last executing test programs:

3m37.980631121s ago: executing program 0 (id=598):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

3m36.945084473s ago: executing program 0 (id=601):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r5, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2})
r6 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000640)={r6, r6})
ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xa92)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ppoll(&(0x7f0000000240)=[{r7, 0x8407}, {r1, 0x2}], 0x2, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000275bae890029bdf001fddbff2500000010", @ANYRES32=0x0, @ANYBLOB="211000001141020008001b0000000000080004000015000014000300776c616e3100"/44], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

3m33.884372717s ago: executing program 0 (id=608):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001cc0)={0x0, 0x0, "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", "0fee2f29052b1678cda11e0944139354689e2278f0df6a22d276fd76d88c1d92c87a6d2731e9d10d40dbb727b3823759c63cb5803bf5e98add5ee39ec0ec1fd8bfbc9cd06c10eb86e7f310ca8a5ac7e7f3304ca5e783eb960b1ffc527cec79f8b220af4a66e0da3a2e96a05467c3140b1de41f7484af0ce3421d349baf3a6fd8c2dca8d6c96fe661d60906ceaa7d69274f07ffbd5daa7db5f9ea62d32946dd22c93cc060d0366026f15e17914eea4143d1a8e4340319620ee351ad2a7c6c3bfff77b0acc0586f432c0c67bc443f2d25262c9ec5bfe08869f7ae00c9dd46fa62fed76a4cc659f37d9e296dfc86cd46e966fa46f7ac887b240da97ae637db38484902a1da3a5f775cf9c71b029ce09e61b7a21fc09c3029ad4f66896652aaf60491665c29a35c2c1ebe39a9a0f6d983b42da5138de7176840675ca2ba55aa2c526550657361ce23e6602012ea81cd836c132353e54be238d84856882cdd74dfb242c30adc010f8cd8b81ffc21ab218e531b6f3aeda57ef0b080e8779e4b2c93d20b34acac02038293f34102397d256bb0b2c6fefd52a65247f287b04ded21310d22d8717de970db1712572d63faffd93f72ff416a332bca0d35fb8717e9ecb3512c2c809e9fe5365a56ced19fe5941219c17fee3db9d7f23ccbad2eaf2ee947de59437c7e8bad571d16ce95d91f49184afe706be9afdf47dab8057dae80aa81b8ca4675ca8e476d5807825835d77b39c03c3dda9133814d318763be00b61c90eb2313fe95a9d68a8677496fd45c58c47eee2051299bfa1d0861879b3a2af5e337faffd36ecb7d02fd6ee95ed6f3c65cb28484e79a98cf64f7f8d3927c0f9744646af625f447fd59b5b26a472c6e16ba163c34ea89ea07b1b9f017e759aa6cfaaaeac231ae0c428fd4ce3c5af2c67ea23045d68ca05b50ac3069d18afe383f12e7bc8c9405be616eb0c7238468e389afa04027a2dfe6183a4bc9022c4522b28f64618de3e7d840df7ce69000dd841b2d753f7e23c8e980b37a7c2a188c839c81ae378bfd5ad4b83e0fad5c0a1947057bccdec93f42492378a6bbccebd86d8d1b44deba8668ed15e1b6e0a98e828d34cecec35899c60c24685b8d1254fffcab2b3937fceaaaf9a2c4793def1ff24fe331b707b1d9be763240823488133d1b46cbc346586d27738f67bb21cf8421f761ef5a2231e78fe746a110a6d9cf86b22c1e95c5265f11ea101c5ecf13d62f5c9e090c068ab6c22461aaa92c4bc0a9c7641b4b8c985e8de606267fe3a9c8ee333e21285ffe5028c56482e72160f6a09ce2d10780ab49fe7e8f371c508ccc0ccbbbab261b0061dfe7e739a7174f5061ddb33bf2634b03a3ef72f0e25bb533d776a115aac39c7b8956c8f150556e2e5bfa17fd38a9dc2a25cc6c14b6bb8e5385b1ff4d44753679400126f020875d99f74a8802ae95503718c3243a8b0dd920d6c846bc9e342024b994b71317a267b1687f3095fafb43e729bb327ecf2a6eb24a841eb4fca9163aa472ebdf80166c8e4edb97c18afa7420656bcd4f5740da6132863391ba33b2321cf6cb5a2fc0af7e14dc892aa9a0a80c75c754aea892ff1fa6f1ebec5ad3afc782a3375193c27d249c3bfd892c1005106098bee811e28c101d029bd3097bedb1fa78031e87f78ee3e3e426661c18235d2b95d861f1c08047ea76e9a5558c7835e2bdd3873fefe308cb940010162c4104a9dd41acfc116e7bce7887d978274dd4fdbb912ce0fa431ede34715bf07d054a77dbe6adcf9cb060f4da9c48330f368c8586689c8e98367c9bc4c4d709c1093c37b16fe7b7540bb68d70ea2842c638202d20fd60039d2a2e439957ab1e1c28180cfa642409b7a3353583acb5c5692f1cd0ba7ebcfae942fb35d715ccfc78a6610f5cb0fb7cec2075c5445754905429c67998d473fb143ca2debf91786074ca1b2f32e8723ac94f21fb499b47fe023a6e189a3fb03bcae7ff1c422d151447be4ab12567a09f72e27f647f7db490edf9c39692e9311caa05c93b63ce5f2961e9053579efbe30578ba0db55c380985e0fa3446236e908cb8006fa06858f7a8beb9a2ff2da324643b6126569ad1c2690e303290b77ead937d218432293d3660085dbbaf3d201009ab331520c6599abfedd2e0fdc6ecdcf309360fdd7ab93d8de5924fb04cd74ed0b544338477ffaf21a22e9241efb16ff06a46d9430bcdc9b8dd9ec0f9011dfcbc8d0f194e4af026eaa87b16ed5fbc48977e5ff3f5d70d55f919344d93cdf2568794cd8ad25245a4232f1f662364ce172da7617b05d46f5e9f09b4299add36f71c435037b156c3fac909973bfd6560024a27aa7a13bdf864341f964295b18feda9a7d32833b0719ce3a7252cdad04f7c6fbf1215afc3108af051e6f2f63d23081f71b384f6ef57892dba4060bf0c40f7edfc5908d64707d21306a857aa900ef7c07eb3708e5f2e0632a437e4d57447df4b368525e52e2c93c3bb143abe7f399dd6557ff1adf05ad4f43b27043be025a089f7ea715887271b1cf5bf8c3d83e509e5f887de7e78d012051143be2de8bfd64d0142fe748678617331edcb675cbe7286d8272e61c1a2503e952c797a0cd02da1ee7af3616409f8f73e4ff8d5573bb6139d8dac9dba5a3e4862e18db41d95dbdaee5d89d720c3e2b4b6f29a7d21e04358e9103989a7589cc2220b873870dd70cabe278acd2b07a4bc4a8a67e23fa6fb7c7d7b02b4de1a4ff625eca1e980803d82d95b31998f7f39274ab81bf7e9881d3f761c665a250d15cd8db87f803d7cd54be99e9e7e0e765ed5cf6c348e4730ed8be01c0ea18ac6e8f6bae731faa693caa6406f779360b0728216504a3a507d3e0d732ccd1cc0773b7260f47d685191043e32e8362e93e3f0f3848f7fa336c42b184304a0ce9090adfc172a05b0ac1471c1e6672847d77078d0bfb342ecd10c2411ae2798984549e170a3647e83e50952efa75c59589ff703599b51dbb69a1dd9d9d4039bbabafec9e5c91f4dbec1342ebf4aad6b2756f7e823dab292da8c6c66911e22e200d7cfe485e34934892e91d1ae9fc253455771117960e30589566d9afddad876d5be52f24d376177c69f873d79dc7170dac23313682b73806edbd707d24f632d83df33a26946b1dc80c500b5c5a0f2213bca83ac1f81b6525cb73599199c2150f5420940686d0a6a99ee497a15355a30cc99effb078cfc7de28a933d727968a22705fc941aa8422a1a8acdedfe2088dc912c4b688c5853ebba8c59b075f1b7df25861d10aa33e44f8ce42db227724bdae7d663a4b3a46ed496bea3d5f07557f68775dea21d07a389b733b0585a97d30cc7c5d90d9d84dd22fdbc83dfa76f980a4ab273eb3f80a08cbcdc3ba6d0c4465c23e2d61bbea4565cd1a3ca192647292be3f769fdfa6699df7a9a62b968d31c96697939421572aeb09148a017a9d5ce2414e8a7afa7a5d95d1259840f8878ce39dadfb649309d3036cf02559bdb06890e2a35007c764ab9289d04b7b1f62fd83b4e47c1e8595ce12efe6009599fd6da7bc9946745ce2b09efc33927ff584126ee7cfce6c58af2d4eda940e9c6f890380e0ee6e9e520f32ee6fd62c81616cdaa0232a73f23dfd3c33a13a2a80c631b86e3019e4219f545d7d3283761a49a149036ed9ce5f2e017677396bcd1b9924480ed65aebe595f9bd6697a298949155fecea5638e860b86d51deda3572becc8764efcd3e004b6e920146748fc1c11290a5c79d2da36670ce0043c3810753ead56414ecb48fd333e8aa0608e6158c008e6f7003537039bcaea985b187be74688f6cb5dcb25ba9e67af032969b9a90be052f26c30ceb004bf8818ff82f335de38c1488f4d9a89b134feaeef8033114e68871b165221d245628dc93b40a6b48d01811d9131e2b47cba2906a5d8f31b7f962291fd33ba5e0a6b131924531d324d930b7fbaccfee34fdec6a9b8c317e63a3690012d042fa511193749dc2d56a9a657afa2ee2654aa86a90af430014586ead553dc1ae854b619bac98338b5ed17a41bc648578f6dc4d60ea810161e037e6eeed744c8755a9c6e65c18b8f40e67fbc37e0114f053cd0309fb986c68a72270de5564f51c19a78da4c17dbcd2cd4036b2ca6fcb4dbb3e4d9a541d8c28f0332fc635b04ceb4f584277a2bc40c5acbc05015785f7e5e1f58e41603761b862e0190c3b9c337ab5c0f82dc49cedee197b42ff570f79d937f72a81eb853d6b33d503222ae8376acbf4663f69acbc91c21d585b0fb455a8ce1f188bf008562d17c3d31cedaf7a524c6141b97a5321b3fda7da8dc8863e077bea4d867f0f43ebc9405c9da76992da63181fd12e23399ee1cd59692d772a47d1be709bcabb11a1798760c93db64975a44ea3044bbfaea4096ef74487d1075515cb198da49b5b6db25d29bb67abe1815fbc674035d72b414ba72f7627fc8333703acaba1442161bbc247dc86e8133bc2f77acd6cc36ac0f11b3868c653866945f329dd27c95a6f43472db4b43005c6832ae1e6501c8b449faaac674472316faaaa9b7de4d0b376a4ef6d164ee42dc30ce42aefc933e11962a20aca0702b69717a012e8b2f0a107dafda8dd2a51eada77c9e68f9812f48be7387bfd9863fd4ebf99e274ee96fb5a3a64f1de7cb80b7a91908dcc63575b9deec8c2b6288a28c2dadf547bba9ace9bd4d8e66e0bcef4a4af37b3545070e07721f2724e8b1305e6b83fe2c6ebc1c1b3ccff6b4e2dbdedd4d65f51599775d701c0dc25879db17c967a1eb194695b61c3ed6c1675a6ea7a542fbf671cbbe36e18d41d7375a736358b07093ba54abd0635dbfae4a997739cdc62dc14b5e2eb104eb85568af8c39c639906d8e23d861036c0687f60dbc927e7ecdfc1ce496ab02005c6aeb397afc8795245800e09e602299580e099b3e893aa6ba4709013f7060046d14ab95066033230fdd14baa9400a7b9b89bff01056648831908a5ef09ecdddebde68d5841706c69e6ca38bd170e5738f2a34df589d22a24443c15c90b2a35615fac51746cc366999fa74a3dfe962e1bbe059867febb1c42eda6230c58979b03388f8ebef036c881421dfd21ca447a3a4823494ed0e99a2960e93e961b79aede5a2752c4963186ab6c7d8106a1ce8b88e0e0df4528556a15c8e2a49499b7691ae5b04e2fe0acae202c487cf1da0122abcd9d74dfc4063ebbc98f65e877e46e452a19187810a2819e859d5d151a40537e73e520c8ae0d1208e7a9dd2dfc34b4402f60c4e8add07cfdb7f94e73e5c61dd362ef6a1b42904ad90fadc143e11244743daf57c0af6cc71aa66f2aa4560d21bc6b4f1327d19abf62a7aaa817e0400fb86c3f27643a6bfba7b6b6da2185afe011519831d0599dd89f17042f3985cb5752e2b8179418a0cdd4cefc1b63"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000eeec0)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f00c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x8, "337ec8ad00ce6c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f10c0)={0xf6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r6}, {0x0, r8}], 0x8, "c703f6dbddf106"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000db980)={0xf35, [], 0x55, "67deeff43bd113"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000ca140)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ca340)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0xfc, "06ddd840716cec"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cb340)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r15=>0x0}], 0xc, "5d4dc9c1bea681"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000cc340)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r13, r14}], 0x9, "3f0ba8522e1e23"})
recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800)
ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000))

3m28.296592631s ago: executing program 0 (id=617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

3m27.298194996s ago: executing program 0 (id=621):
r0 = socket(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x1}, 0xc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080))

3m26.875304007s ago: executing program 0 (id=623):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001cc0)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000eeec0)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f00c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x8, "337ec8ad00ce6c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f10c0)={0xf6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r6}, {0x0, r8}], 0x8, "c703f6dbddf106"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000db980)={0xf35, [], 0x55, "67deeff43bd113"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000ca140)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ca340)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0xfc, "06ddd840716cec"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cb340)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r15=>0x0}], 0xc, "5d4dc9c1bea681"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000cc340)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r13, r14}], 0x9, "3f0ba8522e1e23"})
recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800)
ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000))

3m10.768830616s ago: executing program 32 (id=623):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001cc0)={0x0, 0x0, "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", "0fee2f29052b1678cda11e0944139354689e2278f0df6a22d276fd76d88c1d92c87a6d2731e9d10d40dbb727b3823759c63cb5803bf5e98add5ee39ec0ec1fd8bfbc9cd06c10eb86e7f310ca8a5ac7e7f3304ca5e783eb960b1ffc527cec79f8b220af4a66e0da3a2e96a05467c3140b1de41f7484af0ce3421d349baf3a6fd8c2dca8d6c96fe661d60906ceaa7d69274f07ffbd5daa7db5f9ea62d32946dd22c93cc060d0366026f15e17914eea4143d1a8e4340319620ee351ad2a7c6c3bfff77b0acc0586f432c0c67bc443f2d25262c9ec5bfe08869f7ae00c9dd46fa62fed76a4cc659f37d9e296dfc86cd46e966fa46f7ac887b240da97ae637db38484902a1da3a5f775cf9c71b029ce09e61b7a21fc09c3029ad4f66896652aaf60491665c29a35c2c1ebe39a9a0f6d983b42da5138de7176840675ca2ba55aa2c526550657361ce23e6602012ea81cd836c132353e54be238d84856882cdd74dfb242c30adc010f8cd8b81ffc21ab218e531b6f3aeda57ef0b080e8779e4b2c93d20b34acac02038293f34102397d256bb0b2c6fefd52a65247f287b04ded21310d22d8717de970db1712572d63faffd93f72ff416a332bca0d35fb8717e9ecb3512c2c809e9fe5365a56ced19fe5941219c17fee3db9d7f23ccbad2eaf2ee947de59437c7e8bad571d16ce95d91f49184afe706be9afdf47dab8057dae80aa81b8ca4675ca8e476d5807825835d77b39c03c3dda9133814d318763be00b61c90eb2313fe95a9d68a8677496fd45c58c47eee2051299bfa1d0861879b3a2af5e337faffd36ecb7d02fd6ee95ed6f3c65cb28484e79a98cf64f7f8d3927c0f9744646af625f447fd59b5b26a472c6e16ba163c34ea89ea07b1b9f017e759aa6cfaaaeac231ae0c428fd4ce3c5af2c67ea23045d68ca05b50ac3069d18afe383f12e7bc8c9405be616eb0c7238468e389afa04027a2dfe6183a4bc9022c4522b28f64618de3e7d840df7ce69000dd841b2d753f7e23c8e980b37a7c2a188c839c81ae378bfd5ad4b83e0fad5c0a1947057bccdec93f42492378a6bbccebd86d8d1b44deba8668ed15e1b6e0a98e828d34cecec35899c60c24685b8d1254fffcab2b3937fceaaaf9a2c4793def1ff24fe331b707b1d9be763240823488133d1b46cbc346586d27738f67bb21cf8421f761ef5a2231e78fe746a110a6d9cf86b22c1e95c5265f11ea101c5ecf13d62f5c9e090c068ab6c22461aaa92c4bc0a9c7641b4b8c985e8de606267fe3a9c8ee333e21285ffe5028c56482e72160f6a09ce2d10780ab49fe7e8f371c508ccc0ccbbbab261b0061dfe7e739a7174f5061ddb33bf2634b03a3ef72f0e25bb533d776a115aac39c7b8956c8f150556e2e5bfa17fd38a9dc2a25cc6c14b6bb8e5385b1ff4d44753679400126f020875d99f74a8802ae95503718c3243a8b0dd920d6c846bc9e342024b994b71317a267b1687f3095fafb43e729bb327ecf2a6eb24a841eb4fca9163aa472ebdf80166c8e4edb97c18afa7420656bcd4f5740da6132863391ba33b2321cf6cb5a2fc0af7e14dc892aa9a0a80c75c754aea892ff1fa6f1ebec5ad3afc782a3375193c27d249c3bfd892c1005106098bee811e28c101d029bd3097bedb1fa78031e87f78ee3e3e426661c18235d2b95d861f1c08047ea76e9a5558c7835e2bdd3873fefe308cb940010162c4104a9dd41acfc116e7bce7887d978274dd4fdbb912ce0fa431ede34715bf07d054a77dbe6adcf9cb060f4da9c48330f368c8586689c8e98367c9bc4c4d709c1093c37b16fe7b7540bb68d70ea2842c638202d20fd60039d2a2e439957ab1e1c28180cfa642409b7a3353583acb5c5692f1cd0ba7ebcfae942fb35d715ccfc78a6610f5cb0fb7cec2075c5445754905429c67998d473fb143ca2debf91786074ca1b2f32e8723ac94f21fb499b47fe023a6e189a3fb03bcae7ff1c422d151447be4ab12567a09f72e27f647f7db490edf9c39692e9311caa05c93b63ce5f2961e9053579efbe30578ba0db55c380985e0fa3446236e908cb8006fa06858f7a8beb9a2ff2da324643b6126569ad1c2690e303290b77ead937d218432293d3660085dbbaf3d201009ab331520c6599abfedd2e0fdc6ecdcf309360fdd7ab93d8de5924fb04cd74ed0b544338477ffaf21a22e9241efb16ff06a46d9430bcdc9b8dd9ec0f9011dfcbc8d0f194e4af026eaa87b16ed5fbc48977e5ff3f5d70d55f919344d93cdf2568794cd8ad25245a4232f1f662364ce172da7617b05d46f5e9f09b4299add36f71c435037b156c3fac909973bfd6560024a27aa7a13bdf864341f964295b18feda9a7d32833b0719ce3a7252cdad04f7c6fbf1215afc3108af051e6f2f63d23081f71b384f6ef57892dba4060bf0c40f7edfc5908d64707d21306a857aa900ef7c07eb3708e5f2e0632a437e4d57447df4b368525e52e2c93c3bb143abe7f399dd6557ff1adf05ad4f43b27043be025a089f7ea715887271b1cf5bf8c3d83e509e5f887de7e78d012051143be2de8bfd64d0142fe748678617331edcb675cbe7286d8272e61c1a2503e952c797a0cd02da1ee7af3616409f8f73e4ff8d5573bb6139d8dac9dba5a3e4862e18db41d95dbdaee5d89d720c3e2b4b6f29a7d21e04358e9103989a7589cc2220b873870dd70cabe278acd2b07a4bc4a8a67e23fa6fb7c7d7b02b4de1a4ff625eca1e980803d82d95b31998f7f39274ab81bf7e9881d3f761c665a250d15cd8db87f803d7cd54be99e9e7e0e765ed5cf6c348e4730ed8be01c0ea18ac6e8f6bae731faa693caa6406f779360b0728216504a3a507d3e0d732ccd1cc0773b7260f47d685191043e32e8362e93e3f0f3848f7fa336c42b184304a0ce9090adfc172a05b0ac1471c1e6672847d77078d0bfb342ecd10c2411ae2798984549e170a3647e83e50952efa75c59589ff703599b51dbb69a1dd9d9d4039bbabafec9e5c91f4dbec1342ebf4aad6b2756f7e823dab292da8c6c66911e22e200d7cfe485e34934892e91d1ae9fc253455771117960e30589566d9afddad876d5be52f24d376177c69f873d79dc7170dac23313682b73806edbd707d24f632d83df33a26946b1dc80c500b5c5a0f2213bca83ac1f81b6525cb73599199c2150f5420940686d0a6a99ee497a15355a30cc99effb078cfc7de28a933d727968a22705fc941aa8422a1a8acdedfe2088dc912c4b688c5853ebba8c59b075f1b7df25861d10aa33e44f8ce42db227724bdae7d663a4b3a46ed496bea3d5f07557f68775dea21d07a389b733b0585a97d30cc7c5d90d9d84dd22fdbc83dfa76f980a4ab273eb3f80a08cbcdc3ba6d0c4465c23e2d61bbea4565cd1a3ca192647292be3f769fdfa6699df7a9a62b968d31c96697939421572aeb09148a017a9d5ce2414e8a7afa7a5d95d1259840f8878ce39dadfb649309d3036cf02559bdb06890e2a35007c764ab9289d04b7b1f62fd83b4e47c1e8595ce12efe6009599fd6da7bc9946745ce2b09efc33927ff584126ee7cfce6c58af2d4eda940e9c6f890380e0ee6e9e520f32ee6fd62c81616cdaa0232a73f23dfd3c33a13a2a80c631b86e3019e4219f545d7d3283761a49a149036ed9ce5f2e017677396bcd1b9924480ed65aebe595f9bd6697a298949155fecea5638e860b86d51deda3572becc8764efcd3e004b6e920146748fc1c11290a5c79d2da36670ce0043c3810753ead56414ecb48fd333e8aa0608e6158c008e6f7003537039bcaea985b187be74688f6cb5dcb25ba9e67af032969b9a90be052f26c30ceb004bf8818ff82f335de38c1488f4d9a89b134feaeef8033114e68871b165221d245628dc93b40a6b48d01811d9131e2b47cba2906a5d8f31b7f962291fd33ba5e0a6b131924531d324d930b7fbaccfee34fdec6a9b8c317e63a3690012d042fa511193749dc2d56a9a657afa2ee2654aa86a90af430014586ead553dc1ae854b619bac98338b5ed17a41bc648578f6dc4d60ea810161e037e6eeed744c8755a9c6e65c18b8f40e67fbc37e0114f053cd0309fb986c68a72270de5564f51c19a78da4c17dbcd2cd4036b2ca6fcb4dbb3e4d9a541d8c28f0332fc635b04ceb4f584277a2bc40c5acbc05015785f7e5e1f58e41603761b862e0190c3b9c337ab5c0f82dc49cedee197b42ff570f79d937f72a81eb853d6b33d503222ae8376acbf4663f69acbc91c21d585b0fb455a8ce1f188bf008562d17c3d31cedaf7a524c6141b97a5321b3fda7da8dc8863e077bea4d867f0f43ebc9405c9da76992da63181fd12e23399ee1cd59692d772a47d1be709bcabb11a1798760c93db64975a44ea3044bbfaea4096ef74487d1075515cb198da49b5b6db25d29bb67abe1815fbc674035d72b414ba72f7627fc8333703acaba1442161bbc247dc86e8133bc2f77acd6cc36ac0f11b3868c653866945f329dd27c95a6f43472db4b43005c6832ae1e6501c8b449faaac674472316faaaa9b7de4d0b376a4ef6d164ee42dc30ce42aefc933e11962a20aca0702b69717a012e8b2f0a107dafda8dd2a51eada77c9e68f9812f48be7387bfd9863fd4ebf99e274ee96fb5a3a64f1de7cb80b7a91908dcc63575b9deec8c2b6288a28c2dadf547bba9ace9bd4d8e66e0bcef4a4af37b3545070e07721f2724e8b1305e6b83fe2c6ebc1c1b3ccff6b4e2dbdedd4d65f51599775d701c0dc25879db17c967a1eb194695b61c3ed6c1675a6ea7a542fbf671cbbe36e18d41d7375a736358b07093ba54abd0635dbfae4a997739cdc62dc14b5e2eb104eb85568af8c39c639906d8e23d861036c0687f60dbc927e7ecdfc1ce496ab02005c6aeb397afc8795245800e09e602299580e099b3e893aa6ba4709013f7060046d14ab95066033230fdd14baa9400a7b9b89bff01056648831908a5ef09ecdddebde68d5841706c69e6ca38bd170e5738f2a34df589d22a24443c15c90b2a35615fac51746cc366999fa74a3dfe962e1bbe059867febb1c42eda6230c58979b03388f8ebef036c881421dfd21ca447a3a4823494ed0e99a2960e93e961b79aede5a2752c4963186ab6c7d8106a1ce8b88e0e0df4528556a15c8e2a49499b7691ae5b04e2fe0acae202c487cf1da0122abcd9d74dfc4063ebbc98f65e877e46e452a19187810a2819e859d5d151a40537e73e520c8ae0d1208e7a9dd2dfc34b4402f60c4e8add07cfdb7f94e73e5c61dd362ef6a1b42904ad90fadc143e11244743daf57c0af6cc71aa66f2aa4560d21bc6b4f1327d19abf62a7aaa817e0400fb86c3f27643a6bfba7b6b6da2185afe011519831d0599dd89f17042f3985cb5752e2b8179418a0cdd4cefc1b63"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000eeec0)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f00c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x8, "337ec8ad00ce6c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f10c0)={0xf6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r6}, {0x0, r8}], 0x8, "c703f6dbddf106"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000db980)={0xf35, [], 0x55, "67deeff43bd113"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000ca140)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ca340)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0xfc, "06ddd840716cec"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cb340)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r15=>0x0}], 0xc, "5d4dc9c1bea681"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000cc340)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r13, r14}], 0x9, "3f0ba8522e1e23"})
recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800)
ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000))

1.676378555s ago: executing program 3 (id=1755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0) (async)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
readv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}}, 0x10)

1.568565582s ago: executing program 2 (id=1757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406050000010000000000000a0000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x6c, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x613, 0x9, {{0x7, 0x4, 0x1, 0xd, 0x1c, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x7, 0x19, [@remote]}]}}}}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) (async)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000200)) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async, rerun: 64)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000040030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000204000000000000000000000000000000000000000000000400000000b600000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000040500000000000000000000000a000100000000000000000008002300f8ffffff48000100736861323536000000e4611054c3e8c700"/255], 0x140}}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000bd7000f7dbdf25220000000000004a033b7d4e10bb2276886c84d1197ca362c774c045fc81a0cde9aa6c55a005d32da0c4629048e7d10599be649b308265400b55c651b1ae40640899faabea22a025c9d77ff8017413a35526091c7d989478e8f49218aa2e7cad682dbd", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

1.507309424s ago: executing program 2 (id=1759):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x330)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = accept4(r3, &(0x7f0000000100)=@un=@abs, &(0x7f00000001c0)=0x80, 0x80000)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000200)={0x3, 0x0, 0xfffffffe, 0x621})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.057447675s ago: executing program 1 (id=1763):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0)

1.056710797s ago: executing program 2 (id=1764):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4048050}, 0x10)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0xa287, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)

1.010168286s ago: executing program 1 (id=1765):
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x800003}}, 0xffffffd7)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x48000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2402}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x1}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000088}, 0x4000000)

929.948485ms ago: executing program 2 (id=1766):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r5, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x4}}, 0x30) (async)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x10, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x40) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x3}}, 0xffffffffffffff00)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x48000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)
getsockname$inet(r2, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000)

880.015252ms ago: executing program 2 (id=1767):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom$inet6(r2, &(0x7f0000000100)=""/168, 0xa8, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x8001, @private1, 0x3}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x20, 0x40, 0x3, {0x7a, 0x0, 0x0, 0x0, 0x4100}, [@IFLA_LINKINFO={0xfffffffffffffd7f, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x40000000000084}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYBLOB="0000009794f29c2f5ebf0600000001007a58a50a9cafcd2575802a8b208e5ff11f"], 0x50}}, 0x4008850)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x25, 0x8000, 0x81, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044)

789.999878ms ago: executing program 3 (id=1768):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000046c2d903b4e1ce48ecf1beca43ed0e64fe1db7add3329454f8868097e8e13961751a2940c6e780842e50e719333e27a69990465527bdd33029139069c6fc5be5f0df53b2099b18746460a3e28dafad7203c1bad7a69cb5cae2a7e080838"], 0x50)
close(0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
socket$inet(0x2, 0x1, 0x0) (async, rerun: 64)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000000308000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000cb000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005e03000085000000d2000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x0, 0x0, 0x5, 0x7fff, 0x7]}, &(0x7f0000000200)=0x54)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40841) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000000000000000004b223b0000000000000000"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r4=>0x0}) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff3, 0xffff}, {0x6, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x20, 0x0, 0x0) (async, rerun: 32)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000000)={0x2, 0xffffffffffffff7f, 0x1}) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20)
socket$inet_sctp(0x2, 0x1, 0x84)

666.658641ms ago: executing program 1 (id=1769):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0xbec4, 0x7c, &(0x7f0000000180)=""/124, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x4, 0x1, 0x10, 0x3}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xf6, 0x9f, &(0x7f00000003c0)="5d047043aa24ebcff02900683334b807732ef41ca6605ecb86e7ed1f5f90198ef492aebe6a2e639b6fc49aae8f665fbed918cbf0011cd48c18aab88e6bca59760a9a40e21841678403f7ac030ee56c1595a0cc003af5cdd64e19f3d672d9ebdaacc7307e19a3d1c72af33145c07a68fd486ce1a451acc79089ff400e664394da32c791aae3f361fb3d8b54d499ece3a0f5b11f20f94363c56021b6bcb4325a63c09ab7cacae7208c0c74911e91d07dedf0080f7e5c099db6ce88cc390092a8d1786c79787d170b4e911d259f15f30ed261a89a062b0dbcbe6289a2a65dc3a1ffe5f2443d15793272ca8a35e53003af5fdea8aed4a4d2", &(0x7f00000004c0)=""/159, 0x1, 0x0, 0xe8, 0x20, &(0x7f0000000580)="e1b11c7313b00de3a2e4723bcddd1082471cf28794450c692e97bbd7954a1ea265e0eb2d014e669050bd3440ae606b3bc79cbe3a69f7db17f3bda585b9e37b642895c12090fee40b71438fdfee623cd5d1e3bfcbb51d084bf2867d4350bb65c665cb29e82c8047ad3df92a64425ab05d9fa5be17a0bc373e76aa644f8afa9313dbe2f1bf5ac61ca7377097e1a635068df33bda09846153d11742fa90044c8717daf5b3af80b41da12905a591150481588fbb2e7034ba26cbed3e22131bb4a9fb11791b8cde534a520a721802e337e845e28d09b81c5038c35c5ae4bda4a0ed604e0170ad1ca2c61b", &(0x7f0000000680)="6934023f2f6ac4ffa068a2e3e913796d5dbd10884a514d5d4f2a1210b27b17a1", 0x5, 0x0, 0x7fffffff}, 0x50) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

529.847407ms ago: executing program 1 (id=1770):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x1, 0xe, 0x9, 0x3, 0x81, 0x10000, 0x10000, 0x6233fac3}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028014000700000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x1, 0xe, 0x9, 0x3, 0x81, 0x10000, 0x10000, 0x6233fac3}}}}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028014000700000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)

435.04387ms ago: executing program 3 (id=1771):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000c74f4a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12)
writev(r3, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2cf43efec9672f8d433a1a2d1ac1ba483b3c377abd1c40900dd48e925c9f170621fba494945b9a6748709715dad1c5beb3783165516391072f540d5a656c99bee9a9af58e5041b58b21777bf6506f4fc22990d90b75b8f4acffea8a3caa7c291dc1b90291986a793eaa472736f5d52a2a3e6aecd3c3519699b1469e5ee3b434ac8cc30b3cda1a88664a50ce0e34f0a81d8454e8d79d76a832a88b86759fc04bc99f9fc2cf513ac0066a85c87dde365037ca2c4b44a7d521157f6799f942a5399fddd6ca6783ed0473c99460ed74f5a3f350dd3c87913b2d498943fb48d9db337d340530c4e6dc18be1673e171e6d0c13c5029edd475d5accc1adf1b9480a4ec4ed64dbb89d52135e3acc4ee6aae82fad39bc2b566c232a83228a841a0ddd0d0a423e000819954f174bc44112631f1d055baa2df0c2ac9a6092e7079b964ad217f7b3c0a9f294c36b341071a8ff6c9d2fcdd6bcd34c4741e3019bbd02d6184318b2955aca061fbe0f81f8428d5ef54fc54a8a0a53e09de2190fe95436ee38f", 0x17f}], 0x1) (async)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x40880) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r14, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000094) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x8e, 0x80, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10, 0x1, 0x9, 0xec21}})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r15, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0xb, 0x7, 0x8000, 0x1, 0x5, 0x10, 0xfe, 0x10, 0x5, 0x4af, 0x20200, 0x4, 0x1, 0x1, 0x45, [0x8, 0x40]}})

366.798285ms ago: executing program 1 (id=1772):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

309.945882ms ago: executing program 3 (id=1773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="89000000", @ANYRES16=r1, @ANYBLOB="01002301004034020000170000005c0006"], 0x70}}, 0x40000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2)
socket$inet(0x2, 0x4000000000000001, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_delroute={0x64, 0x19, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_LIM_HOPS={0x5, 0xd, 0xb}, @CGW_DST_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0xc}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0x3, 0xfffffffffffffff8, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0x7, 0x3, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1}, 0x2, 0x1, 0x0, 0x0, "c102af62acebc959"}, 0x4}}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x21}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802df7e30ac0a2cb7b9a30000faffc01b000000000095000083abef8540584cc2ed33ca861fe425d70e9d226ea30cd048186ef7653f2daf954c608585020c7863dacbce0b2900eb30fd63d501bb85750dcf5c5ea3daa2b61ff560c0cc7b0f4cd19e47f2012562cbdd987f006f19eec3b0269765efb1bd3020e81732f1f3b069c7fa0089b07d15e2e7"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0x6, 0xfffffff9}, 0x10)
write(r9, &(0x7f0000000240)="240000001e005f021dfffffffffffff8070000001d00000000000000080009000d000000", 0x24)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003c00010027bd7000fbdbdf2504001680f77c4048b35d42d3f41157"], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd01000000002b0000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a00020034000000000000001400"], 0x104}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

155.915728ms ago: executing program 1 (id=1774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000fedbdf250a140000fd13e4aa5d3600000800"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000)
unshare(0x400)
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000040)={0xc023, 0x1})
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r4, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e000000100000000000000040000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff0000000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000200"], 0x138}}, 0x0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="000001613a5b6321b318b2cec6a2b4c5ad92983cb7b4bbaa21314c5af1fb"])
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x2400c814)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

154.11542ms ago: executing program 3 (id=1775):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_MTU={0x8, 0x4, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
close(0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
getsockopt$inet6_mreq(r3, 0x29, 0x1, 0x0, &(0x7f0000003d40))
r4 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3ff}, 0x1c)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x200, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f00000003c0)="a687337ce816ca484e8bacdb1f07ba", 0xf, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
shutdown(r2, 0x1)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

918.871µs ago: executing program 2 (id=1776):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00b33b7cd7f67b8c4915e8f3df31a0aaae95cb5aff8d2c07392f409efb575e488f86cc2514fbf8b453149ae1863b4200367833ea3a05a66940734e58d0c46a34d56a9256fb62edf78d34caad329f64ed9ae79fc1b79bd1f5ca47c23704eb6515fcbd1409ea5cb35bb3000426de38cf5366a394fcab9969bba46f04306cb3da2eaafe2fd135617a1f355ad2dd915296a2434c310648c078dc55e71b", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

0s ago: executing program 3 (id=1777):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', <r1=>0x0})
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.0.590'.
[  239.605299][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  239.701772][ T8350] geneve3: entered promiscuous mode
[  239.721256][ T8350] geneve3: entered allmulticast mode
[  240.307892][ T8366] netlink: 'syz.0.592': attribute type 1 has an invalid length.
[  240.461216][ T8366] bond13: entered promiscuous mode
[  240.480142][ T8366] bond13: entered allmulticast mode
[  240.495363][ T8366] 8021q: adding VLAN 0 to HW filter on device bond13
[  240.969205][ T8370] lo speed is unknown, defaulting to 1000
[  242.005747][ T8388] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[  242.868242][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[  242.915929][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'.
[  243.048938][ T8407] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  243.979716][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  244.993498][ T8426] x_tables: duplicate underflow at hook 2
[  245.063951][ T8428] netlink: 52 bytes leftover after parsing attributes in process `syz.1.602'.
[  247.443925][ T8444] lo speed is unknown, defaulting to 1000
[  249.123937][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'.
[  249.492505][ T8487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.537954][ T8483] 8021q: adding VLAN 0 to HW filter on device bond12
[  250.208785][ T8483] bond12 (unregistering): Released all slaves
[  253.287312][ T8508] netlink: 'syz.1.619': attribute type 2 has an invalid length.
[  253.443102][ T8510] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[  253.505213][ T8512] pim6reg: entered allmulticast mode
[  253.726857][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  253.768589][ T8510] 8021q: adding VLAN 0 to HW filter on device bond14
[  253.841245][ T8517] vlan4: entered promiscuous mode
[  253.849836][ T8517] bond14: entered promiscuous mode
[  253.861158][ T8517] vlan4: entered allmulticast mode
[  253.868689][ T8517] bond14: entered allmulticast mode
[  253.989197][ T8520] bond14: (slave bridge0): making interface the new active one
[  253.999692][ T8520] bridge0: entered promiscuous mode
[  254.041630][ T8520] bridge0: entered allmulticast mode
[  254.066872][ T8520] bond14: (slave bridge0): Enslaving as an active interface with an up link
[  254.177038][ T8519] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  254.325381][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  254.377708][ T8519] bond12 (unregistering): Released all slaves
[  254.564246][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  254.611845][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'.
[  254.829197][ T8523] lo speed is unknown, defaulting to 1000
[  255.147984][ T8543] netlink: 'syz.1.626': attribute type 39 has an invalid length.
[  255.281703][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'.
[  255.639555][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  261.483389][ T8564] team0: left promiscuous mode
[  261.489536][ T8564] xfrm0: left promiscuous mode
[  266.337953][ T8564] vlan0: left promiscuous mode
[  266.339975][ T8564] veth0_vlan: left promiscuous mode
[  268.505246][ T8564] bond1: left promiscuous mode
[  268.863109][ T8564] bridge3: left promiscuous mode
[  269.480903][ T8564] bond7: left promiscuous mode
[  269.905927][ T8564] gre2: left promiscuous mode
[  270.117182][ T8564] ip6erspan0: left allmulticast mode
[  270.824513][ T8564] ip6gre1: left promiscuous mode
[  270.829494][ T8564] ip6gre1: left allmulticast mode
[  271.181224][ T8564] veth1: left promiscuous mode
[  271.185972][ T8564] bridge11: left promiscuous mode
[  271.188051][ T8564] bridge11: left allmulticast mode
[  271.554026][ T4980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.559535][ T4980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.563473][ T4980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.571508][ T4980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.578548][ T4980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.775089][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.850576][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.883365][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.889305][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.894058][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.699305][ T8564] vti0: left promiscuous mode
[  272.934474][ T8564] batadv0: left promiscuous mode
[  272.964206][ T8564] batadv0: left allmulticast mode
[  273.430380][ T5466] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0
[  273.442016][ T5466] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  273.462868][ T5466] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.482589][ T5466] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.503057][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.632'.
[  273.510318][ T5466] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.531100][ T5466] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.561943][ T5466] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.605111][ T5466] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.982474][ T8595] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  274.016547][   T54] Bluetooth: hci3: command tx timeout
[  274.137684][ T8597] netlink: 'syz.1.635': attribute type 83 has an invalid length.
[  274.503349][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  275.513867][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  275.532772][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  276.095337][   T54] Bluetooth: hci3: command tx timeout
[  276.139411][ T8575] lo speed is unknown, defaulting to 1000
[  276.219112][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'.
[  276.371655][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'.
[  276.610056][ T5466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.670781][ T5466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.738277][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'.
[  277.328691][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'.
[  277.386606][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[  277.553652][ T5466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.574476][ T5466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.175294][   T54] Bluetooth: hci3: command tx timeout
[  278.176619][ T5466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.206517][ T5466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.326849][ T8651] netlink: 264 bytes leftover after parsing attributes in process `syz.2.641'.
[  279.033214][ T5466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.038017][ T5466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.428645][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.643'.
[  280.245277][   T54] Bluetooth: hci3: command tx timeout
[  280.444040][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.648'.
[  280.817971][ T5466] pim6reg: left allmulticast mode
[  280.860439][ T5466] dvmrp0: left allmulticast mode
[  282.485416][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.728731][ T5466] bond12 (unregistering): (slave geneve2): Releasing active interface
[  290.561928][ T5466] bond8 (unregistering): (slave bridge4): Releasing backup interface
[  290.740170][ T8700] netlink: 244 bytes leftover after parsing attributes in process `syz.1.652'.
[  291.119860][ T5466] bond11 (unregistering): (slave bridge7): Releasing backup interface
[  291.126341][ T5466] bridge7 (unregistering): left promiscuous mode
[  291.134583][ T5466] bridge7 (unregistering): left allmulticast mode
[  291.593470][ T5466] bond0 (unregistering): Released all slaves
[  291.761330][ T5466] bond1 (unregistering): Released all slaves
[  291.928972][ T5466] bond2 (unregistering): Released all slaves
[  292.092091][ T5466] bond3 (unregistering): Released all slaves
[  292.278349][ T5466] bond4 (unregistering): Released all slaves
[  292.459621][ T5466] bond5 (unregistering): Released all slaves
[  292.658459][ T5466] bond6 (unregistering): Released all slaves
[  292.837368][ T5466] bond7 (unregistering): Released all slaves
[  293.047722][ T5466] bond8 (unregistering): Released all slaves
[  293.265251][ T5466] bond9 (unregistering): Released all slaves
[  293.464209][ T5466] bond10 (unregistering): Released all slaves
[  293.657278][ T5466] bond11 (unregistering): Released all slaves
[  294.000787][ T5466] bond12 (unregistering): Released all slaves
[  294.268066][ T5466] bond13 (unregistering): Released all slaves
[  294.307089][ T8688] : renamed from bond_slave_0
[  294.335189][ T5337] 8021q: adding VLAN 0 to HW filter on device eth1
[  294.341715][ T8699] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  295.104682][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'.
[  295.309753][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.316036][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.351415][ T8719] netlink: 'syz.1.654': attribute type 4 has an invalid length.
[  295.356140][ T8575] bridge_slave_0: entered allmulticast mode
[  295.393640][ T8575] bridge_slave_0: entered promiscuous mode
[  295.468215][ T5466] : left promiscuous mode
[  296.005663][ T8708] veth0: entered promiscuous mode
[  296.073472][ T8709] veth0: left promiscuous mode
[  296.956942][ T8716] .`: (slave bond_slave_1): Releasing backup interface
[  297.057833][ T8716] bond_slave_1 (unregistering): left promiscuous mode
[  299.094724][ T8726] bond15: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  299.733662][ T8726] bond15 (unregistering): Released all slaves
[  300.756014][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.760103][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.110468][ T8575] bridge_slave_1: entered allmulticast mode
[  301.207785][ T8575] bridge_slave_1: entered promiscuous mode
[  301.298217][ T5466] tipc: Disabling bearer <udp:syz2>
[  301.307581][ T5466] tipc: Left network mode
[  301.324767][ T5337] 8021q: adding VLAN 0 to HW filter on device eth2
[  301.586224][ T8737] netlink: 'syz.2.658': attribute type 1 has an invalid length.
[  302.445240][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'.
[  302.462661][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  302.490572][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.506572][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'.
[  302.544164][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.551807][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'.
[  302.701505][ T8752] macvlan2: entered allmulticast mode
[  302.715280][ T8752] gretap0: entered allmulticast mode
[  302.943260][ T8575] team0: Port device team_slave_0 added
[  303.278837][ T8575] team0: Port device team_slave_1 added
[  303.383819][ T5337] 8021q: adding VLAN 0 to HW filter on device eth3
[  303.637809][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.663894][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.697486][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.992471][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.994917][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.092591][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.933869][ T8775] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[  305.118770][ T8778] x_tables: ip_tables: osf match: only valid for protocol 6
[  305.175977][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'.
[  305.313571][ T8775] 8021q: adding VLAN 0 to HW filter on device bond12
[  305.417424][ T8575] hsr_slave_0: entered promiscuous mode
[  305.434962][ T8575] hsr_slave_1: entered promiscuous mode
[  305.441902][ T8788] netlink: 'syz.2.666': attribute type 2 has an invalid length.
[  305.453866][ T8575] debugfs: 'hsr0' already exists in 'hsr'
[  305.462996][ T8575] Cannot create hsr debugfs directory
[  305.578251][ T8788] : entered promiscuous mode
[  307.020282][ T8802] netlink: 'syz.2.668': attribute type 1 has an invalid length.
[  307.066698][ T5466] hsr_slave_0: left promiscuous mode
[  307.082534][ T5466] hsr_slave_1: left promiscuous mode
[  317.203616][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  319.004838][ T5337] 8021q: adding VLAN 0 to HW filter on device eth4
[  319.235878][ T8802] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  320.210746][ T8803] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  321.805681][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  329.115956][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'.
[  329.230952][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[  329.324064][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'.
[  329.360996][ T8842] 8021q: adding VLAN 0 to HW filter on device team0
[  329.364317][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'.
[  329.841870][ T8842] veth1_vlan: left promiscuous mode
[  329.869056][ T8842] veth0_vlan: entered promiscuous mode
[  329.891503][ T8842] veth1_vlan: entered promiscuous mode
[  329.965455][ T8842] veth1_macvtap: left promiscuous mode
[  329.977024][ T8842] veth0_macvtap: left promiscuous mode
[  329.993241][ T8842] veth0_macvtap: entered promiscuous mode
[  330.010523][ T8842] veth1_macvtap: entered promiscuous mode
[  330.094654][ T8842] 8021q: adding VLAN 0 to HW filter on device 
[  330.115260][ T8842] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  330.132672][ T8842] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  330.152146][ T8842] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  330.220797][ T8842] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.241351][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2
[  330.342719][ T8842] 8021q: adding VLAN 0 to HW filter on device bond3
[  330.496422][ T8842] 8021q: adding VLAN 0 to HW filter on device bond4
[  331.321876][ T8842] 8021q: adding VLAN 0 to HW filter on device bond5
[  331.376249][ T8842] 8021q: adding VLAN 0 to HW filter on device bond6
[  331.552098][ T8842] 8021q: adding VLAN 0 to HW filter on device bond7
[  331.865686][ T4980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.872660][ T4980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.883412][ T4980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.885153][ T8842] 8021q: adding VLAN 0 to HW filter on device bond8
[  331.904528][ T4980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.911737][ T4980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.010902][ T8842] 8021q: adding VLAN 0 to HW filter on device bond9
[  332.466575][ T8842] 8021q: adding VLAN 0 to HW filter on device bond10
[  332.919144][ T8842] 8021q: adding VLAN 0 to HW filter on device bond11
[  333.041052][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.066604][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.839741][ T8853] bond13 (unregistering): Released all slaves
[  334.005304][   T54] Bluetooth: hci2: command tx timeout
[  334.861053][   T12] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[  334.863935][   T12] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0
[  334.876037][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.887032][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.894657][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.909852][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.095198][   T54] Bluetooth: hci2: command tx timeout
[  336.850496][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.853385][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.180776][   T54] Bluetooth: hci2: command tx timeout
[  338.948980][ T8895] netlink: 'syz.2.681': attribute type 10 has an invalid length.
[  339.023828][ T8886] vxcan0: entered allmulticast mode
[  339.271588][ T8860] lo speed is unknown, defaulting to 1000
[  339.488403][ T5337] veth0_macvtap: left promiscuous mode
[  339.690060][ T8927] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  339.693736][ T8927] batman_adv: batadv0: Adding interface: gretap1
[  339.695944][ T8927] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.704092][ T8927] batman_adv: batadv0: Interface activated: gretap1
[  339.943282][ T8938] netlink: 'syz.1.687': attribute type 1 has an invalid length.
[  339.960431][ T5466] bridge_slave_1: left allmulticast mode
[  339.968782][ T5466] bridge_slave_1: left promiscuous mode
[  339.973822][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.980139][ T5466] bridge_slave_0: left allmulticast mode
[  339.982154][ T5466] bridge_slave_0: left promiscuous mode
[  339.984354][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.041683][ T5466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.051086][ T5466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.055495][ T5466] bond0 (unregistering): Released all slaves
[  340.126495][ T8938] 8021q: adding VLAN 0 to HW filter on device bond13
[  340.147358][ T8940] : renamed from dummy0 (while UP)
[  340.247065][   T54] Bluetooth: hci2: command tx timeout
[  340.277143][ T5466] hsr_slave_0: left promiscuous mode
[  340.281690][ T5466] hsr_slave_1: left promiscuous mode
[  340.289408][ T5466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.300449][ T5466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.337112][ T8945] sctp: [Deprecated]: syz.1.688 (pid 8945) Use of int in maxseg socket option.
[  340.337112][ T8945] Use struct sctp_assoc_value instead
[  340.465303][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'.
[  340.469865][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  341.042859][ T5466] team0 (unregistering): Port device team_slave_1 removed
[  341.062783][ T5466] team0 (unregistering): Port device team_slave_0 removed
[  341.376666][ T8946] veth3: entered promiscuous mode
[  341.584320][ T8949] bridge15: entered promiscuous mode
[  341.586933][ T8949] bridge15: entered allmulticast mode
[  341.590889][ T8949] team0: Device bridge15 is of different type
[  341.726502][ T8951] team0: Port device xfrm0 removed
[  341.744141][ T8951] batman_adv: batadv0: Interface deactivated: gretap1
[  341.747519][ T8951] batman_adv: batadv0: Removing interface: gretap1
[  341.912992][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.917686][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.922362][ T8860] bridge_slave_0: entered allmulticast mode
[  341.930333][ T8860] bridge_slave_0: entered promiscuous mode
[  341.939177][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.949515][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.956227][ T8860] bridge_slave_1: entered allmulticast mode
[  341.963333][ T8860] bridge_slave_1: entered promiscuous mode
[  342.041905][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.047586][ T8963] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  342.054297][ T8963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.691'.
[  342.082289][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.133049][ T8860] team0: Port device team_slave_0 added
[  342.138155][ T8860] team0: Port device team_slave_1 added
[  342.276357][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.285888][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.329646][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.363401][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.374527][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.429566][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.542531][ T8973] veth0_vlan: left promiscuous mode
[  342.548932][ T8973] vlan0: entered promiscuous mode
[  342.551251][ T8973] veth0_vlan: entered promiscuous mode
[  342.572848][ T8860] hsr_slave_0: entered promiscuous mode
[  342.579904][ T8860] hsr_slave_1: entered promiscuous mode
[  342.586219][ T8860] debugfs: 'hsr0' already exists in 'hsr'
[  342.596163][ T8860] Cannot create hsr debugfs directory
[  342.641099][ T5337] 8021q: adding VLAN 0 to HW filter on device eth5
[  342.645652][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  342.722379][ T8976] netlink: 68 bytes leftover after parsing attributes in process `syz.1.693'.
[  342.817997][ T8980] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  342.997965][ T8990] 8021q: VLANs not supported on gre0
[  343.056438][ T8993] netlink: zone id is out of range
[  343.060731][ T8993] netlink: zone id is out of range
[  343.062332][ T8993] netlink: zone id is out of range
[  343.069329][ T8993] netlink: zone id is out of range
[  343.071495][ T8993] netlink: zone id is out of range
[  343.075166][ T8993] netlink: zone id is out of range
[  343.079082][ T8993] netlink: zone id is out of range
[  343.082515][ T8993] netlink: zone id is out of range
[  343.084154][ T8993] netlink: zone id is out of range
[  343.089883][ T8993] netlink: zone id is out of range
[  343.152976][ T8998] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  343.171813][ T8998] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  343.180438][ T9000] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  343.229243][  T802] lo speed is unknown, defaulting to 1000
[  343.586990][ T8998] gretap0: left allmulticast mode
[  343.611769][  T802] lo speed is unknown, defaulting to 1000
[  343.703687][ T9012] syzkaller1: entered promiscuous mode
[  343.706385][ T9012] syzkaller1: entered allmulticast mode
[  344.009190][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.701'.
[  344.058625][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'.
[  344.287219][ T8860] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  344.300492][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  344.306928][ T8860] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  344.327536][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  344.336523][ T8860] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  344.352476][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  344.366671][ T8860] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  344.387801][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  344.432234][ T9048] netlink: 'syz.1.702': attribute type 4 has an invalid length.
[  344.443024][ T9048] netlink: 152 bytes leftover after parsing attributes in process `syz.1.702'.
[  344.513783][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.536195][ T8860] 8021q: adding VLAN 0 to HW filter on device team0
[  344.543847][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.546201][ T8400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.553501][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.555816][ T8400] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.902927][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.915744][ T9082] netlink: 'syz.2.703': attribute type 4 has an invalid length.
[  344.928027][ T9082] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  345.034729][ T8860] veth0_vlan: entered promiscuous mode
[  345.077523][ T8860] veth1_vlan: entered promiscuous mode
[  345.140586][ T8860] veth0_macvtap: entered promiscuous mode
[  345.150616][ T8860] veth1_macvtap: entered promiscuous mode
[  345.177518][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.202530][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.260112][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.268860][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.298563][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.311631][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.402288][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.423264][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.530211][ T9097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'.
[  345.542808][ T8400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.551945][ T8400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.631541][ T9097] ip6tnl2: entered allmulticast mode
[  345.993765][ T9109] bond1 (unregistering): Released all slaves
[  346.380231][ T9117] 8021q: adding VLAN 0 to HW filter on device bond1
[  346.384412][ T9117] bridge0: port 3(bond1) entered blocking state
[  346.388597][ T9117] bridge0: port 3(bond1) entered disabled state
[  346.390756][ T9117] bond1: entered allmulticast mode
[  346.393621][ T9117] bond1: entered promiscuous mode
[  346.397502][ T9117] bridge0: port 3(bond1) entered blocking state
[  346.401233][ T9117] bridge0: port 3(bond1) entered forwarding state
[  346.521924][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'.
[  346.547009][ T9132] netlink: 'syz.1.712': attribute type 32 has an invalid length.
[  346.553371][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  346.619511][ T9132] bond14: option coupled_control: invalid value (16)
[  346.627478][ T9132] bond14 (unregistering): Released all slaves
[  346.669752][ T9138] netlink: 'syz.3.713': attribute type 2 has an invalid length.
[  346.781839][ T8400] bridge0: port 3(bond1) entered disabled state
[  346.826940][ T9138] Cannot find set identified by id 0 to match
[  347.343600][ T9168] gretap0: entered promiscuous mode
[  347.346846][ T9168] macsec1: entered allmulticast mode
[  347.349062][ T9168] gretap0: entered allmulticast mode
[  347.364898][ T9168] gretap0: left allmulticast mode
[  347.373908][ T9168] gretap0: left promiscuous mode
[  347.458644][ T9173] lo: entered allmulticast mode
[  347.470633][ T9173] lo: left allmulticast mode
[  347.570840][ T9178] batadv_slave_1: entered promiscuous mode
[  347.576366][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  347.627023][ T9180] veth5: entered allmulticast mode
[  347.633536][ T9175] lo speed is unknown, defaulting to 1000
[  347.701925][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'.
[  347.716525][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'.
[  347.761824][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.854045][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.922564][ T9182] lo speed is unknown, defaulting to 1000
[  347.944460][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.970384][ T9190] netlink: 144 bytes leftover after parsing attributes in process `syz.3.727'.
[  348.552512][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[  348.558499][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'.
[  348.741667][ T9222] ieee802154 phy0 wpan0: encryption failed: -22
[  348.779463][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'.
[  348.793388][ T9222] ip6tnl3: entered allmulticast mode
[  348.814535][ T6883] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  348.854527][ T9226] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  349.271807][ T9236] team0: Port device team_slave_0 removed
[  349.379429][ T9242] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  349.514249][ T9247] veth3: entered promiscuous mode
[  349.622235][ T9251] netlink: 'syz.3.743': attribute type 11 has an invalid length.
[  350.182433][ T9277] macvlan0: entered promiscuous mode
[  350.187850][ T9277] macvlan0: entered allmulticast mode
[  350.199430][ T9282] net_ratelimit: 28 callbacks suppressed
[  350.199444][ T9282] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  350.567733][ T9295] xt_CT: You must specify a L4 protocol and not use inversions on it
[  350.583342][ T9294] bond16: Removing last ns target with arp_interval on
[  350.694801][ T9307] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[  350.713673][ T9307] __nla_validate_parse: 17 callbacks suppressed
[  350.713683][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'.
[  350.839394][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  350.847758][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'.
[  350.857074][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  350.866817][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'.
[  351.016258][ T9321] netlink: 'syz.3.759': attribute type 1 has an invalid length.
[  351.023607][ T9320] bridge16: entered promiscuous mode
[  351.027502][ T9320] bridge16: entered allmulticast mode
[  351.031070][ T9320] team0: Port device bridge16 added
[  351.052453][ T9320] bridge0: port 1(team0) entered blocking state
[  351.057261][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'.
[  351.058010][ T9320] bridge0: port 1(team0) entered disabled state
[  351.066456][ T9320] team0: entered allmulticast mode
[  351.170557][ T9328] veth0: entered promiscuous mode
[  351.280083][ T9325] veth0: left promiscuous mode
[  351.291246][ T9330] TC_ACT_REPEAT abuse ?
[  351.372746][ T9334] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[  351.576371][ T9334] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  351.828813][ T5466] nci: nci_rx_work: unknown MT 0x6
[  351.846877][ T9367] netlink: 'syz.2.769': attribute type 4 has an invalid length.
[  351.862236][ T9367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.769'.
[  351.868484][ T9366] Cannot find add_set index 2 as target
[  351.874915][ T9367] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  351.924344][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'.
[  351.946751][ T9370] veth5: entered allmulticast mode
[  352.725546][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  354.741790][ T9361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  354.896179][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'.
[  354.949275][ T9391] netlink: 'syz.3.774': attribute type 9 has an invalid length.
[  355.006955][ T9393] ipip0: entered promiscuous mode
[  355.111736][ T9400] syzkaller0: entered promiscuous mode
[  355.114131][ T9400] syzkaller0: entered allmulticast mode
[  355.141003][ T9400] lo speed is unknown, defaulting to 1000
[  355.321074][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'.
[  355.372648][ T9400] tipc: Started in network mode
[  355.374565][ T9400] tipc: Node identity 528451c5d6aa, cluster identity 4711
[  355.377859][ T9400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.383971][ T9399] tipc: Resetting bearer <eth:syzkaller0>
[  355.403455][ T9399] tipc: Disabling bearer <eth:syzkaller0>
[  355.746353][ T9424] can: request_module (can-proto-3) failed.
[  356.058247][ T9452] __nla_validate_parse: 4 callbacks suppressed
[  356.058256][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'.
[  356.079761][ T9450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.094816][ T9451] syzkaller0: entered promiscuous mode
[  356.107317][ T9451] syzkaller0: entered allmulticast mode
[  356.146116][ T9458] vlan1: entered promiscuous mode
[  356.147910][ T9458] bridge0: entered promiscuous mode
[  356.149727][ T9458] team0: entered promiscuous mode
[  356.192045][ T9451] tipc: Resetting bearer <eth:syzkaller0>
[  356.531779][ T9451] tipc: Disabling bearer <eth:syzkaller0>
[  356.650805][ T9471] dvmrp0: entered allmulticast mode
[  356.663669][ T9471] netlink: 140 bytes leftover after parsing attributes in process `syz.2.791'.
[  356.674218][ T9471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.791'.
[  356.962551][ T9482] lo speed is unknown, defaulting to 1000
[  357.050862][ T9492] syzkaller0: entered promiscuous mode
[  357.053323][ T9492] syzkaller0: entered allmulticast mode
[  357.072226][ T9492] bond14: option arp_all_targets: invalid value (3)
[  357.075964][ T9492] bond14 (unregistering): Released all slaves
[  357.114563][ T9494] xfrm1: entered allmulticast mode
[  357.330274][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'.
[  357.429873][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'.
[  357.493737][ T9510] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  357.543048][ T9510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  357.702827][ T9520] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  361.205397][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  367.873229][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'.
[  368.132366][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[  368.396224][ T9551] netlink: 312 bytes leftover after parsing attributes in process `syz.1.809'.
[  368.718131][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'.
[  368.726048][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'.
[  368.802096][ T9570] netlink: 'syz.3.815': attribute type 1 has an invalid length.
[  368.854494][ T9570] bond2: entered promiscuous mode
[  368.860854][ T9570] bond2: entered allmulticast mode
[  368.863399][ T9570] 8021q: adding VLAN 0 to HW filter on device bond2
[  368.892895][ T9580] erspan2: entered allmulticast mode
[  368.901799][ T9580] bond2: (slave erspan2): making interface the new active one
[  368.905752][ T9580] erspan2: entered promiscuous mode
[  368.914019][ T9580] bond2: (slave erspan2): Enslaving as an active interface with an up link
[  369.188788][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'.
[  369.256374][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'.
[  369.260778][ T9595] mac80211_hwsim hwsim20 : renamed from wlan0 (while UP)
[  369.401553][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'.
[  369.410742][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'.
[  370.012691][ T9629] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  370.039259][ T9629] netlink: 'syz.2.830': attribute type 12 has an invalid length.
[  370.079625][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.083133][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.235875][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.256631][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.320549][ T9642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.831'.
[  370.437899][ T5647] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.442063][ T5647] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.451778][ T5647] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.470088][ T5647] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.049724][ T8400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.058039][ T8400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.080631][ T9660] dvmrp8: left allmulticast mode
[  371.101497][ T8400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.111963][ T8400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.382316][ T9672] ip6tnl3: entered allmulticast mode
[  371.435103][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv1
[  371.453760][ T9672] netlink: 'syz.1.842': attribute type 83 has an invalid length.
[  371.904694][ T9697] IPv6: NLM_F_CREATE should be specified when creating new route
[  372.000466][ T9702] syzkaller1: entered promiscuous mode
[  372.002878][ T9702] syzkaller1: entered allmulticast mode
[  372.212997][ T9705] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[  372.233897][ T9705] bond14: option mode: invalid value (68)
[  372.242739][ T9705] bond14 (unregistering): Released all slaves
[  372.513988][ T9711] lo speed is unknown, defaulting to 1000
[  373.102944][ T9736] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  373.411167][ T9756] __nla_validate_parse: 12 callbacks suppressed
[  373.411184][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'.
[  373.456193][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  373.634166][ T9759] netlink: 56 bytes leftover after parsing attributes in process `syz.1.862'.
[  373.641330][ T9759] netlink: 'syz.1.862': attribute type 1 has an invalid length.
[  373.792541][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'.
[  373.833674][ T9772] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  373.841429][ T9772] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  373.987263][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.867'.
[  374.048147][ T9784] netlink: 'syz.2.866': attribute type 39 has an invalid length.
[  374.067847][ T9785] netlink: 'syz.3.867': attribute type 30 has an invalid length.
[  374.125730][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.867'.
[  374.283619][ T9793] netlink: 'syz.3.869': attribute type 11 has an invalid length.
[  374.389186][ T9795] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  374.415848][ T9795] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  374.596535][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'.
[  374.601145][ T9808] 8021q: adding VLAN 0 to HW filter on device bond18
[  374.792699][ T9821] pimreg: entered allmulticast mode
[  374.932698][ T9828] netlink: Conntrack attr has 1 unknown bytes
[  374.938343][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.949459][ T9828] netlink: 'syz.3.879': attribute type 12 has an invalid length.
[  374.962535][ T9828] netlink: 'syz.3.879': attribute type 1 has an invalid length.
[  375.342676][ T9849] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.883'.
[  375.371816][ T9853] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  375.380883][ T9853] geneve2: entered promiscuous mode
[  375.383932][ T6544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.395327][ T6544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.400800][ T6544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.408878][ T6544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.488813][ T9859] netlink: 'syz.3.887': attribute type 1 has an invalid length.
[  375.556836][ T9859] 8021q: adding VLAN 0 to HW filter on device bond3
[  375.634034][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'.
[  375.638468][ T9854] netlink: 'syz.2.885': attribute type 49 has an invalid length.
[  375.646230][ T9859] bond3: (slave geneve3): making interface the new active one
[  375.651087][ T9859] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  375.775836][ T9854] ip6gretap0: entered promiscuous mode
[  375.780978][ T9854] ip6gretap0: entered allmulticast mode
[  375.832401][ T9872] bond14 (unregistering): Released all slaves
[  376.075193][ T9889] netlink: 'syz.3.892': attribute type 1 has an invalid length.
[  376.103962][ T9902] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  376.194688][ T9902] 8021q: adding VLAN 0 to HW filter on device bond14
[  376.342872][ T9920] bond0: (slave ip6tnl0): refused to change device type
[  376.353404][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[  376.383886][ T9920] ip6erspan1: entered allmulticast mode
[  376.492471][ T9924] bond4 (unregistering): Released all slaves
[  376.799962][ T9942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.489886][ T9964] bridge0: port 4(syz_tun) entered blocking state
[  377.498590][ T9964] bridge0: port 4(syz_tun) entered disabled state
[  377.501577][ T9964] syz_tun: entered allmulticast mode
[  377.507326][ T9964] syz_tun: entered promiscuous mode
[  377.847592][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  378.179468][ T9998] pim6reg: entered allmulticast mode
[  378.232422][T10006] bridge18: entered promiscuous mode
[  378.236687][T10006] bridge18: entered allmulticast mode
[  378.244582][T10006] team0: Port device bridge18 added
[  378.693709][T10016] __nla_validate_parse: 7 callbacks suppressed
[  378.693722][T10016] netlink: 172 bytes leftover after parsing attributes in process `syz.3.920'.
[  378.706414][T10017] netlink: 428 bytes leftover after parsing attributes in process `syz.3.920'.
[  378.710295][T10016] netlink: 116 bytes leftover after parsing attributes in process `syz.3.920'.
[  378.714092][T10017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.920'.
[  378.791934][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'.
[  379.223968][T10034] netlink: 'syz.3.925': attribute type 10 has an invalid length.
[  379.237348][T10034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.290655][T10029] netlink: 'syz.2.924': attribute type 15 has an invalid length.
[  379.300172][T10029] netlink: 'syz.2.924': attribute type 7 has an invalid length.
[  379.310080][T10029] netlink: 52 bytes leftover after parsing attributes in process `syz.2.924'.
[  379.324675][T10029] Bluetooth: MGMT ver 1.23
[  379.394062][T10029] bond19: option updelay: invalid value (18446744073709518847)
[  379.402232][T10029] bond19: option updelay: allowed values 0 - 2147483647
[  379.496489][T10029] bond19 (unregistering): Released all slaves
[  381.156885][T10067] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.159436][T10060] bridge19: entered promiscuous mode
[  381.162203][T10060] bridge19: entered allmulticast mode
[  381.189641][T10060] team0: Port device bridge19 added
[  381.220362][T10060] netlink: 244 bytes leftover after parsing attributes in process `syz.1.931'.
[  381.379739][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'.
[  381.408614][T10072] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  381.422259][T10072] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[  381.493193][T10072] 8021q: adding VLAN 0 to HW filter on device bond15
[  381.539502][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'.
[  381.542704][T10080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'.
[  381.657015][ T5651] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.725933][ T5651] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.882991][T10095] bond16 (unregistering): Released all slaves
[  381.995399][ T5651] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  382.027811][T10101] bond16: option miimon: invalid value (18446744073709551615)
[  382.031319][T10101] bond16: option miimon: allowed values 0 - 2147483647
[  382.037422][T10101] bond16 (unregistering): Released all slaves
[  382.073869][T10104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  382.079212][T10104] batman_adv: batadv0: Adding interface: gretap1
[  382.081983][T10104] batman_adv: batadv0: Interface activated: gretap1
[  382.277403][T10115] 8021q: adding VLAN 0 to HW filter on device bond4
[  382.279906][T10108] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  382.441874][T10125] veth1_to_bond: entered allmulticast mode
[  382.488095][T10124] veth1_to_bond: left allmulticast mode
[  382.644563][T10136] syzkaller1: tun_chr_ioctl cmd 1074025677
[  382.648652][T10136] syzkaller1: linktype set to 1
[  382.692134][T10141] netlink: 'syz.1.954': attribute type 10 has an invalid length.
[  382.700401][T10142] netlink: 'syz.1.954': attribute type 10 has an invalid length.
[  384.606959][T10173] syz_tun: left allmulticast mode
[  384.620601][T10173] syz_tun: left promiscuous mode
[  384.624356][T10173] bridge0: port 4(syz_tun) entered disabled state
[  384.649193][T10173] bridge_slave_0: left allmulticast mode
[  384.656890][T10173] bridge_slave_0: left promiscuous mode
[  384.661590][T10173] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.682937][T10173] bridge_slave_1: left allmulticast mode
[  384.685593][T10173] bridge_slave_1: left promiscuous mode
[  384.688321][T10173] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.699368][T10173] bond0: (slave bond_slave_0): Releasing backup interface
[  384.705059][T10173] bond0: (slave bond_slave_1): Releasing backup interface
[  384.710884][T10173] team0: Port device team_slave_1 removed
[  384.713787][T10173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.717808][T10173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.720530][T10173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  384.727759][T10182] team0: Port device xfrm0 added
[  384.790960][T10188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  384.801649][T10188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  384.847847][T10192] __nla_validate_parse: 8 callbacks suppressed
[  384.847857][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'.
[  384.907811][T10203] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20003
[  385.108117][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'.
[  385.234845][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'.
[  385.238825][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'.
[  385.242094][T10213] netlink: 'syz.3.971': attribute type 12 has an invalid length.
[  385.244532][T10213] netlink: 'syz.3.971': attribute type 11 has an invalid length.
[  385.288339][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'.
[  385.346342][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.973'.
[  385.474116][T10225] netlink: 'syz.3.975': attribute type 12 has an invalid length.
[  385.927929][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[  385.931545][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'.
[  385.987872][T10265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.987'.
[  386.084832][T10272] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  386.100905][T10267] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  386.119100][T10272] team0: Device xfrm0 is of different type
[  386.130899][T10273] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  386.133838][T10272] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  386.393451][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'.
[  386.531248][T10294] netlink: 'syz.1.993': attribute type 1 has an invalid length.
[  386.554472][T10294] bond17: (slave bridge20): making interface the new active one
[  386.567568][T10294] bond17: (slave bridge20): Enslaving as an active interface with an up link
[  386.637775][T10304] bridge0: port 2(vlan1) entered blocking state
[  386.640615][T10304] bridge0: port 2(vlan1) entered disabled state
[  386.643018][T10304] vlan1: entered allmulticast mode
[  386.644851][T10304] geneve0: entered allmulticast mode
[  386.651952][T10304] vlan1: entered promiscuous mode
[  386.654310][T10304] geneve0: entered promiscuous mode
[  386.659986][T10303] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  386.665631][T10303] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  386.760236][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.810606][T10307] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  386.992507][T10315] netlink: 'syz.3.999': attribute type 1 has an invalid length.
[  386.992932][T10313] geneve4: entered promiscuous mode
[  387.040831][T10315] gretap1: entered allmulticast mode
[  387.071770][T10315] bond5: (slave gretap1): making interface the new active one
[  387.090082][T10315] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  387.257980][T10323] 8021q: adding VLAN 0 to HW filter on device bond20
[  387.268727][T10323] 8021q: adding VLAN 0 to HW filter on device bond20
[  387.271908][T10323] bond20: (slave nlmon0): The slave device specified does not support setting the MAC address
[  387.277229][T10323] bond20: (slave nlmon0): Error -95 calling set_mac_address
[  387.283140][T10323] bond20: entered promiscuous mode
[  387.285837][T10323] bond20: entered allmulticast mode
[  387.403460][T10329] netlink: 'syz.3.1003': attribute type 4 has an invalid length.
[  387.411615][T10329] .`: renamed from bond0
[  387.712359][T10349] netlink: 'syz.1.1008': attribute type 19 has an invalid length.
[  388.229539][T10370] xt_hashlimit: size too large, truncated to 1048576
[  388.437267][T10376] macsec1: entered promiscuous mode
[  389.483725][T10395] syzkaller1: entered promiscuous mode
[  389.490451][T10395] syzkaller1: entered allmulticast mode
[  389.530969][T10393] hsr_slave_0: left promiscuous mode
[  389.534116][T10393] hsr_slave_1: left promiscuous mode
[  389.784715][T10403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  390.039350][T10414] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  390.081366][T10416] bond1: left promiscuous mode
[  390.390028][T10419] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  390.446055][T10391] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  390.467894][T10420] __nla_validate_parse: 6 callbacks suppressed
[  390.467914][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1025'.
[  390.516557][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'.
[  390.529536][T10420] ipt_REJECT: ECHOREPLY no longer supported.
[  390.545957][T10422] sctp: [Deprecated]: syz.3.1026 (pid 10422) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.545957][T10422] Use struct sctp_sack_info instead
[  390.574106][T10425] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  390.673660][T10425] bond21: entered promiscuous mode
[  390.676992][T10425] 8021q: adding VLAN 0 to HW filter on device bond21
[  390.682745][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  390.703122][T10429] bridge1: entered promiscuous mode
[  390.706031][T10429] bridge1: entered allmulticast mode
[  390.728757][T10425] 8021q: adding VLAN 0 to HW filter on device bond21
[  390.732024][T10425] bond21: (slave xfrm2): The slave device specified does not support setting the MAC address
[  390.737403][T10425] bond21: (slave xfrm2): Setting fail_over_mac to active for active-backup mode
[  390.747691][T10425] bond21: (slave xfrm2): making interface the new active one
[  390.750725][T10425] xfrm2: entered promiscuous mode
[  390.755812][T10425] xfrm2: left promiscuous mode
[  390.766325][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1029'.
[  390.772512][T10432] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1028'.
[  390.840700][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  390.982055][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  391.031415][T10443] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  391.042477][T10444] team0: Device xfrm0 is of different type
[  391.123128][T10447] geneve0: entered promiscuous mode
[  391.128193][T10447] macvlan3: entered promiscuous mode
[  391.139884][T10447] batadv1: entered promiscuous mode
[  391.142112][T10447] batadv1: entered allmulticast mode
[  391.145941][T10447] 8021q: adding VLAN 0 to HW filter on device batadv1
[  391.219797][T10455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.293778][T10450] batman_adv: batadv0: Interface deactivated: gretap1
[  391.308492][T10450] geneve0: left promiscuous mode
[  391.412754][T10458] bond22 (unregistering): Released all slaves
[  391.683810][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[  391.885696][T10493] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  392.053552][T10494] gretap2: entered allmulticast mode
[  392.062352][T10494] bond22: (slave gretap2): making interface the new active one
[  392.069303][T10494] bond22: (slave gretap2): Enslaving as an active interface with an up link
[  392.135489][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'.
[  392.152544][T10506] sit2: entered promiscuous mode
[  392.218914][T10509] 8021q: adding VLAN 0 to HW filter on device bond23
[  392.221557][T10509] bridge0: port 3(bond23) entered blocking state
[  392.224266][T10509] bridge0: port 3(bond23) entered disabled state
[  392.227838][T10509] bond23: entered allmulticast mode
[  392.231545][T10509] bond23: entered promiscuous mode
[  392.233817][T10509] bridge0: port 3(bond23) entered blocking state
[  392.236011][T10509] bridge0: port 3(bond23) entered forwarding state
[  392.240099][ T7235] bridge0: port 3(bond23) entered disabled state
[  392.359860][T10515] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  392.363168][T10515] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  392.409146][T10520] netlink: 'syz.3.1048': attribute type 9 has an invalid length.
[  392.460293][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'.
[  392.650712][T10528] netlink: 'syz.2.1051': attribute type 1 has an invalid length.
[  392.714974][T10528] bond20: entered promiscuous mode
[  392.738377][T10528] 8021q: adding VLAN 0 to HW filter on device bond20
[  392.787212][T10533] bond20: (slave bridge45): making interface the new active one
[  392.791469][T10533] bridge45: entered promiscuous mode
[  392.795054][T10533] bond20: (slave bridge45): Enslaving as an active interface with an up link
[  392.813538][T10535] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534
[  392.970008][T10543] syzkaller0: entered promiscuous mode
[  392.972450][T10543] syzkaller0: entered allmulticast mode
[  393.022713][T10543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.032420][T10543] netlink: 'syz.2.1053': attribute type 18 has an invalid length.
[  393.063480][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 4352 - 0
[  393.071530][T10543] netlink: 'syz.2.1053': attribute type 18 has an invalid length.
[  393.075102][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 4352 - 0
[  393.090744][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 4352 - 0
[  393.101537][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 4352 - 0
[  393.186756][T10541] tipc: Resetting bearer <eth:syzkaller0>
[  393.365643][T10541] tipc: Disabling bearer <eth:syzkaller0>
[  393.373368][T10552] bridge0: port 1(team0) entered disabled state
[  393.379230][T10556] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  393.380470][T10552] team0: Cannot enslave team device to itself
[  393.461943][T10556] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.483254][T10555] veth5: entered allmulticast mode
[  393.492195][T10555] bond0: (slave veth5): Enslaving as an active interface with a down link
[  393.502372][T10556] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  393.513869][T10555] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  393.558895][T10562] bridge46: entered allmulticast mode
[  393.725566][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.824068][T10583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  394.327027][T10616] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  394.450220][T10632] openvswitch: ovs-system: Dropping previously announced user features
[  394.454357][T10633] openvswitch: ovs-system: Dropping previously announced user features
[  394.589291][T10637] netlink: 'syz.3.1068': attribute type 1 has an invalid length.
[  394.685735][T10637] bond6: entered promiscuous mode
[  394.698160][T10637] 8021q: adding VLAN 0 to HW filter on device bond6
[  394.739000][T10659] ipvlan2: entered promiscuous mode
[  394.759656][T10659] team0: Device ipvlan2 failed to register rx_handler
[  395.423849][T10677] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.552616][T10687] bond25: entered promiscuous mode
[  395.559384][T10687] bond25: entered allmulticast mode
[  395.717452][T10701] gretap0: entered promiscuous mode
[  395.724209][T10701] macsec1: entered allmulticast mode
[  395.730866][T10701] gretap0: entered allmulticast mode
[  395.742244][T10701] gretap0: left allmulticast mode
[  395.752578][T10701] gretap0: left promiscuous mode
[  395.799862][T10706] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  395.859901][T10706] 8021q: adding VLAN 0 to HW filter on device bond21
[  395.949378][ T5337] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  395.962254][T10709] bond21: (slave geneve7): making interface the new active one
[  395.967151][T10709] bond21: (slave geneve7): Enslaving as an active interface with an up link
[  395.983829][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.031860][T10706] bond22: entered promiscuous mode
[  396.034536][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.040984][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.059255][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.060809][T10721] __nla_validate_parse: 14 callbacks suppressed
[  396.060821][T10721] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1086'.
[  396.081327][T10711] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1084'.
[  396.089117][T10721] gretap0: entered promiscuous mode
[  396.116489][T10721] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1086'.
[  396.124533][T10721] 0{X: renamed from gretap0
[  396.144423][T10721] 0{X: left promiscuous mode
[  396.146770][T10721] 0{X: entered allmulticast mode
[  396.169689][T10721] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  396.232102][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'.
[  396.276074][T10729] bond23: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  396.284356][T10729] bond23 (unregistering): Released all slaves
[  396.371738][T10735] vlan3: entered promiscuous mode
[  396.373914][T10735] batadv0: entered promiscuous mode
[  396.424274][T10738] netlink: 'syz.1.1091': attribute type 3 has an invalid length.
[  396.427895][T10738] netlink: 'syz.1.1091': attribute type 1 has an invalid length.
[  396.431154][T10738] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1091'.
[  396.578838][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1092'.
[  396.587793][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1092'.
[  396.679554][T10753] netlink: 'syz.3.1094': attribute type 1 has an invalid length.
[  396.682158][T10753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1094'.
[  396.727660][T10750] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1093'.
[  396.793396][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  397.022626][T10765] bond7 (unregistering): Released all slaves
[  397.248253][T10784] erspan0: entered promiscuous mode
[  397.252496][T10784] erspan0: entered allmulticast mode
[  397.588546][T10791] netlink: 'syz.1.1103': attribute type 2 has an invalid length.
[  397.880792][T10799] bond7: entered allmulticast mode
[  397.897963][T10801] macvlan2: entered promiscuous mode
[  397.902545][T10801] macvlan2: entered allmulticast mode
[  397.910608][T10801] bond7: entered promiscuous mode
[  397.916884][T10801] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  397.933628][T10801] bond7: left promiscuous mode
[  398.534964][T10822] bridge0: port 1(vlan6) entered blocking state
[  398.538505][T10822] bridge0: port 1(vlan6) entered disabled state
[  398.541839][T10822] vlan6: entered allmulticast mode
[  398.548023][T10822] vlan6: left allmulticast mode
[  400.464293][T10790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.597254][T10824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.604343][T10827] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  400.653037][T10827] bond23: (slave veth9): Enslaving as an active interface with a down link
[  400.666555][T10827] bond23: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  401.123099][T10864] batman_adv: batadv0: Adding interface: ip6gretap3
[  401.127187][T10864] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active
[  401.165564][T10857] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.174778][T10857] Bluetooth: MGMT ver 1.23
[  401.233127][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.239477][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.348669][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.368598][T10885] __nla_validate_parse: 8 callbacks suppressed
[  401.368608][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  401.422660][T10887] syzkaller1: entered promiscuous mode
[  401.425009][T10887] syzkaller1: entered allmulticast mode
[  401.528785][T10889] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  401.551366][T10889] ipt_REJECT: ECHOREPLY no longer supported.
[  401.764523][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'.
[  401.772739][T10904] xt_TCPMSS: Only works on TCP SYN packets
[  401.909058][T10908] netlink: 'syz.3.1130': attribute type 1 has an invalid length.
[  401.928943][T10908] bond8: entered promiscuous mode
[  401.930857][T10908] 8021q: adding VLAN 0 to HW filter on device bond8
[  401.937200][T10910] gretap2: entered promiscuous mode
[  402.033875][T10914] bridge21: entered allmulticast mode
[  402.218322][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  402.322623][T10930] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  402.438321][T10938] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1138'.
[  402.454248][T10938] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1138'.
[  402.467581][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'.
[  402.642056][T10940] netlink: 'syz.3.1139': attribute type 1 has an invalid length.
[  402.734597][T10949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1142'.
[  402.839324][T10960] netlink: 'syz.1.1145': attribute type 4 has an invalid length.
[  402.843328][T10960] netlink: 'syz.1.1145': attribute type 4 has an invalid length.
[  402.874231][T10961] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0
[  403.094985][T10967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1146'.
[  403.570969][T10968] syzkaller1: entered promiscuous mode
[  403.580913][T10968] syzkaller1: entered allmulticast mode
[  403.730829][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'.
[  403.803305][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1147'.
[  403.901210][T10991] netlink: 'syz.3.1149': attribute type 1 has an invalid length.
[  403.911040][T10991] netlink: 'syz.3.1149': attribute type 2 has an invalid length.
[  404.234106][T11005] bond9: (slave macvlan1): Enslaving as an active interface with an up link
[  404.297465][T10999] bond26: Unable to set peer notification delay as MII monitoring is disabled
[  404.455765][T10999] bond26 (unregistering): Released all slaves
[  404.488510][T11001] bond9 (unregistering): (slave macvlan1): Releasing backup interface
[  404.494389][T11001] bond9 (unregistering): Released all slaves
[  404.829581][T11017] sctp: [Deprecated]: syz.1.1157 (pid 11017) Use of int in maxseg socket option.
[  404.829581][T11017] Use struct sctp_assoc_value instead
[  404.886867][T11020] 0{X: left allmulticast mode
[  404.933302][T11020] macvlan0: left promiscuous mode
[  404.952591][T11020] macvlan0: left allmulticast mode
[  404.962276][T11020] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  404.980580][T11020] veth3: left promiscuous mode
[  404.989108][T11020] bond2: left promiscuous mode
[  404.996682][T11020] erspan2: left promiscuous mode
[  405.004071][T11020] bond2: left allmulticast mode
[  405.012844][T11020] erspan2: left allmulticast mode
[  405.023833][T11020] geneve2: left promiscuous mode
[  405.072555][T11020] gretap1: left allmulticast mode
[  405.080424][T11020] sit2: left promiscuous mode
[  405.093506][T11020] veth5: left allmulticast mode
[  405.099210][T11020] bond6: left promiscuous mode
[  405.104084][T11020] bond7: left allmulticast mode
[  405.109508][T11020] bond8: left promiscuous mode
[  405.121196][T11025] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[  405.129225][T11028] bridge47: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  405.136990][ T6883] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.154334][ T6883] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.167846][ T6883] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.393322][T11036] bond14: (slave bridge0): Releasing active interface
[  405.405362][T11036] bridge0 (unregistering): left promiscuous mode
[  405.668363][T11060] syzkaller0: entered promiscuous mode
[  405.672097][T11060] syzkaller0: entered allmulticast mode
[  405.807254][T11065] netlink: 'syz.2.1168': attribute type 1 has an invalid length.
[  405.858019][T11065] 8021q: adding VLAN 0 to HW filter on device bond24
[  405.872825][T11065] netlink: 'syz.2.1168': attribute type 10 has an invalid length.
[  405.949626][T11074] bond9: option tlb_dynamic_lb: invalid value (99)
[  405.956524][T11074] bond9 (unregistering): Released all slaves
[  406.183017][T11088] "syz.2.1172" (11088) uses obsolete ecb(arc4) skcipher
[  406.270913][T11090] bond0: (slave veth0_to_bond): Releasing active interface
[  406.278912][T11090] team0: Port device xfrm0 removed
[  406.281605][T11090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  406.546390][T11094] __nla_validate_parse: 11 callbacks suppressed
[  406.546399][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  406.551451][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  406.560063][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  406.563472][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  406.732831][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'.
[  406.790481][T11102] syzkaller0: entered promiscuous mode
[  406.793031][T11102] syzkaller0: entered allmulticast mode
[  407.230748][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'.
[  407.289539][T11127] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  407.356596][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[  407.522279][T11130] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1184'.
[  407.539097][T11138] netlink: 'syz.3.1187': attribute type 1 has an invalid length.
[  407.554061][T11130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  407.621902][T11138] 8021q: adding VLAN 0 to HW filter on device bond9
[  407.637691][T11135] lo speed is unknown, defaulting to 1000
[  407.672626][T11138] macvlan2: entered promiscuous mode
[  407.678354][T11138] macvlan2: entered allmulticast mode
[  407.683568][T11138] bond9: entered allmulticast mode
[  407.687592][T11138] bond9: entered promiscuous mode
[  407.692821][T11138] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  407.708205][T11138] team0: Port device macvlan2 added
[  407.759641][T11125] lo speed is unknown, defaulting to 1000
[  407.793852][T11150] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  407.827431][T11141] bond9: (slave ip6gretap1): making interface the new active one
[  407.830722][T11141] ip6gretap1: entered promiscuous mode
[  407.833324][T11141] ip6gretap1: entered allmulticast mode
[  407.838974][T11141] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  407.916965][T11150] 8021q: adding VLAN 0 to HW filter on device bond25
[  408.278451][T11166] pim6reg: entered allmulticast mode
[  408.503755][T11178] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  408.544075][T11178] veth11: entered allmulticast mode
[  408.553828][T11178] bond26: (slave veth11): Enslaving as an active interface with a down link
[  408.564737][T11178] bond26: (slave veth0_to_bond): making interface the new active one
[  408.571155][T11178] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  408.590406][T11178] macvlan3: entered promiscuous mode
[  408.593854][T11178] macvlan3: entered allmulticast mode
[  408.598088][T11178] bond26: entered promiscuous mode
[  408.599909][T11178] veth0_to_bond: entered promiscuous mode
[  408.603960][T11178] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  408.610443][T11178] bond26: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth11
[  408.617633][T11178] bond26: left promiscuous mode
[  408.621548][T11178] veth0_to_bond: left promiscuous mode
[  408.892658][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'.
[  409.143763][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'.
[  409.213734][T11200] syzkaller1: entered promiscuous mode
[  409.215927][T11200] syzkaller1: entered allmulticast mode
[  409.261856][T11198] batman_adv: batadv0: Adding interface: ip6gretap0
[  409.267408][T11198] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active
[  409.403571][T11210] netlink: 'syz.1.1204': attribute type 3 has an invalid length.
[  409.730703][T11252] xt_hashlimit: size too large, truncated to 1048576
[  409.801512][T11251] bond26: entered promiscuous mode
[  409.814417][T11251] 8021q: adding VLAN 0 to HW filter on device bond26
[  410.079342][T11267] syzkaller0: entered promiscuous mode
[  410.081552][T11267] syzkaller0: entered allmulticast mode
[  410.084299][T11266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.092837][T11266] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  410.136883][T11265] tipc: Invalid UDP bearer configuration
[  410.136924][T11265] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  410.171760][T11266] tipc: Resetting bearer <eth:syzkaller0>
[  410.206464][T11266] tipc: Disabling bearer <eth:syzkaller0>
[  410.341067][T11274] bond27: Removing last arp target with arp_interval on
[  410.518414][T11288] netlink: 'syz.3.1221': attribute type 8 has an invalid length.
[  410.613911][T11302] netlink: 'syz.1.1226': attribute type 4 has an invalid length.
[  410.639300][T11304] netlink: 'syz.3.1225': attribute type 1 has an invalid length.
[  410.658944][T11304] 8021q: adding VLAN 0 to HW filter on device bond10
[  410.671274][T11304] macvlan3: entered promiscuous mode
[  410.673092][T11304] macvlan3: entered allmulticast mode
[  410.675070][T11304] bond10: entered allmulticast mode
[  410.682734][T11304] bond10: entered promiscuous mode
[  410.694439][T11304] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  410.716627][T11304] team0: Port device macvlan3 added
[  411.189413][T11316] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  411.318639][T11342] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  411.415928][T11349] batman_adv: batadv0: Adding interface: vlan3
[  411.418087][T11349] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  411.518740][T11357] 0{X: entered promiscuous mode
[  411.532725][T11357] 1{X: renamed from 30{X
[  411.540188][T11357] 1{X: left promiscuous mode
[  411.543981][T11357] 1{X: entered allmulticast mode
[  411.556512][T11357] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  411.652766][T11367] bond11: entered allmulticast mode
[  411.670416][T11367] __nla_validate_parse: 46 callbacks suppressed
[  411.672089][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'.
[  411.684752][T11367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1239'.
[  411.700705][T11370] syzkaller0: entered promiscuous mode
[  411.708010][T11370] syzkaller0: entered allmulticast mode
[  411.734640][T11370] bond0: (slave ip6tnl0): refused to change device type
[  411.764580][T11377] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  411.781735][T11379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  411.830456][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  411.892266][   T54] Bluetooth: hci2: link tx timeout
[  411.894845][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  411.906346][T11390] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  411.914342][ T4980] Bluetooth: hci2: link tx timeout
[  411.917360][ T4980] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  411.938170][T11390] bond27: entered promiscuous mode
[  411.940483][T11390] 8021q: adding VLAN 0 to HW filter on device bond27
[  411.957135][T11390] 8021q: adding VLAN 0 to HW filter on device bond27
[  411.959621][T11390] bond27: (slave gre1): The slave device specified does not support setting the MAC address
[  411.962987][T11390] bond27: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  411.969442][T11390] bond27: (slave gre1): making interface the new active one
[  411.972281][T11390] gre1: entered promiscuous mode
[  411.975067][T11390] bond27: (slave gre1): Enslaving as an active interface with an up link
[  412.064657][T11404] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1249'.
[  412.070910][T11404] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1249'.
[  412.263091][T11411] ipip0: entered promiscuous mode
[  412.326483][T11411] ipip0: entered allmulticast mode
[  412.509477][T11418] netlink: 'syz.2.1253': attribute type 1 has an invalid length.
[  412.538042][T11418] 8021q: adding VLAN 0 to HW filter on device bond28
[  412.687922][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'.
[  412.781873][T11424] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  413.070819][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1256'.
[  413.098435][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'.
[  413.394753][T11444] 8021q: VLANs not supported on sit0
[  413.787260][T11461] syzkaller0: entered allmulticast mode
[  413.804838][T11456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.935471][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  414.125972][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'.
[  414.208004][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  414.432633][T11477] team0: Device vlan6 is already an upper device of the team interface
[  414.629497][T11486] bridge0: entered allmulticast mode
[  414.709818][T11490] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  414.726897][T11490] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  414.743016][T11490] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  414.847859][T11490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  415.373155][T11526] 8021q: adding VLAN 0 to HW filter on device .`
[  415.377967][T11526] tipc: Resetting bearer <eth:team0>
[  415.381070][T11526] 8021q: adding VLAN 0 to HW filter on device team0
[  415.384365][T11526] tipc: Resetting bearer <eth:team0>
[  415.390146][T11526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.428360][T11526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.433994][T11526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.447490][T11526] veth1_vlan: left promiscuous mode
[  415.451549][T11526] veth0_vlan: left promiscuous mode
[  415.457040][T11526] veth0_vlan: entered promiscuous mode
[  415.460721][T11526] veth1_vlan: entered promiscuous mode
[  415.475945][T11526] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  415.482424][ T5701] lo speed is unknown, defaulting to 1000
[  415.488229][ T5701] syz0: Port: 1 Link ACTIVE
[  415.697386][T11535] openvswitch: netlink: Duplicate key (type 6).
[  415.702351][T11535] netlink: 'syz.2.1285': attribute type 11 has an invalid length.
[  415.798866][T11537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.863530][T11539] bond29: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  415.871970][T11539] bond29 (unregistering): Released all slaves
[  415.956188][T11544] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001
[  416.079442][T11550] ip6gre0: entered allmulticast mode
[  416.230280][T11549] ip6gre0: left allmulticast mode
[  416.356084][T11563] syzkaller1: entered promiscuous mode
[  416.366757][T11563] syzkaller1: entered allmulticast mode
[  416.397836][T11574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  417.119397][T11614] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16
[  417.350264][T11622] macsec1: entered promiscuous mode
[  417.351973][T11622] macsec1: entered allmulticast mode
[  417.400654][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.411215][T11624] netlink: 'syz.1.1308': attribute type 1 has an invalid length.
[  417.582509][T11633] __nla_validate_parse: 9 callbacks suppressed
[  417.582521][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'.
[  417.725209][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'.
[  417.769752][T11645] --map-set only usable from mangle table
[  417.783854][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.816488][T11643] erspan0: left allmulticast mode
[  417.840545][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1314'.
[  417.848407][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1314'.
[  418.096819][T11662] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  418.160259][T11662] 8021q: adding VLAN 0 to HW filter on device bond29
[  418.171187][T11659] tipc: Resetting bearer <eth:team0>
[  418.193328][T11659] tipc: Resetting bearer <eth:team0>
[  418.203178][T11659] tipc: Resetting bearer <eth:team0>
[  418.209316][T11659] 8021q: adding VLAN 0 to HW filter on device team0
[  418.212492][T11659] tipc: Resetting bearer <eth:team0>
[  418.217007][T11659] bond29: (slave team0): making interface the new active one
[  418.220281][T11659] tipc: Resetting bearer <eth:team0>
[  418.222967][T11659] tipc: Resetting bearer <eth:team0>
[  418.226497][T11659] bond29: (slave team0): Enslaving as an active interface with an up link
[  418.281505][T11662] bond29: entered promiscuous mode
[  418.283654][T11662] team0: entered promiscuous mode
[  418.295265][T11662] team_slave_0: entered promiscuous mode
[  418.297444][T11662] team_slave_1: entered promiscuous mode
[  418.299471][T11662] bridge38: entered promiscuous mode
[  418.301487][T11662] bond7: entered promiscuous mode
[  418.303922][T11662] bond29: entered allmulticast mode
[  418.307294][T11662] team0: entered allmulticast mode
[  418.309285][T11662] team_slave_0: entered allmulticast mode
[  418.311780][T11662] team_slave_1: entered allmulticast mode
[  418.314205][T11662] bridge38: entered allmulticast mode
[  418.317740][T11662] bond7: entered allmulticast mode
[  418.339412][T11668] lo speed is unknown, defaulting to 1000
[  418.407722][T11674] netlink: 'syz.2.1321': attribute type 1 has an invalid length.
[  418.419235][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  418.462915][T11674] 8021q: adding VLAN 0 to HW filter on device bond30
[  418.478596][T11678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'.
[  418.493379][T11677] bond30: (slave veth13): Enslaving as an active interface with a down link
[  418.720092][T11682] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  418.873006][T11693] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1325'.
[  418.885531][T11693] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1325'.
[  418.890351][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'.
[  418.893325][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'.
[  418.898918][T11693] netlink: 'syz.3.1325': attribute type 14 has an invalid length.
[  419.433892][T11715] netlink: 'syz.2.1330': attribute type 10 has an invalid length.
[  419.591191][T11721] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  419.669720][T11721] 8021q: adding VLAN 0 to HW filter on device bond29
[  419.836061][   T10] tipc: Node number set to 2217628101
[  419.902370][T11740] bond26: (slave veth0_to_bond): Releasing active interface
[  419.940194][T11740] team0: Port device bridge16 removed
[  419.949401][T11740] team0: Port device bridge18 removed
[  419.956576][T11740] team0: Port device bridge19 removed
[  419.961834][T11740] bond17: (slave bridge20): Releasing active interface
[  419.967182][T11740] vlan1: left allmulticast mode
[  419.970503][T11740] geneve0: left allmulticast mode
[  419.972567][T11740] vlan1: left promiscuous mode
[  419.974600][T11740] geneve0: left promiscuous mode
[  419.978280][T11740] bridge0: port 2(vlan1) entered disabled state
[  419.983608][T11740] bond22: (slave gretap2): Releasing active interface
[  419.989249][T11740] bond23: left allmulticast mode
[  419.991041][T11740] bond23: left promiscuous mode
[  419.992831][T11740] bridge0: port 3(bond23) entered disabled state
[  419.997403][T11740] batman_adv: batadv0: Removing interface: ip6gretap3
[  420.001204][T11740] bond26: (slave veth11): Releasing active interface
[  420.004836][T11740] batman_adv: batadv0: Removing interface: vlan3
[  420.300852][T11757] bridge26: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  420.313552][T11757] bridge26: entered promiscuous mode
[  420.364260][T11762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  420.367648][T11762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  420.455228][T11765] dvmrp0: entered allmulticast mode
[  421.250320][T11772] ipip1: entered promiscuous mode
[  421.272647][   T34] audit: type=1804 audit(1786291738.957:3): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1343" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2572 res=1 errno=0
[  421.293539][   T34] audit: type=1800 audit(1786291738.967:4): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1343" name="cgroup.controllers" dev="tmpfs" ino=2572 res=0 errno=0
[  421.412627][T11775] netlink: 'syz.1.1344': attribute type 14 has an invalid length.
[  421.416218][T11775] netlink: 'syz.1.1344': attribute type 13 has an invalid length.
[  422.448845][T11791] ip_tables: iptables: counters copy to user failed while replacing table
[  422.617263][T11798] __nla_validate_parse: 5 callbacks suppressed
[  422.617283][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'.
[  422.652550][T11798] 8021q: adding VLAN 0 to HW filter on device bond12
[  422.689923][T11798] bond12: entered promiscuous mode
[  422.695937][T11798] bond12: entered allmulticast mode
[  423.347522][T11821] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1356'.
[  423.354870][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'.
[  423.361842][T11821] bridge0: entered allmulticast mode
[  423.473166][T11831] ipip2: entered promiscuous mode
[  423.511492][T11834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  423.673630][T11844] netlink: 'syz.3.1363': attribute type 21 has an invalid length.
[  423.687892][T11844] vlan3: entered promiscuous mode
[  423.690093][T11844] bridge0: entered promiscuous mode
[  423.692282][T11844] bond1: entered promiscuous mode
[  423.901824][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  423.938039][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'.
[  423.946233][T11859] C: renamed from veth1_to_team (while UP)
[  423.952498][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1367'.
[  423.967450][T11864] tipc: New replicast peer: 255.255.255.255
[  423.972446][T11864] tipc: Enabled bearer <udp:syz2>, priority 10
[  423.982002][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'.
[  423.995865][T11864] netlink: 'syz.3.1369': attribute type 1 has an invalid length.
[  424.039110][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1369'.
[  424.061829][T11866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.066509][T11866] syzkaller0: entered promiscuous mode
[  424.068626][T11866] syzkaller0: entered allmulticast mode
[  424.082719][T11866] tipc: Resetting bearer <eth:syzkaller0>
[  424.088213][T11865] tipc: Resetting bearer <eth:syzkaller0>
[  424.108670][T11865] tipc: Disabling bearer <eth:syzkaller0>
[  424.222963][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  424.229811][T11869] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  424.234287][T11872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1372'.
[  424.244157][T11869] bond14 (unregistering): Released all slaves
[  424.501199][T11887] netlink: 'syz.1.1377': attribute type 21 has an invalid length.
[  424.764265][T11892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  425.941205][T11920] "syz.1.1385" (11920) uses obsolete ecb(arc4) skcipher
[  426.223850][T11944] bond0: (slave ipvlan0): Device is not bonding slave
[  426.231250][T11944] bond0: option active_slave: invalid value (ipvlan0)
[  426.340274][T11956] netlink: 'syz.3.1394': attribute type 1 has an invalid length.
[  426.363909][T11956] 8021q: adding VLAN 0 to HW filter on device bond14
[  426.530668][T11962] openvswitch: netlink: Unknown key attributes 20
[  426.541588][T11962] bridge1: entered promiscuous mode
[  426.543907][T11962] bridge1: entered allmulticast mode
[  426.550387][T11962] team0: Port device bridge1 added
[  426.564705][ T5701] IPVS: starting estimator thread 0...
[  426.677700][T11966] IPVS: using max 50 ests per chain, 120000 per kthread
[  426.840269][T11986] dvmrp0: left allmulticast mode
[  426.893520][T11991] Cannot find add_set index 0 as target
[  426.902113][T11991] netlink: 'syz.3.1401': attribute type 1 has an invalid length.
[  426.905638][T11992] netlink: 'syz.3.1401': attribute type 1 has an invalid length.
[  427.040920][T12001] syzkaller0: entered promiscuous mode
[  427.043162][T12001] syzkaller0: entered allmulticast mode
[  427.355748][T12022] syzkaller0: entered promiscuous mode
[  427.357612][T12022] syzkaller0: entered allmulticast mode
[  427.487625][T12027] netlink: 'syz.3.1409': attribute type 1 has an invalid length.
[  427.619766][T12022] infiniband syz2: set down
[  427.623489][T12022] infiniband syz2: added ipvlan0
[  427.637631][T12022] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  427.643353][T12022] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  427.651793][T12022] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  427.700571][T12022] RDS/IB: syz2: added
[  427.706506][T12022] smc: adding ib device syz2 with port count 1
[  427.710189][T12022] smc:    ib device syz2 port 1 has no pnetid
[  429.803718][T12051] bond9: left allmulticast mode
[  429.815073][T12051] ip6gretap1: left allmulticast mode
[  429.818954][T12051] bond9: left promiscuous mode
[  429.833904][T12051] team0 (unregistering): Port device macvlan2 removed
[  429.838219][T12051] bond10: left allmulticast mode
[  429.839877][T12051] bond10: left promiscuous mode
[  429.843994][T12051] team0 (unregistering): Port device macvlan3 removed
[  429.851150][T12051] team0 (unregistering): Port device bridge1 removed
[  429.856685][   T10] ip6gretap1: left promiscuous mode
[  429.900636][T12059] __nla_validate_parse: 10 callbacks suppressed
[  429.900647][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'.
[  429.959390][T12059] bond30 (unregistering): Released all slaves
[  430.091195][T12073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.368222][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1421'.
[  430.375645][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1421'.
[  430.607449][T12088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1424'.
[  430.785787][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'.
[  430.794565][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'.
[  430.915849][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'.
[  430.950975][T12092] syzkaller0: entered promiscuous mode
[  430.958378][T12092] syzkaller0: entered allmulticast mode
[  431.008473][T12092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.120695][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'.
[  431.127246][T12126] vlan6: entered promiscuous mode
[  431.128919][T12126] gretap0: entered promiscuous mode
[  431.158421][T12091] tipc: Resetting bearer <eth:syzkaller0>
[  431.273145][T12142] netlink: 'syz.1.1434': attribute type 1 has an invalid length.
[  431.574967][T12091] tipc: Disabling bearer <eth:syzkaller0>
[  431.651168][T12142] 8021q: adding VLAN 0 to HW filter on device bond30
[  431.714907][T12151] tipc: Resetting bearer <eth:team0>
[  431.750450][T12151] tipc: Resetting bearer <eth:team0>
[  432.150508][T12175] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  432.159344][ T5701] lo speed is unknown, defaulting to 1000
[  432.372288][T12183] netlink: 'syz.3.1443': attribute type 1 has an invalid length.
[  432.447307][T12183] bond15: entered promiscuous mode
[  432.449502][T12183] 8021q: adding VLAN 0 to HW filter on device bond15
[  432.762233][T12198] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  432.829573][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1447'.
[  432.859576][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  432.873005][T12201] netlink: 'syz.3.1447': attribute type 10 has an invalid length.
[  432.895318][T12201] geneve4: entered promiscuous mode
[  432.901450][T12201] geneve4: entered allmulticast mode
[  433.005741][T12211] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  433.054306][T12217] netlink: 'syz.3.1453': attribute type 1 has an invalid length.
[  433.089120][T12217] bond16: entered promiscuous mode
[  433.091722][T12217] 8021q: adding VLAN 0 to HW filter on device bond16
[  433.274797][T12231] tipc: Resetting bearer <eth:team0>
[  433.289358][T12231] veth0_vlan: left promiscuous mode
[  433.293402][T12231] veth0_vlan: entered promiscuous mode
[  433.308631][T12231] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  433.677132][T12249] syzkaller0: entered promiscuous mode
[  433.682885][T12249] syzkaller0: entered allmulticast mode
[  433.854227][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.887382][T12261] netlink: 'syz.3.1462': attribute type 1 has an invalid length.
[  433.993499][T12261] 8021q: adding VLAN 0 to HW filter on device bond17
[  433.999981][T12263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.007128][T12264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.078318][T12272] netlink: 'syz.2.1465': attribute type 30 has an invalid length.
[  434.228832][T12285] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  434.252216][T12285] 8021q: adding VLAN 0 to HW filter on device bond31
[  434.487812][T12291] macvlan1: entered promiscuous mode
[  434.490377][T12291] macvlan1: entered allmulticast mode
[  434.492675][T12291] veth1_vlan: entered allmulticast mode
[  434.748692][T12317] netlink: 'syz.3.1478': attribute type 30 has an invalid length.
[  434.775468][ T6544] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.785826][T12317] netlink: 'syz.3.1478': attribute type 30 has an invalid length.
[  434.789106][ T6544] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.799860][ T6544] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.812805][ T6544] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.037329][T12342] __nla_validate_parse: 9 callbacks suppressed
[  435.037339][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'.
[  435.051201][T12335] tipc: Enabled bearer <eth:team0>, priority 0
[  435.068075][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'.
[  435.089332][T12342] veth1_to_team: entered allmulticast mode
[  435.131439][T12346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'.
[  435.138545][T12346] gre0: entered promiscuous mode
[  435.144432][T12346] gre0: entered allmulticast mode
[  435.261204][T12344] team0: Device vlan7 is already an upper device of the team interface
[  435.303281][T12355] netlink: 'syz.1.1487': attribute type 13 has an invalid length.
[  435.328569][T12355] tipc: Resetting bearer <eth:team0>
[  435.699118][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'.
[  435.870539][T12383] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.1493'.
[  435.871499][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'.
[  435.893083][T12384] 8021q: adding VLAN 0 to HW filter on device bond32
[  435.985987][T12392] block nbd0: server does not support multiple connections per device.
[  436.024990][T12392] block nbd0: shutting down sockets
[  436.073483][T12399] bond0: (slave ip6tnl0): refused to change device type
[  436.181390][T12401] ip6erspan1: entered allmulticast mode
[  436.412869][T12404] ip6tnl0: Caught tx_queue_len zero misconfig
[  436.497785][T12404] block nbd0: server does not support multiple connections per device.
[  436.504265][T12404] block nbd0: shutting down sockets
[  436.776138][T12392] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  436.780503][T12392] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  437.076452][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'.
[  437.123458][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'.
[  437.212913][T12437] bond18: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  437.232406][T12437] bond18 (unregistering): Released all slaves
[  437.280098][T12432] gretap0: entered promiscuous mode
[  437.282464][T12432] macsec1: entered allmulticast mode
[  437.284848][T12432] gretap0: entered allmulticast mode
[  437.297019][T12432] gretap0: left allmulticast mode
[  437.299325][T12432] gretap0: left promiscuous mode
[  437.381077][T12445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.414166][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'.
[  437.532263][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1509'.
[  437.731505][T12489] bridge0: port 1(vlan4) entered blocking state
[  437.733626][T12489] bridge0: port 1(vlan4) entered disabled state
[  437.736051][T12489] vlan4: entered allmulticast mode
[  437.737704][T12489] bridge0: entered allmulticast mode
[  437.783965][T12489] vlan4: left allmulticast mode
[  437.786291][T12489] bridge0: left allmulticast mode
[  437.916910][T12490] bond33: Invalid ad_actor_system MAC address.
[  437.919809][T12490] bond33: option ad_actor_system: invalid value (7)
[  437.924288][T12490] bond33 (unregistering): Released all slaves
[  438.180041][T12511] validate_nla: 1 callbacks suppressed
[  438.180055][T12511] netlink: 'syz.3.1524': attribute type 1 has an invalid length.
[  438.258818][T12511] 8021q: adding VLAN 0 to HW filter on device bond18
[  438.606540][T12526] netlink: 'syz.1.1527': attribute type 14 has an invalid length.
[  438.678904][T12532] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  438.694444][T12532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.717257][T12532] batadv0: entered promiscuous mode
[  438.724479][T12532] macsec1: entered promiscuous mode
[  438.728470][T12532] macsec1: entered allmulticast mode
[  438.730498][T12532] batadv0: entered allmulticast mode
[  438.732470][T12532] 8021q: adding VLAN 0 to HW filter on device macsec1
[  438.738730][T12532] batadv0: left allmulticast mode
[  438.745461][T12532] batadv0: left promiscuous mode
[  438.764235][T12537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  438.859299][T12539] tipc: Resetting bearer <eth:ip6gre0>
[  438.869536][T12539] 8021q: adding VLAN 0 to HW filter on device .`
[  438.924582][T12539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  438.934429][T12539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.950552][T12539] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  438.987020][T12539] xt_hashlimit: size too large, truncated to 1048576
[  439.391719][T12563] bond19: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  439.403602][T12563] bond19 (unregistering): Released all slaves
[  439.640165][T12582] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  439.651378][T12582] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  439.713405][T12587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.976218][T12607] openvswitch: netlink: Flow key attribute not present in set flow.
[  440.070317][T12614] __nla_validate_parse: 16 callbacks suppressed
[  440.070334][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'.
[  440.178276][T12623] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  440.310804][T12637] ip_tables: iptables: counters copy to user failed while replacing table
[  440.400104][T12641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'.
[  440.503284][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  440.518097][T12653] netlink: 'syz.1.1562': attribute type 1 has an invalid length.
[  440.546904][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'.
[  440.550185][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'.
[  440.562796][T12657] bond0: entered promiscuous mode
[  440.571702][T12657] bond0: left promiscuous mode
[  440.583440][T12658] bond0: entered promiscuous mode
[  440.586558][T12658] bond0: left promiscuous mode
[  440.607545][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'.
[  440.611703][T12653] IPVS: length: 15 != 8
[  441.014539][T12673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.018977][T12672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.022853][T12673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1568'.
[  441.027714][T12672] syzkaller0: entered promiscuous mode
[  441.029553][T12672] syzkaller0: entered allmulticast mode
[  441.036044][T12672] tap0: tun_chr_ioctl cmd 1074025672
[  441.037919][T12672] tap0: ignored: set checksum disabled
[  441.039541][T12673] tap0: tun_chr_ioctl cmd 1074025672
[  441.041299][T12673] tap0: ignored: set checksum disabled
[  441.043572][T12672] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  441.070353][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'.
[  441.103297][T12673] tipc: Resetting bearer <eth:syzkaller0>
[  441.117609][T12670] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1567'.
[  441.156846][T12671] tipc: Resetting bearer <eth:syzkaller0>
[  441.165695][T12671] tipc: Disabling bearer <eth:syzkaller0>
[  441.460225][T12679] bridge27: entered promiscuous mode
[  441.462597][T12679] bridge27: entered allmulticast mode
[  441.469887][T12679] team0: Port device bridge27 added
[  441.472326][T12680] bridge0: port 1(team0) entered blocking state
[  441.481889][T12680] bridge0: port 1(team0) entered disabled state
[  441.497359][ T7235] tipc: Resetting bearer <eth:team0>
[  441.611440][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'.
[  441.624985][T12687] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  441.641022][T12683] lo speed is unknown, defaulting to 1000
[  441.713235][T12685] ovs-system: entered promiscuous mode
[  441.780122][T12694] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  441.792376][T12694] ipt_ECN: cannot use operation on non-tcp rule
[  442.051644][T12708] 8021q: adding VLAN 0 to HW filter on device bond33
[  442.230679][T12720] netlink: 'syz.2.1582': attribute type 1 has an invalid length.
[  442.357972][T12724] ip6gre3: entered promiscuous mode
[  442.360626][T12724] ip6gre3: entered allmulticast mode
[  442.440003][T12730] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  442.491898][T12730] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  442.693016][T12737] tipc: Resetting bearer <eth:team0>
[  442.707343][T12737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  442.722342][T12733] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  442.736205][T12733] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.818569][T12733] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  442.835376][T12733] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.892221][T12733] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  442.901280][T12755] netlink: 'syz.1.1588': attribute type 10 has an invalid length.
[  442.903831][T12733] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.920567][T12755] geneve5: entered promiscuous mode
[  442.922584][T12755] geneve5: entered allmulticast mode
[  442.991675][T12733] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  443.011803][T12733] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.116747][ T6883] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 4352 - 0
[  443.122186][ T6883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.134983][ T6883] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 4352 - 0
[  443.147612][ T6883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.185799][ T6883] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 4352 - 0
[  443.190955][ T6883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.221261][ T5466] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 4352 - 0
[  443.228238][ T5466] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.365886][T12785] vti0: entered promiscuous mode
[  443.367642][T12785] vti0: entered allmulticast mode
[  443.369471][T12782] lo speed is unknown, defaulting to 1000
[  444.693376][T12815] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  444.725834][T12815] xfrm0: entered promiscuous mode
[  444.732063][T12815] xfrm0: entered allmulticast mode
[  444.741230][T12815] team0: Device xfrm0 is of different type
[  444.773716][T12816] team0: Device xfrm0 is of different type
[  444.800436][T12823] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  444.808817][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.987552][T12843] lo speed is unknown, defaulting to 1000
[  445.122612][T12856] hsr0: entered allmulticast mode
[  445.129535][T12856] hsr_slave_0: entered allmulticast mode
[  445.140916][T12856] hsr_slave_1: entered allmulticast mode
[  445.151205][T12856] __nla_validate_parse: 20 callbacks suppressed
[  445.151219][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'.
[  445.188146][T12856] hsr_slave_0: left promiscuous mode
[  445.206062][T12856] hsr_slave_1: left promiscuous mode
[  445.387625][T12856] hsr0 (unregistering): left allmulticast mode
[  445.529906][T12870] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  445.570399][T12870] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1617'.
[  446.159460][T12880] veth0_macvtap: entered allmulticast mode
[  446.162571][T12880] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  446.193596][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'.
[  446.255965][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'.
[  446.365156][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  446.583531][T12908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.608684][T12908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.676314][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'.
[  446.802867][T12908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.827313][T12908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.840663][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.866303][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'.
[  446.943497][T12908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.951488][T12908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.071692][T12908] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.085616][T12908] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.133234][T12924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'.
[  447.267199][ T6544] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.271219][ T6544] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.289716][ T6544] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.293351][ T6544] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.311969][ T6544] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  447.316004][ T6544] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.332284][ T6544] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.337348][ T6544] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.817524][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'.
[  447.903856][T12958] netlink: 'syz.1.1637': attribute type 1 has an invalid length.
[  447.931229][T12958] macvtap1: entered allmulticast mode
[  447.947358][T12958] macvtap2: entered allmulticast mode
[  447.998164][T12958] bond35: (slave bridge29): making interface the new active one
[  448.013402][T12958] bond35: (slave bridge29): Enslaving as an active interface with an up link
[  448.021916][T12961] netlink: 'syz.3.1638': attribute type 30 has an invalid length.
[  448.081472][T12961] bond19: option arp_missed_max: invalid value (0)
[  448.091066][T12961] bond19: option arp_missed_max: allowed values 1 - 255
[  448.100909][T12961] bond19 (unregistering): Released all slaves
[  448.388359][T12976] syzkaller0: entered promiscuous mode
[  448.392302][T12976] syzkaller0: entered allmulticast mode
[  448.454266][T12978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.799639][T12987] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  448.828302][T12987] netlink: 'syz.2.1645': attribute type 1 has an invalid length.
[  448.842400][T12987] bond34: entered promiscuous mode
[  448.844268][T12987] bond34: entered allmulticast mode
[  448.846676][T12987] 8021q: adding VLAN 0 to HW filter on device bond34
[  448.917924][T12990] netlink: 'syz.2.1646': attribute type 4 has an invalid length.
[  448.920723][T12990] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1646'.
[  449.203244][T12975] tipc: Resetting bearer <eth:syzkaller0>
[  449.243025][T13000] netlink: 'syz.3.1649': attribute type 22 has an invalid length.
[  449.246641][T12975] tipc: Disabling bearer <eth:syzkaller0>
[  449.277639][T12994] pimreg9: entered allmulticast mode
[  449.356783][T13000] netlink: 'syz.3.1649': attribute type 22 has an invalid length.
[  449.694000][T13018] gre0: entered promiscuous mode
[  449.696516][T13018] gre0: entered allmulticast mode
[  449.698959][T13018] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  449.801424][T13022] batadv2: entered promiscuous mode
[  449.803753][T13022] batadv2: entered allmulticast mode
[  449.807818][T13022] 8021q: adding VLAN 0 to HW filter on device batadv2
[  450.273778][T13052] dvmrp0: left allmulticast mode
[  450.275641][T13052] pimreg: left allmulticast mode
[  450.462606][T13057] syzkaller0: entered promiscuous mode
[  450.465074][T13057] syzkaller0: entered allmulticast mode
[  450.580437][T13058] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  450.589709][T13058] __nla_validate_parse: 9 callbacks suppressed
[  450.589719][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'.
[  450.857294][T13070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'.
[  450.879206][T13070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'.
[  451.062347][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1670'.
[  451.073018][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'.
[  451.087370][T13080] bond19: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  451.092578][T13080] bond19 (unregistering): Released all slaves
[  451.318841][T13085] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  451.342663][T13085] 8021q: adding VLAN 0 to HW filter on device bond36
[  451.371024][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1672'.
[  451.375518][    C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96
[  451.382759][T13085] bond36: (slave geneve5): making interface the new active one
[  451.387697][T13085] bond36: (slave geneve5): Enslaving as an active interface with an up link
[  451.465090][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'.
[  451.499910][T13090] 8021q: adding VLAN 0 to HW filter on device bond38
[  451.511225][T13090] bond38 (unregistering): Released all slaves
[  451.599182][T13092] 8021q: adding VLAN 0 to HW filter on device bond38
[  451.935256][T13092] bond38 (unregistering): Released all slaves
[  452.110221][T13096] xfrm1: entered promiscuous mode
[  452.136837][T13098] 8021q: VLANs not supported on ip6tnl0
[  452.150730][T13098] netlink: 'syz.3.1674': attribute type 2 has an invalid length.
[  452.200613][T13098] : entered promiscuous mode
[  452.268778][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1677'.
[  452.280089][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'.
[  452.360598][ T6544] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[  452.364861][ T6544] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[  452.419747][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  452.537133][ T6544] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[  452.571007][ T6544] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[  453.053692][T13158] netlink: 'syz.1.1688': attribute type 12 has an invalid length.
[  453.177407][T13162] syzkaller1: entered promiscuous mode
[  453.186355][T13162] syzkaller1: entered allmulticast mode
[  453.451425][T13168] bond35: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  453.457013][T13168] bond35 (unregistering): Released all slaves
[  453.572165][T13177] batman_adv: batadv0: Adding interface: veth0
[  453.574934][T13177] batman_adv: batadv0: Interface activated: veth0
[  453.698326][T13185] syzkaller0: entered promiscuous mode
[  453.700361][T13185] syzkaller0: entered allmulticast mode
[  453.864146][T13196] netlink: 'syz.1.1700': attribute type 11 has an invalid length.
[  454.225128][T13203] kthread_run failed with err -4
[  454.650297][T13231] netlink: 'syz.1.1707': attribute type 2 has an invalid length.
[  454.759252][T13239] netlink: 'syz.2.1709': attribute type 29 has an invalid length.
[  454.791222][T13239] gretap4: entered allmulticast mode
[  454.839604][T13248] syzkaller0: entered promiscuous mode
[  454.842039][T13248] syzkaller0: entered allmulticast mode
[  454.906669][T13251] ip_tables: iptables: counters copy to user failed while replacing table
[  454.972860][T13253] netlink: 'syz.2.1713': attribute type 14 has an invalid length.
[  454.985584][T13253] netlink: 'syz.2.1713': attribute type 13 has an invalid length.
[  455.019471][T13249] bond38 (unregistering): Released all slaves
[  455.400840][T13280] gre0: left promiscuous mode
[  455.406584][T13280] tipc: Resetting bearer <eth:ip6gre0>
[  455.417920][T13280] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  455.433643][T13277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.449827][T13278] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  455.490544][T13278] tipc: Disabling bearer <eth:syzkaller0>
[  455.555387][T13289] bond38: entered promiscuous mode
[  455.561602][T13289] 8021q: adding VLAN 0 to HW filter on device bond38
[  455.582574][T13289] 8021q: adding VLAN 0 to HW filter on device bond38
[  455.585858][T13289] bond38: (slave sit3): The slave device specified does not support setting the MAC address
[  455.590684][T13289] bond38: (slave sit3): Error -95 calling set_mac_address
[  455.672638][T13296] netlink: 'syz.2.1723': attribute type 1 has an invalid length.
[  455.759736][T13299] xt_hashlimit: size too large, truncated to 1048576
[  456.074649][T13315] nbd: must specify at least one socket
[  456.093620][T13315] mac80211_hwsim hwsim2 z1: renamed from wlan0
[  456.746044][T13335] bond37: entered allmulticast mode
[  456.761276][T13340] netlink: 'syz.1.1733': attribute type 9 has an invalid length.
[  456.772133][T13334] macvlan5: entered promiscuous mode
[  456.782591][T13334] macvlan5: entered allmulticast mode
[  456.798317][T13334] bond37: (slave macvlan5): Opening slave failed
[  456.877851][T13342] bond19: entered promiscuous mode
[  456.943346][T13345] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  457.319775][T13359] __nla_validate_parse: 10 callbacks suppressed
[  457.319793][T13359] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1740'.
[  457.684167][T13367] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1741'.
[  457.691493][T13369] ip6gre4: entered promiscuous mode
[  457.697004][T13369] ip6gre4: entered allmulticast mode
[  457.704719][ T6544] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  457.718302][T13372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1742'.
[  457.722379][ T6544] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  457.728473][ T5701] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  457.732680][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1742'.
[  457.737767][T13367] erspan0: entered promiscuous mode
[  457.740124][T13367] erspan0: entered allmulticast mode
[  457.885681][   T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  457.987805][T13385] netlink: 'syz.1.1746': attribute type 9 has an invalid length.
[  458.027394][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'.
[  458.061259][T13382] syzkaller0: entered promiscuous mode
[  458.063092][T13382] syzkaller0: entered allmulticast mode
[  458.071362][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1745'.
[  458.180138][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1748'.
[  458.205111][T13397] netlink: 'syz.2.1748': attribute type 4 has an invalid length.
[  458.214579][T13397] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1748'.
[  458.241420][T13397] 8021q: adding VLAN 0 to HW filter on device .`
[  458.340230][T13408] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1751'.
[  458.379603][T13404] syzkaller0: entered promiscuous mode
[  458.387775][T13404] syzkaller0: entered allmulticast mode
[  458.400172][T13404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.472232][T13415] syzkaller0: entered promiscuous mode
[  458.480248][T13415] syzkaller0: entered allmulticast mode
[  458.501259][T13403] tipc: Resetting bearer <eth:syzkaller0>
[  458.543668][T13403] tipc: Disabling bearer <eth:syzkaller0>
[  458.559413][T13415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.566262][   T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  458.577186][T13415] tipc: Resetting bearer <eth:syzkaller0>
[  458.597817][T13414] tipc: Resetting bearer <eth:syzkaller0>
[  458.637621][T13414] tipc: Disabling bearer <eth:syzkaller0>
[  458.691702][T13425] netlink: 'syz.3.1753': attribute type 1 has an invalid length.
[  458.790899][T13424] bond20: (slave veth0_to_bond): making interface the new active one
[  458.807598][T13424] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  459.133011][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  459.514532][T13479] netlink: 'syz.2.1764': attribute type 1 has an invalid length.
[  459.577886][T13483] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  459.787574][T13496] bridge50: entered promiscuous mode
[  459.791339][T13496] bridge50: entered allmulticast mode
[  459.800185][T13496] team0: Port device bridge50 added
[  459.896528][T13501] vlan4: entered promiscuous mode
[  459.900104][T13501] gretap0: entered promiscuous mode
[  460.400087][T13522] tipc: Invalid UDP bearer configuration
[  460.400133][T13522] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  460.481932][T13524] gre0: left allmulticast mode
[  460.492445][T13524] 1{X: left allmulticast mode
[  460.505659][T13524] erspan0: left promiscuous mode
[  460.511987][T13524] erspan0: left allmulticast mode
[  460.573445][T13526] bond39: Removing last arp target with arp_interval on
[  460.596031][T13529] netlink: 'syz.2.1776': attribute type 1 has an invalid length.
[  460.667070][ T1114] smc: removing ib device syz2
[  460.814596][T13529] 8021q: adding VLAN 0 to HW filter on device bond41
[  460.818108][ T5701] ==================================================================
[  460.820610][ T5701] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250
[  460.823534][ T5701] Read of size 1 at addr ffff88810935ce09 by task kworker/0:5/5701
[  460.826958][ T5701] 
[  460.828039][ T5701] CPU: 0 UID: 0 PID: 5701 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  460.828050][ T5701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.828057][ T5701] Workqueue: events smc_ib_port_event_work
[  460.828075][ T5701] Call Trace:
[  460.828081][ T5701]  <TASK>
[  460.828087][ T5701]  dump_stack_lvl+0xe8/0x150
[  460.828099][ T5701]  print_address_description+0x55/0x1e0
[  460.828109][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  460.828119][ T5701]  print_report+0x58/0x70
[  460.828127][ T5701]  kasan_report+0x117/0x150
[  460.828139][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  460.828150][ T5701]  __ethtool_get_link_ksettings+0x230/0x250
[  460.828163][ T5701]  __ethtool_get_link_ksettings+0x11f/0x250
[  460.828175][ T5701]  ib_get_eth_speed+0x180/0x7f0
[  460.828192][ T5701]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  460.828207][ T5701]  ? do_raw_spin_unlock+0x4d/0x210
[  460.828219][ T5701]  ? rxe_query_port+0x6b/0x3d0
[  460.828236][ T5701]  rxe_query_port+0x93/0x3d0
[  460.828251][ T5701]  ib_query_port+0x16e/0x830
[  460.828262][ T5701]  smc_ib_port_event_work+0x147/0x920
[  460.828279][ T5701]  ? rcu_is_watching+0x15/0xb0
[  460.828296][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[  460.828308][ T5701]  process_scheduled_works+0xa8e/0x14e0
[  460.828328][ T5701]  ? __pfx_process_scheduled_works+0x10/0x10
[  460.828340][ T5701]  ? assign_work+0x3cf/0x5d0
[  460.828352][ T5701]  worker_thread+0xa47/0xfb0
[  460.828369][ T5701]  ? __kthread_parkme+0x71/0x1f0
[  460.828413][ T5701]  kthread+0x388/0x470
[  460.828428][ T5701]  ? __pfx_worker_thread+0x10/0x10
[  460.828439][ T5701]  ? __pfx_kthread+0x10/0x10
[  460.828453][ T5701]  ret_from_fork+0x514/0xb70
[  460.828469][ T5701]  ? __pfx_ret_from_fork+0x10/0x10
[  460.828484][ T5701]  ? __switch_to+0xc89/0x1420
[  460.828496][ T5701]  ? __pfx_kthread+0x10/0x10
[  460.828510][ T5701]  ret_from_fork_asm+0x1a/0x30
[  460.828531][ T5701]  </TASK>
[  460.828536][ T5701] 
[  460.889722][ T5701] Allocated by task 8860:
[  460.891084][ T5701]  kasan_save_track+0x3e/0x80
[  460.892538][ T5701]  __kasan_kmalloc+0x93/0xb0
[  460.893951][ T5701]  __kvmalloc_node_noprof+0x53f/0x860
[  460.895583][ T5701]  alloc_netdev_mqs+0xa9/0x12b0
[  460.897167][ T5701]  rtnl_create_link+0x321/0xd70
[  460.898919][ T5701]  rtnl_newlink_create+0x258/0x7b0
[  460.900529][ T5701]  rtnl_newlink+0x166d/0x1c30
[  460.901995][ T5701]  rtnetlink_rcv_msg+0x802/0xc00
[  460.903486][ T5701]  netlink_rcv_skb+0x226/0x4a0
[  460.904943][ T5701]  netlink_unicast+0x7bb/0x940
[  460.906355][ T5701]  netlink_sendmsg+0x813/0xb40
[  460.907831][ T5701]  sock_sendmsg_nosec+0x13a/0x180
[  460.909363][ T5701]  __sys_sendto+0x408/0x5a0
[  460.910821][ T5701]  __x64_sys_sendto+0xde/0x100
[  460.912576][ T5701]  do_syscall_64+0x174/0x580
[  460.914192][ T5701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.915968][ T5701] 
[  460.916689][ T5701] Freed by task 13532:
[  460.917888][ T5701]  kasan_save_track+0x3e/0x80
[  460.919302][ T5701]  kasan_save_free_info+0x40/0x50
[  460.920865][ T5701]  __kasan_slab_free+0x5c/0x80
[  460.922316][ T5701]  kfree+0x1c5/0x640
[  460.923483][ T5701]  device_release+0xc4/0x1f0
[  460.924880][ T5701]  kobject_put+0x222/0x550
[  460.926210][ T5701]  netdev_run_todo+0xeee/0x1060
[  460.927716][ T5701]  rtnl_dellink+0x68f/0x810
[  460.929087][ T5701]  rtnetlink_rcv_msg+0x802/0xc00
[  460.930636][ T5701]  netlink_rcv_skb+0x226/0x4a0
[  460.932106][ T5701]  netlink_unicast+0x7bb/0x940
[  460.933572][ T5701]  netlink_sendmsg+0x813/0xb40
[  460.935037][ T5701]  sock_sendmsg_nosec+0x13a/0x180
[  460.936535][ T5701]  ____sys_sendmsg+0x54e/0x850
[  460.937981][ T5701]  ___sys_sendmsg+0x2a5/0x360
[  460.939446][ T5701]  __x64_sys_sendmsg+0x1b1/0x290
[  460.940946][ T5701]  do_syscall_64+0x174/0x580
[  460.942355][ T5701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.944169][ T5701] 
[  460.945000][ T5701] The buggy address belongs to the object at ffff88810935c000
[  460.945000][ T5701]  which belongs to the cache kmalloc-cg-4k of size 4096
[  460.949769][ T5701] The buggy address is located 3593 bytes inside of
[  460.949769][ T5701]  freed 4096-byte region [ffff88810935c000, ffff88810935d000)
[  460.954525][ T5701] 
[  460.955248][ T5701] The buggy address belongs to the physical page:
[  460.957188][ T5701] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109358
[  460.959842][ T5701] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  460.962634][ T5701] memcg:ffff888109359011
[  460.964148][ T5701] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  460.966935][ T5701] page_type: f5(slab)
[  460.968280][ T5701] raw: 017ff00000000040 ffff88810005d500 dead000000000100 dead000000000122
[  460.970946][ T5701] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888109359011
[  460.973562][ T5701] head: 017ff00000000040 ffff88810005d500 dead000000000100 dead000000000122
[  460.976109][ T5701] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888109359011
[  460.978792][ T5701] head: 017ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  460.981490][ T5701] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  460.984356][ T5701] page dumped because: kasan: bad access detected
[  460.986401][ T5701] page_owner tracks the page as allocated
[  460.988155][ T5701] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8860, tgid 8860 (syz-executor), ts 342674988283, free_ts 342564223460
[  460.995118][ T5701]  post_alloc_hook+0x1f9/0x250
[  460.996798][ T5701]  get_page_from_freelist+0x21fa/0x2270
[  460.998476][ T5701]  __alloc_frozen_pages_noprof+0x18d/0x380
[  461.000200][ T5701]  allocate_slab+0x79/0x5e0
[  461.001907][ T5701]  refill_objects+0x2d5/0x350
[  461.003583][ T5701]  __pcs_replace_empty_main+0x2bf/0x6b0
[  461.005569][ T5701]  __kvmalloc_node_noprof+0x66b/0x860
[  461.007471][ T5701]  alloc_netdev_mqs+0xa9/0x12b0
[  461.009169][ T5701]  rtnl_create_link+0x321/0xd70
[  461.010984][ T5701]  rtnl_newlink_create+0x258/0x7b0
[  461.012736][ T5701]  rtnl_newlink+0x166d/0x1c30
[  461.014412][ T5701]  rtnetlink_rcv_msg+0x802/0xc00
[  461.016010][ T5701]  netlink_rcv_skb+0x226/0x4a0
[  461.017465][ T5701]  netlink_unicast+0x7bb/0x940
[  461.019022][ T5701]  netlink_sendmsg+0x813/0xb40
[  461.020556][ T5701]  sock_sendmsg_nosec+0x13a/0x180
[  461.022349][ T5701] page last free pid 8860 tgid 8860 stack trace:
[  461.024361][ T5701]  __free_frozen_pages+0xc1e/0xd10
[  461.026225][ T5701]  __slab_free+0x274/0x2c0
[  461.027745][ T5701]  qlist_free_all+0x99/0x100
[  461.029297][ T5701]  kasan_quarantine_reduce+0x148/0x160
[  461.031042][ T5701]  __kasan_slab_alloc+0x22/0x80
[  461.032682][ T5701]  __kmalloc_cache_noprof+0x2ab/0x660
[  461.034563][ T5701]  dropmon_net_event+0x221/0x2b0
[  461.036328][ T5701]  notifier_call_chain+0x1a5/0x3d0
[  461.038039][ T5701]  register_netdevice+0x18a4/0x1eb0
[  461.039778][ T5701]  hsr_dev_finalize+0x630/0xaa0
[  461.041558][ T5701]  hsr_newlink+0x837/0x9a0
[  461.043230][ T5701]  rtnl_newlink_create+0x305/0x7b0
[  461.045095][ T5701]  rtnl_newlink+0x166d/0x1c30
[  461.046812][ T5701]  rtnetlink_rcv_msg+0x802/0xc00
[  461.048553][ T5701]  netlink_rcv_skb+0x226/0x4a0
[  461.050202][ T5701]  netlink_unicast+0x7bb/0x940
[  461.051896][ T5701] 
[  461.052720][ T5701] Memory state around the buggy address:
[  461.054421][ T5701]  ffff88810935cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  461.057019][ T5701]  ffff88810935cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  461.059704][ T5701] >ffff88810935ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  461.062619][ T5701]                       ^
[  461.064021][ T5701]  ffff88810935ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  461.066518][ T5701]  ffff88810935cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  461.069292][ T5701] ==================================================================
[  461.085871][ T5701] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  461.088113][ T5701] CPU: 0 UID: 0 PID: 5701 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  461.090911][ T5701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  461.093892][ T5701] Workqueue: events smc_ib_port_event_work
[  461.095747][ T5701] Call Trace:
[  461.096882][ T5701]  <TASK>
[  461.097795][ T5701]  vpanic+0x56c/0xa60
[  461.099015][ T5701]  ? __pfx_vpanic+0x10/0x10
[  461.100477][ T5701]  panic+0xc5/0xd0
[  461.101750][ T5701]  ? __pfx_panic+0x10/0x10
[  461.103271][ T5701]  ? preempt_schedule_thunk+0x16/0x40
[  461.105071][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  461.106984][ T5701]  ? preempt_schedule_thunk+0x16/0x40
[  461.108687][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  461.110735][ T5701]  check_panic_on_warn+0x89/0xb0
[  461.112189][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  461.114321][ T5701]  end_report+0x73/0x170
[  461.115761][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  461.117615][ T5701]  kasan_report+0x128/0x150
[  461.119064][ T5701]  ? __ethtool_get_link_ksettings+0x230/0x250
[  461.121343][ T5701]  __ethtool_get_link_ksettings+0x230/0x250
[  461.123161][ T5701]  __ethtool_get_link_ksettings+0x11f/0x250
[  461.124945][ T5701]  ib_get_eth_speed+0x180/0x7f0
[  461.126360][ T5701]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  461.128328][ T5701]  ? do_raw_spin_unlock+0x4d/0x210
[  461.130212][ T5701]  ? rxe_query_port+0x6b/0x3d0
[  461.131953][ T5701]  rxe_query_port+0x93/0x3d0
[  461.133593][ T5701]  ib_query_port+0x16e/0x830
[  461.134991][ T5701]  smc_ib_port_event_work+0x147/0x920
[  461.136621][ T5701]  ? rcu_is_watching+0x15/0xb0
[  461.138064][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[  461.140161][ T5701]  process_scheduled_works+0xa8e/0x14e0
[  461.141850][ T5701]  ? __pfx_process_scheduled_works+0x10/0x10
[  461.143642][ T5701]  ? assign_work+0x3cf/0x5d0
[  461.145054][ T5701]  worker_thread+0xa47/0xfb0
[  461.146525][ T5701]  ? __kthread_parkme+0x71/0x1f0
[  461.148230][ T5701]  kthread+0x388/0x470
[  461.149584][ T5701]  ? __pfx_worker_thread+0x10/0x10
[  461.151126][ T5701]  ? __pfx_kthread+0x10/0x10
[  461.152511][ T5701]  ret_from_fork+0x514/0xb70
[  461.153895][ T5701]  ? __pfx_ret_from_fork+0x10/0x10
[  461.155451][ T5701]  ? __switch_to+0xc89/0x1420
[  461.156900][ T5701]  ? __pfx_kthread+0x10/0x10
[  461.158318][ T5701]  ret_from_fork_asm+0x1a/0x30
[  461.159866][ T5701]  </TASK>
[  461.161746][ T5701] Kernel Offset: disabled
[  461.163109][ T5701] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:09:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900063271d0
R8 =ffff8881684f0237 R9 =1ffff1102d09e046 R10=dffffc0000000000 R11=ffffffff85660b00
R12=dffffc0000000000 R13=ffffffff9aac5080 R14=ffffffff9aac50c0 R15=0000000000000000
RIP=ffffffff85660b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d966000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b43feb7c0 CR3=0000000024586000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f2b44d5d560
XMM02=00007f2b441f25e8 00007f2b441f2618 XMM03=00007f2b441f2600 00007f2b441f25e0
XMM04=00007f2b44d5d020 00007f2b441f25c0 XMM05=00007f2b441f25d0 00007f2b441f2610
XMM06=00007f2b441f25f8 00007f2b441f25c8 XMM07=00007f2b441f2600 00007f2b441f25e0
XMM08=0400b35bb35cea09 14bdfc1565eb0437 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000f RBX=ffff88823c623c80 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000000f RDI=0000000000000838 RBP=ffffc900001d7c88 RSP=ffffc900001d7bd0
R8 =ffffffff81b3e8d5 R9 =0000000000080000 R10=0000000000000000 R11=ffffffff8174c530
R12=ffffffff8174c530 R13=1ffff110478c4799 R14=0000000000000000 R15=ffff88823c623ccc
RIP=ffffffff8175edd9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f66000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000001bcf28000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a303d6e656c7620 343d657a69732029
XMM06=6e6f6e6128204d55 4e45205d315b0a38 XMM07=33203a657a69735f 6c61746f745f6674
XMM08=620a32203a6e656c 5f7274730a323120 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
