last executing test programs:

1.758554706s ago: executing program 1 (id=10175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x60, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x8}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6, 0x2d, 0x8000}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xb, 0x100000, 0x1}}, 0x40)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xa83, @bcast, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="0c0e0000010501030000000000000000000000095402010001000000ff070000099508000600200073797a310000000000000000000000000000000000000000000000000000000006c5b43510a972cd7d762b76d7f245fac10c219149debdf21777f1b83a2187a7bfa8dfc37ddd32fe441718080baf570d103be8eaba517d0d1036781fd6278cdd0800a008020000006f0200000200070002000000000000c06700c3290000000001000100ba2704000100000007000000020000100300000000000000ff00090002000000800000000001080000000000010000000900000e03000000040000000c0007000300000004000000ff0f00000000000004000000020003000200000005000000050053ff0100000001000080ff07060003000000dc0c0000800005000300000007000000010001000200000000100000faff5f0000000000080000001800000000000000ffffff7f0100060000000000010000000700230000000000000000001000060000000000ff070000810007000200000001040000060000fe01000000010f0000080007000300000008000000ffff010000000000000000800900000003000000060000000600080001000000ff0700008d15090002000000fcffffffff030100020000000200000001ff01f803000000250d000009000e0001000000b00000000100010403000000000000008100e37301000000a9010000bb00ff7f020000003a0000000200000003000000af000000a76d07000300000001000000000009000000000062cf00000600ff7f0000000008000000005b05000200000000100000000107000000000008000000faff80ff030000000100000054020100020000000e8e000009d210007fff0c0073797a3000000000000000000000000000000000000000000000000000000000a2fb2c7749e728b07c5c92668782645edcd3c694629417eec8a5b1165ed38cde5cf42fdf4e7b23357784824028da7b9199f472fa094f8737643df233926bbdfdeaee090000000000010000005ffd010002000000020000008100030001000000020000000000070000000000ff07000002000600030000000000000001000000020000000002000051d6080002000000400000000300ff7f010000004000000000040200050000000500000008007f00030000000500000001000600020000000400000002000300030000000300000006000700010000000600000005000700030000000700000007000400000000005d000000ffff00010300000000feffff0700150601000000050000000100fcff000000005eab000000000058030000000600000004000500020000000100000000024b2c01000000070000007f00060001000000f7ffffff030004000300000006000000760c060000000000fc02000000007e070100000000020000001001000000000004000000000474dc03000000ae00000008000000030000000300000007000300020000000180000006000400040000000a0000000104020002000000040000008100010001000000040000000700f0ff01000000040000000700080003000000000000005d09000803000000090000000600d10e0000000006000000070001f00200000007000000070003000000000009000000000806000000000001000000b40009000300000001000000540201000200000007000000000008000700070073797a310000000000000000000000000000000000000000000000000000000057db6d8b5d24bd8b377cc93f7ef4c0692d3b34a545d3a63b4facfa1df07716333a49cf9c5a4e538761384dcf59141b40dc260902b6882feac3aea9cf3954f8710100010400000000fa0000000600020000000000ecfd0c64030004000100000009000000050001800200000002000000ffffff000200000008000000f6ff9300020000000000000806003c00030000000700000048e3ff0103000000010001000500ffff0300000005000000ac0008000000000093fa00000d00060003000000080000000001090000000000050000000000050000000000030000000a00030003000000060000007f00050003000000090000004c00000000000000ffffffff0700090003000000040000000180ffff0000000005000000090008000200000005000000000006000300000001000100080008000100000001000000090008000200000076000000fcff000000000000feffffff0935020002000000000100000900090001000000010000000000010002000000060000000101080003000000a30c000002000700030000000b000000000007000200000003000000f7ff010003000000050000000500710001000000f9ffffff0800030003000000ff0100000600fcff02000000d35f0000030000800000000009000000ffff050003000000050000000000ff0f02000000000000800900010000000000ffffff7f0900f400000000005d0400000100040003000000fbffffff02000200000000001e0000005402010003000000050000004003000005000e0073797a30000000000000000000000000000000000000000000000000000000006d729ca601e463f1fb776d52fac83d7525b69734d28fe50acf99d0922c321dbaf2f58a8130e715cc7f2be13d075632bc49884c567c2082cf84fadb45e96a8b49ff03010001000000090000000800e5b200000000a9710000050004000200000005000000010030000100000005000000001005000000000059ef0000800c0800030000000180ffff070002000000000002000000050001000100000000080000e500400000000000c6da000000004709020000000400000082000e2e03000000070000000300050003000000050000000900000800000000e2730000ffff09000200000002000000010009000200000005000000f7ff419a02000000ff0000000600010003000000a0000000070005000100000000000040f1ff05000200000000010000c0140500040000007d0000008469018001000000010000000f00000002000000b500000001800600010000000500000000000100020000000800000045c1010403000000030000000c00ff0100000000050000000500280901000000000000000200ff0000000000100000000700810000000000010000000800040d000000000900000000000400000000009fffffff01000800010000000200000010000100000000000900000002004a0a0300000009000000000a010001000000b5080000da000600010000000300000008000600030000000900000000100d0002000000030000000600030001000000060000000600060003000000050000005402010001000000ffffff7f000790000300240073797a3100000000000000000000000000000000000000000000000000000000d67695d4ff52f6e576275d8cd3c138a992f3a6943d7d6507f97fea2a286d791dc331f7ef3b66e8f01afc94b32b6cb7a12eb3611a26c13143828857085781ccc20100610900000000020000000600030000000000060000000001070001000000ff01000004001b000100000005000000080003000000000001f0ffffff0105000200000003000000400000f800000000ff030000f541ac3f000000000500000008004000010000008000000009009bf100000000040000000800020001000000030000000100010103000000f9ffffffdf000b0303000000020000000900030001000000060000000500070002000000060000000400070000000000040000000500080001000000fdffffff0100ff0f02000000070000000900040001000000c8000000ffff06000200000005000000070005000200000002000000060008000300000040000000060000000000000000000000ffff0700010000000600000000100200020000000800000008001000030000000d0000000002070000000000ef000000020000000000000001000100faff0a0002000000060000000500070000000000010000000100050002000000977800000180080003000000040000000b000600010000000000006000100600000000000100000008000100010000000500000047000000010000000800000001000d00030000000200000080000500020000000200000008000300010000000700000010005c6302000000070000005402010002000000000000000300020006000a0073797a30000000000000000000000000000000000000000000000000000000005ad90ec23e21b6d2cb265effe659837e4fb74a3d388da90d83c9857c557c6e3d06d47f2bb422905d5765cdf33da0c12400ec584a0768abda13106bb9a5a6052d0800010000000000090000000c0038010100000001000000070000040300000000b8e50007000200030000008f000000040087000500000005000000d7ff0800000000000c0000000900abff02000000000000000500fdff03000000030000000400000003000000010000000100080002000000b120000008000400000000000080000001000100020000000300000006000200000000001c00000065a807000100000020000000e100510003000000000000000f0006000000000005000000080001040100000014ec00000500050000000000d20000000700480f000000000e0000000600000800000000020000000500000201000000050000000600080001000000e4f900000900edad01000000010000007700aa95030000000500000004005b010000000000000000ffffc7b802000000000000000700080001000000400000001f0d07000100000001000100030080000200000002000000e7fb08000000000006000000ee00010002000000ff0f00004d68afff010000000b0000000000060000000000090000000c0000000200000000010000ed00e5ffffffffff00010000ff03d800000000000300000005000d0001000000000800000300f8ff0300000006000000040005000100000004000000060002000300000006000000"], 0xe0c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8804)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r6}, 0x8)
write$cgroup_subtree(r11, &(0x7f0000000440)=ANY=[@ANYBLOB='#hugetlb +net_prio +pids +pids '], 0x1f)
sendmsg$alg(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
epoll_create1(0x80000)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
epoll_create1(0x80000)
recvmsg$unix(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0)
recvmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1000026d}, 0x40000000)

1.332603326s ago: executing program 1 (id=10184):
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x7ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, 0x20, 0x8, 0x7fff, 0xffffff58}}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r2, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061107900000000001f0100d500000000950000002200c4ac3d9f830000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)

1.279158203s ago: executing program 1 (id=10185):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="54010000100001000008000008000800fe8000000000000000000000000000bb00000000000000000000000000000001000000000000000000000000000000001e3e1ab1f19a8bbb84e10345dbda13118048cbdb5594866e12236e63d8f8c795ee1cee42c85205332f906d4098d4cb888bed8f6fc2669fc285e3636338294c34670f9e679c95685ab973fde85879fcee09d5c845e9692508588dd946a783effcd91221bf068df513f266dc02d527641d301ee53f57f87424a444597482dd14c5f0d11c4eefd3ff7eb5983d96a8bbec8afcd246ad8dccdbb0ed2d55a599e1a33bccf4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000003000000000000000a0000fdad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000000000000000000002000000"], 0x154}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xffffffffffffff7e, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="32a1f6f974875fdda27c53eee68730bc14a8f8139d4758e1fac65e2ab0b19f20", @ANYRES16=r2, @ANYBLOB="00032bbd7000fbdbdf25070000000c00160003000000000000000600010008000000"], 0x28}}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r3, @ANYBLOB="8123010200000000140003006e6574646576736d6d30000000000000200016803511490743fc000000000000000002004d030000000800008100000008000d0006000001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8e400000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xd}, 0x94)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0xc440)
close(0x4)
close(0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0x8, 0x3, 0x80, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.172792291s ago: executing program 1 (id=10187):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x1}, 0xe)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000800e656514ab900000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.168876181s ago: executing program 2 (id=10189):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x680, 0x2c8, 0x4c0, 0x2c8, 0x4c0, 0x0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private0, [], [0xffffff00, 0x0, 0xffffff00, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x3, 0x100, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff], [0x0, 0xb0050000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {0xff}, 0x2b, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x80, 0x48, 0x1}}, @common=@srh={{0x30}, {0x62, 0xb, 0x2, 0x0, 0x3, 0x424, 0x3022}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@multicast2, 0xb, 0x19, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0)

1.06966516s ago: executing program 1 (id=10191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r5=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x82, &(0x7f0000000180)={r5, 0x8000}, 0x8)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x4, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
epoll_create1(0x0)

1.067412219s ago: executing program 2 (id=10192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newchain={0x74c, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xe, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x720, 0x2, [@TCA_U32_SEL={0x714, 0x5, {0x6, 0x1, 0x9, 0x4, 0x3, 0x4, 0x60, 0x7, [{0x4, 0x8001, 0x8000, 0x7}, {0x7, 0x4, 0x7, 0x1}, {0x4c0, 0xfffffff7, 0x445}, {0xa3f, 0x1, 0x15d4290d, 0xa}, {0x329a, 0xa31, 0x7}, {0x8, 0xfffffeff, 0x3ebf, 0x6}, {0x1, 0xe52, 0x0, 0x8000}, {0xe, 0x0, 0xd, 0x8}, {0xfffff691, 0x9, 0xfffffffa, 0xf}, {0x0, 0x8, 0x7ff, 0x40}, {0x8, 0x6, 0x8, 0x7}, {0x8, 0xffffff7f, 0xd, 0xd7d7}, {0x0, 0x5, 0x102e, 0x5}, {0x1, 0x911, 0x8}, {0xad, 0x9, 0x7, 0xb}, {0x86e, 0x37, 0x4, 0xe65db0}, {0x2, 0x2bb, 0xdd8, 0x2}, {0x1, 0x0, 0x81b, 0x7}, {0xcdd, 0xb151, 0xa89, 0x9}, {0x4, 0x1, 0x1ff, 0x10000}, {0xe6, 0x0, 0x8, 0x80}, {0x2d9000, 0x8, 0x0, 0x6}, {0x9, 0x0, 0xffffffc0, 0xfffffff9}, {0x0, 0x87, 0x6, 0x4}, {0x3ff800, 0x7fffffff, 0xffffffff, 0x8}, {0x800, 0x4, 0x8, 0x1b}, {0x6c5, 0x0, 0x800, 0x23bc}, {0x3c1b, 0x1, 0x1, 0x1}, {0x30000, 0x3, 0x77, 0x400}, {0x40, 0x2, 0xffffffff, 0x2}, {0x80, 0x381, 0x4, 0x6}, {0x0, 0x4, 0xfffffffa, 0xfffffbff}, {0x739e, 0x75fb, 0x80, 0x6}, {0x80000000, 0x8, 0x1587, 0x6}, {0x7c0, 0x1, 0x8, 0x1}, {0x1, 0x0, 0xb992, 0x86c}, {0xc519, 0x5, 0xb, 0x7a93}, {0x0, 0x9, 0x2, 0xb}, {0xb17, 0xfffffffb, 0x5, 0x4}, {0x6, 0x8, 0x80, 0x7}, {0xf02, 0x8, 0x0, 0x7}, {0x2, 0x400, 0x9, 0x8001}, {0x4, 0x8, 0xfffffff7, 0x5}, {0x2, 0x3ff, 0x0, 0xfffffffb}, {0x1000, 0x7fffffff, 0x5, 0x651e}, {0x3, 0x18000000, 0x2, 0x5}, {0x9, 0xb2eb, 0x8, 0x3}, {0x7f, 0x5, 0x9, 0x3}, {0xb, 0x4, 0x3}, {0x4, 0x67b6, 0x475e, 0x2}, {0x1000, 0xf, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x3}, {0x80, 0xec29, 0x1, 0x8}, {0x1, 0x8, 0x800, 0x7}, {0x0, 0x1, 0x10001, 0x8}, {0x0, 0x5, 0xba, 0x3}, {0x8b, 0x30000000, 0x2, 0x800}, {0x7, 0x3, 0x405, 0x7}, {0x0, 0x6, 0x4, 0x10000000}, {0x401, 0x2, 0x8, 0xffffffff}, {0x38, 0x4, 0xa, 0xfffffff9}, {0x401, 0x2, 0x100, 0x6}, {0x9, 0x0, 0x10, 0x8}, {0x7c2, 0x28, 0x6, 0x8}, {0x101, 0x1, 0xff, 0xb44}, {0xa4, 0xa23b, 0xa7, 0x1}, {0x3, 0x3, 0x4, 0x1ff}, {0x80000000, 0x6cf, 0x8, 0x120}, {0x10001, 0x7, 0xfff, 0x40000000}, {0x0, 0x10, 0x4, 0xaf1a}, {0x5, 0x8000, 0x0, 0xffffffd8}, {0x6, 0x8, 0x10, 0xdc8}, {0x6, 0x5, 0x9, 0x400}, {0xe46, 0x40000, 0x6}, {0x1e8, 0xf, 0x9, 0x1000}, {0x4, 0x6, 0x9, 0xfffffff8}, {0xe, 0x1, 0xf, 0xffffffa7}, {0x8, 0xb4, 0x9, 0x3}, {0x2, 0x80000001, 0x7, 0x2}, {0x5, 0x8001, 0xffffffff, 0x7}, {0x30, 0xfffffff7, 0x10000, 0x4}, {0x7fffffff, 0x49, 0x9, 0x7f}, {0x6, 0x9, 0x4, 0x7fff}, {0x4, 0xfffffff7, 0x280000, 0x40009}, {0x5, 0x9, 0x3, 0x3}, {0x2, 0x890, 0x5, 0x7f}, {0xf, 0x6, 0x1, 0xd5c}, {0x1b, 0x8000, 0x1, 0x4}, {0x0, 0x7, 0x6, 0x59b}, {0x6, 0x3, 0x80000000, 0x8}, {0x21, 0x8, 0x7f, 0x6}, {0x0, 0x7c23, 0x7, 0xb4e}, {0xfffffffc, 0x3a57, 0xfffffff6, 0x1}, {0x80, 0x800, 0x81, 0x5}, {0x6, 0x8080000, 0x9, 0x100}, {0x3, 0x7, 0x10, 0x1}, {0x5, 0x1, 0x2000, 0x80000001}, {0xf, 0x3, 0x9, 0x81}, {0x56c, 0x80000001, 0xec, 0xc65}, {0x9, 0x81, 0x4, 0x1400}, {0x9, 0x0, 0x6, 0x9}, {0x1, 0xff, 0x1, 0x8000}, {0x10, 0x9, 0x3, 0x4568d9ad}, {0x101, 0x3, 0xfffffffc, 0x6}, {0x4, 0x5, 0xfffffffe, 0x4}, {0x196, 0x2, 0xbf7f, 0xe}, {0x8, 0xd0d, 0x7, 0xa6}, {0x0, 0x9, 0x7, 0x8}, {0x7fff, 0x9, 0x1e9, 0x4}, {0xe6fd, 0xdc0a, 0x0, 0x9}, {0x5, 0x7, 0x4, 0x75b}, {0x5, 0x8, 0x2b, 0x7}]}}, @TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x74c}}, 0x44004)

1.058776035s ago: executing program 2 (id=10193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xc, 0x8, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='syzkaller\x00', 0x6cb, 0x70, &(0x7f0000000400)=""/112, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xf, 0x2, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r0, r0, r0], &(0x7f0000000780)=[{0x3, 0x3, 0x7, 0x6}], 0x10, 0x1}, 0x94) (async, rerun: 64)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0xf, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x0, 0xa, 0xa, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000940)='syzkaller\x00', 0x4198, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x2, 0x2, 0x2, 0x7}, {0x3, 0x4, 0xa, 0xa}], 0x10, 0x6}, 0x94) (rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback=r0, r1, 0xa, 0x8, 0x0, @void, @value=r2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r4 = socket$pptp(0x18, 0x1, 0x2) (async)
pipe(&(0x7f0000000c80)={<r5=>0xffffffffffffffff})
bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r5, 0x4) (async, rerun: 32)
bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) (async, rerun: 32)
connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @private}}, 0x1e) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000c40)={&(0x7f0000000ac0), 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0x28, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xf4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x7d, 0x7, 0x1, 0x0, "73cf204cfff1b6249f810b71fa3699583acb0ad3defbc7d3ff69a2d7c5b9092a54ef624bd2b9892e61b4d4b9f5a19554d9e3569d02bef5a77591253d08ca12b6c25bf7fbd8d1fc01161e15dcba527af913e9192cbaa68aa4e6e229f4b6d72678176e0a7321b863b56737a0124090aa6be11ef735aeadb07b71"}]}], {0x14}}, 0x168}}, 0x0) (async, rerun: 64)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r8, r9}, 0xc) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40), 0x4) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xb, 0x7, 0x3, 0x49, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
poll(&(0x7f0000000d00)=[{r4, 0x6001}], 0x1, 0x4) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r10, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async, rerun: 32)
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x2, 0x0, 0x3}) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

940.286869ms ago: executing program 2 (id=10194):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r1 = socket(0x2d, 0x2, 0x0)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="91f8a9849519def28691bbc4173c3d6f357de68907e50e997fc26e4c91ea4feb931647fc5393de1f0000000000002c847ecfbcfa0a026a6f96a4ffd844b1252fa8332e469c6b1aafc08e0e632da389ba8899e94ce0216d23bec00ff251e11ba4e19e7fe33f6d7635fbf6f16f1f0a381d1e3219c1cfa013b391b6623f164f55a0a33902f0c938d626905f8cd1fba51334c16b150281addd9ae74a51c0572bfcc1af96ea1177e68f6f60136d777fb081848b4eddb2ede3cd121b0a5630932fdbce2a202e9ad4", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000015c0)="177188b7282c32d735", 0x9, 0x6d, 0x0, 0x0)
sendto(r0, &(0x7f0000001e00)="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", 0x2f9, 0x84c, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
select(0x40, &(0x7f00000001c0)={0x5, 0x3, 0x800004, 0x2, 0x1, 0xee, 0x4, 0xfffffffffffffffc}, &(0x7f0000000240)={0x12c9, 0x0, 0x100000000, 0x91b5, 0x6, 0xcc, 0x1000, 0x9094}, &(0x7f0000000280)={0x40, 0x9, 0x8, 0x8, 0x10, 0x23d, 0x7ff, 0x7fff}, &(0x7f00000002c0))

859.021707ms ago: executing program 0 (id=10197):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
sendmmsg(r4, &(0x7f0000003080)=[{{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'veth0_virt_wifi\x00'}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="dd61f7a4c934b15010030b4ef436349542af22a382807b2b9473da9626cbf5822ce978eb044bf727e49bb0728326e4a9056c52acf15bde26b7492132e7a3d62b698799e2c6cf851e42d1aa87913bf4f9ecdc41820f3304b6b1188f2b39a16171d9132e3d29de93cd4345c542dddf8559ec6adcdafce9046677ef3384536e962cffa0fcd044518a7a598a3a3d14e4bda0100f4c4c1da5daaa849817532573af61eff6a7be5f9815717f714eff4325d830273e2ebcbc7df104282b4359402a4af1091b9b32d4fb45344e81cba87760b8409286e86ec21fe3f5"}]}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="9a0bd97f1215ea1cf8a70dfbb060f4f91fca36e5867bda7882d8f5032de354691aae99a094c6a10f2a3aebfdba9d1babdae6b5ffc286889a282d7e8bac0ef99054729784a14b80c2e017984718db5772f9236a102d88a2407746426d5b8ea478d9736166ce539e552b1bd6623b5cd84ad40632e4d98d24bb683d6d512c93ca7f41846783af308796dde68859b6db17dd6be762485338b78d0d3404410d83cd8f0454b8f063c5f97ce1f18f9fa0a2a2032a50d0c87128b34d8897b809cdd021cd5bcd2caeb549135824643c889bbf9cf49e0fcd14ff121b6787fef71edc03b0"}, {&(0x7f0000000a00)="2c01808133bf6327673b15020bb954df7c9bb7bfdff833fb53ec00387d23e4f6820e5c94978ef84cd431f8557235d376c9ddf580bf480892cc56b1596b2f390d53ad1b3f7124bac8783b11ad348ccaf61d70b2a5cabce3bdfcc5f4fd6a2f418fe45dcbdeafd7ceeca186a3914bf15bbc89ca778fef3c1a42634d406e0898dc30ea6405f0ec7d856ada3c6b37a9f47f5da950c23bc61fc5edce91f8b9bfb12836fed6ae0e3e74cc6b49bc4662c860c1f1a60b0630abb32b51c01e8082d09a0a555f4e4d9e2fdf72a8e477c53368769570a665e2bfa320"}], 0x0, &(0x7f0000001000)=[{0x0, 0x10d, 0xe, "d18f59423f9b08c41bba370faebde84dca093cf368c13d210ecdb13e0b3edda5e8aaccc339fbbc880ae76fb207fe69869a36535aeb8f849938b8f4db4de0084a5a52be359101e4f61e34f442ce2b026e4112906427576c05d425ca1d873c8e9530c87ae0cc9ad6319b57783b0f699930754de60bd27c3bf82596e6914f44adebfe0a6488a53c54b6abc1c777521febc1a4a880ef32c2b971e5fd343b9cdf61ace8e3273d14ae34672762131570df"}, {0x0, 0x114, 0x65000000, "16644af15ab1eb892f13659997dd35c15c37a966a24af7f5ca40f31cd25976475686f38ccac398d8fad8f4cabe74658dd6efdfa626b416400569ac41e9f6"}, {0x0, 0x207, 0x1b55799e, "1b8df530f99243f66bb31caf0ed0bdc84c8d5e9f6016cdf8e5688bc5f2fa8e3187c38889bd4d769355d2f20ac7036123b251ec60a2f8183f5a93a54e19ffe7f460a3e4f2de1d9a58f61c2fbf98bdcf4bd136728379bb909d58939db42220d488f44d051381480f24a61efa5e5189deba789aa143d6d4e6b779b9f17db2e78835ef455bc611311c9faab57ab07eef6d1963a134b5c031b051032337ceb67fb5544c6bb9c088b0e4e0212eae5776df869a42a6297c3b019f0b0e775344d09b8615314ed85c23edd746c30dce2e10d8470270d1faa8d96a7dc26c"}, {0x0, 0x29e, 0x2, "10b682d27645d37f28c78158b8f2d09cc648f7452cc1ef8af8a97c71b0172c147325e2557e463072d5dd5b0127d304253fe1fe040542d5711918939e87793e06fff575733d4d8d2464e52c344a630b263e6c89fb0e60e1650a64d099b6db3d09022e5522fd1cfa4041a0e9f2f993795855b8a5248b782416378fe6f7a0b1a46dc0ad42e1606151597ff8dc30f0536ed4d9ac8fe41201d655f88b4a55a509538d0a140f794e4ec0b2cf722f5a7c19c59eb5bb1970c42acbe0c6510a42a032bbae7ae2524b10cd5ecfdf2c9237fcb2343d45036ea1ce5bed61b0b7f842"}]}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="8214f8034f832ea6350c42bf0dae2ad3e41019b94ae631c2df7e071041197301439dd25efffa70fa8ba893cb996d"}, {&(0x7f0000000b40)="b893d37d7ce5cb11794d8332c4b898a16e8d8247e216c26d144aaaef21de319a47e354360f18fb9272422d3db06729d8d679bdc3ea40552322eda5d8cd53d3950c377e00883b73e1d7a31ec9922ddd8d44baeda56090baf56643fab45896f75e4eb4411266f35e50f8c3b75cc5e5b358053b58710a7ec355d9f22ee32c314937ff2ed7f4a72c7103a43352762026c50c31dc2a41"}, {&(0x7f0000000c00)="da64558cfeb431ee06ed96e8a6b6cefe31c8174c6496d5273f932c55c8247463052c6374bbb0fb7ff5d3941ff105eed98ae4c1db6dacd8e7474576b512661ba134aa2a00c8443c56f5944515a2f938a857b3fbafd871505f88a542c90a4e09689095febd658d852dc2cc4eb63f20291e5202881a65db149f24cfba33df8cf33810e114d499641291f5c55b65c90aefe5f07eec91ad5ff2d9d974b26016a3"}, {&(0x7f0000001340)="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"}, {&(0x7f0000000cc0)="f2323dfa40d833d6eaf32dfc47486654a8049434d34f9d20a58e7e7023ac5e50a5f48a42"}]}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000001440)="cf87e2f56236191efc3873277d93b03d4e8b8e60772176506d90ee5919c03030ccf5cce4d6c1a2a4087944c57eba301a0afb0ae045344f822afe87b6b7b3f4f24e4438cb6e30496cd0d0a6911af57c07371e20068b1f7a8cf4eb2cf840d5c5451df71b45a7b0b5e2b8558a6da78087237d5aeac409344ed4c13512c4953d8f2e298da5e2016f3ccdad50d60c6498a983887ef3a9cdca4c66b232bfc15f39662b88bb96709d301a20315723b46bfefca398321e35a4400fa58369675e65aa0cf28cb175f7d7a0172a2268309326c8b7a73d0eb0317896a5873dae09eb8829"}], 0x0, &(0x7f0000001540)=[{0x0, 0x114, 0x7, "384b50b1f6e9a6c1f9c2587c5fedf345bd904dcbb0522d0ff01e7798b5e9496cbd5b7a1b05444bedb7614a041d42ef1606597b7351f50e07fecd83c8338d7391476f69f6e059b55c80a4554b819e2b59566ec0074005dd450313835e5cc205fff07794f59709fabd275faccbb4d4fb257fd5282d32319dea9b1c6aa5451c6baaf9063b6aa51f7c7dbf55fc6e2404c898ed077dfd26e6878008a457b980098a4a2a821afd894f777b4562dc86ce7f2a6713d313ace15f0adffdb31446"}]}}, {{&(0x7f0000001640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0x3}}, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000016c0)='R'}, {&(0x7f0000001700)="69c1975f7f0f04b248011629524b2315100655bbcb0bf1cadd108aa3dea5af31a397fb070a4c3b6709ea645d27b25f2dd83130f43287a0ccdbdd09210007ea679cfdfad9a814f0014d9e66978cb9b5ba4bf4dfaa0a0b9afefe0aa06584320847d6005ab226bb70d890d6bd9ee5edea30d04275f1101c9b7d03cd10ad358f1fa8fca49cec95a1d486d36cf62cb027f7f59a87295e651149b10d359f4ea8820b7b89768366754d389fc5ea112b47c385f6031a7a28551fd393f8e7c3327668b27f905a0e6c75fcd88f634e892ed2bb474cebf3f77c4a87618533da"}, {&(0x7f0000001f80)="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"}, {&(0x7f0000001800)="29f332b2f820f7a6b18deaf16bff290e69d599026e508b02e57fe89fccabf1391e286172adf4346f8d5e23faffb21463ca3c43dbda51c51c39b92c485ccbe1506a66decdad7e84e4477d199d52d3a83a0d1fb6b6232d6f703ad848ff02fca44155c2bcc57da5a47e8b84871afc8d0e2c6006a65308830838440440ea7887c38a90886c13257bfdc6cadeacf6c6096f7adb326d96614279468d64c10b321b6bbc4f1946f357e5dbe78f052da2ea379f5df354393cf5a3bfaa7409531c2226b9134b392487"}, {&(0x7f0000001900)="e755c61fd8ac169f5fdc86e33476b3e60e3f0ce67ca68c91a7de37d9ebbeff3cff6be16829727036d3aa9a96f1e335c8e407cb65de6e3aaa12b07eaf764abdcb05583eb03c169eb335a73ac5b0076cdde2167c0ad2509ce9479f532aafbacd4d3fb002aa3c93c6e5ccaa34fc5da95e77f37083e36ae94961aa26bcf7bed53fb4bbaa556c9c4e5976fbc8f98467de6f4b7b542ae267608a46ba470c52f7bc"}, {&(0x7f00000019c0)="1e6cf001e7773fc3012785717bdb4b62d0f917a28662630dfde3f989793070d077d1a4132f74a4142af8b8b27ba164d4cf4aaaf5f7985d4a42090c481ccfde5907d33bc36a42aa46ece5d3ff14b8c9dda5deb27ea00e4857cf12d16e9c138ebff4ec7fad9b5fba2c53c0125ada945c4edd83f904524ae97787170a204c322b4b2e859be2b084e7704a077302ee06a44375138db1883b325cdc21e42eb89657960fc26848dcc3146e59f5859d986d35697b000d857ec6d12c0af2b297fc9e530702ed67111f0f7589e6b4c0d5b0d325a9448097767cafc6583ba4dab56f8432c0c3"}, {&(0x7f0000001ac0)="22c2a857bb5cfee992b7e3f62ee0727e61b31ea0effaac7d88d615fc083e1c4e668998af90e00ec04747d6f161060cbdadd8b15dec639a3265b04bd9c0f3f416559bc52e4940bfd4db3e4da989a31900de10c40f7a08c666300085ab51e8e8fcc8a0d26a6af8bf30768b3f18324fd23dbf0f830009a9aa50a4b83654622df9af0baf3ba95e7666daf1a54bd3c435d7f7345fe94bb4bfd338d5d75a272c8a79c00dc2c4c4aaf4ad6c63c578b9b0f091cefe1c41368991fbcbe7caed3448a2b678e8289825b0155edad17740cca063de8a6e96d760a77e7cfcc337558a2f9bd9b99b1e26adb3ee27294ae2ac9313e969"}, {&(0x7f0000001bc0)="b654c1c09f7fd4ecd3918badaa09e6b28271f3d195beeb3769398c288af629cdd559d66ad349a65dbd3c34df1c891d14e8c6dab5abb4e965b92c7913116ceb4fd03803bb90c88e958786f40b439f8492a55b92e8c04390dda4bb5da45edd5fb646ebea41ff951490faf8fff640675a550c8d09ff70a5d57b7cd9d5334f48870f5b1a76bcef7c04836d5d852351bab5ffd385288e1a262cf01b064e79d080116fbc388c58ffdf0b6175c3a46848066cd9"}, {&(0x7f0000001c80)="6d714eda39ab2a72d77f70586a0c07cdb63dca3b411f7f8cebb3fc10a8632d1c5d901083b0a89313fa215686318068378284faed603635b81f1179e929c22a20bad856"}, {&(0x7f0000001d00)="330d289f2c048596aec4bd0e735b762edb19afcb1a938520005b34c28e85793048a4185e3345180e5e93d7004d5542ce79fbf47167ba3e3b2e4f5b086bb7dcc6393c42649b50ef41f3b88d4ca7523d6dbb19e125307b60d9b7ecc390409cb33ecb078c82bf4f4beae0006d9e2fc8c29d6767e49380a0080e0248e92a914df78628d87275a2"}], 0x0, &(0x7f0000002f80)=[{0x0, 0x118, 0xffffffb9, "d21fbfebfa857d37c3da74cf6492e0fe92665dbfe8c2c07fd678c9dbfa428f251bd69d06794c2cdb1d580bfe67be68271730e9ed1d0ad3a24f60e5fd135ad348112bd577ff8de6b4567a5951cf5f29730b94a96cd7c7ae35c9b9050ac10da92c06c2dadfde9e5d759f3833fa6a8f1645d8d37477e9f3f2ae2eeb47b2bd87e8adeec84940a272297139d32fdfcbaa7dc937d4bcaa9157ffaa5873ae79eb5b90475bdd3ebf74f1b1d2c5950e6eddd97ee0fd919ee3accb"}]}}], 0x40000000000020e, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x4000002, 0x30000000, 0xc, 0x17, 0x1f, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0xfc87}}, 0x4000852)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/38, 0x26, 0x0, &(0x7f0000000240)=""/127, 0x7f}, &(0x7f00000003c0)=0x40)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYBLOB="3a40ed887736b8f54942", @ANYRES32=r9, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe80000000000000000000020000000032000000020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r11, &(0x7f0000000440), 0x10)
listen(r11, 0x709)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x1, 0xd, 0x0, 0x3, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94)

769.143365ms ago: executing program 0 (id=10198):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x4000) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000060000005c5000000300000018350000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200002584c8000000008500000086000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xff5, &(0x7f0000002e00)=""/4085, 0x40f00, 0x0, '\x00', r1}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e009245fd536102000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e4000001000000"], 0x50}}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0)=""/225, 0x0, 0xe1, 0x0, 0x1}, 0x28) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f00000006c0)=""/110, 0x100d000, 0x1000, 0x1, 0x2}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001f0001005a1675610002008e5dc78d3d979b0901", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090002000000"], 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
setsockopt$sock_attach_bpf(r7, 0x1, 0x24, &(0x7f0000000000), 0x4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="62c0122b74a642a6d86c582f7dccd4efaece89f373ed9745c4a895f6a2e5f552c0d0c18e60337f1ad5a387d1add1117a826fd7517c86a07a0e1af0962e13a597d38d4fd95c47f213f15577d0a1a383e2e9ec06f687afef20b26809d59c3c7ac23536db74ac9527f6ea19d8908501", @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf250c0000001400038004000100040004000800020000000000180001801400020076657468305f766972745f7769666900"], 0x40}, 0x1, 0x0, 0x0, 0x4c041}, 0x80)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f0000000680)=r3, 0x1a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071103900000000009500000000000000d569506373bbb6090a8010d0d3a18f18c460c5c0bd2b7537c41048eb8256aa843007dfb72975ada7c5b4385e8d4b3f362b9d075d64ac1957c58174873bef83df2b62fd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffffffffffff, "906c5bd29cf9f150f24ef2b6501bae478998ce92d5795a15bb1561b1ffb7b766", 0x7, 0xfffffffc, 0x100, 0xffffffff}, 0x3c) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x800, 0x70bd27, 0x4000001, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x6, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x8, 0xb, 0x8, 0xd, 0x6, 0x9, 0x4, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x7, 0x6, 0x3, 0x16, 0xfffffc01, 0xfffffffe, 0xfff, 0x10, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x7, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000081, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x1000003, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x3ff, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x4, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x6, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xffffff01, 0x1, 0x1, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0x9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x9, 0x1, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x7, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x10000, 0x80000001, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e8, 0x5, 0x9, 0xc, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x5, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x2, 0xd}, {0x4, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x8000)

689.728525ms ago: executing program 0 (id=10199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7e4cd07ec3ee777de774fc7987cca41989080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7e4cd07ec3ee777de774fc7987cca41989080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)

630.099105ms ago: executing program 0 (id=10200):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)=@dellink={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20001, 0x9684}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r0, 0x0, 0xffffffffffffff2b, 0x0, &(0x7f0000000180)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080), ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), <r3=>0x0, 0x68, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0xffffffffffffffea, 0x8000083, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000580)={<r4=>0xffffffffffffffff, &(0x7f0000000480)='\\\x00', 0x10c02, &(0x7f00000004c0)={@_ha_fsid={[0x81, 0x12]}, {0xd, 0x5, 0x6, 0x6}}, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x1064}) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000ffffffff0000001c0000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', <r9=>r2, 0x8, 0x40, 0x32000, 0x6, {{0x6, 0x4, 0x3, 0x19, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x41}, {[@generic={0x82, 0x2}]}}}}})
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000002c0)={@local, @rand_addr, <r10=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000084}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0xffffffffffffff29, r3}, 0x94)

560.222016ms ago: executing program 0 (id=10201):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4f68, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc00]}}]}}]}, 0x8c}}, 0x0)

559.827537ms ago: executing program 0 (id=10202):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}], 0x1, 0x22, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x2000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYBLOB='p\x00\x00\x00', @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x70}, 0x1, 0x0, 0x0, 0x885}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000400)={0x6, 0x10, 0x2, 0x15, 0x8c, 0x8, 0x4})
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000200080002000700339d060001", @ANYBLOB="0015d3"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x240400c4)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000300)={r9, 0x1}, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

148.690153ms ago: executing program 1 (id=10203):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x64}, 0x1, 0xba01}, 0x0)
accept$alg(r0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$unix(0x1, 0x1, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082b00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43014037115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb64"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2b, 0xff, 0x622, 0x387, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x77ffffff, 0x7fff, 0xfff6, 0x8, 0x7, 0x8, [0xe, 0x5]}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="86cc31e1a16937a010841c0000000049739d15573cadfb937e00e6f2e952feaec45c8fd3c1f0fd82fae11f817df10f6340e2123c2c361787976e4e068baaa74c440c9fad0c6ce388c8612f53edc6b73bc4ab8da24d5e1efa87ca9f7ef396", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x48)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x7fff}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x0, '\x00', 0x0, 0x0}, 0x50)
getsockname(r8, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80)

57.641946ms ago: executing program 2 (id=10204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x38}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

0s ago: executing program 2 (id=10205):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

554296][T21340] syzkaller0: entered allmulticast mode
[  320.588494][T21340] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  320.622049][T21340] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  320.667860][T21347] gtp0: entered promiscuous mode
[  320.672134][T21347] gtp0: entered allmulticast mode
[  320.675816][T21347] team0: Device gtp0 is of different type
[  320.686311][T21349] netlink: 'syz.0.6186': attribute type 1 has an invalid length.
[  320.692507][T21340] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  320.745852][T21340] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  320.834970][T21363] netlink: 'syz.2.6192': attribute type 3 has an invalid length.
[  320.839777][ T5836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  320.855328][ T5836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  320.880692][ T5836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  320.884780][ T5836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  320.964034][T21377] netlink: 'syz.0.6195': attribute type 1 has an invalid length.
[  320.966768][T21377] netlink: 'syz.0.6195': attribute type 2 has an invalid length.
[  320.969960][T21377] netlink: 'syz.0.6195': attribute type 1 has an invalid length.
[  320.972612][T21377] netlink: 'syz.0.6195': attribute type 3 has an invalid length.
[  321.109538][T21388] netlink: 'syz.2.6200': attribute type 6 has an invalid length.
[  321.226805][T21402] netlink: 'syz.2.6206': attribute type 5 has an invalid length.
[  321.267228][T21409] netlink: 'syz.0.6208': attribute type 21 has an invalid length.
[  321.277605][T21409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.280139][T21409] IPv6: NLM_F_CREATE should be set when creating new route
[  321.283078][T21409] IPv6: NLM_F_CREATE should be set when creating new route
[  321.285436][T21409] IPv6: NLM_F_CREATE should be set when creating new route
[  321.288641][T21409] netlink: 'syz.0.6208': attribute type 21 has an invalid length.
[  321.291375][T21409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.292134][T21411] nbd: illegal input index 16777216
[  321.295755][T21411] nbd: couldn't find device at index 0
[  321.450019][T21426] xt_SECMARK: invalid mode: 3
[  321.602233][T21447] tipc: MTU too low for tipc bearer
[  321.705349][T21459] set match dimension is over the limit!
[  321.865130][T21477] tipc: Resetting bearer <eth:syzkaller0>
[  321.875856][T21477] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  321.880337][T21477] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  321.893356][T21477] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  321.963161][T21486] x_tables: duplicate underflow at hook 1
[  321.971209][T21486] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  321.973805][T21486] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  321.976539][T21486] tipc: Resetting bearer <eth:syzkaller0>
[  322.100082][T21492] dummy0: left allmulticast mode
[  322.161128][T21492] tipc: Resetting bearer <eth:syzkaller0>
[  322.190950][ T5836] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.193729][ T5836] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.196316][ T5836] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.209219][ T5836] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.280023][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  322.499497][T21528] x_tables: duplicate underflow at hook 2
[  322.619140][T21529] lo speed is unknown, defaulting to 1000
[  322.754889][T21560] __nla_validate_parse: 17 callbacks suppressed
[  322.754909][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6266'.
[  322.761456][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6266'.
[  322.765741][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6266'.
[  322.770671][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6266'.
[  323.356997][T21566] sctp: [Deprecated]: syz.0.6267 (pid 21566) Use of int in max_burst socket option.
[  323.356997][T21566] Use struct sctp_assoc_value instead
[  323.737493][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6272'.
[  323.741003][T21579] syzkaller1: entered promiscuous mode
[  323.742965][T21579] syzkaller1: entered allmulticast mode
[  323.881507][T21581] lo speed is unknown, defaulting to 1000
[  324.254577][T21604] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6280'.
[  324.258927][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6282'.
[  324.299043][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6280'.
[  324.465201][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6288'.
[  324.472561][T21619] bridge0: port 1(veth0_to_bridge) entered blocking state
[  324.477313][T21619] bridge0: port 1(veth0_to_bridge) entered disabled state
[  324.479912][T21619] veth0_to_bridge: entered allmulticast mode
[  324.482635][T21619] veth0_to_bridge: entered promiscuous mode
[  324.492347][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6288'.
[  324.862858][T21658] pimreg: tun_chr_ioctl cmd 1074025677
[  324.865281][T21658] pimreg: linktype set to 774
[  324.912845][T21660] tunl0: Caught tx_queue_len zero misconfig
[  325.802109][T21725] validate_nla: 4 callbacks suppressed
[  325.802120][T21725] netlink: 'syz.0.6323': attribute type 15 has an invalid length.
[  325.843238][T21729] netlink: 'syz.0.6325': attribute type 5 has an invalid length.
[  326.023384][T21739] delete_channel: no stack
[  326.275627][   T33] audit: type=1107 audit(1772933308.436:6): pid=21745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+#X_&Aы/R/ALQ/[ϓG$r,$T즈+.+za1T[*yM3<hm~و
[  326.275627][   T33] -Z`jw$ ~[?QoEQ}x7j!J29UF|nlwܱI5L~/%C|V@|wJ\({u)Dl@T5eRF`l>Lgʖ'
[  326.327495][T21750] netlink: 'syz.0.6333': attribute type 5 has an invalid length.
[  326.758412][T21768] lo speed is unknown, defaulting to 1000
[  326.875508][T21790] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.878252][T21788] netlink: 'syz.1.6346': attribute type 11 has an invalid length.
[  326.881708][T21790] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.195711][T21805] lo speed is unknown, defaulting to 1000
[  327.334593][T21809] netlink: 'syz.1.6354': attribute type 2 has an invalid length.
[  327.355885][T21809] !: entered promiscuous mode
[  327.701463][T21796] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  327.703959][T21796] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  327.720593][T21796] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  327.729454][T21796] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  328.091112][T21853] __nla_validate_parse: 9 callbacks suppressed
[  328.091125][T21853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6370'.
[  328.113226][T21856] syzkaller1: entered promiscuous mode
[  328.115018][T21856] syzkaller1: entered allmulticast mode
[  328.252229][T21867] nbd: illegal input index 16777216
[  328.515677][T21870] lo speed is unknown, defaulting to 1000
[  328.667745][T21877] lo speed is unknown, defaulting to 1000
[  328.721005][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6379'.
[  328.797431][T21890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6383'.
[  328.852508][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6386'.
[  328.863860][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6386'.
[  328.962192][T21904] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  329.001914][T21902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6389'.
[  329.180096][T21924] xt_SECMARK: invalid mode: 3
[  329.354246][T21947] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6403'.
[  329.374295][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6403'.
[  329.459779][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6406'.
[  329.545575][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6402'.
[  329.629542][T21972] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16
[  330.077835][T22021] gtp1: entered allmulticast mode
[  330.079778][T22021] team0: Device gtp1 is of different type
[  330.362963][T22043] xt_SECMARK: invalid mode: 3
[  330.569901][T22068] netlink: 'syz.1.6445': attribute type 1 has an invalid length.
[  330.671902][T22074] netlink: 'syz.0.6451': attribute type 8 has an invalid length.
[  331.528802][T22134] tc_dump_action: action bad kind
[  331.625042][T22141] ipvlan1: entered promiscuous mode
[  331.628123][T22141] ipvlan1: left promiscuous mode
[  332.922592][T22186] netlink: 'syz.0.6487': attribute type 4 has an invalid length.
[  333.105430][T22200] __nla_validate_parse: 15 callbacks suppressed
[  333.105442][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6492'.
[  333.412857][T22232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6503'.
[  333.443815][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6504'.
[  333.458355][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'.
[  333.532171][T22243] openvswitch: : Dropping previously announced user features
[  333.888967][T22261] bridge: RTM_NEWNEIGH with invalid ether address
[  333.891456][T22261] bridge: RTM_NEWNEIGH with invalid ether address
[  333.894663][T22261] netlink: 'syz.1.6515': attribute type 1 has an invalid length.
[  333.897336][T22261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6515'.
[  333.917438][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6514'.
[  333.935845][T22269] xt_l2tp: v2 doesn't support IP mode
[  334.944040][T22303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6528'.
[  335.034047][T22322] openvswitch: : Dropping previously announced user features
[  335.237669][T22355] xt_cluster: node mask cannot exceed total number of nodes
[  335.271460][T22352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6545'.
[  335.370837][T22368] pim6reg1: entered promiscuous mode
[  335.372693][T22368] pim6reg1: entered allmulticast mode
[  335.593054][T22394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6558'.
[  335.792693][T22402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6557'.
[  336.211013][T22417] netlink: 'syz.2.6564': attribute type 13 has an invalid length.
[  336.348723][T22421] lo: Caught tx_queue_len zero misconfig
[  336.448567][T22426] netlink: 'syz.2.6568': attribute type 1 has an invalid length.
[  336.480739][T22428] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  336.950412][T22471] syzkaller1: entered promiscuous mode
[  336.953344][T22471] syzkaller1: entered allmulticast mode
[  337.135277][T22498] netlink: 'syz.1.6591': attribute type 3 has an invalid length.
[  337.138884][T22498] netlink: 'syz.1.6591': attribute type 3 has an invalid length.
[  337.502194][T22533] xt_SECMARK: invalid mode: 3
[  337.999656][T22583] netlink: 'syz.0.6628': attribute type 11 has an invalid length.
[  338.011871][T22583] bridge8: entered allmulticast mode
[  338.016163][T22583] team0: Failed to send port change of device bridge8 via netlink (err -105)
[  338.019412][T22583] team0: Failed to send options change via netlink (err -105)
[  338.021904][T22583] team0: Port device bridge8 added
[  338.056786][T22585] SET target dimension over the limit!
[  338.431705][T22598] netlink: 'syz.1.6634': attribute type 1 has an invalid length.
[  338.465520][T22598] bond0: (slave bridge8): making interface the new active one
[  338.468525][T22598] bond0: (slave bridge8): Enslaving as an active interface with an up link
[  338.966251][T22611] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  338.970968][T22611] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  338.974032][T22612] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  338.976553][T22612] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  338.980773][T22611] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  338.983723][T22611] netlink: 'syz.0.6639': attribute type 1 has an invalid length.
[  339.004720][T22615] __nla_validate_parse: 7 callbacks suppressed
[  339.004734][T22615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6640'.
[  339.044165][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6641'.
[  339.127738][T22628] syzkaller0: entered promiscuous mode
[  339.129889][T22628] syzkaller0: entered allmulticast mode
[  339.143614][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6644'.
[  339.235640][T22634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6648'.
[  339.679761][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6658'.
[  339.686927][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6658'.
[  339.717721][T22665] syz_tun: left promiscuous mode
[  339.724485][T22665] 8021q: adding VLAN 0 to HW filter on device team0
[  339.730376][T22665] dummy0: left promiscuous mode
[  339.735447][T22665] net_ratelimit: 6 callbacks suppressed
[  339.735454][T22665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.951486][T22674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6661'.
[  340.020602][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6663'.
[  340.049636][T22681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6664'.
[  340.288073][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6669'.
[  340.619004][T22717] lo speed is unknown, defaulting to 1000
[  340.739402][T22725] sctp: [Deprecated]: syz.1.6678 (pid 22725) Use of int in max_burst socket option.
[  340.739402][T22725] Use struct sctp_assoc_value instead
[  340.829413][T22727] netlink: 'syz.1.6679': attribute type 5 has an invalid length.
[  341.243236][T22755] xt_SECMARK: invalid mode: 3
[  341.326202][T22757] syzkaller1: entered promiscuous mode
[  341.328692][T22757] syzkaller1: entered allmulticast mode
[  341.331590][T22764] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  341.338097][T22757] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  341.430338][T22772] delete_channel: no stack
[  341.601515][T22793] netlink: 'syz.0.6701': attribute type 30 has an invalid length.
[  341.644168][T22793] bond8: option arp_missed_max: invalid value (0)
[  341.646620][T22793] bond8: option arp_missed_max: allowed values 1 - 255
[  341.652798][T22793] bond8 (unregistering): Released all slaves
[  341.859873][T22813] can: request_module (can-proto-0) failed.
[  341.884165][T22820] geneve3: entered promiscuous mode
[  341.887956][T22820] geneve3: entered allmulticast mode
[  341.978853][T22828] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  342.061230][T22844] netlink: 'syz.2.6715': attribute type 2 has an invalid length.
[  342.070572][T22844] : entered promiscuous mode
[  342.291394][T22844] lo speed is unknown, defaulting to 1000
[  342.639314][T22880] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  343.387039][T22926] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  343.392019][T22926] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  343.395115][T22926] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  343.790628][T22965] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  343.883904][T22980] bond0: Caught tx_queue_len zero misconfig
[  343.984849][T22988] veth0: Caught tx_queue_len zero misconfig
[  344.154143][T22998] validate_nla: 1 callbacks suppressed
[  344.154159][T22998] netlink: 'syz.1.6776': attribute type 11 has an invalid length.
[  344.384724][T23013] pim6reg1: entered promiscuous mode
[  344.387013][T23013] pim6reg1: entered allmulticast mode
[  344.879061][T23039] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  345.119584][T23066] geneve5: entered promiscuous mode
[  345.122347][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  345.127183][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  345.131859][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  345.135532][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  345.351305][T23081] xt_cluster: node mask cannot exceed total number of nodes
[  345.439948][T23090] __nla_validate_parse: 16 callbacks suppressed
[  345.439961][T23090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6809'.
[  345.456147][T23090] netlink: 'syz.1.6809': attribute type 11 has an invalid length.
[  345.460604][T23090] netlink: 'syz.1.6809': attribute type 23 has an invalid length.
[  345.463715][T23090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6809'.
[  345.846449][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6813'.
[  345.850737][T23099] netlink: 'syz.2.6813': attribute type 29 has an invalid length.
[  345.854093][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6813'.
[  345.870696][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6813'.
[  346.039082][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6819'.
[  346.342116][T23126] netlink: 'syz.2.6821': attribute type 13 has an invalid length.
[  346.347662][T23126] netlink: 'syz.2.6821': attribute type 17 has an invalid length.
[  346.351909][T23126] netlink: 'syz.2.6821': attribute type 27 has an invalid length.
[  346.472554][T23129] xt_CT: You must specify a L4 protocol and not use inversions on it
[  346.601052][T23135] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  346.683480][T23153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6828'.
[  346.717702][T23163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6831'.
[  346.781594][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6832'.
[  347.151368][T23175] syzkaller1: entered promiscuous mode
[  347.153498][T23175] syzkaller1: entered allmulticast mode
[  347.171217][T23175] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  347.320647][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6841'.
[  347.391483][T23198] netlink: 'syz.0.6844': attribute type 10 has an invalid length.
[  347.401933][T23198] dummy0: entered promiscuous mode
[  347.404672][T23198] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  347.633410][T23221] netlink: 'syz.0.6851': attribute type 21 has an invalid length.
[  347.637393][T23221] netlink: 'syz.0.6851': attribute type 5 has an invalid length.
[  348.669830][T23267] netlink: 'syz.1.6869': attribute type 3 has an invalid length.
[  349.087889][T23298] ieee802154 phy1 wpan1: encryption failed: -22
[  349.147853][T23292] lo speed is unknown, defaulting to 1000
[  349.684064][T23342] validate_nla: 1 callbacks suppressed
[  349.684081][T23342] netlink: 'syz.2.6896': attribute type 64 has an invalid length.
[  349.981125][T23376] netlink: 'syz.1.6909': attribute type 6 has an invalid length.
[  350.185045][T23399] netlink: 'syz.2.6918': attribute type 3 has an invalid length.
[  350.188882][T23399] netlink: 'syz.2.6918': attribute type 1 has an invalid length.
[  350.245077][T23403] netlink: 'syz.2.6920': attribute type 11 has an invalid length.
[  350.248393][T23403] netlink: 'syz.2.6920': attribute type 23 has an invalid length.
[  351.002491][T23411] bond8: option xmit_hash_policy: invalid value (10)
[  351.006315][T23411] bond8 (unregistering): Released all slaves
[  351.232100][T23421] __nla_validate_parse: 31 callbacks suppressed
[  351.232118][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'.
[  351.356631][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6934'.
[  351.379549][T23440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.548949][T23466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  351.553989][T23466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6942'.
[  351.557814][T23466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  351.563002][T23466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  351.621722][T23472] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  351.640302][T23472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6943'.
[  351.704972][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6949'.
[  351.913673][T23501] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  351.972156][T23504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6955'.
[  351.977367][T23504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6955'.
[  352.019191][T23508] netlink: 'syz.2.6956': attribute type 64 has an invalid length.
[  352.487477][T23533] xt_CT: You must specify a L4 protocol and not use inversions on it
[  352.775739][T23546] lo speed is unknown, defaulting to 1000
[  353.104344][T23561] sock: sock_set_timeout: `syz.1.6976' (pid 23561) tries to set negative timeout
[  353.288236][T23577] netlink: 'syz.0.6983': attribute type 1 has an invalid length.
[  354.074362][T23573] 8021q: VLANs not supported on syzkaller1
[  354.441465][T23616] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  354.582612][T23635] 8021q: VLANs not supported on syzkaller1
[  354.597579][T23638] xt_bpf: check failed: parse error
[  354.755439][T23652] netlink: 'syz.2.7010': attribute type 21 has an invalid length.
[  354.760375][T23651] netlink: 'syz.2.7010': attribute type 21 has an invalid length.
[  354.983031][T23670] netem: change failed
[  355.345905][T23686] netlink: 'syz.0.7022': attribute type 31 has an invalid length.
[  356.397331][T23725] netlink: 'syz.1.7037': attribute type 3 has an invalid length.
[  356.400717][T23725] netlink: 'syz.1.7037': attribute type 1 has an invalid length.
[  356.404041][T23725] __nla_validate_parse: 13 callbacks suppressed
[  356.404052][T23725] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7037'.
[  357.079502][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7046'.
[  357.340619][T23780] : entered promiscuous mode
[  357.353829][T23782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7058'.
[  357.500515][T23786] Cannot find add_set index 1 as target
[  357.648543][T23784] lo speed is unknown, defaulting to 1000
[  357.723622][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7065'.
[  357.732560][T23800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7065'.
[  357.891322][T23812] netlink: zone id is out of range
[  357.893036][T23812] netlink: zone id is out of range
[  357.895964][T23813] netlink: zone id is out of range
[  357.897261][T23812] netlink: zone id is out of range
[  357.899840][T23812] netlink: zone id is out of range
[  357.901505][T23812] netlink: zone id is out of range
[  357.903037][T23813] netlink: zone id is out of range
[  357.906146][T23812] netlink: zone id is out of range
[  358.069903][T23824] netlink: 'syz.0.7075': attribute type 1 has an invalid length.
[  358.078759][T23824] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7075'.
[  358.100964][T23826] netlink: 'syz.1.7076': attribute type 1 has an invalid length.
[  358.107362][T23826] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7076'.
[  358.113008][T23826] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7076'.
[  358.123527][T23826] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7076'.
[  358.323605][T23840] batadv_slave_0: entered promiscuous mode
[  358.336210][T23838] batadv_slave_0: left promiscuous mode
[  358.374822][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7082'.
[  358.407661][T23852] netlink: 'syz.1.7084': attribute type 9 has an invalid length.
[  359.411345][ T9991] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  359.417555][ T9991] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.427944][ T9991] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  359.437631][ T9991] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.440615][ T9991] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  359.445647][ T9991] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.454359][ T9991] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  359.464244][ T9991] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.595695][T23943] netlink: 'syz.1.7120': attribute type 9 has an invalid length.
[  359.598549][T23943] netlink: 'syz.1.7120': attribute type 11 has an invalid length.
[  360.747782][T23993] tunl0: Caught tx_queue_len zero misconfig
[  360.802677][T24006] validate_nla: 1 callbacks suppressed
[  360.802687][T24006] netlink: 'syz.2.7143': attribute type 8 has an invalid length.
[  360.821545][T24005] netlink: 'syz.1.7142': attribute type 1 has an invalid length.
[  362.048035][T24055] __nla_validate_parse: 21 callbacks suppressed
[  362.048045][T24055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7161'.
[  362.139850][T24068] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.7166'.
[  362.367021][T24094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7176'.
[  362.419965][T24098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7177'.
[  362.632175][T24117] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7183'.
[  363.280338][T24130] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7188'.
[  363.328072][T24131] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7187'.
[  363.541030][T24146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7193'.
[  363.556501][T24146] 8021q: adding VLAN 0 to HW filter on device bond9
[  363.679398][T24156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7197'.
[  363.688858][T24156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7197'.
[  363.739338][T24158] netlink: 'syz.2.7198': attribute type 1 has an invalid length.
[  363.770041][T24158] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  363.773337][T24158] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  363.777692][T24158] bond10: (slave ip6gre3): making interface the new active one
[  363.780440][T24158] bond10: (slave ip6gre3): Enslaving as an active interface with an up link
[  363.911625][T24170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.915485][T24170] syzkaller0: entered promiscuous mode
[  363.918579][T24170] syzkaller0: entered allmulticast mode
[  363.933195][T24170] tipc: Resetting bearer <eth:syzkaller0>
[  363.936931][T24169] tipc: Resetting bearer <eth:syzkaller0>
[  363.948070][T24169] tipc: Disabling bearer <eth:syzkaller0>
[  364.027697][T24176] netlink: 'syz.2.7206': attribute type 4 has an invalid length.
[  364.031065][T24176] netlink: 'syz.2.7206': attribute type 4 has an invalid length.
[  364.367772][T24208] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  364.388908][T24208] syzkaller0: entered promiscuous mode
[  364.390798][T24208] syzkaller0: entered allmulticast mode
[  365.598365][T24249] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.258974][ T9991] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.262644][ T9991] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.266058][ T9991] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  366.269657][ T9991] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.364607][   T33] audit: type=1800 audit(1772933348.526:7): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.375622][   T33] audit: type=1800 audit(1772933348.526:8): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.384161][   T33] audit: type=1800 audit(1772933348.526:9): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.392612][   T33] audit: type=1800 audit(1772933348.526:10): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.401314][   T33] audit: type=1800 audit(1772933348.526:11): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.410004][   T33] audit: type=1800 audit(1772933348.526:12): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.419293][   T33] audit: type=1800 audit(1772933348.526:13): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.431307][   T33] audit: type=1800 audit(1772933348.526:14): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.440700][   T33] audit: type=1800 audit(1772933348.526:15): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.450789][   T33] audit: type=1800 audit(1772933348.526:16): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7260" name=CB dev="tmpfs" ino=11832 res=0 errno=0
[  366.636950][T24344] delete_channel: no stack
[  366.745935][T24339] lo speed is unknown, defaulting to 1000
[  366.937404][T24378] syzkaller0: entered promiscuous mode
[  366.939372][T24378] syzkaller0: entered allmulticast mode
[  367.251976][T24414] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  367.271404][T24416] __nla_validate_parse: 10 callbacks suppressed
[  367.271413][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7289'.
[  367.423579][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7294'.
[  367.799606][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'.
[  367.811147][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'.
[  368.181641][T24497] netlink: 'syz.1.7321': attribute type 1 has an invalid length.
[  368.190843][T24497] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7321'.
[  368.287923][T24499] netlink: 'syz.2.7311': attribute type 11 has an invalid length.
[  369.273468][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7341'.
[  369.321987][T24555] netlink: 'syz.0.7343': attribute type 21 has an invalid length.
[  369.325205][T24555] netlink: 'syz.0.7343': attribute type 6 has an invalid length.
[  369.328529][T24555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7343'.
[  369.387993][T24559] netlink: 'syz.0.7345': attribute type 1 has an invalid length.
[  369.391164][T24559] netlink: 'syz.0.7345': attribute type 2 has an invalid length.
[  369.396157][T24559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7345'.
[  369.473871][T24569] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  369.707557][T24590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7360'.
[  369.916515][T24613] nbd: must specify a device to reconfigure
[  369.955809][T24622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7373'.
[  370.170180][T24625] lo speed is unknown, defaulting to 1000
[  370.226843][T24644] x_tables: duplicate underflow at hook 3
[  370.772405][T24681] net_ratelimit: 20 callbacks suppressed
[  370.772417][T24681] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  371.110821][T24701] syzkaller0: entered promiscuous mode
[  371.112715][T24701] syzkaller0: entered allmulticast mode
[  371.198884][T24703] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  371.305039][T24707] batadv_slave_0: Caught tx_queue_len zero misconfig
[  371.338221][T24705] team_slave_1: Caught tx_queue_len zero misconfig
[  371.544749][T24721] IPVS: Scheduler module ip_vs_ not found
[  371.820018][T24747] netlink: 'syz.2.7418': attribute type 5 has an invalid length.
[  371.976651][T24749] lo speed is unknown, defaulting to 1000
[  372.616529][T24784] netlink: 'syz.0.7430': attribute type 2 has an invalid length.
[  372.801661][T24784] lo speed is unknown, defaulting to 1000
[  373.185160][T24828] __nla_validate_parse: 8 callbacks suppressed
[  373.185170][T24828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7444'.
[  373.192272][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7441'.
[  373.270823][T24819] lo speed is unknown, defaulting to 1000
[  373.425659][T24849] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  373.428610][T24849] tipc: Enabled bearer <udp:syz0>, priority 10
[  373.621729][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7458'.
[  373.633441][T24867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7458'.
[  373.636403][T24867] netlink: 'syz.0.7458': attribute type 20 has an invalid length.
[  373.691186][T24860] lo speed is unknown, defaulting to 1000
[  373.748039][T24879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7462'.
[  373.762454][T24879] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7462'.
[  373.765367][T24879] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7462'.
[  373.854500][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7464'.
[  373.907912][T24884] syzkaller0: entered promiscuous mode
[  373.909803][T24884] syzkaller0: entered allmulticast mode
[  373.912605][T24873] net veth1_virt_wifi : renamed from virt_wifi0
[  373.944286][T24884] syzkaller0: left promiscuous mode
[  373.946154][T24884] syzkaller0: left allmulticast mode
[  374.624512][T24896] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  375.020306][T24911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7473'.
[  375.310744][T24950] netlink: 'syz.2.7489': attribute type 5 has an invalid length.
[  375.384399][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7496'.
[  375.417941][T24967] block nbd3: Unsupported socket: should be TCP or UNIX.
[  375.691280][T24983] gretap1: entered promiscuous mode
[  375.693427][T24983] batman_adv: batadv0: Adding interface: gretap1
[  375.695488][T24983] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  375.704370][T24983] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  376.721092][T25036] bridge0: port 2(bond0) entered disabled state
[  376.833360][T25051] delete_channel: no stack
[  376.840738][T25048] delete_channel: no stack
[  376.959769][T25073] bond8: entered promiscuous mode
[  376.969316][T25069] xt_policy: too many policy elements
[  376.994675][T25073] vcan2: entered promiscuous mode
[  377.002471][T25073] vcan2: entered allmulticast mode
[  377.005234][T25073] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  377.014796][T25073] bond8: (slave vcan2): Error -95 calling set_mac_address
[  377.161888][T25087] nbd: illegal input index 16777216
[  377.163793][T25087] nbd: couldn't find device at index 0
[  378.135517][T25140] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  378.500893][T25150] __nla_validate_parse: 6 callbacks suppressed
[  378.500906][T25150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7565'.
[  378.659810][T25162] ip6tnl0: Caught tx_queue_len zero misconfig
[  379.030407][T25196] syzkaller0: entered promiscuous mode
[  379.032388][T25196] syzkaller0: entered allmulticast mode
[  379.245477][T25206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7590'.
[  379.295357][T25207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7590'.
[  379.311236][T25213] ipvlan3: entered promiscuous mode
[  379.323000][T25216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7590'.
[  379.583776][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[  379.586621][T25244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7603'.
[  379.591381][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[  379.595830][T25244] netlink: 'syz.0.7603': attribute type 5 has an invalid length.
[  379.599792][T25244] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7603'.
[  379.684465][T25256] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  379.751859][T25260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7611'.
[  379.908048][T25283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7620'.
[  379.925677][T25283] 8021q: adding VLAN 0 to HW filter on device bond11
[  379.934171][T25283] syzkaller0: entered promiscuous mode
[  379.936046][T25283] syzkaller0: entered allmulticast mode
[  380.223463][T25304] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  380.479311][T25312] lo speed is unknown, defaulting to 1000
[  380.782745][T25328] netlink: 'syz.2.7635': attribute type 11 has an invalid length.
[  381.129354][T25373] pimreg: tun_chr_ioctl cmd 1074025677
[  381.131264][T25373] pimreg: linktype set to 1
[  381.302473][T25384] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  382.296826][T25386] syz.0.7655 (25386) used greatest stack depth: 19008 bytes left
[  382.422137][T25423] netlink: 'syz.0.7666': attribute type 2 has an invalid length.
[  382.912756][T25439] syzkaller1: entered promiscuous mode
[  382.914673][T25439] syzkaller1: entered allmulticast mode
[  382.922623][T25439] pim6reg0: tun_chr_ioctl cmd 1074025677
[  382.924546][T25439] pim6reg0: linktype set to 773
[  383.104104][T25421] syz.0.7666 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  383.109830][T25421] CPU: 1 UID: 0 PID: 25421 Comm: syz.0.7666 Not tainted syzkaller #0 PREEMPT(full) 
[  383.109842][T25421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.109847][T25421] Call Trace:
[  383.109851][T25421]  <TASK>
[  383.109854][T25421]  dump_stack_lvl+0xe8/0x150
[  383.109868][T25421]  dump_header+0xd3/0x4c0
[  383.109878][T25421]  oom_kill_process+0x3ab/0x970
[  383.109888][T25421]  out_of_memory+0x106c/0x1410
[  383.109895][T25421]  ? percpu_ref_put+0x19/0x180
[  383.109904][T25421]  ? __pfx___mutex_lock+0x10/0x10
[  383.109915][T25421]  ? __pfx_out_of_memory+0x10/0x10
[  383.109921][T25421]  ? do_raw_spin_unlock+0x4d/0x210
[  383.109933][T25421]  try_charge_memcg+0xc53/0x1560
[  383.109941][T25421]  ? __lock_acquire+0x6b5/0x2cf0
[  383.109954][T25421]  ? __pfx_try_charge_memcg+0x10/0x10
[  383.109969][T25421]  ? xa_load+0x60/0x210
[  383.109980][T25421]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  383.109989][T25421]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  383.110027][T25421]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  383.110038][T25421]  __swap_cache_prepare_and_add+0x52a/0x700
[  383.110056][T25421]  swap_cache_alloc_folio+0xf1/0x240
[  383.110067][T25421]  swap_cluster_readahead+0x53a/0x690
[  383.110079][T25421]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  383.110093][T25421]  ? get_vma_policy+0x27b/0x3c0
[  383.110103][T25421]  swapin_readahead+0x196/0xc50
[  383.110117][T25421]  ? __pfx_swapin_readahead+0x10/0x10
[  383.110127][T25421]  ? swap_table_get+0x1e/0x260
[  383.110135][T25421]  ? swap_table_get+0x1e/0x260
[  383.110143][T25421]  ? swap_table_get+0x1e/0x260
[  383.110152][T25421]  ? swap_table_get+0x216/0x260
[  383.110161][T25421]  ? swap_cache_get_folio+0x513/0x520
[  383.110172][T25421]  do_swap_page+0x54f/0x58d0
[  383.110182][T25421]  ? __lock_acquire+0x6b5/0x2cf0
[  383.110196][T25421]  ? do_swap_page+0x12c/0x58d0
[  383.110205][T25421]  ? __pfx_do_swap_page+0x10/0x10
[  383.110213][T25421]  ? __pte_offset_map+0x1ae/0x240
[  383.110224][T25421]  ? pte_offset_map_rw_nolock+0xea/0x160
[  383.110234][T25421]  handle_mm_fault+0x12d2/0x3310
[  383.110249][T25421]  ? handle_mm_fault+0xee/0x3310
[  383.110261][T25421]  ? __pfx_handle_mm_fault+0x10/0x10
[  383.110270][T25421]  ? lock_vma_under_rcu+0x45a/0x500
[  383.110286][T25421]  do_user_addr_fault+0xa73/0x1340
[  383.110298][T25421]  ? rcu_is_watching+0x15/0xb0
[  383.110309][T25421]  ? trace_page_fault_user+0x84/0x210
[  383.110323][T25421]  exc_page_fault+0x6a/0xc0
[  383.110338][T25421]  asm_exc_page_fault+0x26/0x30
[  383.110348][T25421] RIP: 0033:0x7f03093578d4
[  383.110359][T25421] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ee 4d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  383.110368][T25421] RSP: 002b:00007ffdbd363080 EFLAGS: 00010246
[  383.110378][T25421] RAX: 0000000000000000 RBX: 0000555557213500 RCX: 0000000000000000
[  383.110385][T25421] RDX: 00007ffdbd3630c0 RSI: 0000000000000000 RDI: 0000000000000000
[  383.110391][T25421] RBP: 00007f0309617da0 R08: 0000000000000000 R09: 0000000000000000
[  383.110399][T25421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005d894
[  383.110405][T25421] R13: 00007f030961618c R14: 000000000005d5fb R15: 00007f0309616180
[  383.110423][T25421]  </TASK>
[  383.110428][T25421] memory: usage 307200kB, limit 307200kB, failcnt 10294
[  383.222892][T25421] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0
[  383.232941][T25421] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  383.235233][T25421] Memory cgroup stats for /syz0:
[  383.235293][T25421] cache 0
[  383.238500][T25421] rss 0
[  383.239517][T25421] rss_huge 0
[  383.240576][T25421] shmem 0
[  383.241543][T25421] mapped_file 0
[  383.242667][T25421] dirty 0
[  383.243653][T25421] writeback 0
[  383.251233][T25445] x_tables: ip_tables: icmp match: only valid for protocol 1
[  383.258284][T25421] workingset_refault_anon 53
[  383.259787][T25421] workingset_refault_file 60
[  383.261285][T25421] swap 221184
[  383.262479][T25421] swapcached 282624
[  383.263727][T25421] pgpgin 400217
[  383.265111][T25421] pgpgout 400213
[  383.266674][T25421] pgfault 470619
[  383.274385][T25421] pgmajfault 68
[  383.275548][T25421] inactive_anon 0
[  383.276728][T25421] active_anon 16384
[  383.279320][T25421] inactive_file 0
[  383.280549][T25421] active_file 0
[  383.281710][T25421] unevictable 0
[  383.282830][T25421] hierarchical_memory_limit 314572800
[  383.284625][T25421] hierarchical_memsw_limit 9223372036854771712
[  383.286567][T25421] total_cache 0
[  383.287762][T25421] total_rss 0
[  383.288815][T25421] total_rss_huge 0
[  383.290025][T25421] total_shmem 0
[  383.291165][T25421] total_mapped_file 0
[  383.292454][T25421] total_dirty 0
[  383.293582][T25421] total_writeback 0
[  383.296250][T25421] total_workingset_refault_anon 53
[  383.298023][T25421] total_workingset_refault_file 60
[  383.299654][T25421] total_swap 221184
[  383.301069][T25421] total_swapcached 282624
[  383.302543][T25421] total_pgpgin 400217
[  383.303822][T25421] total_pgpgout 400213
[  383.305148][T25421] total_pgfault 470619
[  383.306447][T25421] total_pgmajfault 68
[  383.308071][T25421] total_inactive_anon 0
[  383.309402][T25421] total_active_anon 16384
[  383.310769][T25421] total_inactive_file 0
[  383.316091][T25421] total_active_file 0
[  383.317680][T25421] total_unevictable 0
[  383.319093][T25421] anon_cost 0
[  383.320270][T25421] file_cost 0
[  383.321508][T25421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7666,pid=25421,uid=0
[  383.327599][T25421] Memory cgroup out of memory: Killed process 25421 (syz.0.7666) total-vm:102488kB, anon-rss:1232kB, file-rss:23136kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  383.507482][T25457] __nla_validate_parse: 8 callbacks suppressed
[  383.507493][T25457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7679'.
[  383.539121][T25460] ip6gre4: entered promiscuous mode
[  383.540861][T25460] ip6gre4: entered allmulticast mode
[  383.543387][ T5836] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  383.546376][ T5836] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  383.558388][T25460] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  383.567267][  T870] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  383.719732][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  383.770512][T25485] netlink: 'syz.2.7691': attribute type 1 has an invalid length.
[  383.773830][T25485] netlink: 'syz.2.7691': attribute type 2 has an invalid length.
[  383.778118][T25485] netlink: 'syz.2.7691': attribute type 1 has an invalid length.
[  383.781112][T25485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7691'.
[  383.928505][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7694'.
[  384.011336][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  384.101752][T25503] netlink: 'syz.1.7697': attribute type 22 has an invalid length.
[  384.106815][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7697'.
[  384.111317][T25503] netlink: 'syz.1.7697': attribute type 22 has an invalid length.
[  384.114710][T25505] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  384.120502][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7697'.
[  384.131355][T25503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7697'.
[  384.184114][T25509] syzkaller1: entered promiscuous mode
[  384.193308][T25509] syzkaller1: entered allmulticast mode
[  384.331830][T25509] netlink: 'syz.1.7700': attribute type 1 has an invalid length.
[  384.338081][T25524] dvmrp0: entered allmulticast mode
[  384.448113][T25534] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7705'.
[  384.451154][T25534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7705'.
[  384.465322][T25538] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  384.517328][ T5272] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  384.610706][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7712'.
[  384.901940][T25572] IPv6: NLM_F_CREATE should be specified when creating new route
[  385.030481][T25579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7724'.
[  385.033585][T25579] netlink: 'syz.1.7724': attribute type 6 has an invalid length.
[  385.036421][T25579] netlink: 'syz.1.7724': attribute type 5 has an invalid length.
[  385.216510][T25587] lo speed is unknown, defaulting to 1000
[  387.477236][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  389.370165][T25707] __nla_validate_parse: 5 callbacks suppressed
[  389.370181][T25707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7766'.
[  389.389697][T25709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7767'.
[  389.493084][T25718] dvmrp1: entered allmulticast mode
[  389.511683][T25718] dvmrp0: left allmulticast mode
[  389.513433][T25718] dvmrp1: left allmulticast mode
[  389.564290][T25727] x_tables: duplicate underflow at hook 2
[  389.625003][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7778'.
[  389.633272][ T9991] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.633346][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7778'.
[  389.636013][ T9991] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.642610][ T9991] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.645234][ T9991] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.819292][T25752] netlink: 'syz.2.7787': attribute type 5 has an invalid length.
[  389.842853][T25755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7788'.
[  389.896350][T25758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7790'.
[  390.030729][T25775] tipc: New replicast peer: 255.255.255.255
[  390.033279][T25775] tipc: Enabled bearer <udp:syz2>, priority 10
[  390.035622][T25775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7795'.
[  390.092408][T25778] netlink: 'syz.2.7796': attribute type 5 has an invalid length.
[  390.164764][T25783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7798'.
[  390.706215][T25794] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7803'.
[  390.725818][T25794] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7803'.
[  390.729371][T25794] .70: renamed from hsr0
[  390.732689][T25794] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  390.736662][T25794] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  390.742358][T25794] .70: entered allmulticast mode
[  390.744419][T25794] hsr_slave_0: entered allmulticast mode
[  390.746769][T25794] hsr_slave_1: entered allmulticast mode
[  390.751379][T25794] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  391.259004][T25830] syzkaller0: entered promiscuous mode
[  391.262695][T25830] syzkaller0: entered allmulticast mode
[  391.340241][T25837] netlink: 'syz.0.7821': attribute type 5 has an invalid length.
[  391.587854][T25845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.610087][T25847] delete_channel: no stack
[  391.842933][T25869] sctp: [Deprecated]: syz.1.7834 (pid 25869) Use of int in maxseg socket option.
[  391.842933][T25869] Use struct sctp_assoc_value instead
[  391.891910][T25880] syzkaller1: entered promiscuous mode
[  391.893721][T25880] syzkaller1: entered allmulticast mode
[  391.994915][T25889] netlink: 'syz.0.7841': attribute type 5 has an invalid length.
[  392.111889][T25905] netlink: 'syz.0.7848': attribute type 10 has an invalid length.
[  392.333008][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  392.333020][   T33] audit: type=1800 audit(1772933374.496:38): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7852" name="memory.events" dev="tmpfs" ino=12638 res=0 errno=0
[  392.385378][T25926] sctp: [Deprecated]: syz.0.7857 (pid 25926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  392.385378][T25926] Use struct sctp_sack_info instead
[  392.953572][T25975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.958191][T25974] syzkaller0: entered promiscuous mode
[  392.960623][T25974] syzkaller0: entered allmulticast mode
[  392.985033][T25975] tipc: Resetting bearer <eth:syzkaller0>
[  393.001717][T25972] tipc: Resetting bearer <eth:syzkaller0>
[  393.030670][T25972] tipc: Disabling bearer <eth:syzkaller0>
[  393.675697][T26017] syzkaller0: entered promiscuous mode
[  393.679107][T26017] syzkaller0: entered allmulticast mode
[  393.832353][T26023] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  394.079082][T26043] netlink: 'syz.1.7895': attribute type 15 has an invalid length.
[  394.345631][T26052] netlink: 'syz.0.7897': attribute type 1 has an invalid length.
[  394.350168][T26052] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  394.378908][T26058] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  395.061254][T26106] netlink: 'syz.1.7912': attribute type 83 has an invalid length.
[  395.213410][T26124] __nla_validate_parse: 11 callbacks suppressed
[  395.213420][T26124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7917'.
[  395.247263][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  395.369033][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7923'.
[  395.408724][T26145] ieee802154 phy1 wpan1: encryption failed: -22
[  395.496725][T26153] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  395.983867][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7937'.
[  396.618779][T26216] netlink: 'syz.0.7950': attribute type 5 has an invalid length.
[  396.812449][T26226] netlink: 'syz.0.7953': attribute type 13 has an invalid length.
[  397.402362][T26262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7967'.
[  398.011650][T26269] IPv6: NLM_F_CREATE should be specified when creating new route
[  398.014937][T26269] netlink: 'syz.0.7970': attribute type 1 has an invalid length.
[  398.129700][T26275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7973'.
[  398.153602][T26275] 8021q: adding VLAN 0 to HW filter on device bond9
[  398.159175][T26249] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  398.162632][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7973'.
[  398.169360][T26275] macsec2: entered promiscuous mode
[  398.171077][T26275] bond9: entered promiscuous mode
[  398.172752][T26275] macsec2: entered allmulticast mode
[  398.174417][T26275] bond9: entered allmulticast mode
[  398.179660][T26275] bond9: left allmulticast mode
[  398.181261][T26275] bond9: left promiscuous mode
[  398.191838][T26278] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  398.221881][T26275] batadv_slave_0: Caught tx_queue_len zero misconfig
[  398.242482][T26280] netlink: 1476 bytes leftover after parsing attributes in process `syz.2.7975'.
[  398.412164][T26301] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7977'.
[  398.414975][T26301] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7977'.
[  398.422304][T26300] syzkaller1: entered promiscuous mode
[  398.424855][T26300] syzkaller1: entered allmulticast mode
[  398.490665][T26303] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  398.495613][T26303] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.534132][T26288] lo speed is unknown, defaulting to 1000
[  398.548104][T26305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7983'.
[  398.574551][T26303] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  398.578420][T26303] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.631934][T26303] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  398.635000][T26303] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.730222][T26303] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  398.733640][T26303] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.843366][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.846293][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.873475][ T5836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.876347][ T5836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.880582][T26326] netlink: 'syz.1.7988': attribute type 11 has an invalid length.
[  398.895507][ T5836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.900771][ T5836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.925048][ T5836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.929031][ T5836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.073622][T26348] x_tables: duplicate underflow at hook 4
[  399.166754][T26357] bridge0: entered allmulticast mode
[  399.185652][T26360] openvswitch: netlink: Unknown nsh attribute 0
[  399.381828][T26390] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  399.815474][T26416] wg1: entered promiscuous mode
[  399.817370][T26416] wg1: entered allmulticast mode
[  400.109766][T26425] netlink: 'syz.0.8024': attribute type 5 has an invalid length.
[  400.185983][T26430] openvswitch: netlink: Duplicate key (type 21).
[  400.644600][T26446] netlink: 'syz.2.8032': attribute type 5 has an invalid length.
[  400.798151][T26455] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  401.196332][T26471] sctp: [Deprecated]: syz.0.8041 (pid 26471) Use of int in max_burst socket option.
[  401.196332][T26471] Use struct sctp_assoc_value instead
[  401.340597][T26483] __nla_validate_parse: 4 callbacks suppressed
[  401.340681][T26483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8045'.
[  401.348071][T26483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8045'.
[  401.419360][T26489] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  401.510798][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.530281][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.536974][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.544486][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.549353][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.554193][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.561116][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.572364][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  401.737830][T26507] netlink: 'syz.2.8053': attribute type 5 has an invalid length.
[  401.762334][T26509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  401.765383][T26509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  401.792577][T26513] team_slave_1: Caught tx_queue_len zero misconfig
[  401.894771][T26522] can: request_module (can-proto-0) failed.
[  402.008788][T26533] netlink: 'syz.2.8062': attribute type 5 has an invalid length.
[  403.059011][T26564] netlink: 'syz.2.8072': attribute type 5 has an invalid length.
[  403.365782][T26593] netlink: 'syz.2.8085': attribute type 5 has an invalid length.
[  403.662780][T26631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.697563][T26631] nbd: couldn't find a device at index 0
[  403.699512][T26633] nbd: couldn't find a device at index 0
[  404.513789][T26666] vlan1: entered promiscuous mode
[  404.624284][T26666] netlink: 'syz.2.8107': attribute type 11 has an invalid length.
[  404.734379][T26690] openvswitch: netlink: Flow actions attr not present in new flow.
[  404.893964][T26707] bond0: Caught tx_queue_len zero misconfig
[  405.094435][T26737] netlink: 'syz.1.8134': attribute type 4 has an invalid length.
[  405.173394][T26737] netlink: 'syz.1.8134': attribute type 2 has an invalid length.
[  406.176065][T26866] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  406.180172][T26866] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  406.391042][T26877] netlink: 'syz.2.8186': attribute type 5 has an invalid length.
[  406.946795][T26910] __nla_validate_parse: 57 callbacks suppressed
[  406.946807][T26910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8199'.
[  406.992694][T26914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.095557][T26912] infiniband syz1: set down
[  407.097398][T26912] infiniband syz1: added ipvlan0
[  407.119975][T26912] RDS/IB: syz1: added
[  407.123268][T26912] smc: adding ib device syz1 with port count 1
[  407.132989][T26912] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  407.199376][T26929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8206'.
[  407.207168][T26929] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8206'.
[  407.396327][T26939] netlink: zone id is out of range
[  407.398468][T26939] netlink: zone id is out of range
[  407.404117][T26939] netlink: zone id is out of range
[  407.406008][T26939] netlink: zone id is out of range
[  407.408018][T26939] netlink: zone id is out of range
[  407.409956][T26939] netlink: zone id is out of range
[  407.411739][T26939] netlink: zone id is out of range
[  407.413504][T26939] netlink: zone id is out of range
[  407.610937][T26963] xt_ecn: cannot match TCP bits for non-tcp packets
[  407.666355][T26974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8220'.
[  407.750795][T26982] netlink: 'syz.2.8223': attribute type 5 has an invalid length.
[  407.893370][T26994] netlink: 'syz.1.8229': attribute type 29 has an invalid length.
[  407.900449][T26994] netlink: 'syz.1.8229': attribute type 29 has an invalid length.
[  407.904801][T26994] netlink: 548 bytes leftover after parsing attributes in process `syz.1.8229'.
[  408.180932][T27013] bond6: option packets_per_slave: invalid value (1953002597)
[  408.183791][T27013] bond6: option packets_per_slave: allowed values 0 - 65535
[  408.190092][T27013] bond6 (unregistering): Released all slaves
[  408.410642][T27022] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8238'.
[  408.413767][T27022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8238'.
[  408.689767][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8243'.
[  408.734402][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8243'.
[  408.759412][T27035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8243'.
[  408.913380][T27053] netlink: 'syz.1.8250': attribute type 5 has an invalid length.
[  409.255019][T27068] ip6_vti0: Caught tx_queue_len zero misconfig
[  409.463684][T27092] netlink: 'syz.1.8265': attribute type 4 has an invalid length.
[  410.344870][T27162] batadv_slave_1: entered promiscuous mode
[  410.353387][T27161] batadv_slave_1: left promiscuous mode
[  410.393435][T27164] bridge11: entered promiscuous mode
[  410.395271][T27164] bridge11: entered allmulticast mode
[  410.399518][T27164] team0: Port device bridge11 added
[  410.466357][T27168] netlink: 'syz.0.8296': attribute type 5 has an invalid length.
[  410.709387][T27187] netlink: 'syz.0.8304': attribute type 13 has an invalid length.
[  410.713441][T27187] tunl0: Caught tx_queue_len zero misconfig
[  411.237330][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  411.401103][T27259] netlink: 'syz.2.8333': attribute type 4 has an invalid length.
[  411.589154][T27275] sctp: [Deprecated]: syz.2.8338 (pid 27275) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.589154][T27275] Use struct sctp_sack_info instead
[  411.816566][T27295] x_tables: duplicate underflow at hook 2
[  411.818697][T27294] x_tables: duplicate underflow at hook 2
[  412.108270][T27318] __nla_validate_parse: 29 callbacks suppressed
[  412.108285][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'.
[  412.108930][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'.
[  412.739705][T27377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8376'.
[  412.895292][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8381'.
[  412.910125][T27389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.912998][T27389] syzkaller0: entered promiscuous mode
[  412.914776][T27389] syzkaller0: entered allmulticast mode
[  412.931273][T27389] tipc: Resetting bearer <eth:syzkaller0>
[  412.936571][T27388] tipc: Resetting bearer <eth:syzkaller0>
[  412.958918][T27388] tipc: Disabling bearer <eth:syzkaller0>
[  413.106885][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8384'.
[  413.316152][T27418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8393'.
[  413.496358][T27441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8402'.
[  413.497643][T27440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8401'.
[  413.628442][T27453] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  413.668547][T27453] netlink: 320 bytes leftover after parsing attributes in process `syz.0.8404'.
[  413.739114][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8411'.
[  413.805772][T27458] xt_CT: No such helper "snmp_trap"
[  414.080982][T27505] netlink: 'syz.1.8428': attribute type 1 has an invalid length.
[  414.115332][T27505] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  414.121568][T27505] bond7 (unregistering): (slave ip6gretap0): Releasing backup interface
[  414.128711][T27505] bond7 (unregistering): Released all slaves
[  414.195706][T27519] syzkaller1: left promiscuous mode
[  414.200512][T27519] syzkaller1: left allmulticast mode
[  414.294830][T27528] netlink: 'syz.1.8435': attribute type 5 has an invalid length.
[  414.483277][T27551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  414.486425][T27551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  415.402425][T27604] netlink: 'syz.1.8462': attribute type 5 has an invalid length.
[  415.561456][   T13] bond0: (slave bridge8): link status definitely down, disabling slave
[  415.569467][   T13] bond0: now running without any active interface!
[  415.719892][T27616] 8021q: adding VLAN 0 to HW filter on device team0
[  415.723370][T27616] net_ratelimit: 46 callbacks suppressed
[  415.723375][T27616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.040683][T27653] netlink: 'syz.1.8479': attribute type 2 has an invalid length.
[  416.043958][T27654] netlink: 'syz.1.8479': attribute type 2 has an invalid length.
[  416.208291][T27675] netlink: 'syz.0.8486': attribute type 5 has an invalid length.
[  417.349295][T27733] netlink: 'syz.0.8508': attribute type 5 has an invalid length.
[  417.388565][T27739] __nla_validate_parse: 26 callbacks suppressed
[  417.388577][T27739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8510'.
[  417.394265][T27739] x_tables: duplicate underflow at hook 1
[  417.400514][T27739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8510'.
[  417.432625][T27743] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check.
[  417.440501][T27743] 5gQ[: Caught tx_queue_len zero misconfig
[  417.573236][T27761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8520'.
[  417.655978][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8523'.
[  417.706879][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8526'.
[  417.749933][T27783] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8528'.
[  417.825324][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'.
[  417.883078][T27786] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8527'.
[  417.886499][T27786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8527'.
[  417.891349][T27786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8527'.
[  417.906420][T27786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  418.045548][T27806] netlink: 'syz.1.8535': attribute type 1 has an invalid length.
[  418.378260][T27825] lo speed is unknown, defaulting to 1000
[  418.684768][T27854] syzkaller0: entered promiscuous mode
[  418.686949][T27854] syzkaller0: entered allmulticast mode
[  418.975169][T27869] netlink: 'syz.0.8557': attribute type 1 has an invalid length.
[  418.980674][T27869] netlink: 'syz.0.8557': attribute type 3 has an invalid length.
[  419.290571][T27893] netlink: 'syz.2.8567': attribute type 7 has an invalid length.
[  419.422873][T27920] netlink: 'syz.0.8574': attribute type 2 has an invalid length.
[  419.430705][T27920] !9: entered promiscuous mode
[  419.768165][T27943] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.492328][T27943] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.523633][T27943] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.584511][T27943] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.663457][ T5836] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.666665][ T5836] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.675153][ T5836] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.697290][ T5836] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.978397][T27992] netlink: 'syz.0.8602': attribute type 3 has an invalid length.
[  421.364446][T28016] netlink: 'syz.1.8610': attribute type 5 has an invalid length.
[  421.666127][T28041] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.672955][T28041] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.736170][T28041] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.743277][T28041] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.830454][T28041] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.837729][T28041] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.880797][T28041] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.891724][T28041] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.934303][ T5836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  421.938292][ T5836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.953933][ T5836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  421.958580][ T5836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.962572][ T5836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  421.966457][ T5836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.975697][ T5836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  421.978939][ T5836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.130723][T28089] netlink: 'syz.1.8637': attribute type 3 has an invalid length.
[  422.253907][T28101] Bluetooth: MGMT ver 1.23
[  422.258873][T28101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  422.310328][T28104] syzkaller1: entered promiscuous mode
[  422.312109][T28104] syzkaller1: entered allmulticast mode
[  422.413133][T28124] __nla_validate_parse: 19 callbacks suppressed
[  422.413149][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8647'.
[  422.418627][T28124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8647'.
[  422.421989][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8647'.
[  422.425805][T28124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8647'.
[  422.429899][T28124] netlink: 'syz.1.8647': attribute type 6 has an invalid length.
[  422.652635][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8648'.
[  423.432947][T28143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8652'.
[  423.489330][T28149] pimreg: tun_chr_ioctl cmd 1074025677
[  423.491476][T28149] pimreg: linktype set to 774
[  423.494047][T28149] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8655'.
[  423.514445][T28139] lo speed is unknown, defaulting to 1000
[  423.814572][T28151] lo speed is unknown, defaulting to 1000
[  424.089796][T28198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8670'.
[  424.465246][T28211] netlink: 496 bytes leftover after parsing attributes in process `syz.2.8675'.
[  424.718789][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8682'.
[  424.721643][T28231] veth1: Caught tx_queue_len zero misconfig
[  425.083849][T28267] openvswitch: netlink: Message has 4 unknown bytes.
[  425.088304][T28267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.725150][T28347] netlink: 'syz.2.8721': attribute type 5 has an invalid length.
[  425.765859][T28349] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  426.439070][T28367] lo speed is unknown, defaulting to 1000
[  427.155161][T28413] netlink: 'syz.0.8741': attribute type 5 has an invalid length.
[  427.341550][T28426] netlink: 'syz.0.8744': attribute type 5 has an invalid length.
[  427.850164][T28437] openvswitch: netlink: VXLAN extension message has 196 unknown bytes.
[  427.880439][T28439] netlink: 'syz.2.8748': attribute type 142 has an invalid length.
[  427.913112][T28443] netlink: 'syz.1.8750': attribute type 5 has an invalid length.
[  427.959477][T28446] __nla_validate_parse: 72 callbacks suppressed
[  427.959487][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8749'.
[  428.024611][T28452] syzkaller1: entered promiscuous mode
[  428.029800][T28452] syzkaller1: entered allmulticast mode
[  428.121465][T28462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8756'.
[  428.202071][T28473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  428.368550][T28490] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  428.371905][T28491] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  428.803131][T28511] netlink: 'syz.2.8775': attribute type 3 has an invalid length.
[  428.962267][T28516] vlan4: entered promiscuous mode
[  428.966219][T28516] macvtap0: entered promiscuous mode
[  429.246057][T28528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.437904][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8783'.
[  429.514065][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8784'.
[  429.906849][T28552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8791'.
[  430.128404][T28563] netlink: 384 bytes leftover after parsing attributes in process `syz.1.8795'.
[  430.132767][T28563] netlink: 'syz.1.8795': attribute type 1 has an invalid length.
[  430.152678][T28565] openvswitch: : Dropping previously announced user features
[  430.264669][T28573] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  430.419388][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8806'.
[  430.596033][T28601] netlink: 536 bytes leftover after parsing attributes in process `syz.0.8810'.
[  430.690819][T28614] openvswitch: : Dropping previously announced user features
[  430.696398][T28613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8814'.
[  430.701461][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8814'.
[  431.034896][T28628] Cannot find set identified by id 3 to match
[  431.130965][T28633] openvswitch: : Dropping previously announced user features
[  431.205376][T28642] netlink: 'syz.0.8826': attribute type 5 has an invalid length.
[  431.543260][T28664] netlink: 'syz.0.8835': attribute type 5 has an invalid length.
[  431.664798][T28671] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  431.671218][T28671] bond10 (unregistering): Released all slaves
[  431.916292][T28690] netlink: 'syz.1.8846': attribute type 5 has an invalid length.
[  432.046360][T28700] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.049751][T28700] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.165579][T28707] syzkaller0: entered promiscuous mode
[  432.168080][T28707] syzkaller0: entered allmulticast mode
[  432.540425][T28741] netlink: 'syz.1.8866': attribute type 2 has an invalid length.
[  432.543405][T28740] netlink: 'syz.1.8866': attribute type 2 has an invalid length.
[  432.672490][T28757] netlink: 'syz.1.8873': attribute type 30 has an invalid length.
[  432.950535][T28770] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.953962][T28770] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.989612][T28774] __nla_validate_parse: 7 callbacks suppressed
[  432.989629][T28774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8880'.
[  433.053671][T28776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8878'.
[  433.270741][T28783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8883'.
[  433.605172][T28799] openvswitch: : Dropping previously announced user features
[  434.004541][T28832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8900'.
[  434.008263][T28832] netlink: 560 bytes leftover after parsing attributes in process `syz.2.8900'.
[  434.042163][T28834] netlink: 'syz.2.8902': attribute type 5 has an invalid length.
[  434.149957][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8906'.
[  434.393173][T28864] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8913'.
[  434.450509][T28875] netlink: 'syz.0.8918': attribute type 5 has an invalid length.
[  434.616079][T28897] netlink: 'syz.0.8928': attribute type 30 has an invalid length.
[  434.674387][T28908] netlink: 'syz.1.8933': attribute type 5 has an invalid length.
[  434.712954][T28910] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8935'.
[  434.736017][T28918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8936'.
[  434.742926][T28917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8936'.
[  435.085965][T28599] smc: removing ib device !yz!
[  435.156253][T28932] syzkaller0: entered promiscuous mode
[  435.160341][T28932] syzkaller0: entered allmulticast mode
[  436.377215][T28959] openvswitch: : Dropping previously announced user features
[  437.102595][T29016] openvswitch: : Dropping previously announced user features
[  437.162832][T29022] netlink: 'syz.2.8969': attribute type 5 has an invalid length.
[  437.240392][T29028] pim6reg: entered allmulticast mode
[  437.244588][T29028] pim6reg: left allmulticast mode
[  437.636103][T29044] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  437.754733][T29049] netlink: 'syz.1.8978': attribute type 4 has an invalid length.
[  438.053988][T29070] __nla_validate_parse: 13 callbacks suppressed
[  438.053997][T29070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8984'.
[  438.218510][T29083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8990'.
[  438.525925][T29113] netlink: 'syz.1.9000': attribute type 1 has an invalid length.
[  438.845614][T29126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9005'.
[  438.862171][T29126] bridge0: port 3(team0) entered disabled state
[  438.868578][T29126] team0 (unregistering): left allmulticast mode
[  438.871323][T29126] team_slave_0: left allmulticast mode
[  438.873618][T29126] team_slave_1: left allmulticast mode
[  438.876000][T29126] bridge1: left allmulticast mode
[  438.879452][T29126] bridge0: port 3(team0) entered disabled state
[  438.887892][T29126] team_slave_0: left promiscuous mode
[  438.898572][T29126] team0 (unregistering): Port device team_slave_0 removed
[  438.901727][T29126] team_slave_1: left promiscuous mode
[  438.905532][T29126] team0 (unregistering): Port device team_slave_1 removed
[  438.910288][T29126] bridge1: left promiscuous mode
[  438.912948][T29126] team0 (unregistering): Port device bridge1 removed
[  439.661683][T29155] netlink: 'syz.1.9013': attribute type 5 has an invalid length.
[  439.855915][T29171] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  439.861949][T29173] openvswitch: : Dropping previously announced user features
[  440.036298][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9025'.
[  440.151270][T29205] lo speed is unknown, defaulting to 1000
[  440.198926][T29207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9028'.
[  440.240355][T29210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9029'.
[  440.244745][T29210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.247694][T29210] IPv6: NLM_F_CREATE should be set when creating new route
[  440.264427][T29213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9028'.
[  440.278849][T29210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9029'.
[  440.281856][T29210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9029'.
[  440.543141][T29226] x_tables: duplicate underflow at hook 3
[  440.832026][T29243] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9039'.
[  440.944425][T29255] netlink: 'syz.2.9045': attribute type 9 has an invalid length.
[  441.108773][T29278] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  441.375400][T29304] netlink: 'syz.1.9063': attribute type 12 has an invalid length.
[  441.564325][T29321] bond8: entered promiscuous mode
[  441.565970][T29321] bond8: entered allmulticast mode
[  441.570438][T29321] 8021q: adding VLAN 0 to HW filter on device bond8
[  441.639496][T29328] netlink: 'syz.1.9072': attribute type 12 has an invalid length.
[  441.750100][T29333] blkio.reset_stats is deprecated
[  441.764450][T29333] pim6reg0: tun_chr_ioctl cmd 1074025677
[  441.766994][T29333] pim6reg0: linktype set to 773
[  441.957275][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  442.122925][T29350] netlink: 'syz.2.9079': attribute type 5 has an invalid length.
[  442.295583][T29361] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  442.322096][T29361] IPv6: sit9: Disabled Multicast RS
[  442.324953][T29361] sit9: entered allmulticast mode
[  442.420048][T29373] openvswitch: : Dropping previously announced user features
[  442.638425][T29394] bond0: ARP target 170.170.170.170 is already present
[  442.641277][T29394] bond0: option arp_ip_target: invalid value (2863311530)
[  442.739420][T29406] netlink: 'syz.0.9100': attribute type 5 has an invalid length.
[  443.024559][T29423] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  443.094884][T29427] netlink: 'syz.1.9107': attribute type 5 has an invalid length.
[  443.132741][T29429] pim6reg0: tun_chr_ioctl cmd 1074025677
[  443.135174][T29429] pim6reg0: linktype set to 773
[  443.326438][T29440] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  443.353134][T29443] netlink: 'syz.1.9114': attribute type 5 has an invalid length.
[  443.491842][T29453] __nla_validate_parse: 11 callbacks suppressed
[  443.491852][T29453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9118'.
[  443.712909][T29466] netlink: 'syz.0.9121': attribute type 5 has an invalid length.
[  443.751483][T29458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9119'.
[  444.439242][T29483] tap0: tun_chr_ioctl cmd 1074025676
[  444.441031][T29483] tap0: owner set to 0
[  444.646603][T29494] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  444.681850][T29474] syz.0.9124 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=3, oom_score_adj=1000
[  444.686740][T29474] CPU: 1 UID: 0 PID: 29474 Comm: syz.0.9124 Not tainted syzkaller #0 PREEMPT(full) 
[  444.686760][T29474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  444.686767][T29474] Call Trace:
[  444.686775][T29474]  <TASK>
[  444.686782][T29474]  dump_stack_lvl+0xe8/0x150
[  444.686805][T29474]  dump_header+0xd3/0x4c0
[  444.686823][T29474]  oom_kill_process+0x3ab/0x970
[  444.686840][T29474]  out_of_memory+0x106c/0x1410
[  444.686852][T29474]  ? percpu_ref_put+0x19/0x180
[  444.686865][T29474]  ? __pfx___mutex_lock+0x10/0x10
[  444.686882][T29474]  ? __pfx_out_of_memory+0x10/0x10
[  444.686893][T29474]  ? do_raw_spin_unlock+0x4d/0x210
[  444.686912][T29474]  try_charge_memcg+0xc53/0x1560
[  444.686939][T29474]  ? __pfx_try_charge_memcg+0x10/0x10
[  444.686964][T29474]  ? rcu_read_unlock+0x4a/0x60
[  444.686985][T29474]  obj_cgroup_charge_pages+0x1e/0xa0
[  444.687004][T29474]  obj_cgroup_charge_account+0xcf/0x650
[  444.687024][T29474]  ? obj_cgroup_charge_account+0x13b/0x650
[  444.687044][T29474]  __memcg_slab_post_alloc_hook+0x5f8/0xa80
[  444.687096][T29474]  __kmalloc_node_track_caller_noprof+0x539/0x7b0
[  444.687114][T29474]  ? copy_array+0x71/0x100
[  444.687126][T29474]  ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0
[  444.687140][T29474]  ? copy_array+0x71/0x100
[  444.687159][T29474]  krealloc_node_align_noprof+0x1ae/0x390
[  444.687173][T29474]  ? __kmalloc_cache_noprof+0x31c/0x660
[  444.687189][T29474]  copy_array+0x71/0x100
[  444.687203][T29474]  copy_verifier_state+0x997/0xf90
[  444.687223][T29474]  do_check+0x5e28/0x10670
[  444.687286][T29474]  ? __pfx_do_check+0x10/0x10
[  444.687308][T29474]  do_check_common+0x1a95/0x2680
[  444.687340][T29474]  bpf_check+0x5f3e/0x1ce00
[  444.687360][T29474]  ? __lock_acquire+0x6b5/0x2cf0
[  444.687378][T29474]  ? __lock_acquire+0x6b5/0x2cf0
[  444.687405][T29474]  ? __mutex_trylock_common+0x158/0x260
[  444.687431][T29474]  ? __pfx___mutex_trylock_common+0x10/0x10
[  444.687453][T29474]  ? __lock_acquire+0x6b5/0x2cf0
[  444.687470][T29474]  ? css_rstat_updated+0x23a/0x530
[  444.687486][T29474]  ? __pfx_css_rstat_updated+0x10/0x10
[  444.687499][T29474]  ? pcpu_alloc_noprof+0xe8f/0x19c0
[  444.687517][T29474]  ? __lock_acquire+0x6b5/0x2cf0
[  444.687541][T29474]  ? __pfx_bpf_check+0x10/0x10
[  444.687555][T29474]  ? pcpu_memcg_post_alloc_hook+0x77/0x580
[  444.687567][T29474]  ? pcpu_memcg_post_alloc_hook+0x44a/0x580
[  444.687589][T29474]  ? ktime_get_with_offset+0x93/0x2a0
[  444.687608][T29474]  ? ktime_get_with_offset+0x93/0x2a0
[  444.687650][T29474]  ? __asan_memset+0x22/0x50
[  444.687668][T29474]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  444.687683][T29474]  ? security_bpf_prog_load+0x125/0x3c0
[  444.687701][T29474]  bpf_prog_load+0x1484/0x1ae0
[  444.687732][T29474]  ? __pfx_bpf_prog_load+0x10/0x10
[  444.687748][T29474]  ? futex_wait+0x29a/0x380
[  444.687782][T29474]  ? bpf_lsm_bpf+0x9/0x20
[  444.687796][T29474]  ? security_bpf+0x7e/0x2d0
[  444.687811][T29474]  __sys_bpf+0x618/0x950
[  444.687830][T29474]  ? __pfx___sys_bpf+0x10/0x10
[  444.687860][T29474]  ? __fget_files+0x2a/0x420
[  444.687880][T29474]  ? rcu_is_watching+0x15/0xb0
[  444.687904][T29474]  __x64_sys_bpf+0x7c/0x90
[  444.687921][T29474]  do_syscall_64+0x14d/0xf80
[  444.687933][T29474]  ? trace_irq_disable+0x3b/0x150
[  444.687950][T29474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.687966][T29474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.687979][T29474] RIP: 0033:0x7f030939c799
[  444.687992][T29474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.688004][T29474] RSP: 002b:00007f03075f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  444.688018][T29474] RAX: ffffffffffffffda RBX: 00007f0309616090 RCX: 00007f030939c799
[  444.688027][T29474] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  444.688034][T29474] RBP: 00007f0309432bd9 R08: 0000000000000000 R09: 0000000000000000
[  444.688041][T29474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.688049][T29474] R13: 00007f0309616128 R14: 00007f0309616090 R15: 00007ffdbd362f88
[  444.688070][T29474]  </TASK>
[  444.833605][T29474] memory: usage 307180kB, limit 307200kB, failcnt 10940
[  444.935268][T29474] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0
[  444.939151][T29474] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  444.942138][T29474] Memory cgroup stats for /syz0:
[  444.942426][T29474] cache 0
[  444.966158][T29474] rss 4096
[  444.974969][T29474] rss_huge 0
[  444.985565][T29474] shmem 0
[  444.986707][T29474] mapped_file 0
[  444.988508][T29474] dirty 0
[  444.989511][T29474] writeback 0
[  444.990650][T29474] workingset_refault_anon 176
[  445.010827][T29474] workingset_refault_file 1994
[  445.012567][T29474] swap 180224
[  445.019032][T29474] swapcached 405504
[  445.020804][T29474] pgpgin 470730
[  445.022002][T29474] pgpgout 470721
[  445.023210][T29474] pgfault 573726
[  445.024423][T29474] pgmajfault 191
[  445.025633][T29474] inactive_anon 0
[  445.026874][T29474] active_anon 32768
[  445.028391][T29474] inactive_file 0
[  445.029902][T29474] active_file 0
[  445.031253][T29474] unevictable 0
[  445.032457][T29474] hierarchical_memory_limit 314572800
[  445.034258][T29474] hierarchical_memsw_limit 9223372036854771712
[  445.036290][T29474] total_cache 0
[  445.037796][T29514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9138'.
[  445.037833][T29474] total_rss 4096
[  445.041259][T29514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9138'.
[  445.042469][T29474] total_rss_huge 0
[  445.046821][T29474] total_shmem 0
[  445.048235][T29474] total_mapped_file 0
[  445.049586][T29474] total_dirty 0
[  445.050856][T29474] total_writeback 0
[  445.052157][T29474] total_workingset_refault_anon 176
[  445.053972][T29474] total_workingset_refault_file 1994
[  445.055729][T29474] total_swap 180224
[  445.059045][T29474] total_swapcached 405504
[  445.060557][T29474] total_pgpgin 470730
[  445.061968][T29474] total_pgpgout 470721
[  445.063447][T29474] total_pgfault 573726
[  445.065158][T29474] total_pgmajfault 191
[  445.067235][T29474] total_inactive_anon 0
[  445.069242][T29474] total_active_anon 32768
[  445.071205][T29474] total_inactive_file 0
[  445.072588][T29474] total_active_file 0
[  445.074258][T29474] total_unevictable 0
[  445.076005][T29474] anon_cost 0
[  445.078118][T29474] file_cost 0
[  445.079762][T29474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9124,pid=29472,uid=0
[  445.087733][T29474] Memory cgroup out of memory: Killed process 29472 (syz.0.9124) total-vm:102356kB, anon-rss:1232kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  445.162565][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  445.190685][T29524] netlink: 504 bytes leftover after parsing attributes in process `syz.1.9141'.
[  445.279414][T29529] syzkaller0: entered promiscuous mode
[  445.282564][T29529] syzkaller0: entered allmulticast mode
[  445.616341][T29474] syz.0.9124 (29474) used greatest stack depth: 18080 bytes left
[  445.901225][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9159'.
[  446.087909][T29580] syzkaller0: entered promiscuous mode
[  446.089689][T29580] syzkaller0: entered allmulticast mode
[  446.205844][T29585] xt_l2tp: unknown flags: 51
[  446.292349][T29588] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  446.519122][T29607] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  446.545537][T29609] block nbd3: Unsupported socket: should be TCP or UNIX.
[  446.653449][T29623] netlink: 'syz.0.9179': attribute type 21 has an invalid length.
[  446.697407][T29628] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9181'.
[  446.815482][T29639] netlink: 'syz.1.9184': attribute type 5 has an invalid length.
[  447.027302][   T33] audit: type=1800 audit(1772933429.186:39): pid=29656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9188" name="memory.events" dev="tmpfs" ino=14831 res=0 errno=0
[  447.115669][T29651] xt_cluster: node mask cannot exceed total number of nodes
[  447.302785][T29666] netlink: 'syz.1.9194': attribute type 1 has an invalid length.
[  447.306280][T29666] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9194'.
[  447.384842][T29672] xt_hashlimit: max too large, truncated to 1048576
[  447.385499][T29673] xt_hashlimit: max too large, truncated to 1048576
[  447.656517][T29689] netlink: 'syz.2.9203': attribute type 2 has an invalid length.
[  447.730521][T29694] netlink: 'syz.1.9206': attribute type 1 has an invalid length.
[  447.749361][T29694] 8021q: adding VLAN 0 to HW filter on device bond9
[  447.752276][T29689] lo speed is unknown, defaulting to 1000
[  447.940558][T29715] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  448.203319][T29739] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  448.243315][T29742] x_tables: unsorted underflow at hook 2
[  448.243741][T29743] openvswitch: : Dropping previously announced user features
[  448.245479][T29742] siw: device registration error -23
[  448.423180][T29760] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  448.718536][T29794] netlink: 'syz.1.9243': attribute type 2 has an invalid length.
[  448.721167][T29794] netlink: 15 bytes leftover after parsing attributes in process `syz.1.9243'.
[  448.758742][T29800] netlink: 404 bytes leftover after parsing attributes in process `syz.1.9244'.
[  448.761624][T29800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9244'.
[  448.764347][T29800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9244'.
[  448.768137][T29800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9244'.
[  448.780707][T29802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9242'.
[  449.059343][T29829] netlink: 336 bytes leftover after parsing attributes in process `syz.0.9252'.
[  449.109338][T29832] lo speed is unknown, defaulting to 1000
[  449.215490][T29841] x_tables: ip6_tables: SECMARK.0 target: invalid size 264 (kernel) != (user) 256
[  449.285170][T29849] netlink: 'syz.0.9261': attribute type 5 has an invalid length.
[  449.289414][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9261'.
[  449.348806][T29853] delete_channel: no stack
[  449.408766][T29857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9264'.
[  450.017639][T29897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9281'.
[  450.304931][T29923] netlink: 'syz.0.9289': attribute type 13 has an invalid length.
[  450.307768][T29923] netlink: 'syz.0.9289': attribute type 17 has an invalid length.
[  450.310380][T29923] netlink: 'syz.0.9289': attribute type 27 has an invalid length.
[  450.407706][T29931] openvswitch: : Dropping previously announced user features
[  450.569675][T29937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  450.640523][T29939] ieee802154 phy1 wpan1: encryption failed: -22
[  450.652720][T29939] ieee802154 phy1 wpan1: encryption failed: -22
[  451.385350][T29970] netlink: 'syz.0.9306': attribute type 5 has an invalid length.
[  451.386716][T29972] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  451.444006][T29982] tls_set_device_offload_rx: netdev not found
[  451.650069][T30004] netlink: 'syz.1.9316': attribute type 5 has an invalid length.
[  451.671644][T30007] batadv_slave_1: entered promiscuous mode
[  451.680788][T30007] sctp: [Deprecated]: syz.0.9317 (pid 30007) Use of int in max_burst socket option.
[  451.680788][T30007] Use struct sctp_assoc_value instead
[  451.687979][T30006] batadv_slave_1: left promiscuous mode
[  451.705176][T30009] netlink: 'syz.2.9319': attribute type 11 has an invalid length.
[  451.723393][T30009] netlink: 'syz.2.9319': attribute type 11 has an invalid length.
[  451.728040][T30009] netlink: 'syz.2.9319': attribute type 11 has an invalid length.
[  451.820559][T30026] syzkaller0: entered promiscuous mode
[  451.822470][T30026] syzkaller0: entered allmulticast mode
[  451.864441][T30031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  451.867625][T30031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  452.360358][T30075] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  453.458073][T30099] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  454.023102][T30112] __nla_validate_parse: 19 callbacks suppressed
[  454.023119][T30112] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9357'.
[  454.030238][T30112] openvswitch: netlink: Flow key attr not present in new flow.
[  454.035636][T30112] validate_nla: 2 callbacks suppressed
[  454.035648][T30112] netlink: 'syz.2.9357': attribute type 2 has an invalid length.
[  454.153169][T30118] netlink: 'syz.2.9360': attribute type 1 has an invalid length.
[  454.156418][T30118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9360'.
[  454.227247][T30122] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9362'.
[  454.449145][T30141] syzkaller0: entered promiscuous mode
[  454.451139][T30141] syzkaller0: entered allmulticast mode
[  454.576803][T30144] dummy0: left promiscuous mode
[  454.585755][T30144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.624499][T30148] syzkaller1: entered promiscuous mode
[  454.626420][T30148] syzkaller1: entered allmulticast mode
[  454.860630][T30163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9378'.
[  455.005527][T30181] veth1: Caught tx_queue_len zero misconfig
[  455.015923][T30181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9383'.
[  455.839780][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'.
[  455.843430][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'.
[  455.846887][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'.
[  455.850275][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'.
[  455.853472][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'.
[  455.915653][T30239] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  456.093625][T30252] syzkaller0: entered promiscuous mode
[  456.095609][T30252] syzkaller0: entered allmulticast mode
[  456.620442][T30259] openvswitch: netlink: Invalid VLAN frame
[  456.718943][T30266] netlink: 'syz.0.9412': attribute type 4 has an invalid length.
[  456.747880][T30263] bond0: Device is already in use.
[  456.752191][T30263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.782325][T30268] 8021q: adding VLAN 0 to HW filter on device bond11
[  456.804135][T30268] bond11: entered allmulticast mode
[  456.890311][T30284] netlink: 'syz.2.9418': attribute type 5 has an invalid length.
[  457.088119][T30307] netlink: 'syz.1.9426': attribute type 5 has an invalid length.
[  457.155164][T30310] bond13: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  457.164141][T30310] bond13 (unregistering): Released all slaves
[  457.330952][T30328] xt_TCPMSS: Only works on TCP SYN packets
[  457.422763][T30333] lo speed is unknown, defaulting to 1000
[  457.692875][T30354] syzkaller0: entered promiscuous mode
[  457.694904][T30354] syzkaller0: entered allmulticast mode
[  458.452449][T30418] netlink: 'syz.1.9461': attribute type 5 has an invalid length.
[  459.246775][T30437] netlink: 'syz.2.9467': attribute type 9 has an invalid length.
[  459.253922][T30437] netlink: 'syz.2.9467': attribute type 11 has an invalid length.
[  459.257434][T30437] netlink: 'syz.2.9467': attribute type 12 has an invalid length.
[  459.260822][T30437] __nla_validate_parse: 8 callbacks suppressed
[  459.260836][T30437] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.9467'.
[  459.268340][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'.
[  459.353557][T30441] netlink: 'syz.2.9468': attribute type 5 has an invalid length.
[  459.741500][T30456] syzkaller0: entered promiscuous mode
[  459.743999][T30456] syzkaller0: entered allmulticast mode
[  459.951669][T30461] syzkaller0: entered promiscuous mode
[  459.954165][T30461] syzkaller0: entered allmulticast mode
[  460.090387][T30466] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  460.336433][T30482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  460.367647][T30482] nftables ruleset with unbound chain
[  460.473935][T30488] bridge0: Device is already in use.
[  460.506585][T30492] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  460.565260][T30496] delete_channel: no stack
[  460.575474][T30496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9487'.
[  460.598257][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9489'.
[  460.598400][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9487'.
[  460.713770][T30507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9491'.
[  460.722869][T30507] syzkaller1: left promiscuous mode
[  460.725103][T30507] syzkaller1: left allmulticast mode
[  460.809780][T30510] netlink: 'syz.2.9492': attribute type 1 has an invalid length.
[  460.812856][T30510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9492'.
[  460.888124][T30516] syzkaller0: entered promiscuous mode
[  460.889974][T30516] syzkaller0: entered allmulticast mode
[  462.328053][T30541] netlink: 'syz.2.9501': attribute type 1 has an invalid length.
[  462.330666][T30541] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9501'.
[  462.333554][T30541] netlink: 'syz.2.9501': attribute type 1 has an invalid length.
[  462.336153][T30541] netlink: 'syz.2.9501': attribute type 8 has an invalid length.
[  462.339283][T30541] netlink: 606 bytes leftover after parsing attributes in process `syz.2.9501'.
[  462.343818][T30541] netlink: 'syz.2.9501': attribute type 1 has an invalid length.
[  462.346533][T30541] netlink: 'syz.2.9501': attribute type 6 has an invalid length.
[  462.472535][T30554] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  484.411589][T30584] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  484.639127][T30606] lo speed is unknown, defaulting to 1000
[  484.678350][T30609] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  484.682672][T30609] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001
[  485.065434][T30617] openvswitch: netlink: IP tunnel dst address not specified
[  485.128711][T30621] delete_channel: no stack
[  485.170257][T30623] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9529'.
[  485.212617][T30625] openvswitch: netlink: Missing key (keys=40, expected=80)
[  485.273456][T30626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9530'.
[  485.371155][T30634] validate_nla: 1 callbacks suppressed
[  485.371174][T30634] netlink: 'syz.2.9533': attribute type 21 has an invalid length.
[  485.377800][T30634] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9533'.
[  485.380870][T30634] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9533'.
[  485.419913][T30633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9534'.
[  485.461285][T30649] delete_channel: no stack
[  485.556636][T30651] netlink: 'syz.1.9539': attribute type 10 has an invalid length.
[  485.592037][T30666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9543'.
[  485.611398][T30666] netlink: 'syz.2.9543': attribute type 1 has an invalid length.
[  485.613990][T30666] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9543'.
[  485.656430][T30671] netlink: 'syz.1.9545': attribute type 21 has an invalid length.
[  485.661854][T30671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9545'.
[  485.665690][T30671] netlink: 'syz.1.9545': attribute type 1 has an invalid length.
[  485.959760][T30697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9554'.
[  485.978593][T30699] sctp: [Deprecated]: syz.0.9555 (pid 30699) Use of int in maxseg socket option.
[  485.978593][T30699] Use struct sctp_assoc_value instead
[  486.008916][T30702] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  486.059997][T30708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9558'.
[  486.181482][T30715] syzkaller0: entered promiscuous mode
[  486.183967][T30715] syzkaller0: entered allmulticast mode
[  486.233862][T30717] xt_ecn: cannot match TCP bits for non-tcp packets
[  486.503585][T30749] netlink: 'syz.0.9573': attribute type 2 has an invalid length.
[  486.511291][T30749] netlink: 'syz.0.9573': attribute type 2 has an invalid length.
[  486.513870][T30749] !9: left promiscuous mode
[  486.699692][T30773] netlink: 'syz.1.9578': attribute type 1 has an invalid length.
[  486.738820][T30773] gretap2: entered allmulticast mode
[  486.766824][T30773] bond10: (slave gretap2): making interface the new active one
[  486.770570][T30773] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  487.125991][T30829] SET target dimension over the limit!
[  487.252145][T30853] wg1 speed is unknown, defaulting to 1000
[  487.254160][T30853] wg1 speed is unknown, defaulting to 1000
[  487.256483][T30853] wg1 speed is unknown, defaulting to 1000
[  487.269516][T30853] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  487.291778][T30853] wg1 speed is unknown, defaulting to 1000
[  487.294531][T30853] wg1 speed is unknown, defaulting to 1000
[  487.298500][T30853] wg1 speed is unknown, defaulting to 1000
[  487.299208][T30857] batadv_slave_0: Caught tx_queue_len zero misconfig
[  487.389636][T30869] netlink: 'syz.1.9612': attribute type 1 has an invalid length.
[  487.397964][T30869] netlink: 'syz.1.9612': attribute type 2 has an invalid length.
[  487.605231][T30897] lo speed is unknown, defaulting to 1000
[  487.615048][T30890] syzkaller1: entered promiscuous mode
[  487.619074][T30890] syzkaller1: entered allmulticast mode
[  487.693573][T30897] wg1 speed is unknown, defaulting to 1000
[  487.869836][T30915] macvlan0: entered allmulticast mode
[  487.871700][T30915] hsr0: entered allmulticast mode
[  487.873410][T30915] hsr_slave_0: entered allmulticast mode
[  487.875290][T30915] hsr_slave_1: entered allmulticast mode
[  487.968379][T30926] xt_CT: You must specify a L4 protocol and not use inversions on it
[  488.021892][T30930] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  488.025390][T30930] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.054265][T30937] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  488.200146][T30956] pim6reg: entered allmulticast mode
[  488.202050][T30955] pim6reg: left allmulticast mode
[  488.313521][T30969] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  488.342181][T30972] x_tables: ip6_tables: TRACE target: only valid in raw table, not GPL
[  488.374492][T30976] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  489.161528][T31011] lo speed is unknown, defaulting to 1000
[  489.254635][T31011] wg1 speed is unknown, defaulting to 1000
[  489.346894][T31021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.391667][T31023] syzkaller1: entered promiscuous mode
[  489.393454][T31023] syzkaller1: entered allmulticast mode
[  489.496764][T31032] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  489.742512][T31047] Cannot find set identified by id 65534 to match
[  490.012034][T31054] openvswitch: netlink: Missing valid actions attribute.
[  490.017658][T31054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.104458][T31094] syzkaller0: entered promiscuous mode
[  491.106750][T31094] syzkaller0: entered allmulticast mode
[  491.141640][T31096] __nla_validate_parse: 13 callbacks suppressed
[  491.141705][T31096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9680'.
[  491.187846][T31098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9681'.
[  491.592434][T31118] lo speed is unknown, defaulting to 1000
[  491.670482][T31118] wg1 speed is unknown, defaulting to 1000
[  492.004740][T31125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9690'.
[  492.014947][T31130] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6erspan0, syncid = 2, id = 0
[  492.162831][T31138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9694'.
[  492.175411][T31138] ..0{X: left allmulticast mode
[  492.328048][T31158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9700'.
[  492.376139][T31161] bond0: Device is already in use.
[  492.378787][T31160] bond0: Device is already in use.
[  492.425094][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849208
[  492.432103][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849207
[  492.436696][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849206
[  492.440793][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849205
[  492.443764][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849208
[  492.446725][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849207
[  492.449935][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849206
[  492.452680][T31168] tipc: Failed to remove unknown binding: 66,0,0/2067526953:14849204/14849205
[  492.463161][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9705'.
[  492.572504][T31180] validate_nla: 3 callbacks suppressed
[  492.572517][T31180] netlink: 'syz.1.9710': attribute type 5 has an invalid length.
[  492.685549][T31199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9714'.
[  492.690839][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9714'.
[  492.744957][T31188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9712'.
[  492.875214][T31210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.882176][T31212] sctp: [Deprecated]: syz.2.9718 (pid 31212) Use of struct sctp_assoc_value in delayed_ack socket option.
[  492.882176][T31212] Use struct sctp_sack_info instead
[  492.952966][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9720'.
[  493.182048][T31236] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  493.196128][T31239] netlink: 'syz.1.9727': attribute type 5 has an invalid length.
[  493.557554][T31270] netlink: 'syz.0.9737': attribute type 5 has an invalid length.
[  494.256016][T31336] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  494.337586][T31343] netlink: 'syz.2.9764': attribute type 1 has an invalid length.
[  494.340202][T31343] netlink: 'syz.2.9764': attribute type 2 has an invalid length.
[  494.342649][T31343] netlink: 'syz.2.9764': attribute type 1 has an invalid length.
[  494.375787][T31337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.699927][T31373] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  495.248367][T31429] netlink: 'syz.0.9785': attribute type 1 has an invalid length.
[  495.590001][T31485] lo speed is unknown, defaulting to 1000
[  495.597729][T31484] lo speed is unknown, defaulting to 1000
[  495.721522][T31485] wg1 speed is unknown, defaulting to 1000
[  495.840068][T31484] wg1 speed is unknown, defaulting to 1000
[  495.874072][T31500] sctp: [Deprecated]: syz.0.9803 (pid 31500) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.874072][T31500] Use struct sctp_sack_info instead
[  496.387803][T31515] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  496.396805][T31515] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  497.753858][T31586] __nla_validate_parse: 17 callbacks suppressed
[  497.753869][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9832'.
[  497.803267][T31586] netlink: 788 bytes leftover after parsing attributes in process `syz.0.9832'.
[  497.879131][T31603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9839'.
[  497.879540][T31602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9837'.
[  497.989803][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9842'.
[  498.110198][T31625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9846'.
[  498.123393][T31625] macvlan3: entered promiscuous mode
[  498.209900][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9850'.
[  498.234532][T31637] netpci0: tun_chr_ioctl cmd 1074025678
[  498.236587][T31637] netpci0: group set to 0
[  498.245741][T31637] sctp: [Deprecated]: syz.2.9852 (pid 31637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  498.245741][T31637] Use struct sctp_sack_info instead
[  498.485490][T31662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4
[  498.519547][ T5869] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  498.558275][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9863'.
[  498.561391][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9863'.
[  498.565963][T31675] netlink: 'syz.2.9863': attribute type 7 has an invalid length.
[  498.569647][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9863'.
[  498.573129][T31675] netlink: 'syz.2.9863': attribute type 7 has an invalid length.
[  498.607364][T30575] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  498.647392][ T5869] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  498.904087][T31709] batman_adv: batadv0: Adding interface: gretap3
[  498.906391][T31709] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568.
[  498.926594][T31709] batman_adv: batadv0: Interface activated: gretap3
[  499.021856][T31717] netlink: 'syz.2.9880': attribute type 5 has an invalid length.
[  499.284139][T31745] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  499.637947][ T5699] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  499.640992][ T5699] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  499.699363][T31781] openvswitch: : Dropping previously announced user features
[  499.780749][T31788] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  500.022380][T31800] openvswitch: netlink: Flow actions attr not present in new flow.
[  500.333420][T31806] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  500.473197][T31819] netlink: 'syz.0.9916': attribute type 5 has an invalid length.
[  500.610054][ T5869] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  500.619186][T31840] netlink: 'syz.1.9925': attribute type 5 has an invalid length.
[  500.780531][T31855] openvswitch: : Dropping previously announced user features
[  501.130538][T31876] lo speed is unknown, defaulting to 1000
[  501.214657][T31876] wg1 speed is unknown, defaulting to 1000
[  501.477301][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  501.664846][T31885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.704415][T31885] syzkaller0: entered promiscuous mode
[  501.710773][T31885] syzkaller0: entered allmulticast mode
[  501.717668][T31885] tipc: Resetting bearer <eth:syzkaller0>
[  501.978229][T31899] pimreg: tun_chr_ioctl cmd 1074025677
[  501.980489][T31899] pimreg: linktype set to 774
[  502.545637][T31884] tipc: Resetting bearer <eth:syzkaller0>
[  502.588937][T31922] netlink: 'syz.2.9952': attribute type 5 has an invalid length.
[  503.807320][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  503.949812][T31884] tipc: Disabling bearer <eth:syzkaller0>
[  503.956148][T31917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.962137][T31934] __nla_validate_parse: 78 callbacks suppressed
[  503.962146][T31934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9956'.
[  504.045738][T31951] syzkaller1: left promiscuous mode
[  504.047645][T31951] syzkaller1: left allmulticast mode
[  504.158300][T31960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9964'.
[  504.193538][T31965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9966'.
[  504.209806][T31965] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  504.231520][T31960] lo speed is unknown, defaulting to 1000
[  504.282209][T31969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  504.284571][T31969] IPv6: NLM_F_CREATE should be set when creating new route
[  504.313125][T31972] bond13: option primary_reselect: invalid value (4)
[  504.316319][T31972] bond13 (unregistering): Released all slaves
[  504.353720][T31960] wg1 speed is unknown, defaulting to 1000
[  504.426107][T31981] syzkaller1: entered promiscuous mode
[  504.432901][T31981] syzkaller1: entered allmulticast mode
[  504.482914][T31981] bridge0: entered allmulticast mode
[  504.724771][T32006] lo speed is unknown, defaulting to 1000
[  504.865608][T32006] wg1 speed is unknown, defaulting to 1000
[  505.173334][T32043] openvswitch: netlink: IP tunnel dst address not specified
[  505.177554][T32048] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  505.402785][T32068] openvswitch: : Dropping previously announced user features
[  505.483569][T32079] lo speed is unknown, defaulting to 1000
[  505.572847][T32079] wg1 speed is unknown, defaulting to 1000
[  505.575297][T32090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10009'.
[  505.822526][T32109] openvswitch: : Dropping previously announced user features
[  505.931703][T32117] hsr0: left allmulticast mode
[  505.933525][T32117] hsr_slave_0: left allmulticast mode
[  505.935550][T32117] hsr_slave_1: left allmulticast mode
[  505.945745][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10016'.
[  505.989450][T32119] syzkaller1: entered promiscuous mode
[  505.994376][T32119] syzkaller1: entered allmulticast mode
[  506.065786][T32125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10020'.
[  506.311398][T32139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10024'.
[  506.314921][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10024'.
[  506.318685][T32139] netlink: 'syz.2.10024': attribute type 13 has an invalid length.
[  506.321424][T32139] netlink: 'syz.2.10024': attribute type 11 has an invalid length.
[  506.600901][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  509.134974][T32148] netlink: 'syz.0.10028': attribute type 5 has an invalid length.
[  509.151652][T32150] ip6gretap0: refused to change device tx_queue_len
[  509.199192][T32155] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  509.274945][T32164] netlink: 'syz.2.10032': attribute type 1 has an invalid length.
[  509.278925][T32162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10035'.
[  509.282108][T32162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10035'.
[  509.399757][T32172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10038'.
[  509.402817][T32172] netlink: 'syz.1.10038': attribute type 7 has an invalid length.
[  509.405266][T32172] netlink: 'syz.1.10038': attribute type 8 has an invalid length.
[  509.414001][T32172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10038'.
[  509.563020][T32188] netlink: 'syz.1.10044': attribute type 5 has an invalid length.
[  509.606663][T32194] SET target dimension over the limit!
[  509.717750][T32202] syzkaller1: left promiscuous mode
[  509.721795][T32202] syzkaller1: left allmulticast mode
[  510.225482][T32236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  510.251623][T32236] bond0: Device is already in use.
[  510.271138][T32239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10063'.
[  510.425422][T32246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10066'.
[  510.865654][T32260] openvswitch: : Dropping previously announced user features
[  511.134415][T32280] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  511.561332][T32298] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10084'.
[  511.575863][T32298] netlink: 'syz.2.10084': attribute type 3 has an invalid length.
[  511.656934][T32294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  511.658691][T32306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10087'.
[  511.688614][T32306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10087'.
[  511.900450][T32334] pimreg: tun_chr_ioctl cmd 1074025677
[  511.902958][T32334] pimreg: linktype set to 774
[  512.037855][T32342] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  512.040847][T32342] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  512.188722][T32354] nbd: couldn't find a device at index 0
[  512.299718][T32367] netlink: 'syz.0.10104': attribute type 21 has an invalid length.
[  512.303283][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10104'.
[  512.358673][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  512.382129][T32372] IPv6: NLM_F_CREATE should be specified when creating new route
[  512.562133][T32389] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  512.760245][T32406] netlink: 'syz.2.10119': attribute type 5 has an invalid length.
[  512.977026][T32426] netlink: 'syz.1.10125': attribute type 4 has an invalid length.
[  513.003481][T32426] netlink: 'syz.1.10125': attribute type 4 has an invalid length.
[  513.003524][T32424] syzkaller1: tun_chr_ioctl cmd 3223873039
[  513.010434][T32429] syzkaller1: tun_chr_ioctl cmd 3223873039
[  513.014567][T32424] syzkaller1: tun_chr_ioctl cmd 1074025677
[  513.017283][T32424] syzkaller1: linktype set to 260
[  513.019555][T32429] syzkaller1: tun_chr_ioctl cmd 1074025677
[  513.025559][T32426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.029866][T32429] syzkaller1: linktype set to 260
[  513.303614][T32455] ksmbd: Unknown IPC event: 0, ignore.
[  513.489036][T32471] geneve5: entered promiscuous mode
[  513.598426][T32481] openvswitch: : Dropping previously announced user features
[  513.665556][T32486] netlink: 'syz.2.10149': attribute type 5 has an invalid length.
[  513.766345][T32492] xt_hashlimit: size too large, truncated to 1048576
[  514.152552][T32523] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  514.209539][T32527] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  514.347782][T32542] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  514.352874][T32544] __nla_validate_parse: 9 callbacks suppressed
[  514.352889][T32544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10172'.
[  514.360914][T32544] openvswitch: netlink: Flow key attr not present in new flow.
[  514.380349][T32547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10175'.
[  514.615678][T32557] lo speed is unknown, defaulting to 1000
[  514.648711][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10180'.
[  514.781747][T32568] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  514.832443][T32557] wg1 speed is unknown, defaulting to 1000
[  514.865985][T32579] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10185'.
[  515.057268][T32591] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  515.091063][T32597] netlink: 'syz.2.10192': attribute type 5 has an invalid length.
[  515.102774][T32595] netlink: 'syz.0.10190': attribute type 39 has an invalid length.
[  515.170748][T32604] netlink: 'syz.1.10191': attribute type 4 has an invalid length.
[  516.008055][T32638] netlink: 'syz.1.10203': attribute type 1 has an invalid length.
[  516.011248][T32638] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10203'.
[  516.063211][T32640] sctp: [Deprecated]: syz.1.10203 (pid 32640) Use of int in max_burst socket option.
[  516.063211][T32640] Use struct sctp_assoc_value instead
[  516.227806][T32647] 
[  516.228901][T32647] ======================================================
[  516.231614][T32647] WARNING: possible circular locking dependency detected
[  516.234524][T32647] syzkaller #0 Not tainted
[  516.236535][T32647] ------------------------------------------------------
[  516.239399][T32647] syz.1.10206/32647 is trying to acquire lock:
[  516.241954][T32647] ffffffff8fd48fd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  516.245696][T32647] 
[  516.245696][T32647] but task is already holding lock:
[  516.248684][T32647] ffff888166b17b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  516.252432][T32647] 
[  516.252432][T32647] which lock already depends on the new lock.
[  516.252432][T32647] 
[  516.256498][T32647] 
[  516.256498][T32647] the existing dependency chain (in reverse order) is:
[  516.260161][T32647] 
[  516.260161][T32647] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  516.263401][T32647]        _raw_spin_lock_bh+0x36/0x50
[  516.265535][T32647]        nr_rt_device_down+0x153/0x860
[  516.267258][T32647]        nr_device_event+0x137/0x150
[  516.269238][T32647]        notifier_call_chain+0x1be/0x400
[  516.271082][T32647]        netif_close_many+0x2ae/0x420
[  516.273208][T32647]        netif_close+0x160/0x220
[  516.275230][T32647]        dev_close+0x10a/0x220
[  516.277201][T32647]        bpq_device_event+0x377/0x6a0
[  516.279391][T32647]        notifier_call_chain+0x1be/0x400
[  516.281669][T32647]        netif_close_many+0x2ae/0x420
[  516.283836][T32647]        netif_close+0x160/0x220
[  516.285855][T32647]        dev_close+0x10a/0x220
[  516.287904][T32647]        bond_setup_by_slave+0x5f/0x3d0
[  516.290091][T32647]        bond_enslave+0x847/0x3c40
[  516.292225][T32647]        bond_do_ioctl+0x6ec/0x8d0
[  516.294156][T32647]        bond_siocdevprivate+0x19c/0x1f0
[  516.295972][T32647]        dev_ifsioc+0xba6/0x1280
[  516.297620][T32647]        dev_ioctl+0x84c/0x1150
[  516.299220][T32647]        sock_ioctl+0x75f/0x7f0
[  516.300985][T32647]        __se_sys_ioctl+0xfc/0x170
[  516.302705][T32647]        do_syscall_64+0x14d/0xf80
[  516.304432][T32647]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.306518][T32647] 
[  516.306518][T32647] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  516.309078][T32647]        _raw_spin_lock_bh+0x36/0x50
[  516.310893][T32647]        nr_rt_device_down+0xbe/0x860
[  516.312729][T32647]        nr_device_event+0x137/0x150
[  516.314618][T32647]        notifier_call_chain+0x1be/0x400
[  516.316453][T32647]        netif_close_many+0x2ae/0x420
[  516.318268][T32647]        netif_close+0x160/0x220
[  516.319917][T32647]        dev_close+0x10a/0x220
[  516.321628][T32647]        bpq_device_event+0x377/0x6a0
[  516.323413][T32647]        notifier_call_chain+0x1be/0x400
[  516.325290][T32647]        netif_close_many+0x2ae/0x420
[  516.327036][T32647]        netif_close+0x160/0x220
[  516.328909][T32647]        dev_close+0x10a/0x220
[  516.330722][T32647]        bond_setup_by_slave+0x5f/0x3d0
[  516.332509][T32647]        bond_enslave+0x847/0x3c40
[  516.334243][T32647]        bond_do_ioctl+0x6ec/0x8d0
[  516.336125][T32647]        bond_siocdevprivate+0x19c/0x1f0
[  516.338283][T32647]        dev_ifsioc+0xba6/0x1280
[  516.340104][T32647]        dev_ioctl+0x84c/0x1150
[  516.342006][T32647]        sock_ioctl+0x75f/0x7f0
[  516.343851][T32647]        __se_sys_ioctl+0xfc/0x170
[  516.345811][T32647]        do_syscall_64+0x14d/0xf80
[  516.347849][T32647]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.350437][T32647] 
[  516.350437][T32647] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  516.353249][T32647]        __lock_acquire+0x15a5/0x2cf0
[  516.355403][T32647]        lock_acquire+0xf0/0x2e0
[  516.357337][T32647]        _raw_spin_lock_bh+0x36/0x50
[  516.359370][T32647]        nr_rt_ioctl+0x40c/0xf90
[  516.361273][T32647]        sock_do_ioctl+0x101/0x320
[  516.363234][T32647]        sock_ioctl+0x5c6/0x7f0
[  516.365083][T32647]        __se_sys_ioctl+0xfc/0x170
[  516.367053][T32647]        do_syscall_64+0x14d/0xf80
[  516.369082][T32647]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.371365][T32647] 
[  516.371365][T32647] other info that might help us debug this:
[  516.371365][T32647] 
[  516.374951][T32647] Chain exists of:
[  516.374951][T32647]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  516.374951][T32647] 
[  516.379480][T32647]  Possible unsafe locking scenario:
[  516.379480][T32647] 
[  516.382028][T32647]        CPU0                    CPU1
[  516.383739][T32647]        ----                    ----
[  516.385487][T32647]   lock(&nr_node->node_lock);
[  516.387084][T32647]                                lock(nr_node_list_lock);
[  516.389349][T32647]                                lock(&nr_node->node_lock);
[  516.391739][T32647]   lock(nr_neigh_list_lock);
[  516.393258][T32647] 
[  516.393258][T32647]  *** DEADLOCK ***
[  516.393258][T32647] 
[  516.395810][T32647] 2 locks held by syz.1.10206/32647:
[  516.397478][T32647]  #0: ffffffff8fd49038 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  516.400656][T32647]  #1: ffff888166b17b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  516.403912][T32647] 
[  516.403912][T32647] stack backtrace:
[  516.406162][T32647] CPU: 1 UID: 0 PID: 32647 Comm: syz.1.10206 Not tainted syzkaller #0 PREEMPT(full) 
[  516.406209][T32647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  516.406219][T32647] Call Trace:
[  516.406228][T32647]  <TASK>
[  516.406236][T32647]  dump_stack_lvl+0xe8/0x150
[  516.406260][T32647]  print_circular_bug+0x2e1/0x300
[  516.406281][T32647]  check_noncircular+0x12e/0x150
[  516.406297][T32647]  __lock_acquire+0x15a5/0x2cf0
[  516.406307][T32647]  ? kasan_save_track+0x4f/0x80
[  516.406317][T32647]  lock_acquire+0xf0/0x2e0
[  516.406325][T32647]  ? nr_rt_ioctl+0x40c/0xf90
[  516.406333][T32647]  ? nr_rt_ioctl+0x40c/0xf90
[  516.406339][T32647]  _raw_spin_lock_bh+0x36/0x50
[  516.406351][T32647]  ? nr_rt_ioctl+0x40c/0xf90
[  516.406357][T32647]  nr_rt_ioctl+0x40c/0xf90
[  516.406368][T32647]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  516.406377][T32647]  ? apparmor_capable+0x126/0x170
[  516.406390][T32647]  ? capable+0x88/0xe0
[  516.406399][T32647]  ? nr_ioctl+0x1b1/0x3b0
[  516.406408][T32647]  sock_do_ioctl+0x101/0x320
[  516.406417][T32647]  ? __pfx_sock_do_ioctl+0x10/0x10
[  516.406425][T32647]  ? do_futex+0x333/0x420
[  516.406439][T32647]  sock_ioctl+0x5c6/0x7f0
[  516.406446][T32647]  ? __pfx_sock_ioctl+0x10/0x10
[  516.406453][T32647]  ? __fget_files+0x2a/0x420
[  516.406462][T32647]  ? __fget_files+0x3a0/0x420
[  516.406470][T32647]  ? __fget_files+0x2a/0x420
[  516.406479][T32647]  ? bpf_lsm_file_ioctl+0x9/0x20
[  516.406491][T32647]  ? __pfx_sock_ioctl+0x10/0x10
[  516.406498][T32647]  __se_sys_ioctl+0xfc/0x170
[  516.406507][T32647]  do_syscall_64+0x14d/0xf80
[  516.406515][T32647]  ? trace_irq_disable+0x3b/0x150
[  516.406524][T32647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.406532][T32647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.406539][T32647] RIP: 0033:0x7fa6c1f9c799
[  516.406548][T32647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.406555][T32647] RSP: 002b:00007fa6c2e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  516.406564][T32647] RAX: ffffffffffffffda RBX: 00007fa6c2215fa0 RCX: 00007fa6c1f9c799
[  516.406578][T32647] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  516.406583][T32647] RBP: 00007fa6c2032bd9 R08: 0000000000000000 R09: 0000000000000000
[  516.406588][T32647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.406593][T32647] R13: 00007fa6c2216038 R14: 00007fa6c2215fa0 R15: 00007ffdfdf62d08
[  516.406603][T32647]  </TASK>
