last executing test programs:

2.218379976s ago: executing program 1 (id=2220):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept(r0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000ffff00018038000a004e200000bd38fe800000000000000800000000009175050000001400030000000000000001010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000002d"], 0x44}}, 0x0)

2.151804128s ago: executing program 3 (id=2222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x400, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

2.061304206s ago: executing program 0 (id=2224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x5, 0x6, 0xffffffffffffffe7, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x3, 0x2}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000050000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000001fffd00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000700000000020000fbffffffffffffff000000000000000000000000000000000000000000000000fefffffff6270731bbb06cb6f091c6c9e1ffffffff0200"/125], 0xb8}}, 0x10)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x38}}, 0x0)

1.951595498s ago: executing program 3 (id=2225):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
sendmmsg$inet(r1, &(0x7f00000048c0)=[{{&(0x7f0000000800)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002200)="3f4b69fa1e476e770e6bababe4d8b2e82a9d3756a0b3d4ce21aec6ad55972ac0addce367586f1e77587a41e6e4bfdb77c71b7f9f56cafa44958372e132375a584dcc19c1c2f72f8a2051c31821a8b27b4f1f597e5d131d5668a1fd91255b2922f05cf45e5e65d7e7d33d4d40800a6418193bb92445be48b1e76f1ecc757a76ab18e7e92855f21fa35cab707155914b20f7aa81baafb3cdf116700cffbd51c6c8221c8a2ab91c32b9cf26acb0562651cecb0e0b48ead69b81672fd3b3aca1c2a704fd6ecc77c0e9ddd9ff34d4640a8e27cf7f12bd2a1374b6eb3892ea6e5c97aa14e1062ef7e1d874159b7044d7ad1aa143d245cf97bac3083dc1ab5eb8c5eee4bf120b130060349951421155f75ffdd5b26aeb3286175ea29a16652c94dd15a9e72a53186a816a47cdd355aef7ea3b2f3eb85888e5c3528ccce3c364cb8a77e0dac9316ff9c1f044e9a2258ea9d0713dd6d5cd8a8afa7d37ee5fe6d82986ee99ca16bb76574eb5d3743d815bcdcf81773a6a184a937e3b4e6b9f49621b767e56277652b90e8e336c9ed1fde4608806ec5520cd734858b7fa29d3a43fbd41610179043118793b34c973ddffbd506128d79abfe6bee94b0312d4de997aa7c6af8364944dbd8e7b1a56e1d97cd3b62d023b532a2847b74808ed9c24aad818dac5f97087d90532b502c8e8ad25aecb7a3a5981218a68ff72ef96c87dc14ae656b579a72982ccea4d6d35cea497f5f4413eabccac2206a2ea4c55dc1b3d9ec5e6eb78b757cb9119b7962a33b7fe08d3b89a92ad0e96db2ebeffca227792a63818bc1b82c367ea4cd0491c28fe1e3343520d0600000000000000dd3415e3824556c6b18840d0ecd1f8728ca29a0bcbb0dc6f1836016c5c2a2c1cd6813bebd6f3f88f2e541dd271b9b1f693c9ad852d21f6ed4571a615a88308d3c9f011b3301cbbe154b8a1ff91b077e2d74becebc5e870bcb120d3828f2c96919c69716f25187a8318348f1e4424c033d64f211e1a850bdfc9421eb9937bd72d02c6ffa5f24e2dd91b223c537d39d6ec65990d95ff6a64fbbcffa71838f4ade2ff91425d5f0b4b4484312cbfbd742e187037258088b3716ca285cfd464a2584496b7e942a93a799ac78cc7255411efa1a9540ebbf7ca14f5a58e6e8163c5a26c646a63ae74b33d96bc0632156692bb695478e5b3c570447a14a99594740190b6b4e5ade5408e9516b00167dfb30f45d2f57e0e81a6373d6a080bca56a0825342442be4cdfd454da3a023c456ba8ec3e90e0c6d63c3623f25725ba2e60b6a93c1ec41d5829b188cbda572a4842c5fe417031a9ea2aa45d48efaa704034cd86de33b78f2d5d798578f5e2df634677af1491c6b0482984b786ab96b9c6926a26b97979df24f9d771d84de322485b9adbc2d80808b0de63811b70fbd82e9a5b80572065a77cc14eb39d83b05df12f53be8178fff6a2aa02fd201e4cc86aff44e1f82bd72ad0d8edd7baf2b9e493dbab95c51411e049f15a6e26ff24782f9d7c0c1731d87e4c9c4f7d53eed3165e5c1c0f80eeea7b884001d143455432a9c52a21c4e7ec6d7950f8fe07af8833b2f7df2b4a6a0c026ef9ce3535bfafdc17de535a93cdca86d0c3ccc8739eee9e3b71ff49c2985751a25d19bb45730fa4970ce370954d3dca02db962e1afded9106ba5e4ec4e9e8b456f65f9da3f5c31f0fe1cb0bbc7312b1635966a6004c2602c35511fef55a4beddd900b4722094693f85042ac00577980c88c6483a4a490b23cd23a013f0e578f03e99da516b71af74b913a1e54c3c5813840b133b61c3d3da9903799072474eb6f9c05dbbe689426dbc8eb19b9057b3ffd2a000e561825301824de58c33d0e6dc50df0d7df4c0f3040e6cea8adeb7297e179a1f84a47c73cec5d70411f8e1f979e7cf7050646e2cfd0070b9317f243c61655fbc91dc318d", 0x561}, {&(0x7f00000011c0)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac7", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001ec0)="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", 0x128}], 0x1}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002e80)="2f31dab86b35933052f7b65171daed6fe2b91200c97d8c48c04e1983d37f0cda20255e52bc3a679c63cbf315782505d8637ab927830f46d18b842122de738c299fe6689d9a0084143937322d855d63051a6225d5a099e8a041aebe15e5a05f6707bfa74381deb5209e0ebb5a5f183c212b9d8ac59b1be18d6f422f144ea18df055c8b9f8642fdbe90beebf7dced28ad015e229f3cb6f85dddd179fedbf6c4cd48ab6c9ff736c4a2ba4fa1ef5a388f49066eaff1f13838d48fc7b0da48b81024533d0d1c5a3579ab061b054529dde3b79263f6e62f6e9c03da4e7f9ec69fde86ffaec01d5bdfc5df4c45a0c398e8257b471831132e00bcc7f523cdf49583ca9e29877668364a780ac6eb8b62248ba97af217d3aae33a9ccf13698368425aade8f9ef65ac54ca6c50b7edcf57ea26f262dce60fc557d4e340d92401292b153cf0541ab28599e64d2972adf7aa412cd9bd2fd2c759d07a2165f9e4eaef72de9701c54b59bd477d5bc16c08fe3ca1a5aec8a3bae68e6c6a9f30505698a648429bce9f88185ef58a9c3181a2b5a3feda6a98205b5d8f72ae635a366b26f74d983d5df9a1040459797c471701e62da4f650a1e483e3c5a13f8bcb92671fac61174fc5460328999507671669656d8df2bfa51194ffc253ef21f862f888b65c9776c69c27fb7e7b3b9f5c21a80677bf60bb459f12965d65a61c8e9c69b26a3879f976728e1fdba4103800fc8086cc9d9848103586edb90db70dbe3def0422bd84c5571e447cda1b24032024b8b913f22af687a68c75be2961640b5535affdb97283bf74a52815f71c442e86663cc6f7009d0b7e812afcda7d53684c80064169c7c92cdca03d7e5e0d29ad2685654a020d11a5853d667b66451041e7d65da13b64a26340cb0990125202e4657d0f97e028a8a011f64b2a909ff9f7b4e9c3b4e39b279cf49686d5372f7aefa6edb98e0f5d23d88f041c0e5e1df7f38051f2e34487baecc11ddf082be38c8185ac8e1cb59df4d9527f1eaf825b53204e0a9c66b2680b8eba6e109f58a6ece09921d4809339c023d7ea5a9abb2223fd3a03220543a625888e4a7f3654ac7abf38ec0b91c47109328ce12e11dcdc591c90b441611555a87c6372840a133330a8b448f4595c9b788cf9823b52f989c006fa632847ea82098d77554c9309f9374347aad66386a1a7fef68cd64b4407c90c13aa34315c8adb2b250607932324e55e3f280b7875f561441ef483d85188a9e8c09018dd8c5caafa9f749312d030a17109c595b58b5267053036dadee7e73553bd898e38b3056598f43cb8d0b476dd136a52d16e060074d4bcc75de0a5a140e0e98bd89900dde4359dda6dd945db79c96f89402f94ea2673907c045d748672ccd1ec3534650839b378ea977da50ce784a1e0c040559cc293af05cb9001f70a3726f448dbde2b672e1d78ee6ef424ae6b043bf94faa4a06d76d123e34d784283651a00bb802ebb0ce788009c7b6d4436f860621cf53c4faca015334e7e9453ba3914cff40f0c35204b4e4f0b69e98d5e1bef0dad7a895c798901db2b2491687c3ad0a151eed80281a8d16688a6b8c18c59c9a76c1c9a49b10a202cf054a20d3134d335ab90d4b5c7f889bceaf0c64a8cea179b40af882e451771522bc84443c06a6a9c35f380f01dbaa685cd1eb3c05bbc9fa5075395000d42a2f29934e07df19a370a44b25df3d5184fa45abeddf5e77764ec5eaa6128369630455d41e661d519fcd2a7b94375d774e9a1c16af876ad83", 0x4e7}], 0x1}}], 0x4, 0x24048844)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0)

1.901864592s ago: executing program 0 (id=2227):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x1, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000200))

1.848176778s ago: executing program 3 (id=2228):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'nicvf0\x00', 0x1}, 0x18)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4164e9ee477e02677a8d65326dfb22579cba8db84a504235a8c2552da78e8a2eaa33e423b055b24833cd723659", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x440b0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'syz_tun\x00', &(0x7f0000000840)=@ethtool_link_settings={0x4d, 0x4, 0x5, 0x5, 0x5, 0xd, 0x13, 0xfd, 0xd, 0x4, [0x800, 0x9, 0x8, 0xa, 0x0, 0x7fff, 0x2, 0xffffffff]}})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00006b14acb600b12cef6276976c3848b15761fedcbaebbfda5f2075e42cb6840cdd41c639f308baa4e07e7d274b19701243f42f1b4f191ccdc28b40fc5e4aa36a97afa6c7b45e0b38297c5d6ca39e35c63837bbb3b3b019f0445e0701950bf6bf3174329774c996ca2127e1ca50403e5e744460353607bd70a516e5ab0a5df07160bc9b75e36a1156dc2affcff862c93b919bbf1af209000000000000000c355fb6ec1b363607b57f158ebb833eb78e03966e8fb3", @ANYRES16=r5, @ANYBLOB="000125067000ffdbdf2a18f7890c00757141fa63e8c125090000090000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001)
r6 = gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000880)=ANY=[@ANYBLOB="306001c2a364f532f024325ddd2041ac5ab67556f29aac90b92a7d6741b80b06e6dffe91e42f8b6bd956bbef0692c242c00afab93241ba97cc683f4cbe3f5801f3a1c7", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r9, @ANYBLOB="08000b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x20000884)
r10 = socket(0x2b, 0xa, 0x0)
r11 = socket(0x11, 0xa, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x891e, &(0x7f0000000080)={'syztnl0\x00', 0x0})
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r12, &(0x7f0000000680)={0x1a, 0x28, 0xac, 0x4, 0x3, 0x4, @multicast}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r14, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x5, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48005}, 0x8000)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="089845000750050008001300", @ANYRES32=r6, @ANYRES32=0x0], 0x3c}}, 0x4000010)

1.71512381s ago: executing program 0 (id=2231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80)

1.56564765s ago: executing program 4 (id=2233):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@local, 0x0, 0x3c}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0)

1.512044196s ago: executing program 0 (id=2234):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb", 0x60}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000580)={0x89, @multicast2, 0x4e23, 0x3, 'nq\x00', 0x8, 0x44a, 0x39}, 0x2c)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.428055134s ago: executing program 2 (id=2235):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b32, &(0x7f0000000040))
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)

1.425669239s ago: executing program 3 (id=2236):
r0 = socket$inet6(0xa, 0x2, 0x7ffffffd)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) (async, rerun: 64)
sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000440)=@phonet={0x23, 0x1, 0x1}, 0x80, 0x0}}], 0x2, 0x0) (rerun: 64)

1.408644109s ago: executing program 4 (id=2237):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)

1.326529462s ago: executing program 3 (id=2238):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4)
r2 = socket$inet(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0))
ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pread64(r4, 0x0, 0x0, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80280, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xe}, {0x10, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000003c0)=0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000025c56770f5850000006d367a8ffd3b226a9a703d1fc66171f318ea5284cdb9f991c5248d6fb36cc90bbebbdad25a0782bbb76cc73fe69a21203a6a4a88d70da8f34857651beede39059a042d4aa47839bc02000000000000004a4b447f26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r8, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0xc}, {0xffff, 0x10}, {0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x6, 0xff, 0xd, 0x7ff, 0x4, 0x380000, 0x4, 0x4, 0x40, 0x19, 0x14, 0x3, 0x9, 0x3, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x1, 0x1, 0x9}}]}}]}, 0x7c}}, 0x40000)

1.280083943s ago: executing program 2 (id=2239):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001f180100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800290041010000"], 0x3c}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))

1.22844825s ago: executing program 1 (id=2240):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6e}, @TCA_RATE={0x6, 0x5, {0x7, 0xe}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000ac0)={'geneve0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0xe, [0x722c, 0x401, 0x2, 0x6, 0x7fff, 0x7a, 0x10001, 0x8, 0x5, 0x81, 0x1, 0x401, 0x5, 0x5, 0xfffffffc, 0x5, 0x7, 0x80000001, 0x10001, 0x0, 0x1, 0x8, 0x3, 0x8, 0x2, 0x7, 0x401, 0x1, 0xe37, 0x3, 0x7, 0x86, 0x2, 0x1, 0x8, 0xfffffffa, 0x2, 0xb, 0xc, 0x4cf7, 0x3, 0x4, 0x80, 0x3, 0x8000, 0x5, 0xfffffff0, 0x0, 0xfffffff9, 0x0, 0x28, 0x81, 0x1ff, 0x5, 0x10001, 0x5232d8a0, 0x9, 0x1, 0x611, 0x9, 0x7, 0x5, 0x9, 0x4, 0xffff, 0x6, 0x5, 0x7f, 0x81, 0x81, 0x2bd, 0x1000, 0x2, 0xfffffff8, 0x6, 0x8, 0x2, 0x400, 0x7, 0x2, 0x4800, 0x2, 0x7f, 0x4386, 0x8000, 0x9, 0x1, 0x7, 0x2, 0x4be, 0x1, 0x7, 0xe9, 0x24, 0x6, 0x10000, 0xd, 0x763, 0x6, 0x0, 0x67bf, 0x7, 0x876, 0x1, 0x5, 0x6, 0x4, 0xd, 0x5, 0xc, 0x200, 0x2, 0x1208, 0x6, 0x2, 0x7, 0x8, 0x7, 0x3, 0x3, 0xafa8, 0x5, 0x1, 0x0, 0x4, 0x2, 0x621, 0x7fff]}})
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
unshare(0x20040600) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, 0x0, 0x0, 0x20000000) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r4 = epoll_create(0x7) (async)
r5 = epoll_create1(0x0)
r6 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) (async, rerun: 32)
r7 = epoll_create1(0x0)
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)) (async, rerun: 64)
r9 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000080)={0x1008}) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async)
sendmsg$nl_route(r10, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x4c010) (async)
accept4(r1, 0x0, 0x0, 0x0)

1.209355783s ago: executing program 0 (id=2241):
r0 = socket$inet6(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28)
r1 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

1.186320034s ago: executing program 2 (id=2242):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="61202a3a2a20726d00688f328e835e938d6b87d8bb7470445300a5f10c36857cc70fd3459ccf1b9f46e0704cc9c5664b478f13a7f8fa1d6581be3f25c75a5efb826e3abe5ce296b98cdf451f887bd0541cc379f94f1aaab4becce4363733e9c65de6058cef4bcede18cded43a347f9adace1254c04b0c7f248247ca411e66f99e910079978f65accef7d368708dbdf958cec4e5cd02e72d3143dd3854c534a6a2c896c92c802fa6d8c8d3f0f15590fdc9c0bc8bf4b80186a928d8624792a9f63a6053d87fce90037778808e836a2741527f0317da7e5a90d5dce2edc89d601e548dcb79b3da22355672699b02d5d"], 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
connect$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r5, 0x2)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000040))
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r11 = socket(0x40000000015, 0x5, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r10], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

1.123833171s ago: executing program 4 (id=2243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x90000005})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x1)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000140)="830b2753c54ce03d408b51f1916f3dda", 0x10)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async, rerun: 64)
writev(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x9, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.103124597s ago: executing program 1 (id=2244):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6fb9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)

1.030788822s ago: executing program 1 (id=2245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054)

827.571386ms ago: executing program 4 (id=2246):
r0 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0)

788.720572ms ago: executing program 2 (id=2247):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r3, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$unix(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

770.895533ms ago: executing program 1 (id=2248):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xff}, 0xfd}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000001880)={&(0x7f00000002c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x20002000}, 0x4004005)

667.780622ms ago: executing program 4 (id=2249):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}}, 0x20}}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000005c0)={<r1=>0x0, 0x7ff, 0x43, 0xfffffffa}, &(0x7f0000000600)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={r1, 0x377}, &(0x7f0000000680)=0x8)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff"], 0x90)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0xf5f9, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x24000000)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000240)=0x4)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4)
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xe8, 0x0, 0x5, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "faabab8a5060be7bfc7df07811"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac9041530f54470620dfe04009"}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "92c6fea6e4"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3c22add41d48c701cdcf7b8426"}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcc5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_MAC={0xa, 0x6, @random="df7149f236b2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="77413a9089"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

552.730089ms ago: executing program 2 (id=2250):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24)

456.560859ms ago: executing program 1 (id=2251):
r0 = socket$inet(0x2, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@loopback, @dev={0xac, 0x14, 0x14, 0x41}, 0x1, 0x5}})
socket$inet6(0xa, 0x800, 0x7)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000240)=0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x80, 0x4e23, 0x100, 0xc, 0xa0, 0x80, 0x3b, r5, r7}, {0x4e480825, 0x8, 0x0, 0xd, 0x825, 0x3ff, 0xffffffffffffffff}, {0x80000001, 0x8000000000000000, 0x9, 0x4}, 0x0, 0x6e6bb8, 0x3, 0x1}, {{@in=@broadcast, 0x4d3, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3501, 0x3, 0x3, 0x6, 0x1, 0x40, 0x9}}, 0xe8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r2, r9}, 0xc)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r11, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r11}, 0x38)
getsockopt$IP6T_SO_GET_ENTRIES(r10, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x87, "49c1cf2c4673ec109e2aaf280efdc349cdc02bcf8430fb2583a0f191fa5e07acc07a23abda9d45353cef909ea0c079f547c983cb3ef4ef1f37e07015f23fb74f58773fdf248c26fe9d8231d00ee8e3707e1bc853b164bb6cf8195ed458f47a2ac146024a2b01a8ef686e72fa899126aef5927d7fdc6e5ea5ebce0854aa896465729fd6fa5bbbcd"}, &(0x7f0000000340)=0xab)
ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x7f, 0xab, 0xe, 0x5, 0x7}, {0x6, 0x7576, 0x1fe000000, 0x10000, 0x4}, {0xd, 0x4, 0x84, 0x1, 0x5}, {0x9, 0x1, 0x3, 0x823, 0xc21f}, {0x723, 0xa20, 0x6, 0x7, 0xfffffffc}, {0x2, 0x80000001, 0xb, 0x1, 0x9}, {0x3ff, 0x6, 0xac46, 0x80000001, 0xff00}, {0x3, 0x8713, 0x80000002, 0x2, 0x9bd}], 0x8, 0x28, 0x2, 0x7b8a})

332.019676ms ago: executing program 4 (id=2252):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x2c, 0x52, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4ab7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80)
listen(0xffffffffffffffff, 0x3)
sendfile(r0, r3, 0x0, 0x20000000002)
socket$inet6(0xa, 0x80002, 0x0)

263.479133ms ago: executing program 0 (id=2253):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000040), 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be647061dd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000400001}, 0x60)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x1, 0x2, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) (async)
r11 = socket(0x1d, 0x2, 0x6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000580)=0x2, &(0x7f0000000140)=r6}, 0xffffffffffffff7b)

149.930792ms ago: executing program 3 (id=2254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e659464657673696d3000000d0087006c325f64726f707300000000f1f89eeae5c5e4c5d43179459acf7573c37089cb6afffd5732f232bf7f7880fb33066676e731beceb0db30708eaf06ee99a75db20b4c9fadb5f06400ecd410daa7f97d99a39fa87f678a06c02245a7ffe6e34b1350e8a4fad15b38d016693661873dd82aac321eb212b7ce57198370165e0cddb301edb25e764a03375097a4011176f06e19821773ce8b718d5fbd2b1736e3959ca24ac051177404db7b743dbbb7ce42bb0f4d154dcd159a828ffe15cd"], 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "93558029b0f781db5e7ec6d8ca"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

0s ago: executing program 2 (id=2255):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e80)={{r0, &(0x7f0000000040)='\x00', 0x40000, &(0x7f0000000080)={@_ha_fsid={[0x10000]}, {0x6, 0x8, 0x0, 0x9}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, 0xa, &(0x7f0000001d40)=[{0x1, 0x5269, &(0x7f0000000140)='$\x00', &(0x7f0000000180)="f1ea5ed2cc88197956078c9648c3e6213ebd74", 0x13, 0x4}, {0x2, 0x3fc, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="ff6b70419f3c522c0ce78280409a67bc9ebef02271c37fab074ae008acebe1a17a9487ef8d2f037ad78b96efb7f3a6e778b7a9d9fb4036195b3afbae8f1f106345457580149208f1ebdc555559fdee14ea79cd97020de9dd8d223c8fe56654ccdf889b75664f7cf25466adbb01b8f6984c808c6ee5e1a096c82ef71a0e555acced2a1e6823d0ccf8cec742ecd83d1457db1d0614cd65860e83c09301fd08f21d7cf85c957eacf69171e2963453bfbf75fb5f014b2ac97baa2f9b7b8c80e1785827a4b6", 0xc3}, {0x2, 0xffff, &(0x7f0000000300)=']}\x00', &(0x7f0000000340), 0x0, 0xa}, {0x0, 0xe6, &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)="b09a38256947c3af7da089f95c93595b9285dd748c37c125f6a2ece97d219fa2a7c97ccaffbae5d10f68bcad8a489b3f7d089f174f11e3ac772f960ce20f8df279b26e8a424d1dde3f012c72c1fc16c64aac", 0x52, 0x2}, {0x2, 0xb1dd, &(0x7f0000000440)='\x00', &(0x7f0000000480)="6fdb381ceb5a1cd0e032c4a59177cad1afa1cd73658feb9ae1da355e4c7fade44e79dba10da67adb60b31bee2fa44bf26ba50ca94944db6d98c4c637dc9d5bcf5b626000d964ecfa248540547d81717f53a96306", 0x54, 0x3a}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000a00)="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", 0x1000}, {0x2, 0x7, &(0x7f0000001a00)=')-\x00', &(0x7f0000001a40)="8b98d28e2159e1189d8beae9151e27fb1088b972b760e861f97690f06522a726f81c373617bd6b2b8a591140be64417a6a9fc1b2123520800c990070d085caf577510dbd255ca26c677d4d7e3f5708e0a9d9fb45d36846e81429870bd250bc20ba59c1b58fbaeadbdf2e569bb0d5f90faaea8d472fc0249351f3fd24", 0x7c, 0x12}, {0x2, 0x2064, &(0x7f0000001ac0)='-^\x00', &(0x7f0000001b00)="2af39ca35294e2195b0a3533a094f1a20f3fa139d919c4c0218e0e82be399c856e1cdee7aded43e8246a00a13fe69b1b3637001eb39a75debe4a7d4655cdfd36262f363341fe2cba2109d810d78058a17e419f3811eded21ea98dfca4914c074c8d54bb2690738d53eec4615a06e1a54ec529cf83cbbe662970f7baa5b9ae568c9a5aba33f80cf6d51eabadade72a6c886c2a2abb4abf2cccfcac687dd41e66bb3687e8f1ec5a46ac15ceed87374cd75a54d", 0xb2, 0x28}, {0x1, 0x4, &(0x7f0000001bc0)='\x00', &(0x7f0000001c00)="d38105e8d5aefcf5c1dfa4cefdf658ab276cb07fc4b4bc965760e5d546c438ce3a7d79a1a501020b2754002a83f034a968ccccb6aea3fb86b6a0006f667ea07c66c3a444bce4292bb77254c193fc97e08fede28f8156089a6e33a31f55436917289bed0bf1c253c9aee95c08707a1d16954514ae9a9e775a7e181b026b55117b3f5b230263c8086054d74d2214edf37afce465a7d2df7b70c5f3379df0948bfb8e2fb4a0c66d443433809d05868a", 0xae}, {0x2, 0x3, &(0x7f0000001cc0)='\x00', &(0x7f0000001d00)="1a08aeb989e857ff612de685d68daf10022dce5ebd53047f965a519d", 0x1c, 0x20}]}) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

kernel console output (not intermixed with test programs):

entity 928bb98f6853, cluster identity 4711
[   95.120061][ T6223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.194426][ T6221] tipc: Resetting bearer <eth:syzkaller0>
[   95.271881][ T6221] tipc: Disabling bearer <eth:syzkaller0>
[   95.285232][ T6243] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   95.400444][ T6247] netlink: 'syz.3.125': attribute type 1 has an invalid length.
[   95.807076][ T6263] syzkaller0: entered promiscuous mode
[   95.820058][ T6263] syzkaller0: entered allmulticast mode
[   96.406284][ T6288] __nla_validate_parse: 7 callbacks suppressed
[   96.406304][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'.
[   96.481923][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'.
[   96.545153][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'.
[   96.675549][ T6301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'.
[   96.872687][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   96.912318][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.140'.
[   97.195324][ T6316] sctp: [Deprecated]: syz.4.142 (pid 6316) Use of int in max_burst socket option deprecated.
[   97.195324][ T6316] Use struct sctp_assoc_value instead
[   97.214492][ T6316] netlink: 56 bytes leftover after parsing attributes in process `syz.4.142'.
[   97.268931][ T6317] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   97.279114][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'.
[   97.290676][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.142'.
[   99.875385][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'.
[  100.151334][ T6335] sctp: [Deprecated]: syz.2.149 (pid 6335) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.151334][ T6335] Use struct sctp_sack_info instead
[  100.462488][ T6350] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[  100.718883][ T6358] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.733474][ T6222] Set syz1 is full, maxelem 65536 reached
[  100.751195][ T6362] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[  100.776658][ T6365] nbd: illegal input index 65508
[  101.274185][ T6392] xt_CT: No such helper "syz0"
[  101.590035][ T6412] netlink: 'syz.0.168': attribute type 10 has an invalid length.
[  101.632972][ T6412] 8021q: adding VLAN 0 to HW filter on device team0
[  101.646726][ T6412] bond0: (slave team0): Enslaving as an active interface with an up link
[  101.813730][ T6420] block nbd0: not configured, cannot reconfigure
[  101.850717][ T6420] netlink: 'syz.4.169': attribute type 11 has an invalid length.
[  101.960896][ T6428] __nla_validate_parse: 2 callbacks suppressed
[  101.960922][ T6428] netlink: 88 bytes leftover after parsing attributes in process `syz.3.172'.
[  102.118193][ T6434] Bluetooth: MGMT ver 1.23
[  102.165639][ T6434] netlink: 156 bytes leftover after parsing attributes in process `syz.2.174'.
[  102.391122][ T6451] syz_tun: entered allmulticast mode
[  102.427986][ T6455] sctp: [Deprecated]: syz.4.180 (pid 6455) Use of int in maxseg socket option.
[  102.427986][ T6455] Use struct sctp_assoc_value instead
[  102.454077][ T6453] bridge0: port 3(ipvlan2) entered blocking state
[  102.461322][ T6453] bridge0: port 3(ipvlan2) entered disabled state
[  102.475967][ T6453] ipvlan2: entered allmulticast mode
[  102.486327][ T6453] bridge0: entered allmulticast mode
[  102.502707][ T6453] ipvlan2: left allmulticast mode
[  102.517415][ T6453] bridge0: left allmulticast mode
[  102.565388][ T6450] syz_tun: left allmulticast mode
[  102.596278][ T6463] syzkaller0: entered promiscuous mode
[  102.613977][ T6463] syzkaller0: entered allmulticast mode
[  103.195866][ T6490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.252964][ T6490] syzkaller0: entered promiscuous mode
[  103.278585][ T6490] syzkaller0: entered allmulticast mode
[  103.308325][ T6490] tipc: Resetting bearer <eth:syzkaller0>
[  103.346663][ T6489] tipc: Resetting bearer <eth:syzkaller0>
[  104.150042][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.150812][ T5632] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  104.860404][ T6489] tipc: Disabling bearer <eth:syzkaller0>
[  104.880578][ T5754] tipc: Node number set to 2783427915
[  105.121796][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'.
[  105.146940][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'.
[  105.169632][ T6532] lo speed is unknown, defaulting to 1000
[  105.211687][ T6532] lo speed is unknown, defaulting to 1000
[  105.253824][ T6532] lo speed is unknown, defaulting to 1000
[  105.287248][ T6540] 8021q: VLANs not supported on ip_vti0
[  105.721275][ T3317] syzkaller0: tun_net_xmit 76
[  105.732210][ T3317] syzkaller0: tun_net_xmit 48
[  105.750220][ T6566] netlink: 'syz.3.212': attribute type 12 has an invalid length.
[  105.768691][ T5731] syzkaller0: tun_net_xmit 76
[  105.776222][ T6566] netlink: 'syz.3.212': attribute type 29 has an invalid length.
[  105.789331][ T6566] netlink: 148 bytes leftover after parsing attributes in process `syz.3.212'.
[  105.823970][ T6566] netlink: 'syz.3.212': attribute type 3 has an invalid length.
[  105.844928][ T6566] netlink: 'syz.3.212': attribute type 2 has an invalid length.
[  105.855152][ T6566] netlink: 35 bytes leftover after parsing attributes in process `syz.3.212'.
[  105.901060][ T6532] infiniband s
z1: set active
[  105.916081][ T6532] infiniband s
z1: added lo
[  106.035719][ T6532] smbdirect: ib_dev[s
z1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  106.070211][ T6532] smbdirect: ib_dev[s
z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  106.096195][ T6532] smbdirect: ib_dev[s
z1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  106.244986][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[  106.263815][ T6532] RDS/IB: s
z1: added
[  106.273480][ T6532] smc: adding ib device s
z1 with port count 1
[  106.290382][ T6532] smc:    ib device s
z1 port 1 has no pnetid
[  106.529684][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[  107.620049][  T187] lo speed is unknown, defaulting to 1000
[  107.635148][ T5731] lo speed is unknown, defaulting to 1000
[  107.649616][ T6532] lo speed is unknown, defaulting to 1000
[  107.960750][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.970350][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.270718][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.289850][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.486696][ T6610] sch_fq: defrate 0 ignored.
[  108.506917][ T6611] netlink: 'syz.3.224': attribute type 4 has an invalid length.
[  108.529107][ T6618] netlink: 'syz.3.224': attribute type 4 has an invalid length.
[  108.560927][ T6532] lo speed is unknown, defaulting to 1000
[  108.560974][ T3317] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.604363][ T3317] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.669836][ T3317] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.712269][ T3317] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.847479][ T6644] netlink: 'syz.1.230': attribute type 15 has an invalid length.
[  108.874706][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[  108.909772][ T6645] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.928812][ T6645] bond1: (slave lo): Enslaving as an active interface with an up link
[  108.942737][ T6645] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  109.126015][ T6532] lo speed is unknown, defaulting to 1000
[  109.146036][ T6655] netlink: 96 bytes leftover after parsing attributes in process `syz.3.233'.
[  109.164136][ T6655] 8021q: VLANs not supported on gre0
[  109.260896][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'.
[  109.464375][ T6676] netlink: 'syz.3.238': attribute type 21 has an invalid length.
[  109.534854][ T6680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.239'.
[  109.553988][ T6532] lo speed is unknown, defaulting to 1000
[  109.568552][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[  109.712897][ T6686] xt_hashlimit: size too large, truncated to 1048576
[  110.089588][ T6696] netlink: 'syz.0.242': attribute type 13 has an invalid length.
[  110.126416][ T6532] lo speed is unknown, defaulting to 1000
[  110.341219][ T6693] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  110.356239][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.371295][   T35] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  110.383853][   T35] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  110.410837][   T35] bond0: now running without any active interface!
[  110.512697][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'.
[  110.533440][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'.
[  110.579794][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.580067][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'.
[  110.602101][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'.
[  110.612994][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.622628][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.646132][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.971185][ T6714] bond2: entered promiscuous mode
[  110.995366][ T6723] netlink: 'syz.2.252': attribute type 3 has an invalid length.
[  111.001211][ T6722] macvlan2: entered promiscuous mode
[  111.009489][ T6722] macvlan2: entered allmulticast mode
[  111.015808][ T6722] bond2: (slave macvlan2): Opening slave failed
[  111.136532][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.410969][ T6745] syzkaller0: entered promiscuous mode
[  111.423740][ T6745] syzkaller0: entered allmulticast mode
[  111.455916][ T6745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.518057][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[  111.783172][ T6749] bond2: option fail_over_mac: invalid value (16)
[  111.792196][ T6749] bond2 (unregistering): Released all slaves
[  112.073860][ T6773] netlink: 'syz.4.269': attribute type 1 has an invalid length.
[  112.572691][ T6804] nftables ruleset with unbound set
[  112.611127][ T6801] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  112.661068][ T6801] bond2 (unregistering): Released all slaves
[  112.772869][ T6819] lo: Caught tx_queue_len zero misconfig
[  112.929825][ T6828] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  113.082189][ T6828] syzkaller0: entered promiscuous mode
[  113.093335][ T6828] syzkaller0: entered allmulticast mode
[  114.650584][ T6854] team0: entered promiscuous mode
[  114.655715][ T6854] team_slave_0: entered promiscuous mode
[  114.661764][ T6854] team_slave_1: entered promiscuous mode
[  114.668054][ T6854] team0: left promiscuous mode
[  114.673865][ T6854] team_slave_0: left promiscuous mode
[  114.681574][ T6854] team_slave_1: left promiscuous mode
[  114.692236][ T6860] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  114.983785][ T6612] hid-generic 0005:0C45:100E.0001: unknown main item tag 0x0
[  115.047856][ T6612] hid-generic 0005:0C45:100E.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  115.113212][ T6892] __nla_validate_parse: 38 callbacks suppressed
[  115.113230][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.294'.
[  115.475019][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[  115.524975][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'.
[  115.752935][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'.
[  116.335505][ T6958] xt_TCPMSS: Only works on TCP SYN packets
[  116.366543][ T6958] IPVS: set_ctl: invalid protocol: 103 172.20.20.36:20003
[  116.398564][ T6954] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  116.415895][ T6954] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  116.440707][ T6954] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  116.951618][ T6993] syz.3.324 (6993) used greatest stack depth: 17576 bytes left
[  117.078351][ T7000] netlink: 'syz.3.326': attribute type 1 has an invalid length.
[  117.135398][ T7000] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.180590][ T7000] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  117.448266][ T7018] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  117.468522][ T7018] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  117.493861][ T7018] tipc: Started in network mode
[  117.499356][ T7018] tipc: Node identity 080211000001, cluster identity 4711
[  117.513388][ T7018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.613338][ T7026] openvswitch: netlink: Duplicate or invalid key (type 0).
[  117.662514][ T7026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.924509][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'.
[  117.940599][ T7037] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[  117.952754][ T7037] netlink: 'syz.1.335': attribute type 15 has an invalid length.
[  118.166084][ T7038] syz.4.334 (7038) used obsolete PPPIOCDETACH ioctl
[  118.278283][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.337'.
[  118.441680][ T7062] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[  118.479229][ T7062] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.511307][ T7066] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  118.543943][ T7064] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  118.585593][ T7064] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  118.628241][  T808] tipc: Node number set to 134418688
[  118.703422][ T7064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.877459][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'.
[  118.889995][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'.
[  119.060991][ T7099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.151408][ T7108] netlink: 'syz.3.354': attribute type 4 has an invalid length.
[  119.193353][ T7108] netlink: 'syz.3.354': attribute type 4 has an invalid length.
[  119.462836][ T7120] syzkaller0: entered promiscuous mode
[  119.478211][ T7120] syzkaller0: entered allmulticast mode
[  119.488086][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.496629][ T7124] IPv6: NLM_F_CREATE should be set when creating new route
[  119.532600][ T7124] netlink: 'syz.2.360': attribute type 1 has an invalid length.
[  119.535227][ T7120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.612963][ T7119] tipc: Resetting bearer <eth:syzkaller0>
[  119.694440][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[  119.717867][ T7119] tipc: Disabling bearer <eth:syzkaller0>
[  119.794432][ T7142] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  119.812733][ T7142] bond2 (unregistering): Released all slaves
[  119.942505][ T7148] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.369'.
[  119.954086][ T7148] veth0_to_bond: default FDB implementation only supports local addresses
[  120.122967][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[  120.231806][ T7159] netlink: 64 bytes leftover after parsing attributes in process `syz.1.372'.
[  120.314308][ T7165] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[  120.332116][ T7165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.373'.
[  120.354680][ T7163] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[  120.367387][ T7163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.373'.
[  120.384913][ T7165] x_tables: unsorted underflow at hook 2
[  120.448956][ T7170] x_tables: duplicate underflow at hook 3
[  120.570943][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'.
[  120.759390][ T7181] �x9�: renamed from bridge_slave_0
[  120.823697][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[  120.890936][ T7192] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  120.978368][ T7192] geneve2: entered promiscuous mode
[  121.003744][ T7192] geneve2: entered allmulticast mode
[  121.049141][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'.
[  121.088964][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'.
[  121.116771][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'.
[  121.126757][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'.
[  121.136962][ T7198] netlink: 'syz.4.385': attribute type 2 has an invalid length.
[  121.707617][ T7232] xt_hashlimit: size too large, truncated to 1048576
[  121.910565][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.985417][ T7238] bridge_slave_0 (unregistering): left allmulticast mode
[  122.037421][ T7238] bridge_slave_0 (unregistering): left promiscuous mode
[  122.058484][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.487603][ T7255] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  122.608766][ T7227] bridge1: entered promiscuous mode
[  122.658614][ T7227] bridge1: entered allmulticast mode
[  122.901381][ T7269] validate_nla: 4 callbacks suppressed
[  122.901400][ T7269] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[  123.010527][ T7271] macsec1: entered promiscuous mode
[  123.558267][ T7299] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  123.582014][ T7299] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  124.259325][ T7320] openvswitch: netlink: Missing key (keys=40, expected=100)
[  124.824638][ T7343] sock: sock_set_timeout: `syz.2.428' (pid 7343) tries to set negative timeout
[  124.908521][ T7348] netlink: 'syz.4.429': attribute type 83 has an invalid length.
[  124.972859][ T7350] tunl0: Caught tx_queue_len zero misconfig
[  125.339787][ T7366] syzkaller1: entered promiscuous mode
[  125.355678][ T7366] syzkaller1: entered allmulticast mode
[  125.573090][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.607633][ T7370] batadv_slave_1: entered promiscuous mode
[  125.783325][ T7379] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  126.112039][ T7390] netlink: 'syz.3.443': attribute type 1 has an invalid length.
[  126.310766][ T7398] Bluetooth: MGMT ver 1.23
[  126.420687][ T7405] __nla_validate_parse: 13 callbacks suppressed
[  126.420706][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'.
[  126.629849][ T7405] team0: Port device team_slave_0 removed
[  126.998175][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'.
[  126.999672][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  127.042006][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  127.242815][ T7446] gtp0: entered promiscuous mode
[  127.262715][ T7446] gtp0: entered allmulticast mode
[  127.388665][ T7455] openvswitch: netlink: IP tunnel dst address not specified
[  127.435781][ T7451] bond4 (unregistering): Released all slaves
[  127.892476][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.918529][ T7467] netlink: 'syz.0.463': attribute type 1 has an invalid length.
[  127.955405][ T7479] IPVS: set_ctl: invalid protocol: 98 172.20.20.15:20004
[  127.964266][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[  128.020536][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[  128.100926][ T7486] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  128.144521][ T7487] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  128.481537][ T7507] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  128.552906][ T7507] bond2 (unregistering): Released all slaves
[  128.645355][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.477'.
[  128.661147][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[  128.674244][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.688553][ T7523] openvswitch: netlink: IP tunnel dst address not specified
[  128.752710][ T7529] netlink: 'syz.1.479': attribute type 11 has an invalid length.
[  129.086239][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'.
[  129.156617][ T7549] netlink: 'syz.4.488': attribute type 2 has an invalid length.
[  129.205092][ T7551] bond2: option min_links: invalid value (18446744073709551614)
[  129.213190][ T7551] bond2: option min_links: allowed values 0 - 2147483647
[  129.222226][ T7551] bond2 (unregistering): Released all slaves
[  129.582052][ T7575] dummy0: Caught tx_queue_len zero misconfig
[  129.829909][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[  129.845029][ T7581] "syz.1.497" (7581) uses obsolete ecb(arc4) skcipher
[  129.862618][ T7594] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  130.061491][ T7602] netlink: 'syz.1.502': attribute type 9 has an invalid length.
[  130.090344][ T7602] netlink: 'syz.1.502': attribute type 6 has an invalid length.
[  130.550639][ T7624] netlink: 'syz.1.511': attribute type 1 has an invalid length.
[  130.654326][ T7630] netlink: 'syz.0.512': attribute type 21 has an invalid length.
[  130.773147][ T7634] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[  131.343255][ T7674] team0: Device xfrm0 is of different type
[  131.475661][ T7684] __nla_validate_parse: 6 callbacks suppressed
[  131.475676][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'.
[  131.644161][ T7687] syzkaller0: entered promiscuous mode
[  131.650140][ T7687] syzkaller0: entered allmulticast mode
[  132.788884][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  133.931168][ T7646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.193546][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'.
[  134.204127][ T7691] syzkaller0: entered promiscuous mode
[  134.213938][ T7691] syzkaller0: entered allmulticast mode
[  134.293189][ T7691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.325268][ T7690] tipc: Resetting bearer <eth:syzkaller0>
[  134.384807][ T7690] tipc: Disabling bearer <eth:syzkaller0>
[  134.441239][ T7713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.530'.
[  134.460321][ T7703] veth1_to_bond: entered allmulticast mode
[  134.476033][ T7701] xt_recent: Unsupported userspace flags (000000b1)
[  134.520549][ T7703] veth1_to_bond: left allmulticast mode
[  134.644584][ T7716] netlink: 'syz.2.532': attribute type 15 has an invalid length.
[  134.672604][ T7710] syzkaller0: entered promiscuous mode
[  134.688365][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[  134.703022][ T7710] syzkaller0: entered allmulticast mode
[  134.739679][ T7708] syzkaller1: entered promiscuous mode
[  134.752125][ T7708] syzkaller1: entered allmulticast mode
[  134.811592][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'.
[  135.008579][ T7740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.838372][ T7759] lo: entered promiscuous mode
[  136.845965][ T7759] netlink: 'syz.0.542': attribute type 2 has an invalid length.
[  136.853893][ T7759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.886719][ T7770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.170837][ T7783] netlink: 88 bytes leftover after parsing attributes in process `syz.2.547'.
[  137.239694][ T7788] netlink: 'syz.0.549': attribute type 3 has an invalid length.
[  137.969532][ T7812] block nbd4: NBD_DISCONNECT
[  138.049283][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'.
[  138.111410][ T7809] syzkaller0: entered promiscuous mode
[  138.117925][ T7809] syzkaller0: entered allmulticast mode
[  138.125669][ T5286] veth1_macvtap: left promiscuous mode
[  138.484078][ T7843] netlink: 'syz.1.557': attribute type 10 has an invalid length.
[  140.003780][ T7843] bond2: (slave veth0_to_bond): Releasing backup interface
[  140.300175][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.563'.
[  140.364205][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  140.445609][ T5632] Bluetooth: hci4: link tx timeout
[  140.451654][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.895866][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  140.920899][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  141.198747][ T7933] sctp: [Deprecated]: syz.0.572 (pid 7933) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.198747][ T7933] Use struct sctp_sack_info instead
[  141.219537][ T7932] 8021q: VLANs not supported on ipvlan1
[  141.473479][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[  141.534071][ T7942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  142.006945][ T7967] veth5: entered allmulticast mode
[  142.162996][ T7978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'.
[  142.257221][ T7984] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  142.478652][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'.
[  142.498771][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'.
[  142.559310][ T5632] Bluetooth: hci4: command 0x0406 tx timeout
[  142.929525][ T8019] netlink: 84 bytes leftover after parsing attributes in process `syz.2.601'.
[  143.178492][ T8030] syz_tun: entered allmulticast mode
[  143.199643][ T8030] IPVS: Unknown mcast interface: nicvf0
[  143.224534][ T8026] syz_tun: left allmulticast mode
[  143.354165][ T8035] syzkaller0: entered promiscuous mode
[  143.362520][ T8035] syzkaller0: entered allmulticast mode
[  143.382506][   T14] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.404239][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  143.422359][   T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.432547][   T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.450528][   T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.461438][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'.
[  143.474187][ T8035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.476651][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'.
[  143.492771][ T8034] tipc: Resetting bearer <eth:syzkaller0>
[  143.556657][ T8034] tipc: Disabling bearer <eth:syzkaller0>
[  143.572679][ T8042] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  143.580702][ T8047] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  143.580702][ T8047] Please contact the netfilter-devel mailing list or update your nftables rules.
[  143.802639][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  143.819579][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'.
[  144.081607][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.621'.
[  144.272670][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'.
[  144.580335][ T8102] syzkaller0: entered promiscuous mode
[  144.593286][ T8102] syzkaller0: entered allmulticast mode
[  144.624916][ T8102] tipc: Started in network mode
[  144.644841][ T8102] tipc: Node identity 0200000000000000ff0f, cluster identity 4711
[  145.366693][ T8132] IPv6: Can't replace route, no match found
[  145.396878][ T8132] IPv6: Can't replace route, no match found
[  145.603255][ T8148] tipc: Enabled bearer <udp:syz2>, priority 10
[  145.796899][ T8159] netlink: 'syz.0.645': attribute type 2 has an invalid length.
[  145.817023][ T8159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.062476][ T8169] netlink: 'syz.0.649': attribute type 83 has an invalid length.
[  146.062542][ T8171] syzkaller1: entered promiscuous mode
[  146.079211][ T8171] syzkaller1: entered allmulticast mode
[  146.100502][ T8168] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[  146.455565][ T8186] Bluetooth: MGMT ver 1.23
[  146.478103][ T8186] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  146.506140][ T8185] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  146.520598][ T8193] netlink: 'syz.4.657': attribute type 39 has an invalid length.
[  146.600179][ T8198] block nbd0: not configured, cannot reconfigure
[  147.496893][ T8253] ipvlan2: entered promiscuous mode
[  147.520429][ T8248] __nla_validate_parse: 12 callbacks suppressed
[  147.520448][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'.
[  147.564319][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.673'.
[  147.581698][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'.
[  147.611070][ T8263] tunl0: entered promiscuous mode
[  147.630527][ T8263] netlink: 'syz.4.677': attribute type 4 has an invalid length.
[  147.650053][ T8263] netlink: 9 bytes leftover after parsing attributes in process `syz.4.677'.
[  147.705302][ T8269] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  147.964497][ T8282] netlink: 76 bytes leftover after parsing attributes in process `syz.3.684'.
[  148.012222][ T8277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.070916][ T8287] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.507092][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.694'.
[  148.682849][ T8319] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.730280][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  148.745285][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'.
[  148.998443][ T8339] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#���ˌ
[  148.998443][ T8339] d]Wʔ+NC�m��Y<���9��
[  149.170597][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'.
[  149.197188][ T8350] netlink: 120 bytes leftover after parsing attributes in process `syz.4.707'.
[  149.364888][ T8357] tipc: New replicast peer: 255.255.255.255
[  149.383904][ T8357] tipc: Enabled bearer <udp:syz2>, priority 10
[  149.479204][ T8365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.614203][ T8375] tipc: Enabled bearer <ib:gretap0>, priority 10
[  150.052047][ T8401] syzkaller0: entered promiscuous mode
[  150.059302][ T8401] syzkaller0: entered allmulticast mode
[  150.186823][ T8401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.282409][ T8400] tipc: Resetting bearer <eth:syzkaller0>
[  150.322188][ T8400] tipc: Disabling bearer <eth:syzkaller0>
[  150.650905][ T8430] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[  150.736981][ T8430] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.764430][ T8437] xt_time: invalid argument - start or stop time greater than 23:59:59
[  150.775969][ T8439] xt_time: invalid argument - start or stop time greater than 23:59:59
[  150.932612][ T8403] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  150.964758][ T8403] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  151.122046][ T8403] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  151.148501][ T8403] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  151.177809][ T6612] tipc: Node number set to 4245618688
[  151.280963][ T8403] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.305200][ T8403] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  151.342073][ T8474] syzkaller1: entered promiscuous mode
[  151.368159][ T8473] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  151.406522][ T8474] syzkaller1: entered allmulticast mode
[  151.439355][ T8403] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  151.464401][ T8403] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  151.593759][ T8403] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  151.627578][ T8403] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  151.722249][ T8492] netlink: 'syz.0.748': attribute type 10 has an invalid length.
[  151.833161][ T8492] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  151.876918][ T8500] netlink: 'syz.1.750': attribute type 14 has an invalid length.
[  151.906672][ T8500] netlink: 'syz.1.750': attribute type 13 has an invalid length.
[  152.523177][ T8528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.588073][ T8531] __nla_validate_parse: 17 callbacks suppressed
[  152.588092][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'.
[  152.651517][ T8540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.761'.
[  152.663836][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'.
[  152.668255][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'.
[  153.066616][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'.
[  153.113781][ T8560] netlink: 14 bytes leftover after parsing attributes in process `syz.2.765'.
[  153.327455][ T8587] x_tables: duplicate underflow at hook 1
[  153.675656][ T8596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.871554][ T8622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.913464][ T8608] syzkaller0: entered promiscuous mode
[  153.924863][ T8608] syzkaller0: entered allmulticast mode
[  153.970300][ T8593] tipc: Resetting bearer <eth:syzkaller0>
[  154.014949][ T8593] tipc: Disabling bearer <eth:syzkaller0>
[  154.062802][ T8629] syzkaller0: entered promiscuous mode
[  154.074467][ T8629] syzkaller0: entered allmulticast mode
[  154.102759][ T8634] xt_hashlimit: size too large, truncated to 1048576
[  154.125481][ T8635] xt_hashlimit: size too large, truncated to 1048576
[  154.260940][ T8643] netlink: 80 bytes leftover after parsing attributes in process `syz.1.778'.
[  154.515648][ T8657] syzkaller0: entered promiscuous mode
[  154.535036][ T8657] syzkaller0: entered allmulticast mode
[  154.638980][ T8657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.663336][ T8655] tipc: Resetting bearer <eth:syzkaller0>
[  154.718409][ T8667] netlink: 'syz.3.783': attribute type 4 has an invalid length.
[  154.734901][ T8655] tipc: Disabling bearer <eth:syzkaller0>
[  154.793274][ T8667] netlink: 'syz.3.783': attribute type 4 has an invalid length.
[  154.977052][ T8680] batadv_slave_0: entered promiscuous mode
[  155.069890][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'.
[  155.094615][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.178469][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.235223][ T8694] vlan2: entered promiscuous mode
[  155.251448][ T8694] bridge0: entered promiscuous mode
[  155.260661][ T8699] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  155.274600][ T8697] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) !
[  155.415020][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'.
[  155.595071][ T8713] sctp: [Deprecated]: syz.3.795 (pid 8713) Use of int in max_burst socket option deprecated.
[  155.595071][ T8713] Use struct sctp_assoc_value instead
[  155.735991][ T8725] syzkaller0: entered promiscuous mode
[  155.765111][ T8725] syzkaller0: entered allmulticast mode
[  155.888444][ T8725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.993291][ T8735] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  156.040856][ T8735] 8021q: adding VLAN 0 to HW filter on device team0
[  156.083432][ T8735] bond0: (slave team0): Enslaving as an active interface with an up link
[  156.141335][ T8723] tipc: Resetting bearer <eth:syzkaller0>
[  156.229117][ T8723] tipc: Disabling bearer <eth:syzkaller0>
[  156.264721][ T8748] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[  156.561232][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'.
[  156.624993][ T8764] syzkaller0: entered promiscuous mode
[  156.645154][ T8764] syzkaller0: entered allmulticast mode
[  157.022393][ T8782] bond0: (slave bond_slave_1): Releasing backup interface
[  157.297181][ T8800] syzkaller0: entered promiscuous mode
[  157.316430][ T8800] syzkaller0: entered allmulticast mode
[  157.403715][ T8803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  157.430123][ T8800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.479257][ T8799] tipc: Resetting bearer <eth:syzkaller0>
[  157.553947][ T8799] tipc: Disabling bearer <eth:syzkaller0>
[  157.623125][ T8822] __nla_validate_parse: 1 callbacks suppressed
[  157.623142][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'.
[  157.688381][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'.
[  157.786610][ T8822] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309
[  157.823438][ T8822] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  157.950373][ T8835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.957667][ T8835] IPv6: NLM_F_CREATE should be set when creating new route
[  158.154911][ T8854] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  158.193651][ T8854] netlink: 756 bytes leftover after parsing attributes in process `syz.2.830'.
[  158.480316][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'.
[  158.546345][ T8880] netlink: 'syz.1.831': attribute type 10 has an invalid length.
[  158.606496][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'.
[  158.745783][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.753597][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.971957][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.986975][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.144898][   T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.187516][   T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.231255][   T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.274132][   T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.309078][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  159.340657][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'.
[  159.527797][ T8937] xt_hashlimit: size too large, truncated to 1048576
[  159.685518][ T8933] veth0: entered promiscuous mode
[  159.855567][ T8930] veth0: left promiscuous mode
[  160.001789][ T8961] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  160.225707][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.263729][ T8978] netlink: 256 bytes leftover after parsing attributes in process `syz.3.855'.
[  160.291574][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.308189][ T8978] unsupported nlmsg_type 40
[  160.584962][ T8989] bond0: Error: CAN devices cannot be enslaved
[  160.894758][ T9011] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.861'.
[  161.214569][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  161.393416][ T9031] lo: left promiscuous mode
[  161.448947][ T9031] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  161.461309][ T9036] netlink: 'syz.4.868': attribute type 1 has an invalid length.
[  161.475301][ T9031] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  161.490229][ T9031] geneve2: left promiscuous mode
[  161.499290][ T9031] geneve2: left allmulticast mode
[  161.504877][ T9031] gtp0: left promiscuous mode
[  161.519531][ T9031] gtp0: left allmulticast mode
[  161.524670][ T9031] ipvlan2: left promiscuous mode
[  161.532433][ T9036] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  161.537593][ T9039] 0�: renamed from hsr0 (while UP)
[  161.576374][ T9038] netlink: 'syz.1.866': attribute type 4 has an invalid length.
[  161.597801][ T9039] 0�: entered allmulticast mode
[  161.620496][ T9039] hsr_slave_0: entered allmulticast mode
[  161.632086][ T9050] netlink: 'syz.1.866': attribute type 4 has an invalid length.
[  161.634461][ T9039] hsr_slave_1: entered allmulticast mode
[  161.668244][ T9039] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  162.706238][ T9109] __nla_validate_parse: 1 callbacks suppressed
[  162.706258][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.880'.
[  163.120524][ T9127] netlink: 'syz.3.885': attribute type 1 has an invalid length.
[  163.192557][ T9132] netlink: 44 bytes leftover after parsing attributes in process `syz.3.885'.
[  163.314001][ T9127] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.653588][ T9155] xt_ecn: cannot match TCP bits for non-tcp packets
[  163.674293][ T9156] netlink: 'syz.4.890': attribute type 1 has an invalid length.
[  163.701573][ T9157] netlink: 'syz.4.890': attribute type 1 has an invalid length.
[  163.735710][ T9156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.739848][ T9159] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  163.751334][ T9163] bridge0: port 3(syz_tun) entered blocking state
[  163.760829][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.773330][ T9163] bridge0: port 3(syz_tun) entered disabled state
[  163.780938][ T9163] syz_tun: entered allmulticast mode
[  163.804122][ T9163] syz_tun: entered promiscuous mode
[  164.000601][ T9174] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  164.032827][ T9174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  164.110428][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  164.250379][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'.
[  164.330983][ T9188] team0: Port device team_slave_0 removed
[  164.962520][ T9236] netlink: 'syz.3.911': attribute type 11 has an invalid length.
[  165.029263][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'.
[  165.168948][ T5632] block nbd0: Receive control failed (result -107)
[  165.219465][ T9234] nbd0: detected capacity change from 0 to 63
[  165.229168][ T9244] netlink: 'syz.3.911': attribute type 11 has an invalid length.
[  165.237323][ T9244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.911'.
[  165.238019][ T5627] block nbd0: Receive control failed (result -104)
[  165.381521][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.420291][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'.
[  165.511300][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.526378][ T9255] lo speed is unknown, defaulting to 1000
[  165.529414][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'.
[  165.559987][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.595391][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'.
[  165.644957][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.654731][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'.
[  165.678430][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.701170][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.728711][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  165.758120][ T9258] netlink: 'syz.3.916': attribute type 16 has an invalid length.
[  166.189203][ T9299] syzkaller1: entered promiscuous mode
[  166.226784][ T9299] syzkaller1: entered allmulticast mode
[  166.386988][ T9305] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  166.414093][ T9305] bond3 (unregistering): Released all slaves
[  166.751402][ T9339] sctp: [Deprecated]: syz.3.937 (pid 9339) Use of int in max_burst socket option deprecated.
[  166.751402][ T9339] Use struct sctp_assoc_value instead
[  166.913274][ T9347] veth0_macvtap: Caught tx_queue_len zero misconfig
[  168.148000][ T9422] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  168.199127][ T9421] lo speed is unknown, defaulting to 1000
[  168.289909][ T9424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.416904][ T9431] hsr_slave_0: left promiscuous mode
[  168.473388][ T9431] hsr_slave_1: left promiscuous mode
[  168.805669][ T9456] __nla_validate_parse: 35 callbacks suppressed
[  168.805689][ T9456] netlink: 216 bytes leftover after parsing attributes in process `syz.4.971'.
[  168.825701][ T9454] netlink: 'syz.3.973': attribute type 11 has an invalid length.
[  168.834400][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'.
[  169.026883][ T9461] netlink: 68 bytes leftover after parsing attributes in process `syz.0.975'.
[  169.079138][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'.
[  169.148971][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'.
[  169.162421][ T9470] netlink: 14 bytes leftover after parsing attributes in process `syz.4.979'.
[  169.312606][ T9479] openvswitch: netlink: ERSPAN option length err (len 284, max 255).
[  169.456446][ T9493] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  169.469921][ T9493] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  169.756313][ T9518] netlink: 9 bytes leftover after parsing attributes in process `syz.2.991'.
[  169.773025][ T9518] netlink: 9 bytes leftover after parsing attributes in process `syz.2.991'.
[  169.815796][ T9515] bridge_slave_1: left allmulticast mode
[  169.824553][ T9515] bridge_slave_1: left promiscuous mode
[  169.831443][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.865715][ T9515] �x9�: left allmulticast mode
[  169.876555][ T9515] �x9�: left promiscuous mode
[  169.883268][ T9515] bridge0: port 1(
1�x9�) entered disabled state
[  169.980877][ T9519] netlink: 288 bytes leftover after parsing attributes in process `syz.1.990'.
[  170.113530][ T9532] validate_nla: 30 callbacks suppressed
[  170.113548][ T9532] netlink: 'syz.3.995': attribute type 12 has an invalid length.
[  170.332528][ T9545] syzkaller1: entered promiscuous mode
[  170.360821][ T9545] syzkaller1: entered allmulticast mode
[  170.419420][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'.
[  170.563776][ T9547] 8021q: adding VLAN 0 to HW filter on device macsec3
[  170.585553][ T6622] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  170.734337][ T9560] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  170.782540][ T9560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.839087][ T9564] IPVS: Error connecting to the multicast addr
[  170.890478][ T9568] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  170.896660][ T9569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.932214][ T9569] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  170.963540][ T9568] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  170.966808][ T9569] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  171.048927][ T9578] xt_addrtype: ipv6 does not support BROADCAST matching
[  171.111431][ T9580] geneve0: Caught tx_queue_len zero misconfig
[  171.148278][ T9582] syzkaller1: entered promiscuous mode
[  171.280405][ T9594] netlink: 'syz.3.1016': attribute type 11 has an invalid length.
[  171.319440][ T9596] bond0: (slave dummy0): Releasing backup interface
[  171.498018][ T9611] openvswitch: netlink: Flow actions attr not present in new flow.
[  171.970793][ T9638] sctp: [Deprecated]: syz.1.1026 (pid 9638) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.970793][ T9638] Use struct sctp_sack_info instead
[  172.348614][ T9663] x_tables: unsorted underflow at hook 2
[  172.662025][ T9693] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  172.843167][ T9704] netlink: 'syz.3.1047': attribute type 2 has an invalid length.
[  173.024245][ T9690] team0: Device is already in use.
[  173.348522][ T9734] netlink: 'syz.1.1054': attribute type 12 has an invalid length.
[  173.853186][ T9775] __nla_validate_parse: 14 callbacks suppressed
[  173.853205][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1066'.
[  173.872543][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.955952][ T9780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1068'.
[  174.150351][ T9793] xfrm1: entered allmulticast mode
[  174.345426][ T9804] netlink: 'syz.2.1078': attribute type 1 has an invalid length.
[  174.468322][ T9804] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.565256][ T9819] syzkaller0: entered promiscuous mode
[  174.582013][ T9819] syzkaller0: entered allmulticast mode
[  174.676147][ T9828] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1083'.
[  174.872989][ T9835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'.
[  175.125349][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1095'.
[  175.136874][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  175.142420][ T9853] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1093'.
[  175.185318][ T9853] netlink: 'syz.4.1093': attribute type 1 has an invalid length.
[  175.326022][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'.
[  175.348921][ T9866] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1096'.
[  175.377107][ T9860] syzkaller0: entered promiscuous mode
[  175.382785][ T9860] syzkaller0: entered allmulticast mode
[  175.448118][ T9867] openvswitch: netlink: Missing key (keys=40, expected=100)
[  177.075175][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1098'.
[  177.088113][ T9875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.098939][ T9878] tun0: tun_chr_ioctl cmd 1074025675
[  177.104291][ T9878] tun0: persist enabled
[  177.109338][ T9879] syzkaller0: entered promiscuous mode
[  177.114833][ T9879] syzkaller0: entered allmulticast mode
[  177.206777][ T9879] tipc: Resetting bearer <eth:syzkaller0>
[  177.259084][ T9879] tipc: Disabling bearer <eth:syzkaller0>
[  177.612939][ T9905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.758695][ T9919] netlink: 'syz.2.1112': attribute type 5 has an invalid length.
[  177.768709][ T9919] netlink: 'syz.2.1112': attribute type 6 has an invalid length.
[  177.786665][   T29] audit: type=1804 audit(1782948060.006:2): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1112" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=959 res=1 errno=0
[  177.828064][   T29] audit: type=1800 audit(1782948060.006:3): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="cgroup.controllers" dev="tmpfs" ino=959 res=0 errno=0
[  178.143885][ T9935] netlink: 'syz.2.1118': attribute type 6 has an invalid length.
[  178.199558][ T3317] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.199701][ T9935] netlink: 'syz.2.1118': attribute type 6 has an invalid length.
[  178.233038][ T3317] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.249658][ T3317] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.259226][ T3317] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.339974][ T9946] IPv6: NLM_F_CREATE should be specified when creating new route
[  178.878573][ T9987] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  178.976659][ T9997] __nla_validate_parse: 10 callbacks suppressed
[  178.982248][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'.
[  179.026632][ T9996] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1135'.
[  179.044760][ T9987] ip6gretap2: entered promiscuous mode
[  179.050573][ T9987] ip6gretap2: entered allmulticast mode
[  179.066599][ T9987] bond4: (slave ip6gretap2): making interface the new active one
[  179.082910][ T9987] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  179.093089][ T9987] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  179.102001][ T9987] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  179.452346][T10017] netlink: 'syz.2.1140': attribute type 1 has an invalid length.
[  179.553625][T10017] bond5: entered promiscuous mode
[  179.561003][T10017] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.581671][T10025] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.595169][T10025] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  179.605996][T10025] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  179.622280][T10027] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1142'.
[  179.659994][T10021] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.673560][T10021] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  180.170765][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'.
[  180.754571][T10087] netlink: 'syz.2.1157': attribute type 26 has an invalid length.
[  180.765871][T10087] netlink: 'syz.2.1157': attribute type 26 has an invalid length.
[  181.400627][T10096] infiniband syz0: set down
[  181.405495][T10096] infiniband syz0: added ipvlan0
[  181.449058][T10096] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  181.468624][T10130] block nbd1: not configured, cannot reconfigure
[  181.478191][T10096] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  181.495607][T10096] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  181.557345][T10096] RDS/IB: syz0: added
[  181.567404][T10096] smc: adding ib device syz0 with port count 1
[  181.573842][T10096] smc:    ib device syz0 port 1 has no pnetid
[  181.799761][T10135] netlink: 'syz.1.1174': attribute type 49 has an invalid length.
[  182.009959][T10135] ip6gretap0: entered promiscuous mode
[  182.025720][T10135] ip6gretap0: entered allmulticast mode
[  182.078139][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'.
[  182.079664][   T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.103236][   T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.114722][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1176'.
[  182.142747][T10148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  182.159942][T10148] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  182.169117][T10148] gretap1: entered promiscuous mode
[  182.174509][T10148] gretap1: entered allmulticast mode
[  182.343430][T10159] openvswitch: netlink: IPv4 tunnel dst address is zero
[  182.360011][T10159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.430060][T10159] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.491289][T10159] bond0: (slave bond3): Enslaving as an active interface with a down link
[  182.873245][T10186] syzkaller0: entered promiscuous mode
[  182.892114][T10186] syzkaller0: entered allmulticast mode
[  182.992830][T10194] netlink: 'syz.1.1187': attribute type 4 has an invalid length.
[  183.349246][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.359062][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.451156][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'.
[  183.533987][T10214] sctp: [Deprecated]: syz.2.1191 (pid 10214) Use of int in max_burst socket option deprecated.
[  183.533987][T10214] Use struct sctp_assoc_value instead
[  183.715911][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  184.038039][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'.
[  184.160578][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.170859][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.179016][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.188243][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.200252][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.209331][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.493625][T10251] sctp: [Deprecated]: syz.3.1203 (pid 10251) Use of int in max_burst socket option.
[  184.493625][T10251] Use struct sctp_assoc_value instead
[  184.537147][T10251] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1203'.
[  184.573287][T10251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1203'.
[  184.814808][T10264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1209'.
[  184.846192][T10264] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1209'.
[  184.878445][T10264] netlink: 'syz.3.1209': attribute type 5 has an invalid length.
[  184.890020][T10266] IPv6: sit1: Disabled Multicast RS
[  184.910128][T10264] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1209'.
[  184.988025][T10277] netlink: 'syz.4.1212': attribute type 49 has an invalid length.
[  185.610408][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'.
[  185.710017][T10307] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  185.813174][T10310] hsr_slave_1 (unregistering): left promiscuous mode
[  185.862720][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'.
[  186.012568][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'.
[  186.084176][T10339] netlink: 'syz.1.1229': attribute type 1 has an invalid length.
[  186.149577][T10339] 8021q: adding VLAN 0 to HW filter on device bond5
[  186.207678][T10339] bond5: (slave syz_tun): Enslaving as a backup interface with an up link
[  186.234703][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'.
[  186.444566][T10355] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.960081][T10390] syzkaller1: entered promiscuous mode
[  186.986550][T10390] syzkaller1: entered allmulticast mode
[  187.041460][T10397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.056178][T10397] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  187.069246][T10397] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  187.219726][T10405] syzkaller0: entered promiscuous mode
[  187.232750][T10405] syzkaller0: entered allmulticast mode
[  187.286087][T10405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.338695][T10404] tipc: Resetting bearer <eth:syzkaller0>
[  187.348308][ T6622] net_ratelimit: 13 callbacks suppressed
[  187.348326][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.351659][T10410] ieee802154 phy1 wpan1: encryption failed: -90
[  187.412425][T10404] tipc: Disabling bearer <eth:syzkaller0>
[  187.550256][T10416] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  187.609911][T10416] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.661018][T10416] bond2: (slave ip6gretap0): making interface the new active one
[  187.674972][T10416] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link
[  187.695389][T10422] netlink: 'syz.1.1258': attribute type 75 has an invalid length.
[  187.948847][T10432] vlan2: entered allmulticast mode
[  187.967839][T10432] bond0: entered allmulticast mode
[  187.987168][T10432] bond_slave_0: entered allmulticast mode
[  188.004367][T10432] bond_slave_1: entered allmulticast mode
[  188.016607][T10432] bond3: entered allmulticast mode
[  188.158610][ T6622] tipc: Node number set to 1667298450
[  188.221995][T10447] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  188.236990][T10447] bond4 (unregistering): Released all slaves
[  188.390237][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.616679][T10466] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.752548][T10476] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.951911][T10492] xt_nfacct: accounting object `syz1' does not exist
[  189.026845][T10496] netlink: 'syz.0.1281': attribute type 1 has an invalid length.
[  189.042505][T10493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.092844][T10496] 8021q: adding VLAN 0 to HW filter on device bond3
[  189.122466][T10493] tipc: Disabling bearer <eth:syzkaller0>
[  189.162974][T10500] __nla_validate_parse: 45 callbacks suppressed
[  189.162993][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1281'.
[  189.214015][T10496] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  189.292313][T10506] syzkaller1: entered promiscuous mode
[  189.300449][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.314533][T10506] syzkaller1: entered allmulticast mode
[  189.394333][T10511] pimreg: entered allmulticast mode
[  189.433379][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.539775][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'.
[  189.748829][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.758248][ T1026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.766415][ T6612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.774551][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.785274][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.798018][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.844589][T10539] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1293'.
[  189.911423][T10546] netlink: 'syz.1.1294': attribute type 2 has an invalid length.
[  190.074047][T10552] syzkaller0: entered promiscuous mode
[  190.079777][T10552] syzkaller0: entered allmulticast mode
[  190.221929][T10569] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  190.276459][T10566] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  190.301962][T10566] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  190.549801][T10588] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  190.574035][T10588] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  190.590009][T10588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.742023][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'.
[  190.806223][T10606] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  190.839530][T10606] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  190.953585][T10615] netlink: 'syz.1.1316': attribute type 8 has an invalid length.
[  190.979989][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  190.985741][T10618] syz.4.1318: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  191.009748][T10615] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.017300][T10618] CPU: 0 UID: 0 PID: 10618 Comm: syz.4.1318 Not tainted syzkaller #0 PREEMPT(full) 
[  191.017319][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  191.017334][T10618] Call Trace:
[  191.017340][T10618]  <TASK>
[  191.017346][T10618]  dump_stack_lvl+0xe8/0x150
[  191.017368][T10618]  warn_alloc+0x24c/0x270
[  191.017390][T10618]  ? stack_depot_save_flags+0x33/0x800
[  191.017419][T10618]  ? __pfx_warn_alloc+0x10/0x10
[  191.017439][T10618]  ? kasan_save_track+0x3e/0x80
[  191.017451][T10618]  ? __kasan_kmalloc+0x93/0xb0
[  191.017465][T10618]  ? xsk_setsockopt+0x52a/0x960
[  191.017483][T10618]  ? do_sock_setsockopt+0x17c/0x1b0
[  191.017496][T10618]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  191.017508][T10618]  ? do_syscall_64+0x174/0x580
[  191.017520][T10618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.017541][T10618]  __vmalloc_node_range_noprof+0x12c/0x1730
[  191.017582][T10618]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  191.017604][T10618]  ? __kasan_kmalloc+0x93/0xb0
[  191.017619][T10618]  ? __kmalloc_cache_noprof+0x32d/0x660
[  191.017639][T10618]  ? __kmalloc_cache_noprof+0x150/0x660
[  191.017661][T10618]  vmalloc_user_noprof+0xad/0xe0
[  191.017682][T10618]  ? xskq_create+0xbf/0x170
[  191.017701][T10618]  xskq_create+0xbf/0x170
[  191.017721][T10618]  xsk_init_queue+0x8a/0xe0
[  191.017741][T10618]  xsk_setsockopt+0x52a/0x960
[  191.017759][T10618]  ? __fget_files+0x2a/0x420
[  191.017793][T10618]  ? __pfx_xsk_setsockopt+0x10/0x10
[  191.017811][T10618]  ? __pfx_aa_sk_perm+0x10/0x10
[  191.017829][T10618]  ? aa_sock_opt_perm+0xff/0x1a0
[  191.017849][T10618]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  191.017867][T10618]  ? __pfx_xsk_setsockopt+0x10/0x10
[  191.017886][T10618]  do_sock_setsockopt+0x17c/0x1b0
[  191.017905][T10618]  __x64_sys_setsockopt+0x13d/0x1b0
[  191.017922][T10618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.017939][T10618]  do_syscall_64+0x174/0x580
[  191.017952][T10618]  ? trace_irq_disable+0x3b/0x140
[  191.017966][T10618]  ? clear_bhb_loop+0x40/0x90
[  191.017984][T10618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.017998][T10618] RIP: 0033:0x7f956279de59
[  191.018013][T10618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.018025][T10618] RSP: 002b:00007f9563682028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  191.018040][T10618] RAX: ffffffffffffffda RBX: 00007f9562a25fa0 RCX: 00007f956279de59
[  191.018050][T10618] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  191.018057][T10618] RBP: 00007f9562833e6f R08: 0000000000000004 R09: 0000000000000000
[  191.018065][T10618] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.018073][T10618] R13: 00007f9562a26038 R14: 00007f9562a25fa0 R15: 00007ffedbeb9668
[  191.018094][T10618]  </TASK>
[  191.018107][T10618] Mem-Info:
[  191.018121][T10618] active_anon:5772 inactive_anon:0 isolated_anon:0
[  191.018121][T10618]  active_file:2 inactive_file:43251 isolated_file:0
[  191.018121][T10618]  unevictable:768 dirty:64 writeback:0
[  191.018121][T10618]  slab_reclaimable:10960 slab_unreclaimable:102782
[  191.018121][T10618]  mapped:29287 shmem:1292 pagetables:1359
[  191.018121][T10618]  sec_pagetables:0 bounce:0
[  191.018121][T10618]  kernel_misc_reclaimable:0
[  191.018121][T10618]  free:1320717 free_pcp:9698 free_cma:0
[  191.018161][T10618] Node 0 active_anon:23088kB inactive_anon:0kB active_file:8kB inactive_file:172804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117148kB dirty:252kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13220kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  191.018204][T10618] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  191.018249][T10618] Node 0 
[  191.030048][T10615] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.043204][T10618] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  191.333912][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'.
[  191.356040][T10618] lowmem_reserve[]: 0 2491 2492 2492 2492
[  191.473462][T10618] Node 0 DMA32 free:1319148kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23188kB inactive_anon:0kB active_file:8kB inactive_file:172804kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2551436kB mlocked:0kB bounce:0kB free_pcp:38132kB local_pcp:20752kB free_cma:0kB
[  191.510499][T10618] lowmem_reserve[]: 0 0 0 0 0
[  191.520002][T10618] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  191.597392][T10618] lowmem_reserve[]: 0 0 0 0 0
[  191.604026][T10618] Node 1 Normal free:3948060kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  191.693236][T10618] lowmem_reserve[]: 0 0 0 0 0
[  191.699021][T10618] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  191.712501][T10618] Node 0 DMA32: 582*4kB (UM) 884*8kB (UME) 731*16kB (UME) 381*32kB (UME) 47*64kB (UM) 81*128kB (UM) 29*256kB (U) 13*512kB (UM) 13*1024kB (UME) 4*2048kB (ME) 302*4096kB (UM) = 1319240kB
[  191.750418][T10618] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  191.828288][T10618] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 5*16kB (UM) 8*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3948060kB
[  191.837342][T10645] ipt_REJECT: ECHOREPLY no longer supported.
[  191.882803][T10618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.919588][T10618] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.923815][T10650] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1326'.
[  191.975786][T10618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  192.015790][T10618] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.045952][T10618] 44541 total pagecache pages
[  192.054527][T10618] 0 pages in swap cache
[  192.081102][T10618] Free swap  = 124996kB
[  192.092772][T10618] Total swap = 124996kB
[  192.101927][T10618] 2097051 pages RAM
[  192.112168][T10661] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1331'.
[  192.115861][T10618] 0 pages HighMem/MovableOnly
[  192.139915][T10618] 427421 pages reserved
[  192.154328][T10618] 0 pages cma reserved
[  192.183674][T10661] bond4 (unregistering): Released all slaves
[  192.599359][T10687] bond0: Error: Cannot enslave bond to itself.
[  192.670445][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'.
[  192.746982][T10695] macsec4: entered allmulticast mode
[  192.752651][T10695] bond0: entered allmulticast mode
[  192.758329][T10695] bond_slave_0: entered allmulticast mode
[  192.765018][T10695] bond_slave_1: entered allmulticast mode
[  192.772238][T10695] bond_slave_0: entered promiscuous mode
[  192.778025][T10695] bond_slave_1: entered promiscuous mode
[  192.785936][T10695] 8021q: adding VLAN 0 to HW filter on device macsec4
[  192.798242][T10695] bond0: left allmulticast mode
[  192.803245][T10695] bond_slave_0: left allmulticast mode
[  192.810065][T10695] bond_slave_1: left allmulticast mode
[  192.869197][   T24] net_ratelimit: 7 callbacks suppressed
[  192.869215][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.871402][ T6612] bond_slave_0: left promiscuous mode
[  192.888404][ T6612] bond_slave_1: left promiscuous mode
[  192.895408][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.922136][T10703] syzkaller0: entered promiscuous mode
[  192.955367][T10703] syzkaller0: entered allmulticast mode
[  192.960696][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'.
[  193.018023][T10714] veth0: entered promiscuous mode
[  193.084556][T10710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.106342][T10712] veth0: left promiscuous mode
[  193.176197][T10721] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  193.231233][T10726] netlink: 'syz.3.1351': attribute type 1 has an invalid length.
[  193.246830][T10726] netlink: 'syz.3.1351': attribute type 11 has an invalid length.
[  193.475591][T10742] bond1: option mode: unable to set because the bond device has slaves
[  193.488074][T10743] bond1: option mode: unable to set because the bond device has slaves
[  193.507189][T10742] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  193.719367][T10757] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  193.815170][T10745] xt_hashlimit: overflow, try lower: 3/0
[  193.885653][T10766] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  193.911115][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.972175][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.075238][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.230513][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.603825][T10810] __nla_validate_parse: 3 callbacks suppressed
[  194.603845][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'.
[  194.634416][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'.
[  194.653893][T10813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1374'.
[  194.690078][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'.
[  194.864348][T10807] netlink: 'syz.4.1372': attribute type 1 has an invalid length.
[  194.947620][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.349742][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.423359][T10853] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.511227][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.534773][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[  195.547837][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[  195.554963][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[  195.562192][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[  195.570261][   T25] block nbd0: Dead connection, failed to find a fallback
[  195.579215][   T25] block nbd0: shutting down sockets
[  195.586385][   T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.596966][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  195.608562][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.618291][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  195.628242][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.637449][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  195.645203][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.654371][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  195.665690][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  195.678146][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  195.688040][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  195.695879][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  195.703890][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  195.714168][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  195.723679][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  195.731572][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  195.739796][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  195.749976][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.761639][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.765811][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'.
[  195.770987][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.783845][T10866] netlink: 'syz.2.1382': attribute type 11 has an invalid length.
[  195.791594][ T5625] ldm_validate_partition_table(): Disk read failed.
[  195.819068][ T5625] Dev nbd0: unable to read RDB block 0
[  195.828226][ T5625]  nbd0: unable to read partition table
[  195.867149][T10871] syzkaller0: entered promiscuous mode
[  195.867178][T10861] block nbd1: Unsupported socket: should be TCP or UNIX.
[  195.873240][T10871] syzkaller0: entered allmulticast mode
[  195.874382][T10866] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1382'.
[  195.896416][ T5625] ldm_validate_partition_table(): Disk read failed.
[  195.923181][ T5625] Dev nbd0: unable to read RDB block 0
[  195.947023][ T5625]  nbd0: unable to read partition table
[  196.161631][T10882] xt_time: invalid argument - start or stop time greater than 23:59:59
[  196.194155][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  196.691812][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'.
[  196.774542][T10911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1394'.
[  197.183357][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'.
[  197.898953][T10987] ipt_REJECT: TCP_RESET invalid for non-tcp
[  198.059904][T10997] netlink: 'syz.3.1418': attribute type 1 has an invalid length.
[  198.621134][T11033] netlink: 'syz.1.1429': attribute type 1 has an invalid length.
[  198.629235][ T6612] net_ratelimit: 9 callbacks suppressed
[  198.629251][ T6612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.710174][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.119593][T11070] netlink: 'syz.3.1437': attribute type 4 has an invalid length.
[  199.129655][T11073] atomic_op ffff8880550a1198 conn xmit_atomic 0000000000000000
[  199.139610][T11073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.320766][T11080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.341599][ T6612] lo speed is unknown, defaulting to 1000
[  199.360730][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.680149][T11106] xt_policy: output policy not valid in PREROUTING and INPUT
[  199.753241][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.763998][T11111] xt_CT: You must specify a L4 protocol and not use inversions on it
[  200.233766][T11137] __nla_validate_parse: 13 callbacks suppressed
[  200.233785][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1459'.
[  200.287193][T11139] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  200.420367][T11152] IPv6: sit2: Disabled Multicast RS
[  200.436315][   T29] audit: type=1804 audit(1782948082.636:4): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1462" name="/newroot/315/cgroup.controllers" dev="tmpfs" ino=1614 res=1 errno=0
[  200.468805][   T29] audit: type=1800 audit(1782948082.636:5): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1462" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0
[  200.470406][T11152] sit2: entered allmulticast mode
[  200.495268][   T29] audit: type=1800 audit(1782948082.636:6): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1462" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0
[  200.629167][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.641072][T11165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1467'.
[  200.666759][T11168] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  200.788604][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.863149][T11181] x_tables: duplicate underflow at hook 3
[  200.983097][T11185] netlink: 'syz.1.1474': attribute type 12 has an invalid length.
[  201.040733][T11185] bond6: option primary_reselect: invalid value (255)
[  201.059097][T11185] bond6 (unregistering): Released all slaves
[  201.081845][T11191] netlink: 'syz.0.1475': attribute type 1 has an invalid length.
[  201.090094][T11191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1475'.
[  201.149679][T11190] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.239143][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.254856][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.264547][T11195] raw_sendmsg: syz.1.1478 forgot to set AF_INET. Fix it!
[  201.278821][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.289936][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.293934][T11190] 0�: left allmulticast mode
[  201.303391][T11190] hsr_slave_0: left allmulticast mode
[  201.311484][T11190] hsr_slave_1: left allmulticast mode
[  201.365680][T11190] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  201.428084][T11190] gretap1: left promiscuous mode
[  201.433206][T11190] gretap1: left allmulticast mode
[  201.445651][ T1019] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.472983][ T1019] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.485363][ T1019] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.496424][ T1019] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.506089][ T1019] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.515657][ T1019] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.533131][ T1019] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.554155][ T1019] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.676637][T11215] 8021q: VLANs not supported on ip6_vti0
[  201.695469][T11214] 8021q: VLANs not supported on ip6_vti0
[  201.711955][T11213] syzkaller1: entered promiscuous mode
[  201.720525][T11213] syzkaller1: entered allmulticast mode
[  201.765498][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'.
[  201.830754][T11222] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  202.025972][T11233] pimreg: entered allmulticast mode
[  202.074919][T11235] netlink: 'syz.0.1491': attribute type 2 has an invalid length.
[  202.471028][T11267] xt_hashlimit: size too large, truncated to 1048576
[  202.548492][T11274] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1501'.
[  202.607964][T11274] 0�X��D��: renamed from gretap0
[  202.636356][T11274] 0�X��D��: entered allmulticast mode
[  202.894507][T11289] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  203.308465][T11314] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1517'.
[  203.596197][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'.
[  203.692062][T11330] bond2: (slave syz_tun): Removing an active aggregator
[  203.726777][T11330] bond2: (slave syz_tun): Releasing backup interface
[  203.883813][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'.
[  203.908076][ T6622] net_ratelimit: 4 callbacks suppressed
[  203.908096][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.017111][T11339] lo speed is unknown, defaulting to 1000
[  204.227209][T11351] syzkaller0: entered promiscuous mode
[  204.243647][T11351] syzkaller0: entered allmulticast mode
[  204.282934][T11351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1528'.
[  204.308267][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.948682][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.980931][T11377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.748693][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.761566][T11399] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  205.991953][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.156509][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'.
[  206.392919][T11432] veth0: entered promiscuous mode
[  206.462906][T11430] veth0: left promiscuous mode
[  206.663702][T11441] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 5, id = 0
[  207.026182][T11454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.029233][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.092884][T11457] netlink: 'syz.1.1552': attribute type 23 has an invalid length.
[  207.115789][T11453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.174756][T11464] netlink: 'syz.3.1553': attribute type 1 has an invalid length.
[  207.232738][T11464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1553'.
[  207.307911][T11464] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR
[  207.354191][ T6612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.463415][T11476] set match dimension is over the limit!
[  207.622623][T11479] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1557'.
[  207.668153][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.903405][T11479] bond4 (unregistering): Released all slaves
[  208.113542][T11500] netlink: 'syz.3.1564': attribute type 1 has an invalid length.
[  208.292734][T11512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'.
[  208.302307][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'.
[  208.405503][T11515] syzkaller1: entered promiscuous mode
[  208.419818][T11515] syzkaller1: entered allmulticast mode
[  208.563571][T11522] netlink: 'syz.3.1569': attribute type 4 has an invalid length.
[  208.652578][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'.
[  208.732023][T11527] 8021q: adding VLAN 0 to HW filter on device macsec1
[  209.116957][ T6625] net_ratelimit: 2 callbacks suppressed
[  209.116973][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.183476][T11550] bridge3: entered promiscuous mode
[  209.207599][T11550] bridge3: entered allmulticast mode
[  209.259574][T11550] team0: Port device bridge3 added
[  209.292780][T11556] bridge0: port 3(team0) entered blocking state
[  209.356376][T11556] bridge0: port 3(team0) entered disabled state
[  209.372154][T11556] team0: entered allmulticast mode
[  209.378654][T11566] netlink: 'syz.4.1578': attribute type 1 has an invalid length.
[  209.400840][T11570] netlink: 'syz.0.1579': attribute type 1 has an invalid length.
[  209.448377][T11570] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1579'.
[  209.468651][T11556] team_slave_1: entered allmulticast mode
[  209.558843][T11556] team0: entered promiscuous mode
[  209.579902][T11556] team_slave_1: entered promiscuous mode
[  209.589185][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.605275][T11556] bridge0: port 3(team0) entered blocking state
[  209.612872][T11556] bridge0: port 3(team0) entered listening state
[  209.645272][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'.
[  209.718883][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'.
[  210.066999][T11597] syzkaller0: entered promiscuous mode
[  210.080566][T11597] syzkaller0: entered allmulticast mode
[  210.086924][T11599] netlink: 'syz.2.1586': attribute type 12 has an invalid length.
[  210.130382][T11601] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1587'.
[  210.150276][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.202966][T11605] tap0: tun_chr_ioctl cmd 1074025672
[  210.227841][T11605] tap0: ignored: set checksum disabled
[  210.351493][T11610] netlink: 'syz.4.1591': attribute type 16 has an invalid length.
[  210.372772][T11610] veth0_macvtap: entered allmulticast mode
[  210.408534][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.514123][T11622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  210.697666][T11638] netlink: 'syz.1.1598': attribute type 1 has an invalid length.
[  210.719518][T11638] netlink: 'syz.1.1598': attribute type 2 has an invalid length.
[  210.892839][T11649] x_tables: unsorted underflow at hook 3
[  211.355127][T11679] __nla_validate_parse: 9 callbacks suppressed
[  211.355144][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1611'.
[  211.405010][T11677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.415801][T11677] syzkaller0: entered promiscuous mode
[  211.422286][T11677] syzkaller0: entered allmulticast mode
[  211.431136][T11677] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  211.475465][T11677] tipc: Resetting bearer <eth:syzkaller0>
[  211.539833][T11692] gtp1: entered promiscuous mode
[  211.558765][T11692] gtp1: entered allmulticast mode
[  211.847704][T11712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1617'.
[  211.993438][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  212.014201][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  212.042127][T11675] tipc: Disabling bearer <eth:syzkaller0>
[  212.201548][T11730] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  212.218878][T11730] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  212.234122][T11732] Bluetooth: hci1: too big key_count value 32778
[  212.322907][T11737] sctp: [Deprecated]: syz.2.1626 (pid 11737) Use of int in max_burst socket option.
[  212.322907][T11737] Use struct sctp_assoc_value instead
[  212.369944][   T29] audit: type=1107 audit(1782948094.586:7): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  212.464243][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'.
[  212.492758][T11748] x_tables: ip_tables: icmp match: only valid for protocol 1
[  212.505839][T11748] x_tables: duplicate underflow at hook 3
[  212.783503][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'.
[  212.807578][T11760] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1635'.
[  212.872077][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'.
[  212.905177][T11764] nbd: must specify at least one socket
[  212.974741][T11773] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  213.239542][T11788] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  213.264547][T11788] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  213.386105][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'.
[  213.445906][T11806] validate_nla: 2 callbacks suppressed
[  213.445925][T11806] netlink: 'syz.4.1648': attribute type 1 has an invalid length.
[  213.485345][T11797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'.
[  213.515924][T11806] netlink: 'syz.4.1648': attribute type 2 has an invalid length.
[  213.754801][T11822] xt_hashlimit: size too large, truncated to 1048576
[  213.824833][T11830] netlink: 'syz.3.1659': attribute type 8 has an invalid length.
[  213.868540][T11831] netlink: 'syz.2.1658': attribute type 4 has an invalid length.
[  213.872146][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'.
[  213.899414][T11825] xt_hashlimit: size too large, truncated to 1048576
[  214.255432][T11858] ������: renamed from vlan1 (while UP)
[  214.311710][T11854] tun0: tun_chr_ioctl cmd 1074025675
[  214.350650][T11854] tun0: persist disabled
[  214.673525][T11884] netlink: 'syz.1.1673': attribute type 7 has an invalid length.
[  214.712109][T11884] netlink: 'syz.1.1673': attribute type 8 has an invalid length.
[  214.748926][T11891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.968039][T11897] SET target dimension over the limit!
[  215.194353][T11916] syzkaller0: entered promiscuous mode
[  215.201484][T11916] syzkaller0: entered allmulticast mode
[  215.250768][T11923] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  215.725236][T11942] netlink: 'syz.1.1691': attribute type 1 has an invalid length.
[  217.279449][T11942] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  217.481323][T11950] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.498521][T11950] 8021q: adding VLAN 0 to HW filter on device team0
[  217.511275][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.562797][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.591154][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.606737][T11950] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.618887][T11950] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.634583][T11950] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  217.666786][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.673984][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.711240][T11956] netlink: 'syz.4.1695': attribute type 2 has an invalid length.
[  217.720818][T11959] __nla_validate_parse: 38 callbacks suppressed
[  217.720837][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'.
[  217.738809][T11959] ip6gretap0: entered promiscuous mode
[  217.964242][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1703'.
[  218.062778][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'.
[  218.087849][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'.
[  218.133823][T11989] team1: entered promiscuous mode
[  218.139930][T11989] team1: entered allmulticast mode
[  218.345035][T12006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1709'.
[  218.543869][T12023] netlink: 'syz.4.1713': attribute type 1 has an invalid length.
[  220.572312][T12032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.798145][T12056] mac80211_hwsim hwsim9 �
: renamed from wlan1
[  220.805494][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.843602][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.875157][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.903944][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.940785][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  221.190921][T12084] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  221.463351][T12115] netlink: 'syz.2.1732': attribute type 24 has an invalid length.
[  221.484245][T12104] xt_CT: No such helper "snmp"
[  221.601952][T12121] netlink: 'syz.3.1737': attribute type 9 has an invalid length.
[  222.384491][T12170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.415399][T12172] Set syz1 is full, maxelem 14 reached
[  222.811289][T12202] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  222.820173][T12199] __nla_validate_parse: 72 callbacks suppressed
[  222.820199][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'.
[  223.074925][T12215] veth0: entered promiscuous mode
[  223.151194][T12215] veth0: left promiscuous mode
[  223.192109][T12222] netlink: 'syz.2.1764': attribute type 21 has an invalid length.
[  223.204254][T12222] netlink: 'syz.2.1764': attribute type 1 has an invalid length.
[  223.369001][T12235] netlink: 'syz.0.1768': attribute type 1 has an invalid length.
[  223.392598][T12235] netlink: 'syz.0.1768': attribute type 2 has an invalid length.
[  223.434079][T12242] xt_hashlimit: size too large, truncated to 1048576
[  223.523978][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'.
[  223.645317][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'.
[  223.788301][T12264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'.
[  223.856845][T12269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'.
[  224.002268][T12272] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1776'.
[  224.032634][T12272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1776'.
[  224.053893][T12276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.081807][T12276] batadv_slave_1: entered promiscuous mode
[  224.368099][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'.
[  224.503824][T12310] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  224.648306][T12314] gretap0: entered promiscuous mode
[  224.660120][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'.
[  224.671938][T12314] vlan3: entered promiscuous mode
[  224.729284][T12318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1790'.
[  224.953296][    C1] bridge0: port 3(team0) entered learning state
[  225.355477][T12356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.563252][T12373] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20004
[  225.579044][T12373] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20002
[  225.592853][T12367] x_tables: duplicate underflow at hook 1
[  225.801508][T12388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.216228][T12412] netlink: 'syz.0.1820': attribute type 14 has an invalid length.
[  226.321780][T12416] xt_ipcomp: unknown flags 1D
[  226.667176][T12424] veth0_macvtap: left promiscuous mode
[  226.769386][T12432] netlink: 'syz.4.1826': attribute type 2 has an invalid length.
[  226.862431][T12432] : entered promiscuous mode
[  227.506647][T12476] netlink: 'syz.4.1839': attribute type 1 has an invalid length.
[  227.701815][T12476] 8021q: adding VLAN 0 to HW filter on device bond6
[  227.769970][T12478] bond6: (slave veth7): Enslaving as an active interface with a down link
[  227.784748][T12480] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  227.840088][T12483] 8021q: adding VLAN 0 to HW filter on device batadv1
[  227.883162][T12483] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  228.231825][T12517] netlink: 'syz.4.1847': attribute type 5 has an invalid length.
[  228.239461][T12514] tipc: Resetting bearer <ib:gretap0>
[  228.516734][T12514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.543528][T12514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.775475][ T1026] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  228.810072][ T1026] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.891781][T12551] __nla_validate_parse: 11 callbacks suppressed
[  228.891800][T12551] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1855'.
[  228.995135][ T1026] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.006985][ T1026] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.018317][ T1026] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.028254][ T1026] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.054477][T12560] netlink: 'syz.3.1856': attribute type 1 has an invalid length.
[  229.076742][T12560] netlink: 'syz.3.1856': attribute type 1 has an invalid length.
[  229.103828][T12560] netlink: 'syz.3.1856': attribute type 1 has an invalid length.
[  229.120415][T12560] netlink: 'syz.3.1856': attribute type 2 has an invalid length.
[  229.136823][T12560] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1856'.
[  229.175666][ T1026] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.202356][ T1026] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.234681][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  229.269406][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'.
[  229.269406][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'.
[  229.361699][T12576] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  229.543765][T12592] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  229.752158][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'.
[  229.772050][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1872'.
[  229.787563][T12610] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1871'.
[  229.798406][T12611] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1872'.
[  229.963019][T12611] veth9: entered promiscuous mode
[  230.349799][T12638] netlink: 'syz.2.1880': attribute type 83 has an invalid length.
[  230.379739][T12640] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1882'.
[  230.595520][T12655] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  230.631015][T12663] ������: renamed from vlan1
[  230.669955][T12655] macvlan2: entered promiscuous mode
[  230.690839][T12655] macvlan2: entered allmulticast mode
[  230.715236][T12655] bond6: (slave macvlan2): Error -98 calling set_mac_address
[  231.291071][T12694] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  231.343361][T12694] bond7 (unregistering): Released all slaves
[  231.396979][T12703] ip6tnl0: Caught tx_queue_len zero misconfig
[  231.413419][T12702] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  231.421474][T12702] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  231.440293][T12706] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.459284][T12702] netlink: 'syz.1.1896': attribute type 3 has an invalid length.
[  231.632347][T12713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.585104][T12779] netlink: 'syz.2.1915': attribute type 1 has an invalid length.
[  232.598829][T12776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.698789][T12779] macvtap1: entered allmulticast mode
[  232.752448][T12786] macvtap2: entered allmulticast mode
[  232.836359][T12794] ipt_ECN: cannot use operation on non-tcp rule
[  232.854487][T12779] bond7: (slave bridge6): making interface the new active one
[  232.869260][T12779] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  232.906534][   T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.944222][   T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.961773][   T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.976771][   T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.095098][T12815] IPv6: NLM_F_CREATE should be specified when creating new route
[  233.098883][T12818] IPv6: NLM_F_CREATE should be specified when creating new route
[  233.525669][T12838] xt_nat: multiple ranges no longer supported
[  233.653302][T12846] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  233.676882][T12846] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  233.934187][T12866] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  233.961646][T12866] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  233.994201][T12869] xt_CT: No such helper "snmp"
[  234.128500][T12884] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  234.139465][T12887] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  234.201120][T12884] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.223458][T12894] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  234.404314][T12906] netlink: 'syz.0.1947': attribute type 12 has an invalid length.
[  234.453173][T12906] netlink: 'syz.0.1947': attribute type 29 has an invalid length.
[  234.509156][T12906] __nla_validate_parse: 17 callbacks suppressed
[  234.509176][T12906] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1947'.
[  234.542802][T12906] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1947'.
[  234.685605][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'.
[  234.782037][T12930] netlink: 'syz.1.1953': attribute type 10 has an invalid length.
[  235.049793][T12942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'.
[  235.086833][T12942] nbd: must specify at least one socket
[  235.143727][T12949] netlink: 'syz.2.1959': attribute type 10 has an invalid length.
[  235.404352][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'.
[  235.704937][T12983] Cannot find del_set index 3 as target
[  235.723072][T12985] netlink: 'syz.0.1969': attribute type 40 has an invalid length.
[  235.768465][T12985] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  235.789821][T12985] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  235.973791][T12998] netlink: 'syz.4.1975': attribute type 12 has an invalid length.
[  236.090230][T13001] FAULT_INJECTION: forcing a failure.
[  236.090230][T13001] name failslab, interval 1, probability 0, space 0, times 0
[  236.115850][ T5627] block nbd1: Receive control failed (result -32)
[  236.127575][T13001] CPU: 0 UID: 0 PID: 13001 Comm: syz.2.1976 Not tainted syzkaller #0 PREEMPT(full) 
[  236.127599][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  236.127609][T13001] Call Trace:
[  236.127616][T13001]  <TASK>
[  236.127623][T13001]  dump_stack_lvl+0xe8/0x150
[  236.127645][T13001]  should_fail_ex+0x40c/0x560
[  236.127671][T13001]  should_failslab+0xa8/0x100
[  236.127691][T13001]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  236.127717][T13001]  ? skb_clone+0x212/0x3a0
[  236.127734][T13001]  ? skb_clone+0x212/0x3a0
[  236.127759][T13001]  skb_clone+0x212/0x3a0
[  236.127782][T13001]  __netlink_deliver_tap+0x413/0x860
[  236.127807][T13001]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.127823][T13001]  netlink_deliver_tap+0x19c/0x1b0
[  236.127840][T13001]  netlink_unicast+0x77f/0x940
[  236.127866][T13001]  netlink_sendmsg+0x813/0xb40
[  236.127894][T13001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.127920][T13001]  ? aa_sock_msg_perm+0xf1/0x1b0
[  236.127950][T13001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.127971][T13001]  sock_sendmsg_nosec+0x13a/0x180
[  236.128001][T13001]  ____sys_sendmsg+0x54e/0x850
[  236.128027][T13001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.128051][T13001]  ? import_iovec+0x73/0xa0
[  236.128072][T13001]  ___sys_sendmsg+0x2a5/0x360
[  236.128090][T13001]  ? __lock_acquire+0x683/0x2cf0
[  236.128110][T13001]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.128163][T13001]  ? __fget_files+0x2a/0x420
[  236.128182][T13001]  ? __fget_files+0x3a2/0x420
[  236.128210][T13001]  __x64_sys_sendmsg+0x1b1/0x290
[  236.128233][T13001]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.128269][T13001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.128291][T13001]  do_syscall_64+0x174/0x580
[  236.128310][T13001]  ? clear_bhb_loop+0x40/0x90
[  236.128333][T13001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.128351][T13001] RIP: 0033:0x7f1b7379de59
[  236.128378][T13001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.128393][T13001] RSP: 002b:00007f1b745b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.128413][T13001] RAX: ffffffffffffffda RBX: 00007f1b73a25fa0 RCX: 00007f1b7379de59
[  236.128427][T13001] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  236.128439][T13001] RBP: 00007f1b745b3090 R08: 0000000000000000 R09: 0000000000000000
[  236.128450][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.128461][T13001] R13: 00007f1b73a26038 R14: 00007f1b73a25fa0 R15: 00007ffc49bbc838
[  236.128490][T13001]  </TASK>
[  236.128620][T13001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.489640][T13004] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1977'.
[  236.523144][T13004] 1�: renamed from 
c0� (while UP)
[  236.534796][T13019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1981'.
[  236.554315][T13022] openvswitch: netlink: Flow actions attr not present in new flow.
[  236.567985][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1981'.
[  236.575146][T13004] 1�: entered allmulticast mode
[  236.600134][T13004] hsr_slave_0: entered allmulticast mode
[  236.620043][T13004] hsr_slave_1: entered allmulticast mode
[  236.638003][T13004] A link change request failed with some changes committed already. Interface 
c1� may have been left with an inconsistent configuration, please check.
[  236.671101][T13027] nbd: nbd1 already in use
[  236.975268][T13045] tipc: Enabled bearer <eth:vlan0>, priority 24
[  236.997620][T13045] netlink: 'syz.1.1991': attribute type 5 has an invalid length.
[  237.013535][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'.
[  237.032271][T13052] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  237.224928][T13056] bond7: option resend_igmp: invalid value (32767)
[  237.247282][T13056] bond7: option resend_igmp: allowed values 0 - 255
[  237.255047][T13056] bond7 (unregistering): Released all slaves
[  237.530468][T13084] netlink: 'syz.2.1999': attribute type 24 has an invalid length.
[  237.561774][T13086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2000'.
[  237.662745][T13096] team0: Device gtp1 is up. Set it down before adding it as a team port
[  237.868551][T13107] netlink: 'syz.3.2005': attribute type 1 has an invalid length.
[  238.052342][T13121] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.750216][T13149] syzkaller0: entered promiscuous mode
[  238.769478][T13149] syzkaller0: entered allmulticast mode
[  240.310356][    C1] bridge0: port 3(team0) entered forwarding state
[  240.316906][    C1] bridge0: topology change detected, propagating
[  241.309946][T13167] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  241.312661][T13170] __nla_validate_parse: 7 callbacks suppressed
[  241.312679][T13170] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2018'.
[  241.363404][T13174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.476823][T13181] xt_hashlimit: size too large, truncated to 1048576
[  241.509906][T13183] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  241.593796][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2022'.
[  241.738794][T13194] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.749767][T13189] xt_hashlimit: size too large, truncated to 1048576
[  241.756719][T13197] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  242.298136][T13230] netlink: 'syz.3.2036': attribute type 29 has an invalid length.
[  242.384173][T13233] netlink: 'syz.2.2038': attribute type 10 has an invalid length.
[  242.411092][T13233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2038'.
[  242.417060][T13238] netlink: 'syz.4.2037': attribute type 11 has an invalid length.
[  242.438689][T13238] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2037'.
[  242.472627][T13238] tipc: New replicast peer: 255.255.255.255
[  242.494383][T13238] tipc: Enabled bearer <udp:syz2>, priority 10
[  242.643525][T13235] Cannot find del_set index 3 as target
[  242.760814][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2042'.
[  243.144124][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  243.390559][T13288] syzkaller0: entered promiscuous mode
[  243.408393][T13288] syzkaller0: entered allmulticast mode
[  243.475107][T13288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.513645][T13287] tipc: Resetting bearer <eth:syzkaller0>
[  243.549662][T13287] tipc: Disabling bearer <eth:syzkaller0>
[  243.943524][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  243.946122][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  244.208173][T13357] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  244.380039][T13369] Cannot find add_set index 4 as target
[  244.587344][T12544] tipc: Node number set to 4208507279
[  244.812910][T13396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.024428][T13419] netlink: 'syz.2.2090': attribute type 2 has an invalid length.
[  245.197040][T13432] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  245.394705][T13428] nbd2: detected capacity change from 0 to 63
[  245.444548][ T5632] block nbd2: Receive control failed (result -104)
[  245.444570][ T5627] block nbd2: Receive control failed (result -32)
[  245.792923][T13469] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2104'.
[  245.819976][T13471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2104'.
[  245.865567][T13475] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  246.429216][T13504] syzkaller0: entered promiscuous mode
[  246.449602][T13504] syzkaller0: entered allmulticast mode
[  246.624358][T13518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.635432][T13517] netlink: 'syz.3.2121': attribute type 1 has an invalid length.
[  246.803289][T13517] __nla_validate_parse: 2 callbacks suppressed
[  246.803308][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'.
[  246.825113][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2123'.
[  246.861949][T13521] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  246.873121][T13528] netlink: 'syz.4.2122': attribute type 26 has an invalid length.
[  246.895585][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2124'.
[  246.910165][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'.
[  246.959701][T13530] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2124'.
[  246.970250][T13517] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface
[  247.004155][T13517] bond5 (unregistering): Released all slaves
[  247.302545][T13549] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2127'.
[  247.649385][T13563] syzkaller0: entered promiscuous mode
[  247.667104][T13563] syzkaller0: entered allmulticast mode
[  247.707325][T13563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.722920][T13562] tipc: Resetting bearer <eth:syzkaller0>
[  247.748636][T13562] tipc: Disabling bearer <eth:syzkaller0>
[  247.766741][T13569] tc_dump_action: action bad kind
[  247.979045][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'.
[  247.981324][T13575] lo speed is unknown, defaulting to 1000
[  248.025407][T13585] SET target dimension over the limit!
[  248.032548][T13584] netlink: 'syz.1.2143': attribute type 28 has an invalid length.
[  248.040675][T13584] netlink: 'syz.1.2143': attribute type 3 has an invalid length.
[  248.048985][T13584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2143'.
[  248.061132][T13584] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2143'.
[  248.071759][T13584] bond0: option miimon: invalid value (18446744071829782528)
[  248.079636][T13584] bond0: option miimon: allowed values 0 - 2147483647
[  248.380348][T13596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2145'.
[  248.897005][T13622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  248.904328][T13622] IPv6: NLM_F_CREATE should be set when creating new route
[  248.911656][T13622] IPv6: NLM_F_CREATE should be set when creating new route
[  248.918922][T13622] IPv6: NLM_F_CREATE should be set when creating new route
[  248.960535][T13622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.449020][T13650] netlink: 'syz.3.2164': attribute type 1 has an invalid length.
[  249.508060][T13654] veth0_virt_wifi: mtu less than device minimum
[  249.882029][T13670] netlink: 'syz.1.2171': attribute type 3 has an invalid length.
[  250.289181][T13692] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  250.581339][T13693] syzkaller1: entered promiscuous mode
[  250.601798][T13693] syzkaller1: entered allmulticast mode
[  250.822708][T13712] ip6gre1: entered allmulticast mode
[  250.853320][T13714] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  250.876210][T13714] FAULT_INJECTION: forcing a failure.
[  250.876210][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  250.926303][T13714] CPU: 0 UID: 0 PID: 13714 Comm: syz.1.2182 Not tainted syzkaller #0 PREEMPT(full) 
[  250.926329][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.926357][T13714] Call Trace:
[  250.926365][T13714]  <TASK>
[  250.926375][T13714]  dump_stack_lvl+0xe8/0x150
[  250.926404][T13714]  should_fail_ex+0x40c/0x560
[  250.926432][T13714]  _copy_to_user+0x31/0xb0
[  250.926454][T13714]  simple_read_from_buffer+0xe1/0x170
[  250.926476][T13714]  proc_fail_nth_read+0x1bb/0x230
[  250.926496][T13714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.926514][T13714]  ? rw_verify_area+0x24a/0x4c0
[  250.926533][T13714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  250.926547][T13714]  vfs_read+0x213/0xa80
[  250.926568][T13714]  ? __pfx___mutex_lock+0x10/0x10
[  250.926583][T13714]  ? __pfx_vfs_read+0x10/0x10
[  250.926602][T13714]  ? __fget_files+0x2a/0x420
[  250.926619][T13714]  ? __fget_files+0x3a2/0x420
[  250.926633][T13714]  ? __fget_files+0x2a/0x420
[  250.926654][T13714]  ksys_read+0x150/0x270
[  250.926678][T13714]  ? __pfx_ksys_read+0x10/0x10
[  250.926702][T13714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.926719][T13714]  do_syscall_64+0x174/0x580
[  250.926733][T13714]  ? trace_irq_disable+0x3b/0x140
[  250.926748][T13714]  ? clear_bhb_loop+0x40/0x90
[  250.926766][T13714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.926781][T13714] RIP: 0033:0x7fbcb995e68e
[  250.926796][T13714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.926809][T13714] RSP: 002b:00007fbcb7bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  250.926825][T13714] RAX: ffffffffffffffda RBX: 00007fbcb7bf66c0 RCX: 00007fbcb995e68e
[  250.926836][T13714] RDX: 000000000000000f RSI: 00007fbcb7bf60a0 RDI: 000000000000000d
[  250.926846][T13714] RBP: 00007fbcb7bf6090 R08: 0000000000000000 R09: 0000000000000000
[  250.926855][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  250.926864][T13714] R13: 00007fbcb9c26038 R14: 00007fbcb9c25fa0 R15: 00007fff804b7768
[  250.926888][T13714]  </TASK>
[  251.389954][T13743] netlink: 'syz.2.2189': attribute type 11 has an invalid length.
[  251.537708][T13748] SET target dimension over the limit!
[  251.551896][T13750] veth0_vlan: left promiscuous mode
[  251.576090][T12546] veth0_vlan: entered promiscuous mode
[  251.821830][T13763] 
: renamed from dummy0
[  251.984902][T13775] __nla_validate_parse: 3 callbacks suppressed
[  251.984920][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'.
[  252.518734][T13800] bridge0: port 3(ipvlan4) entered blocking state
[  252.543272][T13800] bridge0: port 3(ipvlan4) entered disabled state
[  252.556716][T13800] ipvlan4: entered allmulticast mode
[  252.583932][T13800] bridge0: entered allmulticast mode
[  252.606554][T13800] ipvlan4: left allmulticast mode
[  252.615854][T13800] bridge0: left allmulticast mode
[  252.932896][T13822] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  253.177137][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2220'.
[  253.482700][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'.
[  253.674723][T13878] tipc: Enabled bearer <udp:syz2>, priority 10
[  253.828986][T13882] x_tables: duplicate entry at hook 1
[  253.915514][T13893] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  254.134966][T13908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2242'.
[  254.156768][T13908] netlink: 'syz.2.2242': attribute type 1 has an invalid length.
[  254.177095][T13913] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2243'.
[  254.200545][T13913] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2243'.
[  254.215409][T13915] netlink: 'syz.2.2242': attribute type 11 has an invalid length.
[  254.238053][T13915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2242'.
[  254.248122][T13913] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2243'.
[  254.263514][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'.
[  254.274654][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'.
[  254.317997][T13908] bond8: entered promiscuous mode
[  254.323653][T13908] 8021q: adding VLAN 0 to HW filter on device bond8
[  255.138138][T13939] macvlan0: entered promiscuous mode
[  255.326012][ T5627] block nbd3: Receive control failed (result -1)
[  255.335506][ T5627] 
[  255.337862][ T5627] ======================================================
[  255.344882][ T5627] WARNING: possible circular locking dependency detected
[  255.351927][ T5627] syzkaller #0 Not tainted
[  255.356353][ T5627] ------------------------------------------------------
[  255.363383][ T5627] kworker/u9:2/5627 is trying to acquire lock:
[  255.369558][ T5627] ffff888051f8e0e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390
[  255.378990][ T5627] 
[  255.378990][ T5627] but task is already holding lock:
[  255.386363][ T5627] ffff888035482068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[  255.395273][ T5627] 
[  255.395273][ T5627] which lock already depends on the new lock.
[  255.395273][ T5627] 
[  255.405682][ T5627] 
[  255.405682][ T5627] the existing dependency chain (in reverse order) is:
[  255.414690][ T5627] 
[  255.414690][ T5627] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  255.422333][ T5627]        __mutex_lock+0x19d/0x1550
[  255.427442][ T5627]        nbd_queue_rq+0x373/0x1150
[  255.432549][ T5627]        blk_mq_dispatch_rq_list+0x499/0x1990
[  255.438609][ T5627]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  255.445445][ T5627]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  255.451932][ T5627]        blk_mq_run_work_fn+0x16c/0x300
[  255.457468][ T5627]        process_scheduled_works+0xa8e/0x14e0
[  255.463528][ T5627]        worker_thread+0xa47/0xfb0
[  255.468629][ T5627]        kthread+0x388/0x470
[  255.473204][ T5627]        ret_from_fork+0x514/0xb70
[  255.478301][ T5627]        ret_from_fork_asm+0x1a/0x30
[  255.483572][ T5627] 
[  255.483572][ T5627] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  255.490773][ T5627]        __mutex_lock+0x19d/0x1550
[  255.495868][ T5627]        nbd_queue_rq+0xc1/0x1150
[  255.500879][ T5627]        blk_mq_dispatch_rq_list+0x499/0x1990
[  255.506940][ T5627]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  255.513776][ T5627]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  255.520262][ T5627]        blk_mq_run_work_fn+0x16c/0x300
[  255.525796][ T5627]        process_scheduled_works+0xa8e/0x14e0
[  255.531853][ T5627]        worker_thread+0xa47/0xfb0
[  255.536956][ T5627]        kthread+0x388/0x470
[  255.541531][ T5627]        ret_from_fork+0x514/0xb70
[  255.546628][ T5627]        ret_from_fork_asm+0x1a/0x30
[  255.551898][ T5627] 
[  255.551898][ T5627] -> #4 (set->srcu){.+.+}-{0:0}:
[  255.559010][ T5627]        __synchronize_srcu+0xc9/0x2f0
[  255.564454][ T5627]        elevator_switch+0x1e8/0x7b0
[  255.569731][ T5627]        elevator_change+0x2fa/0x480
[  255.575015][ T5627]        elevator_set_default+0x375/0x440
[  255.580723][ T5627]        blk_register_queue+0x3f3/0x4e0
[  255.586254][ T5627]        __add_disk+0x6cb/0xe30
[  255.591092][ T5627]        add_disk_fwnode+0xfb/0x4b0
[  255.596280][ T5627]        nbd_dev_add+0x733/0xb60
[  255.601213][ T5627]        nbd_init+0x15f/0x1e0
[  255.605915][ T5627]        do_one_initcall+0x250/0x870
[  255.611216][ T5627]        do_initcall_level+0x10a/0x1a0
[  255.616666][ T5627]        do_initcalls+0x59/0xa0
[  255.621504][ T5627]        kernel_init_freeable+0x29d/0x3e0
[  255.627217][ T5627]        kernel_init+0x1d/0x1d0
[  255.632060][ T5627]        ret_from_fork+0x514/0xb70
[  255.637165][ T5627]        ret_from_fork_asm+0x1a/0x30
[  255.642440][ T5627] 
[  255.642440][ T5627] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  255.650246][ T5627]        __mutex_lock+0x19d/0x1550
[  255.655347][ T5627]        elevator_change+0x1af/0x480
[  255.660626][ T5627]        elevator_set_none+0xb5/0x140
[  255.665985][ T5627]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  255.672297][ T5627]        nbd_start_device+0x189/0xb30
[  255.677664][ T5627]        nbd_genl_connect+0x1597/0x1c10
[  255.683204][ T5627]        genl_family_rcv_msg_doit+0x233/0x340
[  255.689258][ T5627]        genl_rcv_msg+0x614/0x7a0
[  255.694278][ T5627]        netlink_rcv_skb+0x226/0x4a0
[  255.699579][ T5627]        genl_rcv+0x28/0x40
[  255.704070][ T5627]        netlink_unicast+0x7bb/0x940
[  255.709339][ T5627]        netlink_sendmsg+0x813/0xb40
[  255.714612][ T5627]        sock_sendmsg_nosec+0x13a/0x180
[  255.720151][ T5627]        ____sys_sendmsg+0x54e/0x850
[  255.725421][ T5627]        ___sys_sendmsg+0x2a5/0x360
[  255.730604][ T5627]        __x64_sys_sendmsg+0x1b1/0x290
[  255.736048][ T5627]        do_syscall_64+0x174/0x580
[  255.741145][ T5627]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.747548][ T5627] 
[  255.747548][ T5627] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  255.756151][ T5627]        blk_alloc_queue+0x544/0x690
[  255.761446][ T5627]        __blk_mq_alloc_disk+0x194/0x390
[  255.767076][ T5627]        nbd_dev_add+0x494/0xb60
[  255.772003][ T5627]        nbd_init+0x15f/0x1e0
[  255.776665][ T5627]        do_one_initcall+0x250/0x870
[  255.781941][ T5627]        do_initcall_level+0x10a/0x1a0
[  255.787391][ T5627]        do_initcalls+0x59/0xa0
[  255.792236][ T5627]        kernel_init_freeable+0x29d/0x3e0
[  255.797947][ T5627]        kernel_init+0x1d/0x1d0
[  255.802784][ T5627]        ret_from_fork+0x514/0xb70
[  255.807881][ T5627]        ret_from_fork_asm+0x1a/0x30
[  255.813155][ T5627] 
[  255.813155][ T5627] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  255.820358][ T5627]        fs_reclaim_acquire+0x71/0x100
[  255.825806][ T5627]        __kmalloc_noprof+0xbc/0x720
[  255.831085][ T5627]        tls_sw_sendmsg+0x599/0x2860
[  255.836364][ T5627]        sock_sendmsg_nosec+0x90/0x180
[  255.841812][ T5627]        sock_sendmsg+0x1ca/0x2d0
[  255.846823][ T5627]        splice_to_socket+0xb5e/0x12a0
[  255.852269][ T5627]        direct_splice_actor+0x101/0x160
[  255.857887][ T5627]        splice_direct_to_actor+0x57b/0xcb0
[  255.863763][ T5627]        do_splice_direct+0x195/0x290
[  255.869119][ T5627]        do_sendfile+0x52e/0x7c0
[  255.874045][ T5627]        __se_sys_sendfile64+0x144/0x1a0
[  255.879666][ T5627]        do_syscall_64+0x174/0x580
[  255.884762][ T5627]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.891157][ T5627] 
[  255.891157][ T5627] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  255.899244][ T5627]        __lock_acquire+0x1520/0x2cf0
[  255.904602][ T5627]        lock_acquire+0x106/0x350
[  255.909609][ T5627]        lock_sock_nested+0x41/0x100
[  255.914890][ T5627]        inet_shutdown+0x6a/0x390
[  255.919908][ T5627]        nbd_mark_nsock_dead+0x2cb/0x550
[  255.925528][ T5627]        recv_work+0x1cee/0x1e10
[  255.930450][ T5627]        process_scheduled_works+0xa8e/0x14e0
[  255.936508][ T5627]        worker_thread+0xa47/0xfb0
[  255.941609][ T5627]        kthread+0x388/0x470
[  255.946182][ T5627]        ret_from_fork+0x514/0xb70
[  255.951284][ T5627]        ret_from_fork_asm+0x1a/0x30
[  255.956558][ T5627] 
[  255.956558][ T5627] other info that might help us debug this:
[  255.956558][ T5627] 
[  255.966767][ T5627] Chain exists of:
[  255.966767][ T5627]   sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock
[  255.966767][ T5627] 
[  255.979790][ T5627]  Possible unsafe locking scenario:
[  255.979790][ T5627] 
[  255.987223][ T5627]        CPU0                    CPU1
[  255.992573][ T5627]        ----                    ----
[  255.997921][ T5627]   lock(&nsock->tx_lock);
[  256.002324][ T5627]                                lock(&cmd->lock);
[  256.008809][ T5627]                                lock(&nsock->tx_lock);
[  256.015733][ T5627]   lock(sk_lock-AF_INET6-NBD);
[  256.020570][ T5627] 
[  256.020570][ T5627]  *** DEADLOCK ***
[  256.020570][ T5627] 
[  256.028694][ T5627] 3 locks held by kworker/u9:2/5627:
[  256.033957][ T5627]  #0: ffff888025ef1140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  256.045178][ T5627]  #1: ffffc90004267c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  256.056922][ T5627]  #2: ffff888035482068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[  256.066225][ T5627] 
[  256.066225][ T5627] stack backtrace:
[  256.072098][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  256.072116][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  256.072127][ T5627] Workqueue: nbd3-recv recv_work
[  256.072147][ T5627] Call Trace:
[  256.072153][ T5627]  <TASK>
[  256.072161][ T5627]  dump_stack_lvl+0xe8/0x150
[  256.072179][ T5627]  print_circular_bug+0x2e1/0x300
[  256.072204][ T5627]  check_noncircular+0x12e/0x150
[  256.072223][ T5627]  __lock_acquire+0x1520/0x2cf0
[  256.072240][ T5627]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  256.072261][ T5627]  ? try_to_wake_up+0x8c5/0x14d0
[  256.072281][ T5627]  ? inet_shutdown+0x6a/0x390
[  256.072302][ T5627]  lock_acquire+0x106/0x350
[  256.072315][ T5627]  ? inet_shutdown+0x6a/0x390
[  256.072337][ T5627]  ? __queue_work+0x1ea/0x10a0
[  256.072359][ T5627]  lock_sock_nested+0x41/0x100
[  256.072379][ T5627]  ? inet_shutdown+0x6a/0x390
[  256.072400][ T5627]  inet_shutdown+0x6a/0x390
[  256.072421][ T5627]  nbd_mark_nsock_dead+0x2cb/0x550
[  256.072439][ T5627]  recv_work+0x1cee/0x1e10
[  256.072460][ T5627]  ? lockdep_unlock+0x5d/0xd0
[  256.072472][ T5627]  ? __lock_acquire+0x13e8/0x2cf0
[  256.072489][ T5627]  ? __pfx_recv_work+0x10/0x10
[  256.072507][ T5627]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  256.072527][ T5627]  ? process_scheduled_works+0xa20/0x14e0
[  256.072549][ T5627]  ? rcu_is_watching+0x15/0xb0
[  256.072566][ T5627]  ? process_scheduled_works+0xa20/0x14e0
[  256.072585][ T5627]  process_scheduled_works+0xa8e/0x14e0
[  256.072613][ T5627]  ? __pfx_process_scheduled_works+0x10/0x10
[  256.072634][ T5627]  ? assign_work+0x3cf/0x5d0
[  256.072654][ T5627]  worker_thread+0xa47/0xfb0
[  256.072681][ T5627]  kthread+0x388/0x470
[  256.072696][ T5627]  ? __pfx_worker_thread+0x10/0x10
[  256.072715][ T5627]  ? __pfx_kthread+0x10/0x10
[  256.072730][ T5627]  ret_from_fork+0x514/0xb70
[  256.072746][ T5627]  ? __pfx_ret_from_fork+0x10/0x10
[  256.072761][ T5627]  ? __switch_to+0xc89/0x1420
[  256.072782][ T5627]  ? __pfx_kthread+0x10/0x10
[  256.072797][ T5627]  ret_from_fork_asm+0x1a/0x30
[  256.072819][ T5627]  </TASK>