last executing test programs:

5m7.523297979s ago: executing program 2 (id=1030):
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="322edfcfd3246129ade2fe5949c5eb95c4f5102d5063db2bb79e5f380476e543d2f6d322b792241c21483e977d2ec5c70619251edc33fdfe8cf122e2ed45b8435d76cd779d8eb59bfcadf4f640f353e0b8dc4e72fc77dd8c1c4105a6d2158e2db652cc2df377ab0aa4aa35174d317441008638fd60bf842808be488283203581bcdf2d7704cadd9d1bbc4a38626e56988dac7bf57add9a1f631aa514628e219f82fc3b76fb63f10cec9882fce0bc21c38d6f2378a14c9f6e6fed036e332837910423e7d90c72782cac8e24100bda26646ca9244ad605470097f4bde815f4af81065531a518a98627a33aff", @ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r1 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r8, 0x118, 0x4, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r6, 0x411, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040841}, 0x2000800) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, 0x0, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004c0}, 0x48000) (async)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
close(r1) (async)
r14 = accept4(r13, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r14, @ANYBLOB="fd1f9f01289949bd97dc1b245592e1b26f2bdb66b35f28bf5887ac92b3733a381448e7976d6c9c774aead8eb00a117"], 0x1c}}, 0x20000080)

5m7.44651131s ago: executing program 2 (id=1031):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x80000000)
unshare(0x20000400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, 0xffffffffffffffff, 0x7}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
close(r2)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @local}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8963}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0xc4)
listen(r4, 0x40)
syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000240600fe8000000000000000000000000000bbfe80000000000000000051d1000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c200009078000302021e0c810e00000000000000060000"], 0x0)

5m7.445469378s ago: executing program 2 (id=1032):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x8ff}], 0x1}}], 0x1, 0x80)

5m6.575644577s ago: executing program 2 (id=1039):
shutdown(0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x11, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
shutdown(r6, 0x0)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r5, 0x0, 0x10fea7, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010)

5m5.666402248s ago: executing program 2 (id=1060):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8b39}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000480)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "f6dd59a2a148f7f61a8b3c3daf37fb30107112eaf9cfca23823f79e955fcd53b", 0x10, 0x10000, 0x8, 0x5378}, 0x3c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)={0x654, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5af6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf851}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x339}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x358, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xad, 0x3, "8daa59958ad95f0885775014796bfd72a9e8694644df27b6dc6cd3d9314da1ee88e237fefa0e78559e7eb31464599b97fb454145b58007ee24c7978fad60b95347b533e2f8ede1b5cf35e5fa8379c1e8d3b4e525a599006d761abce53de83c92438ea7d16fc3cfb99c7dbe693a90bf177702166995fa9de6d801816e00d4cbac8e17e4b822862893ab3ba3b464cb44c130e7e0339e43a00e6b1cd0f2a2d5d84cbaa9ef914c301c333e"}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "c25c1560728e8de56367582eae721627418f7356dd3bf1582c59f8aeec4d202621c6dfa3395e45f7a7ec437960d287cf352af5bb0efcdc13d5d15f58175190f6663c91698305e848947ab5748698b111003e35651c3e922a2379cddd117f2c0b2ea357b69c16e043"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_NODE_ID={0x58, 0x3, "e1aa966e905e969da4273334e6d91b853ec61010dd166b47743ad03e4dbaa6012c3f3b99a3c140bc5db521df8bfd8219bd9a358a2013709c31aa713235c4be893ee399a6b53302c05cf005758cd6bf96fa4d04d1"}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "c0f4d79f711d509f734e87babfcbd3baca70d0694ee3d3887e730afd26edc85ecdd8b010a4bd33b9c8f82e99783e99fdd778ec713a842295afbd"}, @TIPC_NLA_NODE_ID={0x98, 0x3, "ccd8302c2a0ba3cda2e9eec6e9183dab246df4c313f3d99a5acc7a99db380ad9e966cbcd09819a5b510fbe21036faf68c8395c1d67f8e3c8733431640b3ae5f888c285b6443c126d49da70be0f2901a4482e2286b15325f5a093f1f42c179650ac933064f46e80ea0d75c0fce1817e330dbe43f0b744a8d20194e86af1c81e5b0c84785c97a47310bd2c20449a6da721f0e738f3"}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

5m5.445232665s ago: executing program 2 (id=1061):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x40441) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

5m5.395568409s ago: executing program 32 (id=1061):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x40441) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

1.561750055s ago: executing program 0 (id=4891):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)={0x1, [<r3=>0x0]}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x5, 0xe0, 0x4}, &(0x7f00000000c0)=0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff005)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x11)

1.410222432s ago: executing program 0 (id=4893):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x2, 0x4)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040))

1.328952326s ago: executing program 0 (id=4897):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x7448d6d, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
socketpair(0x1, 0x6, 0x4, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
unshare(0x68040200)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="caae", 0x2}], 0x1)
close(r0)

1.011922129s ago: executing program 0 (id=4902):
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000100000409000000010000000000000000000000002e2e0053f67b9410bf95fab2b122fc6b28a20e84ddf0e002923ae9"], 0x0, 0x34, 0x0, 0x1, 0x3ff}, 0x28) (rerun: 64)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8084) (async)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x5, &(0x7f0000000000)=@gcm_128={{}, "868a2dee9523d346", "bd4a1bd98174a620f0d347e8ca6a5dfb", "452c74c9", "bea3db3b3a60aa72"}, 0x28)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000600000854000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400800000006000240000600000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x7c}}, 0x40) (rerun: 32)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="10000000120005016d84000000000000"], 0x10}}, 0x20040810) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000804) (async, rerun: 64)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff000) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendto$inet6(r0, &(0x7f00000000c0)="67878ed77cc08730f9643ca6b14fb1725c1863f721f576c1fc0080cdc385869d2ffd29e8820630d6386036c5538914d856df0446e71efbe05ef7754bbaa1b2c74c4174c24acd57", 0x47, 0x80, &(0x7f00000001c0)={0xa, 0x402, 0x398, @empty}, 0x1c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
shutdown(r0, 0x1)

938.713976ms ago: executing program 0 (id=4905):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
close(0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'})
r5 = socket(0x2a, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000000), 0x4)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83b"], 0xffe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x0)
getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000)

714.792203ms ago: executing program 0 (id=4911):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x6e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xf0}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
r10 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

531.2873ms ago: executing program 3 (id=4915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="74b925aa457b741c26cd54fe93cc0643a5343b8e3d4af509f6562a878b27075b2d3ba8400d23f02383957016167c27a59f7850d5117c843a06248a9214e4238b3fa8b3d6a6363bf76e95baae53895d90dba20ed7d1344837f0c76aef68ea621da51224210ab2b868dbe8d9022c11a926d9753f736cb402c1b6dcd0ecb16ee8f9ddcb622adabad7e659df7daf6ed1d091893e24e15c273f92e4e3f38d3fc03bd0"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) (async)
bind$can_raw(r1, &(0x7f0000000000), 0x10) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r1) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async)
r2 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @broadcast}, {0x1, @remote}, 0x1c, {0x2, 0x0, @multicast1}})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffff0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) (async)
r4 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) (async)
read(r0, &(0x7f0000000240)=""/19, 0x13) (async)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) (async, rerun: 32)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xde, 0x8}, 0xc) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000080)=0x9, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) (rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80f}, 0x94) (async)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6d13a20d015dc921e4"}]}, 0x24}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (rerun: 32)
socketpair(0x3, 0x3, 0x5, &(0x7f0000000280)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000005c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xc73}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)

530.981754ms ago: executing program 3 (id=4916):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000d40)=ANY=[@ANYBLOB="ac03000010000100000000000000000000000000000000000000000000000000fe800000000000000000000000000001020000003b00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x3ac}}, 0x4894)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000080)=0x4, 0x4)

451.792563ms ago: executing program 3 (id=4917):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2e1, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000f40)=""/4096, &(0x7f0000000080)=0x1000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
r9 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40000005, 0x26}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20084024)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
connect$pppoe(r2, &(0x7f0000000480)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bridge_slave_0\x00'}}, 0x1e)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
shutdown(r1, 0x0)

400.458769ms ago: executing program 3 (id=4918):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x82f98753210b30b3}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000003c0), r2)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0xd, &(0x7f0000000040)="0f114def84b22dde27e442f1a7", 0x9, 0x1, 0x458, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
close(0x3)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r7, 0x0, 0x20000080)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff)
recvmsg(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@ax25={{0x3, @default}, [@netrom, @rose, @bcast, @netrom, @netrom, @netrom, @null, @default]}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000}, 0x20)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r8, &(0x7f0000000240), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002e80)={'erspan0\x00', 0x0})
r10 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

340.232375ms ago: executing program 3 (id=4921):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0)

338.182529ms ago: executing program 3 (id=4923):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1}, 0x92680000}], 0x1, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x17, 0x3, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0xc010)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000280)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f00000004c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00'})
close(0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x28, 0x6, 0x0, @remote, @remote, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "17f14eae3f2117b7547d768faf025500"}]}}}}}}}}, 0x0)

278.493632ms ago: executing program 1 (id=4925):
socket$tipc(0x1e, 0x2, 0x0) (async)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x43d6b990c9433eb3, {0x41, 0x0, 0x2}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="067e85e1306c0ceb2880572410af7e7d7ac09148cfb73ee3ba753ff47cea3bceae4b46", 0x23) (async)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="067e85e1306c0ceb2880572410af7e7d7ac09148cfb73ee3ba753ff47cea3bceae4b46", 0x23)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wlan1\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket(0x2a, 0x2, 0x0) (async)
r2 = socket(0x2a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000180)={0x2, 0x1, 0xa, 0x9, 0xb2e1})
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0)

203.206541ms ago: executing program 1 (id=4926):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000fcff00000000000000004000", @ANYRES32=0x0, @ANYBLOB="0800080010000000"], 0x20}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
close(r8)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e00000000000200000000000005001f00000600140005000000180016801400010000000000000000"], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r9, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r9, 0x3)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000)

70.853206ms ago: executing program 1 (id=4927):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x53e}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@mark={{0x10, 0x1, 0x24, 0x81}}], 0x10}}], 0x1, 0x841)

70.43111ms ago: executing program 1 (id=4928):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt(r0, 0xc7, 0xfb, &(0x7f0000000040), 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.210333ms ago: executing program 1 (id=4929):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r2 = socket(0x28, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x9, 0x0, 0x7ff, 0x4, 0xc0000002, 0x402, 0xfffffffd, 0x4, 0x4, 0x80000003, 0x4006, 0x80, 0xfffffffc, 0xd, 0x800002, 0x80002005, 0x2, 0xdac9, 0xfffffff9, 0xffffe67d}})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@empty, @in=@loopback, 0x0, 0xfffc, 0x0, 0x5, 0xa, 0x0, 0x20, 0x2e}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffc}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x1, 0x5, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0xd, "fe73cae65e94332a6cd8c1"}, @ssrr={0x89, 0x27, 0x7f, [@broadcast, @local, @empty, @private=0xa010102, @broadcast, @broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @rr={0x7, 0x1b, 0xcb, [@loopback, @local, @broadcast, @local, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x3f, 0x1, [{0x2, 0x12, "b3d635bde7f20b686ea87480a7500980"}, {0x6, 0x4, "ba8a"}, {0x2, 0x12, "fa0da4d01dc244ab4edc7c04d11ea29d"}, {0x7, 0x11, "595e4947fb902782f9f5dc7f0562dd"}]}]}}}}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0))
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newae={0x40, 0x1e, 0x800, 0x70bd29, 0x25dfdbff, {{@in6=@mcast1, 0x4d5, 0xa, 0x33}, @in=@multicast2, 0x0, 0x3505}}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000fc020000000000000000be654f0a000000000000000000000a"], 0xb8}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

0s ago: executing program 1 (id=4930):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4000800) (async)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4000800)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x25e7e33e8729e003}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000500)="586fa1", 0x3, 0x800, &(0x7f000005ffe4)={0xa, 0x0, 0xd910, @private2, 0x9}, 0x1c) (async)
sendto$inet6(r5, &(0x7f0000000500)="586fa1", 0x3, 0x800, &(0x7f000005ffe4)={0xa, 0x0, 0xd910, @private2, 0x9}, 0x1c)
shutdown(r5, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r7=>0x0}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={r7}, &(0x7f0000000000)=0x8)
listen(r0, 0x3) (async)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x206, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "749862", 0x1d0, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@srh={0x21, 0x8, 0x4, 0x4, 0x1, 0x68, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @local, @private1]}, @fragment={0x1, 0x0, 0x9, 0x1, 0x0, 0x8, 0x67}, @dstopts={0x3a, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x4, 0x0, 0x7, 0x1, 0x0, 0x18, 0x68}], @mlv2_report={0x8f, 0x0, 0x0, 0x8000, 0x4, [{0xa, 0x7, 0x1, @loopback, [@ipv4={'\x00', '\xff\xff', @multicast2}], [0x7fffffff, 0x7, 0x9, 0x3, 0xe9, 0x3ff, 0x7]}, {0xd8, 0x7, 0x4, @remote, [@dev={0xfe, 0x80, '\x00', 0x19}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @dev={0xfe, 0x80, '\x00', 0x31}], [0x0, 0x7, 0x0, 0x0, 0xd, 0xffff6746, 0x764]}, {0x0, 0x1, 0x6, @loopback, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x1b}, @remote, @private2], [0x5]}, {0xf7, 0x1, 0x1, @remote, [@private2={0xfc, 0x2, '\x00', 0x1}], [0x3]}]}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

arsing attributes in process `syz.0.1934'.
[  214.820940][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'.
[  214.918003][T12575] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  214.930285][T12578] netlink: 'syz.0.1940': attribute type 29 has an invalid length.
[  214.937342][T12578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  215.206893][T12600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1946'.
[  215.231323][T12598] team0: Port device bridge5 removed
[  215.237534][T12598] team0: Port device bridge6 removed
[  215.242481][T12598] team0: Port device bridge7 removed
[  215.246849][T12598] team0: Port device bridge8 removed
[  215.252641][T12598] team0: Port device bridge9 removed
[  215.511886][T12612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1949'.
[  215.660363][T12616] nftables ruleset with unbound chain
[  215.664380][T12616] netlink: del zone limit has 8 unknown bytes
[  215.792887][T12624] bond0 (uninitialized): option lp_interval: invalid value (18446744073709551604)
[  215.798556][T12624] bond0 (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  215.993144][T12637] pim6reg1: entered promiscuous mode
[  215.995005][T12637] pim6reg1: entered allmulticast mode
[  216.444821][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'.
[  216.448594][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'.
[  216.452523][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'.
[  216.986375][ T5221] Bluetooth: hci0: command tx timeout
[  217.085126][ T5895] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  217.305918][ T4582] wlan0: Trigger new scan to find an IBSS to join
[  217.311710][T12692] 8021q: adding VLAN 0 to HW filter on device bond3
[  217.470380][T12715] bond0: entered promiscuous mode
[  217.472919][T12715] bond0: left promiscuous mode
[  217.769387][T12724] __nla_validate_parse: 2 callbacks suppressed
[  217.769403][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  217.775688][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  217.779259][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  217.843387][T12730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1983'.
[  217.851036][T12730] bridge_slave_0: entered promiscuous mode
[  217.853285][T12730] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  218.026007][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  218.413691][T12768] tipc: Invalid UDP bearer configuration
[  218.413734][T12768] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  218.425298][T12767] tipc: Invalid UDP bearer configuration
[  218.425322][T12767] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  218.731136][T12795] openvswitch: netlink: IPv6 tunnel dst address is zero
[  218.763331][T12800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2005'.
[  218.813147][T12802] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  219.050837][T12819] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2013'.
[  219.137814][T12822] 8021q: adding VLAN 0 to HW filter on device team0
[  219.141170][T12822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.345782][ T1091] wlan0: Trigger new scan to find an IBSS to join
[  220.373148][T12853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.154725][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2028'.
[  221.160643][T12872] openvswitch: netlink: Flow key attr not present in new flow.
[  221.265958][  T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.297766][T12877] tipc: Resetting bearer <eth:syzkaller0>
[  221.458004][T12902] netlink: 'syz.3.2034': attribute type 9 has an invalid length.
[  221.461384][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  221.470128][T12902] macvlan3: entered promiscuous mode
[  221.472996][T12902] macvlan3: entered allmulticast mode
[  221.482203][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  222.301660][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'.
[  222.526219][T12972] pimreg: left allmulticast mode
[  223.062988][T12993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.080285][T12994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.083803][T12994] syzkaller0: entered promiscuous mode
[  223.087259][T12994] syzkaller0: entered allmulticast mode
[  223.101530][T12994] tipc: Resetting bearer <eth:syzkaller0>
[  223.105887][T12994] tipc: Resetting bearer <eth:syzkaller0>
[  223.115912][T12994] tipc: Disabling bearer <eth:syzkaller0>
[  223.275495][T13000] netlink: 'syz.1.2060': attribute type 1 has an invalid length.
[  223.569219][T13040] veth0: entered promiscuous mode
[  223.596074][T13041] netlink: 'syz.1.2072': attribute type 1 has an invalid length.
[  223.598822][T13041] __nla_validate_parse: 3 callbacks suppressed
[  223.598831][T13041] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2072'.
[  223.604721][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'.
[  224.344943][T13034] veth0: left promiscuous mode
[  224.949532][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'.
[  225.495018][T13109] gretap1: entered promiscuous mode
[  225.497126][T13109] gretap1: entered allmulticast mode
[  226.353363][T13139] wireguard0: entered promiscuous mode
[  226.355157][T13139] wireguard0: entered allmulticast mode
[  226.504368][T13155] netlink: 'syz.1.2102': attribute type 3 has an invalid length.
[  226.543435][T13157] ksmbd: Unknown IPC event: 3, ignore.
[  226.546142][T13158] ksmbd: Unknown IPC event: 3, ignore.
[  226.555478][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'.
[  226.610125][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.818354][T13211] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  227.830598][T13212] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  227.833501][T13212] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  227.976556][T13227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2122'.
[  228.161872][T13246] openvswitch: netlink: Missing valid actions attribute.
[  228.164307][T13246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.241836][T13254] TCP: TCP_TX_DELAY enabled
[  228.244882][T13254] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  228.350306][T13261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2134'.
[  228.377718][T13266] 8021q: adding VLAN 0 to HW filter on device team0
[  228.382740][T13261] netlink: 'syz.0.2134': attribute type 1 has an invalid length.
[  228.387011][T13261] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2134'.
[  228.390983][T13266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.483875][T13272] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2136'.
[  228.489309][T13272] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2136'.
[  228.492386][T13272] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  229.334305][T13307] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  229.391476][T13332] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2156'.
[  230.480320][T13376] xt_CT: No such helper "syz1"
[  230.487308][T13376] batadv_slave_1: entered promiscuous mode
[  230.493397][T13375] batadv_slave_1: left promiscuous mode
[  230.547754][T13370] x_tables: duplicate underflow at hook 1
[  230.697191][T13385] bridge9: left promiscuous mode
[  230.699253][T13385] bridge9: left allmulticast mode
[  230.701538][T13385] gretap1: left promiscuous mode
[  230.703272][T13385] gretap1: left allmulticast mode
[  230.793927][T13392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.496370][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'.
[  231.499695][T13409] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  231.502417][T13409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.776659][T13423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2181'.
[  231.780589][T13423] netlink: 'syz.1.2181': attribute type 6 has an invalid length.
[  231.784038][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2181'.
[  231.788158][T13421] x_tables: duplicate underflow at hook 3
[  231.853193][T13426] syzkaller1: entered promiscuous mode
[  231.855183][T13426] syzkaller1: entered allmulticast mode
[  232.332470][T13449] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2189'.
[  232.804635][   T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  232.954258][T13471] netlink: 'syz.0.2196': attribute type 64 has an invalid length.
[  232.959245][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'.
[  233.043964][   T36] smc: removing ib device syz1
[  233.058120][T13472] dvmrp0: left allmulticast mode
[  233.587663][T13495] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  233.593157][T13495] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  234.218952][T13524] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000
[  234.589723][T13536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2214'.
[  235.347034][T13571] netlink: 'syz.1.2226': attribute type 2 has an invalid length.
[  236.039827][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'.
[  236.514855][T13636] netlink: 'syz.3.2247': attribute type 5 has an invalid length.
[  236.547832][T13636] ip6erspan0: entered promiscuous mode
[  236.590336][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'.
[  236.754665][T13654] tipc: Enabled bearer <eth:gre0>, priority 10
[  236.757959][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'.
[  236.960026][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'.
[  236.963758][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'.
[  237.291990][T13685] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2262'.
[  237.296354][T13685] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  238.220042][T13724] sctp: [Deprecated]: syz.1.2273 (pid 13724) Use of int in max_burst socket option deprecated.
[  238.220042][T13724] Use struct sctp_assoc_value instead
[  238.249310][T13721] ip6t_srh: unknown srh invflags 4449
[  239.520791][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2290'.
[  239.642895][T13802] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2293'.
[  239.820438][T13811] x_tables: duplicate underflow at hook 1
[  240.666316][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  240.696562][T13841] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  240.958928][T13854] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2309'.
[  241.764814][T13870] sock: sock_timestamping_bind_phc: sock not bind to device
[  241.919159][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'.
[  242.086590][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'.
[  242.117141][T13882] syz.0.2318: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  242.125273][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.0.2318 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  242.125292][T13882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.125299][T13882] Call Trace:
[  242.125306][T13882]  <TASK>
[  242.125312][T13882]  dump_stack_lvl+0x189/0x250
[  242.125333][T13882]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  242.125354][T13882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.125368][T13882]  ? __pfx__printk+0x10/0x10
[  242.125386][T13882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.125404][T13882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.125425][T13882]  warn_alloc+0x214/0x310
[  242.125449][T13882]  ? __pfx_warn_alloc+0x10/0x10
[  242.125472][T13882]  ? __get_vm_area_node+0x28f/0x300
[  242.125489][T13882]  ? xskq_create+0xbf/0x170
[  242.125524][T13882]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  242.125562][T13882]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  242.125582][T13882]  ? __kasan_kmalloc+0x93/0xb0
[  242.125600][T13882]  vmalloc_user_noprof+0xad/0xf0
[  242.125616][T13882]  ? xskq_create+0xbf/0x170
[  242.125627][T13882]  xskq_create+0xbf/0x170
[  242.125640][T13882]  xsk_init_queue+0xb0/0x110
[  242.125659][T13882]  xsk_setsockopt+0x4de/0x710
[  242.125678][T13882]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.125699][T13882]  ? aa_sock_opt_perm+0x74/0x110
[  242.125719][T13882]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  242.125730][T13882]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.125761][T13882]  do_sock_setsockopt+0x25a/0x3e0
[  242.125780][T13882]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  242.125799][T13882]  ? __fget_files+0x2a/0x420
[  242.125822][T13882]  __x64_sys_setsockopt+0x18b/0x220
[  242.125841][T13882]  do_syscall_64+0xfa/0x3b0
[  242.125852][T13882]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.125864][T13882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.125876][T13882]  ? exc_page_fault+0x9f/0xf0
[  242.125895][T13882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.125907][T13882] RIP: 0033:0x7f3be0b8e929
[  242.125920][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.125930][T13882] RSP: 002b:00007f3be1951038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  242.125944][T13882] RAX: ffffffffffffffda RBX: 00007f3be0db5fa0 RCX: 00007f3be0b8e929
[  242.125952][T13882] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d
[  242.125960][T13882] RBP: 00007f3be0c10b39 R08: 0000000000000004 R09: 0000000000000000
[  242.125966][T13882] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  242.125973][T13882] R13: 0000000000000000 R14: 00007f3be0db5fa0 R15: 00007ffe365e9148
[  242.125995][T13882]  </TASK>
[  242.239832][T13882] Mem-Info:
[  242.241210][T13882] active_anon:11917 inactive_anon:0 isolated_anon:0
[  242.241210][T13882]  active_file:1119 inactive_file:38282 isolated_file:0
[  242.241210][T13882]  unevictable:1768 dirty:44 writeback:0
[  242.241210][T13882]  slab_reclaimable:10206 slab_unreclaimable:68972
[  242.241210][T13882]  mapped:17957 shmem:2438 pagetables:854
[  242.241210][T13882]  sec_pagetables:0 bounce:0
[  242.241210][T13882]  kernel_misc_reclaimable:0
[  242.241210][T13882]  free:270309 free_pcp:21649 free_cma:0
[  242.261506][T13882] Node 0 active_anon:39256kB inactive_anon:0kB active_file:3556kB inactive_file:136248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47208kB dirty:152kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8384kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  242.277539][T13882] Node 1 active_anon:8472kB inactive_anon:0kB active_file:920kB inactive_file:16880kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24620kB dirty:24kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3244kB pagetables:1408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  242.291992][T13882] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  242.306364][T13882] lowmem_reserve[]: 0 812 812 812 812
[  242.308750][T13882] Node 0 DMA32 free:176204kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39236kB inactive_anon:0kB active_file:3556kB inactive_file:136248kB unevictable:3536kB writepending:152kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:37884kB local_pcp:14476kB free_cma:0kB
[  242.323631][T13882] lowmem_reserve[]: 0 0 0 0 0
[  242.326942][T13882] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  242.340455][T13882] lowmem_reserve[]: 0 0 854 854 854
[  242.342769][T13882] Node 1 Normal free:431044kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8472kB inactive_anon:0kB active_file:920kB inactive_file:16880kB unevictable:3536kB writepending:24kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48772kB local_pcp:25372kB free_cma:0kB
[  242.354865][T13899] xt_hashlimit: max too large, truncated to 1048576
[  242.361776][T13882] lowmem_reserve[]: 0 0 0 0 0
[  242.363904][T13882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  242.369550][T13882] Node 0 DMA32: 263*4kB (UM) 51*8kB (ME) 20*16kB (ME) 74*32kB (UME) 214*64kB (UME) 101*128kB (UME) 41*256kB (UME) 21*512kB (UME) 13*1024kB (UME) 12*2048kB (UM) 21*4096kB (UM) = 175924kB
[  242.380583][T13882] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  242.388126][T13882] Node 1 Normal: 1260*4kB (UME) 695*8kB (UME) 182*16kB (UME) 56*32kB (ME) 82*64kB (UME) 47*128kB (UME) 14*256kB (UME) 9*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 94*4096kB (UM) = 431048kB
[  242.398248][T13882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  242.402199][T13882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  242.406307][T13882] 41839 total pagecache pages
[  242.408359][T13882] 0 pages in swap cache
[  242.410169][T13882] Free swap  = 124996kB
[  242.411962][T13882] Total swap = 124996kB
[  242.413786][T13882] 786301 pages RAM
[  242.415440][T13882] 0 pages HighMem/MovableOnly
[  242.419892][T13882] 241078 pages reserved
[  242.421652][T13882] 0 pages cma reserved
[  242.681734][T13916] ipt_REJECT: ECHOREPLY no longer supported.
[  242.709493][T13919] bridge11: entered promiscuous mode
[  242.711443][T13919] bridge11: entered allmulticast mode
[  243.001356][T13913] infiniband syz1: set down
[  243.003509][T13913] infiniband syz1: added macvlan1
[  243.035329][T13913] RDS/IB: syz1: added
[  243.038233][T13913] smc: adding ib device syz1 with port count 1
[  243.041117][T13913] smc:    ib device syz1 port 1 has pnetid 
[  243.765980][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'.
[  243.964372][T13963] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2343'.
[  244.260392][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  244.483448][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'.
[  244.489738][T13982] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2348'.
[  244.493626][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'.
[  244.876585][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'.
[  244.934978][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.950204][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'.
[  245.010157][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.022381][T14001] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  245.026806][T14001] xt_hashlimit: max too large, truncated to 1048576
[  245.062469][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.123261][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.599185][   T13] team0: Port device bridge1 removed
[  245.641285][   T13] team0: Port device bridge2 removed
[  245.698646][   T13] team0: Port device bridge3 removed
[  245.739542][   T13] team0: Port device bridge4 removed
[  245.798644][   T13] team0: Port device bridge0 removed
[  245.819794][T14036] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2363'.
[  245.863414][T14031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.890542][   T13] tipc: Disabling bearer <eth:wlan0>
[  245.902874][   T13] tipc: Left network mode
[  245.930879][   T13] IPVS: stopping master sync thread 6708 ...
[  246.090857][T14042] can: request_module (can-proto-3) failed.
[  246.230917][T14049] bridge11: entered promiscuous mode
[  246.245770][T14049] bridge11: entered allmulticast mode
[  246.416070][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'.
[  246.419061][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'.
[  246.514191][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.517490][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.521441][   T13] batman_adv: batadv0: Interface deactivated: 26
[  246.524282][   T13] batman_adv: batadv0: Removing interface: 26
[  246.540593][   T13] hsr0: left allmulticast mode
[  246.542751][   T13] veth1_macvtap: left promiscuous mode
[  246.546404][   T13] veth0_macvtap: left promiscuous mode
[  246.548590][   T13] veth1_vlan: left promiscuous mode
[  246.550650][   T13] veth0_vlan: left promiscuous mode
[  246.925064][   T13] team0 (unregistering): Port device team_slave_1 removed
[  246.955018][   T13] team0 (unregistering): Port device team_slave_0 removed
[  247.348583][T14084] _Z`Ԁ@: entered promiscuous mode
[  248.105779][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  249.088003][T14147] netlink: 'syz.3.2389': attribute type 23 has an invalid length.
[  249.092631][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  249.096000][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  249.099742][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  249.399484][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2396'.
[  249.550806][T14170] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  249.554156][T14170] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  249.734886][T14179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.282743][T14219] bridge0: entered promiscuous mode
[  250.284855][T14219] bridge0: entered allmulticast mode
[  250.332085][T14220] rdma_rxe: rxe_newlink: failed to add macvlan1
[  250.447345][T14224] bridge0: entered promiscuous mode
[  250.449793][T14224] bridge0: entered allmulticast mode
[  250.455909][T14224] team0: Port device bridge0 added
[  250.633646][T14230] netlink: 'syz.0.2416': attribute type 9 has an invalid length.
[  250.636671][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'.
[  250.644207][T14230] macvlan0: entered promiscuous mode
[  250.646189][T14230] hsr0: entered promiscuous mode
[  250.648092][T14230] macvlan0: entered allmulticast mode
[  250.650095][T14230] hsr0: entered allmulticast mode
[  250.651776][T14230] hsr_slave_0: entered allmulticast mode
[  250.653863][T14230] hsr_slave_1: entered allmulticast mode
[  250.748011][T14232] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2417'.
[  250.751072][T14232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  250.756319][T14233] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2417'.
[  250.759512][T14233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  250.914597][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'.
[  250.921555][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'.
[  250.955893][T14255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2422'.
[  250.959712][T14250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2422'.
[  251.128372][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'.
[  251.132183][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'.
[  251.137596][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'.
[  251.390826][T14263] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  251.719985][T14278] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 57640 - 0
[  251.723895][T14278] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 57640 - 0
[  251.728214][T14278] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 57640 - 0
[  251.731937][T14278] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 57640 - 0
[  251.736702][T14278] geneve2: entered promiscuous mode
[  251.739141][T14278] geneve2: entered allmulticast mode
[  252.347313][T14328] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  252.726155][T14367] netlink: 'syz.0.2457': attribute type 2 has an invalid length.
[  252.960292][T14373] bridge4: entered promiscuous mode
[  252.962299][T14373] bridge4: entered allmulticast mode
[  254.915373][   T33] audit: type=1107 audit(1752118438.544:7): pid=14460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  254.917028][T14461] xt_hashlimit: max too large, truncated to 1048576
[  255.029040][T14465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.031753][T14465] syzkaller0: entered promiscuous mode
[  255.033590][T14465] syzkaller0: entered allmulticast mode
[  255.049381][T14465] tipc: Resetting bearer <eth:syzkaller0>
[  255.053082][T14464] tipc: Resetting bearer <eth:syzkaller0>
[  255.066731][T14464] tipc: Disabling bearer <eth:syzkaller0>
[  255.147874][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.570912][T14479] netlink: 'syz.3.2493': attribute type 4 has an invalid length.
[  255.575944][T14479] netlink: 'syz.3.2493': attribute type 4 has an invalid length.
[  256.343506][T14492] sctp: [Deprecated]: syz.1.2497 (pid 14492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.343506][T14492] Use struct sctp_sack_info instead
[  256.696521][T14504] syzkaller0: entered promiscuous mode
[  256.698283][T14504] syzkaller0: entered allmulticast mode
[  258.964216][T14545] __nla_validate_parse: 14 callbacks suppressed
[  258.964227][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2513'.
[  259.400353][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'.
[  259.404140][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'.
[  259.435017][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'.
[  259.490276][T14572] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2521'.
[  259.600085][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'.
[  260.191583][T14623] sctp: [Deprecated]: syz.3.2540 (pid 14623) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.191583][T14623] Use struct sctp_sack_info instead
[  260.518722][T14638] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  260.554243][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'.
[  260.585140][T14640] netlink: 'syz.1.2547': attribute type 1 has an invalid length.
[  260.597742][T14640] netlink: 'syz.1.2547': attribute type 1 has an invalid length.
[  261.181502][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'.
[  262.371115][T14729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.377728][T14729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.471478][T14735] netlink: 'syz.3.2571': attribute type 3 has an invalid length.
[  262.675772][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'.
[  262.678904][T14747] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  262.680178][T14744] bond1: entered promiscuous mode
[  262.681392][T14747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.682948][T14744] bond1: entered allmulticast mode
[  262.683178][T14744] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.372393][T14770] netlink: 'syz.3.2582': attribute type 1 has an invalid length.
[  263.375947][T14770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2582'.
[  263.464173][T14772] netlink: 'syz.3.2583': attribute type 1 has an invalid length.
[  263.467549][   T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  263.478302][T14774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  263.509660][T14777] bridge: RTM_NEWNEIGH with invalid ether address
[  263.562708][T14782] netlink: 'syz.1.2588': attribute type 2 has an invalid length.
[  263.567460][T14782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.578390][T14783] netlink: 'syz.1.2588': attribute type 2 has an invalid length.
[  263.581703][T14783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.634320][T14787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.693189][T14793] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  263.697095][T14793] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  263.971424][T14809] __nla_validate_parse: 2 callbacks suppressed
[  263.971440][T14809] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2597'.
[  264.021288][T14811] netlink: 'syz.0.2598': attribute type 11 has an invalid length.
[  264.132788][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  264.138674][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  264.533092][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'.
[  264.536872][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2603'.
[  264.540445][T14826] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2603'.
[  264.543734][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2603'.
[  264.917895][T14842] bridge4: entered promiscuous mode
[  264.919785][T14842] bridge4: entered allmulticast mode
[  264.958670][T14845] syzkaller1: entered promiscuous mode
[  264.960519][T14845] syzkaller1: entered allmulticast mode
[  265.090959][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2609'.
[  265.094095][T14852] openvswitch: netlink: Flow key attr not present in new flow.
[  265.500135][T14871] netlink: 'syz.0.2614': attribute type 15 has an invalid length.
[  265.506470][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'.
[  265.670824][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2616'.
[  265.779662][T14881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.835324][T14882] siw: device registration error -23
[  266.763180][T14914] syzkaller1: entered promiscuous mode
[  266.769511][T14914] syzkaller1: entered allmulticast mode
[  267.702335][T14936] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  268.064597][T14967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.673352][T14992] vlan1: entered promiscuous mode
[  268.717982][T15002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.475100][T15022] tipc: Enabling of bearer <et:g> rejected, media not registered
[  269.639964][T15036] netlink: 'syz.1.2659': attribute type 3 has an invalid length.
[  269.780347][T15050] __nla_validate_parse: 11 callbacks suppressed
[  269.780358][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'.
[  269.789512][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'.
[  270.169797][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'.
[  270.173853][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'.
[  270.179717][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'.
[  270.188323][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'.
[  270.324361][T15088] syzkaller0: entered promiscuous mode
[  270.326932][T15088] syzkaller0: entered allmulticast mode
[  270.701914][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'.
[  270.708717][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2677'.
[  270.712280][T15102] netlink: 'syz.1.2677': attribute type 5 has an invalid length.
[  271.423275][T15102] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.427295][T15102] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.430792][T15102] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.434219][T15102] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.444775][T15100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.534655][T15111] team0: Port device bridge0 removed
[  271.539517][T15113] atomic_op ffff88803c8a1998 conn xmit_atomic 0000000000000000
[  271.552002][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'.
[  271.567290][T15113] netlink: 'syz.0.2679': attribute type 1 has an invalid length.
[  271.570455][T15113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2679'.
[  271.643112][T15118] IPVS: length: 163 != 8
[  271.658634][T15120] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  271.694893][T15120] bond0: entered promiscuous mode
[  271.700963][T15120] bond0: entered allmulticast mode
[  271.703537][T15120] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.286550][T15140] netdevsim0: entered promiscuous mode
[  272.288361][T15140] netdevsim0: entered allmulticast mode
[  272.290246][T15140] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  272.750918][T15169] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  273.522287][T15177] veth0_to_team: entered promiscuous mode
[  273.529711][T15177] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  273.581280][ T5221] Bluetooth: hci2: link tx timeout
[  273.583178][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.624622][T15184] netlink: 'syz.1.2701': attribute type 1 has an invalid length.
[  273.666885][T15185] syzkaller1: entered promiscuous mode
[  273.669283][T15185] syzkaller1: entered allmulticast mode
[  274.717350][T15214] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  274.755156][T15217] netlink: 'syz.1.2711': attribute type 11 has an invalid length.
[  274.849907][T15220] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  274.930787][T15223] __nla_validate_parse: 3 callbacks suppressed
[  274.930802][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'.
[  275.072659][T15230] macsec1: entered promiscuous mode
[  275.075042][T15230] ip6gretap0: entered promiscuous mode
[  275.078484][T15230] macsec1: entered allmulticast mode
[  275.080907][T15230] ip6gretap0: entered allmulticast mode
[  275.288971][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'.
[  275.292158][T15238] nbd: illegal input index -381222912
[  275.404947][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'.
[  275.454208][T15247] netlink: 'syz.0.2721': attribute type 10 has an invalid length.
[  275.625998][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  275.667740][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2730'.
[  275.971428][T15286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.973997][T15286] syzkaller0: entered promiscuous mode
[  275.976046][T15286] syzkaller0: entered allmulticast mode
[  275.992827][T15286] tipc: Resetting bearer <eth:syzkaller0>
[  276.009461][T15286] tipc: Resetting bearer <eth:syzkaller0>
[  276.020225][T15286] tipc: Disabling bearer <eth:syzkaller0>
[  276.320697][T15301] netlink: 'syz.0.2738': attribute type 10 has an invalid length.
[  276.458606][T15304] bridge4: entered promiscuous mode
[  276.460912][T15304] bridge4: entered allmulticast mode
[  276.473487][T15316] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2741'.
[  276.794866][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2746'.
[  277.819143][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'.
[  277.944791][T15372] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2756'.
[  278.010721][T15374] netlink: 'syz.0.2757': attribute type 1 has an invalid length.
[  278.014103][T15374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2757'.
[  278.157437][T15382] xt_hashlimit: max too large, truncated to 1048576
[  278.192441][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2761'.
[  278.615281][T15395] openvswitch: netlink: Flow key attr not present in new flow.
[  279.759668][T15479] gtp1: entered promiscuous mode
[  279.767270][T15479] gtp1: entered allmulticast mode
[  279.784046][T15483] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.812914][T15488] batadv_slave_1: entered promiscuous mode
[  279.823777][T15487] batadv_slave_1: left promiscuous mode
[  280.201586][T15518] netlink: 'syz.3.2789': attribute type 7 has an invalid length.
[  280.358235][T15532] __nla_validate_parse: 14 callbacks suppressed
[  280.358245][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  280.364152][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  280.395259][T15520] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  280.401066][T15520] bridge1: left promiscuous mode
[  280.403195][T15520] bridge1: left allmulticast mode
[  280.407772][T15520] macsec1: left allmulticast mode
[  280.410152][T15520] ip6gre1: left allmulticast mode
[  280.412587][T15520] macvlan2: left promiscuous mode
[  280.414678][T15520] macvlan2: left allmulticast mode
[  280.422252][T15520] ipvlan1: left promiscuous mode
[  280.428796][T15520] ip6tnl1: left promiscuous mode
[  280.433881][T15520] netdevsim0: left promiscuous mode
[  280.437105][T15520] netdevsim0: left allmulticast mode
[  280.440720][T15520] hsr0: left allmulticast mode
[  280.442686][T15520] hsr_slave_0: left allmulticast mode
[  280.444808][T15520] hsr_slave_1: left allmulticast mode
[  280.448745][T15520] hsr0: left promiscuous mode
[  280.451047][T15520] macvlan0: left promiscuous mode
[  280.453308][T15520] macvlan0: left allmulticast mode
[  280.458999][T15520] vlan1: left promiscuous mode
[  281.146201][T15566] x_tables: duplicate underflow at hook 2
[  281.186309][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'.
[  281.190116][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'.
[  281.266192][T15586] openvswitch: netlink: Duplicate or invalid key (type 0).
[  281.268736][T15586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.269817][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'.
[  281.276135][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'.
[  281.501793][T15610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.329175][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  282.362516][T15639] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  282.379552][T15647] tipc: Enabled bearer <eth:gre0>, priority 10
[  282.381772][T15648] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  282.506712][T15660] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2831'.
[  282.516380][T15660] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2831'.
[  282.519298][T15660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2831'.
[  282.976851][T15688] bridge11: entered promiscuous mode
[  282.980999][T15688] bridge11: entered allmulticast mode
[  282.992576][T15689] syz1: rxe_newlink: already configured on macvlan1
[  283.050501][T15696] netlink: 'syz.0.2842': attribute type 1 has an invalid length.
[  283.053090][T15696] netlink: 'syz.0.2842': attribute type 4 has an invalid length.
[  283.224312][T15708] netlink: 'syz.1.2847': attribute type 1 has an invalid length.
[  284.743376][T15770] pimreg: entered allmulticast mode
[  284.963887][T15784] openvswitch: netlink: Flow key attr not present in new flow.
[  285.789381][T15801] netlink: 'syz.0.2877': attribute type 10 has an invalid length.
[  285.795892][T15801] x_tables: duplicate underflow at hook 1
[  285.799174][T15801] __nla_validate_parse: 13 callbacks suppressed
[  285.799185][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2877'.
[  285.805112][T15801] openvswitch: netlink: Flow key attr not present in new flow.
[  285.841509][T15803] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  286.113288][T15817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2882'.
[  286.993233][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'.
[  287.012899][T15851] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2892'.
[  287.043123][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'.
[  287.324470][T15869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2897'.
[  287.331861][T15869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'.
[  287.386602][T15876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'.
[  287.391883][T15876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'.
[  288.350566][T15895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.831811][T15905] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2909'.
[  289.152917][T15925] netlink: 'syz.0.2914': attribute type 15 has an invalid length.
[  289.159577][T15925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.451564][T15952] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[  289.454227][T15952] netlink: 'syz.0.2923': attribute type 2 has an invalid length.
[  292.345919][  T745] wlan1: Trigger new scan to find an IBSS to join
[  295.306495][   T28] wlan1: Trigger new scan to find an IBSS to join
[  296.196744][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.467310][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  315.334513][T15984] xt_hashlimit: max too large, truncated to 1048576
[  315.500396][T16003] __nla_validate_parse: 10 callbacks suppressed
[  315.500409][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2937'.
[  315.874900][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2946'.
[  315.879129][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2946'.
[  315.883053][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2946'.
[  316.043895][T16048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.587826][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.310485][T16098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.434949][T16110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.561112][T16124] tipc: Resetting bearer <eth:gre0>
[  317.652842][T16124] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.656525][T16124] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.659394][T16124] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.662296][T16124] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.684557][T16124] ip6gretap0: left allmulticast mode
[  317.703434][T16124] hsr0: left allmulticast mode
[  317.705184][T16124] hsr_slave_0: left allmulticast mode
[  317.707080][T16124] hsr_slave_1: left allmulticast mode
[  317.711450][T16124] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 57640 - 0
[  317.714350][T16124] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 57640 - 0
[  317.721721][T16124] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 57640 - 0
[  317.724530][T16124] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 57640 - 0
[  317.784493][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'.
[  317.787900][T16129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2972'.
[  318.380864][T16133] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2973'.
[  318.391418][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2973'.
[  318.424241][T16135] netlink: 'syz.1.2974': attribute type 7 has an invalid length.
[  318.431567][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2974'.
[  318.446175][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.879433][T16151] syzkaller1: entered promiscuous mode
[  318.881565][T16151] syzkaller1: entered allmulticast mode
[  319.306764][   T28] wlan0: Trigger new scan to find an IBSS to join
[  319.362008][T16181] siw: device registration error -23
[  319.370439][T16186] xt_bpf: check failed: parse error
[  319.403131][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2991'.
[  319.775641][T16220] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  319.778176][T16220] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  319.821259][T16222] netlink: 'syz.0.2998': attribute type 21 has an invalid length.
[  320.179997][T16226] netlink: 'syz.3.3001': attribute type 5 has an invalid length.
[  322.711806][ T4585] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  322.746942][T16230] __nla_validate_parse: 7 callbacks suppressed
[  322.746955][T16230] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3004'.
[  322.844080][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3007'.
[  323.388978][T16274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  323.721462][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'.
[  323.942333][T16292] netlink: 'syz.1.3022': attribute type 1 has an invalid length.
[  323.945115][T16292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3022'.
[  324.004315][T16295] netlink: 'syz.1.3023': attribute type 10 has an invalid length.
[  324.011486][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'.
[  324.015184][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'.
[  324.175794][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'.
[  324.904365][T16327] ip6gre2: entered allmulticast mode
[  324.994299][T16337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3038'.
[  325.134137][T16348] xt_hashlimit: size too large, truncated to 1048576
[  325.191916][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3042'.
[  325.207231][T16350] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  325.214047][T16350] macsec4: entered promiscuous mode
[  325.218543][T16350] macsec4: entered allmulticast mode
[  325.220438][T16350] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  325.310993][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3045'.
[  325.713520][T16385] xt_cluster: node mask cannot exceed total number of nodes
[  326.264109][T16406] netlink: 'syz.1.3059': attribute type 30 has an invalid length.
[  326.268573][T16405] netlink: 'syz.1.3059': attribute type 30 has an invalid length.
[  326.457954][T16420] ip6erspan0: entered allmulticast mode
[  326.928396][T16454] xt_CT: No such helper "syz1"
[  327.109118][T16467] can: request_module (can-proto-0) failed.
[  327.832919][T16496] veth0_to_bond: entered allmulticast mode
[  327.865063][T16499] __nla_validate_parse: 10 callbacks suppressed
[  327.865075][T16499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'.
[  328.225680][T16522] bridge5: entered promiscuous mode
[  328.227701][T16522] bridge5: entered allmulticast mode
[  328.230652][T16522] team0: Port device bridge5 added
[  328.235152][T16522] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3096'.
[  328.432513][T16525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  328.953700][T16534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.006508][T16540] bridge6: entered promiscuous mode
[  329.008776][T16540] bridge6: entered allmulticast mode
[  329.012947][T16540] team0: Port device bridge6 added
[  329.056281][T16540] rdma_rxe: rxe_newlink: failed to add macvlan1
[  329.072003][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'.
[  329.125398][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3105'.
[  329.212905][T16550] netlink: 'syz.0.3107': attribute type 4 has an invalid length.
[  329.260970][T16554] netlink: 508 bytes leftover after parsing attributes in process `syz.3.3108'.
[  329.265382][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'.
[  331.118490][T16594] SET target dimension over the limit!
[  331.136187][T16596] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3120'.
[  331.165355][T16596] xt_CT: No such helper "syz1"
[  331.342349][T16610] x_tables: unsorted underflow at hook 4
[  331.518033][T16617] netlink: 'syz.3.3126': attribute type 1 has an invalid length.
[  331.521115][T16617] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  331.938461][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  332.008473][T16630] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  332.012790][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3131'.
[  332.017736][T16632] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3131'.
[  332.140357][T16639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.635022][T16650] netlink: 'syz.3.3136': attribute type 1 has an invalid length.
[  333.092061][T16670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.009124][T16690] __nla_validate_parse: 5 callbacks suppressed
[  334.009142][T16690] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3150'.
[  334.028515][T16690] netlink: 'syz.0.3150': attribute type 42 has an invalid length.
[  334.172851][T16701] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  334.589550][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3165'.
[  334.602154][T16743] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.3165'.
[  334.872121][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'.
[  334.878507][T16770] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.3174'.
[  335.049455][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3177'.
[  335.053458][T16782] openvswitch: netlink: Flow key attr not present in new flow.
[  335.399028][T16813] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3185'.
[  335.506198][T16815] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  335.509586][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'.
[  336.223980][T16827] xt_CT: No such helper "syz1"
[  336.297182][T16829] ipt_rpfilter: unknown options
[  336.348918][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'.
[  336.491213][T16841] bond5: entered promiscuous mode
[  336.493495][T16841] bond5: entered allmulticast mode
[  336.497217][T16841] 8021q: adding VLAN 0 to HW filter on device bond5
[  336.513986][T16842] bond6: entered promiscuous mode
[  336.517132][T16842] bond6: entered allmulticast mode
[  336.519034][T16842] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.551859][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'.
[  336.693673][T16862] openvswitch: netlink: Flow key attr not present in new flow.
[  337.259173][T16864] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  337.385786][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  337.461786][T16883] netlink: 'syz.0.3205': attribute type 11 has an invalid length.
[  337.630529][T16896] netlink: 'syz.0.3209': attribute type 11 has an invalid length.
[  337.711995][T16905] netlink: 'syz.1.3211': attribute type 8 has an invalid length.
[  337.743930][T16909] macsec5: entered promiscuous mode
[  337.747210][T16909] macsec5: entered allmulticast mode
[  337.782595][T16914] tipc: Can't bind to reserved service type 1
[  337.801307][T16911] openvswitch: netlink: Flow key attr not present in new flow.
[  338.781919][T16956] bridge7: entered promiscuous mode
[  338.783709][T16956] bridge7: entered allmulticast mode
[  338.789333][T16956] team0: Port device bridge7 added
[  338.793877][T16956] rdma_rxe: rxe_newlink: failed to add macvlan1
[  338.989641][T16970] netlink: 'syz.1.3228': attribute type 21 has an invalid length.
[  339.023656][T16970] netlink: 'syz.1.3228': attribute type 11 has an invalid length.
[  339.584534][T16978] netdevsim0: entered promiscuous mode
[  339.788938][T16990] xt_CT: No such helper "syz1"
[  339.829717][T17001] IPVS: length: 178 != 8
[  339.917876][T17016] __nla_validate_parse: 14 callbacks suppressed
[  339.917888][T17016] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3241'.
[  339.971887][T17028] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3245'.
[  340.029720][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'.
[  340.033538][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'.
[  340.048343][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'.
[  340.071615][T17037] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3247'.
[  340.156503][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'.
[  340.262908][T17057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3251'.
[  340.270344][T17057] openvswitch: netlink: Actions may not be safe on all matching packets
[  340.310043][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'.
[  340.544268][T17082] x_tables: duplicate underflow at hook 2
[  341.277445][T17112] xt_hashlimit: max too large, truncated to 1048576
[  341.882334][T17142] openvswitch: netlink: Multiple metadata blocks provided
[  342.073523][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3278'.
[  342.338594][T17181] tipc: Cannot configure node identity twice
[  342.341207][T17170] netlink: 'syz.0.3286': attribute type 3 has an invalid length.
[  342.734069][T17233] SET target dimension over the limit!
[  342.785112][T17226] siw: device registration error -23
[  342.844483][T17238] openvswitch: netlink: Flow key attr not present in new flow.
[  343.827856][T17339] netlink: 'syz.1.3333': attribute type 1 has an invalid length.
[  343.979064][T17353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.635129][T17386] bridge11: entered promiscuous mode
[  344.640074][T17386] bridge11: entered allmulticast mode
[  344.959091][T17412] __nla_validate_parse: 12 callbacks suppressed
[  344.959100][T17412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3353'.
[  344.964871][T17412] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  345.067333][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.072228][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.279173][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'.
[  345.314110][T17446] netlink: 'syz.3.3362': attribute type 3 has an invalid length.
[  345.317221][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[  345.513552][T17454] GUP no longer grows the stack in syz.0.3367 (17454): 200000006000-20000000a000 (200000005000)
[  345.517442][T17454] CPU: 0 UID: 0 PID: 17454 Comm: syz.0.3367 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  345.517454][T17454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.517459][T17454] Call Trace:
[  345.517463][T17454]  <TASK>
[  345.517466][T17454]  dump_stack_lvl+0x189/0x250
[  345.517482][T17454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.517491][T17454]  ? __pfx__printk+0x10/0x10
[  345.517501][T17454]  ? find_vma+0xe7/0x160
[  345.517539][T17454]  __get_user_pages+0x2a60/0x30b0
[  345.517561][T17454]  ? __pfx___get_user_pages+0x10/0x10
[  345.517569][T17454]  ? __gup_longterm_locked+0xbf7/0x15b0
[  345.517577][T17454]  ? down_read_killable+0x1d1/0x350
[  345.517587][T17454]  ? try_get_folio+0x633/0x660
[  345.517599][T17454]  __gup_longterm_locked+0xd66/0x15b0
[  345.517609][T17454]  ? try_grab_folio_fast+0x1be/0x4f0
[  345.517638][T17454]  ? gup_fast_fallback+0x1afc/0x2260
[  345.517648][T17454]  gup_fast_fallback+0x1cd4/0x2260
[  345.517675][T17454]  ? __pfx_gup_fast_fallback+0x10/0x10
[  345.517682][T17454]  ? trace_contention_end+0x39/0x120
[  345.517692][T17454]  ? __mutex_lock+0x330/0xe80
[  345.517699][T17454]  ? futex_unqueue+0x22/0x240
[  345.517710][T17454]  ? futex_unqueue+0x22/0x240
[  345.517719][T17454]  ? futex_unqueue+0x22/0x240
[  345.517727][T17454]  ? is_valid_gup_args+0x11f/0x200
[  345.517737][T17454]  ? get_user_pages_fast+0x4d/0xb0
[  345.517746][T17454]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  345.517759][T17454]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  345.517770][T17454]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  345.517781][T17454]  ? wait_for_space+0x24d/0x2d0
[  345.517791][T17454]  iov_iter_get_pages2+0x5e/0xa0
[  345.517801][T17454]  __se_sys_vmsplice+0x548/0x10d0
[  345.517820][T17454]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  345.517834][T17454]  ? __pfx_futex_wait+0x10/0x10
[  345.517852][T17454]  ? __lock_acquire+0xab9/0xd20
[  345.517884][T17454]  ? do_pipe2+0xf7/0x170
[  345.517906][T17454]  ? do_syscall_64+0xbe/0x3b0
[  345.517919][T17454]  do_syscall_64+0xfa/0x3b0
[  345.517931][T17454]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.517942][T17454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.517952][T17454]  ? exc_page_fault+0x9f/0xf0
[  345.517970][T17454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.517981][T17454] RIP: 0033:0x7f3be0b8e929
[  345.517992][T17454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.518003][T17454] RSP: 002b:00007f3be1951038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  345.518015][T17454] RAX: ffffffffffffffda RBX: 00007f3be0db5fa0 RCX: 00007f3be0b8e929
[  345.518023][T17454] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  345.518030][T17454] RBP: 00007f3be0c10b39 R08: 0000000000000000 R09: 0000000000000000
[  345.518037][T17454] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  345.518045][T17454] R13: 0000000000000000 R14: 00007f3be0db5fa0 R15: 00007ffe365e9148
[  345.518062][T17454]  </TASK>
[  345.779298][T17468] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  345.791678][T17468] netlink: 'syz.0.3370': attribute type 10 has an invalid length.
[  345.795375][T17468] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  345.805787][T17468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  345.809937][T17468] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  346.165786][T17475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3372'.
[  346.210302][T17477] netlink: 'syz.3.3373': attribute type 9 has an invalid length.
[  346.213713][T17477] netlink: 'syz.3.3373': attribute type 6 has an invalid length.
[  346.352694][T17480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3374'.
[  346.360684][T17482] bridge11: entered promiscuous mode
[  346.362642][T17482] bridge11: entered allmulticast mode
[  346.409986][T17486] syz1: rxe_newlink: already configured on macvlan1
[  346.484454][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'.
[  346.594619][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'.
[  346.598304][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'.
[  347.112641][T17525] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  347.115297][T17525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  347.366400][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.368764][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.373139][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.386579][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.388958][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.396450][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.398796][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.401080][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.408292][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.410646][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.412980][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.416277][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.418822][T17550] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  347.814967][T17577] netlink: 'syz.0.3388': attribute type 1 has an invalid length.
[  347.818892][T17577] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3388'.
[  347.824422][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'.
[  348.377975][T17588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.382154][T17588] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  348.476840][   T33] audit: type=1804 audit(1752118532.114:8): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3396" name="/newroot/977/cgroup.controllers" dev="tmpfs" ino=5009 res=1 errno=0
[  348.484568][   T33] audit: type=1800 audit(1752118532.114:9): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3396" name="cgroup.controllers" dev="tmpfs" ino=5009 res=0 errno=0
[  348.754968][T17605] netlink: 'syz.0.3398': attribute type 1 has an invalid length.
[  348.842759][T17618] gtp2: entered promiscuous mode
[  348.844433][T17618] gtp2: entered allmulticast mode
[  348.968426][T17631] bridge4: entered promiscuous mode
[  348.970310][T17631] bridge4: entered allmulticast mode
[  350.143538][T17667] siw: device registration error -23
[  350.190466][T17671] sit0: entered promiscuous mode
[  350.192956][T17671] netlink: 'syz.1.3418': attribute type 1 has an invalid length.
[  350.197265][T17671] __nla_validate_parse: 10 callbacks suppressed
[  350.197276][T17671] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3418'.
[  350.754204][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3432'.
[  350.759735][T17723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.763641][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.767468][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.771041][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.774789][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.779597][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.784284][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.795096][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.806386][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.811787][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.855941][T17730] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3434'.
[  351.316544][T17757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3444'.
[  351.451945][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'.
[  351.544845][T17776] netlink: 'syz.3.3450': attribute type 1 has an invalid length.
[  351.576177][T17776] bond1: entered promiscuous mode
[  351.577917][T17776] bond1: entered allmulticast mode
[  351.580398][T17776] 8021q: adding VLAN 0 to HW filter on device bond1
[  353.060891][T17857] xt_hashlimit: max too large, truncated to 1048576
[  353.069191][T17860] netlink: 'syz.1.3472': attribute type 1 has an invalid length.
[  353.085669][T17860] netlink: 'syz.1.3472': attribute type 2 has an invalid length.
[  353.130807][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'.
[  353.134080][T17862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.143261][T17863] xt_hashlimit: max too large, truncated to 1048576
[  353.197604][T17866] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  353.214062][T17867] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  353.499469][T17887] netlink: 'syz.3.3485': attribute type 2 has an invalid length.
[  353.502800][T17887] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3485'.
[  353.584614][T17894] netlink: 'syz.3.3487': attribute type 12 has an invalid length.
[  355.107823][T17934] bridge4: entered promiscuous mode
[  355.110137][T17934] bridge4: entered allmulticast mode
[  355.264181][T17945] xt_CT: No such helper "syz1"
[  355.644534][T17922] delete_channel: no stack
[  355.793683][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'.
[  355.943454][T17989] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3517'.
[  356.172688][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'.
[  356.181701][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'.
[  356.187343][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'.
[  356.524823][T18028] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  356.600976][T18032] x_tables: duplicate underflow at hook 2
[  356.628709][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'.
[  356.734394][T18041] xt_ecn: cannot match TCP bits for non-tcp packets
[  356.882693][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'.
[  356.966706][T18072] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  356.970519][T18072] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  356.973051][T18072] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  356.986582][T18072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.990313][T18072] D: renamed from syzkaller0
[  356.993682][T18072] tipc: Disabling bearer <eth:syzkaller0>
[  357.021519][T18072] xt_CT: No such helper "syz1"
[  357.099094][T18078] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3547'.
[  357.234414][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'.
[  357.347599][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'.
[  357.413938][T18108] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  357.457861][   T33] audit: type=1804 audit(1752118541.094:10): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3557" name="/newroot/1548/cgroup.controllers" dev="tmpfs" ino=7909 res=1 errno=0
[  357.465251][   T33] audit: type=1800 audit(1752118541.094:11): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3557" name="cgroup.controllers" dev="tmpfs" ino=7909 res=0 errno=0
[  357.578516][T18117] netlink: 'syz.0.3559': attribute type 21 has an invalid length.
[  357.581122][T18117] netlink: 'syz.0.3559': attribute type 5 has an invalid length.
[  358.342968][T18163] x_tables: duplicate underflow at hook 1
[  358.476100][T18175] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  358.773361][T18185] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  359.238580][T18194] netlink: 'syz.1.3583': attribute type 1 has an invalid length.
[  359.241119][T18194] netlink: 'syz.1.3583': attribute type 11 has an invalid length.
[  359.559333][T18240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.752163][T18255] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  359.885803][T18261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.227546][T18275] netlink: 'syz.0.3606': attribute type 9 has an invalid length.
[  360.237919][T18275] macvlan1: entered promiscuous mode
[  360.240240][T18275] hsr0: entered promiscuous mode
[  360.242680][T18275] macvlan1: entered allmulticast mode
[  360.245059][T18275] hsr0: entered allmulticast mode
[  360.247360][T18275] hsr_slave_0: entered allmulticast mode
[  360.249749][T18275] hsr_slave_1: entered allmulticast mode
[  360.903375][T18312] netlink: 'syz.3.3616': attribute type 9 has an invalid length.
[  360.906160][T18312] __nla_validate_parse: 15 callbacks suppressed
[  360.906167][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'.
[  360.916031][T18312] macvlan4: entered promiscuous mode
[  360.917979][T18312] macvlan4: entered allmulticast mode
[  360.919837][T18312] hsr0: entered allmulticast mode
[  360.922235][T18312] hsr_slave_0: entered allmulticast mode
[  360.925656][T18312] hsr_slave_1: entered allmulticast mode
[  362.118671][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'.
[  362.122310][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'.
[  362.207049][T18354] netlink: 'syz.3.3628': attribute type 1 has an invalid length.
[  362.210596][T18354] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3628'.
[  362.214399][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'.
[  362.361687][T18363] netlink: 'syz.3.3631': attribute type 1 has an invalid length.
[  362.364816][T18363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3631'.
[  362.371370][T18363] x_tables: duplicate underflow at hook 3
[  362.402830][T18365] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003
[  362.495334][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'.
[  362.878585][T18387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3637'.
[  362.888652][T18387] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.3637'.
[  362.931903][T18391] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3639'.
[  362.978034][T18393] xt_CT: No such helper "syz1"
[  363.183072][T18414] xt_cgroup: invalid path, errno=-2
[  363.984767][T18453] netlink: 'syz.0.3657': attribute type 21 has an invalid length.
[  364.191383][T18471] syz!: rxe_newlink: already configured on team_slave_0
[  364.614831][T18503] bridge5: entered promiscuous mode
[  364.619449][T18503] bridge5: entered allmulticast mode
[  364.662950][T18504] rdma_rxe: rxe_newlink: failed to add macvlan1
[  365.675930][T18569] bridge5: entered promiscuous mode
[  365.677777][T18569] bridge5: entered allmulticast mode
[  365.714078][T18574] rdma_rxe: rxe_newlink: failed to add macvlan1
[  365.878097][T18581] syzkaller1: entered promiscuous mode
[  365.879958][T18581] syzkaller1: entered allmulticast mode
[  366.064972][T18590] netlink: 'syz.0.3698': attribute type 62 has an invalid length.
[  366.110934][T18596] __nla_validate_parse: 19 callbacks suppressed
[  366.110943][T18596] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3699'.
[  366.373881][T18612] nbd: must specify a device to reconfigure
[  366.447705][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'.
[  366.452276][T18619] ipt_ECN: cannot use operation on non-tcp rule
[  367.740261][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3720'.
[  367.743282][T18668] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3720'.
[  368.683530][T18722] netlink: 'syz.3.3736': attribute type 4 has an invalid length.
[  368.742152][T18724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.072057][T18732] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3739'.
[  369.075194][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3739'.
[  369.095891][T18732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3739'.
[  369.447330][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3750'.
[  369.520549][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3752'.
[  369.616595][T18790] netlink: 'syz.1.3752': attribute type 2 has an invalid length.
[  369.773008][T18798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.832518][T18798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.898441][T18798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.955470][T18801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.441038][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'.
[  370.628848][T18823] wg1 speed is unknown, defaulting to 1000
[  370.630872][T18823] wg1 speed is unknown, defaulting to 1000
[  370.633761][T18823] wg1 speed is unknown, defaulting to 1000
[  370.674343][T18823] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  370.682163][T18823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  370.708456][T18823] wg1 speed is unknown, defaulting to 1000
[  370.712268][T18823] wg1 speed is unknown, defaulting to 1000
[  370.721901][T18823] wg1 speed is unknown, defaulting to 1000
[  371.724670][T18892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.998856][T18897] xt_hashlimit: size too large, truncated to 1048576
[  372.614059][T18918] blkio.reset_stats is deprecated
[  372.809238][T18942] tc_dump_action: action bad kind
[  372.838878][T18939] xt_cgroup: xt_cgroup: no path or classid specified
[  372.861854][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3810'.
[  373.205219][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'.
[  373.210323][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'.
[  373.744379][T18978] xt_CT: No such helper "syz1"
[  374.171054][T19003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3824'.
[  374.628240][T19014] SET target dimension over the limit!
[  374.674004][T19037] netlink: 'syz.0.3835': attribute type 4 has an invalid length.
[  374.715000][T19013] wg1 speed is unknown, defaulting to 1000
[  375.027206][T19048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3838'.
[  375.562368][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3851'.
[  375.729453][T19091] xt_CT: No such helper "syz1"
[  375.791602][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'.
[  375.795475][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'.
[  375.800819][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'.
[  375.805791][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'.
[  375.873152][T19103] xt_hashlimit: max too large, truncated to 1048576
[  376.066938][T19121] veth0_to_bond: left allmulticast mode
[  376.091485][T19128] syz1: rxe_newlink: already configured on macvlan1
[  376.091499][T19113] syz1: rxe_newlink: already configured on macvlan1
[  376.097646][T19121] netdevsim0: left promiscuous mode
[  376.104235][T19121] ip6gre2: left allmulticast mode
[  376.108622][T19121] macsec4: left promiscuous mode
[  376.110851][T19121] macsec4: left allmulticast mode
[  376.114900][T19121] ip6erspan0: left allmulticast mode
[  376.119640][T19121] bond5: left promiscuous mode
[  376.121653][T19121] bond5: left allmulticast mode
[  376.124554][T19121] bond6: left promiscuous mode
[  376.126865][T19121] bond6: left allmulticast mode
[  376.130116][T19121] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  376.132958][T19121] macsec5: left promiscuous mode
[  376.135008][T19121] macsec5: left allmulticast mode
[  376.138223][T19121] hsr0: left allmulticast mode
[  376.140251][T19121] hsr_slave_0: left allmulticast mode
[  376.142455][T19121] hsr_slave_1: left allmulticast mode
[  376.144659][T19121] hsr0: left promiscuous mode
[  376.147870][T19121] macvlan1: left promiscuous mode
[  376.149985][T19121] macvlan1: left allmulticast mode
[  376.160323][T19116] bridge12: entered promiscuous mode
[  376.162603][T19116] bridge12: entered allmulticast mode
[  376.319358][T19137] xt_hashlimit: max too large, truncated to 1048576
[  376.436721][T19143] netlink: 'syz.1.3868': attribute type 9 has an invalid length.
[  376.445371][T19143] macvlan5: entered promiscuous mode
[  376.449452][T19143] hsr0: entered promiscuous mode
[  376.451732][T19143] macvlan5: entered allmulticast mode
[  376.454017][T19143] hsr0: entered allmulticast mode
[  376.456836][T19143] hsr_slave_0: entered allmulticast mode
[  376.459247][T19143] hsr_slave_1: entered allmulticast mode
[  376.658561][T19145] syzkaller1: entered promiscuous mode
[  376.660907][T19145] syzkaller1: entered allmulticast mode
[  376.816127][T19153] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  377.092741][T19163] syzkaller1: entered promiscuous mode
[  377.100892][T19163] syzkaller1: entered allmulticast mode
[  377.269486][T19157] wg1 speed is unknown, defaulting to 1000
[  377.437259][   T33] audit: type=1800 audit(1752118561.064:12): pid=19184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3883" name="memory.events" dev="tmpfs" ino=4063 res=0 errno=0
[  378.031985][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.549583][T19266] wg1 speed is unknown, defaulting to 1000
[  379.093515][T19295] __nla_validate_parse: 8 callbacks suppressed
[  379.093531][T19295] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3905'.
[  379.218380][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  379.222301][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  379.227924][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  379.331308][T19308] xt_hashlimit: max too large, truncated to 1048576
[  379.576761][T19312] block nbd0: Unsupported socket: shutdown callout must be supported.
[  379.664410][T19316] netlink: 'syz.0.3912': attribute type 3 has an invalid length.
[  379.941065][T19321] wg1 speed is unknown, defaulting to 1000
[  380.436627][T19336] netlink: 'syz.1.3918': attribute type 1 has an invalid length.
[  380.439555][T19336] netlink: 14870 bytes leftover after parsing attributes in process `syz.1.3918'.
[  380.443611][T19336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3918'.
[  380.446929][T19338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.449581][T19336] openvswitch: netlink: Flow key attr not present in new flow.
[  380.918170][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.921717][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.925170][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.928856][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.932788][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.935940][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.938482][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.941182][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  380.947552][T19379] netlink: 'syz.1.3930': attribute type 29 has an invalid length.
[  381.008317][T19381] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3931'.
[  381.095335][T19397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3935'.
[  381.140860][T19400] syzkaller1: entered promiscuous mode
[  381.142958][T19400] syzkaller1: entered allmulticast mode
[  381.560356][T19417] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  381.702716][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3944'.
[  381.705960][T19429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3944'.
[  381.752438][T19432] openvswitch: netlink: IP tunnel dst address not specified
[  382.148368][T19468] bridge12: entered promiscuous mode
[  382.155199][T19468] bridge12: entered allmulticast mode
[  382.649040][T19516] syzkaller1: entered promiscuous mode
[  382.651500][T19516] syzkaller1: entered allmulticast mode
[  382.774186][T19524] tipc: Enabling <ib:lo> not permitted
[  382.777267][T19524] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  383.069019][T19530] wg1 speed is unknown, defaulting to 1000
[  383.421077][T19551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.427060][T19550] tipc: Resetting bearer <eth:syzkaller0>
[  384.561906][T19550] tipc: Disabling bearer <eth:syzkaller0>
[  384.971813][T19587] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  385.083544][T19591] __nla_validate_parse: 5 callbacks suppressed
[  385.083553][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3991'.
[  385.183316][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3992'.
[  385.221540][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'.
[  385.671685][T19613] sit0: left promiscuous mode
[  385.695064][T19613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.783971][T19622] netlink: 'syz.0.4003': attribute type 11 has an invalid length.
[  385.793066][T19622] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4003'.
[  386.739826][T19649] validate_nla: 48 callbacks suppressed
[  386.739844][T19649] netlink: 'syz.1.4010': attribute type 10 has an invalid length.
[  386.843166][T19658] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4012'.
[  386.847154][T19658] nbd: illegal input index 65508
[  387.258847][T19681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4018'.
[  387.263313][T19681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4018'.
[  387.484471][T19680] wg1 speed is unknown, defaulting to 1000
[  387.831030][T19690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4020'.
[  388.427373][T19724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4031'.
[  388.579840][T19728] xt_CT: No such helper "syz1"
[  388.669785][T19741] vxcan5: entered allmulticast mode
[  388.725302][T19746] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  388.730745][T19746] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4037'.
[  389.019892][T19770] batadv1: entered promiscuous mode
[  389.024643][T19770] batadv1: entered allmulticast mode
[  389.040434][T19775] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.085261][T19775] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.138148][T19775] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.189518][T19775] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.269905][T19775] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.284607][T19775] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.301165][T19775] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.316615][T19775] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.546489][T19797] netlink: 'syz.0.4052': attribute type 1 has an invalid length.
[  389.552530][T19797] openvswitch: netlink: Flow key attr not present in new flow.
[  389.623376][T19804] netlink: 'syz.0.4054': attribute type 1 has an invalid length.
[  390.372688][T19862] 8021q: adding VLAN 0 to HW filter on device bond7
[  390.439390][T19868] __nla_validate_parse: 8 callbacks suppressed
[  390.439401][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'.
[  390.448380][T19868] netlink: 'syz.0.4072': attribute type 9 has an invalid length.
[  390.450904][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'.
[  390.458779][T19868] macvlan3: entered promiscuous mode
[  390.460570][T19868] hsr0: entered promiscuous mode
[  390.462894][T19868] macvlan3: entered allmulticast mode
[  390.464719][T19868] hsr0: entered allmulticast mode
[  390.466740][T19868] hsr_slave_0: entered allmulticast mode
[  390.468671][T19868] hsr_slave_1: entered allmulticast mode
[  390.639547][T19877] hsr0: left allmulticast mode
[  390.641733][T19877] hsr_slave_0: left allmulticast mode
[  390.644006][T19877] hsr_slave_1: left allmulticast mode
[  390.650868][T19877] hsr0: left promiscuous mode
[  390.654127][T19877] macvlan3: left promiscuous mode
[  390.656695][T19877] macvlan3: left allmulticast mode
[  390.744096][T19888] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4078'.
[  390.989747][T19916] netlink: 'syz.1.4084': attribute type 1 has an invalid length.
[  390.992555][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'.
[  390.998336][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'.
[  391.027748][T19911] siw: device registration error -23
[  391.523722][T19970] x_tables: duplicate underflow at hook 1
[  391.529589][T19970] netlink: 'syz.1.4100': attribute type 62 has an invalid length.
[  391.623498][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4101'.
[  391.697738][T19978] netlink: 'syz.1.4103': attribute type 21 has an invalid length.
[  391.700523][T19978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4103'.
[  391.704110][T19978] netlink: 'syz.1.4103': attribute type 5 has an invalid length.
[  391.708339][T19978] netlink: 'syz.1.4103': attribute type 6 has an invalid length.
[  391.710942][T19978] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4103'.
[  391.716876][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4103'.
[  391.760130][T19980] xt_CT: No such helper "syz1"
[  391.829039][T19988] bridge11: entered promiscuous mode
[  391.831083][T19988] bridge11: entered allmulticast mode
[  391.834194][T19988] team0: Port device bridge11 added
[  392.058510][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4109'.
[  393.093742][T20061] x_tables: duplicate underflow at hook 2
[  393.231285][T20063] netlink: 'syz.3.4129': attribute type 5 has an invalid length.
[  393.333299][T20067] netlink: 'syz.3.4130': attribute type 21 has an invalid length.
[  393.666051][T20080] siw: device registration error -23
[  393.882504][T20102] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  393.917738][T20104] openvswitch: netlink: Flow key attr not present in new flow.
[  393.952631][T20106] xt_hashlimit: max too large, truncated to 1048576
[  394.157036][T20120] netlink: 'syz.0.4144': attribute type 9 has an invalid length.
[  394.166491][T20120] macvlan4: entered promiscuous mode
[  394.168924][T20120] hsr0: entered promiscuous mode
[  394.171331][T20120] macvlan4: entered allmulticast mode
[  394.173747][T20120] hsr0: entered allmulticast mode
[  394.176293][T20120] hsr_slave_0: entered allmulticast mode
[  394.178754][T20120] hsr_slave_1: entered allmulticast mode
[  394.400346][T20126] openvswitch: netlink: Flow key attr not present in new flow.
[  394.560798][T20129] siw: device registration error -23
[  394.613235][T20133] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.617313][T20133] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.622185][T20133] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.626130][T20133] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.632051][T20133] vxlan1: entered promiscuous mode
[  394.634091][T20133] vxlan1: entered allmulticast mode
[  395.027758][T20146] netlink: 'syz.3.4152': attribute type 13 has an invalid length.
[  395.542880][T20149] bridge6: entered promiscuous mode
[  395.544990][T20149] bridge6: entered allmulticast mode
[  395.592662][T20150] rdma_rxe: rxe_newlink: failed to add macvlan1
[  395.611207][T20156] C: renamed from team_slave_0
[  395.616533][T20156] netlink: 'syz.1.4154': attribute type 4 has an invalid length.
[  395.620005][T20156] __nla_validate_parse: 12 callbacks suppressed
[  395.620015][T20156] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4154'.
[  395.628169][T20156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  395.787492][T20163] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4157'.
[  395.793296][T20163] xt_bpf: check failed: parse error
[  396.110321][T20180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4163'.
[  396.234329][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4166'.
[  396.280896][T20190] netlink: 'syz.0.4167': attribute type 10 has an invalid length.
[  396.283698][T20190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4167'.
[  396.287700][T20190] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  396.334855][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'.
[  396.338840][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'.
[  396.356481][T20175] wg1 speed is unknown, defaulting to 1000
[  396.533847][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'.
[  396.821197][T20198] wg1 speed is unknown, defaulting to 1000
[  397.205355][T20220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4174'.
[  397.342881][T20226] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:511
[  397.677864][T20231] wg1 speed is unknown, defaulting to 1000
[  398.197957][T20239] wg1 speed is unknown, defaulting to 1000
[  398.298863][T20247] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4182'.
[  398.720142][T20275] macsec0: entered allmulticast mode
[  398.722863][T20275] veth1_macvtap: entered allmulticast mode
[  398.724942][T20275] macsec0: left allmulticast mode
[  398.728608][T20275] veth1_macvtap: left allmulticast mode
[  399.085807][T20281] netlink: 'syz.1.4193': attribute type 1 has an invalid length.
[  399.089196][T20281] nbd: error processing sock list
[  399.091949][T20281] block nbd0: shutting down sockets
[  399.245740][T20283] netlink: 'syz.1.4193': attribute type 1 has an invalid length.
[  399.249582][T20283] nbd: error processing sock list
[  399.251443][T20283] block nbd0: shutting down sockets
[  399.583855][T20300] netlink: 'syz.1.4198': attribute type 1 has an invalid length.
[  400.144222][T20333] openvswitch: netlink: Message has 4 unknown bytes.
[  400.146751][T20333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.197904][T20340] vxcan1: entered allmulticast mode
[  400.807142][T20382] __nla_validate_parse: 4 callbacks suppressed
[  400.807154][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4220'.
[  400.896895][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'.
[  400.899992][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'.
[  400.904567][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'.
[  401.052850][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'.
[  401.058600][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'.
[  401.064651][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'.
[  401.754109][T20397] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4225'.
[  401.760302][T20397] openvswitch: netlink: Message has 4 unknown bytes.
[  401.763179][T20397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.003607][T20417] netlink: 'syz.1.4230': attribute type 1 has an invalid length.
[  402.007649][T20417] netlink: 'syz.1.4230': attribute type 1 has an invalid length.
[  402.010302][T20417] netlink: 'syz.1.4230': attribute type 1 has an invalid length.
[  402.012887][T20417] netlink: 15106 bytes leftover after parsing attributes in process `syz.1.4230'.
[  402.017274][T20417] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4230'.
[  402.875265][T20438] netlink: 'syz.0.4234': attribute type 9 has an invalid length.
[  402.885887][T20438] macvlan5: entered promiscuous mode
[  402.888447][T20438] macvlan5: entered allmulticast mode
[  402.929855][T20446] sctp: [Deprecated]: syz.3.4238 (pid 20446) Use of int in max_burst socket option.
[  402.929855][T20446] Use struct sctp_assoc_value instead
[  403.553386][T20489] syzkaller0: entered promiscuous mode
[  403.556291][T20489] syzkaller0: entered allmulticast mode
[  404.846615][T20511] syzkaller1: entered promiscuous mode
[  404.849052][T20511] syzkaller1: entered allmulticast mode
[  405.018643][T20527] bridge12: entered promiscuous mode
[  405.020512][T20527] bridge12: entered allmulticast mode
[  405.065483][T20518] syz1: rxe_newlink: already configured on macvlan1
[  405.890580][T20543] __nla_validate_parse: 5 callbacks suppressed
[  405.890597][T20543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4265'.
[  405.897352][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'.
[  405.930676][T20546] xt_hashlimit: max too large, truncated to 1048576
[  406.111047][T20551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4270'.
[  406.135233][T20548] sctp: [Deprecated]: syz.0.4269 (pid 20548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.135233][T20548] Use struct sctp_sack_info instead
[  406.231459][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4272'.
[  406.247252][T20561] syzkaller1: entered promiscuous mode
[  406.251739][T20561] syzkaller1: entered allmulticast mode
[  406.380291][T20569] bridge12: entered promiscuous mode
[  406.382206][T20569] bridge12: entered allmulticast mode
[  406.596643][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4277'.
[  406.729070][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'.
[  406.732975][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'.
[  407.619414][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'.
[  407.623524][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'.
[  407.633236][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'.
[  408.987403][T20662] netlink: 'syz.3.4302': attribute type 12 has an invalid length.
[  409.062468][T20668] syzkaller0: entered promiscuous mode
[  409.064675][T20668] syzkaller0: entered allmulticast mode
[  410.178735][T20688] netlink: 'syz.0.4311': attribute type 1 has an invalid length.
[  410.182630][T20688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.359950][T20678] wg1 speed is unknown, defaulting to 1000
[  411.052823][T20749] __nla_validate_parse: 5 callbacks suppressed
[  411.052835][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  411.064027][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  411.069289][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  411.072932][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  411.076132][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  411.491168][T20758] netlink: 'syz.3.4325': attribute type 1 has an invalid length.
[  411.506794][T20758] 8021q: adding VLAN 0 to HW filter on device bond2
[  411.522664][T20758] 8021q: adding VLAN 0 to HW filter on device bond2
[  411.525079][T20758] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address
[  411.530253][T20758] bond2: (slave vxcan7): Error -95 calling set_mac_address
[  411.568633][T20764] gretap1: entered promiscuous mode
[  411.572459][T20764] bond2: (slave gretap1): making interface the new active one
[  411.575332][T20764] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  411.583636][T20764] macvlan5: entered promiscuous mode
[  411.586731][T20764] macvlan5: entered allmulticast mode
[  411.588771][T20764] bond2: entered promiscuous mode
[  411.590969][T20764] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  411.598183][T20764] bond2: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  411.605065][T20764] bond2: left promiscuous mode
[  411.612810][T20762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4326'.
[  411.855003][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4330'.
[  411.858886][T20778] openvswitch: netlink: Flow key attr not present in new flow.
[  411.864962][T20780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4330'.
[  411.870354][T20780] openvswitch: netlink: Flow key attr not present in new flow.
[  411.873732][T20774] ipt_rpfilter: unknown options
[  412.027102][T20770] wg1 speed is unknown, defaulting to 1000
[  412.134923][T20789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4334'.
[  412.139747][T20789] openvswitch: netlink: Message has 8 unknown bytes.
[  412.144928][T20789] syzkaller0: mtu less than device minimum
[  412.269110][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4341'.
[  412.434744][T20823] xt_hashlimit: max too large, truncated to 1048576
[  412.448343][T20812] xt_CT: No such helper "syz1"
[  413.390795][T20848] x_tables: duplicate underflow at hook 1
[  413.717347][T20867] tipc: Invalid UDP bearer configuration
[  413.717377][T20867] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  414.669576][T20890] xt_l2tp: v2 sid > 0xffff: 4294901760
[  414.807816][T20892] siw: device registration error -23
[  414.978139][T20900] netlink: 'syz.3.4370': attribute type 15 has an invalid length.
[  415.130317][T20896] wg1 speed is unknown, defaulting to 1000
[  415.152370][T20906] nbd: couldn't find device at index 536870912
[  416.052027][T20941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.100920][T21004] IPv6: Can't replace route, no match found
[  417.107880][T21004] openvswitch: netlink: Message has 8 unknown bytes.
[  417.346180][T21004] wg1 speed is unknown, defaulting to 1000
[  417.419672][T21008] __nla_validate_parse: 46 callbacks suppressed
[  417.419684][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'.
[  417.424738][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4402'.
[  417.698306][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4407'.
[  417.963871][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  417.967534][T21050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4414'.
[  418.782590][T21077] macsec0: entered promiscuous mode
[  418.786491][T21077] macsec3: entered allmulticast mode
[  418.788794][T21077] macsec0: entered allmulticast mode
[  418.790715][T21077] veth1_macvtap: entered allmulticast mode
[  419.055308][T21092] syzkaller1: entered promiscuous mode
[  419.058991][T21092] syzkaller1: entered allmulticast mode
[  419.218440][T21099] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  419.258816][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'.
[  419.262674][T21101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4430'.
[  419.268138][T21101] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4430'.
[  419.456913][T21110] hsr0: left allmulticast mode
[  419.458527][T21110] hsr_slave_0: left allmulticast mode
[  419.460368][T21110] hsr_slave_1: left allmulticast mode
[  419.462116][T21110] hsr0: left promiscuous mode
[  419.562373][T21116] IPVS: length: 4096 != 8
[  420.369965][T21134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4441'.
[  420.933331][T21151] wg1 speed is unknown, defaulting to 1000
[  421.396585][T21157] netlink: 'syz.1.4446': attribute type 83 has an invalid length.
[  421.427482][T21160] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  421.430083][T21160] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  421.620122][T21173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  421.657800][T21177] netlink: 'syz.0.4452': attribute type 9 has an invalid length.
[  421.660542][T21177] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.4452'.
[  421.663635][T21177] openvswitch: netlink: Message has 5 unknown bytes.
[  422.067960][T21204] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  422.075967][T21204] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  422.489932][T21229] bridge6: entered promiscuous mode
[  422.491850][T21229] bridge6: entered allmulticast mode
[  422.499499][T21238] netlink: 'syz.1.4470': attribute type 9 has an invalid length.
[  422.516772][T21227] bridge6: entered promiscuous mode
[  422.518524][T21227] bridge6: entered allmulticast mode
[  422.550567][T21241] __nla_validate_parse: 2 callbacks suppressed
[  422.550578][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4470'.
[  422.679309][T21245] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4471'.
[  422.713784][T21249] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  422.787752][T21256] SET target dimension over the limit!
[  423.177557][T21291] netlink: 'syz.3.4482': attribute type 9 has an invalid length.
[  423.180465][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4482'.
[  423.189526][T21291] macvlan5: entered promiscuous mode
[  423.192162][T21291] macvlan5: entered allmulticast mode
[  423.236206][T21293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4484'.
[  423.240122][T21293] openvswitch: netlink: Flow key attr not present in new flow.
[  423.295805][T21268] wg1 speed is unknown, defaulting to 1000
[  423.521180][T21309] bridge12: entered promiscuous mode
[  423.523451][T21309] bridge12: entered allmulticast mode
[  423.566836][T21302] syz1: rxe_newlink: already configured on macvlan1
[  423.779967][T21322] netlink: 'syz.3.4494': attribute type 21 has an invalid length.
[  423.780899][T21300] wg1 speed is unknown, defaulting to 1000
[  423.782756][T21323] netlink: 'syz.3.4494': attribute type 21 has an invalid length.
[  423.868570][T21323] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4494'.
[  423.871621][T21328] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4494'.
[  423.978274][T21329] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4496'.
[  424.189582][T21346] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  424.280446][T21346] batadv_slave_0: entered promiscuous mode
[  424.403771][T21350] xt_TCPMSS: Only works on TCP SYN packets
[  424.569072][T21361] xt_recent: Unsupported userspace flags (00000048)
[  424.669169][T21368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4509'.
[  424.673146][T21368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4509'.
[  424.677976][T21368] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  424.688874][T21368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4509'.
[  425.618303][T21390] netlink: 'syz.3.4515': attribute type 7 has an invalid length.
[  425.998194][T21425] siw: device registration error -23
[  426.905412][T21460] tipc: Enabling of bearer <et:g> rejected, media not registered
[  426.908879][T21460] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  427.194029][T21479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.773342][T21514] macvtap2: entered allmulticast mode
[  427.775181][T21514] veth0_macvtap: entered allmulticast mode
[  427.860839][T21521] __nla_validate_parse: 106 callbacks suppressed
[  427.860849][T21521] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4552'.
[  427.894023][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  427.898833][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  427.901950][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  427.905333][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  427.909078][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  427.960778][T21527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.540842][T21555] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4564'.
[  428.719112][T21571] bridge7: entered promiscuous mode
[  428.721348][T21571] bridge7: entered allmulticast mode
[  428.768966][T21578] rdma_rxe: rxe_newlink: failed to add macvlan1
[  429.036152][T21593] syzkaller1: tun_chr_ioctl cmd 35111
[  429.144024][T21596] bridge12: entered promiscuous mode
[  429.149159][T21596] bridge12: entered allmulticast mode
[  429.158776][T21596] team0: Port device bridge12 added
[  429.168370][T21596] rdma_rxe: rxe_newlink: failed to add macvlan1
[  429.734614][T21618] netlink: 'syz.1.4579': attribute type 11 has an invalid length.
[  429.741288][T21618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4579'.
[  430.031100][T21611] wg1 speed is unknown, defaulting to 1000
[  430.217655][T21630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4584'.
[  430.220567][T21630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4584'.
[  431.183715][T21670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.187822][T21670] syzkaller0: entered promiscuous mode
[  431.189712][T21670] syzkaller0: entered allmulticast mode
[  431.200928][T21670] syzkaller0: mtu greater than device maximum
[  431.210677][T21669] tipc: Resetting bearer <eth:syzkaller0>
[  431.220927][T21669] tipc: Disabling bearer <eth:syzkaller0>
[  431.243477][T21639] delete_channel: no stack
[  431.245719][T21639] delete_channel: no stack
[  431.247688][T21639] delete_channel: no stack
[  431.249692][T21639] delete_channel: no stack
[  431.251730][T21639] delete_channel: no stack
[  431.253718][T21639] delete_channel: no stack
[  431.257459][T21639] delete_channel: no stack
[  431.259487][T21639] delete_channel: no stack
[  431.261527][T21639] delete_channel: no stack
[  431.263647][T21639] delete_channel: no stack
[  431.266518][T21639] delete_channel: no stack
[  431.268551][T21639] delete_channel: no stack
[  431.270517][T21639] delete_channel: no stack
[  431.272531][T21639] delete_channel: no stack
[  431.274687][T21639] delete_channel: no stack
[  431.284850][T21639] delete_channel: no stack
[  431.286979][T21639] delete_channel: no stack
[  431.288935][T21639] delete_channel: no stack
[  431.290961][T21639] delete_channel: no stack
[  431.292883][T21639] delete_channel: no stack
[  431.295221][T21639] delete_channel: no stack
[  431.298255][T21639] delete_channel: no stack
[  431.300225][T21639] delete_channel: no stack
[  431.302221][T21639] delete_channel: no stack
[  431.304266][T21639] delete_channel: no stack
[  431.306573][T21639] delete_channel: no stack
[  431.308616][T21639] delete_channel: no stack
[  431.316069][T21673] rdma_rxe: rxe_newlink: failed to add macvlan1
[  431.320163][T21672] bridge13: entered promiscuous mode
[  431.322088][T21672] bridge13: entered allmulticast mode
[  431.325429][T21672] team0: Port device bridge13 added
[  431.327211][T21639] delete_channel: no stack
[  431.327400][T21639] delete_channel: no stack
[  431.327523][T21639] delete_channel: no stack
[  431.333470][T21639] delete_channel: no stack
[  431.336402][T21639] delete_channel: no stack
[  431.343538][T21639] delete_channel: no stack
[  431.370851][T21678] netlink: 'syz.1.4598': attribute type 1 has an invalid length.
[  431.484644][T21690] netlink: 'syz.3.4600': attribute type 13 has an invalid length.
[  431.487308][T21690] netlink: 'syz.3.4600': attribute type 17 has an invalid length.
[  431.509473][T21690] ip6gretap0: left promiscuous mode
[  431.521344][T21690] 8021q: adding VLAN 0 to HW filter on device team0
[  431.526926][T21690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  431.539144][T21692] netlink: 'syz.1.4602': attribute type 1 has an invalid length.
[  431.615813][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.670714][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.730902][T21684] wg1 speed is unknown, defaulting to 1000
[  431.958135][T21699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  432.982541][T21740] xt_CT: No such helper "syz1"
[  433.053014][T21732] wg1 speed is unknown, defaulting to 1000
[  433.163685][T21750] bridge0: port 1(veth0_to_bridge) entered blocking state
[  433.167340][T21750] bridge0: port 1(veth0_to_bridge) entered disabled state
[  433.169781][T21750] veth0_to_bridge: entered allmulticast mode
[  433.175976][T21750] veth0_to_bridge: entered promiscuous mode
[  433.201952][T21756] netlink: 'syz.0.4619': attribute type 33 has an invalid length.
[  433.213416][T21756] __nla_validate_parse: 3 callbacks suppressed
[  433.213431][T21756] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4619'.
[  433.710487][T21768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4623'.
[  433.786160][T21773] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  433.791957][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4624'.
[  433.823670][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4625'.
[  433.992405][T21780] bridge15: entered promiscuous mode
[  433.994165][T21780] bridge15: entered allmulticast mode
[  433.998423][T21780] team0: Port device bridge15 added
[  434.003288][T21780] rdma_rxe: rxe_newlink: failed to add macvlan1
[  434.171148][T21795] siw: device registration error -23
[  434.505805][T21815] xt_hashlimit: max too large, truncated to 1048576
[  434.672449][T21819] bridge7: entered promiscuous mode
[  434.674337][T21819] bridge7: entered allmulticast mode
[  434.721144][T21822] rdma_rxe: rxe_newlink: failed to add macvlan1
[  434.951894][T21833] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4643'.
[  435.301503][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4651'.
[  435.455472][T21876] xt_socket: unknown flags 0x8
[  435.479465][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4650'.
[  435.483247][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4650'.
[  435.660988][T21895] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4660'.
[  436.168641][T21906] bridge16: entered promiscuous mode
[  436.171105][T21906] bridge16: entered allmulticast mode
[  436.177828][T21906] team0: Port device bridge16 added
[  436.187207][T21906] rdma_rxe: rxe_newlink: failed to add macvlan1
[  436.195444][T21908] netlink: 'syz.1.4665': attribute type 14 has an invalid length.
[  436.201727][T21908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4665'.
[  436.251796][T21910] netlink: 'syz.1.4666': attribute type 1 has an invalid length.
[  436.392505][T21920] syzkaller1: entered promiscuous mode
[  436.394831][T21920] syzkaller1: entered allmulticast mode
[  436.484195][T21924] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004
[  438.480545][T22010] __nla_validate_parse: 8 callbacks suppressed
[  438.480559][T22010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4699'.
[  438.582044][T22016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4700'.
[  438.589582][T22016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4700'.
[  438.753790][T22031] netlink: 'syz.1.4703': attribute type 4 has an invalid length.
[  438.947276][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  438.951264][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  438.957086][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  439.198597][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4707'.
[  439.205822][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4707'.
[  439.734375][T22060] netlink: 920 bytes leftover after parsing attributes in process `syz.1.4712'.
[  439.816772][T22067] syzkaller1: entered promiscuous mode
[  439.821217][T22067] syzkaller1: entered allmulticast mode
[  440.099823][T22092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4721'.
[  440.254137][T22082] wg1 speed is unknown, defaulting to 1000
[  440.741467][T22120] IPv6: sit3: Disabled Multicast RS
[  440.968558][T22130] xt_CT: No such helper "syz1"
[  441.284806][T22139] wg1 speed is unknown, defaulting to 1000
[  442.178304][T22213] gtp3: entered promiscuous mode
[  442.180211][T22213] gtp3: entered allmulticast mode
[  442.371870][T22204] wg1 speed is unknown, defaulting to 1000
[  442.409237][T22235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.424578][T22235] tipc: Resetting bearer <eth:syzkaller0>
[  442.746289][T22242] wg1 speed is unknown, defaulting to 1000
[  443.342470][T22262] syz_tun: left allmulticast mode
[  443.434913][    T9] tipc: Node number set to 4271012230
[  443.592598][T22273] __nla_validate_parse: 7 callbacks suppressed
[  443.592616][T22273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4774'.
[  443.601297][T22273] openvswitch: netlink: Flow key attr not present in new flow.
[  443.729985][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4777'.
[  443.825422][T22286] xt_hashlimit: max too large, truncated to 1048576
[  443.907242][T22290] ip6t_srh: unknown srh match flags  4000
[  443.954536][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'.
[  443.958624][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'.
[  444.348911][T22305] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4784'.
[  444.352940][T22305] netlink: 'syz.1.4784': attribute type 5 has an invalid length.
[  444.754441][T22309] IPv6: sit3: Disabled Multicast RS
[  445.043285][T22321] IPVS: set_ctl: invalid protocol: 174 172.30.0.1:20001
[  445.176476][T22331] bridge17: entered promiscuous mode
[  445.178537][T22331] bridge17: entered allmulticast mode
[  445.181988][T22331] team0: Port device bridge17 added
[  445.202554][T22331] rdma_rxe: rxe_newlink: failed to add macvlan1
[  445.318688][T22343] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4798'.
[  445.781030][T22367] wg1 speed is unknown, defaulting to 1000
[  446.338890][T22377] netlink: 'syz.1.4807': attribute type 1 has an invalid length.
[  446.403546][T22383] bridge12: entered promiscuous mode
[  446.405385][T22383] bridge12: entered allmulticast mode
[  446.451365][T22384] syz1: rxe_newlink: already configured on macvlan1
[  446.581346][T22398] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4814'.
[  446.938217][T22437] bridge18: entered promiscuous mode
[  446.940146][T22437] bridge18: entered allmulticast mode
[  446.943619][T22437] team0: Port device bridge18 added
[  446.951423][T22437] rdma_rxe: rxe_newlink: failed to add macvlan1
[  446.986746][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4826'.
[  447.047368][T22448] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4828'.
[  447.105331][T22453] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4830'.
[  447.150727][T22450] veth0_to_bridge: left allmulticast mode
[  447.152868][T22450] veth0_to_bridge: left promiscuous mode
[  447.155089][T22450] bridge0: port 1(veth0_to_bridge) entered disabled state
[  447.162847][T22450] netlink: 'syz.0.4829': attribute type 10 has an invalid length.
[  447.195216][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.201437][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.204274][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.208309][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.212376][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.218395][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  447.222343][T22463] netlink: 'syz.0.4832': attribute type 29 has an invalid length.
[  448.292498][T22506] xt_hashlimit: max too large, truncated to 1048576
[  448.357176][T22518] bridge19: entered promiscuous mode
[  448.359109][T22518] bridge19: entered allmulticast mode
[  448.362438][T22518] team0: Port device bridge19 added
[  448.369043][T22518] rdma_rxe: rxe_newlink: failed to add macvlan1
[  448.583003][T22527] veth0: entered promiscuous mode
[  448.588080][T22526] veth0: left promiscuous mode
[  448.621260][T22529] __nla_validate_parse: 10 callbacks suppressed
[  448.621271][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4851'.
[  449.139562][T22534] siw: device registration error -23
[  449.223542][T22537] xt_CT: No such helper "syz1"
[  449.382771][T22543] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  449.392369][T22543] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  449.397806][T22543] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  449.464171][T22553] validate_nla: 42 callbacks suppressed
[  449.464189][T22553] netlink: 'syz.0.4859': attribute type 9 has an invalid length.
[  449.473463][T22553] netlink: 'syz.0.4859': attribute type 1 has an invalid length.
[  449.476908][T22553] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4859'.
[  449.485214][T22554] netlink: 'syz.0.4859': attribute type 9 has an invalid length.
[  449.489130][T22554] netlink: 'syz.0.4859': attribute type 1 has an invalid length.
[  449.492580][T22554] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4859'.
[  449.536933][T22559] xt_NFQUEUE: number of total queues is 0
[  449.783113][T22576] netlink: 'syz.0.4866': attribute type 6 has an invalid length.
[  450.390171][T22602] xt_l2tp: missing protocol rule (udp|l2tpip)
[  450.893578][T22621] bridge7: entered promiscuous mode
[  450.895392][T22621] bridge7: entered allmulticast mode
[  450.944394][T22629] rdma_rxe: rxe_newlink: failed to add macvlan1
[  451.252107][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4889'.
[  451.315103][T22661] sctp: [Deprecated]: syz.0.4890 (pid 22661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  451.315103][T22661] Use struct sctp_sack_info instead
[  451.547002][T22670] netlink: 'syz.1.4894': attribute type 12 has an invalid length.
[  451.552847][T22671] netlink: 'syz.1.4894': attribute type 12 has an invalid length.
[  451.842194][T22683] wg1 speed is unknown, defaulting to 1000
[  451.978136][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4904'.
[  451.981892][T22706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4904'.
[  452.068763][T22713] xt_hashlimit: max too large, truncated to 1048576
[  452.467698][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4917'.
[  452.471162][T22743] netlink: 'syz.3.4917': attribute type 7 has an invalid length.
[  452.475958][T22743] netlink: 'syz.3.4917': attribute type 8 has an invalid length.
[  452.479458][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'.
[  452.487321][T22743] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4917'.
[  452.536561][   T59] hid-generic 0005:0458:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  452.567945][T22746] xt_CT: No such helper "syz1"
[  452.643639][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4924'.
[  452.697847][T22767] IPv6: NLM_F_CREATE should be specified when creating new route
[  452.711132][T22767] xt_hashlimit: size too large, truncated to 1048576
[  453.068036][T22778] 
[  453.068945][T22778] ======================================================
[  453.071291][T22778] WARNING: possible circular locking dependency detected
[  453.073687][T22778] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  453.076797][T22778] ------------------------------------------------------
[  453.079490][T22778] syz.1.4930/22778 is trying to acquire lock:
[  453.081593][T22778] ffffffff8f6753b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  453.084866][T22778] 
[  453.084866][T22778] but task is already holding lock:
[  453.087534][T22778] ffffffff8f675358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  453.090716][T22778] 
[  453.090716][T22778] which lock already depends on the new lock.
[  453.090716][T22778] 
[  453.094281][T22778] 
[  453.094281][T22778] the existing dependency chain (in reverse order) is:
[  453.097358][T22778] 
[  453.097358][T22778] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  453.100053][T22778]        lock_acquire+0x120/0x360
[  453.101810][T22778]        _raw_spin_lock_bh+0x36/0x50
[  453.103632][T22778]        nr_rt_ioctl+0x390/0xd50
[  453.105733][T22778]        sock_do_ioctl+0xdc/0x300
[  453.107508][T22778]        sock_ioctl+0x576/0x790
[  453.109158][T22778]        __se_sys_ioctl+0xfc/0x170
[  453.110872][T22778]        do_syscall_64+0xfa/0x3b0
[  453.112524][T22778]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.114630][T22778] 
[  453.114630][T22778] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  453.117280][T22778]        lock_acquire+0x120/0x360
[  453.119096][T22778]        _raw_spin_lock_bh+0x36/0x50
[  453.121114][T22778]        nr_rt_ioctl+0x193/0xd50
[  453.122863][T22778]        sock_do_ioctl+0xdc/0x300
[  453.124493][T22778]        sock_ioctl+0x576/0x790
[  453.126081][T22778]        __se_sys_ioctl+0xfc/0x170
[  453.127782][T22778]        do_syscall_64+0xfa/0x3b0
[  453.129419][T22778]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.131525][T22778] 
[  453.131525][T22778] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  453.134019][T22778]        validate_chain+0xb9b/0x2140
[  453.135722][T22778]        __lock_acquire+0xab9/0xd20
[  453.137464][T22778]        lock_acquire+0x120/0x360
[  453.139175][T22778]        _raw_spin_lock_bh+0x36/0x50
[  453.140947][T22778]        nr_rt_device_down+0xa9/0x720
[  453.142767][T22778]        nr_device_event+0x137/0x150
[  453.144673][T22778]        notifier_call_chain+0x1b6/0x3e0
[  453.146570][T22778]        __dev_notify_flags+0x18d/0x2e0
[  453.148422][T22778]        netif_change_flags+0xe8/0x1a0
[  453.150326][T22778]        dev_change_flags+0x130/0x260
[  453.152172][T22778]        dev_ioctl+0x7b4/0x1150
[  453.153884][T22778]        sock_do_ioctl+0x22c/0x300
[  453.155635][T22778]        sock_ioctl+0x576/0x790
[  453.157386][T22778]        __se_sys_ioctl+0xfc/0x170
[  453.159134][T22778]        do_syscall_64+0xfa/0x3b0
[  453.160824][T22778]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.162922][T22778] 
[  453.162922][T22778] other info that might help us debug this:
[  453.162922][T22778] 
[  453.166120][T22778] Chain exists of:
[  453.166120][T22778]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  453.166120][T22778] 
[  453.170444][T22778]  Possible unsafe locking scenario:
[  453.170444][T22778] 
[  453.172846][T22778]        CPU0                    CPU1
[  453.174658][T22778]        ----                    ----
[  453.176477][T22778]   lock(nr_neigh_list_lock);
[  453.178057][T22778]                                lock(&nr_node->node_lock);
[  453.180488][T22778]                                lock(nr_neigh_list_lock);
[  453.182886][T22778]   lock(nr_node_list_lock);
[  453.184422][T22778] 
[  453.184422][T22778]  *** DEADLOCK ***
[  453.184422][T22778] 
[  453.187023][T22778] 2 locks held by syz.1.4930/22778:
[  453.188762][T22778]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  453.191598][T22778]  #1: ffffffff8f675358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  453.194865][T22778] 
[  453.194865][T22778] stack backtrace:
[  453.196833][T22778] CPU: 1 UID: 0 PID: 22778 Comm: syz.1.4930 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  453.196844][T22778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  453.196849][T22778] Call Trace:
[  453.196853][T22778]  <TASK>
[  453.196858][T22778]  dump_stack_lvl+0x189/0x250
[  453.196869][T22778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.196877][T22778]  ? __pfx__printk+0x10/0x10
[  453.196887][T22778]  ? print_lock_name+0xde/0x100
[  453.196896][T22778]  print_circular_bug+0x2ee/0x310
[  453.196928][T22778]  check_noncircular+0x134/0x160
[  453.196938][T22778]  validate_chain+0xb9b/0x2140
[  453.196947][T22778]  ? rt6_disable_ip+0x6b3/0x720
[  453.196958][T22778]  ? __lock_acquire+0xab9/0xd20
[  453.196965][T22778]  __lock_acquire+0xab9/0xd20
[  453.196973][T22778]  ? nr_rt_device_down+0xa9/0x720
[  453.196979][T22778]  lock_acquire+0x120/0x360
[  453.196986][T22778]  ? nr_rt_device_down+0xa9/0x720
[  453.196994][T22778]  ? nr_rt_device_down+0xa9/0x720
[  453.197000][T22778]  _raw_spin_lock_bh+0x36/0x50
[  453.197011][T22778]  ? nr_rt_device_down+0xa9/0x720
[  453.197017][T22778]  nr_rt_device_down+0xa9/0x720
[  453.197023][T22778]  ? do_raw_spin_unlock+0x4d/0x240
[  453.197034][T22778]  nr_device_event+0x137/0x150
[  453.197044][T22778]  notifier_call_chain+0x1b6/0x3e0
[  453.197058][T22778]  __dev_notify_flags+0x18d/0x2e0
[  453.197068][T22778]  ? __pfx___dev_notify_flags+0x10/0x10
[  453.197076][T22778]  ? __dev_change_flags+0x4cc/0x6d0
[  453.197085][T22778]  ? __pfx___dev_change_flags+0x10/0x10
[  453.197093][T22778]  ? dev_ioctl+0x7a4/0x1150
[  453.197100][T22778]  ? full_name_hash+0x92/0xe0
[  453.197111][T22778]  netif_change_flags+0xe8/0x1a0
[  453.197121][T22778]  dev_change_flags+0x130/0x260
[  453.197130][T22778]  dev_ioctl+0x7b4/0x1150
[  453.197138][T22778]  sock_do_ioctl+0x22c/0x300
[  453.197145][T22778]  ? __pfx_sock_do_ioctl+0x10/0x10
[  453.197150][T22778]  ? __lock_acquire+0xab9/0xd20
[  453.197159][T22778]  sock_ioctl+0x576/0x790
[  453.197170][T22778]  ? __pfx_sock_ioctl+0x10/0x10
[  453.197179][T22778]  ? __fget_files+0x2a/0x420
[  453.197189][T22778]  ? __fget_files+0x3a0/0x420
[  453.197198][T22778]  ? __fget_files+0x2a/0x420
[  453.197207][T22778]  ? bpf_lsm_file_ioctl+0x9/0x20
[  453.197214][T22778]  ? __pfx_sock_ioctl+0x10/0x10
[  453.197224][T22778]  __se_sys_ioctl+0xfc/0x170
[  453.197232][T22778]  do_syscall_64+0xfa/0x3b0
[  453.197239][T22778]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.197245][T22778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.197252][T22778]  ? exc_page_fault+0x9f/0xf0
[  453.197262][T22778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.197269][T22778] RIP: 0033:0x7f53d778e929
[  453.197277][T22778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.197283][T22778] RSP: 002b:00007f53d55f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  453.197291][T22778] RAX: ffffffffffffffda RBX: 00007f53d79b5fa0 RCX: 00007f53d778e929
[  453.197296][T22778] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000e
[  453.197301][T22778] RBP: 00007f53d7810b39 R08: 0000000000000000 R09: 0000000000000000
[  453.197305][T22778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.197309][T22778] R13: 0000000000000000 R14: 00007f53d79b5fa0 R15: 00007ffd0b612128
[  453.197317][T22778]  </TASK>

VM DIAGNOSIS:
03:37:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88801c685640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=fffffffffffffe38 RSP=ffffc900000f7a18
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b3cb1a0
R12=dffffc0000000000 R13=ffffffff8b3cb272 R14=ffff888118eb8d80 R15=00000000000002ad
RIP=ffffffff8b6eef9f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000106372000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3be0c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007637030
R8 =ffff888021680237 R9 =1ffff110042d0046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78cc R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f53d55f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000403d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
