734][ T5640] ldm_validate_partition_table(): Disk read failed.
[  291.695789][T12480] 8021q: adding VLAN 0 to HW filter on device bond5
[  291.703178][ T5640] Dev nbd1: unable to read RDB block 0
[  291.710654][ T5640]  nbd1: unable to read partition table
[  291.723144][T12484] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  291.729716][T12484] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  291.738923][ T5640] ldm_validate_partition_table(): Disk read failed.
[  291.747155][ T5640] Dev nbd1: unable to read RDB block 0
[  291.747159][T12484] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  291.762220][ T5640]  nbd1: unable to read partition table
[  291.893188][T12482] bond5: (slave veth9): Enslaving as an active interface with a down link
[  292.124864][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  292.132891][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.245206][T12502] netlink: 'syz.3.1744': attribute type 3 has an invalid length.
[  292.286758][T12502] netlink: 'syz.3.1744': attribute type 4 has an invalid length.
[  292.532656][T12513] pim6reg: entered allmulticast mode
[  292.543843][T12513] pim6reg: left allmulticast mode
[  295.282691][T12504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.491335][T12540] xt_hashlimit: size too large, truncated to 1048576
[  295.791787][T12550] __nla_validate_parse: 5 callbacks suppressed
[  295.791808][T12550] netlink: 279 bytes leftover after parsing attributes in process `syz.1.1760'.
[  295.827170][T12550] veth0_to_bond: default FDB implementation only supports local addresses
[  295.857450][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1762'.
[  296.260543][T12570] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  296.293876][T12570] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  296.306286][T12570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  297.026627][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1775'.
[  297.308098][T12613] syzkaller0: entered promiscuous mode
[  297.313881][T12613] syzkaller0: entered allmulticast mode
[  297.477739][T12616] xt_hashlimit: size too large, truncated to 1048576
[  297.528326][T12618] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.708134][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'.
[  297.717160][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'.
[  297.727488][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'.
[  297.736534][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'.
[  297.799824][T12621] netlink: 'syz.1.1779': attribute type 13 has an invalid length.
[  297.808185][T12621] netlink: 'syz.1.1779': attribute type 17 has an invalid length.
[  297.829456][T12621] veth1_macvtap: left promiscuous mode
[  297.836816][T12621] veth0_macvtap: left promiscuous mode
[  297.843562][T12621] veth0_macvtap: entered promiscuous mode
[  297.852607][T12621] veth1_macvtap: entered promiscuous mode
[  297.864075][T12621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  297.873434][T12621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  297.882135][T12621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.893097][T12621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.912280][T12621] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.952594][T12621] 8021q: adding VLAN 0 to HW filter on device bond2
[  297.962505][T12621] 8021q: adding VLAN 0 to HW filter on device bond3
[  297.971039][T12621] net_ratelimit: 70 callbacks suppressed
[  297.971053][T12621] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  298.004927][  T130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.013926][  T130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.027136][  T130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.486093][  T130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  299.558301][T12585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.962655][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'.
[  300.075257][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1786'.
[  300.096147][T12650] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1788'.
[  300.312238][T12659] netlink: 'syz.1.1791': attribute type 13 has an invalid length.
[  300.336476][T12659] netlink: 'syz.1.1791': attribute type 17 has an invalid length.
[  300.446202][  T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.511358][T12659] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  300.713613][T12678] syzkaller0: entered promiscuous mode
[  300.720479][T12678] syzkaller0: entered allmulticast mode
[  302.124744][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  303.413143][T12668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  303.609772][T12690] __nla_validate_parse: 7 callbacks suppressed
[  303.609795][T12690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1799'.
[  303.706608][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'.
[  303.733704][T12697] ip6tnl1: entered allmulticast mode
[  303.819344][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'.
[  304.030174][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  304.045335][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'.
[  304.057997][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  304.082812][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'.
[  304.111935][T12718] netlink: 'syz.1.1808': attribute type 13 has an invalid length.
[  304.158317][T12718] netlink: 'syz.1.1808': attribute type 17 has an invalid length.
[  304.395750][T12718] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  304.471580][T12730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.587128][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'.
[  304.606608][T12734] netlink: 'syz.1.1814': attribute type 30 has an invalid length.
[  304.721373][T12741] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[  305.185306][T12764] bridge_slave_0: left allmulticast mode
[  305.191203][T12764] bridge_slave_0: left promiscuous mode
[  305.197641][T12764] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.200797][T12765] xt_CONNSECMARK: invalid mode: 254
[  305.320946][T12764] bridge_slave_1: left allmulticast mode
[  305.328222][T12764] bridge_slave_1: left promiscuous mode
[  305.334265][T12764] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.366266][T12764] bond0: (slave bond_slave_0): Releasing backup interface
[  305.388189][T12764] bond0: (slave bond_slave_1): Releasing backup interface
[  305.435828][T12764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.443544][T12764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.465622][T12764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.473320][T12764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.488697][T12764] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  305.496133][T12764] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  305.503170][T12764] bridge0: port 4(wlan1) entered disabled state
[  305.512634][T12764] bond1: left allmulticast mode
[  305.518179][T12764] bond1: left promiscuous mode
[  305.523347][T12764] bridge0: port 3(bond1) entered disabled state
[  305.535775][T12764] bond4: (slave veth3): Releasing active interface
[  305.547188][T12771] syzkaller0: entered promiscuous mode
[  305.558369][T12771] syzkaller0: entered allmulticast mode
[  305.718108][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'.
[  305.728234][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  305.792042][T12779] netlink: 'syz.1.1824': attribute type 13 has an invalid length.
[  305.800234][T12779] netlink: 'syz.1.1824': attribute type 17 has an invalid length.
[  305.832567][T12779] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  307.212830][T12724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  307.484962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.494672][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.535673][T12784] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.561738][T12784] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.720150][T12784] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.756549][T12784] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.093096][T12792] ipvlan0: Caught tx_queue_len zero misconfig
[  308.124954][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.226492][T12784] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.258631][T12784] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.429831][T12784] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.471809][T12784] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.519576][T12810] siw: device registration error -23
[  308.554372][T12810] ieee802154 phy0 wpan0: encryption failed: -22
[  308.764718][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  308.836032][T12814] __nla_validate_parse: 3 callbacks suppressed
[  308.836054][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  308.880982][   T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.896194][T12818] netlink: 'syz.0.1835': attribute type 13 has an invalid length.
[  308.905994][   T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.921470][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'.
[  308.940832][T12818] netlink: 'syz.0.1835': attribute type 17 has an invalid length.
[  308.955365][   T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.981858][   T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.999575][T12814] netlink: 'syz.0.1835': attribute type 13 has an invalid length.
[  309.021026][T12823] netlink: 'syz.2.1836': attribute type 1 has an invalid length.
[  309.030851][T12814] netlink: 'syz.0.1835': attribute type 17 has an invalid length.
[  309.113600][T12818] veth1_vlan: left promiscuous mode
[  309.126476][T12818] veth0_vlan: left promiscuous mode
[  309.137086][T12818] veth0_vlan: entered promiscuous mode
[  309.151367][T12818] veth1_vlan: entered promiscuous mode
[  309.162328][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'.
[  309.210360][T12818] geneve1: left promiscuous mode
[  309.224354][T12818] geneve1: left allmulticast mode
[  309.266009][T12818] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  309.404805][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  309.470579][T12814] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  309.560989][T12824] bond6: (slave geneve3): making interface the new active one
[  309.571241][T12824] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  309.594411][T12825] 8021q: adding VLAN 0 to HW filter on device bond6
[  309.840567][   T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  309.850873][   T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.861705][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.922895][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  309.934175][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  309.979934][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  310.010779][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  310.042331][   T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.053743][ T7237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.111440][   T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.424060][T12852] bond6: option ad_select: invalid value (34)
[  310.436443][T12852] bond6 (unregistering): Released all slaves
[  310.482587][T12857] syzkaller0: entered promiscuous mode
[  310.488944][T12857] syzkaller0: entered allmulticast mode
[  310.581906][T12852] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[  310.641375][T12861] syzkaller0: entered promiscuous mode
[  310.649503][T12861] syzkaller0: entered allmulticast mode
[  310.765307][ T7237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.838103][T12816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.172173][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'.
[  312.195704][T12872] netlink: 'syz.1.1844': attribute type 1 has an invalid length.
[  312.318928][T12872] 8021q: adding VLAN 0 to HW filter on device bond8
[  312.329861][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  312.403374][T12881] 8021q: adding VLAN 0 to HW filter on device bond8
[  312.462709][T12881] bond8: (slave nlmon0): The slave device specified does not support setting the MAC address
[  312.497230][T12881] bond8: (slave nlmon0): Error -95 calling set_mac_address
[  312.533979][T12883] bond8: entered promiscuous mode
[  312.544745][T12883] bond8: entered allmulticast mode
[  312.643118][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'.
[  312.662376][T12891] Cannot find set identified by id 65534 to match
[  312.682428][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'.
[  312.735399][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'.
[  312.782205][T12892] netlink: 'syz.0.1849': attribute type 13 has an invalid length.
[  312.823293][T12892] netlink: 'syz.0.1849': attribute type 17 has an invalid length.
[  312.862283][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'.
[  312.996491][T12892] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  314.075377][T12942] xt_hashlimit: max too large, truncated to 1048576
[  316.229806][T12911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  316.423831][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1860'.
[  316.485760][T12938] netlink: 'syz.1.1857': attribute type 12 has an invalid length.
[  316.721708][T12954] ieee802154 phy0 wpan0: encryption failed: -22
[  316.967810][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'.
[  316.998024][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'.
[  317.028883][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'.
[  317.058318][T12967] netlink: 'syz.1.1864': attribute type 13 has an invalid length.
[  317.082079][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'.
[  317.100954][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  317.128614][T12967] netlink: 'syz.1.1864': attribute type 17 has an invalid length.
[  317.428921][T12967] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  317.460309][T12970] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  317.911774][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1871'.
[  317.927825][T12989] netlink: 'syz.1.1871': attribute type 4 has an invalid length.
[  318.141930][T12995] ieee802154 phy0 wpan0: encryption failed: -22
[  318.184022][T12988] lo speed is unknown, defaulting to 1000
[  318.194105][T12991] syzkaller0: entered promiscuous mode
[  318.208858][T12991] syzkaller0: entered allmulticast mode
[  318.537708][T13004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1876'.
[  319.144187][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'.
[  319.171312][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'.
[  319.241573][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'.
[  319.259876][T13021] netlink: 'syz.3.1881': attribute type 13 has an invalid length.
[  319.272758][T13021] netlink: 'syz.3.1881': attribute type 17 has an invalid length.
[  319.311013][T13021] team_slave_1: left allmulticast mode
[  319.377857][T13021] ip6gre1: left promiscuous mode
[  319.382866][T13021] ip6gre1: left allmulticast mode
[  319.415433][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  319.429411][T13021] 8021q: adding VLAN 0 to HW filter on device bond2
[  319.441387][T13021] veth1: left allmulticast mode
[  319.498697][T13021] bridge1: left promiscuous mode
[  319.503748][T13021] bridge1: left allmulticast mode
[  319.529221][T13021] gtp1: left promiscuous mode
[  319.535117][T13021] gtp1: left allmulticast mode
[  319.552327][T13021] ipip0: left promiscuous mode
[  319.561341][T13021] bond4: left promiscuous mode
[  319.585779][T13021] bridge5: left allmulticast mode
[  319.600456][T13021] 8021q: adding VLAN 0 to HW filter on device eth0
[  319.618106][T13021] 8021q: adding VLAN 0 to HW filter on device eth1
[  319.633098][T13021] 8021q: adding VLAN 0 to HW filter on device eth2
[  319.648899][  T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.652572][T13021] 8021q: adding VLAN 0 to HW filter on device eth3
[  319.800832][   T57] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  319.812269][   T57] bond5: (slave veth9): making interface the new active one
[  319.839304][   T57] bond5: active interface up!
[  319.872791][ T1353] bond2: (slave veth1): link status definitely up, 10000 Mbps full duplex
[  319.901444][ T1353] bond2: (slave veth1): making interface the new active one
[  319.918147][ T1353] bond2: active interface up!
[  320.045490][ T1353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.072825][ T1353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.104972][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.285156][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.385868][T13048] openvswitch: netlink: IPv4 tun info is not correct
[  320.625897][T13053] tipc: Resetting bearer <eth:gre0>
[  322.018187][T13022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  322.213065][T13055] __nla_validate_parse: 3 callbacks suppressed
[  322.213089][T13055] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1890'.
[  322.638778][T13064] bridge0: port 3(wlan1) entered disabled state
[  322.711421][T13064] mac80211_hwsim hwsim10 wlan1 (unregistering): left allmulticast mode
[  322.747686][T13064] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode
[  322.782430][T13064] bridge0: port 3(wlan1) entered disabled state
[  322.838702][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1896'.
[  323.442059][T13083] lo speed is unknown, defaulting to 1000
[  323.733764][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'.
[  323.762476][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  323.804912][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.837936][T13100] netlink: 'syz.1.1903': attribute type 13 has an invalid length.
[  323.858626][T13100] netlink: 'syz.1.1903': attribute type 17 has an invalid length.
[  323.986031][T13098] netlink: 'syz.1.1903': attribute type 13 has an invalid length.
[  324.018107][T13098] netlink: 'syz.1.1903': attribute type 17 has an invalid length.
[  324.102624][T13100] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  324.212156][T13098] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  324.764795][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  325.587765][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1910'.
[  325.599597][T13129] xt_hashlimit: size too large, truncated to 1048576
[  326.311830][T13089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.639917][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'.
[  326.675250][T13140] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1911'.
[  326.686238][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'.
[  326.718256][T13136] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.729863][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'.
[  326.739521][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'.
[  326.765459][T13136] bond7 (unregistering): Released all slaves
[  326.822013][T13145] syzkaller0: entered promiscuous mode
[  326.878322][T13145] syzkaller0: entered allmulticast mode
[  326.912320][T13136] syzkaller0: entered promiscuous mode
[  326.940408][T13136] syzkaller0: entered allmulticast mode
[  326.978856][T13156] x_tables: ip_tables: ah match: only valid for protocol 51
[  326.993273][T13157] x_tables: ip_tables: ah match: only valid for protocol 51
[  327.638492][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  327.972047][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  328.014922][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'.
[  328.050004][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  328.086642][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'.
[  328.111293][T13184] netlink: 'syz.4.1921': attribute type 13 has an invalid length.
[  328.153973][T13184] netlink: 'syz.4.1921': attribute type 17 has an invalid length.
[  328.197596][T13184] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.207348][T13184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.216466][T13184] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.224305][T13184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.280180][T13184] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  328.833538][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'.
[  329.022635][T13221] sit0: entered promiscuous mode
[  329.094606][T13221] netlink: 'syz.3.1933': attribute type 1 has an invalid length.
[  329.103207][T13221] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1933'.
[  329.247580][ T7238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.790424][T13231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1935'.
[  331.083033][T13187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  331.164828][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  331.504024][T13235] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1936'.
[  331.594024][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'.
[  331.692004][T13243] netlink: 'syz.3.1938': attribute type 13 has an invalid length.
[  331.722100][T13243] netlink: 'syz.3.1938': attribute type 17 has an invalid length.
[  331.940473][T13243] sit0: left promiscuous mode
[  332.064900][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  332.685451][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  335.210882][T13262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.535943][T13294] xt_TPROXY: Can be used only with -p tcp or -p udp
[  335.560523][T13295] xt_TPROXY: Can be used only with -p tcp or -p udp
[  335.836219][T13302] __nla_validate_parse: 8 callbacks suppressed
[  335.836270][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'.
[  335.881091][T13308] netlink: 64843 bytes leftover after parsing attributes in process `syz.1.1960'.
[  335.889836][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'.
[  335.917191][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1959'.
[  335.956470][T13310] netlink: 'syz.2.1957': attribute type 13 has an invalid length.
[  335.985216][T13310] netlink: 'syz.2.1957': attribute type 17 has an invalid length.
[  336.175599][ T7224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  336.261223][T13302] netlink: 'syz.2.1957': attribute type 13 has an invalid length.
[  336.304983][T13302] netlink: 'syz.2.1957': attribute type 17 has an invalid length.
[  336.380187][T13310] veth1_vlan: left promiscuous mode
[  336.393880][T13310] veth0_vlan: left promiscuous mode
[  336.403250][T13310] veth0_vlan: entered promiscuous mode
[  336.414888][T13310] veth1_vlan: entered promiscuous mode
[  336.449021][T13310] veth1_macvtap: left promiscuous mode
[  336.462451][T13310] veth0_macvtap: left promiscuous mode
[  336.486507][T13310] veth0_macvtap: entered promiscuous mode
[  336.509146][T13310] veth1_macvtap: entered promiscuous mode
[  336.534172][T13310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  336.567018][T13310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  336.593166][T13310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  336.610177][T13310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  336.673062][T13310] 8021q: adding VLAN 0 to HW filter on device bond1
[  336.681491][T13310] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.763199][T13310] 8021q: adding VLAN 0 to HW filter on device bond3
[  336.774400][T13310] veth5: left allmulticast mode
[  336.811783][T13310] ip6gre1: left promiscuous mode
[  336.817972][T13310] ip6gre1: left allmulticast mode
[  336.845364][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  336.926282][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.045667][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1965'.
[  337.218406][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.367266][ T8627] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  337.394436][ T8627] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  337.496944][ T8627] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  337.530169][ T8627] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  337.588361][ T8627] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  337.627106][ T8627] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  337.650168][ T8627] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  337.669835][ T8627] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  337.738569][T13354] sctp: [Deprecated]: syz.0.1970 (pid 13354) Use of int in maxseg socket option.
[  337.738569][T13354] Use struct sctp_assoc_value instead
[  337.836852][T10627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.883945][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.898357][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  338.609124][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  338.845836][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.171977][T13336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.523435][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1973'.
[  340.560353][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1973'.
[  340.582785][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'.
[  340.671051][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'.
[  340.690722][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'.
[  340.719147][T13376] netlink: 'syz.1.1977': attribute type 13 has an invalid length.
[  340.737595][T13376] netlink: 'syz.1.1977': attribute type 17 has an invalid length.
[  340.748443][T13373] syz_tun: entered allmulticast mode
[  340.765289][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.773590][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.795748][T13373] netlink: 'syz.4.1975': attribute type 3 has an invalid length.
[  340.849526][T13373] netlink: 'syz.4.1975': attribute type 1 has an invalid length.
[  340.888571][T13379] netlink: 'syz.4.1975': attribute type 9 has an invalid length.
[  340.946406][T13379] netlink: 'syz.4.1975': attribute type 6 has an invalid length.
[  340.987830][T13376] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  341.042616][T13372] syz_tun: left allmulticast mode
[  341.818979][    C0] Dead loop on virtual device ip6_vti0 (net 39), fix it urgently!
[  342.204825][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  342.684719][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  342.747793][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.802093][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.978221][T13401] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  344.005693][   T35] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.036269][   T35] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  344.072359][   T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  344.106325][   T35] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  344.125877][   T35] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.153197][   T35] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  344.173577][   T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  344.202673][   T35] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  344.230584][   T35] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.254961][   T35] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  344.263984][   T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  344.274166][   T35] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  344.290979][   T35] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.314575][   T35] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0
[  344.323906][   T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  344.333184][   T35] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  344.400503][T13444] __nla_validate_parse: 4 callbacks suppressed
[  344.400524][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'.
[  344.421715][T13444] netlink: 'syz.4.1991': attribute type 1 has an invalid length.
[  344.527713][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'.
[  344.548456][T13448] 0: reclassify loop, rule prio 0, protocol 03
[  344.742916][T13456] syzkaller0: entered promiscuous mode
[  344.751142][T13456] syzkaller0: entered allmulticast mode
[  344.801348][T13415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  344.876626][T13458] bond9: entered allmulticast mode
[  344.887907][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1994'.
[  344.933708][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'.
[  345.244796][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  345.259910][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'.
[  345.284883][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'.
[  345.347214][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'.
[  345.544229][T13494] netlink: 'syz.0.2004': attribute type 1 has an invalid length.
[  345.631658][T13501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.643665][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.689896][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'.
[  345.742142][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'.
[  345.767632][T13494] bond6: entered promiscuous mode
[  345.773189][T13494] bond6: entered allmulticast mode
[  345.779313][T13494] 8021q: adding VLAN 0 to HW filter on device bond6
[  345.864125][T13500] erspan1: entered allmulticast mode
[  345.885116][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.908405][T13500] bond6: (slave erspan1): making interface the new active one
[  345.916229][T13500] erspan1: entered promiscuous mode
[  345.931895][T13500] bond6: (slave erspan1): Enslaving as an active interface with an up link
[  345.948063][ T5642] block nbd0: Receive control failed (result -32)
[  345.962634][ T5630] block nbd0: Receive control failed (result -32)
[  346.156271][T13518] syz_tun: entered allmulticast mode
[  346.192546][T13517] syz_tun: left allmulticast mode
[  346.205655][T13520] bond0: (slave bond_slave_1): Releasing backup interface
[  346.219858][T13520] bond_slave_1: left promiscuous mode
[  346.490408][T13538] tipc: Failed to remove unknown binding: 66,0,0/0:1395649039/1395649041
[  346.520443][T13538] tipc: Failed to remove unknown binding: 66,0,0/0:1395649039/1395649040
[  346.758818][T13556] lo speed is unknown, defaulting to 1000
[  346.781488][T13558] xt_hashlimit: size too large, truncated to 1048576
[  346.791022][T13555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.810309][T13555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.841607][T13555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.167557][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.178001][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.853298][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2020'.
[  349.085394][   T35] net_ratelimit: 8 callbacks suppressed
[  349.085461][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.101573][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.197228][T13522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.706710][T13615] __nla_validate_parse: 3 callbacks suppressed
[  349.706766][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2030'.
[  349.747858][T13615] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  349.769166][T13618] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2032'.
[  349.793656][T13615] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2030'.
[  349.823479][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'.
[  349.833026][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'.
[  349.845063][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'.
[  350.366608][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.383985][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.409738][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.914913][T13646] netlink: 'syz.4.2038': attribute type 1 has an invalid length.
[  351.048550][T13646] 8021q: adding VLAN 0 to HW filter on device bond10
[  351.075537][T13651] 8021q: adding VLAN 0 to HW filter on device batadv1
[  351.090475][T13651] bond10: (slave batadv1): making interface the new active one
[  351.101903][T13651] bond10: (slave batadv1): Enslaving as an active interface with an up link
[  351.182977][T13659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2041'.
[  351.484834][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.524889][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.175685][T13631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.423521][T13684] netlink: 'syz.2.2046': attribute type 2 has an invalid length.
[  353.454861][T13688] netlink: 'syz.2.2046': attribute type 2 has an invalid length.
[  353.474072][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'.
[  353.502434][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'.
[  353.565215][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.573740][T13694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2049'.
[  353.726527][T13701] syzkaller0: entered promiscuous mode
[  353.732598][T13701] syzkaller0: entered allmulticast mode
[  354.192097][T13729] netlink: 'syz.1.2059': attribute type 1 has an invalid length.
[  354.213602][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.222056][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.461325][T13729] 8021q: adding VLAN 0 to HW filter on device bond9
[  354.573755][T13736] bond9: (slave gretap1): making interface the new active one
[  354.584989][T13736] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  354.604950][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.660388][T13746] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode
[  354.731931][T13746] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  354.782648][T13755] __nla_validate_parse: 2 callbacks suppressed
[  354.782669][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'.
[  354.839318][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'.
[  354.848575][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  354.872522][T13761] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2067'.
[  355.004577][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'.
[  355.247881][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'.
[  355.533321][T13778] syzkaller0: entered promiscuous mode
[  355.552153][T13778] syzkaller0: entered allmulticast mode
[  355.662892][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.778147][T13800] netlink: 'syz.2.2078': attribute type 1 has an invalid length.
[  355.786251][T13800] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2078'.
[  356.004841][T13805] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2081'.
[  356.690307][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.734868][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.773891][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.821844][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.966451][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.975365][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.657261][T13820] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2084'.
[  360.847904][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.947134][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'.
[  361.043291][T13844] syzkaller0: entered promiscuous mode
[  361.066156][T13844] syzkaller0: entered allmulticast mode
[  361.233242][T13857] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2094'.
[  361.458374][T13869] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002
[  361.742927][T13890] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2101'.
[  361.885988][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.949241][T13890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.004414][T13890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.068899][T13890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.131814][T13890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.226184][T13890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.626683][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2107'.
[  362.905286][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'.
[  362.956154][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'.
[  362.988910][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'.
[  363.048223][T13945] netlink: 'syz.4.2109': attribute type 13 has an invalid length.
[  363.057769][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'.
[  363.082286][T13945] netlink: 'syz.4.2109': attribute type 17 has an invalid length.
[  363.209884][T13945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.761441][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2121'.
[  363.789601][T13980] netlink: 'syz.2.2120': attribute type 13 has an invalid length.
[  363.819775][T13980] netlink: 'syz.2.2120': attribute type 17 has an invalid length.
[  363.918703][T13980] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.954008][T13980] 8021q: adding VLAN 0 to HW filter on device team0
[  364.002568][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.074703][T13997] unsupported nlmsg_type 40
[  364.182637][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.200818][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.251313][T13980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  364.282934][T13980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  364.334176][T13980] veth1_vlan: left promiscuous mode
[  364.352841][T13980] veth0_vlan: left promiscuous mode
[  364.374325][T13980] veth0_vlan: entered promiscuous mode
[  364.424680][T13980] veth1_vlan: entered promiscuous mode
[  364.489040][T13980] veth1_macvtap: left promiscuous mode
[  364.524415][T13980] veth0_macvtap: left promiscuous mode
[  364.548265][T13980] veth0_macvtap: entered promiscuous mode
[  364.563029][T13980] veth1_macvtap: entered promiscuous mode
[  364.579492][T13980] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  364.591300][T13980] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  364.639826][T13980] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  364.690762][T13980] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  364.838302][T13980] 8021q: adding VLAN 0 to HW filter on device bond1
[  364.848340][T13980] 8021q: adding VLAN 0 to HW filter on device bond2
[  364.999656][T13980] 8021q: adding VLAN 0 to HW filter on device bond3
[  365.009005][ T7224] net_ratelimit: 7 callbacks suppressed
[  365.009025][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.038764][T13980] 8021q: adding VLAN 0 to HW filter on device bond4
[  365.065585][T13980] 8021q: adding VLAN 0 to HW filter on device bond5
[  365.081776][T13980] 8021q: adding VLAN 0 to HW filter on device bond6
[  365.187226][T14027] openvswitch: netlink: Key 6 has unexpected len 147 expected 2
[  365.233769][ T1353] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.246730][ T1353] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  365.257471][ T1353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.271895][ T1353] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  365.283321][T14020] netlink: 'syz.4.2129': attribute type 6 has an invalid length.
[  365.298909][T14020] netlink: 'syz.4.2129': attribute type 7 has an invalid length.
[  365.321085][T14020] netlink: 'syz.4.2129': attribute type 8 has an invalid length.
[  365.337726][T14023] netlink: 'syz.3.2130': attribute type 8 has an invalid length.
[  365.576593][ T1353] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.596132][ T1353] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  365.609650][ T1353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.622280][ T1353] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  365.631844][ T1353] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.645813][ T1353] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  365.655398][ T1353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.664269][ T1353] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  365.677286][ T1353] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.691959][ T1353] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  365.702178][ T1353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.711030][ T1353] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  365.725827][ T1353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.734293][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.822177][   T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  365.906075][T14053] __nla_validate_parse: 9 callbacks suppressed
[  365.906098][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2138'.
[  366.057286][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.298869][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'.
[  366.308660][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'.
[  366.320098][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'.
[  366.330325][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'.
[  366.370781][T14082] ip6tnl1: entered allmulticast mode
[  366.378953][ T1353] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.387856][ T1353] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.398328][T14083] netlink: 'syz.0.2145': attribute type 13 has an invalid length.
[  366.406552][ T7224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.414868][T14083] netlink: 'syz.0.2145': attribute type 17 has an invalid length.
[  366.453753][T14083] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  366.644864][ T7224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.799353][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'.
[  366.914932][ T7224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.968325][T14067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.092120][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.343175][T14106] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2152'.
[  367.476769][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'.
[  367.645300][T13431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.683614][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.694954][T13431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.742718][T14119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2155'.
[  367.761999][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2155'.
[  368.269214][T14141] validate_nla: 1 callbacks suppressed
[  368.269326][T14141] netlink: 'syz.4.2161': attribute type 13 has an invalid length.
[  368.312551][T14141] netlink: 'syz.4.2161': attribute type 17 has an invalid length.
[  369.611952][T14210] netlink: 'syz.4.2185': attribute type 1 has an invalid length.
[  369.666000][T14210] bond11: entered promiscuous mode
[  369.671995][T14210] 8021q: adding VLAN 0 to HW filter on device bond11
[  369.697996][T14210] macvtap1: entered allmulticast mode
[  369.804703][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  369.954351][T14222] bond11: (slave bridge4): making interface the new active one
[  369.997623][T14222] bridge4: entered promiscuous mode
[  370.047952][T14222] bond11: (slave bridge4): Enslaving as an active interface with an up link
[  370.208318][  T807] net_ratelimit: 8 callbacks suppressed
[  370.208340][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.284680][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  370.352630][T14243] netlink: 'syz.3.2194': attribute type 1 has an invalid length.
[  370.514161][T14247] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  370.653150][T14243] 8021q: adding VLAN 0 to HW filter on device bond7
[  370.682469][T14260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.710568][T14260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.726955][T14260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.739196][T14244] bond7: (slave veth11): Enslaving as an active interface with a down link
[  370.788026][T14253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.807585][T14253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.829062][T14253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.853837][T14245] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  370.892562][T14248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.912513][T14248] bond7: (slave batadv0): making interface the new active one
[  370.921562][T14248] batadv0: entered promiscuous mode
[  370.929985][T14248] bond7: (slave batadv0): Enslaving as an active interface with an up link
[  371.045039][T14266] tipc: Started in network mode
[  371.066494][T14266] tipc: Node identity , cluster identity 4711
[  371.084208][T14266] tipc: Failed to obtain node identity
[  371.101758][T14266] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.114958][T14268] netlink: 'syz.3.2199': attribute type 1 has an invalid length.
[  371.248560][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.359847][T14274] bond7: option primary_reselect: invalid value (6)
[  371.368724][T14274] bond7 (unregistering): Released all slaves
[  371.809042][T14279] __nla_validate_parse: 16 callbacks suppressed
[  371.809064][T14279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2203'.
[  371.995088][T14285] syzkaller0: entered promiscuous mode
[  372.011990][T14285] syzkaller0: entered allmulticast mode
[  372.020275][T14291] bridge0: entered allmulticast mode
[  372.089740][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'.
[  372.239705][T14290] lo speed is unknown, defaulting to 1000
[  372.718668][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'.
[  372.736136][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'.
[  372.746849][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'.
[  372.755848][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'.
[  372.773349][T14320] netlink: 'syz.2.2212': attribute type 13 has an invalid length.
[  372.781511][T14320] netlink: 'syz.2.2212': attribute type 17 has an invalid length.
[  372.917450][T14290] netlink: 'syz.3.2205': attribute type 2 has an invalid length.
[  372.937095][T14290] netlink: 'syz.3.2205': attribute type 8 has an invalid length.
[  372.953629][T14290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2205'.
[  373.041486][T14331] No such timeout policy "syz1"
[  373.690707][T14346] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2220'.
[  374.103460][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'.
[  374.124914][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'.
[  374.152442][T14372] netlink: 'syz.3.2228': attribute type 13 has an invalid length.
[  374.179782][T14372] netlink: 'syz.3.2228': attribute type 17 has an invalid length.
[  374.410202][   T30] audit: type=1804 audit(1785419488.390:7): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2229" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2332 res=1 errno=0
[  374.490728][   T30] audit: type=1800 audit(1785419488.420:8): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2229" name="cgroup.controllers" dev="tmpfs" ino=2332 res=0 errno=0
[  374.684781][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.240639][T14420] netlink: 'syz.1.2244': attribute type 13 has an invalid length.
[  375.251446][T14420] netlink: 'syz.1.2244': attribute type 17 has an invalid length.
[  375.328535][T14420] net_ratelimit: 16 callbacks suppressed
[  375.328557][T14420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  375.407046][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.578804][T14434] tipc: Enabled bearer <udp:syz2>, priority 10
[  375.888759][T14443] netlink: 'syz.2.2253': attribute type 11 has an invalid length.
[  375.945707][T14443] netlink: 'syz.2.2253': attribute type 9 has an invalid length.
[  376.157632][T14461] netlink: 'syz.3.2257': attribute type 13 has an invalid length.
[  376.174719][T14461] netlink: 'syz.3.2257': attribute type 17 has an invalid length.
[  376.272986][T14461] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  376.445536][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.605585][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.614009][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.704717][T10626] tipc: Node number set to 2042668526
[  377.036422][T14493] __nla_validate_parse: 16 callbacks suppressed
[  377.036442][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'.
[  377.484935][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.884647][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  377.894417][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  377.923912][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'.
[  377.950125][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'.
[  377.962481][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'.
[  377.971988][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'.
[  377.999695][T14512] netlink: 'syz.3.2273': attribute type 13 has an invalid length.
[  378.019172][T14512] netlink: 'syz.3.2273': attribute type 17 has an invalid length.
[  378.147732][T14512] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  378.211802][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2277'.
[  378.299304][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'.
[  378.370367][T14534] sit3: entered promiscuous mode
[  378.532357][  T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.540793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.541789][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  378.610660][T14540] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  378.963029][T14557] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  379.151410][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  379.185215][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'.
[  379.209948][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  379.254829][T14573] netlink: 'syz.3.2289': attribute type 13 has an invalid length.
[  379.287422][T14573] netlink: 'syz.3.2289': attribute type 17 has an invalid length.
[  379.558220][T14586] netlink: 'syz.2.2293': attribute type 3 has an invalid length.
[  379.582720][T14586] netlink: 'syz.2.2293': attribute type 3 has an invalid length.
[  379.994987][T14602] netlink: 'syz.3.2300': attribute type 1 has an invalid length.
[  380.605920][T10626] net_ratelimit: 5 callbacks suppressed
[  380.605941][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.642406][T14623] netlink: 'syz.3.2305': attribute type 1 has an invalid length.
[  380.814862][T10626] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  380.915117][T14623] 8021q: adding VLAN 0 to HW filter on device bond9
[  380.991868][T14622] macvlan2: entered promiscuous mode
[  381.011194][T14622] macvlan2: entered allmulticast mode
[  381.068409][T14624] bond9: (slave ip6gretap1): making interface the new active one
[  381.093420][T14624] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  381.169542][T14630] netlink: 'syz.2.2307': attribute type 2 has an invalid length.
[  381.378608][T14634] netlink: 'syz.4.2309': attribute type 12 has an invalid length.
[  381.542396][T14640] macsec0: entered promiscuous mode
[  381.601271][T14640] veth1_macvtap: left promiscuous mode
[  381.647200][  T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  381.671549][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.691476][T14640] macsec0 (unregistering): left promiscuous mode
[  382.005086][ T1052] batadv0: left promiscuous mode
[  382.213113][T14661] xt_hashlimit: size too large, truncated to 1048576
[  382.365093][  T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.373531][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.686339][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.702711][T14677] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  383.358078][T14682] syzkaller0: entered promiscuous mode
[  383.381032][T14682] syzkaller0: entered allmulticast mode
[  383.413779][T14683] tipc: Started in network mode
[  383.428207][T14683] tipc: Node identity c2af547e0db3, cluster identity 4711
[  383.455539][T14683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.579554][T14683] tipc: Resetting bearer <eth:syzkaller0>
[  383.672711][T14683] tipc: Disabling bearer <eth:syzkaller0>
[  383.725909][T10626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.000292][T14709] __nla_validate_parse: 7 callbacks suppressed
[  384.000315][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2328'.
[  384.181426][T14698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  384.292206][  T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.300842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.376534][T14714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2330'.
[  384.766389][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.819401][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.850648][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.355778][T14730] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2334'.
[  387.385502][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'.
[  387.407535][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'.
[  387.458428][T14730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2334'.
[  387.547974][   T30] audit: type=1107 audit(1785419501.530:9): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Bá'
[  387.603964][T14739] netlink: 'syz.3.2338': attribute type 1 has an invalid length.
[  387.612994][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'.
[  387.719904][T14739] bond10: entered promiscuous mode
[  387.754187][T14739] 8021q: adding VLAN 0 to HW filter on device bond10
[  387.885887][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.947604][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'.
[  387.988476][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'.
[  388.074340][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2347'.
[  388.127442][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.135974][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.366031][T14784] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  388.380691][T14790] netlink: 'syz.0.2351': attribute type 10 has an invalid length.
[  388.389744][T14784] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  388.407546][T14784] veth0_virt_wifi: entered allmulticast mode
[  388.462013][T14784] veth0_virt_wifi: entered promiscuous mode
[  388.482688][T14784] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  388.490084][T14784] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  389.154892][T14823] netlink: 'syz.0.2362': attribute type 2 has an invalid length.
[  389.252283][T14814] netlink: 'syz.1.2360': attribute type 4 has an invalid length.
[  389.276745][T14814] netlink: 'syz.1.2360': attribute type 61 has an invalid length.
[  389.436507][T14838] __nla_validate_parse: 4 callbacks suppressed
[  389.436528][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  389.493764][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  389.557662][T14838] team0: entered promiscuous mode
[  389.563045][T14838] team0: entered allmulticast mode
[  389.570079][T14838] 8021q: adding VLAN 0 to HW filter on device team0
[  389.650443][T14841] team1: entered promiscuous mode
[  389.656689][T14841] team1: entered allmulticast mode
[  389.662598][T14841] 8021q: adding VLAN 0 to HW filter on device team1
[  389.888008][ T7244] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.931264][T14849] 8021q: adding VLAN 0 to HW filter on device bond6
[  389.955659][ T7244] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.973702][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.039183][T14849] 8021q: adding VLAN 0 to HW filter on device bond8
[  390.048592][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.057516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.076595][T14849] bond9: entered allmulticast mode
[  390.082009][T14849] ip6gretap1: entered allmulticast mode
[  390.090941][T14849] ip6gretap1: entered promiscuous mode
[  390.098946][T14849] bond9: entered promiscuous mode
[  390.105246][T14849] macvlan2: left promiscuous mode
[  390.110722][T14849] bond9: left promiscuous mode
[  390.122786][T14849] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  390.139141][T14849] bond10: left promiscuous mode
[  390.147271][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  390.168936][T14862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.190322][ T1052] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  390.219677][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  390.254273][T14857] syzkaller0: entered promiscuous mode
[  390.264718][T14857] syzkaller0: entered allmulticast mode
[  390.308336][T14861] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  390.333451][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  390.469820][T14866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  390.487982][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  390.564116][T14862] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  390.590333][T14862] bond7 (unregistering): Released all slaves
[  390.627659][T14874] tipc: Invalid UDP bearer configuration
[  390.627717][T14874] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  390.652582][T14874] nbd: must specify a device to reconfigure
[  390.691051][T14876] tipc: Resetting bearer <eth:syzkaller0>
[  390.708504][T14884] batadv0: entered promiscuous mode
[  390.736774][T14884] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  390.810883][T14856] tipc: Resetting bearer <eth:syzkaller0>
[  390.877258][T14856] tipc: Disabling bearer <eth:syzkaller0>
[  390.910151][T14890] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2380'.
[  390.933136][T14890] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2380'.
[  390.953688][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'.
[  391.028948][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.371221][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'.
[  391.417801][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'.
[  391.445847][T14905] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  391.453670][T14904] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  391.630732][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'.
[  391.689849][T14927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2390'.
[  391.709273][T14929] xt_bpf: check failed: parse error
[  391.811843][T14924] veth9: entered allmulticast mode
[  391.856708][ T1052] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  391.888235][T14930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.918493][T14935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2391'.
[  392.057230][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.900247][T14980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.968806][T14978] ip6gre2: entered promiscuous mode
[  392.986622][T14978] ip6gre2: entered allmulticast mode
[  393.085508][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.245386][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  393.253329][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  393.372478][T14997] FAULT_INJECTION: forcing a failure.
[  393.372478][T14997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  393.395872][T14997] CPU: 1 UID: 0 PID: 14997 Comm: syz.3.2409 Not tainted syzkaller #0 PREEMPT(full) 
[  393.395904][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  393.395935][T14997] Call Trace:
[  393.396015][T14997]  <TASK>
[  393.396079][T14997]  dump_stack_lvl+0xe8/0x150
[  393.396240][T14997]  should_fail_ex+0x40c/0x560
[  393.396363][T14997]  _copy_from_user+0x2d/0xb0
[  393.396416][T14997]  __sys_bpf+0x2e7/0xd90
[  393.396485][T14997]  ? __pfx___sys_bpf+0x10/0x10
[  393.396555][T14997]  ? __fget_files+0x2a/0x420
[  393.396636][T14997]  ? ksys_write+0x242/0x270
[  393.396676][T14997]  ? __pfx_ksys_write+0x10/0x10
[  393.396705][T14997]  __x64_sys_bpf+0xba/0xd0
[  393.396733][T14997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.396773][T14997]  do_syscall_64+0x174/0x580
[  393.396872][T14997]  ? trace_irq_disable+0x3b/0x140
[  393.396907][T14997]  ? clear_bhb_loop+0x40/0x90
[  393.396940][T14997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.396962][T14997] RIP: 0033:0x7f5e1799df99
[  393.397009][T14997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.397028][T14997] RSP: 002b:00007f5e1880e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  393.397080][T14997] RAX: ffffffffffffffda RBX: 00007f5e17c25fa0 RCX: 00007f5e1799df99
[  393.397097][T14997] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  393.397111][T14997] RBP: 00007f5e1880e090 R08: 0000000000000000 R09: 0000000000000000
[  393.397125][T14997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.397140][T14997] R13: 00007f5e17c26038 R14: 00007f5e17c25fa0 R15: 00007ffcac347998
[  393.397177][T14997]  </TASK>
[  393.613321][   T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  393.622098][   T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  393.635202][ T7244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  393.655037][ T7244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  393.891102][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.899612][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.136346][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.469804][ T7244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  395.211845][T15036] __nla_validate_parse: 13 callbacks suppressed
[  395.211868][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2424'.
[  395.354686][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'.
[  395.388030][T15020] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  395.395538][T15020] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.402831][T15020] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.812940][T15020] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.826597][T15020] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.923465][T15020] ipip1: left promiscuous mode
[  395.951005][T15020] ip6gre1: left allmulticast mode
[  395.959054][T15020] geneve3: left promiscuous mode
[  395.981794][T15020] bond9: left allmulticast mode
[  395.993075][T15020] bond11: left promiscuous mode
[  396.001386][T15020] bridge4: left promiscuous mode
[  396.010287][T15020] macvtap1: left allmulticast mode
[  396.018622][T13431] lo speed is unknown, defaulting to 1000
[  396.025456][T13431] syz2: Port: 1 Link DOWN
[  396.055304][T15042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2425'.
[  396.079029][  T130] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.111457][  T130] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.152536][  T130] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.208260][ T1353] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.403377][T15054] syzkaller0: entered promiscuous mode
[  396.420412][T15054] syzkaller0: entered allmulticast mode
[  397.066411][T15068] lo speed is unknown, defaulting to 1000
[  397.262297][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'.
[  398.045123][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  398.293298][T15113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.311795][T15113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2441'.
[  398.539866][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2443'.
[  398.651837][T15102] syzkaller0: entered promiscuous mode
[  398.659045][T15102] syzkaller0: entered allmulticast mode
[  399.212471][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2447'.
[  401.605587][T15092] lo speed is unknown, defaulting to 1000
[  401.654383][T15131] netlink: 'syz.3.2446': attribute type 2 has an invalid length.
[  401.719199][T15133] ˙: renamed from bond_slave_0 (while UP)
[  401.739569][T15143] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  401.758177][T15149] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  401.768460][T15143] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  401.779670][T15143] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  401.981509][T15154] sctp: [Deprecated]: syz.4.2452 (pid 15154) Use of int in maxseg socket option.
[  401.981509][T15154] Use struct sctp_assoc_value instead
[  402.124128][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2453'.
[  402.149210][T15163] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2453'.
[  402.248437][T15163] netlink: 'syz.0.2453': attribute type 1 has an invalid length.
[  402.431549][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  402.477648][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2453'.
[  403.082673][T15174] smbdirect: ib_dev[syz2] removed
[  403.727323][T15211] xt_hashlimit: size too large, truncated to 1048576
[  403.745332][T15211] xt_hashlimit: max too large, truncated to 1048576
[  403.905987][T15217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.925809][T15217] syzkaller0: entered promiscuous mode
[  403.933251][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2468'.
[  403.956220][T15217] syzkaller0: entered allmulticast mode
[  403.990771][T15217] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  404.026992][T15225] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2469'.
[  404.124099][T15226] lo speed is unknown, defaulting to 1000
[  404.153751][T15217] tipc: Resetting bearer <eth:syzkaller0>
[  404.200353][T15216] tipc: Resetting bearer <eth:syzkaller0>
[  404.300989][T15216] tipc: Disabling bearer <eth:syzkaller0>
[  404.423412][T15226] lo speed is unknown, defaulting to 1000
[  404.606359][T15226] lo speed is unknown, defaulting to 1000
[  404.671654][T15226] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  404.798595][T15226] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  404.897344][T15226] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  405.021114][T15226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  405.282434][T15226] lo speed is unknown, defaulting to 1000
[  405.346488][T15226] lo speed is unknown, defaulting to 1000
[  405.419378][T15226] lo speed is unknown, defaulting to 1000
[  405.489299][T15226] lo speed is unknown, defaulting to 1000
[  405.530325][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2483'.
[  405.542751][T15226] lo speed is unknown, defaulting to 1000
[  405.794342][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'.
[  405.814373][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'.
[  406.327445][T15303] syzkaller0: entered promiscuous mode
[  406.347415][T15303] syzkaller0: entered allmulticast mode
[  406.586344][T15316] syzkaller0: entered promiscuous mode
[  406.603820][T15316] syzkaller0: entered allmulticast mode
[  406.716064][T15327] x_tables: duplicate entry at hook 1
[  406.999943][T15339] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2501'.
[  407.249645][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'.
[  407.293989][T15345] lo speed is unknown, defaulting to 1000
[  407.324806][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  407.463552][T15355] syzkaller0: entered promiscuous mode
[  407.488896][T15355] syzkaller0: entered allmulticast mode
[  407.539495][T15360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2505'.
[  407.562432][T15360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2505'.
[  407.578207][T15360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2505'.
[  407.828383][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'.
[  407.893144][T15372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2510'.
[  407.903481][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'.
[  407.925268][T15372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2510'.
[  407.970353][T15383] netlink: 'syz.0.2513': attribute type 13 has an invalid length.
[  408.134224][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'.
[  408.154210][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'.
[  408.207922][T15398] netlink: 'syz.3.2514': attribute type 13 has an invalid length.
[  408.228202][T15398] netlink: 'syz.3.2514': attribute type 17 has an invalid length.
[  408.321776][T15389] netlink: 'syz.3.2514': attribute type 13 has an invalid length.
[  408.384303][T15389] netlink: 'syz.3.2514': attribute type 17 has an invalid length.
[  408.525838][  T994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  408.572920][T15398] macvlan2: left allmulticast mode
[  408.579052][T15398] bond9: left allmulticast mode
[  408.584094][T15398] ip6gretap1: left allmulticast mode
[  408.613196][T15398] ip6gre2: left promiscuous mode
[  408.635163][T15398] ip6gre2: left allmulticast mode
[  408.666914][  T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  408.805546][T13430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  408.900411][ T7224] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  408.945205][ T7224] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.078736][T15415] lo speed is unknown, defaulting to 1000
[  409.081315][ T1011] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.092926][ T1011] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.364358][T15435] syzkaller1: entered promiscuous mode
[  409.375862][T15435] syzkaller1: entered allmulticast mode
[  409.461733][T15435] bond11 (unregistering): Released all slaves
[  409.598438][T10626] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.726795][T10626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  409.751845][T15457] mac80211_hwsim hwsim9 wlan0: Caught tx_queue_len zero misconfig
[  409.779667][T15457] netlink: 'syz.0.2533': attribute type 1 has an invalid length.
[  410.325342][T15470] syzkaller0: entered promiscuous mode
[  410.353044][T15470] syzkaller0: entered allmulticast mode
[  410.741583][T15499] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  410.750145][T15499] block (null): Could not allocate knbd recv work queue.
[  410.823630][T15499] nbd: failed to add new device
[  410.867452][T15506] tipc: Started in network mode
[  410.877390][T15506] tipc: Node identity ac14140f, cluster identity 4711
[  410.894855][T15506] tipc: New replicast peer: 255.255.255.255
[  410.909804][T15506] tipc: Enabled bearer <udp:syz2>, priority 10
[  410.928333][T15506] netlink: 'syz.3.2540': attribute type 1 has an invalid length.
[  411.081784][T15506] bond11: entered promiscuous mode
[  411.098194][T15506] 8021q: adding VLAN 0 to HW filter on device bond11
[  411.132619][T15507] bond11: entered allmulticast mode
[  411.195786][T15506] bond11: (slave bridge8): making interface the new active one
[  411.203657][T15506] bridge8: entered promiscuous mode
[  411.215454][T15506] bridge8: entered allmulticast mode
[  411.231061][T15506] bond11: (slave bridge8): Enslaving as an active interface with an up link
[  411.812947][T15572] dvmrp5: entered allmulticast mode
[  412.024561][  T994] tipc: Node number set to 2886997007
[  412.559637][T15593] netlink: 'syz.2.2555': attribute type 1 has an invalid length.
[  412.807487][T15593] bond7: entered promiscuous mode
[  412.820123][T15593] 8021q: adding VLAN 0 to HW filter on device bond7
[  412.935659][T15597] 8021q: adding VLAN 0 to HW filter on device bond7
[  412.960610][T15597] bond7: (slave ipip1): The slave device specified does not support setting the MAC address
[  412.974886][T15597] bond7: (slave ipip1): Setting fail_over_mac to active for active-backup mode
[  413.004103][T15597] bond7: (slave ipip1): making interface the new active one
[  413.028734][T15597] ipip1: entered promiscuous mode
[  413.036848][T15597] bond7: (slave ipip1): Enslaving as an active interface with an up link
[  413.353533][T15616] __nla_validate_parse: 13 callbacks suppressed
[  413.353555][T15616] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2561'.
[  413.415810][T15616] netlink: 'syz.2.2561': attribute type 4 has an invalid length.
[  413.485554][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  413.616008][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'.
[  414.031978][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'.
[  414.385470][T15655] set match dimension is over the limit!
[  414.415085][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'.
[  414.646561][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  414.665540][T15668] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  414.682313][   T30] audit: type=1804 audit(1785419528.660:10): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2576" name="/newroot/528/cgroup.controllers" dev="tmpfs" ino=2741 res=1 errno=0
[  414.741463][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  414.767097][   T30] audit: type=1800 audit(1785419528.660:11): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2576" name="cgroup.controllers" dev="tmpfs" ino=2741 res=0 errno=0
[  414.804807][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  414.948544][T15681] syzkaller0: entered promiscuous mode
[  415.005064][T15681] syzkaller0: entered allmulticast mode
[  415.018906][T15684] batadv0: entered promiscuous mode
[  415.036358][T15684] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  415.153497][T15688] siw: device registration error -23
[  415.172450][T15692] syzkaller0: entered promiscuous mode
[  415.178558][T15692] syzkaller0: entered allmulticast mode
[  415.207590][T15692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.266672][T15689] bond0: (slave wlan1): Releasing backup interface
[  415.319624][T15689] mac80211_hwsim hwsim31 wlan1 (unregistering): left promiscuous mode
[  415.416716][T15690] tipc: Resetting bearer <eth:syzkaller0>
[  415.499181][T15690] tipc: Disabling bearer <eth:syzkaller0>
[  415.714698][T15723] netlink: 'syz.1.2589': attribute type 1 has an invalid length.
[  415.734223][T15724] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2590'.
[  415.744708][T15723] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2589'.
[  415.756010][T15724] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2590'.
[  416.990890][T15753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.245546][T15797] netlink: 'syz.0.2607': attribute type 13 has an invalid length.
[  417.328217][T15551] 
[  417.330638][T15551] ============================================
[  417.336923][T15551] WARNING: possible recursive locking detected
[  417.343251][T15551] syzkaller #0 Not tainted
[  417.347696][T15551] --------------------------------------------
[  417.353914][T15551] kworker/u8:24/15551 is trying to acquire lock:
[  417.360321][T15551] ffff8880596ca558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  417.370383][T15551] 
[  417.370383][T15551] but task is already holding lock:
[  417.377770][T15551] ffff88803232fd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  417.387642][T15551] 
[  417.387642][T15551] other info that might help us debug this:
[  417.395707][T15551]  Possible unsafe locking scenario:
[  417.395707][T15551] 
[  417.403328][T15551]        CPU0
[  417.406621][T15551]        ----
[  417.409954][T15551]   lock(&qdisc_xmit_lock_key#4);
[  417.415034][T15551]   lock(&qdisc_xmit_lock_key#4);
[  417.420084][T15551] 
[  417.420084][T15551]  *** DEADLOCK ***
[  417.420084][T15551] 
[  417.428238][T15551]  May be due to missing lock nesting notation
[  417.428238][T15551] 
[  417.436612][T15551] 9 locks held by kworker/u8:24/15551:
[  417.442081][T15551]  #0: ffff8880569ea140 ((wq_completion)bond6#4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  417.453200][T15551]  #1: ffffc900040afc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  417.466104][T15551]  #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0
[  417.475823][T15551]  #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  417.485863][T15551]  #4: ffff888032489228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820
[  417.498512][T15551]  #5: ffff88803232fd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  417.508809][T15551]  #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[  417.517778][T15551]  #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[  417.527555][T15551]  #8: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  417.537499][T15551] 
[  417.537499][T15551] stack backtrace:
[  417.543404][T15551] CPU: 0 UID: 0 PID: 15551 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) 
[  417.543425][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.543437][T15551] Workqueue: bond6 bond_alb_monitor
[  417.543463][T15551] Call Trace:
[  417.543472][T15551]  <TASK>
[  417.543481][T15551]  dump_stack_lvl+0xe8/0x150
[  417.543507][T15551]  print_deadlock_bug+0x279/0x290
[  417.543557][T15551]  __lock_acquire+0x24df/0x2cf0
[  417.543585][T15551]  ? __pfx_netif_skb_features+0x10/0x10
[  417.543606][T15551]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  417.543634][T15551]  ? lockdep_hardirqs_on+0x7a/0x110
[  417.543703][T15551]  ? ktime_get+0x45/0x220
[  417.543728][T15551]  ? sch_direct_xmit+0x15f/0x4c0
[  417.543744][T15551]  lock_acquire+0x106/0x350
[  417.543767][T15551]  ? sch_direct_xmit+0x15f/0x4c0
[  417.543789][T15551]  _raw_spin_lock+0x2e/0x40
[  417.543825][T15551]  ? sch_direct_xmit+0x15f/0x4c0
[  417.543840][T15551]  sch_direct_xmit+0x15f/0x4c0
[  417.543859][T15551]  ? __pfx_sch_direct_xmit+0x10/0x10
[  417.543875][T15551]  ? seqcount_lockdep_reader_access+0xea/0x100
[  417.543898][T15551]  ? ktime_get+0x1f5/0x220
[  417.543921][T15551]  __qdisc_run+0xb11/0x1620
[  417.543946][T15551]  __dev_queue_xmit+0x1c05/0x3820
[  417.543973][T15551]  ? __dev_queue_xmit+0x29b/0x3820
[  417.543998][T15551]  ? __pfx___dev_queue_xmit+0x10/0x10
[  417.544020][T15551]  ? neigh_resolve_output+0x428/0x720
[  417.544072][T15551]  ? eth_header+0x11b/0x200
[  417.544114][T15551]  ? __asan_memcpy+0x40/0x70
[  417.544144][T15551]  ? ip_finish_output2+0x3de/0x10b0
[  417.544163][T15551]  ip_finish_output2+0xc4b/0x10b0
[  417.544181][T15551]  ? ip_skb_dst_mtu+0x811/0xa50
[  417.544196][T15551]  ? ip_finish_output2+0x3de/0x10b0
[  417.544221][T15551]  ? ip_finish_output+0x40b/0x530
[  417.544238][T15551]  ip_output+0x29f/0x450
[  417.544254][T15551]  ? ip_output+0x5a/0x450
[  417.544270][T15551]  iptunnel_xmit+0x626/0xd10
[  417.544322][T15551]  ip_tunnel_xmit+0x195b/0x2040
[  417.544367][T15551]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  417.544386][T15551]  ? __pfx_gre_build_header+0x10/0x10
[  417.544437][T15551]  ? kfree+0x1c5/0x640
[  417.544465][T15551]  ? pskb_expand_head+0x469/0x13a0
[  417.544507][T15551]  __gre_xmit+0x19e/0x240
[  417.544532][T15551]  ? __pfx___gre_xmit+0x10/0x10
[  417.544560][T15551]  erspan_xmit+0xad5/0x1590
[  417.544589][T15551]  ? __pfx_erspan_xmit+0x10/0x10
[  417.544615][T15551]  ? __lock_acquire+0x683/0x2cf0
[  417.544641][T15551]  dev_hard_start_xmit+0x2cd/0x830
[  417.544668][T15551]  sch_direct_xmit+0x257/0x4c0
[  417.544687][T15551]  ? __pfx_sch_direct_xmit+0x10/0x10
[  417.544703][T15551]  ? __switch_to_asm+0x70/0x70
[  417.544723][T15551]  __dev_queue_xmit+0x177f/0x3820
[  417.544749][T15551]  ? __dev_queue_xmit+0x29b/0x3820
[  417.544775][T15551]  ? __pfx___dev_queue_xmit+0x10/0x10
[  417.544796][T15551]  ? rcu_is_watching+0x15/0xb0
[  417.544816][T15551]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  417.544837][T15551]  ? trace_kmem_cache_alloc+0x29/0xe0
[  417.544857][T15551]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  417.544879][T15551]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  417.544899][T15551]  ? local_lock_release+0x9c/0x160
[  417.544914][T15551]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  417.544940][T15551]  ? __alloc_skb+0x4cc/0x7a0
[  417.544958][T15551]  ? alb_send_lp_vid+0x14e/0x550
[  417.544985][T15551]  alb_send_lp_vid+0x348/0x550
[  417.545012][T15551]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  417.545043][T15551]  alb_send_learning_packets+0x12c/0x300
[  417.545069][T15551]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  417.545093][T15551]  ? bond_alb_monitor+0xf3/0x17c0
[  417.545119][T15551]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  417.545138][T15551]  bond_alb_monitor+0x3d0/0x17c0
[  417.545183][T15551]  ? bond_alb_monitor+0xf3/0x17c0
[  417.545213][T15551]  ? __pfx_bond_alb_monitor+0x10/0x10
[  417.545238][T15551]  ? rcu_is_watching+0x15/0xb0
[  417.545255][T15551]  ? process_scheduled_works+0xa20/0x14e0
[  417.545276][T15551]  process_scheduled_works+0xa8e/0x14e0
[  417.545309][T15551]  ? __pfx_process_scheduled_works+0x10/0x10
[  417.545332][T15551]  ? assign_work+0x3cf/0x5d0
[  417.545353][T15551]  worker_thread+0xa47/0xfb0
[  417.545385][T15551]  kthread+0x388/0x470
[  417.545411][T15551]  ? __pfx_worker_thread+0x10/0x10
[  417.545431][T15551]  ? __pfx_kthread+0x10/0x10
[  417.545456][T15551]  ret_from_fork+0x514/0xb70
[  417.545497][T15551]  ? __pfx_ret_from_fork+0x10/0x10
[  417.545522][T15551]  ? __switch_to+0xc89/0x1420
[  417.545545][T15551]  ? __pfx_kthread+0x10/0x10
[  417.545571][T15551]  ret_from_fork_asm+0x1a/0x30
[  417.545594][T15551]  </TASK>
[  418.980230][ T7224] syz1: Port: 1 Link DOWN
[  418.981055][T15545] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.993628][T15545] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.002351][T15545] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.011798][T15545] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.494809][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.045014][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  423.324638][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  425.244734][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!