last executing test programs:

625.394129ms ago: executing program 1 (id=7508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40050}, 0x0)
connect$tipc(r6, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) (async)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40050}, 0x0) (async)
connect$tipc(r6, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)

624.218305ms ago: executing program 2 (id=7509):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='.\x00\x00'], 0x20) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
accept4$ax25(r3, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x6}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a0102"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r8, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x1000}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (async)
sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0)

531.916069ms ago: executing program 2 (id=7510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

531.462482ms ago: executing program 2 (id=7511):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x1, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r1, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x4040)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'rose0\x00'})
sendfile(r8, r7, 0x0, 0x10000)
write$ppp(r8, &(0x7f0000000400)="387e1b47fbada2e7a296aa47a5c9c28915309b6ec03d6f2e716065449339387d73323f21149952acee8e41f05fe532d19a2a1cbdb322e1af0b6ca8a28d364afd6081c1152d4ec3c81fc92cafc0e4b0f99f8e2c2a543fb0f54f2693fb581865402ecf19182f3d51da9c29b9decff6f530c46d0af2eea5e93fbecb3b45a51c1bc9d977a1a27b21797682cdecc7df", 0x8d)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xd1)
socket$netlink(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="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"], 0x19cc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)

528.1231ms ago: executing program 1 (id=7512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)

399.002826ms ago: executing program 0 (id=7513):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xc570, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="98010000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ffff06000000000000000000"], 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'flower\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x63cb6b84574fa0f)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan4\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3668707775042640}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x2b8, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x15c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdf727e5}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c880)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

397.737712ms ago: executing program 1 (id=7514):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1341, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_emit_ethernet(0x4b, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@generic={0x60, "fbfcdac4aaa3bb496d02cf4fb35a06b42022647d545a45c44b8206df9d25d40723024286d1bdf304cc98eaaa99d0f39d68765851d7f6e1db4276e1d281"}}}, &(0x7f00000001c0)={0x0, 0x1, [0xe97, 0x79, 0x3a3, 0x563]}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x800) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

251.202696ms ago: executing program 0 (id=7515):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

247.277203ms ago: executing program 1 (id=7516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0)

155.856741ms ago: executing program 0 (id=7517):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0xa020480)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000ad734d0f5ef386bcfc1eeb1eeb455d88000040000000040000000000000000000509030000000000c2f93c430001050000000800000001000000000000070000000800000000dd"], 0x0, 0x5c}, 0x20)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
shutdown(r4, 0x1)
recvmmsg(r4, &(0x7f00000052c0)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/82, 0x5f}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000ec0)}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000740)=""/203, 0xcb}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000001080)=""/204, 0xc9}], 0x8, &(0x7f0000000a40)=""/203, 0xcb}, 0x5}, {{&(0x7f0000000680)=@tipc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1, &(0x7f0000000b40)=""/191, 0xffffffffffffffea}, 0xffffffff}, {{&(0x7f0000000c00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005600)=[{&(0x7f0000000c80)=""/112, 0x70}, {&(0x7f0000004a40)=""/74, 0x4a}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001840)=""/127, 0x7f}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/244, 0xf4}, {&(0x7f0000004bc0)=""/227, 0xe3}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000005500)=""/218, 0xda}], 0xa, &(0x7f0000000f00)=""/195, 0xc3}, 0x6}, {{&(0x7f0000001000)=@ieee802154, 0x80, &(0x7f00000013c0)=[{&(0x7f0000004e00)=""/244, 0xf4}, {&(0x7f0000001180)=""/205, 0xcd}, {&(0x7f0000001280)=""/76, 0x4c}, {&(0x7f0000001300)=""/186, 0xba}], 0x4, &(0x7f0000001400)=""/211, 0xd3}, 0x33}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/122, 0x7a}], 0x1, &(0x7f00000015c0)=""/213, 0xd5}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000001740)=""/101, 0x65}, {&(0x7f0000000940)=""/230, 0xe0}, {&(0x7f00000056c0)=""/133, 0x85}], 0x4, &(0x7f0000004900)=""/131, 0x83}, 0x28dc0000}, {{&(0x7f00000049c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004c80)}, 0x8}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000005780)=""/242, 0xe3}, {&(0x7f0000004f00)=""/57, 0x39}, {&(0x7f0000004f40)=""/224, 0xe0}, {&(0x7f0000005040)=""/62, 0x3e}, {&(0x7f00000050c0)=""/175, 0xaf}, {&(0x7f0000000e80)=""/29, 0x1d}, {&(0x7f0000000280)=""/22, 0x16}], 0x8, &(0x7f0000000d80)=""/9, 0x9}, 0x40}], 0x8, 0x40000102, &(0x7f00000054c0)={0x77359400}) (async)
recvmmsg(r4, &(0x7f00000052c0)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/82, 0x5f}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000ec0)}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000740)=""/203, 0xcb}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000001080)=""/204, 0xc9}], 0x8, &(0x7f0000000a40)=""/203, 0xcb}, 0x5}, {{&(0x7f0000000680)=@tipc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1, &(0x7f0000000b40)=""/191, 0xffffffffffffffea}, 0xffffffff}, {{&(0x7f0000000c00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005600)=[{&(0x7f0000000c80)=""/112, 0x70}, {&(0x7f0000004a40)=""/74, 0x4a}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001840)=""/127, 0x7f}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/244, 0xf4}, {&(0x7f0000004bc0)=""/227, 0xe3}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000005500)=""/218, 0xda}], 0xa, &(0x7f0000000f00)=""/195, 0xc3}, 0x6}, {{&(0x7f0000001000)=@ieee802154, 0x80, &(0x7f00000013c0)=[{&(0x7f0000004e00)=""/244, 0xf4}, {&(0x7f0000001180)=""/205, 0xcd}, {&(0x7f0000001280)=""/76, 0x4c}, {&(0x7f0000001300)=""/186, 0xba}], 0x4, &(0x7f0000001400)=""/211, 0xd3}, 0x33}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/122, 0x7a}], 0x1, &(0x7f00000015c0)=""/213, 0xd5}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000001740)=""/101, 0x65}, {&(0x7f0000000940)=""/230, 0xe0}, {&(0x7f00000056c0)=""/133, 0x85}], 0x4, &(0x7f0000004900)=""/131, 0x83}, 0x28dc0000}, {{&(0x7f00000049c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004c80)}, 0x8}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000005780)=""/242, 0xe3}, {&(0x7f0000004f00)=""/57, 0x39}, {&(0x7f0000004f40)=""/224, 0xe0}, {&(0x7f0000005040)=""/62, 0x3e}, {&(0x7f00000050c0)=""/175, 0xaf}, {&(0x7f0000000e80)=""/29, 0x1d}, {&(0x7f0000000280)=""/22, 0x16}], 0x8, &(0x7f0000000d80)=""/9, 0x9}, 0x40}], 0x8, 0x40000102, &(0x7f00000054c0)={0x77359400})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2) (async)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000003008001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x36) (async)
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000003008001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x36)
socket$nl_route(0x10, 0x3, 0x0)

155.181494ms ago: executing program 2 (id=7518):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
tee(r2, r3, 0x8, 0xd)
getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000001300))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
unshare(0x22020400)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="02000000000000006a96a310ea2435da1f94adf97de6746486d4967b3e37adcf335a9ce4657317c9225e064fb698362ccf609cfa0314061d3080d4545100b75011c814df5758e30db0d0f757eb2311ea1039b6a12e07c7b7f025f023d6f052580d146f11bbcc3d8f5fbcbf73d8a10c3b130e8f1e95556c33d114c56babecc9acbd4da4c11a351850a59b6c32686b11b468c0d259aa25d4c151ee5d87025a1024815d7edfd46c0e5f0600"/181, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x3, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x44884)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}]}}]}, 0x40}}, 0x2000c800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

153.435867ms ago: executing program 1 (id=7519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x10) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
epoll_pwait(r7, &(0x7f0000000180), 0x0, 0x5, &(0x7f0000000200)={[0x7]}, 0x8)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0xfffffe7d, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x88, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff3, 0xffff}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c}]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0xe, 0x20, [0xff000000, 0xffffff00, 0xffffffff]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)

61.707096ms ago: executing program 0 (id=7520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x40002)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r7=>0x0}, 0x0)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x0, r6}, 0x5)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r11, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

60.83924ms ago: executing program 2 (id=7521):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38)
r1 = socket(0x11, 0x3, 0x8004)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$kcm(0x29, 0x2, 0x0) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x41) (async)
recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x41)
socket(0x11, 0x3, 0x0) (async)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ebd4e0b28aa00001400000018000180140002006e657464657673696d3000000000000005000c0001"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r10) (async)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00000000000000000a0000040900010073797a3100000000080005400000000209005395147095b9a335000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2741400000011000115255990b99679a94ffa39e1b48d6fd312d85a8d003f721107970a86abeea0da7141c84a58793366726f6b9376a14b8e1520743de6ae7d3eb60edec118f1b4466cbae37fd000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000000c000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x2040)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

60.05695ms ago: executing program 1 (id=7522):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}, @TCA_FLOWER_KEY_UDP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x49, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}, {@multicast1}, {@rand_addr=0x64010101, 0xe0}, {@multicast2}, {@multicast2, 0x7fff}, {@empty, 0x2}, {@broadcast, 0x5}]}, @cipso={0x86, 0x9, 0x1, [{0x0, 0x3, '1'}]}, @generic={0x89, 0x9, "969db69734edba"}, @timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x1, [{@multicast2, 0x9}, {@broadcast, 0x64}]}, @generic={0x83, 0x8, "c86a8f7375fd"}, @generic={0x94, 0x6, "596fd017"}, @cipso={0x86, 0x31, 0x0, [{0x2, 0x4, "98e7"}, {0x1, 0x11, "2574e50a195c9d3e8758674dac6006"}, {0x1, 0xd, "5a01aa5c3117059e49fe97"}, {0x5, 0x9, "bdff1fb0629c41"}]}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0xf, [0x1, 0x7, 0x6]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @generic={0x86, 0x11, "c7ae829519dd26d1574d59714b133a"}, @timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@rand_addr=0x64010101, 0xb3}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp={0x44, 0xc, 0x69, 0x0, 0x9, [0x1c, 0xed6e91]}, @timestamp={0x44, 0x10, 0x19, 0x0, 0x3, [0x5, 0x10001, 0x9]}, @noop, @ssrr={0x89, 0xf, 0x5, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x17, 0xb272a7d47a343dd2, [{0x7, 0x3, "df"}, {0x5, 0xe, "13ca87f61255fca89941d8f2"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x68fcc879}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x48, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xdd1}, {@local, 0xfffffff8}]}, @ssrr={0x89, 0x1b, 0x43, [@multicast1, @multicast2, @remote, @multicast1, @private=0xa010102, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x248}, 0xe3c39daed8b640c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040))
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.342946ms ago: executing program 0 (id=7523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x1, 0x10002, 0x5}, {0xe, 0xf7}]}]}, {0x0, [0x61, 0x5f, 0x30, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x51, 0xff9, 0x5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711837000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x40800)
ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500"})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6f, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

582.348µs ago: executing program 0 (id=7524):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9c}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xfffb}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x68}}, 0x4000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='DV', 0x2}], 0x1}, 0x4048841)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) (async)
recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0x2000) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x2, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @ct={{}, @void}}, @NFTA_SET_DESC={0x3, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@empty}}]}, 0x80}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 2 (id=7525):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0xc800)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
bind$ax25(r2, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast]}, 0x48)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004004)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x1})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)
bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

kernel console output (not intermixed with test programs):

sing attributes in process `syz.2.4560'.
[  410.416183][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'.
[  410.621096][T22144] macsec2: entered allmulticast mode
[  410.623066][T22144] macsec0: entered allmulticast mode
[  410.788384][T22159] A٨ speed is unknown, defaulting to 1000
[  411.355010][T22173] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  411.360077][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4571'.
[  411.371600][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4571'.
[  411.435659][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4573'.
[  411.481759][T22181] netlink: 'syz.2.4574': attribute type 1 has an invalid length.
[  411.757078][T22197] netlink: 'syz.0.4581': attribute type 3 has an invalid length.
[  411.859953][T22208] netlink: 'syz.2.4585': attribute type 1 has an invalid length.
[  411.880020][T22208] bond12: entered promiscuous mode
[  411.882012][T22208] bond12: entered allmulticast mode
[  411.884162][T22208] 8021q: adding VLAN 0 to HW filter on device bond12
[  411.896536][T22208] bridge23: entered promiscuous mode
[  411.898897][T22208] bridge23: entered allmulticast mode
[  411.901147][T22208] bond12: (slave bridge23): Enslaving as a backup interface with an up link
[  411.921237][T22208] bridge24: entered promiscuous mode
[  411.923077][T22208] bridge24: entered allmulticast mode
[  411.925118][T22208] bond12: (slave bridge24): Enslaving as a backup interface with a down link
[  411.928995][T22211] syzkaller1: entered promiscuous mode
[  411.931292][T22211] syzkaller1: entered allmulticast mode
[  412.831287][T22229] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  413.141988][T18512] net_ratelimit: 38 callbacks suppressed
[  413.142000][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  413.187793][T22249] bond23: ARP target 9.0.0.0 is already present
[  413.189984][T22249] bond23: option arp_ip_target: invalid value (9)
[  413.193075][T22249] bond23 (unregistering): Released all slaves
[  413.317635][T22054] bond7: (slave bridge14): failed to get link speed/duplex
[  413.416885][T22274] netlink: 'syz.1.4608': attribute type 2 has an invalid length.
[  413.427257][ T5836] bond7: (slave bridge14): failed to get link speed/duplex
[  413.489023][T22284] openvswitch: netlink: IP tunnel dst address not specified
[  413.538410][ T5836] bond7: (slave bridge14): failed to get link speed/duplex
[  413.672022][T22297] syzkaller0: entered promiscuous mode
[  413.674371][T22297] syzkaller0: entered allmulticast mode
[  413.687269][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  414.677338][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  414.788469][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  414.867981][T22321] __nla_validate_parse: 14 callbacks suppressed
[  414.867996][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4622'.
[  414.897723][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  414.944753][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'.
[  415.007648][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  415.083816][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'.
[  415.264029][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4629'.
[  415.272938][T22340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  415.275400][T22340] IPv6: NLM_F_CREATE should be set when creating new route
[  415.289092][T22340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4629'.
[  415.372826][T22346] netlink: 'syz.2.4631': attribute type 1 has an invalid length.
[  415.400803][T22346] bond13: entered promiscuous mode
[  415.402927][T22346] bond13: entered allmulticast mode
[  415.405418][T22346] 8021q: adding VLAN 0 to HW filter on device bond13
[  415.424693][T22346] bridge26: entered promiscuous mode
[  415.427473][T22346] bridge26: entered allmulticast mode
[  415.430289][T22346] bond13: (slave bridge26): Enslaving as a backup interface with an up link
[  415.452802][T22346] bridge27: entered promiscuous mode
[  415.455155][T22346] bridge27: entered allmulticast mode
[  415.458957][T22346] bond13: (slave bridge27): Enslaving as a backup interface with a down link
[  415.511875][T22349] netlink: 'syz.2.4632': attribute type 1 has an invalid length.
[  415.540862][T22349] bond14: entered promiscuous mode
[  415.543284][T22349] bond14: entered allmulticast mode
[  415.545960][T22349] 8021q: adding VLAN 0 to HW filter on device bond14
[  415.561510][T22349] bridge28: entered promiscuous mode
[  415.563778][T22349] bridge28: entered allmulticast mode
[  415.566592][T22349] bond14: (slave bridge28): Enslaving as a backup interface with an up link
[  415.651508][T22357] syzkaller0: entered promiscuous mode
[  415.653717][T22357] syzkaller0: entered allmulticast mode
[  415.729634][T22363] vxcan3: entered promiscuous mode
[  415.783342][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4635'.
[  415.918654][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'.
[  415.924001][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4642'.
[  415.930630][T22378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4642'.
[  415.953388][T22378] ve: renamed from sit0
[  416.010103][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'.
[  416.205108][T22405] ipvlan2: entered promiscuous mode
[  416.207109][T22405] ipvlan2: entered allmulticast mode
[  416.209346][T22405] team0: entered allmulticast mode
[  416.211209][T22405] bond11: entered allmulticast mode
[  416.213462][T22405] team0: Device ipvlan2 is already an upper device of the team interface
[  416.446050][T22422] bond23: entered promiscuous mode
[  416.448502][T22422] 8021q: adding VLAN 0 to HW filter on device bond23
[  416.604740][T22432] netlink: 'syz.0.4656': attribute type 3 has an invalid length.
[  416.604759][T22431] netlink: 'syz.0.4656': attribute type 3 has an invalid length.
[  416.725278][T22434] syzkaller1: entered promiscuous mode
[  416.728068][T22434] syzkaller1: entered allmulticast mode
[  416.932102][T22450] netlink: 'syz.0.4661': attribute type 22 has an invalid length.
[  416.935383][T22450] netlink: 'syz.0.4661': attribute type 1 has an invalid length.
[  417.207827][T22489] netlink: 'syz.2.4673': attribute type 1 has an invalid length.
[  417.251642][T22489] bond15: entered promiscuous mode
[  417.253769][T22489] bond15: entered allmulticast mode
[  417.256275][T22489] 8021q: adding VLAN 0 to HW filter on device bond15
[  417.272512][T22489] bridge31: entered promiscuous mode
[  417.274456][T22489] bridge31: entered allmulticast mode
[  417.276816][T22489] bond15: (slave bridge31): Enslaving as a backup interface with an up link
[  417.467945][T22512] veth1_to_team: Caught tx_queue_len zero misconfig
[  417.559090][T22525] netlink: 'syz.0.4685': attribute type 1 has an invalid length.
[  417.592670][T22525] bond24: entered promiscuous mode
[  417.594576][T22525] bond24: entered allmulticast mode
[  417.596698][T22525] 8021q: adding VLAN 0 to HW filter on device bond24
[  417.626454][T22525] bridge25: entered promiscuous mode
[  417.629394][T22525] bridge25: entered allmulticast mode
[  417.632752][T22525] bond24: (slave bridge25): Enslaving as a backup interface with an up link
[  417.881476][T22564] bond10: option lp_interval: invalid value (0)
[  417.884079][T22564] bond10: option lp_interval: allowed values 1 - 2147483647
[  417.889481][T22564] bond10 (unregistering): Released all slaves
[  418.167580][T18512] net_ratelimit: 35 callbacks suppressed
[  418.167591][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  418.171841][T22604] openvswitch: netlink: Flow actions attr not present in new flow.
[  418.278620][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  418.398455][ T5836] bond7: (slave bridge14): failed to get link speed/duplex
[  418.479575][T22626] syzkaller0: entered promiscuous mode
[  418.481358][T22626] syzkaller0: entered allmulticast mode
[  418.547112][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  418.667231][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  418.777260][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  418.830013][T22639] netlink: 'syz.1.4715': attribute type 1 has an invalid length.
[  418.887483][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  419.027777][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  419.139034][ T5836] bond7: (slave bridge14): failed to get link speed/duplex
[  419.142345][T22675] netlink: 'syz.0.4725': attribute type 1 has an invalid length.
[  419.180743][T22675] bond25: entered promiscuous mode
[  419.182615][T22675] bond25: entered allmulticast mode
[  419.184653][T22675] 8021q: adding VLAN 0 to HW filter on device bond25
[  419.201343][T22675] bridge26: entered promiscuous mode
[  419.203937][T22675] bridge26: entered allmulticast mode
[  419.206689][T22675] bond25: (slave bridge26): Enslaving as a backup interface with an up link
[  419.227230][T22675] bridge27: entered promiscuous mode
[  419.229065][T22675] bridge27: entered allmulticast mode
[  419.231012][T22675] bond25: (slave bridge27): Enslaving as a backup interface with a down link
[  419.278672][T22688] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  419.362792][T22695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  419.365019][T22695] IPv6: NLM_F_CREATE should be set when creating new route
[  419.367344][T22695] IPv6: NLM_F_CREATE should be set when creating new route
[  419.369612][T22695] IPv6: NLM_F_CREATE should be set when creating new route
[  419.372663][T22695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  419.404119][T22697] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  420.813815][T22744] syzkaller0: left promiscuous mode
[  420.816027][T22744] syzkaller0: left allmulticast mode
[  420.822369][T22744] __nla_validate_parse: 28 callbacks suppressed
[  420.822378][T22744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4747'.
[  420.997531][T22757] validate_nla: 1 callbacks suppressed
[  420.997541][T22757] netlink: 'syz.2.4751': attribute type 1 has an invalid length.
[  421.015714][T22757] bond16: entered promiscuous mode
[  421.018236][T22757] bond16: entered allmulticast mode
[  421.020901][T22757] 8021q: adding VLAN 0 to HW filter on device bond16
[  421.032440][T22757] bridge32: entered promiscuous mode
[  421.034534][T22757] bridge32: entered allmulticast mode
[  421.036713][T22757] bond16: (slave bridge32): Enslaving as a backup interface with an up link
[  421.048268][T22757] bridge33: entered promiscuous mode
[  421.050098][T22757] bridge33: entered allmulticast mode
[  421.052940][T22757] bond16: (slave bridge33): Enslaving as a backup interface with a down link
[  421.091843][T22760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4752'.
[  421.162092][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'.
[  421.165861][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'.
[  421.213406][T22764] syzkaller1: entered promiscuous mode
[  421.215798][T22764] syzkaller1: entered allmulticast mode
[  421.351277][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4756'.
[  421.368886][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4756'.
[  421.475231][T22777] xt_time: invalid argument - start or stop time greater than 23:59:59
[  421.561036][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4760'.
[  421.588905][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4761'.
[  421.727327][T22794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4765'.
[  421.796642][T22804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  421.842519][T22801] A٨ speed is unknown, defaulting to 1000
[  422.404960][T22827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4775'.
[  422.820258][T22844] syzkaller0: entered promiscuous mode
[  422.822822][T22844] syzkaller0: entered allmulticast mode
[  423.257580][   T13] net_ratelimit: 31 callbacks suppressed
[  423.257598][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  423.367505][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  423.479718][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  423.587419][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  423.697569][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  423.813625][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  423.917525][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  424.028900][T18512] bond7: (slave bridge14): failed to get link speed/duplex
[  424.137420][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  424.248370][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  424.264229][T22910] netlink: 'syz.0.4796': attribute type 1 has an invalid length.
[  424.290676][T22910] bond26: entered promiscuous mode
[  424.292518][T22910] bond26: entered allmulticast mode
[  424.294539][T22910] 8021q: adding VLAN 0 to HW filter on device bond26
[  424.303790][T22910] bridge28: entered promiscuous mode
[  424.305552][T22910] bridge28: entered allmulticast mode
[  424.308315][T22910] bond26: (slave bridge28): Enslaving as a backup interface with an up link
[  424.319761][T22910] bridge29: entered promiscuous mode
[  424.321710][T22910] bridge29: entered allmulticast mode
[  424.323901][T22910] bond26: (slave bridge29): Enslaving as a backup interface with a down link
[  424.504096][T22940] sch_fq: defrate 0 ignored.
[  424.513044][T22937] can: request_module (can-proto-0) failed.
[  424.564821][T22937] A٨ speed is unknown, defaulting to 1000
[  424.872940][T22953] syzkaller0: entered promiscuous mode
[  424.875214][T22953] syzkaller0: entered allmulticast mode
[  425.485217][T22997] syzkaller0: entered promiscuous mode
[  425.490975][T22997] syzkaller0: entered allmulticast mode
[  425.495570][T22997] tc action pedit 'at' offset 67108864 out of bounds
[  425.559753][T23006] netlink: 'syz.2.4825': attribute type 1 has an invalid length.
[  425.751658][T23015] netlink: 'syz.1.4828': attribute type 8 has an invalid length.
[  425.969430][T23030] __nla_validate_parse: 15 callbacks suppressed
[  425.969444][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'.
[  426.211900][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4841'.
[  426.260378][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'.
[  426.608924][T23082] x_tables: ip_tables: osf match: only valid for protocol 6
[  426.660273][T23077] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4845'.
[  426.665926][T23098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4848'.
[  426.690794][T23098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4848'.
[  426.694564][T23098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'.
[  426.790975][T23107] sit0: entered promiscuous mode
[  427.002509][T23123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4853'.
[  427.005823][T23123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4853'.
[  427.009212][T23123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4853'.
[  427.100294][T23129] x_tables: ip6_tables: mh match: only valid for protocol 135
[  427.213120][T23135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  427.367476][T23147] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  427.371655][T23147] bond10 (unregistering): Released all slaves
[  427.457861][T23151] bond6: (slave bridge18): Removing an active aggregator
[  427.462344][T23151] bond6: (slave bridge18): Releasing backup interface
[  427.466060][T23151] bridge18: left promiscuous mode
[  427.468080][T23151] bridge18: left allmulticast mode
[  427.474290][T23151] bond8: (slave bridge20): Removing an active aggregator
[  427.477901][T23151] bond8: (slave bridge20): Releasing backup interface
[  427.480967][T23151] bond8: (slave bridge20): the permanent HWaddr of slave - 76:a5:70:92:cb:fc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  427.491954][T23151] bridge20: left promiscuous mode
[  427.494318][T23151] bridge20: left allmulticast mode
[  427.502386][T23151] bond8: (slave bridge21): Releasing backup interface
[  427.506259][T23151] bridge21: left promiscuous mode
[  427.508625][T23151] bridge21: left allmulticast mode
[  427.683773][T23156] netlink: 'syz.1.4866': attribute type 1 has an invalid length.
[  427.708742][T23156] bond10: entered promiscuous mode
[  427.710618][T23156] bond10: entered allmulticast mode
[  427.712615][T23156] 8021q: adding VLAN 0 to HW filter on device bond10
[  427.723110][T23156] bridge22: entered promiscuous mode
[  427.725047][T23156] bridge22: entered allmulticast mode
[  427.727556][T23156] bond10: (slave bridge22): Enslaving as a backup interface with an up link
[  427.740439][T23156] bridge23: entered promiscuous mode
[  427.742554][T23156] bridge23: entered allmulticast mode
[  427.745386][T23156] bond10: (slave bridge23): Enslaving as a backup interface with a down link
[  427.874400][T23161] rdma_rxe: rxe_newlink: failed to add lo
[  427.905131][T23165] ip6tnl2: entered allmulticast mode
[  428.221885][T23208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  428.224873][T23206] tipc: Enabled bearer <eth:vlan0>, priority 0
[  428.367602][ T5818] net_ratelimit: 39 callbacks suppressed
[  428.367618][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  428.445468][T23224] netlink: get zone limit has 4 unknown bytes
[  428.471541][T23224] syzkaller0: entered promiscuous mode
[  428.473953][T23224] syzkaller0: entered allmulticast mode
[  428.488935][ T5818] bond7: (slave bridge14): failed to get link speed/duplex
[  429.297148][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  429.556745][T23241] syzkaller1: entered promiscuous mode
[  429.559414][T23241] syzkaller1: entered allmulticast mode
[  429.567615][  T793] tipc: Node number set to 2809261283
[  429.577842][   T13] bond7: (slave bridge14): failed to get link speed/duplex
[  429.623666][T23247] bond6: entered allmulticast mode
[  429.626687][T23246] bond6: left allmulticast mode
[  429.688420][T23258] netlink: 'syz.2.4893': attribute type 2 has an invalid length.
[  429.698071][T22054] bond7: (slave bridge14): failed to get link speed/duplex
[  429.732069][T23264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  429.753450][T23266] tipc: Resetting bearer <eth:vlan0>
[  429.765367][T23266] bond7: (slave bridge14): Removing an active aggregator
[  429.768514][T22054] bond7: Warning: Found an uninitialized port
[  429.771230][T23266] bond7: (slave bridge14): Releasing backup interface
[  429.775865][T23266] bridge14: left promiscuous mode
[  429.784006][T23266] bond8: (slave bridge15): Removing an active aggregator
[  429.786868][T23266] bond8: (slave bridge15): Releasing backup interface
[  429.790579][T23266] bond8: (slave bridge15): the permanent HWaddr of slave - 66:1a:e6:52:ab:8b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  429.811103][T23266] bridge15: left promiscuous mode
[  429.813155][T23266] bridge15: left allmulticast mode
[  429.822512][T23266] bond8: (slave bridge16): Releasing backup interface
[  429.827912][T23266] bridge16: left promiscuous mode
[  429.830706][T23266] bridge16: left allmulticast mode
[  429.841362][T23266] bond9: (slave bridge17): Removing an active aggregator
[  429.843960][T23266] bond9: (slave bridge17): Releasing backup interface
[  429.846291][T23266] bond9: (slave bridge17): the permanent HWaddr of slave - 46:49:2f:7a:57:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  429.853866][T23266] bridge17: left promiscuous mode
[  429.856133][T23266] bridge17: left allmulticast mode
[  429.879675][T23266] bond9: (slave bridge18): Releasing backup interface
[  429.883843][T23266] bridge18: left promiscuous mode
[  429.888742][T23266] bridge18: left allmulticast mode
[  429.899716][T23266] bond10: (slave bridge19): Removing an active aggregator
[  429.902560][T23266] bond10: (slave bridge19): Releasing backup interface
[  429.904725][T23266] bond10: (slave bridge19): the permanent HWaddr of slave - 7e:c8:3b:ad:9f:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  429.931496][T23266] bridge19: left promiscuous mode
[  429.933172][T23266] bridge19: left allmulticast mode
[  429.953249][T23266] bond10: (slave bridge20): Releasing backup interface
[  429.956699][T23266] bridge20: left promiscuous mode
[  429.965942][T23266] bridge20: left allmulticast mode
[  429.975676][T23266] bond11: (slave bridge21): Removing an active aggregator
[  429.979024][T23266] bond11: (slave bridge21): Releasing backup interface
[  429.981214][T23266] bond11: (slave bridge21): the permanent HWaddr of slave - 36:9f:66:d3:35:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  429.988116][T23266] bridge21: left promiscuous mode
[  429.989880][T23266] bridge21: left allmulticast mode
[  429.996406][T23266] bond11: (slave bridge22): Releasing backup interface
[  430.000944][T23266] bridge22: left promiscuous mode
[  430.002597][T23266] bridge22: left allmulticast mode
[  430.008710][T23266] bond12: (slave bridge23): Removing an active aggregator
[  430.011597][T23266] bond12: (slave bridge23): Releasing backup interface
[  430.013819][T23266] bond12: (slave bridge23): the permanent HWaddr of slave - de:15:da:9a:78:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  430.022209][T23266] bridge23: left promiscuous mode
[  430.024102][T23266] bridge23: left allmulticast mode
[  430.031381][T23266] bond12: (slave bridge24): Releasing backup interface
[  430.034657][T23266] bridge24: left promiscuous mode
[  430.036422][T23266] bridge24: left allmulticast mode
[  430.044552][T23266] bond13: (slave bridge26): Removing an active aggregator
[  430.047619][T23266] bond13: (slave bridge26): Releasing backup interface
[  430.049706][T23266] bond13: (slave bridge26): the permanent HWaddr of slave - da:7d:e1:2c:97:ae - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  430.056004][T23266] bridge26: left promiscuous mode
[  430.058852][T23266] bridge26: left allmulticast mode
[  430.068408][T23266] bond13: (slave bridge27): Releasing backup interface
[  430.072044][T23266] bridge27: left promiscuous mode
[  430.073930][T23266] bridge27: left allmulticast mode
[  430.080587][T23266] bond14: (slave bridge28): Removing an active aggregator
[  430.083317][T23266] bond14: (slave bridge28): Releasing backup interface
[  430.086406][T23266] bridge28: left promiscuous mode
[  430.089389][T23266] bridge28: left allmulticast mode
[  430.095957][T23266] bond15: (slave bridge31): Removing an active aggregator
[  430.099578][T23266] bond15: (slave bridge31): Releasing backup interface
[  430.102614][T23266] bridge31: left promiscuous mode
[  430.104379][T23266] bridge31: left allmulticast mode
[  430.112340][T23266] bond16: (slave bridge32): Removing an active aggregator
[  430.115131][T23266] bond16: (slave bridge32): Releasing backup interface
[  430.118608][T23266] bond16: (slave bridge32): the permanent HWaddr of slave - 0e:82:d5:34:81:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  430.144206][T23266] bridge32: left promiscuous mode
[  430.146518][T23266] bridge32: left allmulticast mode
[  430.165871][T23266] bond16: (slave bridge33): Releasing backup interface
[  430.197929][T23266] bridge33: left promiscuous mode
[  430.199799][T23266] bridge33: left allmulticast mode
[  430.266447][T23274] syzkaller0: entered promiscuous mode
[  430.269937][T23274] syzkaller0: entered allmulticast mode
[  431.248116][T23302] __nla_validate_parse: 14 callbacks suppressed
[  431.248131][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4906'.
[  431.446880][T23312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4909'.
[  431.450962][T23312] openvswitch: netlink: Flow key attr not present in new flow.
[  431.589093][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4911'.
[  431.656010][T23325] netlink: 'syz.2.4912': attribute type 1 has an invalid length.
[  431.660242][T23325] netlink: 'syz.2.4912': attribute type 2 has an invalid length.
[  431.675075][T23325] netlink: 'syz.2.4912': attribute type 1 has an invalid length.
[  431.678992][T23325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4912'.
[  431.742268][T23330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4913'.
[  431.746209][T23331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4913'.
[  431.767476][T23263] Set syz1 is full, maxelem 65536 reached
[  431.773599][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'.
[  431.778191][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'.
[  431.838245][T23335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4915'.
[  432.045304][T23356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4923'.
[  432.048402][T23354] erspan0: entered promiscuous mode
[  432.050961][T23354] macsec1: entered promiscuous mode
[  432.910043][T23421] ipvlan2: entered promiscuous mode
[  433.008264][T23432] netlink: 'syz.0.4945': attribute type 2 has an invalid length.
[  433.024182][T23432] l24): entered promiscuous mode
[  433.298487][T23464] netlink: 'syz.2.4958': attribute type 21 has an invalid length.
[  434.823687][T23549] sctp: [Deprecated]: syz.2.4982 (pid 23549) Use of int in max_burst socket option.
[  434.823687][T23549] Use struct sctp_assoc_value instead
[  434.887607][T23554] A٨ speed is unknown, defaulting to 1000
[  434.939439][T23561] x_tables: duplicate underflow at hook 1
[  435.141490][T23571] A٨ speed is unknown, defaulting to 1000
[  435.486311][T23582] netlink: 'syz.0.4991': attribute type 1 has an invalid length.
[  435.654391][T23606] syzkaller0: entered promiscuous mode
[  435.656337][T23606] syzkaller0: entered allmulticast mode
[  435.787846][T23618] Set syz1 is full, maxelem 65536 reached
[  435.941038][T23637] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  436.293462][T23677] __nla_validate_parse: 19 callbacks suppressed
[  436.293472][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5016'.
[  436.301016][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5016'.
[  436.313606][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5016'.
[  436.609878][T23691] netlink: 'syz.2.5020': attribute type 1 has an invalid length.
[  436.625231][T23691] bond17: entered promiscuous mode
[  436.632704][T23691] bond17: entered allmulticast mode
[  436.635097][T23691] 8021q: adding VLAN 0 to HW filter on device bond17
[  436.646258][T23691] macvlan2: entered promiscuous mode
[  436.650636][T23691] macvlan2: entered allmulticast mode
[  436.724574][T23706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  436.727834][T23706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  437.280083][T23734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5032'.
[  437.543224][T23749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5036'.
[  437.690497][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5042'.
[  437.818588][T23773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5046'.
[  437.894172][T23783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.960508][T23785] syzkaller0: entered promiscuous mode
[  437.962252][T23785] syzkaller0: entered allmulticast mode
[  438.041249][T23799] netlink: 'syz.0.5051': attribute type 1 has an invalid length.
[  438.044381][T23799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5051'.
[  438.050114][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5051'.
[  438.994987][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5055'.
[  439.954368][T23850] netlink: 'syz.1.5065': attribute type 29 has an invalid length.
[  439.957947][T23850] netlink: 'syz.1.5065': attribute type 29 has an invalid length.
[  440.039226][T23856] netlink: 'syz.2.5068': attribute type 10 has an invalid length.
[  440.045417][T23856] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  440.432205][T23890] netlink: 'syz.2.5079': attribute type 2 has an invalid length.
[  441.471671][T23919] Set syz1 is full, maxelem 65536 reached
[  441.494670][   T33] audit: type=1800 audit(1774964580.237:7): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5088" name="memory.events" dev="tmpfs" ino=9273 res=0 errno=0
[  441.614402][T23935] __nla_validate_parse: 9 callbacks suppressed
[  441.614414][T23935] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5092'.
[  441.622294][T23935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5092'.
[  441.642456][T23937] pim6reg: entered allmulticast mode
[  441.654199][T23937] pim6reg: left allmulticast mode
[  441.706443][T23944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5093'.
[  441.722378][T23939] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5094'.
[  441.735143][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'.
[  441.934144][T23965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5101'.
[  441.970980][T23965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5101'.
[  442.084261][T23983] bond29: option packets_per_slave: invalid value (1048582)
[  442.086736][T23983] bond29: option packets_per_slave: allowed values 0 - 65535
[  442.092224][T23983] bond29 (unregistering): Released all slaves
[  442.203793][T23996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5108'.
[  442.271094][T24007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5110'.
[  442.288417][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5110'.
[  442.521656][T24028] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004
[  442.643752][T24036] syzkaller0: entered promiscuous mode
[  442.647402][T24036] syzkaller0: entered allmulticast mode
[  442.651965][T24036] tc action pedit 'at' offset 67108864 out of bounds
[  442.868622][T24052] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  442.868915][T24053] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  442.888391][ T5818] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.891347][ T5818] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.893955][ T5818] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.897862][ T5818] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  443.048310][T24065] macsec0: left allmulticast mode
[  443.155802][T18512] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.159617][T18512] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.162405][T18512] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.165627][T18512] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.208734][T24074] bond0: entered promiscuous mode
[  443.211382][T24074] batadv0: entered promiscuous mode
[  443.213525][T24074] debugfs: 'hsr0' already exists in 'hsr'
[  443.215336][T24074] Cannot create hsr debugfs directory
[  443.217500][T24074] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  443.221510][T24074] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  443.225338][T24074] 8021q: adding VLAN 0 to HW filter on device hsr0
[  443.230520][T24074] bond0: left promiscuous mode
[  443.232702][T24074] batadv0: left promiscuous mode
[  443.386230][T24085] openvswitch: netlink: IP tunnel TTL not specified.
[  443.749317][T24108] netlink: 'syz.1.5142': attribute type 2 has an invalid length.
[  444.052956][T24134] syzkaller0: entered promiscuous mode
[  444.054738][T24134] syzkaller0: entered allmulticast mode
[  445.337334][T24152] block nbd2: server does not support multiple connections per device.
[  445.348652][T24152] block nbd2: shutting down sockets
[  445.385763][T24165] netlink: 'syz.0.5159': attribute type 12 has an invalid length.
[  445.390234][T24165] netlink: 'syz.0.5159': attribute type 12 has an invalid length.
[  445.432258][T24171] openvswitch: netlink: IP tunnel TTL not specified.
[  445.503390][T24175] A٨ speed is unknown, defaulting to 1000
[  445.694725][T24191] A link change request failed with some changes committed already. Interface 26A٨ may have been left with an inconsistent configuration, please check.
[  445.701683][   T47] A٨ speed is unknown, defaulting to 1000
[  445.704295][   T47] syz0: Port: 1 Link DOWN
[  445.716797][   T47] A٨ speed is unknown, defaulting to 1000
[  445.833072][T24199] tipc: Resetting bearer <eth:vlan0>
[  445.997129][T24214] netlink: 'syz.0.5176': attribute type 2 has an invalid length.
[  446.106258][T24211] Set syz1 is full, maxelem 65536 reached
[  446.420113][T24254] team0: No ports can be present during mode change
[  446.693482][T24288] syzkaller0: entered promiscuous mode
[  446.695326][T24288] syzkaller0: entered allmulticast mode
[  446.950844][T24320] __nla_validate_parse: 37 callbacks suppressed
[  446.950854][T24320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5208'.
[  446.976218][T24324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5210'.
[  447.007734][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'.
[  447.007735][T24322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5209'.
[  447.082035][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.086471][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.091126][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.096518][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.102485][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.105601][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.109574][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.112641][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.115600][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.119294][T24331] openvswitch: netlink: Flow key attr not present in new flow.
[  447.222346][T24340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'.
[  447.225313][T24340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'.
[  447.228888][T24340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'.
[  447.235467][T24340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'.
[  447.246569][T24350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5220'.
[  447.265017][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5220'.
[  447.342554][T24360] netlink: 'syz.1.5223': attribute type 2 has an invalid length.
[  447.618563][T24387] bond10: (slave bridge22): Removing an active aggregator
[  447.622268][T24387] bond10: (slave bridge22): Releasing backup interface
[  447.624929][T24387] bond10: (slave bridge22): the permanent HWaddr of slave - 72:68:db:2c:87:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  447.632884][T24387] bridge22: left promiscuous mode
[  447.635194][T24387] bridge22: left allmulticast mode
[  447.640645][T24387] bond10: (slave bridge23): Releasing backup interface
[  447.644225][T24387] bridge23: left promiscuous mode
[  447.646471][T24387] bridge23: left allmulticast mode
[  447.715350][T24389] syzkaller0: entered promiscuous mode
[  447.718264][T24389] syzkaller0: entered allmulticast mode
[  448.116742][T24400] syzkaller0: entered promiscuous mode
[  448.119003][T24400] syzkaller0: entered allmulticast mode
[  448.319992][T24404] bond6: entered allmulticast mode
[  448.323750][T24403] bond6: left allmulticast mode
[  448.562697][T24417] A٨ speed is unknown, defaulting to 1000
[  448.866036][T24433] A٨ speed is unknown, defaulting to 1000
[  449.141761][T24445] IPVS: length: 106 != 24
[  449.203111][T24447] netlink: 'syz.2.5254': attribute type 1 has an invalid length.
[  449.205659][T24447] netlink: 'syz.2.5254': attribute type 2 has an invalid length.
[  449.213933][T24447] netlink: 'syz.2.5254': attribute type 1 has an invalid length.
[  449.219927][T24447] netlink: 'syz.2.5254': attribute type 3 has an invalid length.
[  449.354151][T24453] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  449.476040][T24461] bond6: entered allmulticast mode
[  449.517597][T24460] bond6: left allmulticast mode
[  449.682692][T24481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.749644][T24492] sctp: [Deprecated]: syz.0.5264 (pid 24492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.749644][T24492] Use struct sctp_sack_info instead
[  451.064574][T24535] netlink: 'syz.2.5275': attribute type 3 has an invalid length.
[  451.609447][T24597] netlink: 'syz.0.5290': attribute type 58 has an invalid length.
[  451.683608][T24599] ipip2: entered promiscuous mode
[  451.695546][T24604] netlink: 'syz.1.5293': attribute type 1 has an invalid length.
[  451.864387][T24620] netlink: 'syz.2.5299': attribute type 3 has an invalid length.
[  452.042068][T24636] A٨ speed is unknown, defaulting to 1000
[  452.155955][T24645] __nla_validate_parse: 28 callbacks suppressed
[  452.155970][T24645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5304'.
[  452.170611][T24645] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  452.231476][T24648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5305'.
[  452.241248][T24649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5305'.
[  452.436341][T24658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5308'.
[  452.467290][T24658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'.
[  452.565976][T24660] Cannot find del_set index 2 as target
[  452.720148][T24666] net_ratelimit: 13 callbacks suppressed
[  452.720159][T24666] openvswitch: netlink: IP tunnel dst address not specified
[  452.876447][T24688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5317'.
[  452.906069][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5319'.
[  452.910600][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5319'.
[  452.914578][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5319'.
[  452.918829][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5319'.
[  452.984975][T24699] netlink: 'syz.1.5321': attribute type 2 has an invalid length.
[  452.994234][T24699] hmac(sha224: entered promiscuous mode
[  452.999440][T24699] syzkaller0: entered promiscuous mode
[  453.001714][T24699] syzkaller0: entered allmulticast mode
[  454.572485][T24766] ip6gre2: entered promiscuous mode
[  454.574559][T24766] ip6gre2: entered allmulticast mode
[  454.635427][T24777] openvswitch: netlink: IP tunnel TTL not specified.
[  454.670091][T24782] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  455.016253][T24821] openvswitch: netlink: Key 32 has unexpected len 40 expected 2
[  455.222517][T24835] netlink: 'syz.1.5357': attribute type 1 has an invalid length.
[  455.247688][T24835] bond12: entered promiscuous mode
[  455.250165][T24835] 8021q: adding VLAN 0 to HW filter on device bond12
[  455.273904][T24835] macvtap1: entered allmulticast mode
[  455.300364][T24835] bond12: (slave bridge24): making interface the new active one
[  455.303510][T24835] bridge24: entered promiscuous mode
[  455.307756][T24835] bond12: (slave bridge24): Enslaving as an active interface with an up link
[  455.437779][T24844] netlink: 'syz.1.5359': attribute type 5 has an invalid length.
[  455.518242][T24851] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  455.993497][T24893] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16
[  456.089725][T24902] netlink: 'syz.2.5380': attribute type 1 has an invalid length.
[  456.112497][T24902] tipc: Resetting bearer <eth:vlan0>
[  456.132836][T24902] tipc: Resetting bearer <eth:vlan0>
[  456.139801][T24902] bond18: (slave vlan0): Enslaving as a backup interface with an up link
[  456.144323][ T1096] tipc: Resetting bearer <eth:vlan0>
[  456.178890][T24909] netlink: 'syz.1.5383': attribute type 8 has an invalid length.
[  456.209745][T24915] x_tables: duplicate underflow at hook 3
[  456.260307][T24919] xt_TCPMSS: Only works on TCP SYN packets
[  456.290581][T24919] syzkaller0: entered promiscuous mode
[  456.292406][T24919] syzkaller0: entered allmulticast mode
[  456.305642][T24919] netlink: 'syz.1.5385': attribute type 14 has an invalid length.
[  457.386542][T24932] __nla_validate_parse: 24 callbacks suppressed
[  457.386557][T24932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5389'.
[  457.392406][T24934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5390'.
[  457.442218][T24934] netlink: 14264 bytes leftover after parsing attributes in process `syz.1.5390'.
[  457.485001][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'.
[  457.489035][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'.
[  457.779878][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5398'.
[  457.784330][T24963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'.
[  457.788420][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'.
[  457.961179][T24989] netlink: ct family unspecified
[  457.963275][T24989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.112477][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5413'.
[  458.116666][T25007] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  458.124403][T25007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5413'.
[  459.016126][T25025] netlink: ct family unspecified
[  459.018250][T25025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.325215][T25045] netlink: 'syz.1.5421': attribute type 4 has an invalid length.
[  459.333309][T25045] netlink: 'syz.1.5421': attribute type 4 has an invalid length.
[  459.462106][T25049] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  459.702639][T25077] netlink: 'syz.0.5432': attribute type 3 has an invalid length.
[  459.728242][T25077] nbd: nbd0 already in use
[  459.730447][T25077] block nbd0: NBD_DISCONNECT
[  459.732408][T25077] block nbd0: Send disconnect failed -32
[  459.735715][T25077] block nbd0: shutting down sockets
[  459.782752][T25084] dvmrp8: left allmulticast mode
[  459.784453][T25084] pimreg: left allmulticast mode
[  459.799715][T25083] netlink: Conntrack attr has 3 unknown bytes
[  459.840940][T25083] netlink: 'syz.1.5434': attribute type 10 has an invalid length.
[  459.844193][T25083] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  459.850354][T25077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  459.895792][T25095] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  459.945708][T25100] A٨ speed is unknown, defaulting to 1000
[  460.126531][T25114] netlink: ct family unspecified
[  461.348977][T25194] A٨ speed is unknown, defaulting to 1000
[  461.390234][T25195] sctp: [Deprecated]: syz.0.5473 (pid 25195) Use of int in maxseg socket option.
[  461.390234][T25195] Use struct sctp_assoc_value instead
[  461.459126][T25197] A٨ speed is unknown, defaulting to 1000
[  461.485308][T25199] netlink: 'syz.1.5474': attribute type 10 has an invalid length.
[  461.488209][T25199] batadv0: entered promiscuous mode
[  461.489890][T25199] batadv0: entered allmulticast mode
[  461.491716][T25199] bridge0: port 1(batadv0) entered blocking state
[  461.493792][T25199] bridge0: port 1(batadv0) entered disabled state
[  461.577358][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  461.581546][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  462.423367][T25230] netlink: 'syz.1.5484': attribute type 10 has an invalid length.
[  462.428480][T25228] __nla_validate_parse: 86 callbacks suppressed
[  462.428489][T25228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5486'.
[  462.428493][T25229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5486'.
[  462.451396][T25233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5487'.
[  462.487612][T25228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5486'.
[  462.490450][T25228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5486'.
[  462.566600][T25245] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5490'.
[  462.581258][T25245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5490'.
[  462.750648][T25263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5497'.
[  462.801486][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5499'.
[  462.808862][T25270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5499'.
[  463.776111][T25310] x_tables: duplicate underflow at hook 1
[  463.834323][T25320] netlink: 'syz.0.5514': attribute type 11 has an invalid length.
[  463.840599][T25320] netlink: 'syz.0.5514': attribute type 11 has an invalid length.
[  464.021577][T25330] bond29: entered promiscuous mode
[  464.023969][T25330] 8021q: adding VLAN 0 to HW filter on device bond29
[  464.075997][T25330] 8021q: adding VLAN 0 to HW filter on device bond29
[  464.080056][T25330] bond29: (slave sit2): The slave device specified does not support setting the MAC address
[  464.085233][T25330] bond29: (slave sit2): Error -95 calling set_mac_address
[  464.379949][T25368] netlink: 'syz.2.5527': attribute type 1 has an invalid length.
[  465.728634][T25419] net_ratelimit: 8 callbacks suppressed
[  465.728644][T25419] netlink: ct family unspecified
[  465.731940][T25419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.835878][T25429] netlink: 'syz.2.5547': attribute type 1 has an invalid length.
[  465.861035][T25429] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  465.864891][T25429] openvswitch: netlink: Flow actions attr not present in new flow.
[  465.956629][T25438] A٨ speed is unknown, defaulting to 1000
[  466.172231][T25447] bond0: entered promiscuous mode
[  466.174778][T25447] batadv0: entered promiscuous mode
[  466.333180][T25459] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  466.531917][T25485] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  466.551335][T25487] netlink: ct family unspecified
[  466.552975][T25487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.619376][T25498] netlink: 'syz.2.5571': attribute type 1 has an invalid length.
[  466.699909][T25502] xt_l2tp: v2 doesn't support IP mode
[  466.752934][T25511] netlink: 'syz.0.5575': attribute type 1 has an invalid length.
[  466.796242][T25513] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  466.918886][T25523] netlink: ct family unspecified
[  466.920619][T25523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.947550][T25525] netlink: 'syz.1.5580': attribute type 1 has an invalid length.
[  466.999652][T25529] .70: renamed from hsr0
[  467.004093][T25529] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  467.009170][T25529] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  467.226638][T25548] veth233: entered promiscuous mode
[  467.449295][T25568] __nla_validate_parse: 42 callbacks suppressed
[  467.449311][T25568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5593'.
[  467.668007][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5596'.
[  467.874764][T25590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5599'.
[  467.900921][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5602'.
[  467.904755][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5602'.
[  467.908973][T25599] netlink: 'syz.0.5602': attribute type 14 has an invalid length.
[  467.912195][T25599] netlink: 'syz.0.5602': attribute type 13 has an invalid length.
[  467.932382][T25600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5602'.
[  467.936567][T25600] netlink: 'syz.0.5602': attribute type 3 has an invalid length.
[  468.034815][T25609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5605'.
[  468.035633][T25610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5604'.
[  468.052652][T25609] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  468.110914][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5607'.
[  468.166315][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5610'.
[  469.446539][T25671] netlink: 'syz.1.5624': attribute type 5 has an invalid length.
[  469.450625][T25670] netlink: 'syz.2.5622': attribute type 1 has an invalid length.
[  469.678904][T25683] netlink: 'syz.1.5627': attribute type 3 has an invalid length.
[  469.946584][T25694] netlink: 'syz.0.5631': attribute type 1 has an invalid length.
[  470.518585][T25723] A٨ speed is unknown, defaulting to 1000
[  470.629224][T25720] A٨ speed is unknown, defaulting to 1000
[  471.120181][T25749] net_ratelimit: 13 callbacks suppressed
[  471.120191][T25749] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  471.203614][T25756] netlink: ct family unspecified
[  471.205651][T25756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.508140][T25772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  471.564410][T25779] openvswitch: netlink: Message has 44 unknown bytes.
[  471.632549][T25787] validate_nla: 1 callbacks suppressed
[  471.632564][T25787] netlink: 'syz.2.5662': attribute type 3 has an invalid length.
[  471.676463][T25789] openvswitch: netlink: EtherType 0 is less than min 600
[  472.222159][T25839] netlink: ct family unspecified
[  472.223945][T25839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.332930][T25845] openvswitch: netlink: Key 32 has unexpected len 40 expected 2
[  472.483015][T25849] __nla_validate_parse: 28 callbacks suppressed
[  472.483025][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'.
[  472.488279][T25849] openvswitch: netlink: Flow actions attr not present in new flow.
[  472.537933][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'.
[  472.542281][T25851] netlink: 'syz.0.5685': attribute type 11 has an invalid length.
[  472.851977][T25856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5687'.
[  472.924956][T25859] A٨ speed is unknown, defaulting to 1000
[  472.925912][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5690'.
[  472.964067][T25870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5688'.
[  472.998543][T25870] xt_CT: No such helper "syz1"
[  473.016037][T25878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5692'.
[  473.084218][T25882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'.
[  473.174042][T25889] xt_HMARK: proto mask must be zero with L3 mode
[  473.189380][T25892] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16
[  473.272643][T25895] block nbd0: not configured, cannot reconfigure
[  473.301810][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5699'.
[  473.383605][T25911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5701'.
[  473.403888][T25911] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5701'.
[  473.479771][T25916] netlink: 'syz.1.5703': attribute type 28 has an invalid length.
[  473.482234][T25916] netlink: 'syz.1.5703': attribute type 3 has an invalid length.
[  473.577955][T25928] netlink: 'syz.2.5709': attribute type 3 has an invalid length.
[  473.656305][T25939] syzkaller0: left promiscuous mode
[  473.659245][T25939] syzkaller0: left allmulticast mode
[  473.815512][T25954] A٨ speed is unknown, defaulting to 1000
[  473.935475][T25966] netlink: 'syz.0.5718': attribute type 14 has an invalid length.
[  474.132488][T25981] xt_l2tp: unknown flags: 51
[  474.158342][T25981] syzkaller0: entered promiscuous mode
[  474.160122][T25981] syzkaller0: entered allmulticast mode
[  474.293123][T25988] A٨ speed is unknown, defaulting to 1000
[  474.664975][T26018] sctp: [Deprecated]: syz.2.5731 (pid 26018) Use of int in max_burst socket option.
[  474.664975][T26018] Use struct sctp_assoc_value instead
[  474.875169][T26028] delete_channel: no stack
[  475.017545][T26035] netlink: 'syz.0.5738': attribute type 2 has an invalid length.
[  475.590372][T26084] rdma_rxe: rxe_newlink: failed to add gre0
[  475.599735][T26084] ve: left promiscuous mode
[  475.602318][T26084] dummy0: left promiscuous mode
[  475.604447][  T793] A٨ speed is unknown, defaulting to 1000
[  475.606518][  T793] syz0: Port: 1 Link ACTIVE
[  475.610770][T26084] tipc: Resetting bearer <eth:vlan0>
[  475.613205][T26084] vlan0: entered promiscuous mode
[  475.622370][  T793] A٨ speed is unknown, defaulting to 1000
[  475.795670][T26111] syzkaller0: entered promiscuous mode
[  475.798238][T26111] syzkaller0: entered allmulticast mode
[  475.870496][T26119] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  476.045751][T26132] netlink: 'syz.1.5765': attribute type 29 has an invalid length.
[  476.050091][T26132] netlink: 'syz.1.5765': attribute type 29 has an invalid length.
[  476.052925][T26132] netlink: 'syz.1.5765': attribute type 29 has an invalid length.
[  476.055652][T26132] netlink: 'syz.1.5765': attribute type 29 has an invalid length.
[  476.623115][T26173] net_ratelimit: 11 callbacks suppressed
[  476.623125][T26173] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  476.651483][T26175] openvswitch: netlink: Flow key attr not present in new flow.
[  476.729155][T26180] validate_nla: 123 callbacks suppressed
[  476.729171][T26180] netlink: 'syz.1.5776': attribute type 1 has an invalid length.
[  476.734099][T26180] netlink: 'syz.1.5776': attribute type 3 has an invalid length.
[  476.802849][T26186] syzkaller0: entered promiscuous mode
[  476.804848][T26186] syzkaller0: entered allmulticast mode
[  476.882003][T26190] syzkaller0: left promiscuous mode
[  476.884463][T26190] syzkaller0: left allmulticast mode
[  476.887558][T26190] tipc: Resetting bearer <eth:syzkaller0>
[  476.901133][T26192] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  476.935755][T26194] netlink: ct family unspecified
[  476.938039][T26194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.990332][T26198] openvswitch: netlink: Flow actions attr not present in new flow.
[  477.035452][T26205] openvswitch: netlink: Flow actions attr not present in new flow.
[  477.159309][T26219] openvswitch: netlink: EtherType 0 is less than min 600
[  477.191819][T26223] netlink: ct family unspecified
[  477.193910][T26223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.424863][T26238] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  477.480943][T26242] sctp: [Deprecated]: syz.0.5801 (pid 26242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  477.480943][T26242] Use struct sctp_sack_info instead
[  477.565109][T26251] __nla_validate_parse: 160 callbacks suppressed
[  477.565125][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5804'.
[  477.573117][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5804'.
[  477.608861][T26253] bond29: entered allmulticast mode
[  477.865841][T26280] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5815'.
[  477.963395][T26288] A٨ speed is unknown, defaulting to 1000
[  478.024321][T26293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5817'.
[  478.180379][T26312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5822'.
[  478.232793][T26316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5824'.
[  478.315300][T26316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5824'.
[  478.416434][T26334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5831'.
[  478.602876][T26348] bridge0: port 1(veth0_to_bridge) entered blocking state
[  478.606108][T26348] bridge0: port 1(veth0_to_bridge) entered disabled state
[  478.618465][T26348] veth0_to_bridge: entered promiscuous mode
[  478.766069][T26364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5843'.
[  478.812179][T26369] netlink: 'syz.0.5844': attribute type 9 has an invalid length.
[  478.814894][T26369] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5844'.
[  479.095730][T26408] block nbd0: not configured, cannot reconfigure
[  479.171728][T26416] syzkaller1: entered promiscuous mode
[  479.173602][T26416] syzkaller1: entered allmulticast mode
[  479.391511][T26445] Timeout policy `syz1' can only be used by L3 protocol number 35006
[  479.394478][T26446] Timeout policy `syz1' can only be used by L3 protocol number 35006
[  479.799293][T26491] SET target dimension over the limit!
[  480.243963][T26525] syzkaller0: entered promiscuous mode
[  480.246166][T26525] syzkaller0: entered allmulticast mode
[  480.249143][T26525] tipc: Resetting bearer <eth:syzkaller0>
[  480.310439][T26531] xt_CT: You must specify a L4 protocol and not use inversions on it
[  480.487878][T26554] bond18: (slave vlan0): Releasing backup interface
[  480.491972][T26554] tipc: Resetting bearer <eth:vlan0>
[  480.498797][T26554] tipc: Resetting bearer <eth:syzkaller0>
[  481.552689][T26594] netlink: 'syz.0.5911': attribute type 12 has an invalid length.
[  481.768669][T26605] net_ratelimit: 38 callbacks suppressed
[  481.768684][T26605] openvswitch: netlink: Flow actions attr not present in new flow.
[  482.971763][T26647] __nla_validate_parse: 22 callbacks suppressed
[  482.971778][T26647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5927'.
[  483.074219][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'.
[  483.202215][T26661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5932'.
[  483.240749][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5932'.
[  483.389260][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'.
[  483.423150][T26680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5937'.
[  483.436756][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'.
[  483.532114][T26688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5940'.
[  483.561232][T26691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5941'.
[  483.564864][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5941'.
[  483.770275][T26719] syzkaller0: entered promiscuous mode
[  483.772606][T26719] syzkaller0: entered allmulticast mode
[  483.834500][T26722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.850737][T26722] tipc: Resetting bearer <eth:syzkaller0>
[  483.981469][T26741] netlink: 'syz.0.5954': attribute type 3 has an invalid length.
[  483.984425][T26741] netlink: 'syz.0.5954': attribute type 1 has an invalid length.
[  484.052367][T26744] netlink: 'syz.0.5955': attribute type 1 has an invalid length.
[  484.219202][T26756] A٨ speed is unknown, defaulting to 1000
[  484.222178][T26761] netlink: 'syz.2.5961': attribute type 1 has an invalid length.
[  484.604957][T26779] block nbd0: Unsupported socket: should be TCP or UNIX.
[  484.937495][T26789] tipc: New replicast peer: 255.255.255.255
[  484.947443][T26789] tipc: Enabled bearer <udp:syz2>, priority 6
[  485.021969][T26793] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  485.127304][T26798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.700837][T26829] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  485.744730][T26831] netlink: 'syz.1.5985': attribute type 3 has an invalid length.
[  485.751075][T26831] netlink: 'syz.1.5985': attribute type 3 has an invalid length.
[  486.093628][T26005] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  486.192140][T26879] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16
[  486.239779][T26884] openvswitch: netlink: Message has 44 unknown bytes.
[  486.482059][T26912] netlink: 'syz.1.6013': attribute type 1 has an invalid length.
[  486.514600][T26916] netlink: 'syz.2.6015': attribute type 1 has an invalid length.
[  486.517477][T26916] netlink: 'syz.2.6015': attribute type 1 has an invalid length.
[  486.864529][T26936] openvswitch: netlink: Tunnel attr 4109 out of range max 16
[  486.902748][T26939] netlink: 'syz.2.6024': attribute type 3 has an invalid length.
[  487.380524][T26956] A٨ speed is unknown, defaulting to 1000
[  487.723909][T26975] veth0_to_bond: entered allmulticast mode
[  487.769416][T26982] bridge0: port 1(batadv0) entered disabled state
[  487.776184][T26982] bond12: (slave bridge24): Releasing backup interface
[  487.779879][T26982] bridge24: left promiscuous mode
[  488.127666][T26994] __nla_validate_parse: 30 callbacks suppressed
[  488.127686][T26994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6036'.
[  488.133958][T26994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6036'.
[  488.184072][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'.
[  488.233674][T26998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6038'.
[  488.403962][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6039'.
[  488.417757][T18512] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.421319][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6039'.
[  488.425043][T18512] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.430139][T18512] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.433582][T18512] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.640696][T27017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6043'.
[  488.644602][T27017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6043'.
[  488.649881][T27017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6043'.
[  488.653524][T27017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6043'.
[  488.702771][T27027] xt_TCPMSS: Only works on TCP SYN packets
[  489.162665][T27060] netlink: ct family unspecified
[  489.164485][T27060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.320233][T27073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  489.340259][T27073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  489.664279][T27084] netlink: ct family unspecified
[  489.666160][T27084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.749216][T27088] openvswitch: netlink: IP tunnel TTL not specified.
[  489.783973][T27092] IPVS: Error connecting to the multicast addr
[  489.796226][T27091] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16
[  489.870150][T27097] netlink: ct family unspecified
[  489.965358][T27102] validate_nla: 8 callbacks suppressed
[  489.965370][T27102] netlink: 'syz.1.6069': attribute type 11 has an invalid length.
[  490.153283][T27130] netlink: 'syz.0.6076': attribute type 10 has an invalid length.
[  490.593001][T27179] syzkaller0: entered promiscuous mode
[  490.595277][T27179] syzkaller0: entered allmulticast mode
[  490.619427][T27182] bridge_slave_0: invalid flags given to default FDB implementation
[  491.055876][T27205] veth0: entered promiscuous mode
[  491.060686][T27204] veth0: left promiscuous mode
[  491.066326][T27210] A٨: Caught tx_queue_len zero misconfig
[  491.262286][T27233] netlink: 'syz.2.6107': attribute type 10 has an invalid length.
[  491.314493][T27239] vlan0: entered promiscuous mode
[  491.316482][T27239] vlan0: entered allmulticast mode
[  491.539673][T27256] netlink: 'syz.1.6113': attribute type 11 has an invalid length.
[  491.542759][T27256] netlink: 'syz.1.6113': attribute type 23 has an invalid length.
[  491.671712][T27267] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002
[  491.971774][T27300] syzkaller0: entered promiscuous mode
[  491.974001][T27300] syzkaller0: entered allmulticast mode
[  492.155954][T27323] delete_channel: no stack
[  492.292696][T27334] A٨ speed is unknown, defaulting to 1000
[  492.394695][T27351] netlink: 'syz.2.6142': attribute type 1 has an invalid length.
[  492.401490][T27351] netlink: 'syz.2.6142': attribute type 2 has an invalid length.
[  492.409355][T27351] netlink: 'syz.2.6142': attribute type 1 has an invalid length.
[  492.411995][T27351] netlink: 'syz.2.6142': attribute type 2 has an invalid length.
[  492.422365][T27351] nbd: couldn't find a device at index 0
[  492.636232][T27369] syzkaller0: entered promiscuous mode
[  492.641802][T27369] syzkaller0: entered allmulticast mode
[  492.734264][T27373] netlink: 'syz.2.6149': attribute type 1 has an invalid length.
[  492.871266][T27382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  492.874459][T27382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  493.048755][T27392] netlink: 'syz.1.6155': attribute type 10 has an invalid length.
[  493.051587][T27392] net_ratelimit: 5 callbacks suppressed
[  493.051598][T27392] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  493.357785][T27404] __nla_validate_parse: 29 callbacks suppressed
[  493.357840][T27404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6156'.
[  493.415387][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6157'.
[  493.747194][T18512] bond19: (slave bridge19): link status up again after 0 ms
[  493.751095][ T5836] bond15: (slave bridge12): link status up again after 0 ms
[  493.753520][ T5836] bond15: (slave bridge12): failed to get link speed/duplex
[  493.767444][ T5836] bond19: (slave bridge19): link status up again after 0 ms
[  493.770296][T26005] bond17: (slave bridge15): link status up again after 0 ms
[  493.770951][T18512] bond16: (slave bridge14): link status up again after 0 ms
[  493.775175][ T5836] bond20: (slave bridge20): link status up again after 0 ms
[  493.775658][T18512] bond26: (slave bridge28): link status up again after 0 ms
[  493.789314][ T5836] bond26: (slave bridge28): link status up again after 0 ms
[  493.855390][T27429] x_tables: duplicate underflow at hook 1
[  494.112219][T27458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6173'.
[  494.155915][T27466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6175'.
[  494.231866][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'.
[  494.274638][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6182'.
[  494.572258][T27507] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6190'.
[  494.715995][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6192'.
[  494.926872][T27533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'.
[  494.932326][T27533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'.
[  495.076190][T27550] syzkaller0: entered promiscuous mode
[  495.082795][T27550] syzkaller0: entered allmulticast mode
[  495.142630][T27554] validate_nla: 6 callbacks suppressed
[  495.142646][T27554] netlink: 'syz.1.6201': attribute type 9 has an invalid length.
[  495.153502][T27552] netlink: 'syz.0.6202': attribute type 10 has an invalid length.
[  495.666350][T27582] netlink: 'syz.0.6214': attribute type 10 has an invalid length.
[  495.719519][T27587] netlink: 'syz.0.6216': attribute type 18 has an invalid length.
[  496.032286][T27615] tipc: Resetting bearer <eth:syzkaller0>
[  496.110137][T27626] x_tables: duplicate underflow at hook 1
[  496.676769][T27647] veth0_to_bond: left allmulticast mode
[  496.754439][T27647] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  496.758172][T27647] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  496.778953][T27647] vlan0: left promiscuous mode
[  496.831892][T27647] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  496.834115][T27647] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  496.884777][T27647] gretap1: left promiscuous mode
[  496.913395][T27647] tipc: Resetting bearer <eth:syzkaller0>
[  496.916443][T27647] syzkaller0: left promiscuous mode
[  496.919022][T27647] syzkaller0: left allmulticast mode
[  496.927716][T27647] bond3: left promiscuous mode
[  496.986434][T27647] veth123: left promiscuous mode
[  496.997718][T27647] dvmrp0: left promiscuous mode
[  497.039412][T27647] bond7: left promiscuous mode
[  497.046209][T27647] bond8: left promiscuous mode
[  497.050455][T27647] bond8: left allmulticast mode
[  497.056010][T27647] bond9: left promiscuous mode
[  497.059153][T27647] bond9: left allmulticast mode
[  497.064779][T27647] bond10: left promiscuous mode
[  497.066666][T27647] bond10: left allmulticast mode
[  497.076214][T27647] bond11: left promiscuous mode
[  497.078905][T27647] bond11: left allmulticast mode
[  497.086677][T27647] bond12: left promiscuous mode
[  497.089167][T27647] bond12: left allmulticast mode
[  497.098625][T27647] bond13: left promiscuous mode
[  497.101597][T27647] bond13: left allmulticast mode
[  497.111070][T27647] bond14: left promiscuous mode
[  497.117313][T27647] bond14: left allmulticast mode
[  497.133476][T27647] bond15: left promiscuous mode
[  497.135049][T27647] bond15: left allmulticast mode
[  497.145231][T27647] bond16: left promiscuous mode
[  497.149476][T27647] bond16: left allmulticast mode
[  497.158934][T27647] sit0: left promiscuous mode
[  497.183870][T27647] ip6tnl2: left allmulticast mode
[  497.192760][T27647] macsec1: left promiscuous mode
[  497.226231][T27647] bond17: left promiscuous mode
[  497.228474][T27647] bond17: left allmulticast mode
[  497.233732][T27647] macvlan2: left promiscuous mode
[  497.235790][T27647] macvlan2: left allmulticast mode
[  497.242291][T27647] ipip2: left promiscuous mode
[  497.266210][ T5942] A٨ speed is unknown, defaulting to 1000
[  497.269023][ T5942] syz0: Port: 1 Link DOWN
[  497.293571][ T5836] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  497.299960][ T5836] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  497.309136][ T5942] A٨ speed is unknown, defaulting to 1000
[  497.311958][ T5836] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  497.316061][ T5836] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  498.108109][   T12] net_ratelimit: 294 callbacks suppressed
[  498.108131][   T12] bond17: (slave bridge15): failed to get link speed/duplex
[  498.113778][   T12] bond22: (slave bridge23): failed to get link speed/duplex
[  498.128151][ T5836] bond24: (slave bridge25): failed to get link speed/duplex
[  498.137503][   T12] bond16: (slave bridge14): failed to get link speed/duplex
[  498.150550][   T12] bond15: (slave bridge12): failed to get link speed/duplex
[  498.157655][ T5836] bond18: (slave bridge17): failed to get link speed/duplex
[  498.217761][ T5836] bond17: (slave bridge15): failed to get link speed/duplex
[  498.227729][ T5836] bond22: (slave bridge23): failed to get link speed/duplex
[  498.237742][ T5836] bond26: (slave bridge28): failed to get link speed/duplex
[  498.247692][   T13] bond16: (slave bridge14): failed to get link speed/duplex
[  498.511160][T27721] __nla_validate_parse: 25 callbacks suppressed
[  498.511176][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6252'.
[  498.726484][T27736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6256'.
[  499.062854][T27760] netlink: 'syz.1.6264': attribute type 4 has an invalid length.
[  499.069048][T27760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6264'.
[  499.261460][T27772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6267'.
[  499.483672][T27780] netlink: 'syz.1.6271': attribute type 14 has an invalid length.
[  499.551855][T27786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.566717][T27786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.566794][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.583130][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.586481][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.590988][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'.
[  499.758036][T27801] tc_dump_action: action bad kind
[  500.008995][T27832] syzkaller0: entered promiscuous mode
[  500.011276][T27832] syzkaller0: entered allmulticast mode
[  500.014504][T27832] tipc: Resetting bearer <eth:syzkaller0>
[  500.429342][T27887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.455462][T27887] syzkaller0: entered promiscuous mode
[  500.458129][T27887] syzkaller0: entered allmulticast mode
[  500.461920][T27887] tipc: Resetting bearer <eth:syzkaller0>
[  500.479511][T27886] tipc: Resetting bearer <eth:syzkaller0>
[  501.815095][T27886] tipc: Disabling bearer <eth:syzkaller0>
[  501.942941][T27909] netlink: 'syz.0.6305': attribute type 3 has an invalid length.
[  502.865078][T27956] warn_alloc: 1 callbacks suppressed
[  502.865099][T27956] syz.2.6315: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  502.875321][T27956] CPU: 1 UID: 0 PID: 27956 Comm: syz.2.6315 Not tainted syzkaller #0 PREEMPT(full) 
[  502.875341][T27956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  502.875349][T27956] Call Trace:
[  502.875358][T27956]  <TASK>
[  502.875367][T27956]  dump_stack_lvl+0x1a9/0x280
[  502.875394][T27956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  502.875409][T27956]  ? __pfx__printk+0x10/0x10
[  502.875423][T27956]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  502.875436][T27956]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  502.875450][T27956]  ? cpuset_print_current_mems_allowed+0x2f1/0x360
[  502.875465][T27956]  warn_alloc+0x249/0x340
[  502.875488][T27956]  ? __pfx_warn_alloc+0x10/0x10
[  502.875511][T27956]  ? __get_vm_area_node+0x28f/0x300
[  502.875528][T27956]  ? nf_tables_newset+0x1354/0x2580
[  502.875547][T27956]  __vmalloc_node_range_noprof+0x690/0x12d0
[  502.875586][T27956]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  502.875607][T27956]  ? nf_tables_newset+0x1354/0x2580
[  502.875624][T27956]  ? rcu_is_watching+0x15/0xb0
[  502.875642][T27956]  ? nf_tables_newset+0x1354/0x2580
[  502.875657][T27956]  __kvmalloc_node_noprof+0x62f/0x8c0
[  502.875675][T27956]  ? nf_tables_newset+0x1354/0x2580
[  502.875692][T27956]  ? nft_set_lookup+0x128/0x150
[  502.875708][T27956]  ? __pfx_nft_hash_estimate+0xf/0x10
[  502.875724][T27956]  nf_tables_newset+0x1354/0x2580
[  502.875748][T27956]  ? __pfx_nf_tables_newset+0x10/0x10
[  502.875778][T27956]  ? __nla_parse+0x40/0x60
[  502.875800][T27956]  nfnetlink_rcv+0x1240/0x27b0
[  502.875845][T27956]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  502.875898][T27956]  ? netlink_deliver_tap+0x2e/0x1b0
[  502.875924][T27956]  netlink_unicast+0x80f/0x9b0
[  502.875949][T27956]  ? __pfx_netlink_unicast+0x10/0x10
[  502.875968][T27956]  ? netlink_sendmsg+0x650/0xb40
[  502.875978][T27956]  ? skb_put+0x11b/0x210
[  502.875998][T27956]  netlink_sendmsg+0x813/0xb40
[  502.876018][T27956]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.876033][T27956]  ? aa_sock_msg_perm+0xf1/0x1d0
[  502.876052][T27956]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  502.876064][T27956]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.876077][T27956]  ____sys_sendmsg+0xa84/0xaf0
[  502.876102][T27956]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.876126][T27956]  ? import_iovec+0x73/0xa0
[  502.876140][T27956]  ___sys_sendmsg+0x2a5/0x360
[  502.876156][T27956]  ? try_to_wake_up+0x82a/0x1380
[  502.876173][T27956]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.876217][T27956]  ? __fget_files+0x2a/0x420
[  502.876233][T27956]  ? __fget_files+0x3a0/0x420
[  502.876256][T27956]  __x64_sys_sendmsg+0x1bd/0x2a0
[  502.876274][T27956]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  502.876333][T27956]  ? do_syscall_64+0xb4/0xfa0
[  502.876351][T27956]  do_syscall_64+0xf0/0xfa0
[  502.876363][T27956]  ? lockdep_hardirqs_on+0x9b/0x150
[  502.876378][T27956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.876389][T27956]  ? exc_page_fault+0xa7/0xf0
[  502.876405][T27956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.876416][T27956] RIP: 0033:0x7fde7459c819
[  502.876429][T27956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.876439][T27956] RSP: 002b:00007fde7537e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.876454][T27956] RAX: ffffffffffffffda RBX: 00007fde74816090 RCX: 00007fde7459c819
[  502.876463][T27956] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000004d
[  502.876470][T27956] RBP: 00007fde74632c91 R08: 0000000000000000 R09: 0000000000000000
[  502.876476][T27956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.876483][T27956] R13: 00007fde74816128 R14: 00007fde74816090 R15: 00007fffe56241c8
[  502.876506][T27956]  </TASK>
[  502.876511][T27956] Mem-Info:
[  503.016401][T27956] active_anon:5304 inactive_anon:0 isolated_anon:0
[  503.016401][T27956]  active_file:1518 inactive_file:38477 isolated_file:0
[  503.016401][T27956]  unevictable:1768 dirty:109 writeback:0
[  503.016401][T27956]  slab_reclaimable:12405 slab_unreclaimable:135249
[  503.016401][T27956]  mapped:18325 shmem:2502 pagetables:1289
[  503.016401][T27956]  sec_pagetables:0 bounce:0
[  503.016401][T27956]  kernel_misc_reclaimable:0
[  503.016401][T27956]  free:1072488 free_pcp:26327 free_cma:0
[  503.035420][T27956] Node 0 active_anon:7212kB inactive_anon:0kB active_file:1508kB inactive_file:145500kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37600kB dirty:244kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7008kB pagetables:3192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  503.048014][T27956] Node 1 active_anon:13820kB inactive_anon:0kB active_file:4564kB inactive_file:8408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35700kB dirty:192kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7428kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  503.059976][T27956] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  503.072216][T27956] lowmem_reserve[]: 0 1593 2124 2124 2124
[  503.074591][T27956] Node 0 DMA32 free:1407524kB boost:0kB min:25096kB low:31368kB high:37640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:332kB inactive_anon:0kB active_file:36kB inactive_file:64kB unevictable:0kB writepending:8kB zspages:0kB present:2080636kB managed:1631672kB mlocked:0kB bounce:0kB free_pcp:38492kB local_pcp:120kB free_cma:0kB
[  503.088491][T27956] lowmem_reserve[]: 0 0 531 531 531
[  503.091217][T27956] Node 0 Normal free:10512kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6828kB inactive_anon:0kB active_file:1472kB inactive_file:145436kB unevictable:3536kB writepending:236kB zspages:0kB present:1572868kB managed:544132kB mlocked:0kB bounce:0kB free_pcp:2984kB local_pcp:384kB free_cma:0kB
[  503.104071][T27956] lowmem_reserve[]: 0 0 0 0 0
[  503.106091][T27956] Node 1 Normal free:2856692kB boost:0kB min:56256kB low:70320kB high:84384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13780kB inactive_anon:0kB active_file:4564kB inactive_file:8408kB unevictable:3536kB writepending:204kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:64132kB local_pcp:34460kB free_cma:0kB
[  503.119750][T27956] lowmem_reserve[]: 0 0 0 0 0
[  503.121773][T27956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  503.126787][T27956] Node 0 DMA32: 253*4kB (UM) 10*8kB (ME) 11*16kB (ME) 5*32kB (E) 2*64kB (E) 148*128kB (UME) 124*256kB (UME) 191*512kB (UM) 156*1024kB (UM) 4*2048kB (UM) 266*4096kB (UM) = 1407508kB
[  503.134314][T27956] Node 0 Normal: 202*4kB (UME) 217*8kB (ME) 77*16kB (UME) 46*32kB (UME) 16*64kB (ME) 7*128kB (M) 5*256kB (ME) 2*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 10496kB
[  503.141454][T27956] Node 1 Normal: 1385*4kB (UME) 1678*8kB (UME) 1012*16kB (UM) 526*32kB (UME) 297*64kB (UME) 214*128kB (UM) 97*256kB (UM) 43*512kB (UME) 26*1024kB (UM) 5*2048kB (UME) 653*4096kB (UM) = 2856788kB
[  503.149639][T27956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  503.153483][T27956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  503.157700][T27956] 42432 total pagecache pages
[  503.159541][T27956] 0 pages in swap cache
[  503.161257][T27956] Free swap  = 124996kB
[  503.162984][T27956] Total swap = 124996kB
[  503.164683][T27956] 1834877 pages RAM
[  503.166240][T27956] 0 pages HighMem/MovableOnly
[  503.168631][T27956] 388413 pages reserved
[  503.170326][T27956] 0 pages cma reserved
[  503.292537][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.297481][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.302702][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.305248][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.342567][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.345207][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.354078][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.356697][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.681918][T27992] A٨ speed is unknown, defaulting to 1000
[  503.719308][T27995] __nla_validate_parse: 64 callbacks suppressed
[  503.719325][T27995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6324'.
[  506.750065][T28013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6329'.
[  506.788678][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'.
[  506.845223][T28016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6329'.
[  506.990922][T28018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6330'.
[  506.996507][T28018] net_ratelimit: 282 callbacks suppressed
[  506.996522][T28018] openvswitch: netlink: Multiple metadata blocks provided
[  507.105919][T28026] openvswitch: netlink: Multiple metadata blocks provided
[  507.176566][T28031] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6334'.
[  507.190422][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6335'.
[  507.473653][T28048] openvswitch: netlink: Flow actions attr not present in new flow.
[  507.506491][T28055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6342'.
[  507.590330][T28059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6343'.
[  507.598488][T28063] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  507.650757][T28069] syzkaller1: entered promiscuous mode
[  507.652652][T28069] syzkaller1: entered allmulticast mode
[  507.671918][T28072] netlink: zone id is out of range
[  507.673885][T28072] netlink: zone id is out of range
[  507.676133][T28072] netlink: zone id is out of range
[  507.681018][T28072] netlink: zone id is out of range
[  507.685639][T28072] netlink: zone id is out of range
[  507.692352][T28072] netlink: zone id is out of range
[  507.695960][T28072] netlink: zone id is out of range
[  508.016338][T28106] netlink: 'syz.0.6352': attribute type 3 has an invalid length.
[  508.223127][T28111] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6353'.
[  509.102958][T28176] netlink: 'syz.2.6372': attribute type 2 has an invalid length.
[  509.158129][T28178] __nla_validate_parse: 3 callbacks suppressed
[  509.158150][T28178] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6373'.
[  509.172706][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6373'.
[  509.411159][T28187] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6375'.
[  509.417996][T28187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6375'.
[  509.480943][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6376'.
[  509.508557][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'.
[  509.534244][T28194] netlink: 'syz.1.6377': attribute type 2 has an invalid length.
[  509.547904][T28194] netlink: 'syz.1.6377': attribute type 11 has an invalid length.
[  509.558128][T28194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6377'.
[  509.624496][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6381'.
[  509.629887][T28203] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6377'.
[  509.961700][T28238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6391'.
[  510.359919][T28258] syzkaller1: entered promiscuous mode
[  510.362058][T28258] syzkaller1: entered allmulticast mode
[  510.365506][T28260] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  510.565283][T28268] syz_tun: left allmulticast mode
[  512.466317][T28376] net_ratelimit: 346 callbacks suppressed
[  512.466330][T28376] openvswitch: netlink: Multiple metadata blocks provided
[  512.479724][T28378] netlink: 'syz.1.6433': attribute type 11 has an invalid length.
[  513.429887][T28405] openvswitch: netlink: Multiple metadata blocks provided
[  513.688407][T28426] openvswitch: netlink: Multiple metadata blocks provided
[  514.396805][T28472] __nla_validate_parse: 18 callbacks suppressed
[  514.396818][T28472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6461'.
[  514.429789][T28476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6462'.
[  514.644064][T28493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6467'.
[  514.644954][T28494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6467'.
[  514.728010][T28498] openvswitch: netlink: Multiple metadata blocks provided
[  514.741079][T28500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6470'.
[  514.786123][T28504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6472'.
[  514.860181][T28513] openvswitch: netlink: Multiple metadata blocks provided
[  514.926596][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6477'.
[  514.954495][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6477'.
[  514.958217][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6477'.
[  514.961678][T28519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6477'.
[  515.200252][T28554] rdma_rxe: rxe_newlink: failed to add gre0
[  515.242249][T28554] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.248682][T28554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  515.257340][T28558] x_tables: duplicate underflow at hook 1
[  515.273837][T28559] ve4h1_macvtap: renamed from vlan1
[  515.524881][T28588] netlink: 'syz.1.6495': attribute type 2 has an invalid length.
[  516.149577][T28617] netlink: 'syz.0.6501': attribute type 4 has an invalid length.
[  516.153596][T28617] netlink: 'syz.0.6501': attribute type 1 has an invalid length.
[  516.264083][T28620] tunl0: Caught tx_queue_len zero misconfig
[  516.908436][T28682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  517.224075][T28697] xt_hashlimit: max too large, truncated to 1048576
[  517.631447][T28725] sch_tbf: burst 545 is lower than device lo mtu (1550) !
[  517.721783][T28733] syzkaller1: entered allmulticast mode
[  518.027691][T28756] vlan1: entered promiscuous mode
[  518.029999][T28756] vlan1: entered allmulticast mode
[  518.032138][T28756] hsr_slave_1: entered allmulticast mode
[  518.320505][T28772] syzkaller1: entered promiscuous mode
[  518.322915][T28772] syzkaller1: entered allmulticast mode
[  518.880109][T28806] netlink: 'syz.1.6571': attribute type 58 has an invalid length.
[  519.394536][T28853] netlink: 'syz.1.6588': attribute type 1 has an invalid length.
[  519.401355][T28853] __nla_validate_parse: 207 callbacks suppressed
[  519.401367][T28853] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.6588'.
[  519.471182][T28866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6592'.
[  519.482742][T28863] can: request_module (can-proto-0) failed.
[  519.487728][T28863] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6591'.
[  519.519706][T28868] netlink: 'syz.2.6593': attribute type 61 has an invalid length.
[  519.522395][T28868] netlink: 'syz.2.6593': attribute type 62 has an invalid length.
[  519.701857][T28883] A٨ speed is unknown, defaulting to 1000
[  519.775714][T28900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6604'.
[  519.860488][T28894] A٨ speed is unknown, defaulting to 1000
[  520.001804][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6606'.
[  520.004752][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'.
[  520.154047][T28928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6609'.
[  520.345210][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6612'.
[  520.443428][T28947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6615'.
[  520.448506][T28947] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6615'.
[  520.512420][T28950] bond31: entered allmulticast mode
[  520.514490][T28950] 8021q: adding VLAN 0 to HW filter on device bond31
[  520.715438][T28961] netlink: 'syz.0.6620': attribute type 21 has an invalid length.
[  520.720490][T28961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  520.723343][T28961] IPv6: NLM_F_CREATE should be set when creating new route
[  520.726310][T28961] IPv6: NLM_F_CREATE should be set when creating new route
[  520.728656][T28961] IPv6: NLM_F_CREATE should be set when creating new route
[  520.736263][T28961] netlink: 'syz.0.6620': attribute type 21 has an invalid length.
[  520.739458][T28961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  520.754507][T28961] pimreg: entered allmulticast mode
[  520.956539][T28988] delete_channel: no stack
[  521.121773][T29011] netlink: 'syz.2.6635': attribute type 3 has an invalid length.
[  521.124940][T29011] netlink: 'syz.2.6635': attribute type 3 has an invalid length.
[  521.178939][T29008] bond12: (slave lo): Releasing backup interface
[  521.181912][T29008] bond12: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  521.191540][T29008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  521.432240][   T12] tipc: Subscription rejected, illegal request
[  521.679965][T29066] A٨ speed is unknown, defaulting to 1000
[  522.459621][T29108] openvswitch: netlink: Unknown key attributes 2
[  522.510895][T29112] netlink: 'syz.0.6665': attribute type 1 has an invalid length.
[  523.170499][T29138] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.516356][T29149] xt_hashlimit: size too large, truncated to 1048576
[  523.518788][T29149] xt_hashlimit: invalid interval
[  523.589111][T29152] Set syz1 is full, maxelem 65536 reached
[  523.591187][T29153] Set syz1 is full, maxelem 65536 reached
[  523.764068][T29168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.766763][T29168] syzkaller0: entered promiscuous mode
[  523.769744][T29168] syzkaller0: entered allmulticast mode
[  523.774549][T29168] tipc: Resetting bearer <eth:syzkaller0>
[  523.804071][T29168] tipc: Resetting bearer <eth:syzkaller0>
[  523.808943][T29167] tipc: Resetting bearer <eth:syzkaller0>
[  523.824922][T29167] tipc: Disabling bearer <eth:syzkaller0>
[  524.011874][T29181] A٨ speed is unknown, defaulting to 1000
[  524.133156][T29180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.404242][T29198] netlink: 'syz.2.6692': attribute type 1 has an invalid length.
[  524.407738][T29198] netlink: 'syz.2.6692': attribute type 2 has an invalid length.
[  524.410975][T29198] netlink: 'syz.2.6692': attribute type 3 has an invalid length.
[  524.421945][T29199] netlink: 'syz.2.6692': attribute type 9 has an invalid length.
[  524.425641][T29199] __nla_validate_parse: 21 callbacks suppressed
[  524.425659][T29199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6692'.
[  524.610759][T29207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6695'.
[  524.702561][T29207] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6695'.
[  524.814684][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6698'.
[  525.022485][T29239] netlink: 'syz.0.6704': attribute type 30 has an invalid length.
[  525.075393][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6706'.
[  525.101720][T29243] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  525.329560][T29273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6716'.
[  525.451956][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'.
[  525.550375][T29299] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6721'.
[  525.553505][T29299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6721'.
[  525.558660][T29299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6721'.
[  525.573814][T29299] openvswitch: netlink: IPv6 tunnel dst address is zero
[  525.594618][T29299] syzkaller0: entered promiscuous mode
[  525.596413][T29299] syzkaller0: entered allmulticast mode
[  527.625933][T29375] A٨ speed is unknown, defaulting to 1000
[  527.722062][T29389] validate_nla: 3 callbacks suppressed
[  527.722079][T29389] netlink: 'syz.2.6746': attribute type 55 has an invalid length.
[  528.731923][T29420] netlink: 'syz.0.6758': attribute type 10 has an invalid length.
[  528.904558][T29439] sctp: [Deprecated]: syz.2.6766 (pid 29439) Use of int in maxseg socket option.
[  528.904558][T29439] Use struct sctp_assoc_value instead
[  529.215190][T29477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  529.596487][T29497] __nla_validate_parse: 52 callbacks suppressed
[  529.596501][T29497] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.6780'.
[  529.606123][T29497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6780'.
[  529.652039][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6781'.
[  529.680348][T29504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6782'.
[  529.758741][T29511] openvswitch: netlink: EtherType 50a is less than min 600
[  529.813203][T29519] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6788'.
[  529.818839][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6788'.
[  529.963326][T29538] syzkaller0: entered promiscuous mode
[  529.965064][T29538] syzkaller0: entered allmulticast mode
[  529.972924][T29535] A٨ speed is unknown, defaulting to 1000
[  530.011215][T29526] syz.2.6789: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  530.018132][T29526] CPU: 1 UID: 0 PID: 29526 Comm: syz.2.6789 Not tainted syzkaller #0 PREEMPT(full) 
[  530.018150][T29526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.018157][T29526] Call Trace:
[  530.018183][T29526]  <TASK>
[  530.018189][T29526]  dump_stack_lvl+0x1a9/0x280
[  530.018214][T29526]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.018227][T29526]  ? __pfx__printk+0x10/0x10
[  530.018239][T29526]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  530.018251][T29526]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  530.018261][T29526]  ? cpuset_print_current_mems_allowed+0x2f1/0x360
[  530.018275][T29526]  warn_alloc+0x249/0x340
[  530.018297][T29526]  ? __pfx_warn_alloc+0x10/0x10
[  530.018315][T29526]  ? __get_vm_area_node+0x28f/0x300
[  530.018326][T29526]  ? xskq_create+0xbf/0x170
[  530.018338][T29526]  __vmalloc_node_range_noprof+0x690/0x12d0
[  530.018359][T29526]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  530.018369][T29526]  ? __kasan_kmalloc+0x93/0xb0
[  530.018384][T29526]  vmalloc_user_noprof+0xad/0xe0
[  530.018393][T29526]  ? xskq_create+0xbf/0x170
[  530.018401][T29526]  xskq_create+0xbf/0x170
[  530.018410][T29526]  xsk_init_queue+0xad/0x110
[  530.018418][T29526]  xsk_setsockopt+0x603/0x990
[  530.018427][T29526]  ? __pfx_xsk_setsockopt+0x10/0x10
[  530.018435][T29526]  ? __pfx_aa_sk_perm+0x10/0x10
[  530.018446][T29526]  ? aa_sock_opt_perm+0xff/0x1b0
[  530.018457][T29526]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  530.018465][T29526]  ? __pfx_xsk_setsockopt+0x10/0x10
[  530.018473][T29526]  do_sock_setsockopt+0x17c/0x1b0
[  530.018485][T29526]  __x64_sys_setsockopt+0x13d/0x1b0
[  530.018496][T29526]  do_syscall_64+0xf0/0xfa0
[  530.018505][T29526]  ? lockdep_hardirqs_on+0x9b/0x150
[  530.018513][T29526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.018520][T29526]  ? exc_page_fault+0xa7/0xf0
[  530.018547][T29526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.018555][T29526] RIP: 0033:0x7fde7459c819
[  530.018563][T29526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.018569][T29526] RSP: 002b:00007fde7537e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  530.018578][T29526] RAX: ffffffffffffffda RBX: 00007fde74816090 RCX: 00007fde7459c819
[  530.018583][T29526] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000024
[  530.018587][T29526] RBP: 00007fde74632c91 R08: 0000000000000004 R09: 0000000000000000
[  530.018592][T29526] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  530.018596][T29526] R13: 00007fde74816128 R14: 00007fde74816090 R15: 00007fffe56241c8
[  530.018608][T29526]  </TASK>
[  530.020419][T29526] Mem-Info:
[  530.106834][T29526] active_anon:13528 inactive_anon:0 isolated_anon:0
[  530.106834][T29526]  active_file:1518 inactive_file:38487 isolated_file:0
[  530.106834][T29526]  unevictable:1768 dirty:72 writeback:0
[  530.106834][T29526]  slab_reclaimable:12821 slab_unreclaimable:135769
[  530.106834][T29526]  mapped:18345 shmem:2574 pagetables:1259
[  530.106834][T29526]  sec_pagetables:0 bounce:0
[  530.106834][T29526]  kernel_misc_reclaimable:0
[  530.106834][T29526]  free:1069083 free_pcp:14279 free_cma:0
[  530.122094][T29526] Node 0 active_anon:19240kB inactive_anon:0kB active_file:1528kB inactive_file:145524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37524kB dirty:180kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7152kB pagetables:3028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  530.132369][T29526] Node 1 active_anon:34872kB inactive_anon:0kB active_file:4544kB inactive_file:8424kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35856kB dirty:108kB writeback:0kB shmem:5380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7440kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  530.142517][T29526] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  530.152141][T29526] lowmem_reserve[]: 0 1593 2124 2124 2124
[  530.153900][T29526] Node 0 DMA32 free:1418392kB boost:0kB min:25096kB low:31368kB high:37640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12428kB inactive_anon:0kB active_file:56kB inactive_file:76kB unevictable:0kB writepending:28kB zspages:0kB present:2080636kB managed:1631672kB mlocked:0kB bounce:0kB free_pcp:14184kB local_pcp:204kB free_cma:0kB
[  530.164008][T29526] lowmem_reserve[]: 0 0 531 531 531
[  530.165729][T29526] Node 0 Normal free:9692kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6812kB inactive_anon:0kB active_file:1472kB inactive_file:145448kB unevictable:3536kB writepending:152kB zspages:0kB present:1572868kB managed:544132kB mlocked:0kB bounce:0kB free_pcp:2416kB local_pcp:200kB free_cma:0kB
[  530.176630][T29526] lowmem_reserve[]: 0 0 0 0 0
[  530.179160][T29526] Node 1 Normal free:2832384kB boost:0kB min:56256kB low:70320kB high:84384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34872kB inactive_anon:0kB active_file:4544kB inactive_file:8424kB unevictable:3536kB writepending:108kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:40884kB local_pcp:10528kB free_cma:0kB
[  530.189913][T29526] lowmem_reserve[]: 0 0 0 0 0
[  530.191595][T29526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  530.199517][T29526] Node 0 DMA32: 60*4kB (M) 41*8kB (ME) 28*16kB (UME) 47*32kB (UM) 99*64kB (UME) 182*128kB (UM) 155*256kB (UME) 186*512kB (UM) 152*1024kB (U) 3*2048kB (UM) 266*4096kB (UM) = 1418392kB
[  530.205612][T29526] Node 0 Normal: 133*4kB (UME) 231*8kB (UME) 41*16kB (UME) 42*32kB (UME) 15*64kB (ME) 8*128kB (ME) 5*256kB (ME) 2*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 9692kB
[  530.211185][T29526] Node 1 Normal: 2*4kB (UE) 1*8kB (U) 695*16kB (UE) 544*32kB (UE) 336*64kB (UME) 195*128kB (UME) 89*256kB (UE) 43*512kB (UE) 23*1024kB (UE) 9*2048kB (UM) 652*4096kB (UM) = 2832384kB
[  530.216670][T29526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  530.222217][T29526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  530.225144][T29526] 42579 total pagecache pages
[  530.226722][T29526] 0 pages in swap cache
[  530.228336][T29526] Free swap  = 124996kB
[  530.229614][T29526] Total swap = 124996kB
[  530.230902][T29526] 1834877 pages RAM
[  530.232131][T29526] 0 pages HighMem/MovableOnly
[  530.233565][T29526] 388413 pages reserved
[  530.234914][T29526] 0 pages cma reserved
[  530.588207][T29566] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  530.651461][T29573] tipc: Resetting bearer <eth:syzkaller0>
[  530.810934][T29588] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.6807'.
[  530.899058][T29591] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6808'.
[  531.065507][T29599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'.
[  531.090712][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6811'.
[  531.203781][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  531.208508][ T5836] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  531.212328][ T5836] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  531.215769][ T5836] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  532.442517][T29671] ip6tnl0: Caught tx_queue_len zero misconfig
[  532.553306][T29686] netlink: 'syz.2.6841': attribute type 3 has an invalid length.
[  533.055821][T29695] sctp: [Deprecated]: syz.2.6844 (pid 29695) Use of int in max_burst socket option deprecated.
[  533.055821][T29695] Use struct sctp_assoc_value instead
[  534.662491][T29702] syzkaller0: left promiscuous mode
[  534.664328][T29702] syzkaller0: left allmulticast mode
[  534.666225][T29702] tipc: Resetting bearer <eth:syzkaller0>
[  534.781114][T29724] __nla_validate_parse: 20 callbacks suppressed
[  534.781132][T29724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6849'.
[  534.842495][T29728] netlink: 736 bytes leftover after parsing attributes in process `syz.0.6851'.
[  534.923658][T29738] netlink: 'syz.0.6854': attribute type 1 has an invalid length.
[  534.926337][T29738] netlink: 'syz.0.6854': attribute type 22 has an invalid length.
[  534.930213][T29738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6854'.
[  535.213162][T29749] netlink: 'syz.0.6857': attribute type 1 has an invalid length.
[  535.216425][T29749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6857'.
[  535.259828][T29751] netlink: 'syz.0.6858': attribute type 2 has an invalid length.
[  535.271483][T29751] hmac(sha224: entered promiscuous mode
[  535.275175][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6858'.
[  535.275244][T29752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6858'.
[  535.678090][T29779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6863'.
[  535.978957][T29804] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  536.321232][T29818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6874'.
[  536.632121][T29829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6875'.
[  536.660747][T29833] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  537.025286][T29855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6882'.
[  537.219395][T29857] syzkaller1: entered promiscuous mode
[  537.221297][T29857] syzkaller1: entered allmulticast mode
[  537.533025][T29867] syzkaller0: entered promiscuous mode
[  537.534802][T29867] syzkaller0: entered allmulticast mode
[  537.536753][T29867] tipc: Resetting bearer <eth:syzkaller0>
[  537.662286][T29878] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  539.024783][T29966] sctp: [Deprecated]: syz.0.6909 (pid 29966) Use of int in max_burst socket option.
[  539.024783][T29966] Use struct sctp_assoc_value instead
[  539.262299][T29981] netlink: 'syz.0.6913': attribute type 8 has an invalid length.
[  540.895268][T29992] netlink: 'syz.1.6916': attribute type 14 has an invalid length.
[  541.098100][T30017] __nla_validate_parse: 12 callbacks suppressed
[  541.098114][T30017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6924'.
[  541.198727][T30026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6926'.
[  541.222252][T30026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6926'.
[  541.240375][T30031] syz_tun: entered allmulticast mode
[  541.254098][T30031] dvmrp8: entered allmulticast mode
[  541.270673][T30030] syz_tun: left allmulticast mode
[  541.275491][T30034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6930'.
[  541.300306][T30036] netlink: 'syz.2.6929': attribute type 3 has an invalid length.
[  541.304386][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'.
[  541.318775][T30038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6931'.
[  541.333845][T30038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6931'.
[  541.604995][T30052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6934'.
[  542.369544][T30072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6938'.
[  542.743281][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6945'.
[  542.830104][T30100] openvswitch: netlink: Missing key (keys=40, expected=80)
[  543.093234][T30121] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  543.253566][T30130] Bluetooth: hci0: Opcode 0x080f failed: -22
[  543.256061][T30129] Bluetooth: hci0: Opcode 0x080f failed: -22
[  543.262197][T30128] delete_channel: no stack
[  543.757503][T30162] geneve3: entered promiscuous mode
[  543.762874][ T5836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.765671][ T5836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.775494][ T5836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.789241][ T5836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.732139][T30197] netlink: 'syz.0.6977': attribute type 64 has an invalid length.
[  544.741574][T30197] tipc: Resetting bearer <eth:syzkaller0>
[  544.841204][T30205] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  544.929766][T30208] netlink: 'syz.1.6982': attribute type 1 has an invalid length.
[  545.299087][ T5199] Bluetooth: hci0: command tx timeout
[  545.386008][T30255] netlink: Unknown conntrack attr (type=2304, max=9)
[  545.389677][T30256] netlink: Unknown conntrack attr (type=2304, max=9)
[  545.942702][T30300] openvswitch: netlink: Flow key attr not present in new flow.
[  546.059195][T30306] netlink: 'syz.2.7006': attribute type 1 has an invalid length.
[  546.105322][T30313] IPVS: Unknown mcast interface: vcan0
[  546.113544][T30313] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  546.146263][T30316] __nla_validate_parse: 30 callbacks suppressed
[  546.146274][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7009'.
[  546.227364][T30326] xfrm3: entered allmulticast mode
[  546.488482][T30357] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.535596][T30357] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.543118][T30367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7023'.
[  546.586880][T30357] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.645549][T30357] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.709990][T26005] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  546.723119][T26005] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  546.736466][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  546.750979][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  547.065339][T30414] syzkaller1: entered promiscuous mode
[  547.069637][T30414] syzkaller1: entered allmulticast mode
[  547.098721][   T59] block nbd2: Receive control failed (result -32)
[  547.163301][T30419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7036'.
[  547.236594][T30426] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  547.286128][T30434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7040'.
[  547.579582][T30451] A٨ speed is unknown, defaulting to 1000
[  547.650373][T30455] openvswitch: netlink: Flow key attribute not present in set flow.
[  547.682935][T30457] syzkaller0: entered promiscuous mode
[  547.685134][T30457] syzkaller0: entered allmulticast mode
[  547.844277][T30461] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  547.910191][T30465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7050'.
[  547.929026][T30463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  547.947577][T30465] netlink: 'syz.1.7050': attribute type 22 has an invalid length.
[  548.005962][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7050'.
[  548.099556][T30470] bond19: (slave veth313): Enslaving as an active interface with a down link
[  548.124312][T30473] bond19: (slave veth315): Enslaving as an active interface with a down link
[  548.212421][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7055'.
[  548.218577][T30481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7054'.
[  548.241622][T30481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7054'.
[  548.245243][T30481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7054'.
[  548.344914][T30484] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  548.763166][T30503] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  548.922912][T30511] netlink: 'syz.0.7067': attribute type 13 has an invalid length.
[  548.925563][T30511] netlink: 'syz.0.7067': attribute type 17 has an invalid length.
[  548.945341][T30511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  549.470635][T30534] netlink: 'syz.2.7073': attribute type 2 has an invalid length.
[  549.473596][T30534] netlink: 'syz.2.7073': attribute type 1 has an invalid length.
[  549.543561][T30544] netlink: 'syz.1.7074': attribute type 2 has an invalid length.
[  549.685919][T30552] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  549.854438][T30561] x_tables: duplicate underflow at hook 2
[  549.898363][T30569] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  550.676228][T30614] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  550.766815][T30616] netlink: 'syz.1.7095': attribute type 1 has an invalid length.
[  551.255267][T30640] __nla_validate_parse: 114 callbacks suppressed
[  551.255278][T30640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7102'.
[  551.266173][T30640] netlink: 'syz.0.7102': attribute type 1 has an invalid length.
[  551.268851][T30640] netlink: 'syz.0.7102': attribute type 2 has an invalid length.
[  551.495635][T30660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7107'.
[  551.504987][T30660] netlink: 412 bytes leftover after parsing attributes in process `syz.1.7107'.
[  551.509508][T30660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7107'.
[  551.598213][T30674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7111'.
[  551.604809][T30670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7111'.
[  551.620362][T30665] A٨ speed is unknown, defaulting to 1000
[  551.623836][T30674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7111'.
[  551.628357][T30670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7111'.
[  551.722894][T30684] netlink: 'syz.2.7113': attribute type 1 has an invalid length.
[  551.825541][T30690] pim6reg1: entered promiscuous mode
[  551.829050][T30690] pim6reg1: entered allmulticast mode
[  551.985372][T30698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7118'.
[  551.994433][T30698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7118'.
[  552.308566][T30717] lo: entered allmulticast mode
[  552.310268][T30717] lo: left allmulticast mode
[  552.355569][T30719] sit2: entered allmulticast mode
[  552.383799][T30723] openvswitch: netlink: Flow key attribute not present in set flow.
[  552.421918][T30725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.659029][T30737] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  552.721455][T30747] netlink: 'syz.0.7134': attribute type 10 has an invalid length.
[  552.821819][T30759] netlink: 'syz.1.7135': attribute type 3 has an invalid length.
[  552.954303][T30767] A٨ speed is unknown, defaulting to 1000
[  553.124119][T30785] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  553.363531][T30804] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  553.436786][T30808] openvswitch: netlink: Flow key attr not present in new flow.
[  553.823561][T30845] netlink: 'syz.2.7165': attribute type 1 has an invalid length.
[  554.092738][T30876] netlink: 'syz.0.7173': attribute type 10 has an invalid length.
[  554.452258][T30914] SET target dimension over the limit!
[  554.968107][T30947] sctp: [Deprecated]: syz.0.7198 (pid 30947) Use of int in maxseg socket option.
[  554.968107][T30947] Use struct sctp_assoc_value instead
[  555.059626][T30951] openvswitch: netlink: Message has 16 unknown bytes.
[  555.096019][T30953] Timeout policy `syz0' can only be used by L3 protocol number 34924
[  555.344014][T30980] openvswitch: netlink: Key 32 has unexpected len 12 expected 2
[  555.420431][T30989] veth0: entered promiscuous mode
[  555.424867][T30988] veth0: left promiscuous mode
[  555.555371][T31005] openvswitch: netlink: Key 32 has unexpected len 12 expected 2
[  555.639142][T31003] netlink: zone id is out of range
[  555.640917][T31003] netlink: zone id is out of range
[  555.642448][T31003] netlink: zone id is out of range
[  555.647204][T31003] netlink: zone id is out of range
[  555.737869][T31025] netlink: 'syz.2.7225': attribute type 2 has an invalid length.
[  555.741124][T31025] netlink: 'syz.2.7225': attribute type 8 has an invalid length.
[  556.061336][T31053] netlink: 'syz.1.7235': attribute type 3 has an invalid length.
[  556.243723][T31078] x_tables: duplicate underflow at hook 1
[  556.277870][T31077] A٨ speed is unknown, defaulting to 1000
[  556.314874][T31084] __nla_validate_parse: 84 callbacks suppressed
[  556.314892][T31084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7243'.
[  556.381996][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7243'.
[  556.816520][T31105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7249'.
[  556.966595][T31114] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7251'.
[  557.112219][T31118] A٨ speed is unknown, defaulting to 1000
[  557.190351][T31122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7253'.
[  557.341117][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7256'.
[  557.346449][T31130] syz_tun: entered allmulticast mode
[  557.495701][T31144] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7260'.
[  557.644878][T31157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7263'.
[  557.663250][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7263'.
[  557.739743][T31159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7264'.
[  558.129750][T31129] syz_tun: left allmulticast mode
[  558.672901][T31242] A٨ speed is unknown, defaulting to 1000
[  559.125886][T31261] syz_tun: entered promiscuous mode
[  560.108755][T31322] net_ratelimit: 13 callbacks suppressed
[  560.108769][T31322] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  560.201648][T31327] openvswitch: netlink: Flow key attr not present in new flow.
[  561.096647][T31351] syzkaller0: left promiscuous mode
[  561.099352][T31351] syzkaller0: left allmulticast mode
[  561.101617][T31351] tipc: Resetting bearer <eth:syzkaller0>
[  561.366754][T31363] A٨ speed is unknown, defaulting to 1000
[  561.726920][T31375] __nla_validate_parse: 26 callbacks suppressed
[  561.738509][T31375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7336'.
[  561.782820][T31377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7337'.
[  561.829504][T31379] validate_nla: 66 callbacks suppressed
[  561.829519][T31379] netlink: 'syz.0.7338': attribute type 8 has an invalid length.
[  561.834063][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7338'.
[  561.845661][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7338'.
[  561.889772][T31383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7339'.
[  561.906027][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7340'.
[  561.921360][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7340'.
[  561.925004][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7340'.
[  561.934718][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7340'.
[  561.944228][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7340'.
[  562.161950][T31416] netlink: 'syz.2.7344': attribute type 1 has an invalid length.
[  563.182026][T31522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  563.184935][T31522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  563.216383][T31527] netlink: 'syz.1.7366': attribute type 2 has an invalid length.
[  563.613291][T31562] syz_tun: entered allmulticast mode
[  563.615390][T31562] dvmrp8: left allmulticast mode
[  563.680428][T31561] syz_tun: left allmulticast mode
[  564.126685][T31617] A٨ speed is unknown, defaulting to 1000
[  565.024746][T31705] tipc: Resetting bearer <eth:syzkaller0>
[  565.030886][T31705] bond19: (slave veth313): Releasing active interface
[  565.044689][T31705] bond19: (slave veth315): Releasing active interface
[  565.085928][T31711] netlink: 'syz.2.7416': attribute type 2 has an invalid length.
[  565.248327][T31733] xt_TPROXY: Can be used only with -p tcp or -p udp
[  565.263840][T31735] tipc: Resetting bearer <eth:syzkaller0>
[  565.316410][T31741] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  565.631432][T31774] x_tables: duplicate entry at hook 2
[  565.798864][T31784] xt_ecn: cannot match TCP bits for non-tcp packets
[  565.881495][T31788] syzkaller1: entered promiscuous mode
[  565.883696][T31788] syzkaller1: entered allmulticast mode
[  566.253263][T31832] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  566.366002][T31838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.368562][T31838] IPv6: NLM_F_CREATE should be set when creating new route
[  566.461868][T31849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  566.539953][T31854] nbd: couldn't find a device at index 0
[  566.933490][T31878] __nla_validate_parse: 68 callbacks suppressed
[  566.933539][T31878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7466'.
[  567.055341][T31884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7469'.
[  567.060228][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7469'.
[  567.117926][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7471'.
[  567.572128][T31911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7477'.
[  567.582576][T31923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7479'.
[  567.650366][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7482'.
[  568.017579][T31961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7490'.
[  568.070578][T31967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7492'.
[  568.087445][T31967] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7492'.
[  568.187922][T31977] A٨ speed is unknown, defaulting to 1000
[  568.421073][T31989] Set syz1 is full, maxelem 65536 reached
[  568.452995][T31994] openvswitch: netlink: Missing key (keys=40, expected=80)
[  568.878595][T32008] bond14: option all_slaves_active: invalid value (2)
[  568.882666][T32008] bond14 (unregistering): Released all slaves
[  569.595801][T32058] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  569.631822][T32060] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  569.643101][T32060] bond14: (slave lo): Enslaving as an active interface with an up link
[  569.645902][T32060] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  569.770348][T32082] bpq0: entered allmulticast mode
[  569.772626][T32082] 
[  569.773404][T32082] ======================================================
[  569.775755][T32082] WARNING: possible circular locking dependency detected
[  569.778076][T32082] syzkaller #0 Not tainted
[  569.779545][T32082] ------------------------------------------------------
[  569.781897][T32082] syz.2.7525/32082 is trying to acquire lock:
[  569.783812][T32082] ffffffff8f834a98 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  569.786744][T32082] 
[  569.786744][T32082] but task is already holding lock:
[  569.789153][T32082] ffffffff8f834a38 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  569.792194][T32082] 
[  569.792194][T32082] which lock already depends on the new lock.
[  569.792194][T32082] 
[  569.795366][T32082] 
[  569.795366][T32082] the existing dependency chain (in reverse order) is:
[  569.798279][T32082] 
[  569.798279][T32082] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  569.800867][T32082]        lock_acquire+0x11f/0x350
[  569.802437][T32082]        _raw_spin_lock_bh+0x36/0x50
[  569.804075][T32082]        nr_rt_ioctl+0x40c/0xf90
[  569.805612][T32082]        sock_do_ioctl+0x101/0x320
[  569.807208][T32082]        sock_ioctl+0x5c6/0x7f0
[  569.808915][T32082]        __se_sys_ioctl+0xfc/0x170
[  569.810619][T32082]        do_syscall_64+0xf0/0xfa0
[  569.812140][T32082]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.814101][T32082] 
[  569.814101][T32082] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  569.816570][T32082]        lock_acquire+0x11f/0x350
[  569.818224][T32082]        _raw_spin_lock_bh+0x36/0x50
[  569.820263][T32082]        nr_rt_ioctl+0x215/0xf90
[  569.822051][T32082]        sock_do_ioctl+0x101/0x320
[  569.824030][T32082]        sock_ioctl+0x5c6/0x7f0
[  569.825906][T32082]        __se_sys_ioctl+0xfc/0x170
[  569.827874][T32082]        do_syscall_64+0xf0/0xfa0
[  569.829818][T32082]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.832249][T32082] 
[  569.832249][T32082] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  569.835208][T32082]        validate_chain+0xb9a/0x2130
[  569.837330][T32082]        __lock_acquire+0xab8/0xd20
[  569.839378][T32082]        lock_acquire+0x11f/0x350
[  569.841341][T32082]        _raw_spin_lock_bh+0x36/0x50
[  569.843374][T32082]        nr_rt_device_down+0xbe/0x860
[  569.845406][T32082]        nr_device_event+0x137/0x150
[  569.847391][T32082]        notifier_call_chain+0x1b6/0x3e0
[  569.849362][T32082]        __dev_notify_flags+0x16d/0x310
[  569.851176][T32082]        netif_change_flags+0xe8/0x1a0
[  569.852918][T32082]        dev_change_flags+0x130/0x260
[  569.854601][T32082]        dev_ioctl+0x7b4/0x1150
[  569.856125][T32082]        sock_do_ioctl+0x23e/0x320
[  569.857752][T32082]        sock_ioctl+0x5c6/0x7f0
[  569.859314][T32082]        __se_sys_ioctl+0xfc/0x170
[  569.861128][T32082]        do_syscall_64+0xf0/0xfa0
[  569.862750][T32082]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.864747][T32082] 
[  569.864747][T32082] other info that might help us debug this:
[  569.864747][T32082] 
[  569.867921][T32082] Chain exists of:
[  569.867921][T32082]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  569.867921][T32082] 
[  569.872162][T32082]  Possible unsafe locking scenario:
[  569.872162][T32082] 
[  569.874488][T32082]        CPU0                    CPU1
[  569.876146][T32082]        ----                    ----
[  569.877878][T32082]   lock(nr_neigh_list_lock);
[  569.879323][T32082]                                lock(&nr_node->node_lock);
[  569.881648][T32082]                                lock(nr_neigh_list_lock);
[  569.883831][T32082]   lock(nr_node_list_lock);
[  569.885247][T32082] 
[  569.885247][T32082]  *** DEADLOCK ***
[  569.885247][T32082] 
[  569.887813][T32082] 2 locks held by syz.2.7525/32082:
[  569.889448][T32082]  #0: ffffffff8f6d98c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  569.892367][T32082]  #1: ffffffff8f834a38 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  569.895544][T32082] 
[  569.895544][T32082] stack backtrace:
[  569.897379][T32082] CPU: 0 UID: 0 PID: 32082 Comm: syz.2.7525 Not tainted syzkaller #0 PREEMPT(full) 
[  569.897390][T32082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.897396][T32082] Call Trace:
[  569.897402][T32082]  <TASK>
[  569.897409][T32082]  dump_stack_lvl+0x1a9/0x280
[  569.897430][T32082]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.897443][T32082]  ? __pfx__printk+0x10/0x10
[  569.897456][T32082]  print_circular_bug+0x2ed/0x300
[  569.897499][T32082]  check_noncircular+0x134/0x160
[  569.897511][T32082]  validate_chain+0xb9a/0x2130
[  569.897524][T32082]  ? neigh_ifdown+0x1f/0x30
[  569.897538][T32082]  ? rt6_disable_ip+0x6c8/0x730
[  569.897557][T32082]  __lock_acquire+0xab8/0xd20
[  569.897578][T32082]  ? nr_rt_device_down+0xbe/0x860
[  569.897589][T32082]  lock_acquire+0x11f/0x350
[  569.897601][T32082]  ? nr_rt_device_down+0xbe/0x860
[  569.897617][T32082]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  569.897631][T32082]  ? nr_rt_device_down+0xbe/0x860
[  569.897644][T32082]  _raw_spin_lock_bh+0x36/0x50
[  569.897657][T32082]  ? nr_rt_device_down+0xbe/0x860
[  569.897668][T32082]  nr_rt_device_down+0xbe/0x860
[  569.897681][T32082]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  569.897704][T32082]  nr_device_event+0x137/0x150
[  569.897717][T32082]  notifier_call_chain+0x1b6/0x3e0
[  569.897731][T32082]  __dev_notify_flags+0x16d/0x310
[  569.897745][T32082]  ? __pfx___dev_notify_flags+0x10/0x10
[  569.897758][T32082]  ? __dev_change_flags+0x54a/0x6e0
[  569.897775][T32082]  ? __pfx___dev_change_flags+0x10/0x10
[  569.897787][T32082]  ? full_name_hash+0x92/0xe0
[  569.897798][T32082]  netif_change_flags+0xe8/0x1a0
[  569.897814][T32082]  dev_change_flags+0x130/0x260
[  569.897829][T32082]  dev_ioctl+0x7b4/0x1150
[  569.897843][T32082]  sock_do_ioctl+0x23e/0x320
[  569.897856][T32082]  ? __pfx_sock_do_ioctl+0x10/0x10
[  569.897895][T32082]  sock_ioctl+0x5c6/0x7f0
[  569.897912][T32082]  ? __pfx_sock_ioctl+0x10/0x10
[  569.897926][T32082]  ? __fget_files+0x3a0/0x420
[  569.897942][T32082]  ? __fget_files+0x2a/0x420
[  569.897958][T32082]  ? bpf_lsm_file_ioctl+0x9/0x20
[  569.897973][T32082]  ? __pfx_sock_ioctl+0x10/0x10
[  569.897984][T32082]  __se_sys_ioctl+0xfc/0x170
[  569.898000][T32082]  do_syscall_64+0xf0/0xfa0
[  569.898015][T32082]  ? lockdep_hardirqs_on+0x9b/0x150
[  569.898028][T32082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.898039][T32082]  ? exc_page_fault+0xa7/0xf0
[  569.898050][T32082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.898061][T32082] RIP: 0033:0x7fde7459c819
[  569.898074][T32082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.898084][T32082] RSP: 002b:00007fde7539f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  569.898097][T32082] RAX: ffffffffffffffda RBX: 00007fde74815fa0 RCX: 00007fde7459c819
[  569.898107][T32082] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000d
[  569.898115][T32082] RBP: 00007fde74632c91 R08: 0000000000000000 R09: 0000000000000000
[  569.898123][T32082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.898129][T32082] R13: 00007fde74816038 R14: 00007fde74815fa0 R15: 00007fffe56241c8
[  569.898142][T32082]  </TASK>
[  570.036731][T32087] netlink: 'syz.1.7526': attribute type 7 has an invalid length.
