last executing test programs:

4m58.33553982s ago: executing program 2 (id=799):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64)
r12 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)

4m58.281563129s ago: executing program 2 (id=801):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000002000000085000000c4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m58.232322187s ago: executing program 2 (id=804):
unshare(0x22020400)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(r2)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0xa0002003})
epoll_pwait(r3, &(0x7f0000000280)=[{}], 0x1, 0x800, 0x0, 0x0)
listen(r4, 0x0)
shutdown(r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000016c0)={0x40000001})
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r6, 0x89ee, &(0x7f0000000300))
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc)
sendmmsg(r1, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)="6515337cb6", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002700)="8a29ae04ec", 0x5}], 0x1, &(0x7f0000002d40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0)

4m57.325732967s ago: executing program 2 (id=827):
syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600200000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0)

4m57.32520951s ago: executing program 2 (id=828):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r2 = socket$kcm(0x2, 0x3, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
recvmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r6=>0x41424344}, 0x4, 0xffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r6, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
syz_emit_ethernet(0xffffff1a, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, r6, 0x0, 0x0, 0x5}}}}}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4)

4m57.184106763s ago: executing program 2 (id=831):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0)
r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r4, &(0x7f0000000200)='FROZEN\x00', 0x7)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4881, 0x0)
ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000080)=0x1)
write(r0, &(0x7f0000000340)="07000000010000", 0x7)

4m42.055559351s ago: executing program 32 (id=831):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0)
r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r4, &(0x7f0000000200)='FROZEN\x00', 0x7)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4881, 0x0)
ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000080)=0x1)
write(r0, &(0x7f0000000340)="07000000010000", 0x7)

1m8.406184326s ago: executing program 1 (id=4310):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4) (async)
close(0x4)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x100010, r3, 0x55565000)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x9, 0x22051, r1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="31830000000101801400020064756d6d793000000000000000ff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802560000b3a2000000000000000000008565bd7a21761210000001000000950000efff0000167087998665d1103131cb0e000000001b15f009edeb35685f17a0f5925f02ce41c6bfdc82a4f324fda10686c543f2b96af774c3df558c022ab329938258f63c86ec56431569a6e4941cb72676bc23d36bce3dee70a9d6eba6378ac21930a57b00000000000000000000000000000000000000000000fea242957803ea4dcc8cf14acd2b842a16dd0c093e276fca434b3068115b76156cb242d90c307609b7271c054e12c01586cb3a362f14610071d50d9434d139ef54af5bc8de3f9546b085c0cf7a614c739b10dc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

1m8.172154963s ago: executing program 1 (id=4315):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000060000000a0003001c306f2500000000180012800e00010077697265677561726400000004000280"], 0x44}}, 0x0)

1m8.160307928s ago: executing program 1 (id=4317):
syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00001f000000000000000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0)

1m8.080451691s ago: executing program 1 (id=4318):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x699b67950d2f3504)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socket(0x1, 0x2, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000a40, 0x200000000a70, 0x200000000ce6], 0x0, &(0x7f0000000100), &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)
recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x12, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0)
unshare(0x20000400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4008af21, &(0x7f0000000080)={0x1, 0x2, 0x30})

1m8.002030998s ago: executing program 1 (id=4320):
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async)
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffb, @remote, 0xd4}, 0x1c)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1cc0d8c8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
getsockopt$inet6_mreq(r0, 0x29, 0x31, &(0x7f0000000180)={@private1, <r2=>0x0}, &(0x7f00000001c0)=0x14)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x6, <r4=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) (async)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20)
pipe(&(0x7f00000007c0)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000a3000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x25, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @ldst={0x6, 0x3, 0x0, 0x8, 0x1, 0x40, 0x10}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='syzkaller\x00', 0x29, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x12, r3, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x9, 0x9}, 0x10, r4, r5, 0x6, &(0x7f0000000880)=[r6, r7, r8, r9, r10], &(0x7f00000008c0)=[{0x2, 0x2, 0x3, 0xb}, {0x2, 0x1, 0x3, 0x5}, {0x2, 0x2, 0x4, 0xb}, {0x0, 0x3, 0x6, 0x4}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0xa, 0x8}], 0x10, 0x140000}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x94, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x335}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}]}], {0x14, 0x10}}, 0x1ac}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x94, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x335}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}]}], {0x14, 0x10}}, 0x1ac}}, 0x0)

1m7.877590951s ago: executing program 1 (id=4323):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1f0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xa4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @ldst={0x7, 0x3, 0x6, 0x4, 0x8, 0xc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x1, 0xd, 0x1, 0x6, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0x6, 0x1, 0x0, 0x8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x10, 0x470bd2f, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24020011}, 0x4000040)

1m7.784047298s ago: executing program 33 (id=4323):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1f0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xa4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @ldst={0x7, 0x3, 0x6, 0x4, 0x8, 0xc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x1, 0xd, 0x1, 0x6, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0x6, 0x1, 0x0, 0x8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x10, 0x470bd2f, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24020011}, 0x4000040)

1.449813876s ago: executing program 0 (id=5783):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=@delchain={0xd08, 0x65, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfff1}, {0x7, 0x4}, {0xa, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_RATE={0x6, 0x5, {0x8, 0xc}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5a}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0xc9c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_POLICE={0xc70, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x5, 0x67c4, 0x5, {0x7f, 0x1, 0x4, 0xfff, 0x101, 0xffff0000}, {0x9, 0x0, 0x5, 0x0, 0xffff}, 0x4, 0xfff, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x6195, 0x7, 0x4, 0x28c3, 0x40, 0x7fffffff, 0x80000000, 0x4, 0x100, 0x2, 0x8, 0x4, 0x0, 0x9, 0x0, 0xc4, 0x50, 0x6d8, 0xa, 0x40000000, 0xffff, 0x23, 0x80000000, 0x9, 0x41, 0x1, 0x3, 0x16a9f774, 0x6, 0xc, 0x91, 0xfff, 0x6, 0x81, 0x1, 0x9a76, 0x0, 0x400, 0x9, 0x2c, 0x10, 0x2d07, 0x9, 0x6, 0x7, 0x4, 0x4, 0x400, 0x8, 0x5, 0x18, 0x4, 0x4ac6, 0x9, 0x7, 0x401, 0x5, 0x5, 0x7, 0x5, 0x8, 0x2, 0x400, 0x9, 0x0, 0x16, 0x2, 0xb, 0xd9d1, 0x7, 0xfffffff8, 0x81, 0x9, 0x8000, 0x2f, 0x3, 0x80, 0x8000, 0x2, 0xfffffffd, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x60f, 0x89b, 0x909, 0x0, 0xa, 0x120000, 0x4, 0x6, 0x0, 0x3, 0x1, 0x2, 0x6, 0x5, 0x800, 0xfffff165, 0xd66, 0xa, 0xf63, 0x0, 0xed3c, 0x338f, 0xfffffffb, 0xfffffbff, 0x3, 0x1, 0x9, 0x9, 0x9a, 0x8, 0x4, 0x401, 0x7, 0x4, 0x7, 0x0, 0x3, 0x7f, 0xffffffff, 0x1, 0x0, 0x6d, 0x401, 0xf, 0x1, 0x7f, 0x4a17f805, 0xfffffff9, 0x1, 0x0, 0x10, 0x1, 0x7, 0x9, 0x7, 0x8001, 0x3, 0x6, 0xfffffffc, 0x400, 0x0, 0x3, 0x8, 0x4, 0x6, 0x4, 0x400, 0xfffffffb, 0x6, 0x2, 0x2, 0x2, 0x6, 0x2, 0xb74b, 0x5, 0x9, 0xfff, 0x8, 0x0, 0x0, 0x6, 0x8, 0xfffffff8, 0x2, 0x3, 0x9f, 0x2, 0x18d4, 0x7f, 0x3, 0x2, 0x5, 0x0, 0xeb7, 0xffff, 0x5, 0x3, 0x7ce32dfd, 0x7, 0x7ff, 0x1d6, 0x9, 0xff, 0x10000, 0xe1d, 0xacad, 0x80, 0xc, 0x3, 0x1ff, 0x8000000, 0x2, 0x2, 0x213, 0x2, 0x3ff, 0x5, 0x5, 0x4, 0x0, 0x9, 0x401, 0x2, 0x8, 0x41, 0x6, 0x5, 0x6, 0x2, 0x7, 0x0, 0x2b18f32a, 0xed, 0x4, 0x2, 0x3, 0x7, 0x6fc, 0x0, 0x7, 0x8, 0x4d80, 0x6, 0xfffffff7, 0x4, 0x9, 0x5, 0x1, 0x34, 0x3, 0x7, 0x9, 0x3, 0x4, 0x5, 0x5, 0x1, 0x6, 0x8000, 0xfffffff8, 0x5, 0x4, 0x9, 0x4, 0x7ff, 0xffff, 0x95, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0xfffffff0, 0x6, 0x8000000, 0x8001, 0x7, 0x10001, 0x9, 0xffffffff, 0x6, 0x40, 0x2aa, 0x2, 0x8, 0x2, 0x6, 0x0, 0x0, 0x8, 0x6, 0xd396, 0x5, 0x10001, 0x3ff, 0x7f, 0xc85, 0x7, 0x3, 0xfffffff8, 0x800, 0x0, 0x284, 0x9, 0x8, 0xfffffff1, 0x0, 0x3, 0x0, 0x9, 0x8000, 0x4, 0x7, 0x3, 0x40, 0x9, 0xfffffffa, 0x9, 0x6, 0x3, 0x8, 0x2, 0xbe9, 0x2, 0x9, 0x5, 0x9, 0x81, 0x8, 0x400, 0x3, 0x1, 0x0, 0x4, 0x2, 0x8, 0x9, 0x7, 0x0, 0x8, 0x10001, 0x7ff, 0x6, 0x800, 0x1, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0x9, 0x8, 0x3, 0x7, 0x9, 0x6, 0x6, 0x454, 0x2, 0x6, 0xd774000, 0xffffffff, 0x6, 0x6, 0xfffffff9, 0x5, 0x51, 0xa8e, 0x17, 0x2, 0xa, 0x1, 0x2, 0xffffffff, 0x9, 0x7, 0x0, 0x8, 0x8, 0x6, 0xffffffff, 0xfff, 0xc90, 0x0, 0x908, 0xfffffffc, 0x10, 0x7, 0x0, 0x6, 0xb3, 0x2, 0xe, 0xf0000000, 0x12d, 0x7, 0x4, 0x2, 0x8d3, 0x0, 0xcf94, 0x80, 0x5, 0x1, 0x3, 0x800, 0x0, 0x6af5f83e, 0xb, 0x8, 0x1000, 0x8, 0x1, 0x8001, 0x2, 0x4, 0x3, 0xffffff01, 0x2, 0x5, 0x100, 0x9, 0x4, 0x0, 0x401, 0x0, 0x10, 0x8, 0x0, 0x1, 0x8, 0xc8d5, 0x12, 0x1, 0x101, 0x4, 0x3, 0xfffffffe, 0xffff0000, 0x9, 0x1, 0xfffffff7, 0x7, 0xfff, 0x1000, 0xfffffffc, 0xffffffd9, 0x9, 0x6, 0x9, 0x2, 0xe38, 0x4, 0x442c06fd, 0x7, 0x8, 0x6, 0x5, 0x8, 0x9, 0x2, 0x5, 0x6, 0xfffffc01, 0x9, 0xaa4, 0xc, 0x1, 0x32b9, 0x2, 0x0, 0x9, 0xd, 0x5, 0xb, 0x1, 0xfffffff9, 0xfbdb, 0x4, 0x4, 0x79e, 0xffffffff, 0x800, 0x5, 0x3e8, 0x400, 0xf140, 0x4, 0x0, 0xc908, 0x7, 0xe70e, 0x6, 0x3ff, 0x6, 0x8, 0x0, 0x4, 0x22, 0x3ff, 0x9, 0x2, 0x1000, 0x0, 0x4, 0x52a2, 0x3, 0x1, 0xa, 0x1000, 0x6, 0x3dd340, 0x7fffffff, 0x7, 0xff, 0x3, 0x8, 0xe692, 0x4, 0x40, 0x9, 0xb8ad, 0x9, 0xfffffffd, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1, 0x101, 0x8, 0x6, 0x4d, 0x101, 0x7, 0x8, 0xfffffffe, 0xfffffff7, 0x6, 0x0, 0x6, 0x7fffffff, 0x9, 0x100, 0xfffffffa, 0x350, 0x9, 0x81, 0xff, 0x10000, 0x1000, 0x3, 0xfffffffb, 0x9, 0xad0, 0x56, 0xb0, 0x3, 0x0, 0x80000000, 0x4, 0x6, 0x0, 0x5, 0x100, 0x1, 0x3, 0x8, 0x80000000, 0xe1, 0x8, 0x3ff, 0x7, 0x1, 0x80000000, 0x80000000, 0x2, 0xa, 0x9, 0x500, 0x7, 0xffffffff, 0x9, 0x861, 0x2, 0xa9e4, 0x6, 0x3, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x2, 0x0, 0x7fffffff, 0x4, 0x5, 0xffff, 0x3ff, 0x1, 0xffff0001, 0x4, 0x4, 0x3d, 0x40, 0xfffffff8, 0xe, 0x1e4c, 0x3, 0x7, 0xf33, 0x6, 0x6, 0x80, 0x2d, 0x4, 0x10001, 0xffff, 0x4, 0xf4, 0xffffffae, 0x10001, 0x2, 0xf0, 0x10, 0x4cd8f02c, 0xd1ed, 0x0, 0x4, 0x8, 0x3d9420df, 0x2, 0x1000, 0x4, 0x7, 0x101, 0xffffffff, 0x8, 0x7, 0x4fe, 0x5, 0x8, 0x3, 0xd79, 0x400, 0x2, 0x3, 0x3, 0xe, 0x6, 0x5cd3255e, 0xd7, 0xcf, 0xc, 0x6, 0x4, 0xbb, 0xd, 0x1000, 0x9792, 0x1, 0x5bda, 0x61bb1fe, 0x8, 0x6, 0x9, 0xfffffff3, 0x0, 0xdd7, 0x400, 0xffff, 0x259d, 0x6a5, 0x3, 0x4, 0x7, 0x7, 0x7, 0x80000001, 0x30b, 0x9, 0x3, 0x0, 0xb, 0xffffff0d, 0x1, 0x490, 0x3, 0x2, 0x800, 0x100, 0x8, 0x9b, 0x1ff, 0x3, 0x0, 0x7929, 0x1, 0xfffffff7, 0x5, 0x8, 0x6, 0x9, 0x9, 0x40, 0x8, 0x1, 0x8b69, 0x7dab, 0x1, 0x2, 0x7, 0x0, 0x80000000, 0x4, 0x0, 0xe0000000, 0x2, 0x7, 0xf7e, 0xffffffff, 0x9, 0x6, 0x80000000, 0xe8c3, 0x6, 0xa, 0x7, 0x81, 0x332, 0x2, 0x9, 0x7, 0x0, 0x4, 0x0, 0x3, 0x6, 0x7, 0x10000, 0x0, 0x6, 0x8, 0x10000, 0x4, 0x0, 0x7, 0x2e, 0x9, 0xfffffff8, 0x6, 0xd, 0x8, 0x0, 0x9, 0x0, 0x4e13, 0xc858, 0x3, 0x7fff, 0x101, 0x3, 0x500, 0x8, 0x4, 0xffffffff, 0x1, 0x5, 0x0, 0x1, 0x1, 0x9, 0xf254, 0x0, 0x5, 0x6, 0x174, 0x3, 0xfff, 0x9ce, 0x1ff]}]}, @TCA_U32_LINK={0x8, 0x3, 0xe}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}]}, 0xd08}}, 0x4000800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.295613293s ago: executing program 0 (id=5790):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vcan0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001980)={'sit0\x00', &(0x7f0000001900)={'tunl0\x00', <r2=>0x0, 0x8, 0x700, 0x5, 0x0, {{0x17, 0x4, 0x3, 0x13, 0x5c, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @rand_addr=0x9, {[@noop, @lsrr={0x83, 0x17, 0xb9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @local]}, @end, @ssrr={0x89, 0xb, 0xe1, [@private=0xa010101, @private=0xa010100]}, @rr={0x7, 0x1f, 0xae, [@private=0xa010102, @multicast1, @private=0xa010101, @multicast1, @loopback, @rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0x1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fbbb3c995d71235a43222cbf9a7d89204800fd2649c034b752f144b8c86b831b", 0x20}, {&(0x7f00000004c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="affb39da77ac21cf3100a5c5fa551d150f9266a090fde1ab3002111a6d98fa64d3a69081eff3b64a4d13961611097fbfb6110897edafa4b978e2750e84f842bf24593afb81c7ee4bbc3446477a492e2302fa59a78649630d6f40d2c6e184cf7e61de19fb0d3525acd063cc0f75c384f1a428338a0d087cd63690fa8a84bfe55badfcbe6788dbcdf0539417c5a8543aa3cb7ec12a11a9cf7e7c3a630289d2c9e961973f951f207902ffd2422fda1232e83d08a82f860817f3f3ea991b8ad420670cf18b88ada3026989deb8051cd1007e53fa50fdcd", 0xd5}, {&(0x7f0000000300)="eb27622c5dce7b032b327c1991aefc18702c8f1882f4cbb91a6535af40c6cb9b142b7ee8d92122ef353dd5bd465e8213eaab25ce0013fd568b59240be40a4a46f32e8e87b2d25848fb064bea6d", 0x4d}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff00}}, @ip_retopts={{0x10}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xfc, [@broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000014c0)="e5127f224587d728c3c20aa40b401df6c8deeb1f793ea10434ef250d2fdeab908315097903b58b95729b1a400035a8efda65cdcf29db5c4de59491d8aeaf6d5c47017ec9e8647cfa5d3cb13d68184869be5fbc53093e8d3b63f3f8b7cc38981af5a1cc0a6aaedeb9ece4ffcba4add461ccf1dcd09e1b51fac24b8863ee85f44d42ebf05bbd3b46dc25af3a6abc0084eeb5d300b448b4fc78b7772850cd5b1ccc73b65a12a4d70b023bb7416267f7650e56f8dc612bbbbd43e6b2bcdced25dfc3677e93734fbdb01da6c0d7dbc4dbe03a29081bd9150230cca0a91bcebb55bb93f23c343cadbbdcceb159b2de7da33858bc8c93763c", 0xf5}, {&(0x7f00000015c0)="9abe08bf8bf58d36d0991fb3fa368eaa206e44762adc0742627e0de4f6eb185918b67955f11fd63307d15eabd68b4639f2e494de851153b9147c58c99e5cf08616398965fc357bf0692494f1d1233404d42ef79f47ef81333dccd1fc2bc67d770892615d0ecbe558df82e3aef8327218496c70cfed5d32239fb58628b8676c4642c7b1ef1e39c59a09202b809c1cdd7c0b6c1a06e029e8f7d615b5d9bd547bdbfb46293c698e43b4c8c806e8f2515c2cfec08f1b44b7f5385647d7c21e966294afdeb9aaeb45b06a2a28f95ab5250cba11fc5a09c715", 0xd6}, {&(0x7f00000016c0)="35fa969f823ac9af54bdef4bf16af9bc1ed3d5f47b38df0c6674b6e2e6d4a46d14", 0x21}, {&(0x7f0000001700)="ea90991410dcc6c828c90659d08aea01950742baa4084eb3ba8314e8a2f168af01817917d374e6c0bfc81e81be4ef24ed4c3631080df41b44d27b441cd2ba215dc1237cab8c239c5e54c712ab50940c69a7f026e07937e4d6c0abef308103819dbb3a5669f28d19570e46745bcee168403", 0x71}, {&(0x7f0000001780)="12366d9d2bc1ad36cba15dec9a36a7086e799fad99edb639a82f89de44fcdee15c08b224c728a0ffd7f0545bf86ac2109d44c9b54d8530f855de", 0x3a}, {&(0x7f00000017c0)="4fd818ac849155b1f80113851b1027808dc020f6775b54ddd2ebd923524270fd504e79aea95e58c0a77c5c06f997760620ce069960498fbb62", 0x39}, {&(0x7f0000001800)="91b7d2e65f6079e9be79f0d0df20ccbdd31c", 0x12}], 0x7, &(0x7f0000001a80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x4, "edcb"}, {0x5, 0x4, "20fe"}, {0x5, 0x11, "f57680f674937dea937c1641265f1f"}, {0x6, 0x10, "f9f2279d9864f57fa1630c2c4f9a"}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb, 0x0, 0x7, [0x2, 0x114]}, @timestamp={0x44, 0xc, 0x91, 0x0, 0x1, [0x7, 0x93]}, @ssrr={0x89, 0x1f, 0x54, [@private=0xa010101, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @lsrr={0x83, 0x1b, 0xf3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @broadcast, @broadcast]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}}}], 0x188}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001c80)="8ef8a8ab8fbe4b2a875b26da082b347cd90036972d04e2cd46fba63de82742a5d7ccf3102de274f943ebab8b4a5369581e30eaf467418f06eefb8080844a990f046fc698b1b046e59b23c0a2b83a71cfca0b4d6673", 0x55}, {&(0x7f0000001d00)="7ed21db6e37fc3f53033b26f15545593f8b0badc1446b1018ca0c604cc0b3d4eecb41935a13fc03a0e56e08407928ba1cb2c185b8c56c153770b68e3d29e983b6f5a280c9ad7708b8d56cd1a15a083967efec0fc1b788fb3122207703be381f636d88092b1e1ca5dec15cbb6bd56e03b8b24ff4a0ef46c866fafe3851a20cee1736a5bf39ed2ca741b1de867d5199e3f5281a2cc3d92a5e17451a870cb8b9ecff81bbad491b224c462465182ee505154738b5c069a060ca28d10baa574e1c8afe538b2915412be91b7e3d7ba8e60182567ded1d2cead8dfb2cd83d946f79ee1ed6867dc2b6e81a007678e1887cefd643597127bca1248b0c88b7a9a5459dff52325e7f6844df6279034eb3363919aa84e39bc4ce9c357abdfd683d42a19f99f0f00b4d64e714a53a6f24010ffc5cf3190067a004852188cd36adf600131a475001f4fb94536b50ed7f11c27ade452b7769ce08f18d7d09f1f5a2a4fa6bae1b47840abc946a5fd8f85917b9e1f8e4105c2177023f5c775ca353dda0480038c2ec2cadc2a6d29fca7efd2be4e9ba5f0f87a773d8e4c993ef3f2844bd7f120da5f23bbd20841b14a689dfe6cf5fac9dc30535c955d5807bc296b6c0f1ec57bb33ef80a9ef3a2073d9083f2dd73a8f54b7d603e1241d333cb97cb09f247ae0e380c69ea87f1679fe218ba16a11576558a23ec592ac6ce193aaa9c133d2691658d164616f04f13c8b791a043062386390c787ad59388793795b3c7a39e6e03a1ce6f08089d8acf5dfdb5189f1786a241598dcdb9c9698b7506cc46b591969518b62e11481e7244e1f318c3cfc45a7b159ffe374c297b4cec43a1bf8cd77355ef542a94a8684eb7151723a25a811ba4fc14214f83fe6d0db1b606499201b86ed3533fd113baca47f1db16afa3461a8da8cda8e1944084efc94f2418a650eb687539b7ee1cf8072bc3a1e7d96f55ed32096a324f0fbba3bfdaac7b8abe7570a432d93faddb55b07b64ad8afab8277af4237f7be147ff4fd2e8cfa48b823b3f15a5e362a415fd4c3f0fdb0d4999906fa937e22d3484174bda91edf95dd4adadce203289b5a7f663e1e05580df012b5c0ba67ac45f0be769ff8482e072abfd6d7192b40adc060ea8d99510a132052f3744053414dcf515ca65a83da0829c785e8e412336e63595e4c80d251e23d4ce1955827cfbc523c3d8948da2cb943e6a18b45b0ab3242f32adc93313d3d6aab03b04e097a26440e552121eb0e70a263eab259e8b2331f45a4cee58055cf899a2f17e3e04f3365b13f32c607eae718f03574c222dcdb8314d85bb94d8172524ce0ecfbb2cb044ce9c00ef0c52b141f3bf0ca823bdd282ead8f249bd5a320d065c94fef538ab471e0f4b87e13ee2c8c4cca78e70424236bd626c79df90bf7739c0c6d5169e6dd9e1a439d56df3dd8195619190839705d9168c68fd150a7bf7cadaa8679a6085d64b054e6b9e19b0ecde1ff0d7ced572cefdff99613d1516d3401fa652bd102438ee47d1dc952cdbbb244ccd358c11ae0f54e68d6a57b0f7c723b1eeb418651f8010fc540e02b7c12160fb6f7ed2a8c312c562e7915c2f431eaa51e051c0c38598b7a7abe55ef6db877508b3ecd35f9fab01dba4b00fc3d98611bce0fc7f2c48ecfb6dd5c1e5145c129a30380a345c264b44dd68e52f79327e45e98e6cec206509e1ac8a720f4697a3fca823ee13e5b158ad1d5325f620050bc31f53f8cc44fd568157e6a3ffc3a3c40ebecb68522519bf01d8573d5307de960eef5a505c2923d687425225b8f3a955d825394c0ece8c8ac1e8dffd8745dd3cd782939afac5d61594ba4c43a980953a7d3b7edb40ca0e612c0b70b31929047904590414473ac6cace3dd27230d190990e7f354c461fc44a262a76e1a7a276754b93f60527b9463226a0b12f48510ecc74d1701ee6922ab78674ee44538386c25ccd0705f9a707defa3f626c143ca1ff1c07d38305cb9f8b97608141060028d0a6ac5cc910e83c84b0dc414cedb046760e703b221fb6128e72e035e2e6f34820e0a385ca8720214a0f2d61f697eb1d60d85e9dd9779f54844c9f65cd95d31d325437bd0485b65a024e0f2f61d6ed2a3b3a7e34f273ef76f1b0ce363eb95cbc3d66f02cf97d455b64d30504b7ac01896d99563b8c7e19d155241d0de70dd028de23d6e4f478bf035b26d2c7dc503897c0fbe42ac748dd58b0ee8703f99ddb8d9b87022a7403ec111c70778351e1fbe1d945bbe784669961842d2aa7a212e058da69d5544beab3f9a5ee500fd4d585241bd6ed24799c3d925cbe8fadc629b448d9971d391a7f6c6865bcc4d08c5e146064e24d94c5eb7c75f5ce93a09f712b0fe20eb26a80a33a048dc3794d267de1bb4d2d73e1e8dacef7817b3e3698fdd5777a27ed2453972f46238ad6ee38aaa824b92c402268735a32e6bcf6bebe15daf9c7c2c8a06eacfd281c3bf884b4b4615a824b0814806415515bdde2bf2f35a0634be81b6ab41eccdc725f86801b53057f567daf0a61559380a0323bea2430ee8fcf4717c317ace323c2f1ae8f0d2d9584258647c508da3a17b06889f8be0c65445ad04fdce70c4633da18d53b03bd419f9c4a427a8c992d9b12f4c7b4e669c081f0c8900c33ad8a7fe8d67f5060a5bc46310f9311630a673ebb8ece5d872ab2b20b9e7a782f3f72432716fac34746beeec60515e889e47ddd94612d87e9a5628d74cdf661ebf0a23734339115d17111c41e6133feb0a067742aa84a5af4c8e45706e1137909a220f11e322c5d7eea0ca1ec4ba80c0ae5b1e6cc98691b41bc317a717623562c1f7b293d161f52d2fab7ca05df965bb63a3c78cf7cbd398ab4ed42013ea7d1357890aa12382f3f9cef7c2671bc234d8a6a215b5f628579771eab365ff9f379818176ed9fcda422720f5e5f582de4f14ab701677062676c24e04ad7d85d335c4acf243c55bf97ebdf9b36908ed9154250d68337e4a84f03f450798f069c773be7c1f4927e27f97f60e7e32e2b56f41c7a5d8eef93f5d4666e40de9a6a07f4879a221dc2659e469abdcfb273adefb931c0fc883331be1af46122d44a75c83f89fc65f58a4e0bf48f79e5973bd320a57ac8856236646edb4328c1c9fc3df3b58fd964aa0d628ab81f3079ed003de4159d1537347dbf9ddff2873332e648f984b27b775e17938178e579562c965cbf1af941988560f7c0b6bec40e0aa9d8b84a26fef03eca4c38b9e3a77c703a7f752090bc04602215506eb83d6256e64e5ed076d4b9b044d62650be142f335452a02c6becdbc45daa868c62485d09261220de439e37df1da368e72c10864add22e071c3b06020801a486ec711800e7288aa33d9512db305877b286a66f9dfcffcb596d8918b42a4d4ba022db04f67a275432a1bc96d8151e13284e19403c4f410b1dcfd61c439ce3aef97049713041d53fdcca04e0720624c06e91eb1b2c26094c842bc231a01187f15b0dae93a779804632ce92852f55b0cd3cf4be8e517fafbd115288a40a3559c20e84f49e32bf89ea85c34cc878a5b94ba6127493621f8fb6ee20e96e944e288c109629adbe391644310f6f9e3dfc99498d6982fe5c2190b1cb6fad7666469728693aeac9bc3771b82fe2a32dcf57e5441bdeda24a144321f65aeb6c86907ced3f41927a4599a4ca7606487b58050173c9d95f5d00270ef5b88c948ddab09e8a609271d10dd84c1bdab1a73c410a32b83987fba69da6703ebbe7ce43827902681ce4af7902302fc9f02f186a0878e27278dc842d0e9ecfd05a3464c2dad4f1b448aea9c1dedb9d41540e17cc96009f8dc2db66afcdb392e679302d86d14f150a8b0add7f3b31c8fd1c042a8e27ac7f30788511c2dc6892fef88fa736b7328940d14a2d8cc77f7202e058af4aa81308f3e2bb960efc66d9e857ea2d2154babc19afaed24a1d8097c12af8de649c7392fe8d4073482217b6b219cde98c5c2a34287fdbff59e9d2000cc09c806f7173d6e42a95c418999c015b21100361775aa51c34343510d5205d4cb6b8d652ba9e33fe5614baf896ebf663d57f47e100b8fcc22a78ad5d57a9ffc74fdf7b84bc94fcd7444449ee413847c13c6b6dbbac632f9326f1c56e0d83f4df1f32bc77f3c74f28c8db08cebc5682dff65c0bf42e662368feeb24e12624b0f0aeadd29c91e8786a9b64cf301cbc0e8dc327be77ed161ad7ec89fce6be404c3d2a42914b49d6d68032e571d74f0b2e8e93e495b5d0cc7129429645613a8eede619045904c80923cbd5c2de2151bb9033dfedca6374664df88ae752b91309cad7a4f8383451c706b2f2ce60851c8e255003e71bf865b4e2a8bf6839bdcfca1c19eef2f63c71a72717e7bbc4d461e4cdd111e926d112d70ff7dc79efa744822aa9b755ec9aebc2ef6f7d6b7d7b32ce1bbc2eb54fbfa7ad26f507b8bf96dc28504984dc693bc0ca5d85a8c2a8832f70b51c7e4aa6e1f91607736af2e0d5b1b843dabf66ae4aa11ac7614104940f8240b5eb39fa9f330860a48e6a5b455e68512108d63ed763f93fd9fd425e382508352a697d432bad5d3072d8fd0d45cd1868c7d93f7a640f822fde546fe8208a8d2e7ef824e88613c44c4ef374d26e74077ed51eadac5e9e3eb33efa05d6c343f00a5f482a7dd723d9b9bd7c7a8f94bd0cff0cf431f7aa506403f400c3e197206ca5f03417c28f097366c191cdd03d9bb6d58b31643e653394e4f55b3dd12b062662b914a99629ad7f0af8085215488c53e3f7be39b123cee42bcae2b36278dc1e2e6a8293d4874155a7ec9f0e4fb59b0bda9f46b50d29ec234a9ba4458b00d1be82ea6a176e58b55604f2cd61a81c82652f8d85a8feaa2855c00a32193f0b8a71b31364fab2c8159556270b958615693fdf9d6c94005d59d14c6f0aa32543ec4a6ec4f6781e2fd82cf6020465efab9fcf07fc6a48f8c7e8424a17b71d46fb96f5602a0444ad260072a1b2f54625562e0e720d8e3ad15089eb037507ce8da11aca8a4ecb7ab9a08cf4521c3dd52ab7f968b0fb0de5fd1a790c521458e139cfa1790b7cc01bf06f87768eebe08ab0d84570b8e31a86a91dc8e059f704873fa78c96e5541f25f9e44600160e37f1733265950448c228f2aae1a692d6ddcb30369a47e427c79bf424a835221445da062b9be5d8f61f8adc18d9085c5adf5d7ed4c229313a933dc0f59fa115f34b1c7f48d09bcaacd95d0daada6c7d1cea89368c8e7723009f6ecfdfbcff55b7d6abf8d6501cac6ccacae75db3e874b5a467130158375b9bcc11e3c004f7083166b352bc20149aa859d2d149e0927a7baac71e72db0084146aa4ffdac10e59cd72aa0e2cad5f393ad96af2e7c71b4a030409da34d87eb45d4778ca1468ea9f91ef6313dc197beb8314fa422d99bcde4f6e8c1d4fc02e831a7841119a67a97f2b116636f6d80a40e4bc3a700ff1b754d35bc8bb4b5573efa107f31cccd2152f4d6bd6e5b3befb6c0401cb848822f93f10141eb4c7326ff44c633ff02674ab641f415d5fed339944e859bf365498ac2932e83771369831d61d0de209d59c4fd9ee28af9b0a8b97a4729ec1a3049a749671212c37856f3344ef466f86ab19d554757effc1b2e0726ed13a50929ec3d8ba487b4924d4f47e872ef0af5228a35bc513c3f41cae1d22c69240c94bcff34f82bc76f1c4346aa30ef4bfc83b969fe58537ed52e390d80a8e09cd695f182081088bd6a1b5989e5062ae259c23088d2d4245a89a2f4364b80c20f147d613f5a5499a3504b6f0167840e20b232a2a4a8fbed2b", 0x1000}, {&(0x7f0000002d00)="d1ec82afd636118f9ecb1c136486851cdfc3824452969507072936a5a29712ed959d7716debe94396b7e58a271bf988007e493a378ecb6c018c75156cf53ec6ae3fe36af232605a6922d6cfbcf07b1d01563f0604f45a2ecdcb179809cda90fb6a74124e093b6ffd2c5e636de65685717a170fbc3a888b5e904b", 0x7a}, {&(0x7f0000002d80)="2a45ead2a738c1708490a7851bcbc3240af266bfac49a367d3e853ac3f5fd00227174b0bacd6496a9dcb83b310fb6a46132c8ded74e6d69d011cedb611932ddc8f63a94c0354fd841cd6306030d027fb113ef72180b0b2d689d490c078648ef27df8805a54abd3d791ce9e6e0f1e2e6bcbb9b778ab053d842d517db1afdd6b04d87b0d704b1209ab4ec7d1abcb50b69a9c3c102bd92ec8592533bd9f8367f43e04684ff2d35630da01c41279bcca67e53f3a607581e34b8e6a60dbc814777699a2fc5917c69cc4f21c0e905ce5ac473e9027e86ccc30dd343440ab212a1f1e1133771e51b971", 0xe6}, {&(0x7f0000002e80)="45a10752ffae3d278e4653a86f22cd3a083c1e7e533a2b55b1c06031d750d8f2d10d8d243c096ed176b910d1ebfff56f86f8f13b5cbfd8fa09c69f54facf3f5a3831de6fd28d54793b80ce280da7278b3b2547b0afdef43fc4d54767bb0fc3b83265940079a63fa008b99c815149647d8688ceb6782816f82d6cff486dc458e0b2c0ce4c1ceb4384ca47c842c69bdeccb359d32b615a6eac969a8aa5152a4918ea51b1a9dba5db201bc2b7a13a5e052f0830cf041fcf8cc8d64991d3b9ca9fee17b5c6b00b255f595df234f9fd39899d324ce54ee024f0873471acf543f2600ccc9f351dad1ac6e411fec09cd5bd7725bfb23958d3d8", 0xf6}, {&(0x7f0000002f80)="f9d5ee7b061345c4de76", 0xa}, {&(0x7f0000002fc0)="a4964f57e2d3fec4d2bafe4ccb3ef7a1464f1524e4cabf4de1627473ba7721c4f9c3d5b9a5f4d44f3c8eb3e9d5de7a0b5d5a3c5ab746800f25fa1519255e362cc78aca1f2a90b54a14e24715e358ef6f67e475a5f5e17616e297886783ab1d96347ab13eec5724f6984f16c2b09d2d5fd1848ada60d542c2cdf5240ba399799c32095e", 0x83}], 0x7, &(0x7f0000003100)=ANY=[@ANYBLOB="94000000000000000000000007000000443ce703ac1414aa00000060ac1e010100000006ac14140e7fffffffffffffff000000036401010115ebc932ac1414bb8323c8e0000001ac1e0101ac14143aac1414bbffffffff0a010100ffffffffac1e000101441c7e43ac1414aa000007ffac1414bb000015c1ac141425000000068307d8ffffffff00"/152], 0x98}}], 0x4, 0x40)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000032c0)={0x7, 'netdevsim0\x00', {0x3}, 0x8000})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x3d, 0x107, 0x8003, 0x8, {0x3, 0x7c}, [@nested={0x14, 0x11, 0x0, 0x1, [@typed={0xd, 0x8, 0x0, 0x0, @str='}(/-$-^*\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0xc000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0xfe33)

1.150278308s ago: executing program 0 (id=5794):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x64, 0x14, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x18, 0xa0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3, 0xffffff01, 0x82f}}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x400, 0x7f, 0x10}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1636}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x5, 0x8, 0x40}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050)

1.148098352s ago: executing program 0 (id=5797):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

1.010122895s ago: executing program 0 (id=5803):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0xff98)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x5)
ppoll(&(0x7f0000000000)=[{r3, 0x4020}], 0x1, &(0x7f0000000100), 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1801d7df0029d38989b52a122834de5695d2494e345b8baedcc97285692a669f54c6aff8e5b5cf29a1cae9932fb845e1d1c9fd242680439a6814c8e238c844c7006a98111518a8561c0721f1c6ad9548659c6c50cb0a4b013693729ceea5b758f8ec58c84dae44dae36ff9610d07402cad632ff6dc6b96a92c7a09d5a45a0e73d1ad9de3512db3f9680bab1c859daad7b9ffeeb3b013", @ANYRES16=r6, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xa, 0x2}, 0x6) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r7, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0xe, 0x10}, {0x2, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x15) (async)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
write(r1, &(0x7f0000000780)="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", 0x278)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000200)=0x333, 0x4) (async, rerun: 32)
r11 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) (async, rerun: 32)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000593ada4bed7cfefbf0200b47a16866415d4e912f43d6bef877773b30dff48509114c79e24b1e74a6b1e7c9c40f80dabc2fa0d58118ac1dd6c29bcd3b821592dd2fba41f1ef01899d23def85d6086fe4d05bef80017a824ad181188d833cf52405b47998ae6c35ec7c31f07ad9522ee97dfb1f531fe05c19b1fc728aa6c8f26edf28737beaa9f5e150d4501f66c0d3ea549c32b3ec0ab1473c81299186c5b0434f44450e6f35e24110e23e89ec2d10a526209bef9064d90a"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80)

780.441158ms ago: executing program 0 (id=5809):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x400)
getpeername(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(0xffffffffffffffff, 0x0, 0xdc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc000004)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r4, &(0x7f00000004c0)={&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/241, 0xf1}], 0x8, &(0x7f0000000380)=""/49, 0x31}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={<r6=>r5})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r6})
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r7})
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400100001a000100fe0600000001b700993cf78828c50300000000000000000000006e98bd7a4b0000ffffe0000002fc01000000000000000000000000000100", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x844)

776.314619ms ago: executing program 4 (id=5810):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
getsockopt$sock_buf(r0, 0x1, 0xf, &(0x7f0000000140)=""/209, &(0x7f0000000000)=0xd1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa0}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r9 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r9, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8)
close(r9)
sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="9da0e6ccaeb619839c610210d3907036bb7aeb8a818b66824746c6ba348a00cb407a011ff49b9875bc4000b16d726d951489a2bf20078cbea283456984415e5152e1eccc7d300a169d3fcfe61966dcd4d5ff14e4e132d5ba8015a0066b9324f06ca5f802fea9d3e61c8b4bee819ccf2432fa947f056380bb3fadee41a2f5e3d31627c3c4eda0e1c5f0e6f92da7fee861b2f4aa7317d36f37c798d4ec9f10337684be7c47b24a546ff8b43a85b87e1c5711ec5dc7bbafbfebe91628e1ff8656bf70712c64508459e84185ecfffa3ce693cf0f7bfeac6b952ee3015ff0f5eacdb27c", 0xe1}], 0x1}, 0x40010)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000640)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, r1}, 0xc)

608.840202ms ago: executing program 4 (id=5813):
syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000000000000300000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0)

490.822366ms ago: executing program 4 (id=5814):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@setlink={0x28, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x1000) (async)
listen(r3, 0x1000)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r4 = socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) (async)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x336)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "37c891", 0x7b}) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "37c891", 0x7b})
socket$kcm(0x10, 0x2, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRESHEX=r8, @ANYRES16=r8, @ANYRES16=r8, @ANYRES64=r2], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94)

353.421075ms ago: executing program 3 (id=5815):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x2e592894, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000005200), &(0x7f0000005240)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040)
epoll_create1(0x80000)

220.865066ms ago: executing program 3 (id=5816):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000012000000aaff0200000000000000000000000000013a"], 0xfdef)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x1, 0x8, 0x3, 0x1, 0x10001, {0x0, @in6={{0xa, 0x4e24, 0x1, @private2, 0x40}}, 0x0, 0x5, 0x7, 0xc09, 0x6}}, &(0x7f0000000100)=0xb0)

220.517572ms ago: executing program 4 (id=5817):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS    \x00'}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff, 0x50}, 0x84)

219.785768ms ago: executing program 3 (id=5818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80, @loopback, 0xfffffffe}, 0x1c) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041) (async)
getsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f0000000040)=""/190, &(0x7f0000000180)=0xbe) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000037c000008004280040008000c000180060006008848"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}}, 0x0)

140.465176ms ago: executing program 4 (id=5819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)={0x9})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r4, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r7 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r8 = socket(0xa, 0x801, 0x0)
getsockopt(r8, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54)
sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x0, 0x3a, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

139.708667ms ago: executing program 3 (id=5820):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xb}, 0x8)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3, 0x4, r0}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c80119000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1c8}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket(0x2, 0x80805, 0x0) (async)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xb}, 0x8) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3, 0x4, r0}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c80119000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) (async)

136.200869ms ago: executing program 3 (id=5821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x480)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x400000, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008845}, 0x8004)
read(r0, &(0x7f0000000240)=""/235, 0xeb)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x40, 0xd, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @null, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000741e553dc39e181db71d940000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000000020000000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x4048010)

51.001814ms ago: executing program 4 (id=5822):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0xffe0}, {0x0, 0xc597f37949029df5}, {0x2, 0xa}}}, 0x24}}, 0x40004)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, r3, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e0000000000000006eeab91e8ff0055e564a08bcd3ffdb93bd43a847a1597c8ef03da5be62200", 0x10}, 0x60)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r11 = socket$inet6(0xa, 0x80002, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r12, 0x107, 0x11, 0x0, &(0x7f00000042c0))
r13 = socket(0x1e, 0x4, 0x0)
bind$alg(r13, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58)
setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
socket$inet6_udp(0xa, 0x2, 0x0)

0s ago: executing program 3 (id=5823):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'})
socketpair(0x3, 0x3, 0x1, &(0x7f0000000000))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000"], 0xb4}}, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r6, 0x0, 0x6}, 0x18)
r10 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r10, r9, 0x0, 0x24, 0xfffffffffffffffe}, 0x15)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x2b0, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @etimer_thresh={0x8, 0xc, 0xca1e}, @algo_comp={0xb6, 0x3, {{'deflate\x00'}, 0x370, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200954c98ff0c647443b8d450888"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010101, 0x4e20, 0xff, 0x9, 0x1, 0x0, 0xa0, 0xc0}, {0x0, 0x1, 0x10, 0x60415abf, 0x5, 0x7, 0x1, 0xc3}, {0x81, 0x2, 0x100000001, 0x1ff}, 0x0, 0x6, 0x1, 0x0, 0x3, 0x3}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x30}, 0x0)

kernel console output (not intermixed with test programs):

sim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.628793][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.632942][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  275.678527][T15508] __nla_validate_parse: 30 callbacks suppressed
[  275.678535][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'.
[  278.072396][ T5294] udevd[5294]: worker [11194] /devices/virtual/block/nbd0 is taking a long time
[  278.783165][T15519] team0: entered allmulticast mode
[  278.787312][T15519] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3240'.
[  278.800596][T15519] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3240'.
[  278.837729][T15530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3242'.
[  278.885314][T15537] netlink: 'syz.3.3245': attribute type 10 has an invalid length.
[  278.888008][T15537] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3245'.
[  278.908037][T15537] team0: entered promiscuous mode
[  278.910056][T15537] team_slave_1: entered promiscuous mode
[  278.914425][T15537] bridge2: entered promiscuous mode
[  278.962169][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'.
[  279.006244][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'.
[  279.097988][T15559] netlink: 'syz.1.3253': attribute type 10 has an invalid length.
[  279.299987][T15571] netlink: 'syz.0.3257': attribute type 2 has an invalid length.
[  279.305843][T15571] : entered promiscuous mode
[  279.335913][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'.
[  279.809143][T15602] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  279.817163][T15602] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  279.925822][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'.
[  279.996460][T15612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3270'.
[  280.316577][T15628] syzkaller0: entered promiscuous mode
[  280.318746][T15628] syzkaller0: entered allmulticast mode
[  280.553921][T15632] netlink: 'syz.3.3279': attribute type 27 has an invalid length.
[  280.713862][T15636] __nla_validate_parse: 3 callbacks suppressed
[  280.713871][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'.
[  280.764876][T15638] netlink: 'syz.3.3282': attribute type 3 has an invalid length.
[  280.768184][T15638] netlink: 'syz.3.3282': attribute type 1 has an invalid length.
[  280.772088][T15638] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3282'.
[  281.007896][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3286'.
[  281.068297][T15655] : renamed from batadv_slave_1 (while UP)
[  281.561753][T15668] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  281.982284][T15675] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3295'.
[  282.424262][T15695] sctp: [Deprecated]: syz.3.3301 (pid 15695) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.424262][T15695] Use struct sctp_sack_info instead
[  282.433694][T15698] sctp: [Deprecated]: syz.3.3301 (pid 15698) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.433694][T15698] Use struct sctp_sack_info instead
[  282.565248][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3308'.
[  282.571372][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3309'.
[  282.576345][T15718] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  282.655443][T15730] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3313'.
[  282.674688][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'.
[  282.774865][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'.
[  282.778800][T15744] openvswitch: netlink: Flow actions attr not present in new flow.
[  282.800198][T15744] netlink: 'syz.0.3317': attribute type 1 has an invalid length.
[  282.804241][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  283.608145][T15800] lo speed is unknown, defaulting to 1000
[  283.618838][T15800] dummy0 speed is unknown, defaulting to 1000
[  284.114769][T15851] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.357877][T15887] netlink: 'syz.3.3340': attribute type 5 has an invalid length.
[  284.698554][T15922] syzkaller0: entered promiscuous mode
[  284.703048][T15922] syzkaller0: entered allmulticast mode
[  284.821727][T15933] TCP: TCP_TX_DELAY enabled
[  284.857239][T15945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.863399][T15943] netlink: 'syz.1.3362': attribute type 1 has an invalid length.
[  285.116247][T15965] netlink: 'syz.0.3369': attribute type 2 has an invalid length.
[  285.124253][T15965] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  285.286625][T15986] IPv6: addrconf: prefix option has invalid lifetime
[  285.339474][T15992] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  285.346475][T15993] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  285.442286][T15988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.446419][T15988] bond_slave_0: left promiscuous mode
[  285.449410][T15988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.462470][T15988] bond_slave_1: left promiscuous mode
[  285.464914][T15988] bond0 (unregistering): Released all slaves
[  285.588389][T16009] pimreg: entered allmulticast mode
[  285.676034][T16015] IPv6: addrconf: prefix option has invalid lifetime
[  285.706122][T16016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.730259][T16022] netlink: 'syz.0.3388': attribute type 4 has an invalid length.
[  285.736084][T16022] syz.0.3388 uses old SIOCAX25GETINFO
[  285.813268][T16035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.935524][T16054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.943664][T16054] bond_slave_0: left promiscuous mode
[  285.947657][T16054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.956658][T16054] bond_slave_1: left promiscuous mode
[  285.959618][T16054] bond0 (unregistering): (slave 0!): Releasing backup interface
[  285.964636][T16054] !: left promiscuous mode
[  285.967657][T16054] bond0 (unregistering): Released all slaves
[  286.003940][T16059] __nla_validate_parse: 17 callbacks suppressed
[  286.003949][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'.
[  286.115376][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'.
[  286.119336][T16074] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  286.122866][T16074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.159886][T16080] netlink: 'syz.3.3408': attribute type 3 has an invalid length.
[  286.228707][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'.
[  286.269990][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  286.287224][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  286.304094][T16103] netlink: 'syz.3.3415': attribute type 1 has an invalid length.
[  286.306653][T16103] netlink: 'syz.3.3415': attribute type 1 has an invalid length.
[  286.452091][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3416'.
[  286.552902][T16112] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3417'.
[  286.588560][T16114] IPv6: addrconf: prefix option has invalid lifetime
[  286.614752][T16116] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3419'.
[  286.627884][T16116] netlink: 'syz.0.3419': attribute type 9 has an invalid length.
[  286.693971][T16118] lo speed is unknown, defaulting to 1000
[  286.696741][T16118] dummy0 speed is unknown, defaulting to 1000
[  287.010196][T16124] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[  287.013943][T16124] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  287.018482][T16124] bond9: (slave vcan0): making interface the new active one
[  287.023413][T16124] bond9: (slave vcan0): Enslaving as an active interface with an up link
[  287.040718][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  287.091127][T16124] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  287.101016][T16124] bond9: (slave vcan1): Enslaving as a backup interface with an up link
[  287.134643][T16124] 8021q: adding VLAN 0 to HW filter on device bond9
[  287.269471][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'.
[  287.364764][T16146] syzkaller1: entered promiscuous mode
[  287.367161][T16146] syzkaller1: entered allmulticast mode
[  287.447422][T16143] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3429'.
[  287.494697][T16157] IPv6: addrconf: prefix option has invalid lifetime
[  287.607017][T16170] lo speed is unknown, defaulting to 1000
[  287.611439][T16170] dummy0 speed is unknown, defaulting to 1000
[  287.788439][T16188] veth0: entered promiscuous mode
[  288.106985][T16207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.355566][T16227] gretap4: entered promiscuous mode
[  288.452937][T16243] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.759542][T16273] lo speed is unknown, defaulting to 1000
[  288.791386][T16276] IPv6: addrconf: prefix option has invalid lifetime
[  288.805873][T16277] bridge0: entered promiscuous mode
[  289.004248][T16294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.015101][T16294] batadv0: entered promiscuous mode
[  289.017038][T16294] macsec0: entered promiscuous mode
[  289.018954][T16294] macsec0: entered allmulticast mode
[  289.020916][T16294] batadv0: entered allmulticast mode
[  289.024676][T16294] batadv0: left allmulticast mode
[  289.026566][T16294] batadv0: left promiscuous mode
[  289.122050][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  289.316402][T16311] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  289.319362][T16311] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  289.435792][T16318] syz_tun: entered promiscuous mode
[  289.841004][   T11] block nbd0: Possible stuck request ffff888020da0000: control (read@0,4096B). Runtime 90 seconds
[  290.135678][T16354] lo speed is unknown, defaulting to 1000
[  290.138373][T16354] dummy0 speed is unknown, defaulting to 1000
[  290.737923][T16400] validate_nla: 7 callbacks suppressed
[  290.737933][T16400] netlink: 'syz.3.3519': attribute type 10 has an invalid length.
[  291.120001][T16444] netlink: 'syz.1.3533': attribute type 6 has an invalid length.
[  291.129541][T16444] netlink: 'syz.1.3533': attribute type 4 has an invalid length.
[  291.814650][T16463] __nla_validate_parse: 63 callbacks suppressed
[  291.814665][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3541'.
[  291.950992][T16487] tipc: Enabled bearer <eth:gre0>, priority 10
[  291.991547][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'.
[  292.073932][T16502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3555'.
[  292.103981][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3557'.
[  292.175602][T16511] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3557'.
[  292.228822][T16523] openvswitch: netlink: IPv6 tunnel dst address is zero
[  292.236460][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'.
[  292.296868][T16519] tipc: Resetting bearer <eth:syzkaller0>
[  292.337646][T15195] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.345034][T15195] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.347798][T15195] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  292.350645][T15195] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.353247][T15195] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.357729][T15195] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  292.363093][T15195] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.365811][T15195] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.368808][T15195] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  292.372119][T15195] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.374716][T15195] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.378821][T15195] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  292.384077][T16526] Bluetooth: MGMT ver 1.23
[  292.386926][T16533] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3564'.
[  292.559480][T16550] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  292.676644][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'.
[  292.757724][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'.
[  292.761668][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'.
[  292.848705][T16573] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  292.877375][T16576] netlink: 'syz.3.3579': attribute type 9 has an invalid length.
[  292.950609][ T5900] tipc: Node number set to 41961964
[  293.557957][T16654] tipc: Invalid UDP bearer configuration
[  293.557995][T16654] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  293.638088][T16674] IPv6: NLM_F_CREATE should be specified when creating new route
[  293.790803][T16688] vxcan0: entered promiscuous mode
[  293.929952][T16695] netlink: 'syz.3.3622': attribute type 1 has an invalid length.
[  294.013724][T16719] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  294.018025][T16719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.106933][T16734] xt_HMARK: spi-set and port-set can't be combined
[  294.117039][T16740] netlink: 'syz.0.3633': attribute type 1 has an invalid length.
[  294.172724][T16740] gretap5: entered allmulticast mode
[  294.182830][T16750] netlink: 'syz.3.3640': attribute type 21 has an invalid length.
[  294.185790][T16750] netlink: 'syz.3.3640': attribute type 21 has an invalid length.
[  294.305558][T16763] netlink: 'syz.3.3644': attribute type 1 has an invalid length.
[  294.322315][T16763] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.342499][T16763] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.346140][T16763] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  294.351089][T16763] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  294.382661][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.385890][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.411525][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  294.414088][ T5854] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  294.669479][T16795] sctp: [Deprecated]: syz.1.3656 (pid 16795) Use of int in max_burst socket option.
[  294.669479][T16795] Use struct sctp_assoc_value instead
[  294.753513][T16801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.027223][T16832] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  295.047795][T16835] syzkaller1: entered promiscuous mode
[  295.052519][T16835] syzkaller1: entered allmulticast mode
[  295.069513][T16835] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  295.127951][T16840] netlink: zone id is out of range
[  295.130178][T16840] netlink: zone id is out of range
[  295.132923][T16840] netlink: zone id is out of range
[  295.426207][T16857] 8021q: VLANs not supported on ip_vti0
[  295.933748][T16893] lo speed is unknown, defaulting to 1000
[  295.936511][T16893] dummy0 speed is unknown, defaulting to 1000
[  296.502335][    C1] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72
[  296.635193][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.638346][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.645948][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.649653][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.652912][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.664105][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.666426][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.669016][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.675098][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.679030][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.720504][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.729562][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.732058][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.734441][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.740576][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.743157][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.745836][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.757060][T16974] validate_nla: 6 callbacks suppressed
[  296.757068][T16974] netlink: 'syz.3.3720': attribute type 1 has an invalid length.
[  296.758116][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.770521][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.776411][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.780443][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.795450][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.797995][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.800089][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.812982][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.815389][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.817598][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.819795][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.829646][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.840871][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.848082][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.862685][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.870052][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.873607][T16985] __nla_validate_parse: 44 callbacks suppressed
[  296.873614][T16985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3722'.
[  296.878591][T16985] 8021q: VLANs not supported on ipvlan1
[  296.883378][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.885495][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.887626][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.893401][T16985] macsec2: entered promiscuous mode
[  296.895128][T16985] macsec2: entered allmulticast mode
[  296.901138][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.903532][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.905807][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.908141][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.916511][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.920540][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.922900][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.925184][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.930767][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.940489][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.942795][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.945083][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.947380][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.950078][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.952579][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.954894][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.957167][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.959452][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.961909][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.964193][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.966459][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.968766][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.971054][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.973278][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.975458][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.977691][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.980138][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.982629][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  296.984806][T16968] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  297.097694][T17004] netlink: 'syz.3.3730': attribute type 1 has an invalid length.
[  297.101893][T17004] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3730'.
[  297.105170][T17005] netlink: 'syz.3.3730': attribute type 1 has an invalid length.
[  297.107715][T17005] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3730'.
[  297.175296][T17009] netlink: 'syz.0.3732': attribute type 10 has an invalid length.
[  297.255699][T17015] net_ratelimit: 9 callbacks suppressed
[  297.255713][T17015] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  297.334419][T17023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.346510][T17023] tipc: Resetting bearer <eth:syzkaller0>
[  297.354766][T17024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3737'.
[  297.418271][T17028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3739'.
[  297.575597][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'.
[  297.612107][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'.
[  297.628139][T17041] netlink: 'syz.3.3744': attribute type 2 has an invalid length.
[  297.632015][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'.
[  297.703822][T17044] erspan0: entered promiscuous mode
[  297.706854][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'.
[  297.918908][T17071] dvmrp8: entered allmulticast mode
[  297.923507][T17070] dvmrp8: left allmulticast mode
[  298.017904][T17074] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  298.108990][T17078] 8021q: VLANs not supported on sit0
[  298.166693][T17091] netlink: 'syz.3.3762': attribute type 2 has an invalid length.
[  298.172969][T17091] netlink: 'syz.3.3762': attribute type 2 has an invalid length.
[  298.177746][T17091] netlink: 'syz.3.3762': attribute type 2 has an invalid length.
[  298.182235][T17091] netlink: 'syz.3.3762': attribute type 2 has an invalid length.
[  298.186007][T17091] netlink: 'syz.3.3762': attribute type 2 has an invalid length.
[  298.210685][T17096] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3763'.
[  298.226870][T17093] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096
[  299.387014][T17146] lo speed is unknown, defaulting to 1000
[  299.395813][T17146] dummy0 speed is unknown, defaulting to 1000
[  299.410130][T17148] lo speed is unknown, defaulting to 1000
[  299.552455][T17148] dummy0 speed is unknown, defaulting to 1000
[  300.168904][T17181] bond8: (slave veth11): Enslaving as an active interface with a down link
[  300.175915][T17181] 8021q: adding VLAN 0 to HW filter on device bond8
[  300.356638][T17204] netlink: 'syz.0.3795': attribute type 11 has an invalid length.
[  300.360346][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.462466][T17251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  301.466748][T17251] batman_adv: batadv0: Adding interface: gretap2
[  301.468724][T17251] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  301.476066][T17251] batman_adv: batadv0: Interface activated: gretap2
[  301.783726][T17291] sctp: [Deprecated]: syz.3.3823 (pid 17291) Use of int in max_burst socket option.
[  301.783726][T17291] Use struct sctp_assoc_value instead
[  302.007534][T17314] __nla_validate_parse: 9 callbacks suppressed
[  302.007547][T17314] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3830'.
[  302.028486][T17312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3831'.
[  302.061582][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3832'.
[  302.064418][T17316] validate_nla: 13 callbacks suppressed
[  302.064425][T17316] netlink: 'syz.0.3832': attribute type 20 has an invalid length.
[  302.092622][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3832'.
[  302.095992][T17316] netlink: 'syz.0.3832': attribute type 20 has an invalid length.
[  302.097510][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'.
[  302.128876][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'.
[  302.249667][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'.
[  302.257731][T17337] 0X: left allmulticast mode
[  302.259683][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'.
[  302.263162][T17337] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  302.378976][T17343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3841'.
[  302.432736][T17347] lo speed is unknown, defaulting to 1000
[  302.435656][T17347] dummy0 speed is unknown, defaulting to 1000
[  302.505313][T17352] netlink: 'syz.1.3844': attribute type 8 has an invalid length.
[  302.513334][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'.
[  303.236892][T17380] lo speed is unknown, defaulting to 1000
[  303.244172][T17380] dummy0 speed is unknown, defaulting to 1000
[  303.339511][T17387] lo speed is unknown, defaulting to 1000
[  303.404579][T17395] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  303.482599][T17403] netlink: 'syz.3.3861': attribute type 9 has an invalid length.
[  303.516873][T17387] dummy0 speed is unknown, defaulting to 1000
[  303.539105][T17407] netlink: 'syz.3.3862': attribute type 1 has an invalid length.
[  303.867078][T17420] lo speed is unknown, defaulting to 1000
[  303.877517][T17420] dummy0 speed is unknown, defaulting to 1000
[  304.320794][T17450] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  304.573503][T17471] netlink: 'syz.1.3884': attribute type 1 has an invalid length.
[  304.604479][T17476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.824908][T17489] netlink: 'syz.1.3889': attribute type 2 has an invalid length.
[  305.013588][T17506] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  305.051192][T17511] netlink: 'syz.0.3897': attribute type 1 has an invalid length.
[  305.200993][T17528] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  305.205225][T17528] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  305.208588][T17528] tipc: Resetting bearer <eth:syzkaller0>
[  305.365557][T17541] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.595056][T17571] netlink: 'syz.3.3918': attribute type 7 has an invalid length.
[  305.789006][T17588] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  306.046962][T17601] netlink: 'syz.1.3926': attribute type 12 has an invalid length.
[  308.725034][T17578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.782288][T17611] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  308.813791][T17615] netlink: 'syz.0.3931': attribute type 1 has an invalid length.
[  308.816958][T17615] netlink: 'syz.0.3931': attribute type 2 has an invalid length.
[  309.017409][T17640] __nla_validate_parse: 21 callbacks suppressed
[  309.017424][T17640] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3938'.
[  309.041275][T17640] nbd: illegal input index 65508
[  309.045367][T17642] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3939'.
[  309.050223][T17642] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  309.101870][T17648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3940'.
[  309.105286][T17648] 8021q: adding VLAN 0 to HW filter on device team0
[  309.308628][T17664] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3942'.
[  309.395511][T17666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3944'.
[  309.643519][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3948'.
[  319.922183][   T11] block nbd0: Possible stuck request ffff888020da0000: control (read@0,4096B). Runtime 120 seconds
[  326.769307][T17691] netlink: 'syz.3.3954': attribute type 10 has an invalid length.
[  326.773899][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3952'.
[  326.778017][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'.
[  326.793163][T17691] tipc: Resetting bearer <eth:gre0>
[  326.864122][T17691] tipc: Resetting bearer <eth:syzkaller0>
[  326.879944][   T10] lo speed is unknown, defaulting to 1000
[  326.891105][   T10] syz1: Port: 1 Link DOWN
[  326.906079][ T5879] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.910044][ T5879] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.921524][ T5879] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.925195][ T5879] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.985349][T17703] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  326.995371][T17703] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  327.038096][T17707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.046432][   T47] lo speed is unknown, defaulting to 1000
[  327.048319][   T47] syz1: Port: 1 Link ACTIVE
[  327.109499][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'.
[  327.198946][T17705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3956'.
[  327.238913][T17718] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3960'.
[  327.242899][T17720] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3960'.
[  327.297925][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3963'.
[  327.345158][T17727] netlink: 'syz.1.3964': attribute type 12 has an invalid length.
[  327.565163][T17753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3968'.
[  327.579633][T17753] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3968'.
[  327.628136][T17754] lo speed is unknown, defaulting to 1000
[  327.632849][T17754] dummy0 speed is unknown, defaulting to 1000
[  327.996831][T17788] macvlan3: entered promiscuous mode
[  328.013068][T17788] vlan0: entered promiscuous mode
[  328.164327][T17818] netlink: 'syz.3.3988': attribute type 1 has an invalid length.
[  328.182908][T17818] bond9: (slave bridge10): making interface the new active one
[  328.186178][T17818] bond9: (slave bridge10): Enslaving as an active interface with an up link
[  328.309470][T17826] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3989'.
[  328.446715][T17839] netlink: 'syz.0.3993': attribute type 1 has an invalid length.
[  328.774440][T17859] netlink: 'syz.0.3999': attribute type 12 has an invalid length.
[  329.047637][T17871] tipc: New replicast peer: 0.0.0.0
[  329.049836][T17871] tipc: Enabled bearer <udp:syz2>, priority 10
[  329.053335][T17871] tipc: New replicast peer: 255.255.255.255
[  329.055611][T17871] 0X: renamed from caif0
[  329.058868][T17871] 0X: entered allmulticast mode
[  329.063243][T17871] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  329.190803][T17884] IPVS: set_ctl: invalid protocol: 18 224.0.0.1:20003
[  329.359578][T17915] IPv6: sit4: Disabled Multicast RS
[  329.362601][T17915] sit4: entered allmulticast mode
[  329.635229][T17941] netem: change failed
[  329.783921][T17961] delete_channel: no stack
[  330.187523][T17971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.192703][T17971] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  330.195691][T17971] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  330.198793][T17971] tipc: Resetting bearer <eth:syzkaller0>
[  330.487906][T17988] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  330.699230][T18017] vlan3: entered allmulticast mode
[  330.704298][T18017] batadv0: entered allmulticast mode
[  330.776408][T18024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.782232][T18024] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  330.791601][T18024] pim6reg: entered allmulticast mode
[  330.799930][T18023] pim6reg: left allmulticast mode
[  330.830867][T18031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.906837][T18039] netlink: 'syz.0.4060': attribute type 10 has an invalid length.
[  330.950948][T18038] lo speed is unknown, defaulting to 1000
[  330.961543][T18038] dummy0 speed is unknown, defaulting to 1000
[  331.148674][T18057] pim6reg1: entered promiscuous mode
[  331.159197][T18057] pim6reg1: entered allmulticast mode
[  331.315772][T18073] xt_time: invalid argument - start or stop time greater than 23:59:59
[  331.357793][T18075] netlink: 'syz.3.4071': attribute type 13 has an invalid length.
[  331.385040][T18075] lo speed is unknown, defaulting to 1000
[  331.387787][T18075] dummy0 speed is unknown, defaulting to 1000
[  331.496749][T18096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.681430][T18113] lo: entered promiscuous mode
[  331.688909][T18113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.725403][T18116] netlink: 'syz.1.4084': attribute type 2 has an invalid length.
[  331.745175][T18118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  331.754626][T18119] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  331.793048][T18125] __nla_validate_parse: 62 callbacks suppressed
[  331.793058][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'.
[  332.321383][T18140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4089'.
[  332.361769][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'.
[  332.364746][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'.
[  332.764101][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4100'.
[  332.828989][T18165] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003
[  332.917893][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4103'.
[  332.998720][T18187] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.004499][T18187] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  333.012081][T18187] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  333.080255][T18195] netlink: 'syz.1.4108': attribute type 1 has an invalid length.
[  333.087001][T18195] netlink: 'syz.1.4108': attribute type 1 has an invalid length.
[  333.283860][T18201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.445201][T18212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4115'.
[  333.496004][T18215] netlink: 'syz.3.4116': attribute type 3 has an invalid length.
[  333.528304][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'.
[  333.542122][T18219] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4118'.
[  333.570786][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'.
[  333.586742][T18227] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002
[  333.770742][T18239] netlink: 'syz.0.4124': attribute type 7 has an invalid length.
[  333.770745][T18238] netlink: 'syz.0.4124': attribute type 7 has an invalid length.
[  333.784362][T18241] netlink: 'syz.3.4125': attribute type 1 has an invalid length.
[  333.805397][T18241] 8021q: adding VLAN 0 to HW filter on device bond10
[  333.986477][T18255] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  333.988866][T18255] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  334.245294][T18286] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  334.502279][T18308] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  334.598860][T18315] lo speed is unknown, defaulting to 1000
[  334.608612][T18315] dummy0 speed is unknown, defaulting to 1000
[  335.159395][T18347] netlink: 'syz.3.4157': attribute type 11 has an invalid length.
[  335.218046][T18352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  335.368705][T18359] team0: No ports can be present during mode change
[  335.521631][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  335.525296][T18372] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  336.180910][T18415] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  336.219484][T18417] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  336.223720][T18417] bond0: option all_slaves_active: invalid value (7)
[  336.576944][T18433] netlink: 'syz.1.4185': attribute type 3 has an invalid length.
[  337.008165][T18471] netlink: 'syz.3.4197': attribute type 21 has an invalid length.
[  337.089514][T18475] __nla_validate_parse: 18 callbacks suppressed
[  337.089528][T18475] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4199'.
[  337.226710][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'.
[  337.369363][T18489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4204'.
[  337.386057][T18489] lo speed is unknown, defaulting to 1000
[  337.388694][T18489] dummy0 speed is unknown, defaulting to 1000
[  337.607975][T18510] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  337.644311][T18514] macvlan5: entered allmulticast mode
[  337.646547][T18514] bond0: entered allmulticast mode
[  337.648848][T18514] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  337.656710][T18514] bond0: left allmulticast mode
[  337.685760][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'.
[  337.843829][T18530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.846777][T18530] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  337.849279][T18530] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  337.853437][T18530] sch_fq: defrate 257 ignored.
[  337.985534][T18547] sctp: [Deprecated]: syz.0.4225 (pid 18547) Use of int in max_burst socket option deprecated.
[  337.985534][T18547] Use struct sctp_assoc_value instead
[  338.022035][T18541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4222'.
[  338.088750][T18561] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.107754][T18564] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  338.174618][T18574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4233'.
[  338.195830][T18579] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  338.198370][T18579] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4234'.
[  338.203441][T18579] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4234'.
[  338.281800][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4237'.
[  338.288792][T18593] bridge11: entered promiscuous mode
[  338.292632][T18593] bridge11: entered allmulticast mode
[  338.299482][T18593] team0: Port device bridge11 added
[  338.328727][T18590] netlink: 'syz.0.4237': attribute type 2 has an invalid length.
[  338.537262][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4247'.
[  338.648436][T18645] lo speed is unknown, defaulting to 1000
[  338.654420][T18645] dummy0 speed is unknown, defaulting to 1000
[  338.682384][T18650] netlink: 'syz.3.4254': attribute type 21 has an invalid length.
[  338.724524][T18655] netlink: 'syz.0.4255': attribute type 1 has an invalid length.
[  338.744074][T18655] 8021q: adding VLAN 0 to HW filter on device bond12
[  338.773787][T18655] 8021q: adding VLAN 0 to HW filter on device bond12
[  338.776954][T18655] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  338.782876][T18655] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  338.826611][T18659] bond12: (slave bridge14): Enslaving as an active interface with a down link
[  339.098883][T18687] sctp: [Deprecated]: syz.1.4265 (pid 18687) Use of int in max_burst socket option.
[  339.098883][T18687] Use struct sctp_assoc_value instead
[  339.125498][T18684] pimreg: left allmulticast mode
[  339.443818][T18719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.486457][T18723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.788803][T18743] lo speed is unknown, defaulting to 1000
[  339.791689][T18743] dummy0 speed is unknown, defaulting to 1000
[  339.846336][T18748] netlink: 'syz.0.4282': attribute type 1 has an invalid length.
[  339.865102][T18748] 8021q: adding VLAN 0 to HW filter on device bond13
[  339.875303][T18748] bond13: (slave geneve2): making interface the new active one
[  339.879317][T18748] bond13: (slave geneve2): Enslaving as an active interface with an up link
[  339.921644][T18751] netlink: 'syz.0.4283': attribute type 8 has an invalid length.
[  340.391201][T18786] netlink: 'syz.1.4293': attribute type 1 has an invalid length.
[  340.410224][T18789] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  340.466612][T18796] netlink: 'syz.1.4297': attribute type 10 has an invalid length.
[  340.471137][T18795] delete_channel: no stack
[  340.504488][T18801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.557859][T18806] veth0: entered promiscuous mode
[  340.639134][T18808] veth0: left promiscuous mode
[  340.679353][T18821] netlink: 'syz.0.4305': attribute type 1 has an invalid length.
[  340.707017][T18821] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  340.814129][T18837] 8021q: adding VLAN 0 to HW filter on device bond14
[  340.921532][T18855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  340.927579][T18856] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  341.013944][T18859] 8021q: adding VLAN 0 to HW filter on device bond15
[  341.179774][T18872] netlink: 'syz.1.4318': attribute type 1 has an invalid length.
[  341.661127][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.665729][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.668981][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.676388][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.679082][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  341.703132][T18896] lo speed is unknown, defaulting to 1000
[  341.705922][T18896] dummy0 speed is unknown, defaulting to 1000
[  341.876344][T18896] chnl_net:caif_netlink_parms(): no params data found
[  341.938285][T18896] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.941046][T18896] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.943512][T18896] bridge_slave_0: entered allmulticast mode
[  341.946365][T18896] bridge_slave_0: entered promiscuous mode
[  341.949688][T18896] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.953993][T18896] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.956368][T18896] bridge_slave_1: entered allmulticast mode
[  341.959016][T18896] bridge_slave_1: entered promiscuous mode
[  341.978005][T18896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.987218][T18896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.024053][T18896] team0: Port device team_slave_0 added
[  342.028658][T18896] team0: Port device team_slave_1 added
[  342.056754][T18896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.059122][T18896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.067517][T18896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.073021][T18896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.075300][T18896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.083594][T18896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.113555][T18896] hsr_slave_0: entered promiscuous mode
[  342.115909][T18896] hsr_slave_1: entered promiscuous mode
[  342.118063][T18896] debugfs: 'hsr0' already exists in 'hsr'
[  342.119953][T18896] Cannot create hsr debugfs directory
[  342.234080][T18896] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  342.242201][T18896] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  342.247131][T18896] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  342.252992][T18896] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  342.291105][T18896] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.293568][T18896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.296140][T18896] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.298729][T18896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.331833][T18896] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.347274][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.351843][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.363655][T18896] 8021q: adding VLAN 0 to HW filter on device team0
[  342.376029][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.378539][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.385478][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.388753][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.523243][T18896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.527669][T18963] netem: incorrect gi model size
[  342.529546][T18963] netem: change failed
[  342.542714][T18963] __nla_validate_parse: 21 callbacks suppressed
[  342.542722][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4342'.
[  342.547577][T18963] openvswitch: netlink: EtherType 0 is less than min 600
[  342.574751][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'.
[  342.656578][T18974] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  342.674906][T18896] veth0_vlan: entered promiscuous mode
[  342.680354][T18896] veth1_vlan: entered promiscuous mode
[  342.729776][T18896] veth0_macvtap: entered promiscuous mode
[  342.734250][T18896] veth1_macvtap: entered promiscuous mode
[  342.743710][T18896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.751481][T18896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.766388][ T9008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.769531][ T9008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.774855][ T9008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.777540][ T9008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.816080][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4348'.
[  342.820151][T18978] erspan0: left promiscuous mode
[  342.824402][T18978] team0: left promiscuous mode
[  342.826043][T18978] team_slave_1: left promiscuous mode
[  342.827812][T18978] bridge2: left promiscuous mode
[  342.832059][T18978] batadv0: left allmulticast mode
[  342.834282][T18978] veth0: left allmulticast mode
[  342.836463][T18978] veth1: left allmulticast mode
[  342.838561][T18978] wg0: left allmulticast mode
[  342.842828][T18978] wg1: left allmulticast mode
[  342.846063][T18978] wg2: left allmulticast mode
[  342.848290][T18978] veth0_to_bridge: left allmulticast mode
[  342.851107][T18978] bridge_slave_0: left allmulticast mode
[  342.853574][T18978] veth1_to_bridge: left allmulticast mode
[  342.855988][T18978] bridge_slave_1: left allmulticast mode
[  342.858384][T18978] veth0_to_bond: left allmulticast mode
[  342.860932][T18978] bond_slave_0: left allmulticast mode
[  342.863307][T18978] veth1_to_team: left allmulticast mode
[  342.866625][T18978] team_slave_1: left allmulticast mode
[  342.869051][T18978] veth0_to_batadv: left allmulticast mode
[  342.871558][T18978] batadv_slave_0: left allmulticast mode
[  342.873437][T18978] xfrm0: left allmulticast mode
[  342.875059][T18978] veth0_to_hsr: left allmulticast mode
[  342.876882][T18978] veth1_to_hsr: left allmulticast mode
[  342.878708][T18978] hsr0: left allmulticast mode
[  342.880289][T18978] hsr_slave_0: left allmulticast mode
[  342.882136][T18978] hsr_slave_1: left allmulticast mode
[  342.883936][T18978] veth1_virt_wifi: left allmulticast mode
[  342.885826][T18978] veth0_virt_wifi: left allmulticast mode
[  342.887705][T18978] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  342.890014][T18978] veth1_vlan: left allmulticast mode
[  342.892105][T18978] vlan0: left allmulticast mode
[  342.893773][T18978] vlan1: left allmulticast mode
[  342.895422][T18978] macvlan1: left allmulticast mode
[  342.897114][T18978] ipvlan0: left allmulticast mode
[  342.898759][T18978] ipvlan1: left allmulticast mode
[  342.900660][T18978] veth0_vlan: left allmulticast mode
[  342.902605][T18978] veth1_macvtap: left allmulticast mode
[  342.904410][T18978] veth0_macvtap: left allmulticast mode
[  342.906227][T18978] macvtap0: left allmulticast mode
[  342.907932][T18978] macsec0: left allmulticast mode
[  342.909622][T18978] geneve0: left allmulticast mode
[  342.911467][T18978] geneve1: left allmulticast mode
[  342.913213][T18978] mac80211_hwsim hwsim13 wlan0: left allmulticast mode
[  342.915346][T18978] geneve2: left allmulticast mode
[  342.917038][T18978] bond1: left allmulticast mode
[  342.918633][T18978] bond2: left allmulticast mode
[  342.920289][T18978] bridge1: left allmulticast mode
[  342.924100][T18978] bond3: left allmulticast mode
[  342.925727][T18978] gretap1: left allmulticast mode
[  342.927341][T18978] bridge2: left allmulticast mode
[  342.928979][T18978] bridge0: left promiscuous mode
[  342.930952][T18978] bond4: left allmulticast mode
[  342.932555][T18978] geneve3: left allmulticast mode
[  342.934221][T18978] gre1: left allmulticast mode
[  342.935925][T18978] ipvlan2: left allmulticast mode
[  342.937530][T18978] bridge0: left allmulticast mode
[  342.942477][T18978] macsec1: left promiscuous mode
[  342.944075][T18978] macsec1: left allmulticast mode
[  342.946164][T18978] veth3: left promiscuous mode
[  342.948833][T18978] tipc: Resetting bearer <eth:syzkaller0>
[  342.956154][T18978] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  342.958428][T18978] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  342.962014][T18978] macsec2: left promiscuous mode
[  342.963670][T18978] macsec2: left allmulticast mode
[  342.966064][T18978] vlan0: left promiscuous mode
[  342.967756][T18978] macvlan3: left promiscuous mode
[  342.974205][   T24] lo speed is unknown, defaulting to 1000
[  342.976182][   T24] syz1: Port: 1 Link DOWN
[  342.991745][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.998120][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.027813][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.029855][T18990] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4350'.
[  343.031983][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.118021][T19001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4353'.
[  343.350108][T19017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.356925][  T969] dummy0 speed is unknown, defaulting to 1000
[  343.771750][ T5854] Bluetooth: hci2: command tx timeout
[  343.962986][T19020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4356'.
[  343.966631][T19019] delete_channel: no stack
[  343.998757][T19023] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  344.033230][T19025] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  344.033567][T19026] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  344.039674][T19026] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4358'.
[  344.212376][T19042] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  344.257824][T19045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4366'.
[  344.306124][T19048] IPv6: addrconf: prefix option has invalid lifetime
[  344.359509][T19067] validate_nla: 3 callbacks suppressed
[  344.359518][T19067] netlink: 'syz.4.4370': attribute type 1 has an invalid length.
[  344.365381][T19055] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4368'.
[  344.430335][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4373'.
[  344.436843][T19073] bond0: entered promiscuous mode
[  344.438448][T19073] bond_slave_0: entered promiscuous mode
[  344.440593][T19073] bond_slave_1: entered promiscuous mode
[  344.443996][T19073] bond0: left promiscuous mode
[  344.445740][T19073] bond_slave_0: left promiscuous mode
[  344.447613][T19073] bond_slave_1: left promiscuous mode
[  344.590137][T19089] lo speed is unknown, defaulting to 1000
[  344.594938][T19089] dummy0 speed is unknown, defaulting to 1000
[  345.103984][T19105] tipc: Started in network mode
[  345.105889][T19105] tipc: Node identity 8a6aa5878f28, cluster identity 4711
[  345.108688][T19105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.111863][T19105] syzkaller0: entered promiscuous mode
[  345.113885][T19105] syzkaller0: entered allmulticast mode
[  345.225109][T19104] tipc: Resetting bearer <eth:syzkaller0>
[  345.231247][   T33] audit: type=1804 audit(1757709523.530:12): pid=19108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4383" name="/newroot/1500/cgroup.controllers" dev="tmpfs" ino=7631 res=1 errno=0
[  345.240256][   T33] audit: type=1800 audit(1757709523.540:13): pid=19108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4383" name="cgroup.controllers" dev="tmpfs" ino=7631 res=0 errno=0
[  345.255732][T19104] tipc: Disabling bearer <eth:syzkaller0>
[  345.262057][T19108] netem: incorrect gi model size
[  345.263999][T19108] netem: change failed
[  345.302055][T19110] netlink: 'syz.0.4384': attribute type 1 has an invalid length.
[  345.538606][T19131] netlink: 'syz.0.4392': attribute type 1 has an invalid length.
[  345.763093][T19164] netlink: 'syz.3.4403': attribute type 5 has an invalid length.
[  345.841023][ T5854] Bluetooth: hci2: command tx timeout
[  346.817276][T19224] IPVS: set_ctl: invalid protocol: 11613 172.20.20.11:21
[  347.345380][T19271] netlink: 'syz.4.4439': attribute type 10 has an invalid length.
[  347.353375][T19271] team0: Port device geneve0 added
[  347.484228][T19282] dvmrp0: entered allmulticast mode
[  347.920903][ T5854] Bluetooth: hci2: command tx timeout
[  347.995984][T19287] bridge15: entered allmulticast mode
[  348.105329][T19289] __nla_validate_parse: 18 callbacks suppressed
[  348.105339][T19289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4446'.
[  348.395271][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4451'.
[  348.398986][T19306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4451'.
[  348.476067][T19308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.478955][T19308] syzkaller0: entered promiscuous mode
[  348.481660][T19308] syzkaller0: entered allmulticast mode
[  348.486579][T19308] tipc: Resetting bearer <eth:syzkaller0>
[  348.499279][T19307] tipc: Resetting bearer <eth:syzkaller0>
[  348.508181][T19307] tipc: Disabling bearer <eth:syzkaller0>
[  348.628343][T19317] netlink: 'syz.4.4456': attribute type 21 has an invalid length.
[  348.631685][T19317] netlink: 'syz.4.4456': attribute type 22 has an invalid length.
[  348.634387][T19317] netlink: 'syz.4.4456': attribute type 23 has an invalid length.
[  348.636937][T19317] netlink: 'syz.4.4456': attribute type 25 has an invalid length.
[  348.639516][T19317] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4456'.
[  349.067811][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'.
[  349.102476][T19346] geneve0: entered allmulticast mode
[  349.183874][T19357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4467'.
[  349.306527][T19373] lo speed is unknown, defaulting to 1000
[  349.310231][T19373] dummy0 speed is unknown, defaulting to 1000
[  349.448416][T19383] netlink: 'syz.4.4475': attribute type 1 has an invalid length.
[  349.504701][T19391] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4476'.
[  349.578160][T19394] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4477'.
[  349.654977][T19400] net_ratelimit: 2 callbacks suppressed
[  349.654990][T19400] IPv6: addrconf: prefix option has invalid lifetime
[  349.789799][T19405] delete_channel: no stack
[  349.863892][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4483'.
[  349.867762][T19413] netlink: 'syz.4.4483': attribute type 1 has an invalid length.
[  350.002828][ T5852] Bluetooth: hci2: command tx timeout
[  350.002993][   T11] block nbd0: Possible stuck request ffff888020da0000: control (read@0,4096B). Runtime 150 seconds
[  350.151947][T19441] netlink: 'syz.3.4492': attribute type 4 has an invalid length.
[  350.275456][T19454] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4497'.
[  350.339737][T19458] delete_channel: no stack
[  350.409645][T19465] netlink: 'syz.3.4500': attribute type 1 has an invalid length.
[  350.415875][T19465] openvswitch: netlink: Message has 8 unknown bytes.
[  350.476529][T19469] raw_sendmsg: syz.3.4501 forgot to set AF_INET. Fix it!
[  350.481641][T19471] netlink: 'syz.4.4502': attribute type 83 has an invalid length.
[  350.507854][T19475] IPv6: addrconf: prefix option has invalid lifetime
[  350.533410][T19474] syzkaller1: entered allmulticast mode
[  350.688716][T19489] netlink: 'syz.3.4508': attribute type 4 has an invalid length.
[  350.895212][T19501] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  350.897701][T19501] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  350.903110][T19501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  352.082026][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  352.159612][T19528] batman_adv: batadv0: Adding interface: ipvlan2
[  352.167499][T19528] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.183000][T19528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.187418][T19528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.192784][T19528] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  352.266611][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.269758][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.277228][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.280256][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.291601][T19532] batman_adv: batadv0: Removing interface: ipvlan2
[  352.404028][T19546] netlink: 'syz.3.4524': attribute type 1 has an invalid length.
[  352.499712][T19554] syzkaller1: tun_chr_ioctl cmd 2148558623
[  352.503368][T19552] syzkaller1: tun_chr_ioctl cmd 2148558623
[  352.506149][T19554] syzkaller1: tun_chr_ioctl cmd 1074025677
[  352.508286][T19554] syzkaller1: linktype set to 778
[  352.885129][T19584] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.888741][T19585] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  352.894938][T19585] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  352.898308][T19585] tipc: Resetting bearer <eth:syzkaller0>
[  353.962458][T19609] syzkaller1: left allmulticast mode
[  354.107450][T19616] netlink: 'syz.3.4547': attribute type 11 has an invalid length.
[  354.386070][T19632] __nla_validate_parse: 18 callbacks suppressed
[  354.386085][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4551'.
[  354.486033][T19634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4552'.
[  354.489640][T19634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4552'.
[  354.495350][T19634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4552'.
[  354.517997][T19640] openvswitch: netlink: Key type 4368 is out of range max 32
[  354.525673][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4552'.
[  354.744102][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'.
[  354.747124][T19670] veth1: entered promiscuous mode
[  354.748780][T19670] netlink: 'syz.3.4564': attribute type 8 has an invalid length.
[  354.759824][T19670] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  354.776478][T19672] syzkaller1: entered promiscuous mode
[  354.780502][T19672] syzkaller1: entered allmulticast mode
[  354.797740][T19672] lo speed is unknown, defaulting to 1000
[  354.800809][T19672] dummy0 speed is unknown, defaulting to 1000
[  354.911072][T19690] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  354.915721][T19691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4569'.
[  354.917499][T19690] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  355.131329][T19704] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  355.134010][T19704] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  355.139037][T19708] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  355.207059][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'.
[  355.307244][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'.
[  355.321384][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'.
[  355.344673][ T5706] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.349042][ T5706] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.355913][ T5706] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.358908][ T5706] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.470520][ T5706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  355.482418][ T5706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  355.490535][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  355.659428][T19747] netlink: 'syz.4.4587': attribute type 1 has an invalid length.
[  355.935179][T19771] netlink: 'syz.4.4596': attribute type 3 has an invalid length.
[  356.040198][T19784] netlink: 'syz.3.4601': attribute type 3 has an invalid length.
[  356.046040][T19784] netlink: 'syz.3.4601': attribute type 3 has an invalid length.
[  356.136056][T19790] netlink: 'syz.0.4603': attribute type 9 has an invalid length.
[  356.251407][  T969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  356.334368][  T969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  356.435739][T19825] netlink: 'syz.4.4618': attribute type 6 has an invalid length.
[  356.438963][T19825] netlink: 'syz.4.4618': attribute type 4 has an invalid length.
[  356.720579][T19839] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  357.258545][T19860] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  357.526277][T19889] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  357.558609][T19891] netlink: 'syz.3.4638': attribute type 1 has an invalid length.
[  357.655983][T19898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.892939][T19907] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  357.943499][T19911] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  358.114905][T19929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.257204][T19944] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  358.465374][T19970] netlink: 'syz.0.4666': attribute type 2 has an invalid length.
[  358.558390][T19979] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.603358][T19984] bond0: entered promiscuous mode
[  358.605975][T19984] bond0: left promiscuous mode
[  358.675720][T19990] syzkaller1: entered promiscuous mode
[  358.677536][T19990] syzkaller1: entered allmulticast mode
[  358.688848][T19990] lo: left promiscuous mode
[  358.720207][T19990] syz_tun: left promiscuous mode
[  359.398908][T20034] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  359.561849][T20057] sctp: [Deprecated]: syz.4.4694 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.561849][T20057] Use struct sctp_sack_info instead
[  359.563010][T20058] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  359.564971][T20057] sctp: [Deprecated]: syz.4.4694 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.564971][T20057] Use struct sctp_sack_info instead
[  359.680677][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  359.691090][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  360.428722][T20102] __nla_validate_parse: 37 callbacks suppressed
[  360.428732][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4708'.
[  360.433907][T20102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4708'.
[  360.440734][T20102] geneve4: entered promiscuous mode
[  360.442489][T20102] geneve4: entered allmulticast mode
[  360.445051][ T5902] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.448417][ T5902] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.451454][ T5902] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.454456][ T5902] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.645175][T20104] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4710'.
[  360.652119][T20110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4711'.
[  360.657382][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4711'.
[  360.746270][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4715'.
[  360.782536][T20118] vcan0: tx drop: invalid da for name 0x0000000000000003
[  360.890838][T20132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.893908][T20131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.940333][T20132] syzkaller0: entered promiscuous mode
[  360.942764][T20132] syzkaller0: entered allmulticast mode
[  360.945164][T20132] tipc: Resetting bearer <eth:syzkaller0>
[  360.958943][T20129] tipc: Resetting bearer <eth:syzkaller0>
[  361.760855][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  361.942586][   T24] tipc: Node number set to 88253831
[  362.066505][T20129] tipc: Disabling bearer <eth:syzkaller0>
[  362.242030][T20158] net_ratelimit: 5 callbacks suppressed
[  362.242040][T20158] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  362.356771][T20175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4735'.
[  362.400117][T20177] lo speed is unknown, defaulting to 1000
[  362.403700][T20177] dummy0 speed is unknown, defaulting to 1000
[  362.440897][T20186] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  362.519123][T20189] syzkaller1: entered promiscuous mode
[  362.521212][T20189] syzkaller1: entered allmulticast mode
[  362.595034][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4744'.
[  362.614476][T20204] syzkaller1: left promiscuous mode
[  362.616353][T20204] syzkaller1: left allmulticast mode
[  362.618813][T20202] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4744'.
[  362.695485][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'.
[  362.701781][T20210] validate_nla: 5 callbacks suppressed
[  362.701791][T20210] netlink: 'syz.3.4749': attribute type 18 has an invalid length.
[  362.732881][ T9008] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  362.735669][T20210] netlink: 'syz.3.4749': attribute type 18 has an invalid length.
[  362.741463][ T9008] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  362.744818][ T9008] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  362.748339][ T9008] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  362.848030][T20218] netlink: 'syz.3.4751': attribute type 4 has an invalid length.
[  362.948235][T20225] netlink: 'syz.3.4754': attribute type 1 has an invalid length.
[  362.976564][T20225] 8021q: adding VLAN 0 to HW filter on device bond11
[  362.995339][T20225] bond11: (slave gretap2): making interface the new active one
[  362.999243][T20225] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  363.064518][T20235] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  363.150762][T20242] geneve2: entered promiscuous mode
[  363.152746][T20242] geneve2: entered allmulticast mode
[  363.356751][T20257] netlink: 'syz.3.4768': attribute type 12 has an invalid length.
[  363.537495][T20288] netlink: 'syz.0.4776': attribute type 6 has an invalid length.
[  363.684906][T20299] lo speed is unknown, defaulting to 1000
[  363.688418][T20299] dummy0 speed is unknown, defaulting to 1000
[  363.840566][T20302] netlink: 'syz.4.4782': attribute type 1 has an invalid length.
[  363.926108][T20313] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  364.296748][T20345] netlink: 'syz.4.4794': attribute type 1 has an invalid length.
[  364.327228][T20349] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  364.332933][T20349] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  364.760793][T20391] IPv6: addrconf: prefix option has invalid lifetime
[  364.942311][T20411] syzkaller1: entered promiscuous mode
[  364.944748][T20411] syzkaller1: entered allmulticast mode
[  365.095618][T20418] netlink: 'syz.4.4822': attribute type 32 has an invalid length.
[  365.254737][T20436] syz_tun: entered promiscuous mode
[  365.256553][T20436] syz_tun: entered allmulticast mode
[  365.298825][T20438] netlink: 'syz.4.4827': attribute type 3 has an invalid length.
[  365.324324][T20440] syzkaller1: entered promiscuous mode
[  365.331688][T20440] syzkaller1: entered allmulticast mode
[  365.336631][T20440] openvswitch: netlink: IPv4 tun info is not correct
[  365.354533][T20442] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.553263][T20453] bond0: entered promiscuous mode
[  365.555596][T20453] batadv0: entered promiscuous mode
[  365.557570][T20453] debugfs: 'hsr1' already exists in 'hsr'
[  365.559712][T20453] Cannot create hsr debugfs directory
[  365.562050][T20453] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  365.565380][T20453] hsr1: entered allmulticast mode
[  365.567184][T20453] bond0: entered allmulticast mode
[  365.569443][T20453] 8021q: adding VLAN 0 to HW filter on device hsr1
[  365.574693][T20453] bond0: left promiscuous mode
[  365.577269][T20453] batadv0: left promiscuous mode
[  365.785538][T20461] __nla_validate_parse: 19 callbacks suppressed
[  365.785553][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4836'.
[  365.960137][T20474] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.986714][T20474] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  365.990248][T20474] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  366.037763][T20477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4843'.
[  366.383374][T20523] IPv6: addrconf: prefix option has invalid lifetime
[  366.387134][T20524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.441130][T20530] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0
[  366.445696][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4858'.
[  366.478408][T20525] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  366.607654][T20542] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4861'.
[  366.687243][T20548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.695373][T20550] IPv6: addrconf: prefix option has invalid lifetime
[  366.727788][T20552] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  366.733808][   T24] IPVS: starting estimator thread 0...
[  366.797871][T20557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.820656][T20553] IPVS: using max 80 ests per chain, 192000 per kthread
[  367.419988][T20590] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  367.514895][T20605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4884'.
[  367.529227][T20605] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4884'.
[  367.635930][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  367.638709][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4887'.
[  367.653464][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4889'.
[  367.656917][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4889'.
[  367.699391][T20621] IPv6: addrconf: prefix option has invalid lifetime
[  367.920532][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  367.955080][T20645] IPv6: addrconf: prefix option has invalid lifetime
[  368.002196][T20647] validate_nla: 6 callbacks suppressed
[  368.002205][T20647] netlink: 'syz.4.4898': attribute type 1 has an invalid length.
[  368.023540][T20647] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.087774][T20656] sctp: [Deprecated]: syz.0.4902 (pid 20656) Use of int in maxseg socket option.
[  368.087774][T20656] Use struct sctp_assoc_value instead
[  368.170072][T20665] IPv6: addrconf: prefix option has invalid lifetime
[  368.205586][T20669] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  368.208979][T20669] tipc: Enabled bearer <udp:syz0>, priority 10
[  368.309330][T20682] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  368.410112][T20693] IPv6: addrconf: prefix option has invalid lifetime
[  369.073690][T20744] macvlan3: entered allmulticast mode
[  369.075576][T20744] veth1_vlan: entered allmulticast mode
[  369.079307][T20744] veth1_vlan: left allmulticast mode
[  369.365251][T20750] IPVS: Unknown mcast interface: wlan0
[  369.701621][T20782] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  370.110209][T20813] IPv6: addrconf: prefix option has invalid lifetime
[  370.389136][T20845] netlink: 'syz.0.4949': attribute type 1 has an invalid length.
[  370.391883][T20845] netlink: 'syz.0.4949': attribute type 3 has an invalid length.
[  370.396676][T20845] NCSI netlink: No device for ifindex 246
[  370.486224][T20859] IPv6: addrconf: prefix option has invalid lifetime
[  370.584225][T20871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.588361][T20871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.711040][T20871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.715251][T20871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.792868][T20871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.796292][T20871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.812289][T20888] syzkaller1: left promiscuous mode
[  370.814060][T20888] syzkaller1: left allmulticast mode
[  370.844579][T20871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.847860][T20871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.947596][T15195] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.952290][T15195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.956814][T15195] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.959349][T15195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.971589][T20896] tc_dump_action: action bad kind
[  370.973981][T15195] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.987546][T15195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.991474][T15195] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.997807][T15195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.006592][T20896] __nla_validate_parse: 105 callbacks suppressed
[  371.006601][T20896] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4970'.
[  371.049869][T20903] lo speed is unknown, defaulting to 1000
[  371.056216][T20903] dummy0 speed is unknown, defaulting to 1000
[  371.147144][T20908] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  371.836641][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4975'.
[  371.840212][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4975'.
[  371.844192][T20921] netlink: 'syz.3.4975': attribute type 15 has an invalid length.
[  372.203238][T20973] netlink: 'syz.3.4995': attribute type 12 has an invalid length.
[  372.262506][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4995'.
[  372.514077][T20992] netlink: 16128 bytes leftover after parsing attributes in process `syz.0.5003'.
[  372.516989][T20992] net_ratelimit: 6 callbacks suppressed
[  372.516997][T20992] openvswitch: netlink: Flow actions attr not present in new flow.
[  372.523273][T20992] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  372.525684][T20992] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  372.529137][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5003'.
[  372.564796][T20994] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  372.768248][T21002] lo speed is unknown, defaulting to 1000
[  372.776763][T21002] dummy0 speed is unknown, defaulting to 1000
[  373.209154][T21015] openvswitch: netlink: IP tunnel TTL not specified.
[  373.264133][T21010] netlink: 'syz.3.5009': attribute type 1 has an invalid length.
[  373.268226][T21010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5009'.
[  373.730776][T21046] syzkaller1: entered promiscuous mode
[  373.732766][T21046] syzkaller1: entered allmulticast mode
[  373.938676][T21048] netlink: 'syz.3.5023': attribute type 12 has an invalid length.
[  373.943244][T21048] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.5023'.
[  373.986330][T21048] syzkaller1: entered promiscuous mode
[  373.988692][T21048] syzkaller1: entered allmulticast mode
[  374.026701][T21050] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  374.029976][T21050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.241125][T21058] nbd1: detected capacity change from 0 to 549764203264
[  374.245836][   T56] block nbd1: Receive control failed (result -104)
[  374.286324][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5029'.
[  374.390166][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5031'.
[  374.556393][T21078] lo: entered allmulticast mode
[  374.558515][T21078] lo: left allmulticast mode
[  374.679319][T21090] macsec1: entered promiscuous mode
[  374.690810][T21090] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  374.693496][T21090] macsec1: entered allmulticast mode
[  374.695272][T21090] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode
[  374.869686][T21108] netlink: 'syz.3.5045': attribute type 18 has an invalid length.
[  374.875112][T21108] netlink: 'syz.3.5045': attribute type 18 has an invalid length.
[  375.036332][T21128] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  375.103175][T21134] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  375.105970][T21134] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  375.158138][T21139] vlan2: entered promiscuous mode
[  375.160161][T21139] bond0: entered promiscuous mode
[  375.162010][T21139] bond_slave_0: entered promiscuous mode
[  375.166915][T21139] bond_slave_1: entered promiscuous mode
[  375.169065][T21139] vlan2: entered allmulticast mode
[  375.171996][T21139] bond0: entered allmulticast mode
[  375.174509][T21139] bond_slave_0: entered allmulticast mode
[  375.178018][T21139] bond_slave_1: entered allmulticast mode
[  375.202202][T21146] IPv6: addrconf: prefix option has invalid lifetime
[  375.275494][T21155] team0: Port device team_slave_1 removed
[  375.277601][T21155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.280646][T21155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  375.414119][T21185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.422668][T21185] syzkaller0: entered promiscuous mode
[  375.424503][T21185] syzkaller0: entered allmulticast mode
[  375.439526][T21185] tipc: Resetting bearer <eth:syzkaller0>
[  375.447185][T21184] tipc: Resetting bearer <eth:syzkaller0>
[  375.459129][T21184] tipc: Disabling bearer <eth:syzkaller0>
[  375.524100][T21202] IPv6: addrconf: prefix option has invalid lifetime
[  375.583404][T21206] netlink: 'syz.3.5078': attribute type 2 has an invalid length.
[  375.738569][T21217] lo speed is unknown, defaulting to 1000
[  375.787996][T21213] lo speed is unknown, defaulting to 1000
[  375.790880][T21217] dummy0 speed is unknown, defaulting to 1000
[  375.879388][T21214] tipc: Resetting bearer <eth:gre0>
[  375.948365][T21213] dummy0 speed is unknown, defaulting to 1000
[  376.141932][T21239] __nla_validate_parse: 11 callbacks suppressed
[  376.141942][T21239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5086'.
[  376.167746][T21239] 8021q: VLANs not supported on ipvlan1
[  376.265449][T21239] netlink: 'syz.4.5086': attribute type 1 has an invalid length.
[  376.441736][T21249] bridge_slave_0: left allmulticast mode
[  376.443937][T21249] bridge_slave_0: left promiscuous mode
[  376.446334][T21249] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.462546][T21249] bridge_slave_1: left allmulticast mode
[  376.464465][T21249] bridge_slave_1: left promiscuous mode
[  376.466706][T21249] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.523803][T21249] bond0: (slave bond_slave_0): Releasing backup interface
[  376.527754][T21249] bond_slave_0: left promiscuous mode
[  376.530135][T21249] bond_slave_0: left allmulticast mode
[  376.537796][T21249] bond0: (slave bond_slave_1): Releasing backup interface
[  376.544039][T21249] bond_slave_1: left promiscuous mode
[  376.546473][T21249] bond_slave_1: left allmulticast mode
[  376.558537][T21249] team0: Port device team_slave_0 removed
[  376.565201][T21254] netlink: 'syz.4.5088': attribute type 10 has an invalid length.
[  376.567831][T21249] team0: Port device team_slave_1 removed
[  376.569317][T21249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  376.904933][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'.
[  377.728906][T21305] IPv6: addrconf: prefix option has invalid lifetime
[  377.775057][T21310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5106'.
[  377.856001][T21316] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5103'.
[  378.108223][T21330] smc: net device bond0 applied user defined pnetid SYZ2
[  378.296527][T21347] netlink: 'syz.0.5118': attribute type 5 has an invalid length.
[  378.301980][T21347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'.
[  378.397373][T21358] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  378.566808][T21374] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  378.740323][T21382] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.5132'.
[  378.844930][T21391] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5135'.
[  379.562233][T21393] netlink: 'syz.0.5136': attribute type 1 has an invalid length.
[  379.875076][T21415] IPv6: addrconf: prefix option has invalid lifetime
[  379.977648][T21419] netlink: 'syz.0.5145': attribute type 2 has an invalid length.
[  380.044716][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5146'.
[  380.082997][   T11] block nbd0: Possible stuck request ffff888020da0000: control (read@0,4096B). Runtime 180 seconds
[  380.203703][ T5294] udevd[5294]: worker [11194] /devices/virtual/block/nbd0 timeout; kill it
[  380.208527][ T5294] udevd[5294]: seq 16112 '/devices/virtual/block/nbd0' killed
[  380.306885][T21440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5152'.
[  380.310846][T21440] nbd: must specify a size in bytes for the device
[  380.315634][T21440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5152'.
[  380.659045][T21458] syzkaller1: entered promiscuous mode
[  380.667562][T21458] syzkaller1: entered allmulticast mode
[  381.624177][T21494] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5167'.
[  381.758340][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5171'.
[  381.839524][T21520] netlink: 'syz.4.5174': attribute type 5 has an invalid length.
[  381.846527][T21520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5174'.
[  381.921667][T21533] netlink: 'syz.4.5177': attribute type 13 has an invalid length.
[  381.977346][T21533] lo speed is unknown, defaulting to 1000
[  381.999474][T21533] dummy0 speed is unknown, defaulting to 1000
[  382.004826][T21546] IPv6: addrconf: prefix option has invalid lifetime
[  382.143523][T21556] netlink: 'syz.0.5186': attribute type 11 has an invalid length.
[  382.198915][T21556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5186'.
[  382.325154][T21561] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5187'.
[  382.329072][T21561] 0X: renamed from caif0
[  382.338272][T21561] 0X: entered allmulticast mode
[  382.342956][T21561] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  382.621772][T21588] netlink: 'syz.3.5195': attribute type 8 has an invalid length.
[  382.631308][T21584] netlink: 'syz.0.5196': attribute type 1 has an invalid length.
[  382.634192][T21584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5196'.
[  382.671123][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5196'.
[  382.674042][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5196'.
[  382.717438][T21598] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  382.730952][T21598] netlink: 'syz.4.5198': attribute type 4 has an invalid length.
[  382.837923][T21606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5203'.
[  382.914460][T21608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5204'.
[  382.943424][T21616] netlink: 'syz.4.5205': attribute type 1 has an invalid length.
[  383.019839][T21611] bond2: (slave geneve3): making interface the new active one
[  383.023808][T21611] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  383.027315][ T5879] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  383.030610][ T5879] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  383.033550][ T5879] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  383.036436][ T5879] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  383.063998][T21622] IPv6: addrconf: prefix option has invalid lifetime
[  383.173238][T21644] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  383.226386][T21649] IPv6: addrconf: prefix option has invalid lifetime
[  383.839486][T21701] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  383.889003][T21705] netlink: 'syz.3.5234': attribute type 12 has an invalid length.
[  384.011168][T21709] netlink: 'syz.3.5236': attribute type 6 has an invalid length.
[  384.093120][T21709] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  384.274748][T21739] IPv6: addrconf: prefix option has invalid lifetime
[  384.384200][T21758] netlink: 'syz.4.5247': attribute type 3 has an invalid length.
[  384.418587][T21764] IPv6: addrconf: prefix option has invalid lifetime
[  384.464746][T21770] syzkaller1: left promiscuous mode
[  384.466579][T21770] syzkaller1: left allmulticast mode
[  384.496297][T21774] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  384.505181][T21778] : entered promiscuous mode
[  384.515217][T21778] netlink: 'syz.0.5257': attribute type 1 has an invalid length.
[  384.537478][T21783] netlink: 'syz.3.5260': attribute type 1 has an invalid length.
[  384.540032][T21783] netlink: 'syz.3.5260': attribute type 1 has an invalid length.
[  384.685131][T21809] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  384.757186][T21821] netlink: 'syz.4.5269': attribute type 1 has an invalid length.
[  384.968397][T21850] netlink: 'syz.4.5280': attribute type 20 has an invalid length.
[  385.001369][T21850] netlink: 'syz.4.5280': attribute type 20 has an invalid length.
[  385.150981][T21861] netlink: 'syz.4.5284': attribute type 2 has an invalid length.
[  385.158315][T21861] k*]: entered promiscuous mode
[  385.172283][T21861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.190175][T21861] veth0_to_team: entered promiscuous mode
[  385.194481][T21861] veth0_to_team: entered allmulticast mode
[  385.200618][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  385.210702][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.320614][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.333007][T21870] @0: renamed from veth1_to_bond (while UP)
[  385.353895][ T5706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.071469][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.159481][T21967] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  386.218629][T21957] syz_tun: left promiscuous mode
[  386.225061][T21957] syz_tun: left allmulticast mode
[  386.262806][T21957] 0X: left allmulticast mode
[  386.420791][T21957] : left promiscuous mode
[  386.425329][T21957] : left allmulticast mode
[  386.509879][T21957] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  386.514076][T21957] ip6gre1: left promiscuous mode
[  386.605177][T21957] pim6reg1: left promiscuous mode
[  386.607334][T21957] pim6reg1: left allmulticast mode
[  386.617941][T21957] tipc: Resetting bearer <eth:syzkaller0>
[  386.629961][T21957] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  386.632530][T21957] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  386.647627][T21957] ipvlan2: left allmulticast mode
[  386.649748][T21957] bond4: left allmulticast mode
[  386.656875][T21957] bond6: left promiscuous mode
[  386.658900][T21957] bond6: left allmulticast mode
[  386.710917][T21957] gretap4: left promiscuous mode
[  386.713180][T21957] gretap5: left allmulticast mode
[  386.799776][   T24] dummy0 speed is unknown, defaulting to 1000
[  386.802435][   T24] syz2: Port: 1 Link DOWN
[  386.802507][   T10] dummy0 speed is unknown, defaulting to 1000
[  386.804331][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.808957][ T5902] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.813254][ T5902] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.816805][T15195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.823735][T15195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.830812][ T5902] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.849372][ T5902] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.858591][ T5902] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.862076][ T5902] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.874874][ T5902] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.877772][ T5902] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.880642][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.256195][T21999] __nla_validate_parse: 37 callbacks suppressed
[  387.256206][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5328'.
[  387.742350][T22034] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5338'.
[  387.746182][T22034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5338'.
[  387.749914][T22034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5338'.
[  387.755726][T22034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5338'.
[  387.761400][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.061343][T22054] siw: device registration error -23
[  388.066563][T22054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5346'.
[  388.912709][T22069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5353'.
[  388.917817][T22069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5353'.
[  388.921123][T22069] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5353'.
[  388.924562][T22069] validate_nla: 5 callbacks suppressed
[  388.924569][T22069] netlink: 'syz.3.5353': attribute type 6 has an invalid length.
[  388.929418][T22069] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5353'.
[  389.003101][T22075] net_ratelimit: 2 callbacks suppressed
[  389.003116][T22075] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  389.025824][T22077] netlink: 'syz.3.5357': attribute type 1 has an invalid length.
[  389.307896][T22108] lo speed is unknown, defaulting to 1000
[  389.312122][T22108] dummy0 speed is unknown, defaulting to 1000
[  389.515006][T22123] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.899882][T22142] lo speed is unknown, defaulting to 1000
[  389.904591][T22142] dummy0 speed is unknown, defaulting to 1000
[  389.934557][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.940734][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.946916][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.952520][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.223188][T22159] netlink: 'syz.4.5385': attribute type 83 has an invalid length.
[  390.566449][T22164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.960662][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  391.279821][T22185] lo speed is unknown, defaulting to 1000
[  391.283525][T22185] dummy0 speed is unknown, defaulting to 1000
[  391.402741][T22189] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  391.595421][T22214] netlink: 'syz.4.5401': attribute type 1 has an invalid length.
[  391.665889][T22218] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002
[  391.686476][T22220] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  391.828110][T22238] netlink: 'syz.0.5411': attribute type 58 has an invalid length.
[  391.956215][T22254] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  392.136649][T22277] openvswitch: netlink: Missing valid actions attribute.
[  392.139484][T22277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.280300][T22291] __nla_validate_parse: 18 callbacks suppressed
[  392.280309][T22291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5428'.
[  392.502387][T22327] netlink: 'syz.4.5438': attribute type 16 has an invalid length.
[  392.504964][T22327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5438'.
[  392.615511][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'.
[  392.619794][T22336] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  393.368650][T22343] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  393.429274][T22350] netlink: 'syz.4.5444': attribute type 2 has an invalid length.
[  393.444507][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5444'.
[  393.486442][T22355] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5445'.
[  393.492274][T22355] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.805709][T22385] syzkaller1: entered promiscuous mode
[  393.807713][T22385] syzkaller1: entered allmulticast mode
[  394.449151][T22396] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  394.486748][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5461'.
[  394.506061][T22408] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  394.528647][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5463'.
[  394.533523][T22411] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5463'.
[  394.584119][T22415] lo speed is unknown, defaulting to 1000
[  394.588537][T22415] dummy0 speed is unknown, defaulting to 1000
[  395.469363][T22465] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  395.526286][T22471] lo speed is unknown, defaulting to 1000
[  395.529412][T22471] dummy0 speed is unknown, defaulting to 1000
[  395.565735][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5479'.
[  395.573086][T22475] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5479'.
[  395.668040][T22475] bond0 (unregistering): Released all slaves
[  395.802462][T22484] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  395.808233][T22485] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  396.100572][T22494] nbd2: detected capacity change from 0 to 127
[  396.180691][T22495] nbd4: detected capacity change from 0 to 127
[  396.186189][   T56] block nbd2: Receive control failed (result -104)
[  396.186227][T12944] block nbd4: Receive control failed (result -32)
[  396.215689][T22499] netlink: 'syz.4.5487': attribute type 32 has an invalid length.
[  396.454794][T22530] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  396.507918][T22537] netlink: 'syz.0.5500': attribute type 1 has an invalid length.
[  396.541685][T22537] 8021q: adding VLAN 0 to HW filter on device bond18
[  396.558227][T22537] bond18: (slave geneve3): making interface the new active one
[  396.573251][T22537] bond18: (slave geneve3): Enslaving as an active interface with an up link
[  396.579690][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.583506][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.587793][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.596719][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.677446][T22553] netlink: 'syz.0.5502': attribute type 1 has an invalid length.
[  396.682737][T22553] netlink: 'syz.0.5502': attribute type 1 has an invalid length.
[  396.857392][T22574] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  396.975701][T22591] nbd: must specify an index to disconnect
[  397.018933][T22599] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  397.196021][T22613] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.217459][T22622] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  397.334787][T22645] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  397.387261][T22656] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  397.413435][T22659] __nla_validate_parse: 6 callbacks suppressed
[  397.413443][T22659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5536'.
[  397.535951][T22679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  397.569202][T22681] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  397.588171][T22690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.600636][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  397.626124][T22697] netlink: 'syz.3.5548': attribute type 21 has an invalid length.
[  397.628639][T22697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5548'.
[  397.630868][T22694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5547'.
[  397.633156][T22697] netlink: 'syz.3.5548': attribute type 5 has an invalid length.
[  397.637720][T22697] netlink: 'syz.3.5548': attribute type 6 has an invalid length.
[  397.640251][T22697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5548'.
[  397.713188][T22706] netlink: 'syz.3.5549': attribute type 12 has an invalid length.
[  397.787385][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5551'.
[  397.793081][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5551'.
[  397.857159][T22725] netlink: 'syz.0.5556': attribute type 5 has an invalid length.
[  397.862447][T22725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5556'.
[  397.940289][T22742] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5562'.
[  397.944269][T22742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5562'.
[  397.949030][T22742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'.
[  397.954471][T22742] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  397.956894][T22742] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  398.026652][T22752] netlink: 'syz.3.5566': attribute type 1 has an invalid length.
[  398.252218][T22775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.339449][T22779] lo speed is unknown, defaulting to 1000
[  398.342243][T22779] dummy0 speed is unknown, defaulting to 1000
[  398.391613][T22784] bond9: option mode: unable to set because the bond device has slaves
[  398.549733][T22712] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  398.955753][T22844] veth0: entered promiscuous mode
[  399.290562][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  399.325935][T22870] 8021q: adding VLAN 0 to HW filter on device bond4
[  399.348012][T22870] bond4: (slave geneve4): making interface the new active one
[  399.353931][T22870] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  399.936640][T22924] net_ratelimit: 6 callbacks suppressed
[  399.936653][T22924] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  400.246374][T22935] tipc: Resetting bearer <eth:gre0>
[  400.250702][T22935] tipc: Resetting bearer <eth:gre0>
[  400.260151][T22935] 8021q: adding VLAN 0 to HW filter on device team0
[  400.275105][T22935] 0X: left allmulticast mode
[  400.276946][T22935] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  400.283870][  T969] lo speed is unknown, defaulting to 1000
[  400.287327][  T969] syz1: Port: 1 Link ACTIVE
[  400.294495][T22940] bond0: entered promiscuous mode
[  400.298108][T22940] bond0: left promiscuous mode
[  401.981237][T23013] 8021q: adding VLAN 0 to HW filter on device bond15
[  401.988856][T23019] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  401.993203][T23019] bond15: (slave macvlan1): Enslaving as a backup interface with a down link
[  402.008258][T23022] erspan0: left promiscuous mode
[  402.025670][T23022] 8021q: adding VLAN 0 to HW filter on device team0
[  402.031946][T23022] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  402.739352][ T5914] dummy0 speed is unknown, defaulting to 1000
[  402.742064][ T5914] syz2: Port: 1 Link ACTIVE
[  402.743509][ T5914] dummy0 speed is unknown, defaulting to 1000
[  402.759713][T23026] lo speed is unknown, defaulting to 1000
[  402.772223][T23026] dummy0 speed is unknown, defaulting to 1000
[  402.788039][T23037] lo speed is unknown, defaulting to 1000
[  402.916671][T23037] dummy0 speed is unknown, defaulting to 1000
[  402.985890][T23040] validate_nla: 10 callbacks suppressed
[  402.985900][T23040] netlink: 'syz.4.5654': attribute type 2 has an invalid length.
[  403.024067][T23051] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  403.120165][T23059] __nla_validate_parse: 29 callbacks suppressed
[  403.120183][T23059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5662'.
[  403.130153][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'.
[  403.144521][T23059] xfrm2: entered promiscuous mode
[  403.146301][T23059] xfrm2: entered allmulticast mode
[  403.365952][T23063] sock: sock_timestamping_bind_phc: sock not bind to device
[  403.514625][ T5706] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  403.648779][T23095] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  404.420677][   T11] block nbd1: Possible stuck request ffff888020e1a800: control (read@0,4096B). Runtime 30 seconds
[  404.487979][T23114] netlink: 'syz.4.5679': attribute type 23 has an invalid length.
[  404.526692][T23116] lo speed is unknown, defaulting to 1000
[  404.532772][T23119] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  404.680203][T23139] netlink: 464 bytes leftover after parsing attributes in process `syz.4.5689'.
[  404.688659][T23139] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5689'.
[  404.693055][T23139] 0: renamed from hsr0 (while UP)
[  404.697702][T23139] 0: entered allmulticast mode
[  404.699974][T23139] hsr_slave_0: entered allmulticast mode
[  404.706269][T23139] hsr_slave_1: entered allmulticast mode
[  404.709644][T23139] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  404.828261][T23155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5694'.
[  405.015856][T23169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5699'.
[  405.019019][T23169] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  405.048587][T23171] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5700'.
[  405.210353][T23181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.215652][T23181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  405.403705][T23190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.407670][T23190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5706'.
[  405.478258][T23199] IPv6: addrconf: prefix option has invalid lifetime
[  405.552897][T23207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5711'.
[  405.556984][T23207] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  405.587650][T23209] sock: sock_timestamping_bind_phc: sock not bind to device
[  405.761958][T23228] netlink: 87 bytes leftover after parsing attributes in process `syz.0.5720'.
[  405.985114][T23242] IPv6: addrconf: prefix option has invalid lifetime
[  406.258552][T23252] netlink: 'syz.0.5729': attribute type 1 has an invalid length.
[  406.278638][T23252] 8021q: adding VLAN 0 to HW filter on device bond19
[  406.299646][T23252] 8021q: adding VLAN 0 to HW filter on device bond19
[  406.303430][T23252] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  406.308107][T23252] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  406.352238][T23254] bond19: (slave bridge19): Enslaving as an active interface with a down link
[  406.662893][T23260] netlink: 'syz.0.5732': attribute type 2 has an invalid length.
[  406.696891][T23262] IPv6: addrconf: prefix option has invalid lifetime
[  406.812586][T23276] openvswitch: netlink: Message has 24 unknown bytes.
[  406.894336][T23287] netlink: 'syz.0.5741': attribute type 7 has an invalid length.
[  406.972031][T23302] IPv6: addrconf: prefix option has invalid lifetime
[  407.065422][T23315] netlink: 'syz.4.5751': attribute type 1 has an invalid length.
[  407.091972][T23315] bond5: entered promiscuous mode
[  407.098297][T23315] 8021q: adding VLAN 0 to HW filter on device bond5
[  407.110514][T23315] tun0: tun_chr_ioctl cmd 1074025672
[  407.112312][T23315] tun0: ignored: set checksum disabled
[  407.126939][T23315] 8021q: adding VLAN 0 to HW filter on device bond5
[  407.129481][T23315] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  407.133975][T23315] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  407.145399][T23315] bond5: (slave wireguard0): making interface the new active one
[  407.148058][T23315] wireguard0: entered promiscuous mode
[  407.150905][T23315] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  407.156271][T23315] netlink: 'syz.4.5751': attribute type 83 has an invalid length.
[  407.239304][T23340] openvswitch: netlink: Key 32 has unexpected len 20 expected 2
[  407.294503][T23350] netlink: 'syz.4.5759': attribute type 10 has an invalid length.
[  407.426908][T23363] netlink: 'syz.3.5764': attribute type 2 has an invalid length.
[  407.434886][T23363] k*: entered promiscuous mode
[  407.443934][T23363] tipc: Resetting bearer <eth:gre0>
[  407.452716][T23363] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  407.727431][T23399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.766892][T23407] netlink: 'syz.3.5780': attribute type 6 has an invalid length.
[  408.006190][T23438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  408.041996][T23445] netlink: 'syz.0.5790': attribute type 8 has an invalid length.
[  408.137859][T23454] netlink: 'syz.3.5796': attribute type 83 has an invalid length.
[  408.140235][T23456] netlink: 'syz.0.5797': attribute type 1 has an invalid length.
[  408.158043][T23456] bond20: (slave vti1): The slave device specified does not support setting the MAC address
[  408.162017][T23456] bond20: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  408.166799][T23456] bond20: (slave vti1): making interface the new active one
[  408.169547][T23456] bond20: (slave vti1): Enslaving as an active interface with an up link
[  408.191034][T23461] netlink: 'syz.3.5799': attribute type 21 has an invalid length.
[  408.194102][T23461] netlink: 'syz.3.5799': attribute type 6 has an invalid length.
[  408.196845][T23461] __nla_validate_parse: 17 callbacks suppressed
[  408.196852][T23461] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5799'.
[  408.234609][T23467] netlink: 'syz.4.5802': attribute type 1 has an invalid length.
[  408.249578][T23468] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.251799][T23467] 8021q: adding VLAN 0 to HW filter on device bond6
[  408.258657][T23468] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.270787][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.277058][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.279401][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.279897][T23467] bond6: (slave gretap1): making interface the new active one
[  408.282493][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.284958][T23467] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  408.286990][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.292429][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.297165][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.300347][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.303381][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.306018][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.311421][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.316770][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.321244][T23475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5804'.
[  408.325283][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.327878][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.334104][T23475] netlink: 'syz.3.5804': attribute type 12 has an invalid length.
[  408.338494][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.341872][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.345224][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.348958][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.351903][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.354523][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.358639][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.362499][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.365250][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.368917][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.375274][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.378056][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.380916][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.383043][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.385115][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.387118][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.389133][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.401347][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.403816][T23469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.462269][T23483] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  408.504924][T23483] bond16: entered promiscuous mode
[  408.507184][T23483] bond16: entered allmulticast mode
[  408.509920][T23483] 8021q: adding VLAN 0 to HW filter on device bond16
[  408.515228][T23484] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  408.547621][T23484] bond17: entered promiscuous mode
[  408.549734][T23484] bond17: entered allmulticast mode
[  408.552638][T23484] 8021q: adding VLAN 0 to HW filter on device bond17
[  408.585836][T23490] ip6gre2: entered promiscuous mode
[  408.711449][T23506] syz.4.5814: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  408.716450][T23506] CPU: 1 UID: 0 PID: 23506 Comm: syz.4.5814 Not tainted syzkaller #0 PREEMPT(full) 
[  408.716461][T23506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  408.716465][T23506] Call Trace:
[  408.716469][T23506]  <TASK>
[  408.716473][T23506]  dump_stack_lvl+0x189/0x250
[  408.716487][T23506]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.716496][T23506]  ? __pfx__printk+0x10/0x10
[  408.716505][T23506]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  408.716514][T23506]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  408.716523][T23506]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  408.716531][T23506]  warn_alloc+0x214/0x310
[  408.716542][T23506]  ? stack_depot_save_flags+0x40/0x860
[  408.716552][T23506]  ? __pfx_warn_alloc+0x10/0x10
[  408.716563][T23506]  ? kasan_save_track+0x4f/0x80
[  408.716572][T23506]  ? xskq_create+0x56/0x170
[  408.716578][T23506]  ? xsk_init_queue+0xb0/0x110
[  408.716584][T23506]  ? xsk_setsockopt+0x4dc/0x8d0
[  408.716592][T23506]  ? do_sock_setsockopt+0x17c/0x1b0
[  408.716601][T23506]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  408.716607][T23506]  ? do_syscall_64+0xfa/0x3b0
[  408.716615][T23506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.716624][T23506]  __vmalloc_node_range_noprof+0x125/0x12f0
[  408.716646][T23506]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  408.716658][T23506]  ? __kasan_kmalloc+0x93/0xb0
[  408.716668][T23506]  vmalloc_user_noprof+0xad/0xf0
[  408.716678][T23506]  ? xskq_create+0xbf/0x170
[  408.716685][T23506]  xskq_create+0xbf/0x170
[  408.716693][T23506]  xsk_init_queue+0xb0/0x110
[  408.716701][T23506]  xsk_setsockopt+0x4dc/0x8d0
[  408.716711][T23506]  ? __pfx_xsk_setsockopt+0x10/0x10
[  408.716722][T23506]  ? __pfx_aa_sk_perm+0x10/0x10
[  408.716733][T23506]  ? aa_sock_opt_perm+0xff/0x1b0
[  408.716741][T23506]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  408.716749][T23506]  ? __pfx_xsk_setsockopt+0x10/0x10
[  408.716759][T23506]  do_sock_setsockopt+0x17c/0x1b0
[  408.716769][T23506]  __x64_sys_setsockopt+0x13f/0x1b0
[  408.716779][T23506]  do_syscall_64+0xfa/0x3b0
[  408.716786][T23506]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.716793][T23506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.716799][T23506]  ? exc_page_fault+0x9f/0xf0
[  408.716807][T23506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.716813][T23506] RIP: 0033:0x7ff7a578eba9
[  408.716820][T23506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.716826][T23506] RSP: 002b:00007ff7a6688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  408.716834][T23506] RAX: ffffffffffffffda RBX: 00007ff7a59d6180 RCX: 00007ff7a578eba9
[  408.716839][T23506] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  408.716844][T23506] RBP: 00007ff7a5811e19 R08: 0000000000000004 R09: 0000000000000000
[  408.716848][T23506] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.716852][T23506] R13: 00007ff7a59d6218 R14: 00007ff7a59d6180 R15: 00007ffc4a522fd8
[  408.716863][T23506]  </TASK>
[  408.716866][T23506] Mem-Info:
[  408.786685][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5812'.
[  408.788454][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.792350][T23506] active_anon:13291 inactive_anon:0 isolated_anon:0
[  408.792350][T23506]  active_file:1615 inactive_file:38381 isolated_file:0
[  408.792350][T23506]  unevictable:1768 dirty:105 writeback:0
[  408.792350][T23506]  slab_reclaimable:11718 slab_unreclaimable:93457
[  408.792350][T23506]  mapped:23615 shmem:2443 pagetables:1091
[  408.792350][T23506]  sec_pagetables:0 bounce:0
[  408.792350][T23506]  kernel_misc_reclaimable:0
[  408.792350][T23506]  free:227182 free_pcp:22719 free_cma:0
[  408.815945][T23505] C: renamed from lo (while UP)
[  408.826253][T23506] Node 0 active_anon:15452kB inactive_anon:0kB active_file:4624kB inactive_file:149924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48900kB dirty:252kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8316kB pagetables:2632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  408.878203][T23506] Node 1 active_anon:37712kB inactive_anon:0kB active_file:1836kB inactive_file:3600kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45560kB dirty:168kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6276kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  408.905284][T23506] Node 0 DMA free:14916kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:64kB free_cma:0kB
[  408.918183][T23506] lowmem_reserve[]: 0 811 811 811 811
[  408.921290][T23506] Node 0 DMA32 free:86124kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15384kB inactive_anon:0kB active_file:4624kB inactive_file:149924kB unevictable:3536kB writepending:252kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:50248kB local_pcp:30940kB free_cma:0kB
[  408.936446][T23506] lowmem_reserve[]: 0 0 0 0 0
[  408.938857][T23506] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  408.951619][T23506] lowmem_reserve[]: 0 0 854 854 854
[  408.954021][T23506] Node 1 Normal free:348992kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37848kB inactive_anon:0kB active_file:1836kB inactive_file:3600kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39944kB local_pcp:17892kB free_cma:0kB
[  408.965776][T23506] lowmem_reserve[]: 0 0 0 0 0
[  408.968572][T23506] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 5*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 0*4096kB = 14916kB
[  408.974369][T23506] Node 0 DMA32: 845*4kB (UME) 575*8kB (UE) 236*16kB (UE) 8*32kB (ME) 6*64kB (ME) 8*128kB (UM) 46*256kB (UME) 37*512kB (UME) 13*1024kB (UM) 4*2048kB (UME) 5*4096kB (M) = 86124kB
[  408.981496][T23506] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  408.987291][T23506] Node 1 Normal: 469*4kB (UME) 278*8kB (UME) 152*16kB (UM) 136*32kB (UME) 46*64kB (UME) 80*128kB (UM) 53*256kB (UME) 30*512kB (UM) 11*1024kB (UME) 5*2048kB (UE) 67*4096kB (M) = 348932kB
[  408.993764][T23506] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  409.006469][T23506] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  409.010908][T23506] 42439 total pagecache pages
[  409.012680][T23506] 0 pages in swap cache
[  409.014343][T23506] Free swap  = 124996kB
[  409.016049][T23506] Total swap = 124996kB
[  409.019956][T23506] 786301 pages RAM
[  409.023272][T23506] 0 pages HighMem/MovableOnly
[  409.025031][T23506] 241350 pages reserved
[  409.026757][T23506] 0 pages cma reserved
[  409.065112][T23513] xt_time: invalid argument - start or stop time greater than 23:59:59
[  409.066621][T23514] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.5818'.
[  409.217915][T23528] syzkaller0: entered promiscuous mode
[  409.221067][T23528] syzkaller0: entered allmulticast mode
[  409.305073][T23527] BUG: MAX_LOCKDEP_KEYS too low!
[  409.306751][T23527] turning off the locking correctness validator.
[  409.308906][T23527] CPU: 0 UID: 0 PID: 23527 Comm: syz.4.5822 Not tainted syzkaller #0 PREEMPT(full) 
[  409.308916][T23527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.308920][T23527] Call Trace:
[  409.308924][T23527]  <TASK>
[  409.308927][T23527]  dump_stack_lvl+0x189/0x250
[  409.308938][T23527]  ? is_dynamic_key+0xd6/0x1c0
[  409.308948][T23527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.308956][T23527]  ? __pfx__printk+0x10/0x10
[  409.308964][T23527]  ? is_dynamic_key+0xd6/0x1c0
[  409.308972][T23527]  ? is_module_address+0x17/0xf0
[  409.308980][T23527]  ? is_module_address+0x17/0xf0
[  409.308988][T23527]  ? is_dynamic_key+0xd6/0x1c0
[  409.308998][T23527]  ? is_dynamic_key+0xd6/0x1c0
[  409.309006][T23527]  ? is_dynamic_key+0xd6/0x1c0
[  409.309015][T23527]  register_lock_class+0x2e8/0x320
[  409.309026][T23527]  __lock_acquire+0x99/0xd20
[  409.309036][T23527]  ? netif_set_real_num_tx_queues+0x78a/0xa60
[  409.309044][T23527]  lock_acquire+0x120/0x360
[  409.309053][T23527]  ? netif_set_real_num_tx_queues+0x78a/0xa60
[  409.309062][T23527]  ? netif_set_real_num_tx_queues+0x78a/0xa60
[  409.309069][T23527]  _raw_spin_lock_bh+0x36/0x50
[  409.309078][T23527]  ? netif_set_real_num_tx_queues+0x78a/0xa60
[  409.309086][T23527]  netif_set_real_num_tx_queues+0x78a/0xa60
[  409.309095][T23527]  __tun_detach+0xc2c/0x1560
[  409.309104][T23527]  ? __pfx_tun_chr_close+0x10/0x10
[  409.309111][T23527]  tun_chr_close+0x10a/0x1c0
[  409.309117][T23527]  __fput+0x44c/0xa70
[  409.309126][T23527]  task_work_run+0x1d4/0x260
[  409.309135][T23527]  ? __pfx_task_work_run+0x10/0x10
[  409.309144][T23527]  ? exit_to_user_mode_loop+0x40/0x110
[  409.309154][T23527]  exit_to_user_mode_loop+0xec/0x110
[  409.309162][T23527]  do_syscall_64+0x2bd/0x3b0
[  409.309170][T23527]  ? lockdep_hardirqs_on+0x9c/0x150
[  409.309177][T23527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.309183][T23527]  ? exc_page_fault+0x9f/0xf0
[  409.309189][T23527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.309196][T23527] RIP: 0033:0x7ff7a578eba9
[  409.309203][T23527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.309208][T23527] RSP: 002b:00007ffc4a523138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  409.309217][T23527] RAX: 0000000000000000 RBX: 0000000000063dd5 RCX: 00007ff7a578eba9
[  409.309221][T23527] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  409.309225][T23527] RBP: 00007ff7a59d7da0 R08: 0000000000000001 R09: 0000001e4a52342f
[  409.309229][T23527] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007ff7a59d5fac
[  409.309234][T23527] R13: 00007ff7a59d5fa0 R14: ffffffffffffffff R15: 00007ffc4a523250
[  409.309241][T23527]  </TASK>
[  409.367553][T23533] ==================================================================
[  409.405942][T23533] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  409.408971][T23533] Read of size 4 at addr ffff88810f5a00c4 by task syz.3.5823/23533
[  409.411459][T23533] 
[  409.412261][T23533] CPU: 1 UID: 0 PID: 23533 Comm: syz.3.5823 Not tainted syzkaller #0 PREEMPT(full) 
[  409.412271][T23533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.412276][T23533] Call Trace:
[  409.412280][T23533]  <TASK>
[  409.412284][T23533]  dump_stack_lvl+0x189/0x250
[  409.412318][T23533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.412327][T23533]  ? lock_release+0x4b/0x3e0
[  409.412338][T23533]  ? __virt_addr_valid+0x4a5/0x5c0
[  409.412349][T23533]  print_report+0xca/0x240
[  409.412356][T23533]  ? xfrm_alloc_spi+0x570/0xf30
[  409.412365][T23533]  kasan_report+0x118/0x150
[  409.412375][T23533]  ? lock_acquire+0x5f/0x360
[  409.412384][T23533]  ? xfrm_alloc_spi+0x570/0xf30
[  409.412394][T23533]  xfrm_alloc_spi+0x570/0xf30
[  409.412403][T23533]  ? xfrm_alloc_spi+0x2a0/0xf30
[  409.412415][T23533]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  409.412423][T23533]  ? xfrm_find_acq+0x87/0xa0
[  409.412433][T23533]  xfrm_alloc_userspi+0x70b/0xc90
[  409.412445][T23533]  ? apparmor_capable+0x137/0x1b0
[  409.412453][T23533]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  409.412463][T23533]  ? __nla_parse+0x40/0x60
[  409.412469][T23533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  409.412479][T23533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  409.412493][T23533]  ? __pfx___mutex_trylock_common+0x10/0x10
[  409.412501][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.412508][T23533]  ? trace_contention_end+0x39/0x120
[  409.412514][T23533]  ? __mutex_lock+0x335/0x1350
[  409.412523][T23533]  netlink_rcv_skb+0x208/0x470
[  409.412531][T23533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  409.412540][T23533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  409.412548][T23533]  ? lock_release+0x4b/0x3e0
[  409.412557][T23533]  ? netlink_deliver_tap+0x2e/0x1b0
[  409.412564][T23533]  xfrm_netlink_rcv+0x79/0x90
[  409.412572][T23533]  netlink_unicast+0x82f/0x9e0
[  409.412583][T23533]  ? __pfx_netlink_unicast+0x10/0x10
[  409.412592][T23533]  ? netlink_sendmsg+0x642/0xb30
[  409.412598][T23533]  ? skb_put+0x11b/0x210
[  409.412606][T23533]  netlink_sendmsg+0x805/0xb30
[  409.412614][T23533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.412622][T23533]  ? aa_sock_msg_perm+0xf1/0x1d0
[  409.412628][T23533]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  409.412635][T23533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.412642][T23533]  __sock_sendmsg+0x21c/0x270
[  409.412652][T23533]  ____sys_sendmsg+0x505/0x830
[  409.412660][T23533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.412668][T23533]  ? import_iovec+0x74/0xa0
[  409.412677][T23533]  ___sys_sendmsg+0x21f/0x2a0
[  409.412684][T23533]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.412692][T23533]  ? futex_wake+0x4b2/0x560
[  409.412705][T23533]  ? __fget_files+0x2a/0x420
[  409.412711][T23533]  ? __fget_files+0x3a0/0x420
[  409.412718][T23533]  __x64_sys_sendmsg+0x19b/0x260
[  409.412725][T23533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  409.412734][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.412741][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.412747][T23533]  do_syscall_64+0xfa/0x3b0
[  409.412756][T23533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.412762][T23533]  ? __switch_to_asm+0x39/0x70
[  409.412770][T23533]  ? __switch_to_asm+0x33/0x70
[  409.412778][T23533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.412785][T23533] RIP: 0033:0x7fe80ab8eba9
[  409.412793][T23533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.412799][T23533] RSP: 002b:00007fe80ba22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.412807][T23533] RAX: ffffffffffffffda RBX: 00007fe80add6180 RCX: 00007fe80ab8eba9
[  409.412812][T23533] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 000000000000000b
[  409.412816][T23533] RBP: 00007fe80ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  409.412820][T23533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.412824][T23533] R13: 00007fe80add6218 R14: 00007fe80add6180 R15: 00007ffda8857758
[  409.412832][T23533]  </TASK>
[  409.412834][T23533] 
[  409.538710][T23533] Allocated by task 21163:
[  409.540112][T23533]  kasan_save_track+0x3e/0x80
[  409.541650][T23533]  __kasan_slab_alloc+0x6c/0x80
[  409.543220][T23533]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  409.545009][T23533]  xfrm_state_alloc+0x24/0x2f0
[  409.546926][T23533]  __find_acq_core+0x8a7/0x1c00
[  409.548504][T23533]  xfrm_find_acq+0x78/0xa0
[  409.549956][T23533]  xfrm_alloc_userspi+0x6b3/0xc90
[  409.551606][T23533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  409.553219][T23533]  netlink_rcv_skb+0x208/0x470
[  409.554735][T23533]  xfrm_netlink_rcv+0x79/0x90
[  409.556312][T23533]  netlink_unicast+0x82f/0x9e0
[  409.557829][T23533]  netlink_sendmsg+0x805/0xb30
[  409.559370][T23533]  __sock_sendmsg+0x21c/0x270
[  409.560830][T23533]  ____sys_sendmsg+0x505/0x830
[  409.562558][T23533]  ___sys_sendmsg+0x21f/0x2a0
[  409.564058][T23533]  __x64_sys_sendmsg+0x19b/0x260
[  409.565679][T23533]  do_syscall_64+0xfa/0x3b0
[  409.567164][T23533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.569029][T23533] 
[  409.569815][T23533] Freed by task 24:
[  409.571071][T23533]  kasan_save_track+0x3e/0x80
[  409.572619][T23533]  kasan_save_free_info+0x46/0x50
[  409.574195][T23533]  __kasan_slab_free+0x5b/0x80
[  409.575768][T23533]  kmem_cache_free+0x18f/0x400
[  409.577281][T23533]  xfrm_state_gc_task+0x52d/0x6b0
[  409.578894][T23533]  process_scheduled_works+0xae1/0x17b0
[  409.580690][T23533]  worker_thread+0x8a0/0xda0
[  409.582183][T23533]  kthread+0x711/0x8a0
[  409.583501][T23533]  ret_from_fork+0x3fc/0x770
[  409.584981][T23533]  ret_from_fork_asm+0x1a/0x30
[  409.586516][T23533] 
[  409.587307][T23533] The buggy address belongs to the object at ffff88810f5a0000
[  409.587307][T23533]  which belongs to the cache xfrm_state of size 928
[  409.591640][T23533] The buggy address is located 196 bytes inside of
[  409.591640][T23533]  freed 928-byte region [ffff88810f5a0000, ffff88810f5a03a0)
[  409.595969][T23533] 
[  409.596773][T23533] The buggy address belongs to the physical page:
[  409.598855][T23533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f5a0480 pfn:0x10f5a0
[  409.601999][T23533] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  409.604608][T23533] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  409.607137][T23533] page_type: f5(slab)
[  409.608450][T23533] raw: 057ff00000000040 ffff88801e28a280 dead000000000122 0000000000000000
[  409.611060][T23533] raw: ffff88810f5a0480 00000000800e0008 00000000f5000000 0000000000000000
[  409.613740][T23533] head: 057ff00000000040 ffff88801e28a280 dead000000000122 0000000000000000
[  409.616458][T23533] head: ffff88810f5a0480 00000000800e0008 00000000f5000000 0000000000000000
[  409.619201][T23533] head: 057ff00000000002 ffffea00043d6801 00000000ffffffff 00000000ffffffff
[  409.621912][T23533] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  409.624593][T23533] page dumped because: kasan: bad access detected
[  409.626613][T23533] page_owner tracks the page as allocated
[  409.628402][T23533] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 21163, tgid 21162 (syz.3.5065), ts 375313887420, free_ts 375234473492
[  409.634337][T23533]  post_alloc_hook+0x240/0x2a0
[  409.636093][T23533]  get_page_from_freelist+0x21e4/0x22c0
[  409.638224][T23533]  __alloc_frozen_pages_noprof+0x181/0x370
[  409.640045][T23533]  alloc_pages_mpol+0x232/0x4a0
[  409.641712][T23533]  allocate_slab+0x8a/0x370
[  409.643156][T23533]  ___slab_alloc+0xbeb/0x1420
[  409.644667][T23533]  kmem_cache_alloc_noprof+0x283/0x3c0
[  409.646453][T23533]  xfrm_state_alloc+0x24/0x2f0
[  409.647980][T23533]  __find_acq_core+0x8a7/0x1c00
[  409.649594][T23533]  xfrm_find_acq+0x78/0xa0
[  409.650988][T23533]  xfrm_alloc_userspi+0x6b3/0xc90
[  409.652589][T23533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  409.654218][T23533]  netlink_rcv_skb+0x208/0x470
[  409.656094][T23533]  xfrm_netlink_rcv+0x79/0x90
[  409.657691][T23533]  netlink_unicast+0x82f/0x9e0
[  409.659265][T23533]  netlink_sendmsg+0x805/0xb30
[  409.660824][T23533] page last free pid 21150 tgid 21150 stack trace:
[  409.662886][T23533]  __free_frozen_pages+0xbc4/0xd30
[  409.664531][T23533]  __slab_free+0x303/0x3c0
[  409.666001][T23533]  qlist_free_all+0x97/0x140
[  409.667462][T23533]  kasan_quarantine_reduce+0x148/0x160
[  409.669121][T23533]  __kasan_slab_alloc+0x22/0x80
[  409.670687][T23533]  __kmalloc_noprof+0x224/0x4f0
[  409.672270][T23533]  tomoyo_encode+0x28b/0x550
[  409.673762][T23533]  tomoyo_path_perm+0x2b3/0x4b0
[  409.675555][T23533]  tomoyo_path_symlink+0xa3/0xe0
[  409.677338][T23533]  security_path_symlink+0x177/0x380
[  409.679019][T23533]  do_symlinkat+0x107/0x3f0
[  409.680512][T23533]  __x64_sys_symlinkat+0x95/0xb0
[  409.682040][T23533]  do_syscall_64+0xfa/0x3b0
[  409.683498][T23533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.685497][T23533] 
[  409.686308][T23533] Memory state around the buggy address:
[  409.688268][T23533]  ffff88810f59ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  409.690851][T23533]  ffff88810f5a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.693427][T23533] >ffff88810f5a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.696287][T23533]                                            ^
[  409.698242][T23533]  ffff88810f5a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.700902][T23533]  ffff88810f5a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  409.703960][T23533] ==================================================================
[  409.706953][T23533] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  409.709176][T23533] CPU: 1 UID: 0 PID: 23533 Comm: syz.3.5823 Not tainted syzkaller #0 PREEMPT(full) 
[  409.712101][T23533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.715430][T23533] Call Trace:
[  409.716780][T23533]  <TASK>
[  409.717717][T23533]  dump_stack_lvl+0x99/0x250
[  409.719166][T23533]  ? __asan_memcpy+0x40/0x70
[  409.720701][T23533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.722395][T23533]  ? __pfx__printk+0x10/0x10
[  409.723847][T23533]  vpanic+0x281/0x750
[  409.725162][T23533]  ? __pfx_vpanic+0x10/0x10
[  409.726648][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.728200][T23533]  panic+0xb9/0xc0
[  409.729457][T23533]  ? __pfx_panic+0x10/0x10
[  409.730855][T23533]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  409.732703][T23533]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  409.734644][T23533]  ? xfrm_alloc_spi+0x570/0xf30
[  409.736597][T23533]  check_panic_on_warn+0x89/0xb0
[  409.738217][T23533]  ? xfrm_alloc_spi+0x570/0xf30
[  409.739822][T23533]  end_report+0x78/0x160
[  409.741217][T23533]  kasan_report+0x129/0x150
[  409.742753][T23533]  ? lock_acquire+0x5f/0x360
[  409.744387][T23533]  ? xfrm_alloc_spi+0x570/0xf30
[  409.746129][T23533]  xfrm_alloc_spi+0x570/0xf30
[  409.747629][T23533]  ? xfrm_alloc_spi+0x2a0/0xf30
[  409.749147][T23533]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  409.750787][T23533]  ? xfrm_find_acq+0x87/0xa0
[  409.752302][T23533]  xfrm_alloc_userspi+0x70b/0xc90
[  409.753930][T23533]  ? apparmor_capable+0x137/0x1b0
[  409.755804][T23533]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  409.757733][T23533]  ? __nla_parse+0x40/0x60
[  409.759201][T23533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  409.760762][T23533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  409.762526][T23533]  ? __pfx___mutex_trylock_common+0x10/0x10
[  409.764465][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.766089][T23533]  ? trace_contention_end+0x39/0x120
[  409.767822][T23533]  ? __mutex_lock+0x335/0x1350
[  409.769398][T23533]  netlink_rcv_skb+0x208/0x470
[  409.770957][T23533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  409.772745][T23533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  409.774479][T23533]  ? lock_release+0x4b/0x3e0
[  409.776365][T23533]  ? netlink_deliver_tap+0x2e/0x1b0
[  409.778058][T23533]  xfrm_netlink_rcv+0x79/0x90
[  409.779626][T23533]  netlink_unicast+0x82f/0x9e0
[  409.781129][T23533]  ? __pfx_netlink_unicast+0x10/0x10
[  409.782834][T23533]  ? netlink_sendmsg+0x642/0xb30
[  409.784472][T23533]  ? skb_put+0x11b/0x210
[  409.785909][T23533]  netlink_sendmsg+0x805/0xb30
[  409.787452][T23533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.789138][T23533]  ? aa_sock_msg_perm+0xf1/0x1d0
[  409.790766][T23533]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  409.792574][T23533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.794314][T23533]  __sock_sendmsg+0x21c/0x270
[  409.796186][T23533]  ____sys_sendmsg+0x505/0x830
[  409.797882][T23533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.799626][T23533]  ? import_iovec+0x74/0xa0
[  409.801129][T23533]  ___sys_sendmsg+0x21f/0x2a0
[  409.802680][T23533]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.804429][T23533]  ? futex_wake+0x4b2/0x560
[  409.805947][T23533]  ? __fget_files+0x2a/0x420
[  409.807602][T23533]  ? __fget_files+0x3a0/0x420
[  409.809165][T23533]  __x64_sys_sendmsg+0x19b/0x260
[  409.810804][T23533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  409.812581][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.814174][T23533]  ? rcu_is_watching+0x15/0xb0
[  409.815747][T23533]  do_syscall_64+0xfa/0x3b0
[  409.817571][T23533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.819770][T23533]  ? __switch_to_asm+0x39/0x70
[  409.821815][T23533]  ? __switch_to_asm+0x33/0x70
[  409.823664][T23533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.825604][T23533] RIP: 0033:0x7fe80ab8eba9
[  409.827073][T23533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.833172][T23533] RSP: 002b:00007fe80ba22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.835820][T23533] RAX: ffffffffffffffda RBX: 00007fe80add6180 RCX: 00007fe80ab8eba9
[  409.838399][T23533] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 000000000000000b
[  409.841117][T23533] RBP: 00007fe80ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  409.843785][T23533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.846388][T23533] R13: 00007fe80add6218 R14: 00007fe80add6180 R15: 00007ffda8857758
[  409.848990][T23533]  </TASK>
[  409.850691][T23533] Kernel Offset: disabled
[  409.852102][T23533] Rebooting in 86400 seconds..

VM DIAGNOSIS:
kex_exchange_identification: Connection closed by remote host
Connection closed by 127.0.0.1 port 13530
failed to run ["ssh" "-p" "13530" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "root" "root@localhost" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255
kex_exchange_identification: Connection closed by remote host
Connection closed by 127.0.0.1 port 13530
