last executing test programs:

12m16.639475779s ago: executing program 2 (id=1246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x11000)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f49653c33f31e27e4afe9db1ca25c4f48779593728b46224d0fb46f215ba7153da91ff4b4b5f99c6bcdcc2e2ffc27ad1a86687b0a967a033c5f2d589145bc1d41952e2e6f43d0af7768f714e6ddbddcceaf3f5bd7066b903bd659ba802414ccca078b47decf575ce264f32b07a2c028c4cb37d1e22c2310d843f8a4c950bc910d2bb581b571fd216b802f4249bd083438788fcba4340ce9ec0e50122a02efa8982d34b1d6139596785c3eaa085cb6d81f7bc3ac62fbce404bca13803132898c264b9878a89b8f3c1c0896bff53d31f35b3a84e2fe670bf14b2cf7476a223b28804241c79053f59778b013e3f255d5f7f876b058b92502dae18d2de2b7a71acf2c78a31e114c3eafe527244fa31b2c3614f905f6aaf7250949bc2a9b5a744f30f2e3aa12f1417bb26dd3892cbf728f886c1c13cb2f471ebaf75fa1905cf086089b255421567d730e09b698996c51771e3a99068fd9c16f1f772f3e1f885f846db2829b39b8d2465703ea8db3fda4a01ae1e4a40eeedfa5b3312a4285b5f31ac198a5e3848d4d3db2cb6207e552f544dbfee360f735be849a812043343a834c04a6622ac806224f0ece7336a8c7bb9d6c15ca1d93b0d3d804922e35baad1ddf5b1773f9102c18c398f026865ee64ce85a70ee7c3514e5bd13e935956b76d9db1140e514e5cfe228023008ba9f8a6c7951a03b2001e2b16c5bac060eaf1d1b2b49ddd29a280dd3218c4a0456c3754f944d2d185f861786c29a89615f09d4d4aec0e3ce62bdf09cf121caa73c18d4e78762b2c154a007c0ea9df2223dc4b932a75d6e57910684cd6f7a94e4988d10a6854aced312bde517c8eee5f3e0a14675b08668a0d53982f7e953cf600b5ac2e4afcce547160dc4fff59466b75aae0fa4badec300d858c4e87c1181fd587182dca134470020ee1b08517a11f8ba982a0f1286702d11cf3b056dfc0278342a11f85f1ab3e5be02ce71b28ae4272db7ccdc886774a111fc620730bb68855a3c5d6d45a3274f45db3c4f299bdce8cb50afa3def586266f32a6120629941878df287e0e138acfb1b919dbcc1511811ae5a27a14117fd4ecf6147748e4b7ebb0160cd4f44bc4a17ffc24dc146d575e8488f5ffdbba99c5900722a7c2dea32021544706c70afa67b16024fc8d3d4dc2efa63a0f1008a5f388e4f3fd57624d05052f1a8e2aa0d41fb04a2b87a75008c1c64f352b76b1c271f2240924c7ae15094284bc72abc4806d978030a8013310f9fc65cf1215a1af8f5a074f40b16267f0e319219e2d27fbd6cc08a0e3a37370228db56209e43c5a9b21776b8f175a31aa9227eaa22d4d1f76bceb91aa25e52b4198bd8a9566119c4f1e76d414c9b67572da2a5c6df6694c18af00db08bb61e5aa0b0f2f772fdd480ad4d3297a01f4fde3ce1e45f37eddd8e61da5f02bad8749d84cb3627482b475b497b7db68ea9a894729e2a13fe72adc9c689cc9ed7bda13eda65d34ec300cbfbeb1ab15e7740594ddbc6bd4dd594ca915fba5ece0baab14388b972e221707ef0e4d80424dffbe4508627a13b460b043c5f46b965f5904685cb5224b45d708726e47bd1e4d14f2545f853c9fc979a3ca21f809aacbbf500f751316586b328f93e22b881c22c9cbda4c12d04d5775c763042f62c739dda385a5b49c4bc9fc9b7f8cdd50d50f5e375808b09e5be753b3106c59078e337dfc4d114bd89d9a2995edf5b03fe37bfdf445369c5ba139624c59b25de375caa92f6dcf21e9cf164cba69247174e9571a3c5f3e1c8decd0ac77dd69f8efdb7bf413edb87cf92d587aee0aeab659aa5d27af007e025eacc18e369a34b765298ef3cfc1b7fff5be29a75bcbed99cba4faa8e45f6d2903cb798f575b049aeefb3e8351ee5f2e6b0eb2d3e0721847a1b8f2094fc48d17b4163d35a1d7a1c8665c0e63103f5fee04f528c6df8530bb09e2de4411ef1973c2f63f909ca9f26b6b9a33bb6c50d9e77a3b7b8412695a281ab16daa627030c95a1d1f752cf744435084aa60178ecaf34cdf5e5f1abbece9235f1f9c2ba98ad5cf2b7669d0ba2fd709d87d6066f91e58e5cad29915240290632b56e293068f95084b495fa9038476e1e7e4ae0dee429c6b6db7db12dcb3baac23272d111f51e94287fc3d4791362d12578ccb8a5fedf37e96d00d0613ffe0647ff2d625bd7fdf679b5ba69a65c6d64703cf4253f0993b8cf412d32b85b8aa8c7af24469419be15b63b593f3747bee75d35f5b8e8f6a7c587bfa56d8622fd7c468fd328034bc7e735f8d90acc690be38cc657a53271040792898f2ab566f58a3ce47a9ec5769428f44dc52a27cedcd85f65eb857fe9676a7ae264c505b5a9e80530f384f4a0d45bc5895c72d28640015fa6b19bf9afcc8f87d3427653b44c5869d8368a520f0440601400fa3dfb0577f83b92304875ead2014027edc3e02edf657ed6fb5c67e5bf7af437563371c0c3b2feaa7f20819a6ed737dd8f28c2e0d9304b1b0895a0012e9c3e27f3e160c1682e600cbb2b7d4ee350b8398bdd46e860322b5c323930f8c4f66ea831d736c076f98fcef243709587c01c5f193901605b9c201c4888a8df4ddc6565f2ddee29c20562422b2396284b171af70fd18e5efd7cded9cbbcdabf86829287234415b1fb33f5d112039b1b5acccd97c9a967ce96895f4147bd2296eec3bb7cf8cdf0dd58232c2166aa3575f00b9ec381e9016b8717f9f4318c4279942203d7ea754f54899bfd66026af7879546f2c763a466f06b80804bbdd4cb1b0de35b2d6fe0603aa21950193a8050ef5392ec82094d39ab93a5dc7ca131efa21a460a59f27ceaa6e88291259c08eadf996723356dfbe6037bda8da4c1722d274c30de9aad036cf7f913d64c93e534d4df24722fc3a2aff2f76a2822c743c8ca419ab755452ecab775f80821cbd41ecf4562100ffa82003d032c57a8ff5b3cc11a4c5616ef51806f7ed9e710fb2cb26f96194a1683be1998fbf478336420322a50cadaff6013345f847649878fba8c12a8f39362e853421bf9ea61683cea0181851087274e2606dc4ed37d84705140db662ff0fe355458a995075762b580585b2c2b64cdfac997f8b8cd1db2dd2834180153d7715e1d72cbab197f25795e32decd8e1ffd83ccb04a7d31d8257e3ee8d2ad977285e2d6d5fa779693eedeb12479e3a15816a9d82a020af98161ec9a995a2cfcaacf5fa816d2bc1976261a3cdd46a522c3a607e44be753229c29ae714eacaf1f8344ee614fc551c15a60ae92e97544f3356c5dcea817eb32fc687b3d3e9adb81c29519255daa1ce4cf037e33c9ce4a39a976437c52d3e001d6c6c980f5aba85229e53fa23259afc9f4efa69b2dd10bc4413e07f48f71b76c01236ed17f157b190456ccb70ba481afd28bb0c0a34119179bd54a1f23b90589b953abad8f9951a16f90604f8662787effb61d19208eb7cb95e3cc138e1aaf074982864ba8a3723722649f8928856587a6d96fb7e7baaa93dafac573cf6e0fa0ea812904699dab8b25e996fb9b56c3dc732fd2a0d5c7a669046b53e3b43e2da3c7fa89142714857264e9ffbb33b129f4edc2fe2f143d7c20d49544af0ca06ea97f889101b4628d97ea275a6ee4a777d36e5a0e698c4c900a4cf3355eabf1eea1da94f0ff824d0821753eb9977a4bcdc7afad9a5aef48d0e5ebb51203dc362cbe1a5b1c690363357d6f0772297fcebe7da6a848f6a831ec86fcc6f8acaa2b7d860688c4db700d058df414e0a7e786dbdf8ec877279bb0b0326e4985976e719c99c19e5fdf9ff8a3291796675a5c26e56d22b8bee87ea9d5b7b85ee1f0bf053c5f8feae2cf88b6a7f1e229a1d5bc7a1f173aadb2c866097e5d369277c3d8acfbaf0f3693ebca90ae3e06c35e078fc9586109277b2a95eeae22b2640fadc7da2a4160e381237c3bf7975739bfac8d493575167d7ae17f534fea406fb397a3fc7e37b7caeb2237159153a232a2b77aa7b9ddcee8d6c3e081f09d857df40aa961d95008ec88e74c29e402803fca1b4923987290b956157965ee60481f16d39975455f398c3833b50c358ba54b6d38d6884f92e42497e9afa886091376fbbe10c2e14aa7451987a347517fdbdb2838620bfcc7f6a52bbe50b4f03aea41d398cfd2b9d8380a05a5c2774272d7877ee3318b665b9d3fc219adda225caf5b02ba2e4c28cc33fc39a494270bfface801244a5ecf213f268610a0848ae93fea1e214763e6204aa98f21ede11282b4034973686a4cce3acff7473cd3a84a1340e271c0954311c4a4c4fab3f7801db312b3960030591a078e0cb1a224079d8b135d4dc73c507f079cc92384f18a624eefe8dc1d197425111782d2dcd1b96c5e67a672257a48a45ee7fd30518c0d26772c698f517d4e5c7feb8d5ebee292e86dd4137e4976c7507d19dd8d39fee8434a47da4a84b37a331227bb4c71213d0a20f9fa69d94521cf1b75364c5c2d4070206dd5d06588a65f94a5bea5d433519e631139d43a40add76ce7a4ae0b58e66579a3e94dd49daa5975d264e4fea35d2e37e99b5b196e4980b6a9a8d57ce347916421847288dcc9df747ce2d1d670adf8c69584ab5fc7d4d5ba0401f61da6027efe109205b8234364e8b1d11ae29e2380dc399aa7f504f41e6c8a9f973fe00ccfd07a9b3e98a60275ca738d439489af487ca503629b4c9fd904ea5d85785a25e9b73ce909b7e6539b2cba653f2d034ec0f4b6a3b18918c8835ba5034d638b1fb03fac7f263b8deb51cbda12932f0faecf8a86ca31698bbebf40010f099ab679ea222d80a0c77eebdddde7fb5cd079e928a2fddf7e3702fb220e0d49f2620284ef4cd3b165119322e0b7f24926de4ccac5ee24788f424ed8af3c2d9cfadfc835d1de3d2c82f7d2c33e90b30d2e13e9b92e84808772c319ecd3e5be1619e1343f0279952261d368f12db54e93488e02ec6b185fdf95456a2761249e04962937f089c3feddf6a75c9fcb8ad5c252ab0de0fcc0d1b961e861fb8b7eee57938225110b085b2cdc336b60915e3ea44d61623cbc1ae334c97ac1623661f428116aa0894c207dd95db16a7dcf0f8b0b0e19f33355d3c56e307dae069e34abdc43203f85f2c43e3a1c1bd5e6f34352fc40210bc53301121e3fcb8e9fbff690c4d68abf2d61d23e1cda71b2a5c63d5cc2b13d924404fd7f6b57ed27fde37a971b804e6aec28088bd9fc97bb380c4980d026c41b7ed356e345e6ef6a3781d8a5229aa2db6341f257a3ca0c809b589ac97c4bdd62a0a3b5f1bb75f9bf3330587e30371cfc3d03765edb1c364d4cfefba10a874b2e4e6ffc640efbb6f5281c92eb9aef75ce831cd8fe30352dfbb9cc16e333e8d97ad6539b0dc318475523fcb33f83cdbb81735a90aa2f8dff82cb715de3d35646df5358e493a6363a7cec173af7142120b90390ddaf65bd9634a0d6b354d60e9218994fe1b5292925964037d3117118a41c72317665cb1653b102ff4005c6cee143c0623c6ee62f211fe4537de2ea2c203dcba5ad9c40b6e5cdf45a3383d4696039f79a06e590b827019baab09ad23b0b538bfb31e689233e30b32aaddfc638938d2bd0eebc4d5315503e83b15cde33a1e3dbae7fc6198164cabc035bfb4851aa41aafdc8cc991d55cb3feb5999c306f2574cd2c136a282f4e58d012853db00b0f624e00145dd122f217f4afc45937c89d00d8b33bdc92", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250200f08c7ba5166400000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x14)

12m16.583100791s ago: executing program 2 (id=1249):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) (async)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="8c"], 0x20)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

12m15.702470942s ago: executing program 2 (id=1265):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/194}, {&(0x7f00000009c0)=""/36}, {&(0x7f0000000a00)=""/26}, {&(0x7f0000000a80)=""/159}, {&(0x7f0000000b40)=""/113}], 0x0, 0x0, 0x22}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x10000075}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18)
write$cgroup_devices(r1, 0x0, 0x9) (async)
write$cgroup_devices(r1, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000fbc845a5eb000001000000004e00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000fbc845a5eb000001000000004e00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/229, 0xe5}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/120, 0xa9}, {&(0x7f0000000680)=""/141, 0x87}, {&(0x7f0000000380)=""/240, 0xf0}], 0x9}, 0x70003}, {{0x0, 0x0, 0x0}, 0xfefffffe}, {{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0xfb}], 0x4, 0x102, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
socket(0x15, 0x5, 0x0) (async)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c020000000000000502000905"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x8041)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000840)={<r7=>0x0, 0x10001}, &(0x7f0000000880)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000008c0)={r7, 0x9}, 0x8)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

12m14.882514331s ago: executing program 2 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048400)
ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x5, 0x9, 0x5, 0x2, [0x5, 0x8, 0xffffffffffffffff, 0x7, 0xff, 0x4]})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048400) (async)
ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x5, 0x9, 0x5, 0x2, [0x5, 0x8, 0xffffffffffffffff, 0x7, 0xff, 0x4]}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) (async)

12m14.82794995s ago: executing program 2 (id=1285):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x66}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x18, 0x2c, 0x1, 0x0, 0xfffffffc, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x24004889}, 0x0)
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000))

12m14.681028815s ago: executing program 2 (id=1288):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) (async)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x2}, 0xfd}, 0x18) (async)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050)

11m59.710005537s ago: executing program 32 (id=1288):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) (async)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x2}, 0xfd}, 0x18) (async)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050)

1.253731923s ago: executing program 3 (id=10518):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000301010100004000200000000000000000000000000000004ebe4eed6bb5de5b1224eb6539b1926ad327"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8880)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096040a000200aaaaaaaaaa0c000006000500"], 0x30}}, 0x48010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname(r4, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x1c, 0x0, 0x0, @binary="96"}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000480)=0x100, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

1.197776399s ago: executing program 3 (id=10519):
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad915d564c90c20037c09fc80000000000", 0x11)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000085cca239be92c32a8a2fba021bf0055e724f11944d4a9d08e90b9979278304a72b4c1a64d0b3adcfe1cd994d0dc5144cd65d318fed8dbbbe645484d404ab9630ec4702638aaedf9e3", @ANYRES16=r3, @ANYBLOB="0e6d0000000f0002006e657464657673696d30000008008a009005f56d57819bf0cd6d91f38be504d703607760f7f2e303de9bbbd5a0788a66546f2c9eb6123223f84da55e30b816e6169f797641b2ae13fe087c006e1fdbd59f39ffd56b1893b1dce78ce64ace9f07e7823c9540a58901ca6f25e108d197fbd9f05daf3117091b83c313ffbe1ace5b", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESOCT=r4, @ANYRES64=r0], 0x114}], 0x1, 0x0, 0x0, 0x4008801}, 0x2100000000000000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r7, &(0x7f0000002b00), 0x28, 0x102, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={<r12=>r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000240)={r12, 0x8, 0x1ff, 0x3, 0xfffe, 0x7fff, 0x7ffd, 0x80000001, {r11, @in6={{0xa, 0x4e23, 0x5, @local, 0x2}}, 0x6, 0x0, 0x6, 0x10000, 0x3}}, &(0x7f0000000100)=0xb0)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r8, 0x100, 0x50bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
socket$kcm(0x10, 0x2, 0x0)

1.193795357s ago: executing program 3 (id=10522):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f0000001340), 0x5a, 0x9200000000000000)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd38, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendto$inet(r0, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x11, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendto$llc(r6, &(0x7f00000002c0)="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", 0x1000, 0x4004800, &(0x7f00000012c0)={0x1a, 0x334, 0xc0, 0x1, 0x5, 0x4, @random="a5334319a650"}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24)

600.552737ms ago: executing program 0 (id=10533):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004a000200000008004b"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) (async)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 64)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (rerun: 32)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, 0x0, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}]}, 0x44}}, 0xc010) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r10, &(0x7f0000000680)={&(0x7f0000000080)={0x24, @short={0x2, 0xfffc, 0xaaa3}}, 0x14, &(0x7f00000001c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1001}, 0x800) (async)
sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@multicast1, 0x4e20, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x32}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x1000000004}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2c, 0x70bd2a, 0x70bd2d, 0x7f}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4075}, 0x4000) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r12=>0x0}) (async)
getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000340)={@remote, <r13=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newlinkprop={0x50, 0x6c, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, 0x40184, 0x2000}, [@IFLA_LINK={0x8, 0x5, r13}, @IFLA_EVENT={0x8, 0x2c, 0x7fffffff}, @IFLA_LINKMODE={0x5, 0x11, 0xcf}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800)

517.294371ms ago: executing program 0 (id=10535):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
connect$tipc(r4, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r3, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r10, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x20, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0x2}, {0xb}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0x21}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x0, 0x5d, 0x88}]}}]}, 0x3c}}, 0x884)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

515.667767ms ago: executing program 0 (id=10536):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="f3ff43000a0001000180c2000000000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20008054}, 0x4000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0e88a4f6384c22706fce972b8334e15e5dd3e58ad"], &(0x7f0000000380)='syzkaller\x00', 0x800006, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44851}, 0x0)

460.25663ms ago: executing program 1 (id=10538):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f0000000140)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xffff0001, @mcast1, 0x7c2db6d6}, 0x1c, &(0x7f0000000040)}], 0x1, 0x14)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50}], 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000080), 0x11)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
accept4$bt_l2cap(r5, 0x0, &(0x7f0000000000), 0x80000)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000001c0))
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

399.74748ms ago: executing program 1 (id=10539):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10)
getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x6, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040084)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
close(r6)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200400088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

397.230563ms ago: executing program 0 (id=10540):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000000c0)={0x8000000000000000, 0x5, 0x7f, 0x2, 0x3}) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x9, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', <r6=>0x0, 0x10, 0x40, 0x6, 0x10000, {{0xe, 0x4, 0x1, 0x3f, 0x38, 0x67, 0x0, 0x7f, 0x4, 0x0, @loopback, @broadcast, {[@generic={0x86, 0xf, "6c0345228b85dd8169da00b9b1"}, @generic={0x7, 0xb, "147f3093fdd807196d"}, @lsrr={0x83, 0x7, 0x8a, [@rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x20, 0x10, 0x8, 0x2, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @multicast2}}}})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', 0x0}) (async, rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002040)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

330.032835ms ago: executing program 1 (id=10541):
syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r2, 0x9, 0x400}, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24000084)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

270.427733ms ago: executing program 1 (id=10542):
socket(0xa, 0x3, 0x9)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100001a000100feffffff00010000fc020000000000000000000000000001fc0100000000000000000000000000014001071c4e2300052200001e660000001c8a2787445bcf9a376553726a66195e74dde1", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff000000000000000000000c000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088dfb8dce7df5307a5e0e4f378f78f00"/255], 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x844)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x66, 0xa01, 0x0, 0x0, {0x80}, [@typed={0x8, 0xc2, 0x0, 0x0, @u32=0x1}, @generic="055bc0133e"]}, 0x24}}, 0x0)

220.635463ms ago: executing program 3 (id=10543):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c)
close(0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendfile(r1, r0, 0x0, 0xf03a0005)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r3, 0x0, 0x2c, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0x28, @empty, 0xd}, 0x64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) (async)
close(0x4) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendfile(r1, r0, 0x0, 0xf03a0005) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendto$inet6(r3, 0x0, 0x2c, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0x28, @empty, 0xd}, 0x64) (async)

220.360651ms ago: executing program 1 (id=10544):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0xcaa1, 0x401, @mcast1, 0x40800d}, 0x1c) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000010c0)={r0, r0, 0xff1c, 0x1000, &(0x7f00000000c0)="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", 0x1, 0x0, 0x9, 0x2, 0x7ea4, 0x2, 0xfffffffe, 'syz1\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0)

158.008142ms ago: executing program 0 (id=10545):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0xfff1}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYBLOB="4400028040000100240001006d6f0000000000000000000000000000000000000000000500030005000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000ff0000000000000000fd33f8d2030000000000376ac6ba00"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r2}, 0x38)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x13c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10c, 0x2, [@TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="0298c54c5ccb"]}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0e7f3293a805036c6b", @TCF_META_TYPE_VAR="e7bd0832de", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0a1b54dc", @TCF_META_TYPE_VAR="08471c", @TCF_META_TYPE_VAR="5e24b54b9e5fa7", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="71590e5e1b2dfc", @TCF_META_TYPE_VAR="31918542c43fb1c8e5", @TCF_META_TYPE_VAR="192289", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8b", @TCF_META_TYPE_VAR="a0265b2bfc5f2c12fdc3"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc7d, 0x1e, 0x2}, {0xff, 0x9}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xba5d, 0x7, 0xfe01}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x9}, {0xffffffff, 0x0, 0x6, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xfff9}, {0x0, 0x2, 0x1, "c43d"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3000, 0x8, 0x9}, {0x2, 0x3, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x13c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a8020000180140003002a000200a80005000200000000007e8e"], 0x40}}, 0x0)
bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, r7, 0x1, 0x7, 0x2, 0x9, "0fcbba9b9d48d1c76076860d6ce5028a8aa64c4f0d81f035b729bfe84c53281d6bb8e190c758e4d4e49df48f22c6167f04871168780c2d7794a04d9e8029fc", 0x7}, 0x60)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30ffffffffffff08004500005400000000002f9078ac1e0001e00000010000866ac2c0f0788206068128e085cd134a318536459f4c07660000000000000000000000000000000000000000000080f6d65e2d6015a6749554c6253275f5673806202926b4b87239ce04c2ee969e67820d04ea3cc2a35ebf5ed3e1ea2739c9c545840641843524420c0295d417cf27dd4f22525299596756f824"], 0x66)

155.021442ms ago: executing program 3 (id=10546):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r5)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x9, 0xe, 0x4, {0x1, 0x1, 0x8, 0x1, 0x200, 0x6}, {0x1, 0x2, 0xb5, 0x0, 0x9, 0xe}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x8, 0x1ff, 0x7b7e, 0xc0, 0xa, 0x401, 0x4, 0x6, 0x0, 0xd3d, 0x6, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea7, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x0, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x4, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x47, 0x85ff, 0x4, 0x0, 0x964d, 0x5f, 0x5, 0x1, 0x8d5f, 0x4, 0x80b, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x80, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xed, 0x401, 0x80000000, 0x80000005, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0xc6cd, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x9, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x6, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x49a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x2cf2, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x7ba, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x17fff, 0x0, 0x3, 0x5, 0x5, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0x9, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0xb, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0xff, 0x1, 0xe, 0x9, 0x1, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x2, 0x7, 0x6, 0x80000, 0x9, 0x0, 0x0, 0x7f, 0x9, 0x80000000, 0x0, 0x5ae, 0x3, 0x2, 0xf1, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x3, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0xfffffffd, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x2, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x1, 0x82, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x7, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0x5, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0x0, 0x5, 0x7, 0x4, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0xde, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x9, 0x1ff, 0x1, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x5, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xb1, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x1, 0x0, 0x8000b, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d9, 0x101, 0x8db, 0x8, 0x5, 0x6, 0x8, 0x7, 0x0, 0x57, 0x8, 0xb, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x6, 0x401, 0x0, 0xfae, 0x4, 0x7, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0xff, 0x6cb7db37, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r14, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)

154.495907ms ago: executing program 1 (id=10547):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x338)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000fedbdf25020202000900030073797a3000000000090001007379"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6})
r8 = socket(0xa, 0x1, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r10, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)

555.946µs ago: executing program 0 (id=10548):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x3, 0x42, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc004)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
close(0x3)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r11}, 0x8)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a98c3, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)=0x801)

0s ago: executing program 3 (id=10549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffe94, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x48}}, 0x4)

kernel console output (not intermixed with test programs):

63590][ T5206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8532'.
[  753.770148][ T5201] syzkaller0: mtu less than device minimum
[  753.904447][ T5223] lo speed is unknown, defaulting to 1000
[  754.245597][ T5250] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  754.763541][ T5253] team_slave_1: left promiscuous mode
[  754.838887][ T5253] team0 (unregistering): Port device team_slave_1 removed
[  754.842027][T13248] smbdirect: ib_dev[syz2] removed
[  754.846415][ T5253] team0 (unregistering): Port device bridge59 removed
[  755.035384][ T5265] veth1: Caught tx_queue_len zero misconfig
[  755.400575][ T5302] xt_hashlimit: size too large, truncated to 1048576
[  755.521846][ T5312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  755.529835][ T5312] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20002
[  755.813108][ T5324] veth1_to_bond: entered allmulticast mode
[  755.828563][ T5323] veth1_to_bond: left allmulticast mode
[  755.877512][ T5333] netlink: 'syz.0.8567': attribute type 1 has an invalid length.
[  755.948918][ T5333] 8021q: adding VLAN 0 to HW filter on device bond97
[  756.046437][ T5348] "syz.0.8571" (5348) uses obsolete ecb(arc4) skcipher
[  756.315510][ T5382] "syz.1.8578" (5382) uses obsolete ecb(arc4) skcipher
[  756.535550][ T5391] netlink: 'syz.1.8581': attribute type 1 has an invalid length.
[  756.545031][ T5394] netlink: 'syz.1.8581': attribute type 10 has an invalid length.
[  756.599731][ T5405] tipc: Failed to remove unknown binding: 66,1,1/291561156:1751685100/1751685102
[  756.631370][ T5408] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  756.646373][ T5410] openvswitch: netlink: Key type 29 is not supported
[  756.674223][ T5403] netlink: 'syz.1.8584': attribute type 1 has an invalid length.
[  756.941590][ T5428] lo speed is unknown, defaulting to 1000
[  756.984239][ T5428] bond66: entered promiscuous mode
[  756.986187][ T5428] 8021q: adding VLAN 0 to HW filter on device bond66
[  757.114497][ T5434] netlink: 'syz.3.8594': attribute type 1 has an invalid length.
[  757.169540][ T5434] 8021q: adding VLAN 0 to HW filter on device bond67
[  757.654846][ T5449] "syz.0.8597" (5449) uses obsolete ecb(arc4) skcipher
[  757.697156][ T5451] netlink: 'syz.0.8598': attribute type 1 has an invalid length.
[  757.723775][ T5451] bond98: entered promiscuous mode
[  757.726006][ T5451] 8021q: adding VLAN 0 to HW filter on device bond98
[  757.735641][ T5451] bond98: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  757.739829][ T5451] bond98: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  757.743172][ T5451] bond98: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  758.037993][ T5460] block nbd4: server does not support multiple connections per device.
[  758.040871][ T5460] block nbd4: shutting down sockets
[  758.110226][ T5463] "syz.0.8603" (5463) uses obsolete ecb(arc4) skcipher
[  758.149263][ T5468] "syz.3.8605" (5468) uses obsolete ecb(arc4) skcipher
[  758.187082][ T5473] "syz.3.8607" (5473) uses obsolete ecb(arc4) skcipher
[  758.221305][ T5470] __nla_validate_parse: 29 callbacks suppressed
[  758.221315][ T5470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8606'.
[  758.518956][ T5493] "syz.3.8613" (5493) uses obsolete ecb(arc4) skcipher
[  758.556086][ T5498] sctp: [Deprecated]: syz.3.8614 (pid 5498) Use of int in max_burst socket option deprecated.
[  758.556086][ T5498] Use struct sctp_assoc_value instead
[  758.586576][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8616'.
[  758.651089][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8616'.
[  758.733600][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8618'.
[  758.948964][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8621'.
[  758.952721][ T5529] netlink: 'syz.3.8621': attribute type 7 has an invalid length.
[  758.955873][ T5529] netlink: 'syz.3.8621': attribute type 8 has an invalid length.
[  758.960489][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8621'.
[  759.319433][ T5556] netlink: 'syz.3.8626': attribute type 32 has an invalid length.
[  759.544230][ T5574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8630'.
[  759.626313][ T5568] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  759.653031][ T5584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8631'.
[  759.820010][ T5605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8635'.
[  759.897631][ T5615] "syz.1.8637" (5615) uses obsolete ecb(arc4) skcipher
[  760.623089][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8639'.
[  760.829172][ T5699] netlink: 'syz.3.8640': attribute type 2 has an invalid length.
[  760.839050][ T5700] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  762.893908][ T5615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  763.002098][ T5714] "syz.0.8646" (5714) uses obsolete ecb(arc4) skcipher
[  763.052353][ T5717] netlink: 'syz.3.8649': attribute type 1 has an invalid length.
[  763.056716][ T5717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.170993][ T5733] "syz.0.8652" (5733) uses obsolete ecb(arc4) skcipher
[  763.216665][ T5735] netlink: 'syz.3.8654': attribute type 1 has an invalid length.
[  763.248801][ T5739] __nla_validate_parse: 16 callbacks suppressed
[  763.248811][ T5739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8655'.
[  763.253605][ T5739] netlink: 47 bytes leftover after parsing attributes in process `syz.0.8655'.
[  763.256487][ T5739] netlink: 'syz.0.8655': attribute type 6 has an invalid length.
[  763.260636][ T5739] netlink: 'syz.0.8655': attribute type 6 has an invalid length.
[  763.302123][ T5744] netlink: 'syz.3.8656': attribute type 1 has an invalid length.
[  763.307152][ T5744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8656'.
[  763.315330][   T13] tipc: Subscription rejected, illegal request
[  763.315817][ T5744] tipc: Resetting bearer <eth:xfrm0>
[  763.405986][ T5751] "syz.0.8659" (5751) uses obsolete ecb(arc4) skcipher
[  763.440796][ T5751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  763.445561][ T5751] openvswitch: netlink: Missing key (keys=40, expected=80)
[  763.547622][ T5757] netlink: 'syz.3.8662': attribute type 1 has an invalid length.
[  763.575217][ T5757] 8021q: adding VLAN 0 to HW filter on device bond68
[  763.582384][ T5757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8662'.
[  763.599434][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv2
[  763.610421][ T5757] bond68: (slave batadv2): making interface the new active one
[  763.620179][ T5757] bond68: (slave batadv2): Enslaving as an active interface with an up link
[  763.626004][ T5759] tipc: Resetting bearer <eth:syzkaller0>
[  763.657164][ T5757] bond68 (unregistering): (slave batadv2): Releasing active interface
[  763.664819][ T5757] bond68 (unregistering): Released all slaves
[  763.724276][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[  763.778897][ T5767] veth1_macvtap: left promiscuous mode
[  763.782141][ T5767] veth0_macvtap: left promiscuous mode
[  763.785424][ T5767] veth0_macvtap: entered promiscuous mode
[  763.788594][ T5767] veth1_macvtap: entered promiscuous mode
[  763.798417][ T5767] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  763.855256][ T5684] syz0: Port: 1 Link ACTIVE
[  763.863205][ T5766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8664'.
[  763.886148][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8666'.
[  763.916129][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8667'.
[  763.944563][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8668'.
[  763.945087][ T5778] bond94: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  763.986163][ T5778] bond94 (unregistering): Released all slaves
[  764.052505][ T5789] "syz.0.8670" (5789) uses obsolete ecb(arc4) skcipher
[  764.066001][ T5790] syzkaller1: entered promiscuous mode
[  764.070009][ T5790] syzkaller1: entered allmulticast mode
[  764.140565][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8671'.
[  764.167309][ T5794] bond100: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  764.173201][ T5794] bond100 (unregistering): Released all slaves
[  764.279219][ T5800] validate_nla: 1 callbacks suppressed
[  764.279231][ T5800] netlink: 'syz.3.8674': attribute type 1 has an invalid length.
[  764.295252][ T5800] 8021q: adding VLAN 0 to HW filter on device bond68
[  764.345676][ T5806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8675'.
[  764.393641][ T5809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  764.449773][ T5807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.499271][ T5815] vti1: entered promiscuous mode
[  764.501015][ T5815] vti1: entered allmulticast mode
[  764.598918][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  764.601376][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  764.603641][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  764.605846][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  764.608024][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  764.610207][ T5824] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  765.016225][ T5830] bond69: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  765.022293][ T5830] bond69 (unregistering): Released all slaves
[  765.521716][ T5861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  765.525429][ T5861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  766.277280][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  766.323182][ T5875] netlink: 'syz.0.8692': attribute type 1 has an invalid length.
[  766.560486][ T5896] netlink: 'syz.0.8697': attribute type 1 has an invalid length.
[  766.563652][ T5896] netlink: 'syz.0.8697': attribute type 1 has an invalid length.
[  767.188055][ T5926] netlink: 'syz.1.8705': attribute type 7 has an invalid length.
[  767.191287][ T5926] netlink: 'syz.1.8705': attribute type 8 has an invalid length.
[  767.440211][ T5934] netlink: 'syz.3.8708': attribute type 16 has an invalid length.
[  767.465900][ T5936] "syz.3.8709" (5936) uses obsolete ecb(arc4) skcipher
[  767.522473][ T5938] "syz.3.8710" (5938) uses obsolete ecb(arc4) skcipher
[  767.563993][ T5940] "syz.3.8711" (5940) uses obsolete ecb(arc4) skcipher
[  767.760283][ T5961] "syz.0.8716" (5961) uses obsolete ecb(arc4) skcipher
[  767.913324][ T5976] bond55: left allmulticast mode
[  768.013513][ T5982] --map-set only usable from mangle table
[  768.052514][ T5982] netlink: 'syz.3.8721': attribute type 1 has an invalid length.
[  768.112200][ T5991] netlink: 'syz.3.8723': attribute type 4 has an invalid length.
[  768.146767][ T5993] "syz.3.8724" (5993) uses obsolete ecb(arc4) skcipher
[  768.250411][ T5999] netlink: 'syz.3.8727': attribute type 14 has an invalid length.
[  768.547489][ T6031] "syz.3.8735" (6031) uses obsolete ecb(arc4) skcipher
[  768.678890][ T6039] __nla_validate_parse: 23 callbacks suppressed
[  768.678900][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8738'.
[  768.684124][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8738'.
[  768.825383][ T6047] syzkaller1: entered promiscuous mode
[  768.827235][ T6047] syzkaller1: entered allmulticast mode
[  768.836343][ T6050] "syz.3.8743" (6050) uses obsolete ecb(arc4) skcipher
[  768.840506][ T6047] tipc: Resetting bearer <eth:syzkaller0>
[  768.852002][ T6047] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  768.854496][ T6047] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  768.875577][ T6052] "syz.3.8744" (6052) uses obsolete ecb(arc4) skcipher
[  768.898512][ T6047] bond95: left promiscuous mode
[  768.900395][ T6047] vlan11: left allmulticast mode
[  768.902275][ T6047] bond96: left allmulticast mode
[  768.904638][ T6047] bond98: left promiscuous mode
[  768.907595][ T6047] syzkaller1: left promiscuous mode
[  768.910372][ T6047] syzkaller1: left allmulticast mode
[  768.914050][ T6048] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  769.102820][ T6068] "syz.0.8749" (6068) uses obsolete ecb(arc4) skcipher
[  769.172185][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8752'.
[  769.233551][ T6085] "syz.1.8754" (6085) uses obsolete ecb(arc4) skcipher
[  769.250954][ T6087] bond61: (slave lo): Releasing backup interface
[  769.261244][ T6087] bond61: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  769.271335][ T6087] team0: Port device bond48 removed
[  769.275154][ T6087] bond51: (slave bridge27): Releasing backup interface
[  769.277337][ T6087] bridge27: left promiscuous mode
[  769.279351][ T6087] bridge27: left allmulticast mode
[  769.283011][ T6087] bond60: (slave veth35): Releasing active interface
[  769.285655][ T6087] bond60: (slave veth35): the permanent HWaddr of slave - ee:32:b6:17:48:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  769.294297][ T6087] batadv0: entered promiscuous mode
[  769.298487][ T6087] bond60: (slave batadv0): Releasing active interface
[  769.301688][ T6087] batadv0: left promiscuous mode
[  769.312513][ T6087] bond63: (slave bridge35): Releasing backup interface
[  769.323305][ T6087] bond65: (slave bridge36): Releasing backup interface
[  769.359815][ T6094] team0: Mode changed to "activebackup"
[  769.476748][ T6096] tipc: Resetting bearer <eth:xfrm0>
[  769.554738][   T24] syz0: Port: 1 Link DOWN
[  769.581985][ T6101] bond100: entered promiscuous mode
[  769.583788][ T6101] bond100: entered allmulticast mode
[  769.585735][ T6101] 8021q: adding VLAN 0 to HW filter on device bond100
[  769.597361][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8760'.
[  769.601165][ T6109] validate_nla: 1 callbacks suppressed
[  769.601173][ T6109] netlink: 'syz.3.8760': attribute type 20 has an invalid length.
[  769.605833][ T6109] netlink: 'syz.3.8760': attribute type 21 has an invalid length.
[  769.645264][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8761'.
[  769.651308][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8761'.
[  769.661521][ T6117] netlink: 'syz.3.8761': attribute type 1 has an invalid length.
[  769.717160][ T6121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8761'.
[  770.787003][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  770.842994][ T6132] mac80211_hwsim hwsim20 wlan0: left promiscuous mode
[  770.847048][ T6132] mac80211_hwsim hwsim20 wlan0: left allmulticast mode
[  770.849748][ T6132] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  770.852277][ T6132] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  770.866623][ T6132] macvlan12: left promiscuous mode
[  770.874189][ T6132] macvlan12: left allmulticast mode
[  770.887347][ T5724] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  770.892601][ T5724] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  770.896714][ T5724] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  770.901417][ T5724] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.426278][ T6103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  772.521703][ T6171] net_ratelimit: 3324 callbacks suppressed
[  772.521715][ T6171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.529464][ T6172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.548344][ T6168] bridge0: entered allmulticast mode
[  772.654422][ T6183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8765'.
[  772.790387][ T6187] openvswitch: netlink: Actions may not be safe on all matching packets
[  772.990525][ T6209] "syz.1.8778" (6209) uses obsolete ecb(arc4) skcipher
[  773.054779][ T6219] netlink: 'syz.1.8781': attribute type 1 has an invalid length.
[  773.058460][ T6219] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8781'.
[  773.114629][ T6223] lo speed is unknown, defaulting to 1000
[  773.364228][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8787'.
[  773.431754][ T6247] netlink: 'syz.3.8789': attribute type 1 has an invalid length.
[  773.434209][ T6247] netlink: 'syz.3.8789': attribute type 1 has an invalid length.
[  773.436704][ T6247] netlink: 'syz.3.8789': attribute type 1 has an invalid length.
[  773.439466][ T6247] netlink: 'syz.3.8789': attribute type 1 has an invalid length.
[  773.497686][ T6253] syzkaller1: entered promiscuous mode
[  773.500680][ T6253] syzkaller1: entered allmulticast mode
[  773.529948][ T6255] netlink: 'syz.0.8793': attribute type 1 has an invalid length.
[  773.549903][ T6255] 8021q: adding VLAN 0 to HW filter on device bond101
[  773.565434][ T6256] vlan12: entered allmulticast mode
[  773.567359][ T6256] bond101: entered allmulticast mode
[  773.665540][ T6275] "syz.1.8797" (6275) uses obsolete ecb(arc4) skcipher
[  773.686373][ T6276] syzkaller0: entered promiscuous mode
[  773.688414][ T6276] syzkaller0: entered allmulticast mode
[  773.693605][ T6276] __nla_validate_parse: 7 callbacks suppressed
[  773.693614][ T6276] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8798'.
[  773.902975][ T6299] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8804'.
[  773.959524][ T6305] "syz.1.8806" (6305) uses obsolete ecb(arc4) skcipher
[  774.005643][ T6312] "syz.1.8808" (6312) uses obsolete ecb(arc4) skcipher
[  774.049453][ T6322] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  774.049775][ T6323] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  774.200375][ T6337] "syz.1.8815" (6337) uses obsolete ecb(arc4) skcipher
[  774.311787][ T6343] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8818'.
[  774.500054][ T6360] "syz.3.8823" (6360) uses obsolete ecb(arc4) skcipher
[  774.569204][ T6372] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8826'.
[  774.714184][ T6387] bond102: entered promiscuous mode
[  774.716418][ T6387] bond102: entered allmulticast mode
[  774.720344][ T6387] 8021q: adding VLAN 0 to HW filter on device bond102
[  774.751225][ T6390] syzkaller1: entered promiscuous mode
[  774.753060][ T6390] syzkaller1: entered allmulticast mode
[  774.792351][ T6387] nbd4: detected capacity change from 0 to 127
[  774.798683][   T55] block nbd4: Receive control failed (result -104)
[  774.821535][ T6384] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  774.843897][ T6399] "syz.0.8832" (6399) uses obsolete ecb(arc4) skcipher
[  774.857188][ T6400] netlink: 'syz.3.8833': attribute type 1 has an invalid length.
[  774.912070][ T6402] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  774.923648][ T6402] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  774.931963][ T6402] tipc: Resetting bearer <eth:syzkaller0>
[  775.023526][ T6425] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  775.077559][ T6439] "syz.3.8840" (6439) uses obsolete ecb(arc4) skcipher
[  775.079529][ T6437] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8839'.
[  775.104808][ T6437] syzkaller1: entered promiscuous mode
[  775.114022][ T6437] syzkaller1: entered allmulticast mode
[  775.123060][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8839'.
[  775.136935][ T6444] atomic_op ffff888197393998 conn xmit_atomic 0000000000000000
[  775.175463][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8842'.
[  775.203628][ T6443] netlink: 'syz.3.8841': attribute type 2 has an invalid length.
[  775.207032][ T6443] netlink: 'syz.3.8841': attribute type 2 has an invalid length.
[  775.251924][ T6457] netlink: 'syz.0.8844': attribute type 1 has an invalid length.
[  775.256343][ T6457] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8844'.
[  775.274989][ T6459] syzkaller1: entered promiscuous mode
[  775.276863][ T6459] syzkaller1: entered allmulticast mode
[  775.463015][ T6470] netlink: 'syz.0.8849': attribute type 1 has an invalid length.
[  775.503583][ T6470] 8021q: adding VLAN 0 to HW filter on device bond103
[  775.626604][ T6492] netlink: 'syz.0.8854': attribute type 4 has an invalid length.
[  775.646574][ T6492] netlink: 'syz.0.8854': attribute type 4 has an invalid length.
[  775.669588][ T6426] lo speed is unknown, defaulting to 1000
[  775.672039][ T6426] sy2: Port: 1 Link ACTIVE
[  775.706932][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8851'.
[  775.757799][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8855'.
[  775.770954][ T6502] 8021q: adding VLAN 0 to HW filter on device bond104
[  778.112277][  T134] block nbd4: Connection timed out, retrying (0/1 alive)
[  778.115064][  T134] block nbd4: Connection timed out, retrying (0/1 alive)
[  778.117238][  T134] block nbd4: Connection timed out, retrying (0/1 alive)
[  778.119644][  T134] block nbd4: Connection timed out, retrying (0/1 alive)
[  778.122184][  T134] block nbd4: Dead connection, failed to find a fallback
[  778.124657][  T134] block nbd4: shutting down sockets
[  778.126624][  T134] blk_print_req_error: 54 callbacks suppressed
[  778.126633][  T134] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.132000][  T134] buffer_io_error: 54 callbacks suppressed
[  778.132008][  T134] Buffer I/O error on dev nbd4, logical block 3, async page read
[  778.137334][  T134] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.141455][  T134] Buffer I/O error on dev nbd4, logical block 2, async page read
[  778.146363][  T134] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.150004][  T134] Buffer I/O error on dev nbd4, logical block 1, async page read
[  778.153041][  T134] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.156303][  T134] Buffer I/O error on dev nbd4, logical block 0, async page read
[  778.162866][ T4739] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.166376][ T4739] Buffer I/O error on dev nbd4, logical block 0, async page read
[  778.170406][ T4739] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.174212][ T4739] Buffer I/O error on dev nbd4, logical block 1, async page read
[  778.177551][ T4739] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.182040][ T4739] Buffer I/O error on dev nbd4, logical block 2, async page read
[  778.185360][ T4739] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.191400][ T4739] Buffer I/O error on dev nbd4, logical block 3, async page read
[  778.198847][ T4739] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.202601][ T4739] Buffer I/O error on dev nbd4, logical block 0, async page read
[  778.205899][ T4739] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  778.210032][ T4739] Buffer I/O error on dev nbd4, logical block 1, async page read
[  778.213762][ T4739] ldm_validate_partition_table(): Disk read failed.
[  778.216698][ T4739] Dev nbd4: unable to read RDB block 0
[  778.219753][ T4739]  nbd4: unable to read partition table
[  778.225560][ T4739] ldm_validate_partition_table(): Disk read failed.
[  778.229791][ T4739] Dev nbd4: unable to read RDB block 0
[  778.232590][ T4739]  nbd4: unable to read partition table
[  778.484756][ T6479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  778.605862][ T6510] x_tables: ip_tables: osf match: only valid for protocol 6
[  778.658443][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[  778.676233][ T6514] openvswitch: : Dropping previously announced user features
[  778.700005][ T6514] __nla_validate_parse: 396 callbacks suppressed
[  778.700015][ T6514] netlink: 840 bytes leftover after parsing attributes in process `syz.3.8859'.
[  778.707168][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8860'.
[  778.774719][ T6522] veth0_macvtap: entered allmulticast mode
[  778.777115][ T6522] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  778.843677][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8860'.
[  778.896080][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8863'.
[  778.914412][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  778.924344][ T6531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  778.973457][ T6535] netlink: 'syz.0.8864': attribute type 1 has an invalid length.
[  778.997381][ T6538] bond0: (slave veth1_to_bond): Device is not bonding slave
[  779.003385][ T6538] bond0: option active_slave: invalid value (veth1_to_bond)
[  779.017127][ T6538] syzkaller1: entered promiscuous mode
[  779.022322][ T6538] syzkaller1: entered allmulticast mode
[  779.030904][ T6540] syzkaller1: entered promiscuous mode
[  779.032728][ T6540] syzkaller1: entered allmulticast mode
[  779.170731][ T6543] bond105: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  779.174674][ T6543] bond105 (unregistering): Released all slaves
[  779.266952][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8867'.
[  779.333233][ T6549] netlink: 820 bytes leftover after parsing attributes in process `syz.0.8868'.
[  779.337052][ T6549] netlink: 820 bytes leftover after parsing attributes in process `syz.0.8868'.
[  779.461434][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8870'.
[  779.486292][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8870'.
[  779.486316][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8870'.
[  779.577174][ T6564] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  779.584113][ T6564] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  779.593356][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[  779.599317][ T6566] "syz.3.8873" (6566) uses obsolete ecb(arc4) skcipher
[  779.745567][ T6578] syzkaller1: entered promiscuous mode
[  779.748142][ T6578] syzkaller1: entered allmulticast mode
[  779.885466][ T6584] "syz.3.8879" (6584) uses obsolete ecb(arc4) skcipher
[  780.507069][ T6570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  780.596438][ T6601] syzkaller1: entered promiscuous mode
[  780.598337][ T6601] syzkaller1: entered allmulticast mode
[  780.772720][ T6611] netlink: 'syz.0.8888': attribute type 13 has an invalid length.
[  780.779469][ T6611] tipc: Resetting bearer <eth:syzkaller0>
[  780.894766][   T24] lo speed is unknown, defaulting to 1000
[  780.899631][   T24] sy2: Port: 1 Link DOWN
[  780.927851][ T6628] netlink: 'syz.0.8891': attribute type 1 has an invalid length.
[  780.940406][ T6628] bond105: entered promiscuous mode
[  780.942339][ T6628] 8021q: adding VLAN 0 to HW filter on device bond105
[  780.953127][ T6628] ipvlan4: entered allmulticast mode
[  780.954785][ T6628] bond105: entered allmulticast mode
[  780.979881][ T6631] bond105: (slave bridge53): making interface the new active one
[  780.982417][ T6631] bridge53: entered promiscuous mode
[  780.984227][ T6631] bridge53: entered allmulticast mode
[  780.986966][ T6631] bond105: (slave bridge53): Enslaving as an active interface with an up link
[  781.004477][ T6630] ipvlan5: entered allmulticast mode
[  781.098870][ T6639] netlink: 'syz.0.8893': attribute type 1 has an invalid length.
[  781.476878][ T6648] netlink: 'syz.3.8895': attribute type 3 has an invalid length.
[  781.481108][ T6648] netlink: 'syz.3.8895': attribute type 3 has an invalid length.
[  781.572372][ T6650] bond70 (unregistering): Released all slaves
[  781.677459][ T6623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  781.754769][ T6659] "syz.1.8900" (6659) uses obsolete ecb(arc4) skcipher
[  781.822625][ T6661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  781.856408][ T6669] netlink: 'syz.3.8903': attribute type 10 has an invalid length.
[  782.397012][ T6695] netlink: 'syz.1.8909': attribute type 5 has an invalid length.
[  784.919826][ T6674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  785.021476][ T6702] netlink: 'syz.3.8911': attribute type 1 has an invalid length.
[  785.028610][ T6704] __nla_validate_parse: 13 callbacks suppressed
[  785.028621][ T6704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8912'.
[  785.032112][ T6702] workqueue: Failed to create a rescuer kthread for wq "bond70": -EINTR
[  785.038008][ T6704] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8912'.
[  785.054306][ T6704] netlink: 'syz.1.8912': attribute type 5 has an invalid length.
[  785.062295][ T6704] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8912'.
[  785.149195][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8915'.
[  785.152077][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8915'.
[  785.154924][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8915'.
[  785.158869][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8915'.
[  785.220995][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'.
[  785.244845][ T6726] "syz.1.8918" (6726) uses obsolete ecb(arc4) skcipher
[  785.289354][ T6735] netlink: 'syz.1.8920': attribute type 16 has an invalid length.
[  785.326584][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8922'.
[  785.419522][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8923'.
[  785.429163][ T6742] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  785.938553][ T6759] lo speed is unknown, defaulting to 1000
[  786.210075][ T6769] "syz.3.8928" (6769) uses obsolete ecb(arc4) skcipher
[  786.416814][ T6787] "syz.1.8935" (6787) uses obsolete ecb(arc4) skcipher
[  786.499379][ T6795] netlink: 'syz.3.8937': attribute type 1 has an invalid length.
[  786.522775][ T6795] 8021q: adding VLAN 0 to HW filter on device bond70
[  786.539417][ T6795] macvlan14: entered promiscuous mode
[  786.541749][ T6795] macvlan14: entered allmulticast mode
[  786.633510][ T6799] 8021q: adding VLAN 0 to HW filter on device macvlan14
[  786.645940][ T6799] netlink: 'syz.3.8938': attribute type 1 has an invalid length.
[  786.661076][ T6799] netlink: 'syz.3.8938': attribute type 10 has an invalid length.
[  786.664871][ T6799] netlink: 'syz.3.8938': attribute type 10 has an invalid length.
[  786.873768][ T6805] netlink: 'syz.3.8941': attribute type 1 has an invalid length.
[  786.876451][ T6805] netlink: 'syz.3.8941': attribute type 1 has an invalid length.
[  787.036424][ T6815] xt_hashlimit: invalid rate
[  787.086852][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.259833][ T6868] netlink: 'syz.3.8958': attribute type 1 has an invalid length.
[  788.283883][ T6868] 8021q: adding VLAN 0 to HW filter on device bond71
[  788.307697][ T6868] bond71: (slave veth37): Enslaving as an active interface with a down link
[  788.391288][ T6873] netlink: 'syz.1.8960': attribute type 39 has an invalid length.
[  788.523135][ T6890] netlink: 'syz.3.8967': attribute type 4 has an invalid length.
[  788.717316][ T6904] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  788.725959][ T6900] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  788.732626][ T6900] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  788.984769][ T6923] lo speed is unknown, defaulting to 1000
[  789.039600][ T6925] bond72: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  789.043947][ T6925] bond72 (unregistering): Released all slaves
[  789.525445][ T6943] lo speed is unknown, defaulting to 1000
[  789.560378][ T6944] batadv0: entered promiscuous mode
[  790.857021][ T6964] gretap0: left promiscuous mode
[  790.859502][ T6967] __nla_validate_parse: 24 callbacks suppressed
[  790.859515][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8989'.
[  790.876962][ T6964] 8021q: adding VLAN 0 to HW filter on device team0
[  790.902191][ T6964] veth1_macvtap: left promiscuous mode
[  790.904515][ T6964] veth0_macvtap: left promiscuous mode
[  790.906845][ T6964] veth0_macvtap: entered promiscuous mode
[  790.919343][ T6964] veth1_macvtap: entered promiscuous mode
[  790.933603][ T6964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  790.941753][ T6970] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8989'.
[  790.964756][ T6972] "syz.1.8990" (6972) uses obsolete ecb(arc4) skcipher
[  790.972833][ T6412] syz0: Port: 1 Link ACTIVE
[  791.234026][ T6992] netlink: 'syz.0.8995': attribute type 1 has an invalid length.
[  791.315240][ T6995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  791.323447][ T6995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  791.510978][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9000'.
[  791.515066][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9000'.
[  791.641751][ T7012] "syz.0.9001" (7012) uses obsolete ecb(arc4) skcipher
[  791.699926][ T7019] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9003'.
[  791.703331][ T7021] netlink: 'syz.0.9004': attribute type 19 has an invalid length.
[  791.704621][ T7019] netlink: 'syz.3.9003': attribute type 1 has an invalid length.
[  791.706143][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9004'.
[  791.706234][ T7021] netlink: 'syz.0.9004': attribute type 19 has an invalid length.
[  791.706241][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9004'.
[  791.772553][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9006'.
[  791.779436][ T7031] netlink: 'syz.3.9006': attribute type 1 has an invalid length.
[  791.809976][ T7031] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9006'.
[  791.884316][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9010'.
[  791.896579][ T7046] netlink: 'syz.0.9010': attribute type 5 has an invalid length.
[  791.910467][ T7046] geneve9: entered promiscuous mode
[  791.912735][ T7046] geneve9: entered allmulticast mode
[  791.916255][T12313] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  791.923984][T12313] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  791.932406][T12313] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  791.938355][T12313] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  791.968248][ T7042] lo speed is unknown, defaulting to 1000
[  792.460575][ T7066] netlink: 'syz.3.9015': attribute type 1 has an invalid length.
[  792.461903][ T7071] lo speed is unknown, defaulting to 1000
[  792.498153][ T7066] gretap5: entered allmulticast mode
[  792.504499][ T7066] bond73: (slave gretap5): making interface the new active one
[  792.522428][ T7066] bond73: (slave gretap5): Enslaving as an active interface with an up link
[  792.567506][ T7077] netlink: 'syz.0.9017': attribute type 1 has an invalid length.
[  792.588994][ T7078] netlink: 'syz.0.9017': attribute type 1 has an invalid length.
[  792.616556][ T7081] netlink: 'syz.3.9018': attribute type 1 has an invalid length.
[  792.638483][ T7081] bond74: entered promiscuous mode
[  792.642017][ T7081] 8021q: adding VLAN 0 to HW filter on device bond74
[  792.679847][ T7081] 8021q: adding VLAN 0 to HW filter on device bond74
[  792.684104][ T7081] bond74: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  792.698011][ T7081] bond74: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[  792.706953][ T7081] bond74: (slave ip6gre4): making interface the new active one
[  792.710107][ T7081] ip6gre4: entered promiscuous mode
[  792.713377][ T7081] bond74: (slave ip6gre4): Enslaving as an active interface with an up link
[  792.731745][ T7077] veth53: entered promiscuous mode
[  792.742265][ T7077] bond106: (slave veth53): Enslaving as a backup interface with a down link
[  792.764039][ T7078] 8021q: adding VLAN 0 to HW filter on device bond106
[  792.796922][ T7086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  792.803674][ T7086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  792.918715][ T7090] vlan13: entered promiscuous mode
[  792.920902][ T7090] geneve1: entered promiscuous mode
[  792.923322][ T7090] vlan13: entered allmulticast mode
[  792.925593][ T7090] geneve1: entered allmulticast mode
[  793.016715][ T7094] syzkaller1: entered promiscuous mode
[  793.019649][ T7094] syzkaller1: entered allmulticast mode
[  793.162784][ T7097] openvswitch: netlink: Message has 4 unknown bytes.
[  793.165647][ T7097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  793.798645][ T7135] xt_hashlimit: size too large, truncated to 1048576
[  794.233910][ T7188] "syz.3.9047" (7188) uses obsolete ecb(arc4) skcipher
[  794.377359][ T7208] syzkaller1: entered promiscuous mode
[  794.381392][ T7208] syzkaller1: entered allmulticast mode
[  794.990732][ T7238] netlink: 'syz.0.9061': attribute type 1 has an invalid length.
[  795.113811][ T7247] bond107: (slave bridge55): making interface the new active one
[  795.117114][ T7247] bond107: (slave bridge55): Enslaving as an active interface with an up link
[  795.222161][ T7251] lo speed is unknown, defaulting to 1000
[  795.594950][ T7276] "syz.1.9072" (7276) uses obsolete ecb(arc4) skcipher
[  795.668822][ T7281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  796.099308][ T7294] "syz.1.9080" (7294) uses obsolete ecb(arc4) skcipher
[  796.216057][ T7300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  796.258893][ T7305] syzkaller1: entered promiscuous mode
[  796.261277][ T7305] syzkaller1: entered allmulticast mode
[  796.399974][ T7315] __nla_validate_parse: 24 callbacks suppressed
[  796.399985][ T7315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9089'.
[  796.450423][ T7317] xt_hashlimit: size too large, truncated to 1048576
[  796.501861][ T7319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9090'.
[  796.515028][ T7317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9090'.
[  796.607312][ T7325] netlink: 211636 bytes leftover after parsing attributes in process `syz.0.9092'.
[  796.712465][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9095'.
[  796.777312][ T7337] validate_nla: 5 callbacks suppressed
[  796.777323][ T7337] netlink: 'syz.0.9095': attribute type 1 has an invalid length.
[  796.782715][ T7337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  796.883101][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9098'.
[  796.885868][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9098'.
[  796.999805][ T7346] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  797.010796][ T7346] 8021q: adding VLAN 0 to HW filter on device macvlan16
[  797.141975][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9100'.
[  797.209285][ T7355] syzkaller1: entered promiscuous mode
[  797.211542][ T7355] syzkaller1: entered allmulticast mode
[  797.284624][ T7358] "syz.1.9102" (7358) uses obsolete ecb(arc4) skcipher
[  797.323741][ T7360] "syz.1.9103" (7360) uses obsolete ecb(arc4) skcipher
[  797.351168][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9104'.
[  797.354312][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9104'.
[  797.872341][ T7387] "syz.3.9110" (7387) uses obsolete ecb(arc4) skcipher
[  798.021514][ T7395] netlink: 'syz.3.9112': attribute type 30 has an invalid length.
[  798.033410][ T7395] netlink: 'syz.3.9112': attribute type 30 has an invalid length.
[  798.294418][ T7407] xt_TCPMSS: Only works on TCP SYN packets
[  798.299521][ T7407] netlink: Conntrack attr has 4 unknown bytes
[  798.377203][ T7409] bond75: entered promiscuous mode
[  798.380051][ T7409] 8021q: adding VLAN 0 to HW filter on device bond75
[  798.531292][ T7430] netlink: 'syz.1.9121': attribute type 6 has an invalid length.
[  798.534574][ T7430] netlink: 'syz.1.9121': attribute type 5 has an invalid length.
[  798.538902][ T7430] netlink: 'syz.1.9121': attribute type 6 has an invalid length.
[  798.542137][ T7430] netlink: 'syz.1.9121': attribute type 5 has an invalid length.
[  798.717318][ T7431] netlink: 'syz.3.9122': attribute type 9 has an invalid length.
[  798.856960][ T7451] netlink: 'syz.3.9127': attribute type 1 has an invalid length.
[  798.907693][ T7461] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  798.927362][ T7461] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  799.414501][ T7522] syzkaller1: entered promiscuous mode
[  799.416975][ T7522] syzkaller1: entered allmulticast mode
[  799.461964][ T7525] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  799.607514][ T7536] netlink: 'syz.3.9147': attribute type 1 has an invalid length.
[  799.688838][ T7542] syzkaller1: entered promiscuous mode
[  799.690870][ T7542] syzkaller1: entered allmulticast mode
[  799.891360][ T7558] "syz.3.9153" (7558) uses obsolete ecb(arc4) skcipher
[  800.133941][ T7560] lo speed is unknown, defaulting to 1000
[  800.183040][ T7580] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003
[  800.277455][ T7584] lo: Caught tx_queue_len zero misconfig
[  800.627500][ T7613] "syz.1.9166" (7613) uses obsolete ecb(arc4) skcipher
[  800.722010][ T7624] "syz.1.9170" (7624) uses obsolete ecb(arc4) skcipher
[  800.903014][ T7638] veth55: entered promiscuous mode
[  800.952021][ T7650] "syz.1.9178" (7650) uses obsolete ecb(arc4) skcipher
[  801.397572][ T7671] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  801.873580][ T7679] __nla_validate_parse: 57 callbacks suppressed
[  801.873599][ T7679] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9188'.
[  801.888830][ T7679] validate_nla: 2 callbacks suppressed
[  801.888847][ T7679] netlink: 'syz.3.9188': attribute type 1 has an invalid length.
[  801.991596][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9188'.
[  802.001624][ T7679] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9188'.
[  802.030418][ T7683] netlink: 'syz.0.9189': attribute type 20 has an invalid length.
[  802.041971][ T7683] netlink: 'syz.0.9189': attribute type 20 has an invalid length.
[  802.075946][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9190'.
[  802.092973][ T7691] netlink: 'syz.0.9191': attribute type 1 has an invalid length.
[  802.097592][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9191'.
[  802.106460][ T7689] nbd: must specify a size in bytes for the device
[  802.122291][ T7689] block nbd3: NBD_DISCONNECT
[  802.126339][ T7689] block nbd3: Disconnected due to user request.
[  802.128818][ T4224] block nbd3: Wrong magic (0x25609513)
[  802.134639][ T4225] block nbd3: Wrong magic (0x25609513)
[  802.137967][ T7689] block nbd3: shutting down sockets
[  802.168999][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9192'.
[  802.202812][ T7698] syzkaller0: Caught tx_queue_len zero misconfig
[  802.519295][ T7713] netlink: 'syz.3.9197': attribute type 1 has an invalid length.
[  802.612610][ T7716] veth0: entered promiscuous mode
[  802.615089][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9198'.
[  802.626154][ T7716] veth0 (unregistering): left promiscuous mode
[  802.655599][ T7721] "syz.3.9200" (7721) uses obsolete ecb(arc4) skcipher
[  802.709939][ T7724] "syz.3.9201" (7724) uses obsolete ecb(arc4) skcipher
[  802.735887][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9202'.
[  802.773434][ T7730] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9204'.
[  802.816099][ T7732] netlink: 'syz.1.9205': attribute type 1 has an invalid length.
[  802.857604][ T7732] bond95: entered promiscuous mode
[  802.859861][ T7732] 8021q: adding VLAN 0 to HW filter on device bond95
[  802.869868][ T7738] "syz.0.9207" (7738) uses obsolete ecb(arc4) skcipher
[  802.872300][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9205'.
[  802.953628][ T7740] tipc: Invalid UDP bearer configuration
[  802.953674][ T7740] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  802.966824][ T7743] pim6reg1: entered promiscuous mode
[  802.972814][ T7743] pim6reg1: entered allmulticast mode
[  803.121898][ T7749] bridge56: entered promiscuous mode
[  803.123673][ T7749] bridge56: entered allmulticast mode
[  803.246444][ T7749] bridge56: entered promiscuous mode
[  803.251025][ T7749] bridge56: entered allmulticast mode
[  803.362828][ T7768] "syz.1.9215" (7768) uses obsolete ecb(arc4) skcipher
[  803.407050][ T7772] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  803.410320][ T7772] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  803.671465][ T7798] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  803.796933][ T7808] netlink: 'syz.0.9228': attribute type 28 has an invalid length.
[  803.974107][ T7822] geneve9: entered promiscuous mode
[  803.996776][ T7824] ip6gretap4: entered promiscuous mode
[  804.217373][ T7846] "syz.0.9240" (7846) uses obsolete ecb(arc4) skcipher
[  804.373322][ T7847] bridge0: Device is already in use.
[  804.634401][ T7866] tipc: Resetting bearer <eth:syzkaller0>
[  804.688424][T12313] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  804.693642][T12313] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  804.697060][T12313] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  804.701350][T12313] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  804.742335][ T7870] netlink: 'syz.0.9246': attribute type 1 has an invalid length.
[  804.813228][ T7875] "syz.0.9248" (7875) uses obsolete ecb(arc4) skcipher
[  804.942854][ T7880] netlink: 'syz.0.9249': attribute type 16 has an invalid length.
[  804.946310][ T7880] netlink: 'syz.0.9249': attribute type 17 has an invalid length.
[  804.975195][ T7880] 8021q: adding VLAN 0 to HW filter on device 
[  805.002488][ T7880] veth1_macvtap: left promiscuous mode
[  805.006389][ T7880] veth0_macvtap: left allmulticast mode
[  805.011943][ T7880] veth1_macvtap: entered promiscuous mode
[  805.031821][ T7880] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  805.044196][ T6422] lo speed is unknown, defaulting to 1000
[  805.050988][ T6422] sy2: Port: 1 Link ACTIVE
[  805.089989][ T7646] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  805.093824][ T7646] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  805.102530][ T7646] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  805.109514][ T7646] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  805.134518][ T6422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  805.212518][ T7890] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  805.212518][ T7890] Please contact the netfilter-devel mailing list or update your nftables rules.
[  805.298148][T12314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  805.348990][ T6422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.355426][ T7905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  805.359776][ T7905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  805.450560][T28313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  805.691556][ T7915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.698125][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.723017][ T7915] bond77: entered promiscuous mode
[  805.724712][ T7915] bond77: entered allmulticast mode
[  805.837371][ T7919] 8021q: adding VLAN 0 to HW filter on device bond78
[  805.982861][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.188478][T28313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  806.242995][ T7922] Cannot find del_set index 1 as target
[  806.349619][T16945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  806.353287][T16945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  806.650549][ T7940] "syz.3.9265" (7940) uses obsolete ecb(arc4) skcipher
[  806.739976][ T5684] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  806.859573][ T7953] 8021q: adding VLAN 0 to HW filter on device bond79
[  806.890117][ T7953] bond79: (slave veth41): Enslaving as an active interface with a down link
[  806.896455][ T7953] __nla_validate_parse: 14 callbacks suppressed
[  806.896469][ T7953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9269'.
[  806.923216][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9270'.
[  807.082379][ T7981] syzkaller1: entered promiscuous mode
[  807.084660][ T7981] syzkaller1: entered allmulticast mode
[  807.159324][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9274'.
[  807.242102][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9278'.
[  807.275084][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  807.417587][ T7995] bridge56: entered promiscuous mode
[  807.419951][ T7995] bridge56: entered allmulticast mode
[  807.857664][ T8028] validate_nla: 8 callbacks suppressed
[  807.857682][ T8028] netlink: 'syz.1.9286': attribute type 4 has an invalid length.
[  807.896167][ T8025] netlink: 25 bytes leftover after parsing attributes in process `syz.1.9286'.
[  807.949460][ T8030] "syz.1.9287" (8030) uses obsolete ecb(arc4) skcipher
[  808.029516][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.036032][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.133266][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9290'.
[  808.184051][T28313] syz0: Port: 1 Link DOWN
[  808.192429][T13279] smbdirect: ib_dev[syz0] removed
[  808.336761][ T8054] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9294'.
[  808.341286][ T8053] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9294'.
[  808.387635][ T8053] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000
[  808.426250][ T8064] "syz.3.9296" (8064) uses obsolete ecb(arc4) skcipher
[  808.531961][ T8067] netlink: 'syz.3.9297': attribute type 13 has an invalid length.
[  808.535579][ T8067] netlink: 'syz.3.9297': attribute type 17 has an invalid length.
[  808.641239][ T8066] tipc: Resetting bearer <eth:xfrm0>
[  808.838117][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.854414][ T8067] 8021q: adding VLAN 0 to HW filter on device team0
[  808.871520][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.875310][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.891047][ T8067] veth1_macvtap: left promiscuous mode
[  808.893510][ T8067] veth0_macvtap: left promiscuous mode
[  808.905464][ T8067] veth0_macvtap: entered promiscuous mode
[  808.924347][ T8067] veth1_macvtap: entered promiscuous mode
[  808.934087][ T8067] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  808.954761][ T8082] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.9302'.
[  809.062843][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9302'.
[  809.277147][ T8103] 8021q: adding VLAN 0 to HW filter on device bond109
[  809.324892][ T8098] bond96: invalid ARP target 0.0.0.0 specified for addition
[  809.328242][ T8098] bond96: option arp_ip_target: invalid value (0)
[  809.332734][ T8098] bond96 (unregistering): Released all slaves
[  809.521830][ T8119] xt_hashlimit: size too large, truncated to 1048576
[  809.574214][ T8121] netlink: 'syz.1.9312': attribute type 1 has an invalid length.
[  809.799218][T28313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.808138][ T8143] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  809.882866][ T8153] "syz.0.9317" (8153) uses obsolete ecb(arc4) skcipher
[  809.948004][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.953834][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.066095][ T8166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.146727][ T8166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.195323][ T8178] "syz.1.9322" (8178) uses obsolete ecb(arc4) skcipher
[  810.206107][ T8166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.283144][ T8166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.368992][T12314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  810.378528][T12314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.392684][T12314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.403547][T12314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.409026][ T8164] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.484529][ T8164] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.593411][ T8164] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.663144][ T8164] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.721363][ T8202] "syz.3.9330" (8202) uses obsolete ecb(arc4) skcipher
[  810.748339][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  810.831010][ T8215] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  810.835100][ T8215] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  811.433342][ T8231] "syz.1.9338" (8231) uses obsolete ecb(arc4) skcipher
[  811.481919][ T8233] netlink: 'syz.1.9339': attribute type 1 has an invalid length.
[  811.487628][ T8233] netlink: 'syz.1.9339': attribute type 2 has an invalid length.
[  811.542293][ T8235] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  811.581539][ T8204] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  811.802785][ T8250] "syz.1.9345" (8250) uses obsolete ecb(arc4) skcipher
[  811.829132][ T8252] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004
[  811.925930][ T8260] netlink: 'syz.1.9348': attribute type 1 has an invalid length.
[  811.974362][ T8260] 8021q: adding VLAN 0 to HW filter on device bond97
[  811.980040][ T8260] bond96: (slave bond97): making interface the new active one
[  811.985693][ T8260] bond96: (slave bond97): Enslaving as an active interface with an up link
[  812.006892][   T33] audit: type=1800 audit(1780022501.800:40): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9347" name="memory.events" dev="tmpfs" ino=12779 res=0 errno=0
[  812.017479][ T8260] 8021q: adding VLAN 0 to HW filter on device bond96
[  812.023321][   T33] audit: type=1800 audit(1780022501.800:41): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9347" name="memory.events" dev="tmpfs" ino=12779 res=0 errno=0
[  812.060911][ T8481] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.077131][ T8267] netlink: 'syz.1.9350': attribute type 83 has an invalid length.
[  812.090172][ T7646] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.105434][ T7646] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.130729][T12313] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.236832][ T8274] __nla_validate_parse: 10 callbacks suppressed
[  812.236850][ T8274] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9353'.
[  812.395052][ T8281] netlink: 'syz.0.9356': attribute type 1 has an invalid length.
[  812.409292][ T8288] netlink: 'syz.1.9358': attribute type 1 has an invalid length.
[  812.477626][ T8288] 8021q: adding VLAN 0 to HW filter on device bond98
[  812.482380][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9359'.
[  812.486689][ T8288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9358'.
[  812.535006][ T8297] "syz.1.9360" (8297) uses obsolete ecb(arc4) skcipher
[  812.605267][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9362'.
[  812.647002][ T8299] 8021q: VLANs not supported on syzkaller1
[  813.119961][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9368'.
[  813.155432][ T8333] sctp: [Deprecated]: syz.1.9369 (pid 8333) Use of int in max_burst socket option.
[  813.155432][ T8333] Use struct sctp_assoc_value instead
[  813.192129][ T8338] bridge0: left promiscuous mode
[  813.194486][ T8338] bridge0: entered allmulticast mode
[  813.246901][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9372'.
[  813.285056][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9371'.
[  813.383475][ T8353] bond99: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  813.389670][ T8353] bond99 (unregistering): Released all slaves
[  813.536385][ T8368] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  813.541680][ T8368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9377'.
[  813.745257][ T8381] validate_nla: 1 callbacks suppressed
[  813.745268][ T8381] netlink: 'syz.1.9381': attribute type 1 has an invalid length.
[  813.885284][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9381'.
[  813.911652][ T8395] netlink: 'syz.3.9384': attribute type 5 has an invalid length.
[  814.172119][ T8408] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  814.209006][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9390'.
[  814.430949][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.434656][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.523723][ T8435] xt_l2tp: invalid flags combination: 8
[  814.538962][ T8435] netlink: 'syz.1.9398': attribute type 1 has an invalid length.
[  814.706652][ T8449] 8021q: adding VLAN 0 to HW filter on device bond80
[  814.785022][ T8462] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  814.853845][ T8474] dvmrp1: left allmulticast mode
[  815.034025][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.144244][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.146474][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.148785][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.150947][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.153111][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.155210][ T8503] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  815.783039][ T8519] xt_hashlimit: size too large, truncated to 1048576
[  815.835813][ T8525] netlink: 'syz.3.9418': attribute type 1 has an invalid length.
[  816.164120][ T8565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  816.170573][ T8565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  816.393311][ T8585] "syz.3.9428" (8585) uses obsolete ecb(arc4) skcipher
[  816.427129][ T8587] bond81 (unregistering): Released all slaves
[  816.451452][ T8589] netlink: 'syz.0.9427': attribute type 1 has an invalid length.
[  816.626867][ T8594] netlink: 'syz.3.9431': attribute type 1 has an invalid length.
[  817.047119][ T8603] 8021q: adding VLAN 0 to HW filter on device bond99
[  817.284513][ T8622] netlink: 'syz.1.9439': attribute type 1 has an invalid length.
[  817.329179][ T8622] 8021q: adding VLAN 0 to HW filter on device bond100
[  817.350089][ T8622] macvlan2: entered promiscuous mode
[  817.354016][ T8622] macvlan2: entered allmulticast mode
[  817.361329][ T8622] bond100: entered promiscuous mode
[  817.365859][ T8622] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  817.376933][ T8622] bond100: left promiscuous mode
[  817.418354][ T8627] __nla_validate_parse: 19 callbacks suppressed
[  817.418365][ T8627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9440'.
[  817.423433][ T8627] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9440'.
[  817.482706][   T33] audit: type=1800 audit(1780022507.280:42): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9438" name="memory.events" dev="tmpfs" ino=16559 res=0 errno=0
[  817.497668][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9441'.
[  817.508158][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9441'.
[  817.511951][ T8630] netlink: 'syz.3.9441': attribute type 18 has an invalid length.
[  817.621003][ T8644] netlink: 'syz.0.9446': attribute type 1 has an invalid length.
[  817.626055][ T8644] netlink: 'syz.0.9446': attribute type 2 has an invalid length.
[  817.708706][ T8651] sctp: [Deprecated]: syz.0.9447 (pid 8651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  817.708706][ T8651] Use struct sctp_sack_info instead
[  817.835751][ T8659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.894062][ T8659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.928908][ T8659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.972493][ T8659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.048745][ T8481] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.068670][ T8481] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.089073][ T8481] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.106947][ T8481] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.181624][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9452'.
[  818.232319][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9453'.
[  818.242808][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9453'.
[  818.245790][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9453'.
[  818.249473][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9453'.
[  818.252754][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9453'.
[  818.783529][ T8711] validate_nla: 2 callbacks suppressed
[  818.783541][ T8711] netlink: 'syz.1.9465': attribute type 30 has an invalid length.
[  818.802326][ T8714] veth0_macvtap: entered allmulticast mode
[  818.826472][T16945] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  818.831056][ T8711] netlink: 'syz.1.9465': attribute type 30 has an invalid length.
[  818.834884][T16945] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  818.842645][ T8712] netlink: 'syz.1.9465': attribute type 30 has an invalid length.
[  818.847518][T16945] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  818.857327][T16945] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  819.165154][ T8749] syzkaller0: left promiscuous mode
[  819.167510][ T8749] syzkaller0: left allmulticast mode
[  819.407658][ T8768] lo speed is unknown, defaulting to 1000
[  819.544245][ T8780] net_ratelimit: 4461 callbacks suppressed
[  819.544263][ T8780] openvswitch: netlink: IP tunnel dst address not specified
[  819.549976][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  819.559608][ T8779] netlink: 'syz.1.9480': attribute type 13 has an invalid length.
[  819.566453][ T8781] netlink: 'syz.1.9480': attribute type 13 has an invalid length.
[  819.574529][ T8779] netlink: 'syz.1.9480': attribute type 17 has an invalid length.
[  819.581463][ T8781] netlink: 'syz.1.9480': attribute type 17 has an invalid length.
[  819.718511][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  819.761154][ T8779] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  819.779015][ T8781] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  819.785851][T16945] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  819.793779][T16945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.801192][T16945] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  819.808560][T16945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.825698][T16945] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  819.829545][T16945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.833033][T16945] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  819.836541][T16945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.189435][ T6154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.192657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.328735][ T8827] netlink: 'syz.1.9496': attribute type 1 has an invalid length.
[  820.385704][ T8827] 8021q: adding VLAN 0 to HW filter on device bond102
[  820.393083][ T8827] bond101: (slave bond102): making interface the new active one
[  820.396309][ T8827] bond101: (slave bond102): Enslaving as an active interface with an up link
[  820.911850][ T8877] netlink: 'syz.3.9507': attribute type 1 has an invalid length.
[  821.080522][ T8887] bond110: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  821.089730][ T8887] bond110 (unregistering): Released all slaves
[  821.302720][ T8911] netlink: 'syz.3.9518': attribute type 10 has an invalid length.
[  821.447268][    T9] lo speed is unknown, defaulting to 1000
[  821.453209][    T9] sy2: Port: 1 Link DOWN
[  821.467578][ T7646] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.481146][ T7646] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.492701][ T7646] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.500242][ T7646] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  822.083402][ T8943] tap0: tun_chr_ioctl cmd 1074025677
[  822.085846][ T8943] tap0: linktype set to 773
[  822.278502][ T8954] syzkaller1: entered promiscuous mode
[  822.282723][ T8954] syzkaller1: entered allmulticast mode
[  822.376557][ T8960] "syz.1.9531" (8960) uses obsolete ecb(arc4) skcipher
[  822.444291][ T8971] IPv6: NLM_F_CREATE should be specified when creating new route
[  822.516853][ T8980] 8021q: adding VLAN 0 to HW filter on device bond82
[  822.523485][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.529089][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.569864][ T8986] __nla_validate_parse: 424 callbacks suppressed
[  822.569877][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9539'.
[  822.579011][ T8986] xfrm2: entered promiscuous mode
[  822.580805][ T8986] xfrm2: entered allmulticast mode
[  822.650448][ T8993] syzkaller0: entered promiscuous mode
[  822.652311][ T8993] syzkaller0: entered allmulticast mode
[  822.796601][ T8995] policy can only be matched on NF_INET_PRE_ROUTING
[  822.796618][ T8995] unable to load match
[  822.999596][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9544'.
[  823.077444][ T9007] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  823.139856][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9544'.
[  823.188854][ T9012] netlink: 320 bytes leftover after parsing attributes in process `syz.3.9547'.
[  823.259311][ T9022] ref_ctr_offset mismatch. inode: 0xd2 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  823.294702][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9550'.
[  823.325238][ T8979] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  823.403765][ T9028] lo speed is unknown, defaulting to 1000
[  824.424188][ T9052] validate_nla: 5 callbacks suppressed
[  824.424202][ T9052] netlink: 'syz.3.9557': attribute type 1 has an invalid length.
[  824.516060][ T9052] 8021q: adding VLAN 0 to HW filter on device bond83
[  824.563861][   T33] audit: type=1804 audit(1780022514.360:43): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9558" name="/newroot/3287/cgroup.controllers" dev="tmpfs" ino=16736 res=1 errno=0
[  824.583536][   T33] audit: type=1800 audit(1780022514.360:44): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9558" name="cgroup.controllers" dev="tmpfs" ino=16736 res=0 errno=0
[  824.672220][ T9068] netlink: 'syz.3.9560': attribute type 2 has an invalid length.
[  824.679595][ T9068] netlink: 'syz.3.9560': attribute type 1 has an invalid length.
[  824.683186][ T9068] netlink: 'syz.3.9560': attribute type 1 has an invalid length.
[  824.708238][ T9068] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  824.841351][ T9076] smbdirect: ib_dev[sy2] renamed to [syz2]
[  825.064109][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9568'.
[  825.082453][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9568'.
[  825.238910][ T9109] x_tables: unsorted entry at hook 2
[  825.269372][ T9114] "syz.1.9574" (9114) uses obsolete ecb(arc4) skcipher
[  825.480225][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9577'.
[  825.574318][ T9139] netlink: 'syz.1.9580': attribute type 1 has an invalid length.
[  825.576809][ T9139] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9580'.
[  825.580127][ T9139] netlink: 658 bytes leftover after parsing attributes in process `syz.1.9580'.
[  825.750676][ T9155] bond110: entered promiscuous mode
[  825.754631][ T9155] 8021q: adding VLAN 0 to HW filter on device bond110
[  826.689456][   T33] audit: type=1107 audit(1780022516.490:45): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='066vEs?)b^{5ge'
[  827.055367][ T9241] netlink: 'syz.1.9609': attribute type 7 has an invalid length.
[  827.115668][ T9247] openvswitch: netlink: IP tunnel TTL not specified.
[  827.223576][ T9254] netlink: 'syz.1.9613': attribute type 1 has an invalid length.
[  827.261213][ T9254] bond103: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  827.290975][ T9254] veth61: entered promiscuous mode
[  827.294559][ T9254] bond103: (slave veth61): Enslaving as a backup interface with a down link
[  827.297529][ T9259] bridge0: entered allmulticast mode
[  827.312037][ T9254] 8021q: adding VLAN 0 to HW filter on device bond103
[  827.315240][ T7646] bond103: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  827.448267][   T13] bond103: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  827.506814][ T9265] bond111: entered promiscuous mode
[  827.512770][ T9265] 8021q: adding VLAN 0 to HW filter on device bond111
[  827.629569][ T9280] __nla_validate_parse: 79 callbacks suppressed
[  827.629580][ T9280] netlink: 272 bytes leftover after parsing attributes in process `syz.1.9619'.
[  827.635114][   T33] audit: type=1804 audit(1780022517.430:46): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9619" name="/newroot/3277/memory.events" dev="tmpfs" ino=16693 res=1 errno=0
[  827.646612][   T33] audit: type=1800 audit(1780022517.430:47): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9619" name="memory.events" dev="tmpfs" ino=16693 res=0 errno=0
[  827.763524][ T9292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9622'.
[  827.767078][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9622'.
[  827.972896][ T9311] bond71: (slave veth37): Releasing active interface
[  827.979395][ T9311] bond73: (slave gretap5): Releasing active interface
[  827.986977][ T9311] bond74: (slave ip6gre4): Releasing backup interface
[  827.994089][ T9311] ip6gre4: left promiscuous mode
[  827.999047][ T9311] bond79: (slave veth41): Releasing active interface
[  828.002796][ T9315] netlink: 'syz.1.9628': attribute type 3 has an invalid length.
[  828.013348][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9627'.
[  828.019932][ T9311] ip6gre5: entered allmulticast mode
[  828.339616][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9634'.
[  828.355105][ T9350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9634'.
[  828.471135][ T9357] netlink: 'syz.0.9637': attribute type 3 has an invalid length.
[  828.473877][ T9357] netlink: 'syz.0.9637': attribute type 1 has an invalid length.
[  828.477479][ T9357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9637'.
[  828.619929][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9641'.
[  828.784021][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9643'.
[  828.788714][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9643'.
[  829.014661][ T9398] veth1_to_bond: entered allmulticast mode
[  829.020887][ T9397] veth1_to_bond: left allmulticast mode
[  829.060988][ T9401] nbd: couldn't find a device at index 0
[  829.216675][ T9410] tipc: Resetting bearer <eth:xfrm0>
[  829.347565][ T9415] 8021q: adding VLAN 0 to HW filter on device team0
[  829.387226][ T9415] veth1_macvtap: left promiscuous mode
[  829.396950][ T9415] veth0_macvtap: left promiscuous mode
[  829.402384][ T9415] veth0_macvtap: left allmulticast mode
[  829.407122][ T9415] veth0_macvtap: entered promiscuous mode
[  829.410555][ T9415] veth1_macvtap: entered promiscuous mode
[  829.439098][ T9415] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  829.496775][ T9431] validate_nla: 3 callbacks suppressed
[  829.496786][ T9431] netlink: 'syz.0.9657': attribute type 1 has an invalid length.
[  829.606216][ T9441] netlink: 'syz.3.9660': attribute type 3 has an invalid length.
[  829.657935][ T9441] block nbd3: NBD_DISCONNECT
[  829.765994][ T9448] netlink: 'syz.3.9662': attribute type 1 has an invalid length.
[  829.771850][ T9448] netlink: 'syz.3.9662': attribute type 2 has an invalid length.
[  829.775883][ T9448] netlink: 'syz.3.9662': attribute type 3 has an invalid length.
[  829.852386][ T9462] IPVS: stopping backup sync thread 7935 ...
[  830.075351][ T9485] netlink: 'syz.0.9668': attribute type 8 has an invalid length.
[  830.246562][ T9504] netlink: 'syz.0.9671': attribute type 4 has an invalid length.
[  830.454319][ T9523] netlink: 'syz.0.9675': attribute type 11 has an invalid length.
[  830.477268][ T9523] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  830.480198][ T9523] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  830.616986][ T9533] bond55: entered allmulticast mode
[  830.782756][T12313] tipc: Subscription rejected, illegal request
[  831.003304][ T9555] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  831.006239][ T9555] mac80211_hwsim hwsim21 wlan0: left promiscuous mode
[  831.009745][ T9555] mac80211_hwsim hwsim21 wlan0: left allmulticast mode
[  831.014524][ T9555] bond100: left promiscuous mode
[  831.018044][ T9555] bond100: left allmulticast mode
[  831.021191][ T9555] vlan12: left allmulticast mode
[  831.024845][ T9555] bond101: left allmulticast mode
[  831.027063][ T9555] bond102: left promiscuous mode
[  831.029484][ T9555] bond102: left allmulticast mode
[  831.031664][ T9555] bond105: left promiscuous mode
[  831.037879][ T9555] bridge53: left promiscuous mode
[  831.041979][ T9555] ipvlan4: left allmulticast mode
[  831.048339][ T9555] ipvlan5: left allmulticast mode
[  831.051904][ T9555] bond105: left allmulticast mode
[  831.059153][ T9555] bridge53: left allmulticast mode
[  831.064079][ T9555] geneve9: left promiscuous mode
[  831.068506][ T9555] geneve9: left allmulticast mode
[  831.085545][ T9555] veth53: left promiscuous mode
[  831.093199][ T9555] vlan13: left promiscuous mode
[  831.096480][ T9555] geneve1: left promiscuous mode
[  831.099954][ T9555] vlan13: left allmulticast mode
[  831.101999][ T9555] geneve1: left allmulticast mode
[  831.103809][ T9555] ip6gretap4: left promiscuous mode
[  831.105517][ T9555] bridge56: left promiscuous mode
[  831.107269][ T9555] bridge56: left allmulticast mode
[  831.112380][ T9555] bond110: left promiscuous mode
[  831.114860][ T9555] bond111: left promiscuous mode
[  831.151900][ T9568] netlink: 'syz.1.9685': attribute type 3 has an invalid length.
[  831.188852][ T9568] block nbd1: NBD_DISCONNECT
[  831.194600][ T9568] block nbd1: Disconnected due to user request.
[  831.198156][ T7372] block nbd1: Wrong magic (0x25609513)
[  831.200843][T29031] block nbd1: Wrong magic (0x25609513)
[  831.206138][ T9568] block nbd1: shutting down sockets
[  831.359190][ T9590] netlink: 'syz.0.9691': attribute type 1 has an invalid length.
[  831.377073][ T9584] bond104: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  831.380388][ T9584] bond104: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  831.589689][ T9606] veth1: Caught tx_queue_len zero misconfig
[  831.896669][ T9625] syzkaller1: entered promiscuous mode
[  831.904319][ T9625] syzkaller1: entered allmulticast mode
[  831.919528][ T9638] netlink: 'syz.0.9705': attribute type 4 has an invalid length.
[  832.096732][   T33] audit: type=1804 audit(1780022521.890:48): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9710" name="/newroot/3339/cgroup.controllers" dev="tmpfs" ino=17003 res=1 errno=0
[  832.116691][   T33] audit: type=1800 audit(1780022521.890:49): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9710" name="cgroup.controllers" dev="tmpfs" ino=17003 res=0 errno=0
[  832.148835][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.278322][ T9661] bond_slave_1: mtu less than device minimum
[  832.286341][ T9667] sock: sock_timestamping_bind_phc: sock not bind to device
[  832.806894][ T9702] bond84: entered promiscuous mode
[  832.811167][ T9702] 8021q: adding VLAN 0 to HW filter on device bond84
[  833.089936][ T9713] tipc: Resetting bearer <eth:xfrm0>
[  833.211199][ T9714] 8021q: adding VLAN 0 to HW filter on device team0
[  833.251375][ T9714] veth1_macvtap: left promiscuous mode
[  833.260845][ T9714] veth0_macvtap: left promiscuous mode
[  833.262135][ T9720] __nla_validate_parse: 22 callbacks suppressed
[  833.262144][ T9720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9733'.
[  833.268477][ T9714] veth0_macvtap: entered promiscuous mode
[  833.269847][ T9714] veth1_macvtap: entered promiscuous mode
[  833.271495][ T9721] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9733'.
[  833.286302][ T9714] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  833.289006][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9732'.
[  833.314728][ T9720] syzkaller1: entered promiscuous mode
[  833.317088][ T9720] syzkaller1: entered allmulticast mode
[  833.477193][ T9729] 8021q: adding VLAN 0 to HW filter on device bond112
[  833.508744][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9738'.
[  833.512680][ T9741] openvswitch: netlink: Flow key attr not present in new flow.
[  833.716716][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9743'.
[  833.805811][ T9760] lo speed is unknown, defaulting to 1000
[  833.961507][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9752'.
[  833.980999][ T9788] openvswitch: netlink: Actions may not be safe on all matching packets
[  834.132479][ T9798] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9757'.
[  834.135752][ T9798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9757'.
[  834.173868][ T9798] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9757'.
[  834.179363][ T9798] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  834.326716][ T9819] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9765'.
[  834.707499][ T9839] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  834.737231][ T9843] validate_nla: 7 callbacks suppressed
[  834.737243][ T9843] netlink: 'syz.1.9775': attribute type 1 has an invalid length.
[  834.881151][ T9845] netlink: 'syz.0.9776': attribute type 10 has an invalid length.
[  835.170932][ T9871] vti2: entered promiscuous mode
[  835.205808][ T9873] netlink: 'syz.1.9784': attribute type 1 has an invalid length.
[  835.563643][ T9905] vlan0: entered promiscuous mode
[  835.575406][ T9905] bond69: entered promiscuous mode
[  836.378994][ T9960] netlink: 'syz.0.9811': attribute type 13 has an invalid length.
[  836.425254][ T9962] erspan0: entered promiscuous mode
[  836.440523][ T9962] 8021q: adding VLAN 0 to HW filter on device 
[  836.454054][T28313] lo speed is unknown, defaulting to 1000
[  836.458170][T28313] syz2: Port: 1 Link ACTIVE
[  836.495798][ T6422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  836.618817][T12313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  836.690977][ T6422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  837.011377][T10013] netlink: 'syz.1.9824': attribute type 1 has an invalid length.
[  837.052039][T10013] 8021q: adding VLAN 0 to HW filter on device bond106
[  837.134426][T10023] netlink: 'syz.1.9827': attribute type 4 has an invalid length.
[  837.143493][T10023] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  837.217464][T10036] netlink: 'syz.3.9828': attribute type 20 has an invalid length.
[  837.258714][T10041] sctp: [Deprecated]: syz.1.9832 (pid 10041) Use of int in max_burst socket option.
[  837.258714][T10041] Use struct sctp_assoc_value instead
[  837.267057][T10042] pim6reg1: entered promiscuous mode
[  837.271726][T10042] pim6reg1: entered allmulticast mode
[  837.300657][T10048] netlink: 'syz.3.9833': attribute type 1 has an invalid length.
[  837.623844][T10080] netlink: 'syz.1.9844': attribute type 1 has an invalid length.
[  837.629153][T10080] workqueue: Failed to create a rescuer kthread for wq "bond107": -EINTR
[  837.639747][T12314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  837.656637][T12314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  837.695549][T10091] sch_fq: defrate 4294967293 ignored.
[  837.808256][T10088] nbd1: detected capacity change from 0 to 63
[  837.810731][T10095] block nbd1: NBD_DISCONNECT
[  837.813317][T10095] block nbd1: Disconnected due to user request.
[  837.815437][T10095] block nbd1: shutting down sockets
[  837.818511][    C1] blk_print_req_error: 138 callbacks suppressed
[  837.818520][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.823358][    C1] buffer_io_error: 138 callbacks suppressed
[  837.823365][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  837.827830][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.830705][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  837.833050][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.835826][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  837.838395][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.841228][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  837.843967][ T7909] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.847183][ T7909] Buffer I/O error on dev nbd1, logical block 0, async page read
[  837.854041][ T7909] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.862564][ T7909] Buffer I/O error on dev nbd1, logical block 1, async page read
[  837.874893][ T7909] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.887309][ T7909] Buffer I/O error on dev nbd1, logical block 2, async page read
[  837.893984][ T7909] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.903827][ T7909] Buffer I/O error on dev nbd1, logical block 3, async page read
[  837.910396][ T7909] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.913189][ T7909] Buffer I/O error on dev nbd1, logical block 0, async page read
[  837.915874][ T7909] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  837.923581][ T7909] Buffer I/O error on dev nbd1, logical block 1, async page read
[  837.928643][ T7909] ldm_validate_partition_table(): Disk read failed.
[  837.931504][ T7909] Dev nbd1: unable to read RDB block 0
[  837.934082][ T7909]  nbd1: unable to read partition table
[  837.960817][ T7909] ldm_validate_partition_table(): Disk read failed.
[  837.967542][ T7909] Dev nbd1: unable to read RDB block 0
[  837.971042][ T7909]  nbd1: unable to read partition table
[  837.988893][T10107] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  838.014358][T10107] netlink: 'syz.1.9850': attribute type 1 has an invalid length.
[  838.198043][T28313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  838.403459][T10130] xt_TCPMSS: Only works on TCP SYN packets
[  838.544474][T10143] __nla_validate_parse: 24 callbacks suppressed
[  838.544487][T10143] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9859'.
[  838.554144][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9859'.
[  838.757193][T10159] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  838.909996][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9872'.
[  838.926706][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9870'.
[  839.748864][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9874'.
[  839.751797][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9874'.
[  839.754624][T10196] validate_nla: 1 callbacks suppressed
[  839.754632][T10196] netlink: 'syz.3.9874': attribute type 19 has an invalid length.
[  839.766338][T10196] netlink: 'syz.3.9874': attribute type 20 has an invalid length.
[  839.800972][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9875'.
[  839.811876][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9875'.
[  840.055350][T10226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9881'.
[  840.068309][T10217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9880'.
[  840.500198][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.514205][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.581998][T10282] tipc: Failed to remove unknown binding: 66,0,0/134418688:220628296/220628298
[  840.589623][T10282] tipc: Failed to remove unknown binding: 66,0,0/134418688:220628296/220628297
[  840.606588][T10284] netlink: 'syz.1.9896': attribute type 1 has an invalid length.
[  840.611091][T10282] xt_hashlimit: size too large, truncated to 1048576
[  840.621692][T10284] 8021q: adding VLAN 0 to HW filter on device bond107
[  840.685006][T10284] netlink: 'syz.1.9896': attribute type 1 has an invalid length.
[  840.691985][T10284] IPv6: sit5: Disabled Multicast RS
[  840.782102][T10292] 8021q: adding VLAN 0 to HW filter on device bond108
[  840.944484][T10303] netlink: Conntrack attr has 4 unknown bytes
[  841.092196][T10312] lo speed is unknown, defaulting to 1000
[  841.219373][T10322] netlink: 'syz.1.9906': attribute type 10 has an invalid length.
[  841.346771][T10332] netlink: 'syz.3.9910': attribute type 9 has an invalid length.
[  841.378695][T10327] lo speed is unknown, defaulting to 1000
[  841.412229][T10334] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003
[  841.495054][T10345] netlink: 'syz.3.9914': attribute type 3 has an invalid length.
[  841.551014][T10349] lo speed is unknown, defaulting to 1000
[  841.986234][T10396] netlink: 'syz.0.9924': attribute type 1 has an invalid length.
[  842.001830][T10396] bond114: entered promiscuous mode
[  842.003810][T10396] 8021q: adding VLAN 0 to HW filter on device bond114
[  842.022515][T10396] bond114: entered allmulticast mode
[  842.042274][T10396] bond114: (slave bridge58): making interface the new active one
[  842.044924][T10396] bridge58: entered promiscuous mode
[  842.050402][T10396] bridge58: entered allmulticast mode
[  842.054650][T10396] bond114: (slave bridge58): Enslaving as an active interface with an up link
[  842.301144][T10417] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  842.308495][T10426] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  842.312657][T10426] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  842.503583][T10433] lo speed is unknown, defaulting to 1000
[  842.530977][T10437] netlink: 'syz.0.9938': attribute type 24 has an invalid length.
[  843.014219][T10462] netlink: 'syz.0.9945': attribute type 3 has an invalid length.
[  843.098421][T10471] IPv6: Can't replace route, no match found
[  843.100515][T10471] IPv6: Can't replace route, no match found
[  843.148747][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.333814][T10492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  843.921393][T10495] __nla_validate_parse: 25 callbacks suppressed
[  843.921408][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9955'.
[  843.935279][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9955'.
[  844.008052][ T5684] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  844.117955][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9959'.
[  844.124141][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9957'.
[  844.131937][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9959'.
[  844.135078][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9959'.
[  844.186689][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9959'.
[  844.190406][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9959'.
[  844.266019][T10529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9961'.
[  844.325933][   T13] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  844.606338][T10548] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9966'.
[  844.727392][T10555] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  844.829654][ T5684] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  844.925245][T10566] validate_nla: 1 callbacks suppressed
[  844.925262][T10566] netlink: 'syz.3.9972': attribute type 8 has an invalid length.
[  844.944659][T10563] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  845.362059][T10600] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  845.388763][T12313] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  845.411754][T12313] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  845.455956][T10607] lo speed is unknown, defaulting to 1000
[  845.493526][T10608] dvmrp0: entered allmulticast mode
[  845.659322][ T5684] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  846.103948][T10645] openvswitch: : Dropping previously announced user features
[  846.109654][T10645] openvswitch: : Dropping previously announced user features
[  846.324408][T10673] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  846.330655][T10675] netlink: 'syz.1.10004': attribute type 5 has an invalid length.
[  846.395263][T10682] openvswitch: netlink: Key type 65 is out of range max 32
[  846.701712][T10712] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  846.704302][T10712] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  846.707145][T10712] tipc: Resetting bearer <eth:syzkaller0>
[  846.903402][T10720] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003
[  846.911255][T10720] pim6reg99999991: entered allmulticast mode
[  847.163802][T10740] lo speed is unknown, defaulting to 1000
[  848.143287][T10787] netlink: 'syz.1.10035': attribute type 1 has an invalid length.
[  848.164811][T10787] 8021q: adding VLAN 0 to HW filter on device bond109
[  848.222648][T10790] netlink: 'syz.3.10036': attribute type 1 has an invalid length.
[  848.290896][T10793] bond85 (unregistering): Released all slaves
[  848.449930][T10799] netem: unknown loss type 0
[  848.454485][T10799] netem: change failed
[  848.655638][T10810] netlink: 'syz.3.10042': attribute type 58 has an invalid length.
[  848.671726][T10810] bond85: option min_links: invalid value (18446744073709551612)
[  848.674989][T10810] bond85: option min_links: allowed values 0 - 2147483647
[  848.681815][T10810] bond85 (unregistering): Released all slaves
[  849.074294][T10834] netlink: 'syz.1.10048': attribute type 1 has an invalid length.
[  849.088145][T10834] __nla_validate_parse: 18 callbacks suppressed
[  849.088158][T10834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10048'.
[  849.146870][T10841] netlink: 'syz.1.10050': attribute type 40 has an invalid length.
[  849.157946][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  849.186021][T10843] netlink: 'syz.0.10051': attribute type 8 has an invalid length.
[  849.190592][T10843] netlink: 'syz.0.10051': attribute type 11 has an invalid length.
[  849.238497][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10052'.
[  849.276409][T10852] netlink: 'syz.1.10054': attribute type 1 has an invalid length.
[  849.303064][T10852] 8021q: adding VLAN 0 to HW filter on device bond110
[  849.315363][T10852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10054'.
[  849.387539][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10056'.
[  849.451191][T10867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  849.560672][T10880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10060'.
[  849.567097][T10876] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  849.707637][T10883] IPVS: length: 53 != 8
[  849.777470][T10887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.782987][T10887] netlink: 'syz.1.10062': attribute type 10 has an invalid length.
[  849.787299][T10887] tipc: Resetting bearer <eth:syzkaller0>
[  849.866855][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10064'.
[  849.884310][T10891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.091992][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10066'.
[  850.410395][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10068'.
[  850.840158][T10911] netlink: 'syz.3.10069': attribute type 1 has an invalid length.
[  850.864800][T10911] 8021q: adding VLAN 0 to HW filter on device bond85
[  851.548092][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  852.864378][T10891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  852.989403][T10918] lo speed is unknown, defaulting to 1000
[  853.051995][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10073'.
[  853.201482][T10938] syzkaller1: entered promiscuous mode
[  853.203300][T10938] syzkaller1: entered allmulticast mode
[  853.323677][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10080'.
[  853.728885][   T33] audit: type=1804 audit(1780022543.530:50): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10087" name="/newroot/3462/cgroup.controllers" dev="tmpfs" ino=17628 res=1 errno=0
[  853.738298][   T33] audit: type=1800 audit(1780022543.530:51): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10087" name="cgroup.controllers" dev="tmpfs" ino=17628 res=0 errno=0
[  854.412943][T10985] __nla_validate_parse: 7 callbacks suppressed
[  854.412959][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10093'.
[  854.894906][T11021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10104'.
[  854.903376][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10105'.
[  855.089102][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10108'.
[  855.092002][T11035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10108'.
[  855.120920][T11039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10109'.
[  855.301309][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10110'.
[  855.743975][T11045] netlink: 'syz.0.10111': attribute type 1 has an invalid length.
[  855.758879][T11045] bond115: entered promiscuous mode
[  855.761282][T11045] 8021q: adding VLAN 0 to HW filter on device bond115
[  855.776577][T11045] bond115: (slave bridge59): making interface the new active one
[  855.779502][T11045] bridge59: entered promiscuous mode
[  855.782072][T11045] bond115: (slave bridge59): Enslaving as an active interface with an up link
[  855.928908][ T5692] nci: nci_ntf_packet: unknown ntf opcode 0xb20
[  856.680915][T11050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  856.910239][T11080] netlink: 'syz.0.10120': attribute type 1 has an invalid length.
[  856.913188][T11080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10120'.
[  856.916824][T11083] netlink: 'syz.1.10121': attribute type 1 has an invalid length.
[  856.933318][T11080] lo speed is unknown, defaulting to 1000
[  856.969437][T11086] netlink: 'syz.0.10120': attribute type 1 has an invalid length.
[  856.971771][T11085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  857.061304][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10124'.
[  857.249865][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10129'.
[  857.253415][T11109] netlink: 'syz.1.10129': attribute type 4 has an invalid length.
[  857.294865][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  857.307913][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  858.459492][T11172] bond116: entered promiscuous mode
[  858.461458][T11172] bond116: entered allmulticast mode
[  858.463390][T11172] 8021q: adding VLAN 0 to HW filter on device bond116
[  858.563936][T11184] IPv6: sit9: Disabled Multicast RS
[  858.573818][T11186] netlink: 'syz.0.10151': attribute type 1 has an invalid length.
[  858.925996][T11201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  858.983650][T11208] gretap8: entered allmulticast mode
[  859.165039][T11222] netlink: 'syz.3.10159': attribute type 1 has an invalid length.
[  859.236866][T11227] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  859.239650][T11227] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  859.564364][T11252] syzkaller1: tun_chr_ioctl cmd 35108
[  859.812870][T11268] __nla_validate_parse: 6 callbacks suppressed
[  859.812883][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10171'.
[  859.833365][T11268] 8021q: adding VLAN 0 to HW filter on device bond111
[  859.984140][T11289] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  860.122482][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10174'.
[  860.137063][T11294] 8021q: adding VLAN 0 to HW filter on device bond117
[  860.175399][T11299] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.10175'.
[  860.182762][T11294] macvlan1: entered promiscuous mode
[  860.184731][T11294] bond117: entered promiscuous mode
[  860.186776][T11294] macvlan1: entered allmulticast mode
[  860.212938][T11294] bond117: entered allmulticast mode
[  860.216335][T11294] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  860.325476][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10178'.
[  860.526498][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10182'.
[  860.530437][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10182'.
[  862.647289][T11258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  862.905027][T11345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10188'.
[  862.999542][T11347] bond112: option lacp_rate: invalid value (128)
[  863.003175][T11347] bond112 (unregistering): Released all slaves
[  863.030268][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10189'.
[  863.033725][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10189'.
[  863.036493][T11362] ipt_REJECT: TCP_RESET invalid for non-tcp
[  863.039589][T11349] netlink: 58 bytes leftover after parsing attributes in process `syz.3.10189'.
[  863.107042][T11372] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  863.119207][T11372] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  863.121869][T11370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  863.233208][T11392] netlink: 'syz.3.10201': attribute type 1 has an invalid length.
[  863.259295][T11392] 8021q: adding VLAN 0 to HW filter on device bond86
[  863.621976][T11425] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001
[  864.145705][ T7646] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3
[  864.214175][T11483] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  864.692076][   T33] audit: type=1804 audit(1780022554.490:52): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10232" name="/newroot/2760/cgroup.controllers" dev="tmpfs" ino=14053 res=1 errno=0
[  864.699078][   T33] audit: type=1800 audit(1780022554.490:53): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10232" name="cgroup.controllers" dev="tmpfs" ino=14053 res=0 errno=0
[  864.978200][T11518] netlink: 'syz.1.10234': attribute type 1 has an invalid length.
[  864.980886][T11518] __nla_validate_parse: 142 callbacks suppressed
[  864.980894][T11518] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10234'.
[  865.144383][T11531] sctp: [Deprecated]: syz.1.10235 (pid 11531) Use of struct sctp_assoc_value in delayed_ack socket option.
[  865.144383][T11531] Use struct sctp_sack_info instead
[  865.428784][T11535] netlink: 'syz.0.10237': attribute type 14 has an invalid length.
[  865.545059][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10239'.
[  865.587432][T11544] netlink: 'syz.3.10238': attribute type 2 has an invalid length.
[  865.604926][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10239'.
[  865.658346][T11546] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  865.661384][T11546] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  865.664727][T11546] tipc: Resetting bearer <eth:syzkaller0>
[  865.670461][T11546] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.10240'.
[  865.725599][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10241'.
[  865.729781][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10241'.
[  865.735837][T11548] netlink: 'syz.0.10241': attribute type 1 has an invalid length.
[  865.742720][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10241'.
[  865.747338][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10241'.
[  865.752113][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10241'.
[  865.780081][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10242'.
[  866.122269][T11566] bridge0: port 1(wlan1) entered blocking state
[  866.124482][T11566] bridge0: port 1(wlan1) entered disabled state
[  866.126818][T11566] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  866.131571][T11566] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  866.205354][T11572] syz.1.10251: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  866.216783][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.1.10251 Not tainted syzkaller #0 PREEMPT(full) 
[  866.216802][T11572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  866.216811][T11572] Call Trace:
[  866.216817][T11572]  <TASK>
[  866.216824][T11572]  dump_stack_lvl+0xe8/0x150
[  866.216846][T11572]  warn_alloc+0x249/0x340
[  866.216866][T11572]  ? stack_trace_save+0xa9/0x100
[  866.216938][T11572]  ? __pfx_warn_alloc+0x10/0x10
[  866.216961][T11572]  ? kasan_save_track+0x4f/0x80
[  866.216979][T11572]  ? kasan_save_track+0x3e/0x80
[  866.216994][T11572]  ? __kasan_kmalloc+0x93/0xb0
[  866.217009][T11572]  ? __kmalloc_cache_noprof+0x31c/0x660
[  866.217025][T11572]  ? xskq_create+0x56/0x170
[  866.217042][T11572]  ? xsk_setsockopt+0x54c/0x990
[  866.217061][T11572]  ? do_sock_setsockopt+0x17c/0x1b0
[  866.217079][T11572]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  866.217097][T11572]  ? do_syscall_64+0x15f/0xf80
[  866.217112][T11572]  __vmalloc_node_range_noprof+0x132/0x1750
[  866.217146][T11572]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  866.217159][T11572]  ? __kasan_kmalloc+0x93/0xb0
[  866.217171][T11572]  vmalloc_user_noprof+0xad/0xe0
[  866.217182][T11572]  ? xskq_create+0xbf/0x170
[  866.217193][T11572]  xskq_create+0xbf/0x170
[  866.217204][T11572]  xsk_init_queue+0x8a/0xe0
[  866.217215][T11572]  xsk_setsockopt+0x54c/0x990
[  866.217225][T11572]  ? __pfx_xsk_setsockopt+0x10/0x10
[  866.217234][T11572]  ? __pfx_aa_sk_perm+0x10/0x10
[  866.217246][T11572]  ? aa_sock_opt_perm+0xff/0x1a0
[  866.217258][T11572]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  866.217268][T11572]  ? __pfx_xsk_setsockopt+0x10/0x10
[  866.217278][T11572]  do_sock_setsockopt+0x17c/0x1b0
[  866.217291][T11572]  __x64_sys_setsockopt+0x13d/0x1b0
[  866.217302][T11572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.217315][T11572]  do_syscall_64+0x15f/0xf80
[  866.217324][T11572]  ? trace_irq_disable+0x3b/0x140
[  866.217342][T11572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.217355][T11572] RIP: 0033:0x7fd231d9ce59
[  866.217368][T11572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  866.217378][T11572] RSP: 002b:00007fd232bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  866.217394][T11572] RAX: ffffffffffffffda RBX: 00007fd232015fa0 RCX: 00007fd231d9ce59
[  866.217405][T11572] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  866.217412][T11572] RBP: 00007fd231e32d6f R08: 0000000000000004 R09: 0000000000000000
[  866.217420][T11572] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  866.217428][T11572] R13: 00007fd232016038 R14: 00007fd232015fa0 R15: 00007ffe5afa9c58
[  866.217447][T11572]  </TASK>
[  866.217453][T11572] Mem-Info:
[  866.314552][T11572] active_anon:6331 inactive_anon:0 isolated_anon:0
[  866.314552][T11572]  active_file:13314 inactive_file:38627 isolated_file:0
[  866.314552][T11572]  unevictable:1768 dirty:52 writeback:0
[  866.314552][T11572]  slab_reclaimable:15433 slab_unreclaimable:262897
[  866.314552][T11572]  mapped:18557 shmem:2523 pagetables:1380
[  866.314552][T11572]  sec_pagetables:0 bounce:0
[  866.314552][T11572]  kernel_misc_reclaimable:0
[  866.314552][T11572]  free:930770 free_pcp:22418 free_cma:0
[  866.331170][T11572] Node 0 active_anon:11260kB inactive_anon:0kB active_file:18336kB inactive_file:131432kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43916kB dirty:96kB writeback:0kB shmem:5432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:2832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  866.341910][T11572] Node 1 active_anon:14064kB inactive_anon:0kB active_file:34920kB inactive_file:23076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30312kB dirty:112kB writeback:0kB shmem:4660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12104kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  866.356439][T11572] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  866.381488][T11572] lowmem_reserve[]: 0 1587 2117 2117 2117
[  866.386130][T11572] Node 0 DMA32 free:1037132kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1888kB inactive_anon:0kB active_file:10352kB inactive_file:160kB unevictable:0kB writepending:16kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:32680kB local_pcp:17948kB free_cma:0kB
[  866.409191][T11572] lowmem_reserve[]: 0 0 530 530 530
[  866.411160][T11572] Node 0 Normal free:18280kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9392kB inactive_anon:0kB active_file:7984kB inactive_file:131272kB unevictable:3536kB writepending:80kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:2288kB local_pcp:340kB free_cma:0kB
[  866.435710][T11572] lowmem_reserve[]: 0 0 0 0 0
[  866.440595][T11572] Node 1 Normal free:2652212kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14064kB inactive_anon:0kB active_file:34920kB inactive_file:23076kB unevictable:3536kB writepending:112kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:54888kB local_pcp:25644kB free_cma:0kB
[  866.456749][T11572] lowmem_reserve[]: 0 0 0 0 0
[  866.458708][T11572] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  866.462833][T11572] Node 0 DMA32: 1555*4kB (UME) 1568*8kB (UME) 1390*16kB (UME) 721*32kB (UME) 506*64kB (UME) 275*128kB (UME) 175*256kB (UM) 95*512kB (UME) 69*1024kB (UM) 64*2048kB (UME) 149*4096kB (UM) = 1037132kB
[  866.470371][T11572] Node 0 Normal: 373*4kB (UM) 360*8kB (UME) 205*16kB (UM) 75*32kB (UME) 25*64kB (UM) 7*128kB (M) 1*256kB (M) 7*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 18436kB
[  866.476745][T11590] lo speed is unknown, defaulting to 1000
[  866.477312][T11572] Node 1 Normal: 4427*4kB (UME) 2679*8kB (UM) 3115*16kB (UME) 116*32kB (ME) 1103*64kB (UM) 411*128kB (UME) 190*256kB (UM) 65*512kB (UM) 79*1024kB (UM) 62*2048kB (UME) 524*4096kB (UM) = 2651988kB
[  866.485369][T11572] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  866.488858][T11572] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  866.491831][T11572] 54464 total pagecache pages
[  866.493263][T11572] 0 pages in swap cache
[  866.495773][T11572] Free swap  = 124996kB
[  866.497189][T11572] Total swap = 124996kB
[  866.498957][T11572] 1834877 pages RAM
[  866.500162][T11572] 0 pages HighMem/MovableOnly
[  866.501666][T11572] 390269 pages reserved
[  866.502977][T11572] 0 pages cma reserved
[  866.552473][T11596] netlink: 'syz.3.10255': attribute type 13 has an invalid length.
[  866.558213][T11596] netlink: 'syz.3.10255': attribute type 17 has an invalid length.
[  866.648444][T11588] tipc: Resetting bearer <eth:xfrm0>
[  866.817321][T11596] 8021q: adding VLAN 0 to HW filter on device team0
[  866.835734][T11596] veth1_macvtap: left promiscuous mode
[  866.839004][T11596] veth0_macvtap: left promiscuous mode
[  866.841248][T11596] veth0_macvtap: entered promiscuous mode
[  866.843683][T11596] veth1_macvtap: entered promiscuous mode
[  866.851128][T11596] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  867.212361][T11632] dvmrp0: left allmulticast mode
[  867.393288][ T5692] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  867.438910][T11650] xt_CT: You must specify a L4 protocol and not use inversions on it
[  869.468206][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  870.278476][T11640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  870.342749][T11664] __nla_validate_parse: 7 callbacks suppressed
[  870.342765][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.460840][T11669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10272'.
[  870.472400][T11669] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  870.475421][T11669] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  870.478964][T11669] tipc: Resetting bearer <eth:syzkaller0>
[  870.490651][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.498903][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.509766][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.513846][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.517570][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.522431][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.525362][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.528600][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'.
[  870.568879][T11680] xt_policy: neither incoming nor outgoing policy selected
[  870.582528][T11680] bridge67: entered promiscuous mode
[  870.584473][T11680] bridge67: entered allmulticast mode
[  870.887548][T11712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  870.970895][T11719] netlink: 'syz.1.10286': attribute type 7 has an invalid length.
[  871.109179][T11730] openvswitch: netlink: Flow actions attr not present in new flow.
[  871.116000][T11730] openvswitch: netlink: Flow actions attr not present in new flow.
[  871.120386][T11730] openvswitch: netlink: Flow actions attr not present in new flow.
[  871.164659][T11737] netlink: 'syz.1.10292': attribute type 4 has an invalid length.
[  871.172087][T11737] netlink: 'syz.1.10292': attribute type 4 has an invalid length.
[  871.287344][T11748] bond112 (unregistering): Released all slaves
[  871.327371][T11754] ip6erspan0: entered allmulticast mode
[  871.333571][T11754] ip6erspan0: left allmulticast mode
[  871.351943][T11756] netlink: 'syz.3.10298': attribute type 1 has an invalid length.
[  871.523219][T11781] netlink: 'syz.1.10300': attribute type 6 has an invalid length.
[  871.528325][T11781] netlink: 'syz.1.10300': attribute type 5 has an invalid length.
[  871.794797][T11794] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  871.808612][T11793] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  871.810975][T11793] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  872.700004][T11810] netlink: 'syz.3.10309': attribute type 1 has an invalid length.
[  872.718713][T11810] 8021q: adding VLAN 0 to HW filter on device bond88
[  872.880325][T11818] 8021q: VLANs not supported on nlmon0
[  873.095446][T11839] bridge42: entered promiscuous mode
[  873.126221][T11845] netlink: 'syz.1.10322': attribute type 1 has an invalid length.
[  873.140237][T11845] 8021q: adding VLAN 0 to HW filter on device bond112
[  873.152076][T11845] bond112: (slave batadv3): Opening slave failed
[  873.263992][T11858] netlink: 'syz.3.10325': attribute type 1 has an invalid length.
[  873.268759][T11856] netlink: 'syz.1.10324': attribute type 21 has an invalid length.
[  873.281309][T11858] 8021q: adding VLAN 0 to HW filter on device bond89
[  873.301889][T11858] vlan11: entered allmulticast mode
[  873.303697][T11858] bond89: entered allmulticast mode
[  873.308061][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  874.058132][T11917] nbd: must specify at least one socket
[  874.060083][T11918] nbd: must specify at least one socket
[  874.161036][T11927] Unsupported ieee802154 address type: 0
[  874.615161][T11942] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  874.618744][T11942] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  874.684392][T11946] bond113: entered allmulticast mode
[  875.117127][T11976] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  875.165911][T11981] gre6: entered promiscuous mode
[  875.403956][T12015] __nla_validate_parse: 89 callbacks suppressed
[  875.403972][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10367'.
[  875.421700][T12015] 8021q: adding VLAN 0 to HW filter on device bond90
[  875.596014][T12041] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003
[  875.600693][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10372'.
[  875.625974][T12045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10373'.
[  875.632152][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10374'.
[  875.893761][T12071] block nbd1: NBD_DISCONNECT
[  875.926301][T12071] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  875.991047][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10385'.
[  875.994155][T12080] validate_nla: 4 callbacks suppressed
[  875.994164][T12080] netlink: 'syz.1.10384': attribute type 1 has an invalid length.
[  876.057371][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10387'.
[  876.235862][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10392'.
[  876.823649][T12167] tipc: Resetting bearer <eth:xfrm0>
[  876.984968][T12179] netlink: 'syz.1.10409': attribute type 2 has an invalid length.
[  877.076846][T12187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10410'.
[  877.082315][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10410'.
[  877.423252][T12193] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  877.426991][T12193] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  877.499502][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.956185][T12211] netlink: 'syz.3.10416': attribute type 8 has an invalid length.
[  877.980875][T12213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10417'.
[  878.072443][T12221] netlink: 'syz.3.10420': attribute type 10 has an invalid length.
[  878.078621][T12221] netlink: 'syz.3.10420': attribute type 10 has an invalid length.
[  878.633944][T12257] netlink: 'syz.3.10429': attribute type 1 has an invalid length.
[  878.817510][T12262] bridge0: port 1(vlan7) entered blocking state
[  878.819852][T12262] bridge0: port 1(vlan7) entered disabled state
[  878.821980][T12262] vlan7: entered allmulticast mode
[  878.823733][T12262] geneve0: entered allmulticast mode
[  878.892510][T12263] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  878.896053][T12263] netlink: 'syz.1.10430': attribute type 8 has an invalid length.
[  879.097228][T12265] lo speed is unknown, defaulting to 1000
[  879.391554][T12283] lo speed is unknown, defaulting to 1000
[  879.541819][T12292] x_tables: duplicate underflow at hook 1
[  879.704660][T12297] netlink: 'syz.1.10440': attribute type 8 has an invalid length.
[  880.244589][T12328] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  880.254881][T12328] nbd: must specify a size in bytes for the device
[  880.531734][T12348] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  880.702574][T12360] __nla_validate_parse: 9 callbacks suppressed
[  880.702643][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10459'.
[  880.707390][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10459'.
[  880.719491][T12360] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  880.721755][T12360] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  880.796313][T12362] netlink: 'syz.1.10460': attribute type 11 has an invalid length.
[  880.942539][T12369] netlink: 'syz.1.10462': attribute type 1 has an invalid length.
[  880.945109][T12369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10462'.
[  880.955164][T12369] netlink: 'syz.1.10462': attribute type 10 has an invalid length.
[  881.062576][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10464'.
[  881.176174][T12377] bond114: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  881.180893][T12377] bond114 (unregistering): Released all slaves
[  881.497494][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10468'.
[  881.698320][T12402] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  881.768323][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10476'.
[  881.798502][T12417] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20002
[  881.803338][T12418] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20002
[  881.825138][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10476'.
[  881.883994][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10480'.
[  882.044933][T12436] validate_nla: 1 callbacks suppressed
[  882.044945][T12436] netlink: 'syz.1.10482': attribute type 58 has an invalid length.
[  882.062296][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10484'.
[  882.064964][T12436] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  882.069535][T12436] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  882.127650][T12444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10486'.
[  882.345365][T12460] netlink: 'syz.0.10491': attribute type 1 has an invalid length.
[  882.427423][T12460] 8021q: adding VLAN 0 to HW filter on device bond119
[  882.435650][T12460] bond118: (slave bond119): making interface the new active one
[  882.443627][T12460] bond118: (slave bond119): Enslaving as an active interface with an up link
[  882.771625][T12489] 0{X: renamed from gretap0
[  882.776574][T12489] 0{X: entered allmulticast mode
[  882.780598][T12489] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  882.805407][T12489] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  882.808010][T12489] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  883.146993][T12514] syzkaller1: entered promiscuous mode
[  883.149618][T12514] syzkaller1: entered allmulticast mode
[  883.452346][T12528] openvswitch: netlink: ct_state flags ffffffff unsupported
[  883.504854][T12532] xt_l2tp: v2 tid > 0xffff: 37482740
[  883.958566][T12575] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  884.122032][T12598] netlink: 'syz.1.10523': attribute type 9 has an invalid length.
[  884.814267][T12654] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  884.821318][T12654] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  884.872686][T12659] netlink: 'syz.1.10541': attribute type 1 has an invalid length.
[  885.107205][T12677] netlink: 'syz.3.10546': attribute type 30 has an invalid length.
[  885.109996][T12679] netlink: 'syz.1.10547': attribute type 12 has an invalid length.
[  885.132777][T12677] bond92: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  885.136711][T12677] bond92 (unregistering): Released all slaves
[  885.298199][T12687] block nbd1: server does not support multiple connections per device.
[  885.304044][T12687] block nbd1: shutting down sockets
[  885.341875][T12683] 
[  885.342777][T12683] ======================================================
[  885.345251][T12683] WARNING: possible circular locking dependency detected
[  885.347800][T12683] syzkaller #0 Not tainted
[  885.349518][T12683] ------------------------------------------------------
[  885.352099][T12683] syz.0.10548/12683 is trying to acquire lock:
[  885.354481][T12683] ffff888113625ce0 (&resv_map->rw_sema){++++}-{4:4}, at: hugetlb_fault+0x4c2/0x1510
[  885.358311][T12683] 
[  885.358311][T12683] but task is already holding lock:
[  885.361196][T12683] ffff888103a847d0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  885.365174][T12683] 
[  885.365174][T12683] which lock already depends on the new lock.
[  885.365174][T12683] 
[  885.369082][T12683] 
[  885.369082][T12683] the existing dependency chain (in reverse order) is:
[  885.372182][T12683] 
[  885.372182][T12683] -> #9 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  885.375472][T12683]        __mutex_lock+0x1a3/0x1550
[  885.377563][T12683]        hugetlb_fault+0x3d8/0x1510
[  885.379639][T12683]        handle_mm_fault+0x2009/0x3170
[  885.381850][T12683]        __get_user_pages+0x1683/0x2720
[  885.384069][T12683]        populate_vma_page_range+0x2be/0x3c0
[  885.386462][T12683]        __mm_populate+0x25f/0x390
[  885.388533][T12683]        vm_mmap_pgoff+0x3aa/0x4f0
[  885.390160][T12683]        ksys_mmap_pgoff+0x586/0x760
[  885.392116][T12683]        do_syscall_64+0x15f/0xf80
[  885.393781][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.395751][T12683] 
[  885.395751][T12683] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  885.398601][T12683]        __might_fault+0xcb/0x130
[  885.400669][T12683]        _copy_from_user+0x28/0xb0
[  885.402771][T12683]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  885.405345][T12683]        ip_generic_getfrag+0x149/0x2d0
[  885.407579][T12683]        __ip6_append_data+0x39cd/0x3f60
[  885.409900][T12683]        ip6_append_data+0x10f/0x280
[  885.412085][T12683]        rawv6_sendmsg+0x12d3/0x18e0
[  885.414220][T12683]        ____sys_sendmsg+0x80a/0x9f0
[  885.416409][T12683]        ___sys_sendmsg+0x2a5/0x360
[  885.418569][T12683]        __x64_sys_sendmsg+0x1bd/0x2a0
[  885.420768][T12683]        do_syscall_64+0x15f/0xf80
[  885.422884][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.425424][T12683] 
[  885.425424][T12683] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  885.428515][T12683]        lock_sock_nested+0x41/0x100
[  885.430702][T12683]        inet_shutdown+0x6a/0x390
[  885.432735][T12683]        nbd_mark_nsock_dead+0x2e9/0x560
[  885.435007][T12683]        sock_shutdown+0x15e/0x260
[  885.437056][T12683]        nbd_clear_sock+0x24/0x170
[  885.438971][T12683]        nbd_config_put+0x2dd/0x580
[  885.441091][T12683]        nbd_genl_connect+0x19d5/0x1cf0
[  885.443355][T12683]        genl_family_rcv_msg_doit+0x22a/0x330
[  885.445847][T12683]        genl_rcv_msg+0x61c/0x7a0
[  885.447568][T12683]        netlink_rcv_skb+0x232/0x4b0
[  885.449226][T12683]        genl_rcv+0x28/0x40
[  885.450685][T12683]        netlink_unicast+0x75c/0x8e0
[  885.452346][T12683]        netlink_sendmsg+0x813/0xb40
[  885.454030][T12683]        ____sys_sendmsg+0x972/0x9f0
[  885.455779][T12683]        ___sys_sendmsg+0x2a5/0x360
[  885.457539][T12683]        __x64_sys_sendmsg+0x1bd/0x2a0
[  885.459319][T12683]        do_syscall_64+0x15f/0xf80
[  885.460938][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.462996][T12683] 
[  885.462996][T12683] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  885.465593][T12683]        __mutex_lock+0x1a3/0x1550
[  885.467601][T12683]        nbd_queue_rq+0x37b/0x1100
[  885.469233][T12683]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  885.471720][T12683]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  885.474518][T12683]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  885.477172][T12683]        blk_mq_run_hw_queue+0x348/0x4f0
[  885.479420][T12683]        blk_mq_dispatch_list+0xd16/0xe10
[  885.481488][T12683]        blk_mq_flush_plug_list+0x48d/0x570
[  885.483677][T12683]        __blk_flush_plug+0x3ed/0x4d0
[  885.485660][T12683]        __submit_bio+0x28d/0x580
[  885.487470][T12683]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  885.489396][T12683]        block_read_full_folio+0x7b7/0x830
[  885.491191][T12683]        filemap_read_folio+0x137/0x3b0
[  885.492912][T12683]        do_read_cache_folio+0x358/0x590
[  885.494721][T12683]        read_part_sector+0xb6/0x2b0
[  885.496684][T12683]        adfspart_check_ICS+0xb1/0x960
[  885.498743][T12683]        bdev_disk_changed+0x817/0x1770
[  885.500805][T12683]        blkdev_get_whole+0x380/0x510
[  885.502855][T12683]        bdev_open+0x31e/0xd30
[  885.504713][T12683]        blkdev_open+0x470/0x610
[  885.506646][T12683]        do_dentry_open+0x785/0x14e0
[  885.508717][T12683]        vfs_open+0x3b/0x340
[  885.510534][T12683]        path_openat+0x2e08/0x3860
[  885.512530][T12683]        do_file_open+0x23e/0x4a0
[  885.514463][T12683]        do_sys_openat2+0x113/0x200
[  885.516465][T12683]        __x64_sys_openat+0x138/0x170
[  885.518532][T12683]        do_syscall_64+0x15f/0xf80
[  885.520485][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.522914][T12683] 
[  885.522914][T12683] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  885.525687][T12683]        __mutex_lock+0x1a3/0x1550
[  885.527631][T12683]        nbd_queue_rq+0xc6/0x1100
[  885.529531][T12683]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  885.531930][T12683]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  885.534519][T12683]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  885.536839][T12683]        blk_mq_run_hw_queue+0x348/0x4f0
[  885.538832][T12683]        blk_mq_dispatch_list+0xd16/0xe10
[  885.540791][T12683]        blk_mq_flush_plug_list+0x48d/0x570
[  885.543033][T12683]        __blk_flush_plug+0x3ed/0x4d0
[  885.545061][T12683]        __submit_bio+0x28d/0x580
[  885.546973][T12683]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  885.549270][T12683]        block_read_full_folio+0x7b7/0x830
[  885.551489][T12683]        filemap_read_folio+0x137/0x3b0
[  885.553565][T12683]        do_read_cache_folio+0x358/0x590
[  885.555466][T12683]        read_part_sector+0xb6/0x2b0
[  885.557299][T12683]        adfspart_check_ICS+0xb1/0x960
[  885.559280][T12683]        bdev_disk_changed+0x817/0x1770
[  885.561434][T12683]        blkdev_get_whole+0x380/0x510
[  885.563542][T12683]        bdev_open+0x31e/0xd30
[  885.565410][T12683]        blkdev_open+0x470/0x610
[  885.567326][T12683]        do_dentry_open+0x785/0x14e0
[  885.569358][T12683]        vfs_open+0x3b/0x340
[  885.571056][T12683]        path_openat+0x2e08/0x3860
[  885.572945][T12683]        do_file_open+0x23e/0x4a0
[  885.574588][T12683]        do_sys_openat2+0x113/0x200
[  885.576274][T12683]        __x64_sys_openat+0x138/0x170
[  885.578210][T12683]        do_syscall_64+0x15f/0xf80
[  885.579942][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.582042][T12683] 
[  885.582042][T12683] -> #4 (set->srcu){.+.+}-{0:0}:
[  885.584348][T12683]        __synchronize_srcu+0xca/0x300
[  885.586114][T12683]        elevator_switch+0x1e8/0x7a0
[  885.587919][T12683]        elevator_change+0x2cc/0x450
[  885.589579][T12683]        elevator_set_default+0x36c/0x430
[  885.591369][T12683]        blk_register_queue+0x3e9/0x4e0
[  885.593192][T12683]        __add_disk+0x677/0xd50
[  885.594771][T12683]        add_disk_fwnode+0xfb/0x480
[  885.596504][T12683]        nbd_dev_add+0x72c/0xb50
[  885.598080][T12683]        nbd_init+0x168/0x1f0
[  885.599600][T12683]        do_one_initcall+0x250/0x870
[  885.601243][T12683]        do_initcall_level+0x104/0x190
[  885.602993][T12683]        do_initcalls+0x59/0xa0
[  885.604609][T12683]        kernel_init_freeable+0x2a6/0x3e0
[  885.606392][T12683]        kernel_init+0x1d/0x1d0
[  885.608110][T12683]        ret_from_fork+0x514/0xb70
[  885.609835][T12683]        ret_from_fork_asm+0x1a/0x30
[  885.611467][T12683] 
[  885.611467][T12683] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  885.613974][T12683]        __mutex_lock+0x1a3/0x1550
[  885.615611][T12683]        elevator_change+0x1b3/0x450
[  885.617540][T12683]        elevator_set_none+0xb5/0x140
[  885.619600][T12683]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  885.621616][T12683]        nbd_start_device+0x17f/0xb10
[  885.623314][T12683]        nbd_genl_connect+0x165b/0x1cf0
[  885.625011][T12683]        genl_family_rcv_msg_doit+0x22a/0x330
[  885.627064][T12683]        genl_rcv_msg+0x61c/0x7a0
[  885.629049][T12683]        netlink_rcv_skb+0x232/0x4b0
[  885.630932][T12683]        genl_rcv+0x28/0x40
[  885.632412][T12683]        netlink_unicast+0x75c/0x8e0
[  885.634156][T12683]        netlink_sendmsg+0x813/0xb40
[  885.635905][T12683]        ____sys_sendmsg+0x972/0x9f0
[  885.637674][T12683]        ___sys_sendmsg+0x2a5/0x360
[  885.639390][T12683]        __x64_sys_sendmsg+0x1bd/0x2a0
[  885.641286][T12683]        do_syscall_64+0x15f/0xf80
[  885.643080][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.645292][T12683] 
[  885.645292][T12683] -> #2 (&q->q_usage_counter(io)#71){++++}-{0:0}:
[  885.648309][T12683]        blk_alloc_queue+0x546/0x680
[  885.650118][T12683]        __blk_mq_alloc_disk+0x197/0x390
[  885.651985][T12683]        nbd_dev_add+0x499/0xb50
[  885.653599][T12683]        nbd_genl_connect+0x962/0x1cf0
[  885.655489][T12683]        genl_family_rcv_msg_doit+0x22a/0x330
[  885.657406][T12683]        genl_rcv_msg+0x61c/0x7a0
[  885.659081][T12683]        netlink_rcv_skb+0x232/0x4b0
[  885.660786][T12683]        genl_rcv+0x28/0x40
[  885.662294][T12683]        netlink_unicast+0x75c/0x8e0
[  885.664056][T12683]        netlink_sendmsg+0x813/0xb40
[  885.665824][T12683]        ____sys_sendmsg+0x972/0x9f0
[  885.667541][T12683]        ___sys_sendmsg+0x2a5/0x360
[  885.669291][T12683]        __x64_sys_sendmsg+0x1bd/0x2a0
[  885.671060][T12683]        do_syscall_64+0x15f/0xf80
[  885.672742][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.674876][T12683] 
[  885.674876][T12683] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  885.677198][T12683]        fs_reclaim_acquire+0x71/0x100
[  885.679070][T12683]        kmem_cache_alloc_noprof+0x40/0x650
[  885.681004][T12683]        __anon_vma_prepare+0xcb/0x4a0
[  885.682749][T12683]        __vmf_anon_prepare+0xe1/0x1b0
[  885.684566][T12683]        hugetlb_no_page+0x399/0x2100
[  885.686291][T12683]        hugetlb_fault+0x747/0x1510
[  885.687998][T12683]        handle_mm_fault+0x2009/0x3170
[  885.689733][T12683]        __get_user_pages+0x1683/0x2720
[  885.691649][T12683]        populate_vma_page_range+0x2be/0x3c0
[  885.693570][T12683]        __mm_populate+0x25f/0x390
[  885.695229][T12683]        vm_mmap_pgoff+0x3aa/0x4f0
[  885.696938][T12683]        ksys_mmap_pgoff+0x586/0x760
[  885.698666][T12683]        do_syscall_64+0x15f/0xf80
[  885.700210][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.702228][T12683] 
[  885.702228][T12683] -> #0 (&resv_map->rw_sema){++++}-{4:4}:
[  885.705124][T12683]        __lock_acquire+0x15a5/0x2cf0
[  885.707190][T12683]        lock_acquire+0x106/0x350
[  885.708920][T12683]        down_read+0x47/0x2e0
[  885.710621][T12683]        hugetlb_fault+0x4c2/0x1510
[  885.712247][T12683]        handle_mm_fault+0x2009/0x3170
[  885.714081][T12683]        do_user_addr_fault+0x75b/0x1340
[  885.715828][T12683]        exc_page_fault+0x6a/0xc0
[  885.717348][T12683]        asm_exc_page_fault+0x26/0x30
[  885.719029][T12683]        rep_movs_alternative+0x75/0x90
[  885.720729][T12683]        _copy_to_iter+0x255/0x17d0
[  885.722293][T12683]        __skb_datagram_iter+0xf8/0x980
[  885.724039][T12683]        skb_copy_datagram_iter+0xb5/0x240
[  885.725893][T12683]        tipc_recvstream+0x72d/0xe70
[  885.727544][T12683]        sock_recvmsg+0x172/0x1b0
[  885.729343][T12683]        ____sys_recvmsg+0x1e6/0x4a0
[  885.730986][T12683]        ___sys_recvmsg+0x215/0x590
[  885.732587][T12683]        __x64_sys_recvmsg+0x1ba/0x2a0
[  885.734245][T12683]        do_syscall_64+0x15f/0xf80
[  885.735796][T12683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.737746][T12683] 
[  885.737746][T12683] other info that might help us debug this:
[  885.737746][T12683] 
[  885.740847][T12683] Chain exists of:
[  885.740847][T12683]   &resv_map->rw_sema --> &mm->mmap_lock --> &hugetlb_fault_mutex_table[i]
[  885.740847][T12683] 
[  885.745168][T12683]  Possible unsafe locking scenario:
[  885.745168][T12683] 
[  885.747389][T12683]        CPU0                    CPU1
[  885.749035][T12683]        ----                    ----
[  885.750723][T12683]   lock(&hugetlb_fault_mutex_table[i]);
[  885.752465][T12683]                                lock(&mm->mmap_lock);
[  885.754534][T12683]                                lock(&hugetlb_fault_mutex_table[i]);
[  885.756981][T12683]   rlock(&resv_map->rw_sema);
[  885.758431][T12683] 
[  885.758431][T12683]  *** DEADLOCK ***
[  885.758431][T12683] 
[  885.760890][T12683] 3 locks held by syz.0.10548/12683:
[  885.762517][T12683]  #0: ffff8880255318e0 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_wait_for_rcvmsg+0x345/0x640
[  885.765572][T12683]  #1: ffff888114f88338 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[  885.768667][T12683]  #2: ffff888103a847d0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  885.771935][T12683] 
[  885.771935][T12683] stack backtrace:
[  885.773750][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.0.10548 Not tainted syzkaller #0 PREEMPT(full) 
[  885.773760][T12683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  885.773767][T12683] Call Trace:
[  885.773773][T12683]  <TASK>
[  885.773779][T12683]  dump_stack_lvl+0xe8/0x150
[  885.773791][T12683]  print_circular_bug+0x2e1/0x300
[  885.773804][T12683]  check_noncircular+0x12e/0x150
[  885.773815][T12683]  __lock_acquire+0x15a5/0x2cf0
[  885.773823][T12683]  ? trace_contention_end+0x3d/0x140
[  885.773836][T12683]  ? __mutex_lock+0x319/0x1550
[  885.773844][T12683]  ? trace_hrtimer_start+0x82/0x200
[  885.773858][T12683]  ? hugetlb_fault+0x4c2/0x1510
[  885.773865][T12683]  lock_acquire+0x106/0x350
[  885.773873][T12683]  ? hugetlb_fault+0x4c2/0x1510
[  885.773881][T12683]  down_read+0x47/0x2e0
[  885.773890][T12683]  ? hugetlb_fault+0x4c2/0x1510
[  885.773896][T12683]  ? hugetlb_fault+0x4b2/0x1510
[  885.773903][T12683]  hugetlb_fault+0x4c2/0x1510
[  885.773911][T12683]  ? __schedule+0x1837/0x5740
[  885.773922][T12683]  ? __pfx_hugetlb_fault+0x10/0x10
[  885.773932][T12683]  handle_mm_fault+0x2009/0x3170
[  885.773944][T12683]  ? __pfx_mt_find+0x10/0x10
[  885.773952][T12683]  ? handle_mm_fault+0xee/0x3170
[  885.773961][T12683]  ? __pfx_handle_mm_fault+0x10/0x10
[  885.773970][T12683]  ? find_vma+0xed/0x160
[  885.773979][T12683]  ? __pfx_find_vma+0x10/0x10
[  885.773987][T12683]  ? down_read_killable+0x1bb/0x340
[  885.773995][T12683]  ? __pfx___up_read+0x10/0x10
[  885.774005][T12683]  ? lock_mm_and_find_vma+0xa7/0x340
[  885.774016][T12683]  do_user_addr_fault+0x75b/0x1340
[  885.774027][T12683]  exc_page_fault+0x6a/0xc0
[  885.774038][T12683]  asm_exc_page_fault+0x26/0x30
[  885.774046][T12683] RIP: 0010:rep_movs_alternative+0x75/0x90
[  885.774057][T12683] Code: 05 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 c1 48 89 c8 48 c1 e9 03 83 e0 07 <f3> 48 a5 89 c1 85 c9 75 91 e9 bd 54 04 00 48 8d 0c c8 eb 86 cc cc
[  885.774065][T12683] RSP: 0018:ffffc90006fb7698 EFLAGS: 00010246
[  885.774072][T12683] RAX: 0000000000000000 RBX: ffff8881827600e8 RCX: 00000000000011b8
[  885.774077][T12683] RDX: 0000000000000000 RSI: ffff8881827674f8 RDI: 00002000004c0000
[  885.774083][T12683] RBP: ffffc90006fb7808 R08: ffff8881827702b7 R09: 1ffff110304ee056
[  885.774088][T12683] R10: dffffc0000000000 R11: ffffed10304ee057 R12: 1ffff92000df6fbf
[  885.774094][T12683] R13: 00002000004b8bf0 R14: ffffc90006fb7e08 R15: 00000000000101d0
[  885.774105][T12683]  _copy_to_iter+0x255/0x17d0
[  885.774117][T12683]  ? rcu_is_watching+0x15/0xb0
[  885.774128][T12683]  ? __pfx__copy_to_iter+0x10/0x10
[  885.774138][T12683]  ? tipc_wait_for_rcvmsg+0x4f6/0x640
[  885.774151][T12683]  __skb_datagram_iter+0xf8/0x980
[  885.774160][T12683]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  885.774167][T12683]  ? __pfx_woken_wake_function+0x10/0x10
[  885.774175][T12683]  skb_copy_datagram_iter+0xb5/0x240
[  885.774183][T12683]  tipc_recvstream+0x72d/0xe70
[  885.774196][T12683]  ? __pfx_tipc_recvstream+0x10/0x10
[  885.774206][T12683]  sock_recvmsg+0x172/0x1b0
[  885.774216][T12683]  ____sys_recvmsg+0x1e6/0x4a0
[  885.774227][T12683]  ? __sys_socketpair+0x386/0x560
[  885.774237][T12683]  ? __pfx_____sys_recvmsg+0x10/0x10
[  885.774250][T12683]  ? import_iovec+0x73/0xa0
[  885.774261][T12683]  ___sys_recvmsg+0x215/0x590
[  885.774273][T12683]  ? __pfx____sys_recvmsg+0x10/0x10
[  885.774284][T12683]  ? __fget_files+0x2a/0x420
[  885.774296][T12683]  ? __fget_files+0x3a0/0x420
[  885.774306][T12683]  __x64_sys_recvmsg+0x1ba/0x2a0
[  885.774318][T12683]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  885.774330][T12683]  ? rcu_is_watching+0x15/0xb0
[  885.774340][T12683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.774347][T12683]  do_syscall_64+0x15f/0xf80
[  885.774354][T12683]  ? trace_irq_disable+0x3b/0x140
[  885.774367][T12683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.774374][T12683] RIP: 0033:0x7f136179ce59
[  885.774383][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.774389][T12683] RSP: 002b:00007f13625e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  885.774397][T12683] RAX: ffffffffffffffda RBX: 00007f1361a15fa0 RCX: 00007f136179ce59
[  885.774402][T12683] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006
[  885.774407][T12683] RBP: 00007f1361832d6f R08: 0000000000000000 R09: 0000000000000000
[  885.774412][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  885.774417][T12683] R13: 00007f1361a16038 R14: 00007f1361a15fa0 R15: 00007fff120a4cb8
[  885.774429][T12683]  </TASK>
