last executing test programs:

9.838362001s ago: executing program 1 (id=3488):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendfile(r1, r2, 0x0, 0xffffffff000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000003cc0)=@delchain={0x2754, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2720, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2250, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x0, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0x7, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0xa, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x70e, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x7ff, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x6, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x2, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x5, 0x0, 0x159, 0x1}], [{0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3002}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xa, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0xb, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x3, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x7f, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45127, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x6, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x80000000}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x484, 0x1, [@m_skbmod={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, {0x27, 0x6, "075801550ef3811f3b51d77c14b2ccf8364f62f4068677c31bc8dc3e9156c6e8b5f4a9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x148, 0x315b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x221f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x790, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x4, 0x7, 0xc8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x613, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x80000000, 0x3, 0x4, 0x5}}]}, {0xc8, 0x6, "360e71829518ac4f1f54bb7606940ce2084cda0e7a803eb91d649a61b0dd9b5c482ba67b1a8651ff4fd776e30ee01cdd613ef9555cbc09504753e185b93c21f1df49d87328c94e6d85a232288b6343029c06d9cb234ed00418b6937fd30298466d792db600de0847663f2845b0574c92e303ca706a54f456a07981b0eff8e7e27f3f1c401cc420471af2c63c67e0fa327c0f71bf88e2c0c39a6dcd56231b57703d2b9b91ccb70170ff8fd74a00058ac6dbb26717a32dd79dca9561782d116d27fb70a0fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xdc, 0x2, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa3cd458bf7385503, 0xf}}]}, {0x9f, 0x6, "95e8636a5cf942ce3061b99517011f9e0aeddd7cbe638de4f45502add1a399deeca5cf6d189bf129a1b573abf0a45b292cd3511ac9c93ed7e66300b8cb7f7156d8bfa65eb92d32224410d20471fcc908db2cef270da1403f72163ad89e4b645e23e57605e15393be879b7ae6c3580e5ae53679174f8dcf6117037ff5a3b4e02ad5b00687971d952ab7a26656449eb97b92c62ab35ed3b38e683787"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_sample={0x78, 0x13, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xefb3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb, 0x8, 0x3, 0x200, 0xb922}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffeb28, 0x4, 0x7, 0xb73c, 0x1ff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0xa, 0x6, "9595f7a51756"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x17c, 0x1f, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd064, 0x2, 0x8, 0x0, 0xcf}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x3, 0x0, 0x8000, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x8, 0xffffffffffffffff, 0x4, 0x91a}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x9, 0x1, 0x9, 0x101}}]}, {0xc7, 0x6, "a9ee061ec7fef306da7752a16d3a114e93908ac55a77faa497da0a28f5aa6946fd8895d7c22d516647097b84ee868adc0d684677ecfa88c1631f3c18ef6f9cda96a5f94d97cd61adeb98c5b796ad1ecacf7f792a12231d75402bf97c8e99169bc3c95f372dc36b16d4fb3d4c78d42c15a68ad928b772257b9a3181649525fc65fe8a603f3caa83313cb21822dfecb4c9c2c313b30c2ce22bf56a41b69547d9dc296d56daa4bec1949acd598c669a67cf1371e478d83ddfaa1f66b1a00f593e057ae0b9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x2754}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="005d6d8b6a35002bbd7000fddbdf2527000003db54bc87a3cafcc89d2080273c0200d67112f5fdce477cf7a5ab28af3033ec450ffe9b2e9c1a8e4340bbe11a2dd2108b4cd0fc82d2d08a9fb99a2e964d7524c13863cfe8dcebb786a2bf93c9ddc5759ca814838322f75081", @ANYRES32=r9, @ANYBLOB="0600360004000000"], 0x24}}, 0x400c0c4)

9.352598771s ago: executing program 3 (id=3491):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x21, 0xa, 0x8b2)
socket$unix(0x1, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006600)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000006700)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006640)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fbdbdf256700000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x24008041}, 0x20000000)

6.568620282s ago: executing program 3 (id=3492):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)

6.421365086s ago: executing program 3 (id=3494):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x19, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44885}, 0x20048020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x677e30c579cf4fcc}, 0x40000)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x15}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f2", 0x47}], 0x1}, 0x44)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000380)={{[0x80000001, 0x9, 0xce]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000300)=[{{@align=0x4, {0x9, 0x5, 0x8, 0x6}}, 0x7, 0x0, '\x00'}, {{@_ha_fsid={[0xfff, 0x1]}, {0xfffe, 0x1, 0x1, 0x8000000000000001}}, 0x93, 0x0, ':#^++({/+{\x00'}, {{@_ha_fsid={[0xfc9, 0x53]}, {0x7, 0x4, 0xfff, 0x7fffffff}}, 0x8, 0x0, '\x00'}]})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x40, 0xa}, @window={0x3, 0x5089, 0x16}, @timestamp], 0x3)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x30, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r6, 0xcfa3e000)

6.180591532s ago: executing program 1 (id=3497):
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000081ffffffffffffff000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

6.180161379s ago: executing program 0 (id=3498):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0xa, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff6307309d08003d80040022800800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async)
r3 = socket$inet6(0xa, 0x80001, 0x0)
sendto$l2tp6(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000600)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) (async)
setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000000)="d2f15270c1f2824de5ea159eadf70f75a80d6c68", 0x14) (async)
r4 = socket(0x10, 0x80003, 0x0)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) (async)
accept4$unix(r1, 0x0, 0x0, 0x800)
pipe(&(0x7f0000000240)={<r7=>0xffffffffffffffff})
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000010400000000000000000000070000040800034000000002080003400000000608000340000000050a00020000000200020000000800044000000009271e217215b5fafd8897570800044064446620080005400000007f"], 0x50}, 0x1, 0x0, 0x0, 0xc06}, 0x20000)

5.390157748s ago: executing program 4 (id=3500):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x300, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

5.20916309s ago: executing program 4 (id=3502):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={<r3=>r0, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x2, {0x9a9e, 0x0, 0xcb17, 0x2}}, 0x6967, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', <r6=>r2, 0x4, 0x3, 0xa, 0xf, 0x5c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7, 0x8000, 0x0, 0x7}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000f80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x264, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r8, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000005c0)=0x9, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r12, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

5.196634378s ago: executing program 0 (id=3503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0)

1.716575484s ago: executing program 4 (id=3507):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x7)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0)
shutdown(r2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

1.710387415s ago: executing program 0 (id=3508):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f00000007c0)}, 0x20)
r6 = epoll_create1(0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x210009, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000002c0)={0xa002a014})
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x11c}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x1e}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x40012000)
socket$inet_icmp(0x2, 0x2, 0x1)

1.639593622s ago: executing program 1 (id=3509):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
unshare(0x22020600)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0)

1.638358849s ago: executing program 3 (id=3510):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000000, 0x2012, r0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x5e)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00'}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r3})
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000500000000000000000000008500000087000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1.40831728s ago: executing program 0 (id=3511):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e22, 0xc1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x4c)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000980)={{0xef06, 0x0, 0x90, 0xb, 0x3}, &(0x7f0000000440)})
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0xfffffffd)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r5=>0x0]}, &(0x7f0000000580)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7d, &(0x7f00000004c0)={r5, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90)
recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}}, &(0x7f0000000180)=0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c8014000100930a0000f602000005000000810000000c000700e60000000900000068000c8014000100ffffff7f"], 0xec}}, 0x4000844)

1.398485566s ago: executing program 4 (id=3512):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9}, 0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x1, 0x5d, 0x8001, 0x10, @mcast1, @mcast2, 0x1, 0x1, 0x4, 0x9}})
r6 = accept4$phonet_pipe(r3, &(0x7f0000000280), &(0x7f0000000300)=0x10, 0x800)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000180)={<r7=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="00000001000000a745d2d665bb6fd4ee0fec4b0029427b776c0e5d49"], 0x50) (async)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa608a9a3a4f843b8}]}}}]}, 0x60}}, 0x0) (async)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc90200000000000000", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x8, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
socket$igmp6(0xa, 0x3, 0x2)

1.312791169s ago: executing program 1 (id=3515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b12ab971f11579a05bf0aac59f346928fa86c822fd0649eb277bf1d4e4541d2604e60c38ec660ed50da3cbef7a994b89dbb2ef06cb252ef4892e", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703ffff07000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="60b800203da819b6c701c4d69571b2aad1344de69c9e3978b5886fdf32a24b6ae2e17c8db0b763930362", @ANYRES16, @ANYRES64, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000ce7a6a8ee388ce8caad8308e29d38c1e3f48282b0b245bdccdf453000000001f000000000000000000fdcecd8187aa93d54bd7d23963f6bb2396a8e7031f36fd1b834f5fb2f515dd0dd6cf139567c48b5a954d7d33b049ad8983cccf24619b13bd21d1096a6b69b6f9770e8b50cb344198e104478d96dddd0a89eb6a5bcbb0a99a15eaa9d2cc784246d3834ec0ac22c8cc7f7f82f993eda1dd211cc8d3e08970cb72d94ba5a311f03b3f460f517db4902dd1de2473c1fc0300db7fda765414350a563544a212eb03a61f631c8e13e9aa2681fa5cb7a6dcd96caed9f260135e", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket(0x15, 0x5, 0x0)
pwritev(r5, 0x0, 0x0, 0x7f, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000800000000050000000001110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x0, 0x0, 0x600}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.083975568s ago: executing program 2 (id=3516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c0000340002801400030000000000000000000008"], 0x64}}, 0x24000000)

1.062785178s ago: executing program 2 (id=3517):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28)
r2 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c000018003780130003007114d6bba919736d3429"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)

1.062422132s ago: executing program 4 (id=3518):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000680)={{0x11, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x12, 0x9, 0x43}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e22, 0x10000, 0x5, 0x2}}, 0x44)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000380))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000001600000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080)="57c13f74018b73013fd9eb8648fe07fb1cb0c2c33da929d6daced5564d7363d324eb4f9d60d3b502ca0ab8a8d8a32328a1cb62ca1806fe9d2eb51b26507901c0f7ab5c02e0419f8e2a11ca96b665d4d0aba36b8b9ca6d5d4bfef56034cc28b80ae418efbf3180bda42e5e8480617479aa45b8352aa7765ccdee8e09a2a35cefc6ef8d1a7309c7842c35bd0d9f4e65d405e5aa02c20165a634186c723948ee7c998ae2fc824883c1d5d0d6c2a49d5660e46d5fd2656519c01eab52511af1bdfc3f0fe20807da942e77fb0b49c4c7c67e1f768144fb88b8dfcdc49200a459ecfcbf4eeb9907496aa50183da5", &(0x7f0000000180)=@udp=r0, 0x2}, 0x20)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
close(r2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22)

1.005455438s ago: executing program 1 (id=3519):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x21, 0xa, 0x8b2)
socket$unix(0x1, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006600)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000006700)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fbdbdf256700000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x24008041}, 0x20000000) (fail_nth: 2)

836.533759ms ago: executing program 1 (id=3520):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x19, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44885}, 0x20048020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x677e30c579cf4fcc}, 0x40000)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x15}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f2", 0x47}], 0x1}, 0x44)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000380)={{[0x80000001, 0x9, 0xce]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000300)=[{{@align=0x4, {0x9, 0x5, 0x8, 0x6}}, 0x7, 0x0, '\x00'}, {{@_ha_fsid={[0xfff, 0x1]}, {0xfffe, 0x1, 0x1, 0x8000000000000001}}, 0x93, 0x0, ':#^++({/+{\x00'}, {{@_ha_fsid={[0xfc9, 0x53]}, {0x7, 0x4, 0xfff, 0x7fffffff}}, 0x8, 0x0, '\x00'}]})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x40, 0xa}, @window={0x3, 0x5089, 0x16}, @timestamp], 0x3)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x30, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r6, 0xcfa3e000)

784.944496ms ago: executing program 2 (id=3521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4d, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4b)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r9)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r9)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r12=>0x0})
r13 = socket(0x8, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYRESHEX=r10], 0x50)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="184837a5a681f4206e0d33c1241c14776ad59305fe66ce393b5e4ac17d0806e274acf5bfc70643daaa36f9414821aef698ff995505e000a3c7dda4066dd6d48e", @ANYRES16=r8, @ANYRES8=r7, @ANYRES32=r12, @ANYBLOB="0500020010000000060005004e240000080006000700000008000300e000000108000400000000050800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000f40)={0x22c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd22f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6653}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3897}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23b6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f788b49dbaeefb9b8d93be5dbba7c483c781a72b"}}]}, @TIPC_NLA_MON={0x4}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8094}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r14, 0x0, 0x30, 0x0, @void}, 0x40)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001740)={0x0, 0xffffffa5, &(0x7f0000001700)={&(0x7f0000000000)={0x1c, r1, 0x6a4104b68300861d, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x408b4)

783.905469ms ago: executing program 4 (id=3522):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8010000190001002abd7000fbdbdf251d01090050001280"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0)

536.378077ms ago: executing program 3 (id=3523):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x20, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0)=0x80000002, 0x12)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', <r4=>0x0, 0x40, 0x80, 0x2, 0x7fffffff, {{0x8, 0x4, 0x0, 0x28, 0x20, 0x66, 0x0, 0x9c, 0x29, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0xb, 0xac, [@loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', r4, 0x10, 0x10, 0x3, 0x0, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xca, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010101, @multicast1, @multicast2, @empty]}, @ra={0x94, 0x4}]}}}}})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x7c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r6, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f00000000c0)}, 0x20)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000400)={0x73})
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3)

380.35364ms ago: executing program 0 (id=3524):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x2080}, 0x1c) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x300, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async, rerun: 64)
r4 = socket$kcm(0x1e, 0x4, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) (async, rerun: 64)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async)
sendmmsg(r5, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x119, 0xc}], 0x10}}], 0x1, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r7=>0x0}) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x8000)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000140)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'gretap0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

354.806937ms ago: executing program 2 (id=3525):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

344.356083ms ago: executing program 0 (id=3526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x44010)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x21, 0xa, 0x8b2)
socket$unix(0x1, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006600)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000006700)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf256700000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x24008041}, 0x20000000)

172.456918ms ago: executing program 3 (id=3527):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500082c01fe8000000000000000000000000000bbfeda"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x34, 0x10, 0x403, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x777]}}, 0x5c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xc4, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0xb0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xedc}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ad}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x4, {0x1, [{0x1, 0xbe}]}}, 0x6)
close(r1)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x0, {[0x80000001, 0x0, 0x0, 0xffffffff, 0x8a, 0x0, 0x2, 0x3]}}, 0x5c)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)

131.375526ms ago: executing program 2 (id=3528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c0000340002801400030000000000000000000008"], 0x64}}, 0x24000000)

0s ago: executing program 2 (id=3529):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x8}}}, &(0x7f0000000200)=0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000280))
getsockopt$sock_buf(r0, 0x1, 0xc, &(0x7f0000001b00)=""/4096, 0x0) (async)
getsockopt$sock_buf(r0, 0x1, 0xc, &(0x7f0000001b00)=""/4096, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x78, 0x9, 0x8, @private0, @private2, 0x7800, 0xd7be7c19fe62526e, 0x1, 0x5}})
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x18, 0x3, 0x8) (async)
r6 = socket(0x18, 0x3, 0x8)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @empty}, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="5895", 0x2}], 0x1}}], 0x2, 0x40088d4)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="0a000080a36b64086860000004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
shutdown(r9, 0x1)

kernel console output (not intermixed with test programs):

leased all slaves
[  363.239172][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'.
[  363.478646][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'.
[  363.530392][T13588] nbd: device at index 64 is going down
[  363.611046][T13598] macvtap0: entered promiscuous mode
[  363.652802][T13598] vlan0: entered promiscuous mode
[  363.715355][T13598] vlan0: left promiscuous mode
[  363.828149][T13007] udevd[13007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  364.836603][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'.
[  365.047429][T13627] veth1_to_batadv: left allmulticast mode
[  365.254086][T13627] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  365.464122][T13627] vlan3: left allmulticast mode
[  365.476254][T13627] bridge5: left allmulticast mode
[  365.489758][T13655] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2070'.
[  365.500445][T13656] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  365.583223][T13335] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.602479][T13335] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.642974][T13335] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.674307][T13335] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.700022][T13335] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.728263][T13335] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.748301][T13335] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.764816][T13335] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.783561][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  365.784287][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  366.240701][T13697] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  366.727948][T13706] vlan0: entered promiscuous mode
[  366.847585][T13708] netlink: 'syz.1.2087': attribute type 4 has an invalid length.
[  366.875173][T13708] __nla_validate_parse: 2 callbacks suppressed
[  366.875192][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'.
[  366.942310][T13712] netlink: 'syz.2.2089': attribute type 2 has an invalid length.
[  366.957767][T13708] lo: left allmulticast mode
[  366.981516][T13715] netlink: 'syz.4.2090': attribute type 13 has an invalid length.
[  367.017184][T13715] netlink: 'syz.4.2090': attribute type 13 has an invalid length.
[  367.027409][T13712] netlink: 'syz.2.2089': attribute type 1 has an invalid length.
[  367.037823][T13712] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2089'.
[  367.239312][T13727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.806800][T13752] xt_HMARK: proto mask must be zero with L3 mode
[  368.230010][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'.
[  368.239358][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'.
[  368.252538][T13767] sch_fq: defrate 4294967293 ignored.
[  368.619063][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  368.668738][T13784] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  368.722998][T13784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  368.770670][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'.
[  368.962998][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'.
[  369.329051][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'.
[  369.432784][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'.
[  369.953263][T13862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2129'.
[  370.828328][T13913] netlink: 'syz.3.2146': attribute type 11 has an invalid length.
[  371.010662][T13913] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  371.019186][T13913] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  371.034632][T13927] dummy0: entered promiscuous mode
[  371.709498][T13954] vlan4: entered promiscuous mode
[  371.720350][T13954] bridge0: entered promiscuous mode
[  371.759144][T13961] netlink: 'syz.0.2154': attribute type 4 has an invalid length.
[  371.818955][T13954] nbd: couldn't find a device at index 0
[  372.419302][T14004] syzkaller0: entered promiscuous mode
[  372.427427][T14004] syzkaller0: entered allmulticast mode
[  372.698944][T14006] __nla_validate_parse: 3 callbacks suppressed
[  372.698963][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'.
[  372.780265][T14011] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.923224][T14011] tipc: Resetting bearer <eth:syzkaller0>
[  372.964446][T14011] bridge1: port 1(veth5) entered disabled state
[  373.016223][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  373.056345][T13340] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.079984][T13340] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  373.090994][T13340] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.100617][T13340] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.112845][T13340] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  373.122715][T13340] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.166757][T13340] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.184641][T13340] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  373.211184][T13340] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.304605][T13340] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.342762][T13340] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0
[  373.376771][T13340] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.395805][T14031] syzkaller1: entered promiscuous mode
[  373.411900][T14031] syzkaller1: entered allmulticast mode
[  373.464333][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  373.505695][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'.
[  373.599585][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2179'.
[  374.171439][T14087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2187'.
[  374.181524][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'.
[  374.193984][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'.
[  374.348574][T14093] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  374.370658][T14093] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  374.405796][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'.
[  374.460844][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'.
[  374.678707][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'.
[  374.779093][T14118] netlink: 'syz.4.2195': attribute type 1 has an invalid length.
[  374.896566][T14122] bond5: (slave gretap1): making interface the new active one
[  374.910066][T14122] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  374.936559][T14118] macvlan3: entered promiscuous mode
[  374.953645][T14118] macvlan3: entered allmulticast mode
[  374.961056][T14118] bond5: entered promiscuous mode
[  374.973541][T14118] gretap1: entered promiscuous mode
[  374.980292][T14118] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  374.989409][T14118] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  375.006340][T14118] bond5: left promiscuous mode
[  375.011362][T14118] gretap1: left promiscuous mode
[  375.154751][T14124] Unsupported ieee802154 address type: 0
[  376.012940][T14179] netlink: 'syz.1.2210': attribute type 1 has an invalid length.
[  376.166504][T14179] bond3: entered promiscuous mode
[  376.172356][T14179] 8021q: adding VLAN 0 to HW filter on device bond3
[  376.499778][T14211] bridge_slave_0: left allmulticast mode
[  376.521710][T14211] bridge_slave_0: left promiscuous mode
[  376.552021][T14211] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.649720][T14211] bridge_slave_1: left allmulticast mode
[  376.672022][T14206] netlink: 'syz.1.2215': attribute type 3 has an invalid length.
[  376.680784][T14211] bridge_slave_1: left promiscuous mode
[  376.706161][T14211] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.765389][T14211] bond0: (slave bond_slave_0): Releasing backup interface
[  376.792462][T14211] bond_slave_0: left promiscuous mode
[  376.826084][T14211] bond0: (slave bond_slave_1): Releasing backup interface
[  376.840150][T14211] bond_slave_1: left promiscuous mode
[  376.876788][T14211] team0: Port device team_slave_0 removed
[  376.915661][T14211] team0: Port device team_slave_1 removed
[  376.941797][T14211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.950380][T14211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.966104][T14211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.973710][T14211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.984846][T14211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  377.099478][T14219] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  377.133632][T14242] netlink: 'syz.4.2221': attribute type 19 has an invalid length.
[  377.180786][T14242] netlink: 'syz.4.2221': attribute type 20 has an invalid length.
[  377.394746][T14259] netlink: 'syz.3.2224': attribute type 14 has an invalid length.
[  377.809043][T14286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.933681][T14286] bond4 (unregistering): Released all slaves
[  378.751891][T14333] __nla_validate_parse: 8 callbacks suppressed
[  378.751909][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'.
[  378.784738][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2243'.
[  379.201114][T14346] pimreg: entered allmulticast mode
[  379.229569][T14346] pimreg: left allmulticast mode
[  379.471214][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  379.767154][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2248'.
[  379.840690][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'.
[  380.050588][T14378] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  380.093757][T14378] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  380.108018][T14378] netlink: 'syz.3.2255': attribute type 3 has an invalid length.
[  380.118715][T14378] netlink: 'syz.3.2255': attribute type 16 has an invalid length.
[  380.121643][T14380] bond0: (slave vlan4): Opening slave failed
[  380.128916][T14378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2255'.
[  380.309442][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2258'.
[  380.425791][T14394] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2260'.
[  380.436295][T14394] tc_dump_action: action bad kind
[  380.445477][T14397] netlink: 'syz.4.2261': attribute type 4 has an invalid length.
[  380.498644][T14397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  380.514020][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  380.525334][T14399] Bluetooth: MGMT ver 1.23
[  380.597837][T14389] veth9: entered allmulticast mode
[  380.640190][T14389] bond7: (slave veth9): Enslaving as an active interface with an up link
[  380.696120][T14395] bond7 (unregistering): (slave veth9): Releasing backup interface
[  380.719363][T14395] bond7 (unregistering): Released all slaves
[  380.799385][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'.
[  380.834617][T14424] netlink: 'syz.2.2268': attribute type 32 has an invalid length.
[  380.849366][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'.
[  381.154347][T14431] sctp: [Deprecated]: syz.3.2270 (pid 14431) Use of int in max_burst socket option.
[  381.154347][T14431] Use struct sctp_assoc_value instead
[  381.754229][T14431] netlink: 'syz.3.2270': attribute type 1 has an invalid length.
[  381.766172][ T5650] block nbd6: Receive control failed (result -32)
[  381.767073][ T5654] block nbd6: Receive control failed (result -32)
[  382.200140][T14468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.228260][T14468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.244892][T14468] bond0 (unregistering): Released all slaves
[  382.415877][T14484] bond4: option broadcast_neighbor: invalid value (30)
[  382.425004][T14484] bond4 (unregistering): Released all slaves
[  382.458604][T14482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.939257][T14509] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.128012][T14511] netlink: 'syz.3.2293': attribute type 21 has an invalid length.
[  383.452899][T14517] bond4: option packets_per_slave: invalid value (1048582)
[  383.460643][T14517] bond4: option packets_per_slave: allowed values 0 - 65535
[  383.470974][T14517] bond4 (unregistering): Released all slaves
[  383.706620][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  383.856976][T14546] netlink: 'syz.3.2300': attribute type 46 has an invalid length.
[  383.992311][T14552] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  384.012914][T14552] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  384.033505][T14552] veth1_to_bond: entered allmulticast mode
[  384.049125][T14555] xt_hashlimit: size too large, truncated to 1048576
[  384.057354][T14552] __nla_validate_parse: 15 callbacks suppressed
[  384.057376][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'.
[  384.092967][T14552] veth1_to_bond (unregistering): left allmulticast mode
[  384.098059][T14557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2305'.
[  384.925975][T14581] nbd: socks must be embedded in a SOCK_ITEM attr
[  384.981080][T14581] block nbd7: shutting down sockets
[  385.179130][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2319'.
[  385.230957][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'.
[  385.260427][T14604] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  385.406651][T14604] 8021q: adding VLAN 0 to HW filter on device bond5
[  385.427633][T14604] bond4: (slave bond5): making interface the new active one
[  385.438451][T14604] bond4: (slave bond5): Enslaving as an active interface with an up link
[  385.565264][T14624] team0: Mode changed to "broadcast"
[  385.573276][T14624] sctp: [Deprecated]: syz.1.2324 (pid 14624) Use of int in max_burst socket option.
[  385.573276][T14624] Use struct sctp_assoc_value instead
[  386.897897][T14665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2336'.
[  387.157224][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2340'.
[  387.280164][T14648] syzkaller1: entered promiscuous mode
[  387.298386][T14648] syzkaller1: entered allmulticast mode
[  387.436856][T14681] netlink: 'syz.2.2341': attribute type 23 has an invalid length.
[  387.447962][T14681] netlink: 'syz.2.2341': attribute type 21 has an invalid length.
[  387.477930][T14681] IPv6: NLM_F_CREATE should be specified when creating new route
[  387.856000][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'.
[  388.002935][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'.
[  388.025319][T14700] openvswitch: netlink: Flow actions attr not present in new flow.
[  388.215902][T14708] netlink: 'syz.4.2349': attribute type 4 has an invalid length.
[  388.243544][T14708] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2349'.
[  388.305323][T14713] sctp: [Deprecated]: syz.4.2349 (pid 14713) Use of int in max_burst socket option.
[  388.305323][T14713] Use struct sctp_assoc_value instead
[  388.473331][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'.
[  388.501548][T14720] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  388.538948][T14720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  389.216800][T14755] __nla_validate_parse: 2 callbacks suppressed
[  389.216816][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2366'.
[  389.308041][T14758] netlink: 'syz.3.2369': attribute type 1 has an invalid length.
[  389.315820][T14758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2369'.
[  389.609542][T14774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'.
[  389.743627][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2375'.
[  389.861586][T14770] RDS: rds_bind could not find a transport for ::c001:0:20:0, load rds_tcp or rds_rdma?
[  390.865206][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'.
[  390.895284][T14827] xt_hashlimit: size too large, truncated to 1048576
[  391.225662][T14839] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2388'.
[  391.356111][T14842] sctp: [Deprecated]: syz.1.2388 (pid 14842) Use of int in max_burst socket option.
[  391.356111][T14842] Use struct sctp_assoc_value instead
[  392.576084][T14831] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  392.601576][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  392.665232][T13335] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.680970][T13335] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.710941][T13335] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.747766][T13335] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.787919][T13335] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.808861][T13335] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.246828][T14870] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  393.887631][T14890] 8021q: adding VLAN 0 to HW filter on device team0
[  393.995851][T14890] veth1_vlan: left promiscuous mode
[  394.002597][T14890] veth0_vlan: left promiscuous mode
[  394.009449][T14890] veth0_vlan: entered promiscuous mode
[  394.022520][T14890] veth1_vlan: entered promiscuous mode
[  394.049360][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  394.068868][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  394.081611][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  394.094779][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  394.108714][T14890] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  394.122184][T14890] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.135048][T14890] 8021q: adding VLAN 0 to HW filter on device bond2
[  394.143166][T14890] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  394.241030][T14890] 8021q: adding VLAN 0 to HW filter on device bond3
[  394.256921][T14890] 8021q: adding VLAN 0 to HW filter on device bond4
[  394.268050][T14890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.293757][T14890] 8021q: adding VLAN 0 to HW filter on device bond5
[  394.315216][T14890] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  394.342170][T13345] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.349404][T13345] bridge0: port 2(bridge_slave_1) entered listening state
[  394.469187][T13345] bridge1: port 1(veth5) entered blocking state
[  394.475642][T13345] bridge1: port 1(veth5) entered forwarding state
[  394.494458][T13340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.503436][T13340] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  394.512354][T13340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.548546][T13340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.557853][T13340] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  394.567153][T13340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.612673][T13340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.652700][T13340] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  394.674417][T13340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.726195][T13356] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.753293][T13356] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  394.782045][T13356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.848939][T14921] netlink: 'syz.0.2410': attribute type 6 has an invalid length.
[  394.868174][T14921] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2410'.
[  394.880080][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2408'.
[  394.934696][T14927] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.2410'.
[  395.008345][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'.
[  395.203907][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'.
[  395.283897][T14946] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2417'.
[  395.293262][T14946] netlink: 'syz.4.2417': attribute type 1 has an invalid length.
[  395.537782][T14947] xt_hashlimit: max too large, truncated to 1048576
[  395.544737][T14947] xt_ecn: cannot match TCP bits for non-tcp packets
[  395.892856][T14959] netlink: 'syz.2.2419': attribute type 1 has an invalid length.
[  395.927516][T14959] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.149258][T14971] netlink: 'syz.1.2423': attribute type 1 has an invalid length.
[  396.253238][T14971] 8021q: adding VLAN 0 to HW filter on device bond6
[  396.315663][T14977] 8021q: adding VLAN 0 to HW filter on device bond6
[  396.368303][T14977] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  396.383720][T14977] bond6: (slave gre1): Error -95 calling set_mac_address
[  396.695321][T15009] netlink: 'syz.3.2430': attribute type 21 has an invalid length.
[  396.718451][T15009] IPv6: NLM_F_CREATE should be specified when creating new route
[  396.727491][T15012] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2429'.
[  396.742493][T15009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  396.751705][T15009] IPv6: NLM_F_CREATE should be set when creating new route
[  396.759034][T15009] IPv6: NLM_F_CREATE should be set when creating new route
[  396.766425][T15009] IPv6: NLM_F_CREATE should be set when creating new route
[  397.154302][ T5654] block nbd8: Receive control failed (result -32)
[  397.157195][ T5650] block nbd8: Receive control failed (result -32)
[  397.751690][T15035] ip6tnl4: entered allmulticast mode
[  397.848345][T15041] erspan0: entered promiscuous mode
[  397.889006][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'.
[  397.925325][T13356] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  397.953166][T13356] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  398.045941][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  398.131360][T15049] xt_hashlimit: size too large, truncated to 1048576
[  398.374302][T12895] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  398.497826][T15049] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2442'.
[  398.592237][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'.
[  398.729118][T15081] netlink: 'syz.4.2448': attribute type 1 has an invalid length.
[  398.737201][T15081] netlink: 'syz.4.2448': attribute type 2 has an invalid length.
[  399.082625][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  399.107377][T15102] erspan0: left promiscuous mode
[  399.114843][T15102] bond0: left promiscuous mode
[  399.157593][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  399.174116][T15102] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  399.191619][T15102] veth5: left allmulticast mode
[  399.202057][T15102] bond3: left promiscuous mode
[  399.207871][T15102] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  399.215182][T15102] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  399.224225][T15102] ip6tnl4: left allmulticast mode
[  399.273422][T12895] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  399.870693][T15145] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  399.911409][T15145] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  400.026084][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  400.319847][T15159] __nla_validate_parse: 6 callbacks suppressed
[  400.319867][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2470'.
[  400.717961][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'.
[  400.917025][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  400.978682][T15181] syzkaller0: entered promiscuous mode
[  401.002721][T15181] syzkaller0: entered allmulticast mode
[  401.612740][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  401.837693][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'.
[  402.545824][T15261] netlink: 'syz.4.2496': attribute type 142 has an invalid length.
[  402.677163][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'.
[  402.682315][T15267] syzkaller1: entered promiscuous mode
[  402.702276][T15267] syzkaller1: entered allmulticast mode
[  402.720280][T15267] netlink: 'syz.0.2499': attribute type 24 has an invalid length.
[  402.799777][T15276] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2501'.
[  402.838511][T15276] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2501'.
[  403.403358][T15304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2511'.
[  403.438137][T15306] bridge_slave_0: left allmulticast mode
[  403.453273][T15306] bridge_slave_0: left promiscuous mode
[  403.490066][T15306] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.657585][T15306] bridge_slave_1: left allmulticast mode
[  403.711557][T15306] bridge_slave_1: left promiscuous mode
[  403.741867][T15306] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.761153][T15306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  403.982586][T15306] RDS: rds_bind could not find a transport for ::200:0:8000:0:20:0, load rds_tcp or rds_rdma?
[  404.018948][T15335] netlink: 'syz.2.2518': attribute type 11 has an invalid length.
[  404.054407][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'.
[  404.077674][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'.
[  404.113820][T15328] sctp: [Deprecated]: syz.4.2517 (pid 15328) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.113820][T15328] Use struct sctp_sack_info instead
[  404.440981][T15343] bond4: Unable to set down delay as MII monitoring is disabled
[  404.506315][T15343] bond4 (unregistering): Released all slaves
[  404.648196][T15365] syz_tun: entered allmulticast mode
[  404.889243][T15381] netlink: 'syz.2.2531': attribute type 1 has an invalid length.
[  404.994783][T15381] 8021q: adding VLAN 0 to HW filter on device bond8
[  405.005088][T15381] netlink: 'syz.2.2531': attribute type 1 has an invalid length.
[  405.975628][T15435] __nla_validate_parse: 4 callbacks suppressed
[  405.975647][T15435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2546'.
[  406.092443][T15445] xt_TCPMSS: Only works on TCP SYN packets
[  406.102213][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'.
[  406.121031][T15445] vlan3: left allmulticast mode
[  406.138740][T15445] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  406.164220][T15445] vlan3: left promiscuous mode
[  406.178336][T15445] bridge0: port 1(vlan3) entered disabled state
[  406.196568][T15445] bridge_slave_1: left allmulticast mode
[  406.202486][T15445] bridge_slave_1: left promiscuous mode
[  406.208882][T15445] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.682859][T15460] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  406.993888][T15472] block nbd9: server does not support multiple connections per device.
[  407.007784][T15472] block nbd9: shutting down sockets
[  407.234656][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2562'.
[  407.247059][T15485] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  407.440206][T15490] netlink: 'syz.4.2563': attribute type 4 has an invalid length.
[  407.669368][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'.
[  407.767936][T15479] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  407.777710][T15479] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  407.912502][T15479] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  407.928753][T15479] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  407.953351][T15479] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  407.967139][T15479] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  407.999034][T15479] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  408.007423][T15479] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  408.101934][T15479] tipc: Resetting bearer <eth:syzkaller0>
[  408.794556][T15525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2573'.
[  408.807084][T15521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2572'.
[  408.883361][T15521] netlink: 'syz.2.2572': attribute type 1 has an invalid length.
[  408.938782][T15521] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2572'.
[  409.010725][T15536] netlink: 'syz.1.2575': attribute type 6 has an invalid length.
[  409.073697][T15539] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  409.328977][T15545] netlink: 'syz.1.2578': attribute type 29 has an invalid length.
[  409.382952][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  410.052308][T15566] pimreg: entered allmulticast mode
[  410.244015][T15574] syzkaller0: entered promiscuous mode
[  410.249630][T15574] syzkaller0: entered allmulticast mode
[  410.439944][T15574] veth1_to_bond: entered allmulticast mode
[  410.448252][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'.
[  410.464236][T15574] veth1_to_bond (unregistering): left allmulticast mode
[  410.564495][T15586] xt_hashlimit: size too large, truncated to 1048576
[  410.898560][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'.
[  410.975515][T15601] 8021q: adding VLAN 0 to HW filter on device bond9
[  411.175020][T15611] IPVS: Error connecting to the multicast addr
[  412.071454][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'.
[  412.090211][T15638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'.
[  412.100290][T15638] netlink: 'syz.2.2598': attribute type 21 has an invalid length.
[  412.113647][T15638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2598'.
[  412.150575][T15640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2601'.
[  412.175650][T15638] netlink: 'syz.2.2598': attribute type 5 has an invalid length.
[  412.196513][T15638] netlink: 'syz.2.2598': attribute type 6 has an invalid length.
[  412.240433][T15638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2598'.
[  412.577567][T15653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2606'.
[  412.707056][T15656] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2607'.
[  412.736441][T15656] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2607'.
[  412.825900][T15663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2610'.
[  412.856598][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'.
[  412.872988][T15666] netlink: 'syz.2.2608': attribute type 1 has an invalid length.
[  413.158989][T15681] netlink: 'syz.1.2614': attribute type 2 has an invalid length.
[  413.166859][T15681] netlink: 'syz.1.2614': attribute type 8 has an invalid length.
[  413.520991][T15696] IPVS: Unknown mcast interface: bridge_slave_0
[  413.978309][T15725] netlink: 'syz.0.2627': attribute type 26 has an invalid length.
[  414.027294][T15725] netlink: 'syz.0.2627': attribute type 1 has an invalid length.
[  414.053270][T15727] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  414.260789][T15735] syzkaller0: entered promiscuous mode
[  414.266323][T15735] syzkaller0: entered allmulticast mode
[  418.100944][T15793] __nla_validate_parse: 4 callbacks suppressed
[  418.100965][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2640'.
[  418.471172][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2646'.
[  418.490125][T15818] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  418.495439][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'.
[  418.550977][T15817] netlink: 'syz.0.2648': attribute type 13 has an invalid length.
[  418.558844][T15817] netlink: 'syz.0.2648': attribute type 17 has an invalid length.
[  418.873306][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.959855][T15817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  418.978213][T15817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.004191][T15817] A link change request failed with some changes committed already. Interface ŞŞŞŞŞ! may have been left with an inconsistent configuration, please check.
[  419.240225][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  419.641641][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2652'.
[  419.739179][T15855] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  419.747038][T15855] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  419.857385][T15863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'.
[  420.181460][T15878] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2665'.
[  420.192189][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'.
[  420.201293][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'.
[  420.298867][T15884] geneve2: entered promiscuous mode
[  420.315659][T15885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2663'.
[  420.418950][   T29] audit: type=1804 audit(1781696273.261:10): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2669" name="/newroot/575/cgroup.controllers" dev="tmpfs" ino=2957 res=1 errno=0
[  420.459475][   T29] audit: type=1800 audit(1781696273.321:11): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2669" name="cgroup.controllers" dev="tmpfs" ino=2957 res=0 errno=0
[  420.481430][   T29] audit: type=1800 audit(1781696273.321:12): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2669" name="cgroup.controllers" dev="tmpfs" ino=2957 res=0 errno=0
[  420.737585][T15889] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  420.746823][T15889] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  422.485718][ T5654] block nbd9: Receive control failed (result -1)
[  423.197972][T15960] bridge1: port 1(veth5) entered disabled state
[  423.297606][T15974] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  423.311897][T13338] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.329208][T13338] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  423.338085][T13338] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.401804][T13338] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.410718][T13338] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  423.419594][T13338] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.428684][T13338] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.449843][T13338] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  423.470628][T13338] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.517450][T13338] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.532515][T13338] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0
[  423.541426][T13338] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.663180][T15988] __nla_validate_parse: 8 callbacks suppressed
[  423.663199][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'.
[  423.723596][T15988] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2697'.
[  423.728799][T15993] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  423.758231][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'.
[  423.859182][T16000] syzkaller1: entered promiscuous mode
[  423.864713][T16000] syzkaller1: entered allmulticast mode
[  424.197242][T16005] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  424.231782][T16014] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003
[  424.306797][T16014] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004
[  424.605454][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'.
[  424.701908][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  425.115350][T16043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2714'.
[  425.232637][T16047] bridge0: port 1(vlan5) entered blocking state
[  425.261350][T16047] bridge0: port 1(vlan5) entered disabled state
[  425.302222][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'.
[  425.308320][T16047] vlan5: entered allmulticast mode
[  425.316505][T16047] geneve0: entered allmulticast mode
[  425.601321][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'.
[  425.601328][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'.
[  425.723224][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'.
[  425.732286][T16067] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  425.739867][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2720'.
[  425.773852][T16068] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  425.781465][T16068] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  425.788609][T16068] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  425.848060][T16068] ip6tnl2: left allmulticast mode
[  425.853353][T16068] geneve2: left promiscuous mode
[  425.858473][T16068] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  425.883535][T16068] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  425.891289][T16068] veth9: left allmulticast mode
[  426.186266][T16089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.229878][T16091] lo: entered allmulticast mode
[  426.250839][T16091] lo: left allmulticast mode
[  427.570320][T16141] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  427.584971][T16141] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.178381][T16169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.197598][T16169] tipc: Resetting bearer <eth:syzkaller0>
[  428.375792][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.673624][T16193] __nla_validate_parse: 13 callbacks suppressed
[  428.673647][T16193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2761'.
[  428.690262][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2762'.
[  428.862124][T16199] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2765'.
[  429.047651][T16214] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  429.061086][T16215] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  429.139320][T16214] netlink: 'syz.2.2769': attribute type 1 has an invalid length.
[  429.147183][T16214] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2769'.
[  429.156215][T16214] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2769'.
[  429.480377][T16228] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  429.603948][T16235] netlink: 'syz.2.2774': attribute type 1 has an invalid length.
[  429.665572][T16244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'.
[  429.691347][T16207] sit0: entered promiscuous mode
[  429.712692][T16207] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  429.739150][T16207] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2768'.
[  429.784425][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2774'.
[  429.794489][T16246] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  429.907615][T16235] veth15: entered promiscuous mode
[  429.940905][T16235] bond10: (slave veth15): Enslaving as a backup interface with a down link
[  429.955702][T16207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2768'.
[  430.335998][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'.
[  430.873686][T16261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.899856][T16297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  431.183517][T16307] team0: left promiscuous mode
[  431.188335][T16307] team_slave_0: left promiscuous mode
[  431.241655][T16307] team_slave_1: left promiscuous mode
[  431.247473][T16307] team0: left allmulticast mode
[  431.276823][T16307] team_slave_0: left allmulticast mode
[  431.279702][T16317] netlink: 'syz.3.2791': attribute type 13 has an invalid length.
[  431.282334][T16307] team_slave_1: left allmulticast mode
[  431.282362][T16307] netdevsim netdevsim4 netdevsim1: left allmulticast mode
[  431.325555][T16317] netlink: 'syz.3.2791': attribute type 5 has an invalid length.
[  431.377354][T16307] 8021q: adding VLAN 0 to HW filter on device team0
[  431.718145][T16307] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  431.835644][T16320] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  431.843088][T16320] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  431.922172][T16335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.564999][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  433.578827][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  433.589144][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  433.600711][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  433.610548][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  433.709782][ T5654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  433.718601][ T5654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  433.740472][ T5654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  433.748633][ T5654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  433.756280][ T5654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  433.844771][T16407] __nla_validate_parse: 52 callbacks suppressed
[  433.844790][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2819'.
[  433.900914][T16407] hsr_slave_0: left promiscuous mode
[  433.930491][T16407] hsr_slave_1: left promiscuous mode
[  434.145318][T16414] veth0_to_hsr: entered promiscuous mode
[  434.159556][T16414] veth0_to_hsr: left promiscuous mode
[  434.634577][T16431] sch_fq: defrate 8 ignored.
[  434.666371][T16433] netlink: 'syz.0.2824': attribute type 4 has an invalid length.
[  434.668359][T16434] netlink: 'syz.0.2824': attribute type 4 has an invalid length.
[  434.674215][T16433] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2824'.
[  434.763007][T16435] syzkaller0: entered promiscuous mode
[  434.768526][T16435] syzkaller0: entered allmulticast mode
[  434.775987][T16434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2824'.
[  434.849393][T16439] netlink: 'syz.1.2823': attribute type 1 has an invalid length.
[  435.101420][T16443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2827'.
[  435.796760][T16453] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  435.827442][ T5650] Bluetooth: hci5: command tx timeout
[  435.980605][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'.
[  436.006314][T16401] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.013558][T16401] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.020791][T16401] bridge_slave_0: entered allmulticast mode
[  436.028805][T16401] bridge_slave_0: entered promiscuous mode
[  436.063697][T16401] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.070854][T16401] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.078096][T16401] bridge_slave_1: entered allmulticast mode
[  436.094133][T16401] bridge_slave_1: entered promiscuous mode
[  436.209946][T16401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.247073][T16401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.392304][T16483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2838'.
[  436.480897][T16401] team0: Port device team_slave_0 added
[  436.511390][T16401] team0: Port device team_slave_1 added
[  436.621154][T16401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.640919][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.701380][T16401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.724974][T16401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.743014][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.780874][T16401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.051101][T16401] hsr_slave_0: entered promiscuous mode
[  437.069414][T16401] hsr_slave_1: entered promiscuous mode
[  437.076765][T16502] netlink: 'syz.1.2844': attribute type 1 has an invalid length.
[  437.077377][T16401] debugfs: 'hsr0' already exists in 'hsr'
[  437.090805][T16401] Cannot create hsr debugfs directory
[  437.195252][T16502] 8021q: adding VLAN 0 to HW filter on device bond7
[  437.217043][T16502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2844'.
[  437.351544][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'.
[  437.391621][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'.
[  437.478768][T16519] netlink: 'syz.0.2850': attribute type 1 has an invalid length.
[  437.670690][T16519] bond4: (slave geneve2): making interface the new active one
[  437.686015][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  437.708070][T16519] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  437.726254][T13334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  437.741431][T13334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  437.792590][T16528] 8021q: adding VLAN 0 to HW filter on device bond4
[  437.865838][ T5650] Bluetooth: hci5: command tx timeout
[  437.896351][T13334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  437.919469][T13334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  438.004588][T16531] can: request_module (can-proto-5) failed.
[  438.082128][T16536] syzkaller0: entered promiscuous mode
[  438.088260][T16536] syzkaller0: entered allmulticast mode
[  438.634878][T16401] team0: Port device netdevsim1 removed
[  438.763783][T13334] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.781002][T13334] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.839553][T13334] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.862983][T13334] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.960446][T16564] __nla_validate_parse: 2 callbacks suppressed
[  438.960463][T16564] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2864'.
[  439.069844][T16562] pimreg: entered allmulticast mode
[  439.538879][T16401] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  439.553272][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  439.561643][T16401] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  439.586126][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  439.614672][T16559] pimreg: left allmulticast mode
[  439.658742][T16401] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  439.704230][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  439.714351][T16401] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  439.745752][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  439.954036][ T5650] Bluetooth: hci5: command tx timeout
[  439.999518][T16401] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.098585][T16595] netlink: 'syz.3.2872': attribute type 1 has an invalid length.
[  440.103409][T16401] 8021q: adding VLAN 0 to HW filter on device team0
[  440.109802][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2873'.
[  440.159813][T13345] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.167066][T13345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.188098][T13334] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.195344][T13334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.418620][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.427523][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.428856][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'.
[  440.436492][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.465275][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.474169][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.483766][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'.
[  440.790626][T16619] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  441.028875][T16401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.570049][T16401] veth0_vlan: entered promiscuous mode
[  441.582447][T16401] veth1_vlan: entered promiscuous mode
[  441.825439][T16401] veth0_macvtap: entered promiscuous mode
[  441.920930][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2881'.
[  442.045945][ T5650] Bluetooth: hci5: command tx timeout
[  442.123437][T16401] veth1_macvtap: entered promiscuous mode
[  442.286109][T16401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.325854][T16401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.359870][T16667] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  442.382250][ T1128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.391182][ T1128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.401162][ T1128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.410096][ T1128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.625187][T16685] batadv1: entered promiscuous mode
[  442.630447][T16685] batadv1: entered allmulticast mode
[  442.719367][T13335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.728654][T13335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.790141][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.818923][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.053270][T16697] macsec1: entered promiscuous mode
[  443.058531][T16697] bridge0: entered promiscuous mode
[  443.409473][T16714] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  443.560705][T16719] netlink: 'syz.0.2898': attribute type 1 has an invalid length.
[  443.852049][T16719] 8021q: adding VLAN 0 to HW filter on device bond5
[  443.987139][T16724] macvlan2: entered promiscuous mode
[  444.034130][T16724] macvlan2: entered allmulticast mode
[  444.099205][T16727] bond5: (slave ip6gretap1): making interface the new active one
[  444.130116][T16727] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  444.996365][T16758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  445.702632][ T5654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  445.715410][ T5654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  445.723200][ T5654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  445.734782][ T5654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  445.742481][ T5654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  446.036984][T16776] __nla_validate_parse: 7 callbacks suppressed
[  446.037005][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'.
[  446.052692][T16776] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2908'.
[  446.105445][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'.
[  446.114770][T16776] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2908'.
[  446.123948][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2908'.
[  446.368472][ T5635] syz_tun (unregistering): left allmulticast mode
[  446.540816][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'.
[  446.558264][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'.
[  446.712370][T16792] netlink: 'syz.1.2912': attribute type 6 has an invalid length.
[  446.800713][T16794] FAULT_INJECTION: forcing a failure.
[  446.800713][T16794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.848009][T16794] CPU: 0 UID: 0 PID: 16794 Comm: syz.1.2913 Not tainted syzkaller #0 PREEMPT(full) 
[  446.848034][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  446.848049][T16794] Call Trace:
[  446.848129][T16794]  <TASK>
[  446.848181][T16794]  dump_stack_lvl+0xe8/0x150
[  446.848292][T16794]  should_fail_ex+0x40c/0x560
[  446.848394][T16794]  _copy_from_iter+0x1d3/0x1660
[  446.848451][T16794]  ? rcu_is_watching+0x15/0xb0
[  446.848528][T16794]  ? __pfx__copy_from_iter+0x10/0x10
[  446.848543][T16794]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  446.848599][T16794]  ? netlink_sendmsg+0x650/0xb40
[  446.848728][T16794]  ? skb_put+0x112/0x210
[  446.848789][T16794]  netlink_sendmsg+0x6c0/0xb40
[  446.848817][T16794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.848839][T16794]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.848911][T16794]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.848954][T16794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.848975][T16794]  ____sys_sendmsg+0x9b9/0xa20
[  446.849044][T16794]  ? __might_fault+0xaf/0x130
[  446.849078][T16794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.849105][T16794]  ? import_iovec+0x73/0xa0
[  446.849128][T16794]  ___sys_sendmsg+0x2a5/0x360
[  446.849146][T16794]  ? __lock_acquire+0x683/0x2cd0
[  446.849180][T16794]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.849229][T16794]  ? __fget_files+0x2a/0x420
[  446.849261][T16794]  ? __fget_files+0x3a2/0x420
[  446.849291][T16794]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.849314][T16794]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.849342][T16794]  ? __pfx_ksys_write+0x10/0x10
[  446.849382][T16794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.849416][T16794]  do_syscall_64+0x174/0x580
[  446.849494][T16794]  ? trace_irq_disable+0x3b/0x140
[  446.849530][T16794]  ? clear_bhb_loop+0x40/0x90
[  446.849552][T16794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.849570][T16794] RIP: 0033:0x7fedd0d9ce59
[  446.849621][T16794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.849666][T16794] RSP: 002b:00007fedd1cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.849725][T16794] RAX: ffffffffffffffda RBX: 00007fedd1015fa0 RCX: 00007fedd0d9ce59
[  446.849738][T16794] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  446.849749][T16794] RBP: 00007fedd1cea090 R08: 0000000000000000 R09: 0000000000000000
[  446.849760][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.849771][T16794] R13: 00007fedd1016038 R14: 00007fedd1015fa0 R15: 00007ffe03b637e8
[  446.849801][T16794]  </TASK>
[  447.554366][T16769] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.562429][T16769] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.571252][T16769] bridge_slave_0: entered allmulticast mode
[  447.579341][T16769] bridge_slave_0: entered promiscuous mode
[  447.608876][T16769] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.633617][T16769] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.654233][T16769] bridge_slave_1: entered allmulticast mode
[  447.673374][T16769] bridge_slave_1: entered promiscuous mode
[  447.712205][T16769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.725509][T16769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.772378][T16769] team0: Port device team_slave_0 added
[  447.786824][T16769] team0: Port device team_slave_1 added
[  447.801575][ T5654] Bluetooth: hci1: command tx timeout
[  447.845402][T16769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.856460][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.897789][T16769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.962248][T16769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.989347][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.031045][T16769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.047927][T16819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'.
[  448.107134][T16769] hsr_slave_0: entered promiscuous mode
[  448.124649][T16769] hsr_slave_1: entered promiscuous mode
[  448.142242][T16769] debugfs: 'hsr0' already exists in 'hsr'
[  448.154546][T16769] Cannot create hsr debugfs directory
[  448.396554][T16829] FAULT_INJECTION: forcing a failure.
[  448.396554][T16829] name failslab, interval 1, probability 0, space 0, times 0
[  448.423763][T16829] CPU: 0 UID: 0 PID: 16829 Comm: syz.1.2923 Not tainted syzkaller #0 PREEMPT(full) 
[  448.423788][T16829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  448.423798][T16829] Call Trace:
[  448.423805][T16829]  <TASK>
[  448.423812][T16829]  dump_stack_lvl+0xe8/0x150
[  448.423838][T16829]  should_fail_ex+0x40c/0x560
[  448.423870][T16829]  should_failslab+0xa8/0x100
[  448.423940][T16829]  ? skb_clone+0x212/0x3a0
[  448.423959][T16829]  kmem_cache_alloc_noprof+0x87/0x650
[  448.423989][T16829]  skb_clone+0x212/0x3a0
[  448.424018][T16829]  __netlink_deliver_tap+0x413/0x860
[  448.424050][T16829]  ? netlink_deliver_tap+0x2e/0x1b0
[  448.424070][T16829]  netlink_deliver_tap+0x19c/0x1b0
[  448.424089][T16829]  netlink_unicast+0x77f/0x940
[  448.424124][T16829]  netlink_sendmsg+0x813/0xb40
[  448.424150][T16829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.424171][T16829]  ? aa_sock_msg_perm+0xf1/0x1b0
[  448.424199][T16829]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  448.424221][T16829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.424243][T16829]  ____sys_sendmsg+0x9b9/0xa20
[  448.424262][T16829]  ? __might_fault+0xaf/0x130
[  448.424290][T16829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.424319][T16829]  ? import_iovec+0x73/0xa0
[  448.424342][T16829]  ___sys_sendmsg+0x2a5/0x360
[  448.424360][T16829]  ? __lock_acquire+0x683/0x2cd0
[  448.424384][T16829]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.424439][T16829]  ? __fget_files+0x2a/0x420
[  448.424459][T16829]  ? __fget_files+0x3a2/0x420
[  448.424491][T16829]  __x64_sys_sendmsg+0x1bd/0x2a0
[  448.424512][T16829]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  448.424541][T16829]  ? __pfx_ksys_write+0x10/0x10
[  448.424575][T16829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.424594][T16829]  do_syscall_64+0x174/0x580
[  448.424612][T16829]  ? trace_irq_disable+0x3b/0x140
[  448.424636][T16829]  ? clear_bhb_loop+0x40/0x90
[  448.424657][T16829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.424673][T16829] RIP: 0033:0x7fedd0d9ce59
[  448.424691][T16829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.424705][T16829] RSP: 002b:00007fedd1cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.424724][T16829] RAX: ffffffffffffffda RBX: 00007fedd1015fa0 RCX: 00007fedd0d9ce59
[  448.424737][T16829] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  448.424749][T16829] RBP: 00007fedd1cea090 R08: 0000000000000000 R09: 0000000000000000
[  448.424759][T16829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.424770][T16829] R13: 00007fedd1016038 R14: 00007fedd1015fa0 R15: 00007ffe03b637e8
[  448.424801][T16829]  </TASK>
[  448.991823][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'.
[  449.091914][T16769] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  449.185980][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2925'.
[  449.248057][T12901] IPVS: starting estimator thread 0...
[  449.324093][T16769] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  449.445947][T16769] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  449.475321][T16851] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.482782][T16851] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.500813][T16849] IPVS: using max 30 ests per chain, 72000 per kthread
[  449.513470][T16853] nbd: couldn't find a device at index 0
[  449.524603][T16855] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  449.531677][T16855] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  449.729281][T16862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.803025][T16769] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  449.812600][T16862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.842635][T16864] netlink: 'syz.2.2936': attribute type 3 has an invalid length.
[  449.884089][T16862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.934750][ T5654] Bluetooth: hci1: command tx timeout
[  450.019240][T16872] netlink: 'syz.1.2939': attribute type 21 has an invalid length.
[  450.195253][T16885] syzkaller1: entered promiscuous mode
[  450.213501][T16885] syzkaller1: entered allmulticast mode
[  450.628130][T16896] netlink: 'syz.1.2945': attribute type 10 has an invalid length.
[  450.648769][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  450.658322][T16896] team0: Port device netdevsim1 added
[  450.862142][T16900] netlink: 'syz.1.2946': attribute type 29 has an invalid length.
[  451.005614][T16769] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  451.017600][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  451.025728][T16769] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  451.074854][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  451.100477][T16769] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  451.126695][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  451.147806][T16769] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  451.169152][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  451.333565][T16769] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.374349][T16916] FAULT_INJECTION: forcing a failure.
[  451.374349][T16916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.377583][T16769] 8021q: adding VLAN 0 to HW filter on device team0
[  451.395427][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.2.2949 Not tainted syzkaller #0 PREEMPT(full) 
[  451.395451][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  451.395461][T16916] Call Trace:
[  451.395468][T16916]  <TASK>
[  451.395475][T16916]  dump_stack_lvl+0xe8/0x150
[  451.395503][T16916]  should_fail_ex+0x40c/0x560
[  451.395536][T16916]  _copy_from_user+0x2d/0xb0
[  451.395632][T16916]  kstrtouint_from_user+0xd6/0x180
[  451.395688][T16916]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  451.395738][T16916]  proc_fail_nth_write+0x8e/0x210
[  451.395783][T16916]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  451.395814][T16916]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  451.395835][T16916]  vfs_write+0x296/0xba0
[  451.395868][T16916]  ? __pfx_vfs_write+0x10/0x10
[  451.395894][T16916]  ? __fget_files+0x2a/0x420
[  451.395919][T16916]  ? __fget_files+0x3a2/0x420
[  451.395939][T16916]  ? __fget_files+0x2a/0x420
[  451.395969][T16916]  ksys_write+0x150/0x270
[  451.395996][T16916]  ? __pfx_ksys_write+0x10/0x10
[  451.396034][T16916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.396054][T16916]  do_syscall_64+0x174/0x580
[  451.396074][T16916]  ? clear_bhb_loop+0x40/0x90
[  451.396096][T16916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.396113][T16916] RIP: 0033:0x7fbb7b15d68e
[  451.396130][T16916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  451.396145][T16916] RSP: 002b:00007fbb7bfaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  451.396163][T16916] RAX: ffffffffffffffda RBX: 00007fbb7bfab6c0 RCX: 00007fbb7b15d68e
[  451.396175][T16916] RDX: 0000000000000001 RSI: 00007fbb7bfab0a0 RDI: 0000000000000006
[  451.396184][T16916] RBP: 00007fbb7bfab090 R08: 0000000000000000 R09: 0000000000000000
[  451.396194][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.396202][T16916] R13: 00007fbb7b416038 R14: 00007fbb7b415fa0 R15: 00007ffdb3dc5e68
[  451.396237][T16916]  </TASK>
[  451.410269][T13345] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.420585][T16917] __nla_validate_parse: 7 callbacks suppressed
[  451.420603][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'.
[  451.430227][T13345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.434801][T13345] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.667250][T13345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.908002][T16769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  452.049005][ T5654] Bluetooth: hci1: command tx timeout
[  452.351104][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'.
[  452.596846][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'.
[  452.764460][T16769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.876285][T16769] veth0_vlan: entered promiscuous mode
[  452.919146][T16769] veth1_vlan: entered promiscuous mode
[  452.981363][T16769] veth0_macvtap: entered promiscuous mode
[  452.996123][T16769] veth1_macvtap: entered promiscuous mode
[  453.021292][T16769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.058716][T16769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.080973][T13336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.105264][T13336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.120881][T13336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.221148][T16971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2961'.
[  453.321367][T13345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.400956][T16983] netlink: 'syz.2.2964': attribute type 1 has an invalid length.
[  453.669438][T16983] 8021q: adding VLAN 0 to HW filter on device bond11
[  453.691706][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2964'.
[  453.763008][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2964'.
[  453.793598][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'.
[  453.802797][T16992] netlink: 'syz.4.2966': attribute type 61 has an invalid length.
[  453.845091][T16992] netlink: 'syz.4.2966': attribute type 62 has an invalid length.
[  453.868301][T13340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.888162][T13340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.987279][T13338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.018504][T13338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.115587][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  454.131622][ T5654] Bluetooth: hci1: command tx timeout
[  454.202483][T16997] netlink: 'syz.1.2965': attribute type 2 has an invalid length.
[  454.486414][T17003] xt_hashlimit: size too large, truncated to 1048576
[  454.540353][T16996] netlink: 'syz.0.2906': attribute type 1 has an invalid length.
[  455.158758][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  455.168878][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  455.180058][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  455.195761][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  455.204055][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  455.387445][T17017] syzkaller0: entered promiscuous mode
[  455.392979][T17017] syzkaller0: entered allmulticast mode
[  455.925222][T17037] sctp: [Deprecated]: syz.3.2972 (pid 17037) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.925222][T17037] Use struct sctp_sack_info instead
[  455.961407][T17039] netlink: zone id is out of range
[  455.980922][T17039] netlink: zone id is out of range
[  455.997358][T17039] netlink: zone id is out of range
[  456.006003][T17039] netlink: zone id is out of range
[  456.014999][T17039] netlink: zone id is out of range
[  456.020168][T17039] netlink: zone id is out of range
[  456.025290][T17039] netlink: zone id is out of range
[  456.030409][T17039] netlink: zone id is out of range
[  456.057738][T17039] netlink: set zone limit has 4 unknown bytes
[  456.284689][T17012] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.294422][T17012] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.317902][T17012] bridge_slave_0: entered allmulticast mode
[  456.326540][T17012] bridge_slave_0: entered promiscuous mode
[  456.368404][T17012] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.375906][T17012] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.383345][T17012] bridge_slave_1: entered allmulticast mode
[  456.393571][T17012] bridge_slave_1: entered promiscuous mode
[  456.450271][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.468611][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.539375][T17012] team0: Port device team_slave_0 added
[  456.552378][T17012] team0: Port device team_slave_1 added
[  456.580131][T17062] geneve3: entered promiscuous mode
[  456.588934][T17062] geneve3: entered allmulticast mode
[  456.640490][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'.
[  456.675023][T17067] xt_policy: output policy not valid in PREROUTING and INPUT
[  456.688888][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.696520][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.725036][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.740277][T17064] netlink: 'syz.4.2979': attribute type 11 has an invalid length.
[  456.750899][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.758399][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.786802][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.848456][T17012] hsr_slave_0: entered promiscuous mode
[  456.855897][T17012] hsr_slave_1: entered promiscuous mode
[  456.862940][T17012] debugfs: 'hsr0' already exists in 'hsr'
[  456.869690][T17012] Cannot create hsr debugfs directory
[  456.926108][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'.
[  456.942773][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'.
[  457.137237][T17012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.223612][ T5650] Bluetooth: hci2: command tx timeout
[  457.282377][T17012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.407973][T17012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.523290][T17012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.722864][T17077] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.732557][T17077] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.180602][T17077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.217608][T17077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.304150][ T5650] Bluetooth: hci2: command tx timeout
[  459.384175][T17058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.581055][T17085] xt_CT: You must specify a L4 protocol and not use inversions on it
[  459.895233][T17080] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  459.907911][T17012] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  459.924889][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.940164][T13356] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.983498][T13356] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.017841][T13356] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.054753][T17012] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  460.109674][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  460.117141][T13356] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.127467][T17012] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  460.137635][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  460.146112][T17099] bridge0: Device is already in use.
[  460.152245][T17012] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  460.213459][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  460.317834][T17111] netlink: 'syz.1.2992': attribute type 3 has an invalid length.
[  460.358554][T17114] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  460.370728][T17012] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.412609][T17012] 8021q: adding VLAN 0 to HW filter on device team0
[  460.429665][T13340] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.436891][T13340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.488112][T13340] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.495277][T13340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.631018][T17122] netlink: 'syz.1.2995': attribute type 1 has an invalid length.
[  460.651234][T17122] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2995'.
[  461.028793][T17134] syzkaller0: entered promiscuous mode
[  461.035956][T17134] syzkaller0: entered allmulticast mode
[  461.395931][ T5650] Bluetooth: hci2: command tx timeout
[  461.526076][T17153] netlink: 63 bytes leftover after parsing attributes in process `syz.1.3001'.
[  461.537986][T17150] bridge_slave_0: left allmulticast mode
[  461.543744][T17150] bridge_slave_0: left promiscuous mode
[  461.549533][T17150] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.576631][T17150] bridge_slave_1: left allmulticast mode
[  461.582779][T17150] bridge_slave_1: left promiscuous mode
[  461.588658][T17150] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.660369][T17150] bond0: (slave bond_slave_0): Releasing backup interface
[  461.734367][T17152] netlink: 'syz.0.3000': attribute type 3 has an invalid length.
[  461.742141][T17152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3000'.
[  461.795684][T17150] bond0: (slave bond_slave_1): Releasing backup interface
[  461.865374][T17150] team0: Port device team_slave_0 removed
[  461.884204][T17150] team0: Port device team_slave_1 removed
[  461.890762][T17150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.906363][T17150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.915179][T17150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  462.022971][T17012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.241476][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.261258][T17012] veth0_vlan: entered promiscuous mode
[  462.267838][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.289583][T17012] veth1_vlan: entered promiscuous mode
[  462.313018][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.412682][T17012] veth0_macvtap: entered promiscuous mode
[  462.423311][T17168] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  462.451385][T17012] veth1_macvtap: entered promiscuous mode
[  462.474760][T17168] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  462.503162][T17012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.522335][T17012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.531300][T17168] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  462.553640][T13345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.562549][T13345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.577568][T17168] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  462.634519][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'.
[  462.644342][T17168] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  462.658002][T13345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.666778][T13345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.724648][T17182] syzkaller0: entered promiscuous mode
[  462.730164][T17182] syzkaller0: entered allmulticast mode
[  462.849057][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'.
[  462.868686][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.884610][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.899705][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.902874][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3010'.
[  462.923816][T17185] ip6tnl5: entered allmulticast mode
[  462.929317][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  462.930672][T13356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.969901][T13356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.029289][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  463.037539][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  463.080405][T13335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.088267][T13335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.106872][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  463.182270][T17168] syzkaller0 speed is unknown, defaulting to 1000
[  463.231752][T17195] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3013'.
[  463.497509][ T5650] Bluetooth: hci2: command tx timeout
[  463.540126][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'.
[  463.555333][T17213] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  463.590882][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'.
[  463.622357][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'.
[  463.763685][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'.
[  463.816271][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'.
[  464.024623][T17229] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode
[  464.032337][T17229] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode
[  464.087238][    T9] syzkaller0 speed is unknown, defaulting to 1000
[  464.087273][ T5878] syzkaller0 speed is unknown, defaulting to 1000
[  464.100373][    T9] syz2: Port: 1 Link ACTIVE
[  464.671665][T17253] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  464.851193][T17263] bond0 (unregistering): Released all slaves
[  465.073691][T17273] netlink: 'syz.3.3039': attribute type 29 has an invalid length.
[  465.165748][T17275] vlan2: entered promiscuous mode
[  465.189859][T17275] bridge0: entered promiscuous mode
[  466.800672][ T5654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  466.816784][ T5654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  466.828253][ T5654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  466.836393][ T5654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  466.844179][ T5654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  466.895738][T17346] netlink: 'syz.1.3057': attribute type 1 has an invalid length.
[  466.974680][T17357] netlink: 'syz.1.3057': attribute type 6 has an invalid length.
[  466.989873][T17347] netlink: 'syz.4.3056': attribute type 1 has an invalid length.
[  467.016427][T17346] bond0: entered promiscuous mode
[  467.022442][T17346] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.029300][T17347] __nla_validate_parse: 9 callbacks suppressed
[  467.029323][T17347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3056'.
[  467.398783][T17373] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3064'.
[  467.447185][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'.
[  467.471645][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'.
[  467.587402][T13338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  467.596776][T13338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  467.616392][T13338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  467.616565][T17385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3068'.
[  467.634582][T13338] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  467.690556][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'.
[  467.701471][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'.
[  467.810544][T17393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.840382][T17339] syzkaller0 speed is unknown, defaulting to 1000
[  467.986985][T17398] nbd: nbd1 already in use
[  467.992382][T17398] block nbd1: NBD_DISCONNECT
[  467.997068][T17398] block nbd1: Send disconnect failed -32
[  468.003560][T17398] block nbd1: Send disconnect failed -32
[  468.009257][T17398] block nbd1: shutting down sockets
[  468.076951][T17404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3074'.
[  468.091124][T17403] netlink: zone id is out of range
[  468.100879][T17403] netlink: zone id is out of range
[  468.106012][T17403] netlink: zone id is out of range
[  468.111144][T17403] netlink: zone id is out of range
[  468.116268][T17403] netlink: zone id is out of range
[  468.121388][T17403] netlink: zone id is out of range
[  468.126522][T17403] netlink: zone id is out of range
[  468.131668][T17403] netlink: zone id is out of range
[  468.136797][T17403] netlink: zone id is out of range
[  468.141945][T17403] netlink: zone id is out of range
[  468.915138][ T5654] Bluetooth: hci3: command tx timeout
[  471.019317][ T5654] Bluetooth: hci3: command tx timeout
[  471.333173][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'.
[  471.369614][T17434] vlan6: entered promiscuous mode
[  471.374893][T17434] erspan0: entered promiscuous mode
[  471.457324][T17442] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3081'.
[  471.731997][T17458] 8021q: adding VLAN 0 to HW filter on device bond8
[  471.853122][T17460] 8021q: adding VLAN 0 to HW filter on device bond9
[  471.862231][T17460] bond8: (slave bond9): Enslaving as an active interface with an up link
[  472.008390][T17458] bond8 (unregistering): (slave bond9): Releasing backup interface
[  472.041481][T17458] bond8 (unregistering): Released all slaves
[  472.214428][T17339] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.221670][T17339] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.228931][T17339] bridge_slave_0: entered allmulticast mode
[  472.236975][T17339] bridge_slave_0: entered promiscuous mode
[  472.245910][T17339] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.253150][T17339] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.260450][T17339] bridge_slave_1: entered allmulticast mode
[  472.276960][T17339] bridge_slave_1: entered promiscuous mode
[  472.313877][T17339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.328603][T17339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.367810][T17339] team0: Port device team_slave_0 added
[  472.454914][T17339] team0: Port device team_slave_1 added
[  472.549816][T17339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.556942][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.584190][T17339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.763746][T17484] __nla_validate_parse: 6 callbacks suppressed
[  472.763766][T17484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3091'.
[  472.780770][T17339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.791698][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'.
[  472.822708][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.884469][T17339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.944400][T17487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3092'.
[  472.978208][T17494] syz_tun: entered allmulticast mode
[  473.148934][T17339] hsr_slave_0: entered promiscuous mode
[  473.156660][T17339] hsr_slave_1: entered promiscuous mode
[  473.164943][T17339] debugfs: 'hsr0' already exists in 'hsr'
[  473.165843][ T5654] Bluetooth: hci3: command tx timeout
[  473.170923][T17339] Cannot create hsr debugfs directory
[  473.307203][T17496] vlan2: entered promiscuous mode
[  473.307228][T17501] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3096'.
[  473.335904][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3096'.
[  473.347054][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'.
[  473.397139][T17497] netlink: 'syz.0.3094': attribute type 4 has an invalid length.
[  473.564045][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'.
[  473.829605][T17522] netlink: 'syz.2.3102': attribute type 13 has an invalid length.
[  473.868970][T17522] net_ratelimit: 346 callbacks suppressed
[  473.869053][T17522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.192063][T17545] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3109'.
[  474.219907][T17545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'.
[  474.239372][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'.
[  474.641655][T17561] hmó3)ó
€: entered promiscuous mode
[  475.253480][ T5654] Bluetooth: hci3: command tx timeout
[  475.316825][ T5750] IPVS: starting estimator thread 0...
[  475.374523][T17590] netlink: 'syz.0.3122': attribute type 3 has an invalid length.
[  475.455273][T17592] IPVS: using max 56 ests per chain, 134400 per kthread
[  475.472930][T17339] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  475.502837][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  475.541781][T17339] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  475.555601][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  475.591508][T17339] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  475.620982][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  475.640789][T17339] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  475.657231][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  475.686353][T17604] syzkaller0: entered promiscuous mode
[  475.692510][T17605] IPv6: NLM_F_CREATE should be specified when creating new route
[  475.692751][ T1128] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23
[  475.709953][T17604] syzkaller0: entered allmulticast mode
[  475.855731][T17339] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.877474][T17339] 8021q: adding VLAN 0 to HW filter on device team0
[  475.939961][T13356] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.947117][T13356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.956921][T13356] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.964061][T13356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.621085][T17625] wg1: entered promiscuous mode
[  476.625999][T17625] wg1: entered allmulticast mode
[  476.645132][T17635] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  476.916590][T17339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.007238][T17339] veth0_vlan: entered promiscuous mode
[  477.019839][T17339] veth1_vlan: entered promiscuous mode
[  477.046124][T17339] veth0_macvtap: entered promiscuous mode
[  477.056134][T17339] veth1_macvtap: entered promiscuous mode
[  477.074901][T17339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.086271][T17339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.292680][T13340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.328312][T13340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.354711][T13340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.410488][T13340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.856769][T13335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.878756][T13335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.098579][T17657] __nla_validate_parse: 8 callbacks suppressed
[  478.098597][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'.
[  478.113888][T13338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.131983][T13338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.627137][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'.
[  478.815431][T17665] 8021q: adding VLAN 0 to HW filter on device bond1
[  479.273812][T17674] syzkaller0 speed is unknown, defaulting to 1000
[  479.562731][T17678] netlink: 'syz.4.3144': attribute type 1 has an invalid length.
[  480.204885][T17682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3145'.
[  480.642315][T17707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3151'.
[  480.668102][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'.
[  480.703488][T17709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3152'.
[  480.856153][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'.
[  480.935116][T17715] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  480.974377][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3153'.
[  481.251239][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  481.264359][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  481.325648][T17721] netlink: 'syz.2.3156': attribute type 11 has an invalid length.
[  481.331573][T17733] syzkaller0: entered promiscuous mode
[  481.333501][T17721] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3156'.
[  481.351381][T17733] syzkaller0: entered allmulticast mode
[  481.357657][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  481.398139][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  481.407490][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.079090][T17727] syzkaller0 speed is unknown, defaulting to 1000
[  482.304404][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3168'.
[  482.470094][T17772] sctp: [Deprecated]: syz.2.3169 (pid 17772) Use of int in max_burst socket option.
[  482.470094][T17772] Use struct sctp_assoc_value instead
[  482.582827][T17727] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.591176][T17727] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.638612][T17727] bridge_slave_0: entered allmulticast mode
[  482.646382][T17727] bridge_slave_0: entered promiscuous mode
[  482.665526][T17727] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.672691][T17727] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.680359][T17727] bridge_slave_1: entered allmulticast mode
[  482.690654][T17727] bridge_slave_1: entered promiscuous mode
[  482.702545][T17772] syzkaller0 speed is unknown, defaulting to 1000
[  482.759566][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.778548][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.910257][T17727] team0: Port device team_slave_0 added
[  482.934045][T17727] team0: Port device team_slave_1 added
[  482.997276][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.004274][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.030508][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.084671][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.091651][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.117747][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.196189][T17727] hsr_slave_0: entered promiscuous mode
[  483.202945][T17727] hsr_slave_1: entered promiscuous mode
[  483.209499][T17727] debugfs: 'hsr0' already exists in 'hsr'
[  483.215253][T17727] Cannot create hsr debugfs directory
[  483.277969][T17769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  483.286504][T17769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  483.484282][ T5650] Bluetooth: hci0: command tx timeout
[  484.110144][T17801] syzkaller0: entered promiscuous mode
[  484.124725][T17801] syzkaller0: entered allmulticast mode
[  484.127726][T17805] xt_hashlimit: size too large, truncated to 1048576
[  484.326568][T17727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.338169][T17727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.561935][T17727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.576651][T17727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.650935][T17816] netlink: 'syz.2.3182': attribute type 3 has an invalid length.
[  484.789853][T17727] team0: Port device netdevsim1 removed
[  484.799673][T17727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.811641][T17727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.864997][T17823] __nla_validate_parse: 2 callbacks suppressed
[  484.865016][T17823] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3184'.
[  484.991665][T17727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  485.018472][T17727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.040402][T17820] syzkaller0: entered promiscuous mode
[  485.041028][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'.
[  485.046713][T17820] syzkaller0: entered allmulticast mode
[  485.051061][T17819] tipc: Started in network mode
[  485.057432][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3185'.
[  485.061698][T17819] tipc: Node identity 1a68b9648172, cluster identity 4711
[  485.083957][T17819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.104089][T17829] vxlan0: entered promiscuous mode
[  485.110402][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3183'.
[  485.117567][T13336] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.128850][T13336] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.187178][T17829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3185'.
[  485.190058][T13336] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.211457][T13336] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.271669][T17818] tipc: Resetting bearer <eth:syzkaller0>
[  485.290945][T17818] tipc: Disabling bearer <eth:syzkaller0>
[  485.544764][ T5650] Bluetooth: hci0: command tx timeout
[  485.675429][T17727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  485.721219][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  485.735404][T17727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  485.755791][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  485.767200][T17727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  485.798910][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  485.827302][T17840] geneve2: entered promiscuous mode
[  485.844101][T17727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  485.875872][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  486.323048][T17727] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.385866][T17727] 8021q: adding VLAN 0 to HW filter on device team0
[  486.433221][T13335] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.442809][T13335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.510163][T13335] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.520149][T13335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.771521][T17869] Bluetooth: MGMT ver 1.23
[  487.246894][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3196'.
[  487.623935][ T5650] Bluetooth: hci0: command tx timeout
[  487.669162][T17894] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3200'.
[  487.778880][T17897] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004
[  487.911881][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3203'.
[  488.043423][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.158891][T17727] veth0_vlan: entered promiscuous mode
[  488.171435][T17727] veth1_vlan: entered promiscuous mode
[  488.198691][T17727] veth0_macvtap: entered promiscuous mode
[  488.303186][T17727] veth1_macvtap: entered promiscuous mode
[  488.328435][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.347443][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.390410][T13336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.405204][T13336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.414512][T13336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.449161][T17926] netlink: 'syz.4.3208': attribute type 1 has an invalid length.
[  488.457065][T13336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.702512][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.710371][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.859305][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.867990][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.263330][T17942] netlink: 'syz.0.3214': attribute type 11 has an invalid length.
[  489.273244][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.280747][T17944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.288994][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.297184][T17944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.684752][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'.
[  489.723693][ T5650] Bluetooth: hci0: command tx timeout
[  490.318381][T17970] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3220'.
[  494.260709][T17982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  494.294164][T17994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.498558][T18000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3226'.
[  494.517913][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'.
[  494.535651][T18004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3228'.
[  494.553760][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'.
[  494.577626][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  494.590793][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3225'.
[  494.693952][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3230'.
[  494.883274][T18026] veth1: entered promiscuous mode
[  494.906653][T18026] macsec1: entered promiscuous mode
[  494.912447][T18026] macsec1: entered allmulticast mode
[  494.918237][T18026] veth1: entered allmulticast mode
[  494.928391][T18026] veth1: left allmulticast mode
[  494.934266][T18026] veth1: left promiscuous mode
[  495.427744][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'.
[  495.724610][T18057] veth2: entered allmulticast mode
[  495.802717][T18062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3242'.
[  498.038798][T18028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  498.266543][T18072] netlink: 'syz.4.3245': attribute type 2 has an invalid length.
[  498.305552][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'.
[  498.399634][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'.
[  499.013922][T18122] netlink: 'syz.4.3253': attribute type 13 has an invalid length.
[  499.087165][T18122] netlink: 'syz.4.3253': attribute type 17 has an invalid length.
[  499.133638][T18128] netlink: zone id is out of range
[  499.138799][T18128] netlink: zone id is out of range
[  499.143926][T18128] netlink: zone id is out of range
[  499.149052][T18128] netlink: zone id is out of range
[  499.154173][T18128] netlink: zone id is out of range
[  499.159294][T18128] netlink: zone id is out of range
[  499.164415][T18128] netlink: zone id is out of range
[  499.169535][T18128] netlink: zone id is out of range
[  499.199474][T18128] netlink: zone id is out of range
[  499.421599][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'.
[  499.472522][T18148] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3258'.
[  499.567592][T18119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.583157][T18119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.929260][T18122] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.947198][T18122] 8021q: adding VLAN 0 to HW filter on device team0
[  499.971797][T18122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.002249][T18122] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.010282][T18122] bridge0: port 1(bridge_slave_0) entered listening state
[  500.024366][T18122] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.031610][T18122] bridge0: port 2(bridge_slave_1) entered listening state
[  500.050537][T18122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.069248][T18122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.092243][T18122] veth1_macvtap: left promiscuous mode
[  500.098973][T18122] veth0_macvtap: left promiscuous mode
[  500.106510][T18122] veth0_macvtap: entered promiscuous mode
[  500.122874][T18122] veth1_macvtap: entered promiscuous mode
[  500.134016][T18122] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  500.141372][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  500.154480][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  500.180657][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  500.202106][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.217936][T18122] mac80211_hwsim hwsim43 wlan0: left promiscuous mode
[  500.225330][T18122] mac80211_hwsim hwsim43 wlan0: left allmulticast mode
[  500.242979][T18122] vxlan0: left promiscuous mode
[  500.781811][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3262'.
[  500.875554][T18188] ipvlan1: entered promiscuous mode
[  500.898102][T18188] ipvlan1: left promiscuous mode
[  500.909652][T18196] netlink: 'syz.0.3263': attribute type 1 has an invalid length.
[  500.958201][T18198] net_ratelimit: 22 callbacks suppressed
[  500.958221][T18198] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[  500.972686][T18198] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  501.061519][T18196] 8021q: adding VLAN 0 to HW filter on device bond1
[  501.136792][T18195] syzkaller0: entered promiscuous mode
[  501.146921][T18195] syzkaller0: entered allmulticast mode
[  501.257652][T18187] IPv6: NLM_F_CREATE should be specified when creating new route
[  501.278728][T18200] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  501.556721][T18227] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3272'.
[  501.989763][T18241] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3273'.
[  502.031905][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'.
[  502.073638][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'.
[  502.518144][T18268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  502.608184][T18274] syzkaller0 speed is unknown, defaulting to 1000
[  502.668759][T18265] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3281'.
[  502.815224][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'.
[  502.885246][T18281] netlink: 'syz.0.3287': attribute type 21 has an invalid length.
[  502.928047][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'.
[  503.017351][T18296] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3291'.
[  503.026344][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3291'.
[  503.037316][ T5650] block nbd10: Receive control failed (result -32)
[  503.061165][T18281] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  503.071397][T18287] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  503.170143][T18294] tipc: Resetting bearer <eth:syzkaller0>
[  503.216964][T18303] xt_ecn: cannot match TCP bits for non-tcp packets
[  503.590914][T10118] syzkaller0 speed is unknown, defaulting to 1000
[  503.597626][T10118] syz2: Port: 1 Link DOWN
[  503.599816][T18327] syzkaller0: entered promiscuous mode
[  503.611353][T18327] syzkaller0: entered allmulticast mode
[  504.553246][T18378] syzkaller0: entered promiscuous mode
[  504.579012][T18378] syzkaller0: entered allmulticast mode
[  504.698546][T18384] bond2: option ad_user_port_key: invalid value (65535)
[  504.705832][T18384] bond2: option ad_user_port_key: allowed values 0 - 1023
[  504.714300][T18384] bond2 (unregistering): Released all slaves
[  504.965592][T18393] netlink: 'syz.2.3320': attribute type 9 has an invalid length.
[  505.516509][   T29] audit: type=1804 audit(1781696358.381:13): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3327" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=162 res=1 errno=0
[  505.563703][   T29] audit: type=1800 audit(1781696358.381:14): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3327" name="cgroup.controllers" dev="tmpfs" ino=162 res=0 errno=0
[  505.798049][T18418] xt_CT: No such helper "netbios-ns"
[  505.866210][T18426] syzkaller0: entered promiscuous mode
[  505.886971][T18426] syzkaller0: entered allmulticast mode
[  506.148862][T18438] __nla_validate_parse: 14 callbacks suppressed
[  506.148905][T18438] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3333'.
[  506.190482][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3333'.
[  506.333854][T18447] vlan3: entered promiscuous mode
[  506.339149][T18447] bridge0: entered promiscuous mode
[  506.347791][T18450] netlink: 'syz.4.3341': attribute type 21 has an invalid length.
[  506.355647][T18450] netlink: 'syz.4.3341': attribute type 21 has an invalid length.
[  506.534054][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'.
[  506.543043][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'.
[  506.563027][T18458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3342'.
[  506.572950][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'.
[  506.581918][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'.
[  506.690880][T18468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3347'.
[  506.699874][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'.
[  506.763158][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'.
[  506.832761][T18474] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  507.381985][T18482] ip6gretap0: entered promiscuous mode
[  507.395160][T18485] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256
[  508.078447][T18520] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  508.213745][T18533] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  508.529356][T18545] syzkaller0 speed is unknown, defaulting to 1000
[  510.221866][T18629] xt_CT: You must specify a L4 protocol and not use inversions on it
[  510.502741][T18654] syzkaller0: entered promiscuous mode
[  510.518073][T18654] syzkaller0: entered allmulticast mode
[  510.648664][T18657] netlink: 'syz.3.3405': attribute type 1 has an invalid length.
[  510.732214][T18657] 8021q: adding VLAN 0 to HW filter on device bond2
[  510.906122][T18669] SET target dimension over the limit!
[  511.609670][T18702] __nla_validate_parse: 30 callbacks suppressed
[  511.609695][T18702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3418'.
[  511.690414][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'.
[  511.705677][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  511.720037][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'.
[  512.380554][T18724] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3425'.
[  512.785906][T18746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3431'.
[  512.825334][   T29] audit: type=1804 audit(1781696365.681:15): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3429" name="/newroot/99/cgroup.controllers" dev="tmpfs" ino=521 res=1 errno=0
[  512.901241][   T29] audit: type=1800 audit(1781696365.681:16): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3429" name="cgroup.controllers" dev="tmpfs" ino=521 res=0 errno=0
[  513.000506][   T29] audit: type=1804 audit(1781696365.721:17): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3429" name="/newroot/99/cgroup.controllers" dev="tmpfs" ino=521 res=1 errno=0
[  513.232685][T18759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3434'.
[  513.428196][T18768] lo: entered allmulticast mode
[  513.450426][T18768] lo: left allmulticast mode
[  513.483976][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'.
[  513.565883][T18771] netlink: 'syz.0.3438': attribute type 1 has an invalid length.
[  513.827231][T18784] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  513.935276][T18783] syzkaller0 speed is unknown, defaulting to 1000
[  514.450659][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3444'.
[  514.818012][T18826] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3449'.
[  514.832627][T18826] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3449'.
[  514.980263][T18829] netlink: 'syz.2.3450': attribute type 5 has an invalid length.
[  515.254843][T18840] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  515.283989][T18840] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  516.660200][T18896] __nla_validate_parse: 2 callbacks suppressed
[  516.660221][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3471'.
[  516.708829][T18896] ip6tnl1: entered allmulticast mode
[  516.868052][T18901] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3472'.
[  517.535583][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'.
[  518.030559][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3482'.
[  518.053710][T18936] ip6tnl1: entered allmulticast mode
[  518.809909][T18960] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3486'.
[  519.070215][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'.
[  519.094366][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'.
[  521.943903][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  522.217159][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'.
[  522.322721][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'.
[  522.694570][T18987] syzkaller0: entered promiscuous mode
[  522.701744][T18987] syzkaller0: entered allmulticast mode
[  524.163716][T19033] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3506'.
[  526.815685][T19036] openvswitch: netlink: Key type 30 is not supported
[  527.108137][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3511'.
[  527.125269][T19057] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  527.145456][T19051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'.
[  527.152221][T19055] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  527.169406][T19055] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  527.179523][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3511'.
[  527.191229][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'.
[  527.238643][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'.
[  527.279941][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'.
[  527.302025][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'.
[  527.458975][T19069] FAULT_INJECTION: forcing a failure.
[  527.458975][T19069] name failslab, interval 1, probability 0, space 0, times 0
[  527.473332][T19069] CPU: 0 UID: 0 PID: 19069 Comm: syz.1.3519 Not tainted syzkaller #0 PREEMPT(full) 
[  527.473358][T19069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  527.473368][T19069] Call Trace:
[  527.473376][T19069]  <TASK>
[  527.473384][T19069]  dump_stack_lvl+0xe8/0x150
[  527.473418][T19069]  should_fail_ex+0x40c/0x560
[  527.473448][T19069]  should_failslab+0xa8/0x100
[  527.473475][T19069]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  527.473498][T19069]  ? __alloc_skb+0x189/0x7a0
[  527.473521][T19069]  ? __alloc_skb+0x1d7/0x7a0
[  527.473542][T19069]  ? __local_bh_enable_ip+0xd0/0x130
[  527.473601][T19069]  __alloc_skb+0x1d7/0x7a0
[  527.473630][T19069]  netlink_sendmsg+0x5d4/0xb40
[  527.473649][T19069]  ? irqentry_exit+0x218/0x8e0
[  527.473728][T19069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.473750][T19069]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.473776][T19069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.473798][T19069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.473818][T19069]  ____sys_sendmsg+0x9b9/0xa20
[  527.473837][T19069]  ? __might_fault+0xaf/0x130
[  527.473864][T19069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  527.473891][T19069]  ? import_iovec+0x73/0xa0
[  527.473913][T19069]  ___sys_sendmsg+0x2a5/0x360
[  527.473930][T19069]  ? __lock_acquire+0x683/0x2cd0
[  527.473953][T19069]  ? __pfx____sys_sendmsg+0x10/0x10
[  527.474005][T19069]  ? __fget_files+0x2a/0x420
[  527.474024][T19069]  ? __fget_files+0x3a2/0x420
[  527.474054][T19069]  __x64_sys_sendmsg+0x1bd/0x2a0
[  527.474075][T19069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  527.474103][T19069]  ? __pfx_ksys_write+0x10/0x10
[  527.474134][T19069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.474153][T19069]  do_syscall_64+0x174/0x580
[  527.474171][T19069]  ? clear_bhb_loop+0x40/0x90
[  527.474193][T19069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.474209][T19069] RIP: 0033:0x7f84c459ce59
[  527.474227][T19069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  527.474241][T19069] RSP: 002b:00007f84c53ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  527.474260][T19069] RAX: ffffffffffffffda RBX: 00007f84c4815fa0 RCX: 00007f84c459ce59
[  527.474273][T19069] RDX: 0000000020000000 RSI: 0000200000006700 RDI: 0000000000000007
[  527.474284][T19069] RBP: 00007f84c53ff090 R08: 0000000000000000 R09: 0000000000000000
[  527.474295][T19069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.474305][T19069] R13: 00007f84c4816038 R14: 00007f84c4815fa0 R15: 00007ffdf67b9038
[  527.474335][T19069]  </TASK>
[  527.836602][T19072] syzkaller0: entered promiscuous mode
[  527.842124][T19072] syzkaller0: entered allmulticast mode
[  527.852767][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  527.863704][T19079] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3522'.
[  528.790643][T19096] nbd0: detected capacity change from 0 to 63
[  528.797832][T19100] block nbd0: NBD_DISCONNECT
[  528.905584][T19100] block nbd0: Disconnected due to user request.
[  528.933468][T19100] block nbd0: shutting down sockets
[  528.969221][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.978531][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  529.007875][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.017019][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  529.041307][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.050447][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  529.058395][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.067477][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  529.088759][T17997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.125307][T17997] Buffer I/O error on dev nbd0, logical block 0, async page read
[  529.137791][T17997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.147773][T17997] Buffer I/O error on dev nbd0, logical block 1, async page read
[  529.174023][T17997] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.183102][T17997] Buffer I/O error on dev nbd0, logical block 2, async page read
[  529.191259][T17997] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.200314][T17997] Buffer I/O error on dev nbd0, logical block 3, async page read
[  529.208587][T17997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.217646][T17997] Buffer I/O error on dev nbd0, logical block 0, async page read
[  529.266658][T17997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  529.275901][T17997] Buffer I/O error on dev nbd0, logical block 1, async page read
[  529.301200][T17997] ldm_validate_partition_table(): Disk read failed.
[  529.319552][T17997] Dev nbd0: unable to read RDB block 0
[  529.327023][T17997]  nbd0: unable to read partition table
[  529.385014][T17997] ldm_validate_partition_table(): Disk read failed.
[  529.393565][T17997] Dev nbd0: unable to read RDB block 0
[  529.401047][T17997]  nbd0: unable to read partition table
[  529.422350][T17997] 
[  529.424716][T17997] ======================================================
[  529.431776][T17997] WARNING: possible circular locking dependency detected
[  529.438849][T17997] syzkaller #0 Not tainted
[  529.443345][T17997] ------------------------------------------------------
[  529.450401][T17997] udevd/17997 is trying to acquire lock:
[  529.456022][T17997] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x680
[  529.466015][T17997] 
[  529.466015][T17997] but task is already holding lock:
[  529.473387][T17997] ffffffff90165500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  529.484021][T17997] 
[  529.484021][T17997] which lock already depends on the new lock.
[  529.484021][T17997] 
[  529.494531][T17997] 
[  529.494531][T17997] the existing dependency chain (in reverse order) is:
[  529.503553][T17997] 
[  529.503553][T17997] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  529.511521][T17997]        __mutex_lock+0x19d/0x1590
[  529.516727][T17997]        kobject_uevent_net_broadcast+0x27e/0x560
[  529.523160][T17997]        kobject_uevent_env+0x566/0x9e0
[  529.528724][T17997]        device_add+0x544/0xb90
[  529.533719][T17997]        device_create+0x269/0x300
[  529.538855][T17997]        msr_device_create+0x33/0x50
[  529.544191][T17997]        cpuhp_invoke_callback+0x448/0x860
[  529.550114][T17997]        cpuhp_thread_fun+0x362/0x780
[  529.555505][T17997]        smpboot_thread_fn+0x57c/0xa80
[  529.560982][T17997]        kthread+0x389/0x470
[  529.565767][T17997]        ret_from_fork+0x514/0xb70
[  529.570936][T17997]        ret_from_fork_asm+0x1a/0x30
[  529.576243][T17997] 
[  529.576243][T17997] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  529.583826][T17997]        cpuhp_thread_fun+0x127/0x780
[  529.589217][T17997]        smpboot_thread_fn+0x57c/0xa80
[  529.594706][T17997]        kthread+0x389/0x470
[  529.599387][T17997]        ret_from_fork+0x514/0xb70
[  529.604515][T17997]        ret_from_fork_asm+0x1a/0x30
[  529.610013][T17997] 
[  529.610013][T17997] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  529.618213][T17997]        cpus_read_lock+0x42/0x160
[  529.623955][T17997]        static_key_slow_inc+0x12/0x30
[  529.629451][T17997]        setup_udp_tunnel_sock+0x2df/0x4f0
[  529.635388][T17997]        l2tp_tunnel_register+0xe77/0x1570
[  529.641524][T17997]        pppol2tp_connect+0x8e3/0x18b0
[  529.647002][T17997]        __sys_connect+0x323/0x460
[  529.652136][T17997]        __x64_sys_connect+0x7a/0x90
[  529.657442][T17997]        do_syscall_64+0x174/0x580
[  529.662568][T17997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.668998][T17997] 
[  529.668998][T17997] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  529.676790][T17997]        lock_sock_nested+0x41/0x100
[  529.682099][T17997]        inet_shutdown+0x6a/0x390
[  529.687260][T17997]        nbd_mark_nsock_dead+0x2cb/0x550
[  529.693002][T17997]        recv_work+0x1cef/0x1e10
[  529.697967][T17997]        process_scheduled_works+0xa8e/0x14e0
[  529.704144][T17997]        worker_thread+0xa47/0xfb0
[  529.709275][T17997]        kthread+0x389/0x470
[  529.713877][T17997]        ret_from_fork+0x514/0xb70
[  529.719083][T17997]        ret_from_fork_asm+0x1a/0x30
[  529.724384][T17997] 
[  529.724384][T17997] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  529.732042][T17997]        __mutex_lock+0x19d/0x1590
[  529.737168][T17997]        nbd_queue_rq+0x373/0x1150
[  529.742277][T17997]        blk_mq_dispatch_rq_list+0x499/0x1990
[  529.748407][T17997]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  529.755297][T17997]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  529.761780][T17997]        blk_mq_run_hw_queue+0x348/0x4f0
[  529.767403][T17997]        blk_mq_dispatch_list+0xd11/0xe10
[  529.773138][T17997]        blk_mq_flush_plug_list+0x45f/0x540
[  529.779041][T17997]        __blk_flush_plug+0x3ed/0x4d0
[  529.784496][T17997]        __submit_bio+0x465/0x560
[  529.789504][T17997]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  529.795640][T17997]        block_read_full_folio+0x599/0x830
[  529.801541][T17997]        filemap_read_folio+0x12c/0x3a0
[  529.807073][T17997]        do_read_cache_folio+0x354/0x590
[  529.812720][T17997]        read_part_sector+0xb6/0x2b0
[  529.818086][T17997]        adfspart_check_ICS+0xb1/0x960
[  529.823650][T17997]        bdev_disk_changed+0x82b/0x1780
[  529.829199][T17997]        blkdev_get_whole+0x372/0x510
[  529.834637][T17997]        bdev_open+0x324/0xd70
[  529.839387][T17997]        blkdev_open+0x461/0x600
[  529.844309][T17997]        do_dentry_open+0x816/0x1380
[  529.849602][T17997]        vfs_open+0x3b/0x340
[  529.854348][T17997]        path_openat+0x2e3b/0x3890
[  529.859528][T17997]        do_file_open+0x23e/0x4a0
[  529.864558][T17997]        do_sys_openat2+0x113/0x200
[  529.869796][T17997]        __x64_sys_openat+0x138/0x170
[  529.875178][T17997]        do_syscall_64+0x174/0x580
[  529.880295][T17997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.886699][T17997] 
[  529.886699][T17997] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  529.893889][T17997]        __mutex_lock+0x19d/0x1590
[  529.899019][T17997]        nbd_queue_rq+0xc1/0x1150
[  529.904065][T17997]        blk_mq_dispatch_rq_list+0x499/0x1990
[  529.910127][T17997]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  529.917245][T17997]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  529.923742][T17997]        blk_mq_run_hw_queue+0x348/0x4f0
[  529.929367][T17997]        blk_mq_dispatch_list+0xd11/0xe10
[  529.935102][T17997]        blk_mq_flush_plug_list+0x45f/0x540
[  529.940988][T17997]        __blk_flush_plug+0x3ed/0x4d0
[  529.946442][T17997]        __submit_bio+0x465/0x560
[  529.951463][T17997]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  529.957696][T17997]        block_read_full_folio+0x599/0x830
[  529.963501][T17997]        filemap_read_folio+0x12c/0x3a0
[  529.969058][T17997]        do_read_cache_folio+0x354/0x590
[  529.974712][T17997]        read_part_sector+0xb6/0x2b0
[  529.980003][T17997]        adfspart_check_ICS+0xb1/0x960
[  529.985469][T17997]        bdev_disk_changed+0x82b/0x1780
[  529.991038][T17997]        blkdev_get_whole+0x372/0x510
[  529.996400][T17997]        bdev_open+0x324/0xd70
[  530.001148][T17997]        blkdev_open+0x461/0x600
[  530.006257][T17997]        do_dentry_open+0x816/0x1380
[  530.011524][T17997]        vfs_open+0x3b/0x340
[  530.016100][T17997]        path_openat+0x2e3b/0x3890
[  530.021291][T17997]        do_file_open+0x23e/0x4a0
[  530.026310][T17997]        do_sys_openat2+0x113/0x200
[  530.031502][T17997]        __x64_sys_openat+0x138/0x170
[  530.036881][T17997]        do_syscall_64+0x174/0x580
[  530.041979][T17997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.048389][T17997] 
[  530.048389][T17997] -> #3 (set->srcu){.+.+}-{0:0}:
[  530.055591][T17997]        __synchronize_srcu+0xc9/0x2f0
[  530.061326][T17997]        elevator_switch+0x1e8/0x7b0
[  530.066673][T17997]        elevator_change+0x2fa/0x480
[  530.071949][T17997]        elevator_set_default+0x375/0x440
[  530.077850][T17997]        blk_register_queue+0x3f3/0x4e0
[  530.083388][T17997]        __add_disk+0x6cb/0xe30
[  530.088445][T17997]        add_disk_fwnode+0xfb/0x4b0
[  530.093662][T17997]        nbd_dev_add+0x733/0xb60
[  530.098608][T17997]        nbd_init+0x15f/0x1e0
[  530.103383][T17997]        do_one_initcall+0x250/0x870
[  530.108758][T17997]        do_initcall_level+0x10a/0x1a0
[  530.114401][T17997]        do_initcalls+0x59/0xa0
[  530.119266][T17997]        kernel_init_freeable+0x29d/0x3e0
[  530.125059][T17997]        kernel_init+0x1d/0x1d0
[  530.130180][T17997]        ret_from_fork+0x514/0xb70
[  530.135428][T17997]        ret_from_fork_asm+0x1a/0x30
[  530.140717][T17997] 
[  530.140717][T17997] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  530.148525][T17997]        __mutex_lock+0x19d/0x1590
[  530.153634][T17997]        elevator_change+0x1af/0x480
[  530.158941][T17997]        elevator_set_none+0xb5/0x140
[  530.164311][T17997]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  530.170645][T17997]        nbd_start_device+0x189/0xb30
[  530.176046][T17997]        nbd_genl_connect+0x1597/0x1c10
[  530.181586][T17997]        genl_family_rcv_msg_doit+0x233/0x340
[  530.187662][T17997]        genl_rcv_msg+0x614/0x7a0
[  530.192724][T17997]        netlink_rcv_skb+0x226/0x4a0
[  530.198083][T17997]        genl_rcv+0x28/0x40
[  530.202581][T17997]        netlink_unicast+0x7bb/0x940
[  530.207858][T17997]        netlink_sendmsg+0x813/0xb40
[  530.213154][T17997]        ____sys_sendmsg+0x9b9/0xa20
[  530.218439][T17997]        ___sys_sendmsg+0x2a5/0x360
[  530.223721][T17997]        __x64_sys_sendmsg+0x1bd/0x2a0
[  530.229186][T17997]        do_syscall_64+0x174/0x580
[  530.234295][T17997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.240696][T17997] 
[  530.240696][T17997] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  530.249297][T17997]        blk_alloc_queue+0x544/0x690
[  530.254574][T17997]        __blk_mq_alloc_disk+0x194/0x390
[  530.260300][T17997]        nbd_dev_add+0x494/0xb60
[  530.264138][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  530.265241][T17997]        nbd_init+0x15f/0x1e0
[  530.265274][T17997]        do_one_initcall+0x250/0x870
[  530.272508][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  530.277026][T17997]        do_initcall_level+0x10a/0x1a0
[  530.277052][T17997]        do_initcalls+0x59/0xa0
[  530.277066][T17997]        kernel_init_freeable+0x29d/0x3e0
[  530.277084][T17997]        kernel_init+0x1d/0x1d0
[  530.310449][T17997]        ret_from_fork+0x514/0xb70
[  530.315653][T17997]        ret_from_fork_asm+0x1a/0x30
[  530.321288][T17997] 
[  530.321288][T17997] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  530.328579][T17997]        __lock_acquire+0x1520/0x2cd0
[  530.333945][T17997]        lock_acquire+0x106/0x350
[  530.339013][T17997]        fs_reclaim_acquire+0x71/0x100
[  530.344470][T17997]        kmem_cache_alloc_node_noprof+0x4a/0x680
[  530.350842][T17997]        __alloc_skb+0x1d7/0x7a0
[  530.355772][T17997]        alloc_uevent_skb+0x7d/0x230
[  530.361167][T17997]        kobject_uevent_net_broadcast+0x2fa/0x560
[  530.367625][T17997]        kobject_uevent_env+0x566/0x9e0
[  530.373158][T17997]        nbd_config_put+0x185/0x660
[  530.378368][T17997]        nbd_release+0xfe/0x140
[  530.383295][T17997]        bdev_release+0x571/0x690
[  530.388309][T17997]        blkdev_release+0x15/0x20
[  530.393319][T17997]        __fput+0x418/0xa50
[  530.397806][T17997]        fput_close_sync+0x11f/0x240
[  530.403070][T17997]        __x64_sys_close+0x7e/0x110
[  530.408264][T17997]        do_syscall_64+0x174/0x580
[  530.413358][T17997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.419761][T17997] 
[  530.419761][T17997] other info that might help us debug this:
[  530.419761][T17997] 
[  530.429983][T17997] Chain exists of:
[  530.429983][T17997]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  530.429983][T17997] 
[  530.442669][T17997]  Possible unsafe locking scenario:
[  530.442669][T17997] 
[  530.450128][T17997]        CPU0                    CPU1
[  530.455577][T17997]        ----                    ----
[  530.461064][T17997]   lock(uevent_sock_mutex);
[  530.465652][T17997]                                lock(cpuhp_state-up);
[  530.472508][T17997]                                lock(uevent_sock_mutex);
[  530.479720][T17997]   lock(fs_reclaim);
[  530.483736][T17997] 
[  530.483736][T17997]  *** DEADLOCK ***
[  530.483736][T17997] 
[  530.491946][T17997] 3 locks held by udevd/17997:
[  530.496694][T17997]  #0: ffff888037767350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690
[  530.506309][T17997]  #1: ffff888025905260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  530.517028][T17997]  #2: ffffffff90165500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  530.528029][T17997] 
[  530.528029][T17997] stack backtrace:
[  530.533925][T17997] CPU: 0 UID: 0 PID: 17997 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  530.533939][T17997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  530.533945][T17997] Call Trace:
[  530.533951][T17997]  <TASK>
[  530.533957][T17997]  dump_stack_lvl+0xe8/0x150
[  530.533972][T17997]  print_circular_bug+0x2e1/0x300
[  530.533986][T17997]  check_noncircular+0x12e/0x150
[  530.534007][T17997]  __lock_acquire+0x1520/0x2cd0
[  530.534032][T17997]  ? lockdep_unlock+0x5d/0xd0
[  530.534053][T17997]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[  530.534069][T17997]  lock_acquire+0x106/0x350
[  530.534078][T17997]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[  530.534091][T17997]  ? lock_acquire+0x106/0x350
[  530.534101][T17997]  fs_reclaim_acquire+0x71/0x100
[  530.534113][T17997]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[  530.534125][T17997]  kmem_cache_alloc_node_noprof+0x4a/0x680
[  530.534138][T17997]  ? __alloc_skb+0x1d7/0x7a0
[  530.534151][T17997]  ? __local_bh_enable_ip+0xd0/0x130
[  530.534161][T17997]  __alloc_skb+0x1d7/0x7a0
[  530.534175][T17997]  alloc_uevent_skb+0x7d/0x230
[  530.534188][T17997]  kobject_uevent_net_broadcast+0x2fa/0x560
[  530.534201][T17997]  kobject_uevent_env+0x566/0x9e0
[  530.534213][T17997]  nbd_config_put+0x185/0x660
[  530.534229][T17997]  nbd_release+0xfe/0x140
[  530.534240][T17997]  ? __pfx_nbd_release+0x10/0x10
[  530.534253][T17997]  bdev_release+0x571/0x690
[  530.534266][T17997]  ? __pfx_blkdev_release+0x10/0x10
[  530.534277][T17997]  blkdev_release+0x15/0x20
[  530.534288][T17997]  __fput+0x418/0xa50
[  530.534301][T17997]  fput_close_sync+0x11f/0x240
[  530.534312][T17997]  ? __pfx_fput_close_sync+0x10/0x10
[  530.534323][T17997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.534333][T17997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.534342][T17997]  __x64_sys_close+0x7e/0x110
[  530.534354][T17997]  do_syscall_64+0x174/0x580
[  530.534363][T17997]  ? trace_irq_disable+0x3b/0x140
[  530.534376][T17997]  ? clear_bhb_loop+0x40/0x90
[  530.534387][T17997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.534397][T17997] RIP: 0033:0x7f56b5ca7407
[  530.534407][T17997] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  530.534415][T17997] RSP: 002b:00007fff2d280920 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  530.534426][T17997] RAX: ffffffffffffffda RBX: 00007f56b6358880 RCX: 00007f56b5ca7407
[  530.534433][T17997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  530.534439][T17997] RBP: 00007f56b63586e8 R08: 0000000000000000 R09: 0000000000000000
[  530.534445][T17997] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  530.534450][T17997] R13: 000055c8509db190 R14: 0000000000000008 R15: 000055c8509e0e20
[  530.534461][T17997]  </TASK>
[  531.650460][ T5650] Bluetooth: hci0: link tx timeout
[  531.656295][ T5650] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  533.519345][T19079] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  533.703500][ T5654] Bluetooth: hci0: command 0x0406 tx timeout