last executing test programs:

1.980659002s ago: executing program 0 (id=2973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
r2 = socket(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004804)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r5, 0x5, 0x1, 0x7}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={<r7=>r5, 0x5, 0x1, 0x7}, &(0x7f00000002c0)=0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)={0x138, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000003c0)={0x6, 0x0, 0x2, 0x592, 0x5, 0x0, [{0x4, 0x1, 0x8, '\x00', 0x2}, {0x5, 0x3aed, 0x3ff}, {0x9, 0x0, 0x9, '\x00', 0x3ed8534842ace411}, {0x6, 0x70, 0x2, '\x00', 0x1003}, {0xfef1, 0x3, 0x7, '\x00', 0x300}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r7, 0x71}, 0x8)
r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendfile(r9, r13, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0)

1.827715434s ago: executing program 0 (id=2977):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000410000008500000007000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x6, 0x0, &(0x7f0000000240)="354da925f340", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r8, 0x0, 0x80, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800)
read(r2, &(0x7f0000000240)=""/233, 0xe9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$rxrpc(r7, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}})
write(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x3, &(0x7f00000001c0)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r11=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r11}, 0x14)

1.720145252s ago: executing program 2 (id=2979):
r0 = socket(0x18, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001b15fe245223b25ff7066699da867e64a8f90eeb7f0793f2676e4f8e466c66de0a0c023e7f8dc4430c8e7cc53833cd68c66ea08613b785abc34569f80634d957896c54f87d7d0d56f7732c9f46ca50d6ae35d668cb2459747fab664524189f57f7646c406136c7e51", @ANYRESDEC=r0, @ANYRES8=r0], 0x28}}, 0x4002018)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000002030106000000000000000066e693c23d06932b988adb5a0000bcadac640010080001008470043dc0e7e4fe7547390be6f571f93fde20cd4b2db324ce907fcb5d270bbf271311fba4"], 0x1c}}, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x8, 0x4)

1.549634224s ago: executing program 2 (id=2980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1c3a, r0, 0x4}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070627bd7000fcdbdf252d0000000c0005000202aaaaaaaaaaaa05002b00000000000a0001007770616e3000000008002f00000400005b81ed14f0177d91da1385803909bd984e635dbce4c99ac311a697564189b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
socket$kcm(0x29, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r6, 0x1}, 0x14}}, 0x0)
r10 = socket(0x10, 0x2, 0x8)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf678}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf799}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4d3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4014}, 0x850)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_netdev_private(r10, 0x89fe, &(0x7f0000000200)="e69d496f8debb151e1e616cfbc9604abafac08ed78fac8185046a3e2cc630c73827920633350f5b40a6d4f70926d498b6f1f728ec27d1c3df7cb")
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b18a14b2618d05fb58e9a832a4993472e5d068fe44e92676e484662a656d93a0f368c0cfc70c68459b61f194aac3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.346650554s ago: executing program 2 (id=2981):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000070000000000aaff45"], 0x82)

1.187834012s ago: executing program 2 (id=2982):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4040010)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

949.963104ms ago: executing program 0 (id=2983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x20000000}, 0x0)

949.7875ms ago: executing program 0 (id=2984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0xfeffffff}, 0x0)

890.07634ms ago: executing program 0 (id=2986):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x400400c0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xfff, &(0x7f00000022c0)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb86dd606410a60fc90000fc0200000000000000000000000000feff020000000000000000000000000001040e0000000000000102000005020001000100c910ff0100000000000000000000000000010730000000030a03040001000000000000000400000000000000090000000000000003000000000000000a00"], 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), r1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x4}, 0x18)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001004e20"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000680)="0b991263d9f5fd84cb41e72f74adfc0063db1c248c8c58d3f3b916419c9f1c82e2e1fda8afcfeb5f059a85a9110f19c71823f87d316e4a35b49f815250f14242cb427a46f36bebd12ecc1eb6fbc4ec894e4363dba187ce64d7017d8dc989a164a7a430c1ce4071279b73ca2cd07107b597a03c19bed358c4ee89033f101fe66b8f005cef68227b1cf75995e8b61a188ecba408e414e69545a45b716c4ff4b18612e8650d84fb14506047c5244f0d4c4e9bf5eb1849cbc0b605499db50a05ac450e013c4997696b15e9dbf59d9094316ec5caf8c8b8e52a686509ae0f2b473dd4cb4a89dc43d6e94d17837860ff3b902806cc6043cc5a36b959532ea1cc2f1366f7a34a0ad85ea13ab473b252ce22fc4c893f2aa7c0bef1e30410bbd897ee845b192a87c09c4dc03ca3d1edf72ae427b9aa034eea9fdcc4c0d6516ed5e4d0154c2644c84e7d87553be355735661368a39dc6c093eef0672b047209569124cba564b1a345530cba29f12b723323a1e6a684d398273b3e4b575152dd9bc7b2ad04ff6178d4eea7bac9c678b294ac48f8af89f64264f244bed044881b868e2906e4cd253fa6829d2922769c8fbda7975606d5b095904cb8038226de51e059bc57db3fba4abc9e16f4e5c660e633e8a2f1a20b090df059f52b89409fec363c4234213a4eccdaa1178e05e343e71390dd3a331e10cc0b457e75478f84cd32b7e4045c38305eae169dbc21384724ba90999c1a8d1f3feee3ddfccc1784802801b099b74affd22c1a3b5831c3db8b90af730c8fb97985c98b84e1a9638257552937faa810d1de8af68cd8087f9ba11f4a6bdc9b13eb31e05912dd820edfd88db47749795d3eecfe233ec8a3ef22e500a170e4c1d31673ec1e1889e965829f8c0d156a04c494be232429f44ba0f9ad7ebcc94f2e872ef94bebd34b0613be8de793b07d1563a19ab19ba101c1cd06737b42cce19bd8f362e9cf0f7376a29e655c5631bd907128bca27453da7d3963712ee76a37a155438bd6a9d39343ce56a4e735e719ba9210d8047281a6eafee9fe6797edcb20db8add1e190a6bd85b9a6aac02dbe5ab619471945af6c38b5c0bd712338ca8fe0b86e1e33ac2a91c75c212856afb5dfd0aa0e3d9657a9f5b69d6ee592144d77603ea8c6daa6cd1de826ebc7e451350593462074a06ea19c3219b086748d24a8b04e6d60b50a9f86d9da275cdd24ba23c05588bef76432678c949f4f57fd44c020d4fd9690a125d08f4eae07e7f89b6a6548b928db0ea1c54167452023a4f8104b509835810e075f1b0c7e70bbbbe2e1182d3a3e1246136f94b7af3e3fb0c640aec243579a202dc1643d65d04900e62465d7c38b5f6792964a214c188fe3cd83274095ff7e0cfab3bd016ff48d1947f2712ce187a7e54ad69bc80fb51202e9693a0e475ca493161eb631a707c909ed288561b315fab423cd264db58024368d2bb5bf734ce5c5e88ea59adec30ce8b67e8b856337ffa3fb86f8d5bf60b285c9d590608913dce8103effb560d1a9b656611c4d0b52d753862c52279725d4b8f566e6a007d5cc88c31a947feddc04b4d3e72bb6384fca90ccb30b4b25d16577e563f5b35377fbd731f4e0d5961f6b6199b86f1df7be394624410d4707b8fe18c09701fea551e02a2938fd67dd98b4a24e7a1d6839479e4f8e8e59d51e73177984931fcc4b40cf3f1e335c91408a86b3475c139c92268b87ab6bb4938d6fe7584d0456cc16846ce70528ef731a0deae6831acd7222c7411e50b5c258d85bc1220b306560c1a044dc96ac1284a689f11ad43fa354ba6117b5af32ef1e695b349823abb7bb904f05f1ec8ef60da37ae33f0f953e418a9b91236dbb24ddadcc3ab063cbd2c342cdd539d7376c632333bf232173f79de0d13cf657c02d9e9cda5086696319ca1eede37d100be6f8d258539212ab802eba4d8438c078da52f01015ce44b49f99d46bfcf42293102d747b801a56b60d03f0eacfa5cce8914eba2933b8d8faf618e3d26507640d67f90fec0a331d54de227345c082c65c52aeed5125d84bffc88bc9ee523ed568688132fb97d19c44e9a78a43a501a6abc8fce19788cb736831113323c8b0573ab9629a756882c2b34d0ff4f2930eac478f35943db2e3f6ce6b65a8a4d6487e6bc241c89416a303245da09ed3e6574b2a63c1c3e539b75b8302e7ac54814477137055eeb25b1bbc88837b47efb6988736af4326335eb1c237d6d34009a78cd72abd94d23be681a3d4f8b44aeab31f0f72007b183636a88c5c823ff9856452150ef1d4a665e33daeeec5cde018a2074b37599b79f68ee0bec86bf37aa0136cc66513b915fdf9cb4dcf3903d1d40ef77b1b69cf8e26014af0e6179717cdd2e0e3cb9df11f64df8a19f547026bbb25ec33b635ff1ee3a4ff9a04f4e6f73fce849d5bdb3f8af206f8bf76b601da947f1ef1e1b38e5397737d3492f83d1f861ad7f587805e1b4cf82183e38528d06c69ecf16582c11b988d281ac4b1f261d51cbd46aaae6dcd48e0005d1337a4ad47f364d6d741e0b4df0d9b3722f0a9e06d13058ba8bba34b4a9880146f20940d37dc2daf2ba7fec5d50ba81f135599ffb3d7bcc076aac9501019e1cc8faaf99a8228f841998396f0935df1b20835b9548fc749cb22f6a6040a500be830b03ca0103b1485042c5b2fdafd07e866aa551ce6098e954244fc165c369e76fc09f68f0bc48028eb43c08550ad5c971f927cd1a60ee62fe77e8c034d4a23bde783f76953c329a0106a39cb70ea48ee33c065f04e3935f819af08577176b6ab1b32ae337c778ffd78adcb4f9fc04aac5f108b6dd689a2b1010e280ad3b2c9334296e927ee2be7bf87d53b874f04d11b7afb69fa3574cdfa595f91ad25ccab7cf8e724382258e31998589cbef2212b00269f0193ff86c9cc3f5873dc4cb1aae020ca7aec866fbab053a49d3ad4150ce8458053b7d5e73468698d41732d58cd5c6c23498c93c2840450ab3f0703f310b037f5539d70caa66304db4c2a063761150fa8d38d3ae712732ee3ba8c3dc1ab8eea185c912255b227f5591a0d8af5ba8f6be1f145d37e90c545856a30740ef9d64cd04a0037979babe68015fb6bd250318fd3dd6784c51e582f6397c33af6d77f40267d7dcda5d83792e4109eafad9937b300a07d9256846c51b428ffe652357e170fac4e46e93ef41031c3c9486b0d19e662e15f7cce04bd1bd19c4e0c1ea2b04adaaeb6face0eb35d79f5a067d91ec7627d66242021a78430587e75522567af71dedf6306a6f53ef5d7e28ec4ebe1a1b6277995131d77aa80cdab0b4fc9e63cd85de900065d654131b2c0e933f598ef6e6d50c021c2d99aea2ba9da005573910d5f841fa950082eb3bd7887e7035124e8dca29a91d5a17da5e4902b37a26e8305b88841a03f73bb2fd22f0425bed51aae7e25946e4f05ddcff31ff0183315cde505e1a51c903e07700fd67b4955da8880466acc292fd9352e7c70a8595d84586649276c2ecd91404fd667a11445de08307cc78db8e22bdd64ed14eb9cb796ffe1091d868620ebc6b14eca853585c932880e9eb812c7122938d1b71477a5022dac6233886d62fdec3ca7d5ea992fdc8a334243027a236f1f1d9644658bafc75187c76db55e551ac03338b0f0eb09d182e21f125bdb95a36eecc127824f0f9840b14195501eb5cf79b9a8d77fbd19fd29d3c285d72bee1dec166d390fee051113ebd8688634efbd32f97cd9cea7acd26b793197a6778c69a0864f7b6ba8120377c3e96fa2215ba2e0d619c0dcdde1828f4e80a40fb15bf0c75fcc0d031931a71b9b0236fb7ba2b76e6b10664c49e68f82f02e927467a0948fb2af16d96f5a06117ed4e3db97cf93dd107aa677dfbb7393013ad662534041c0230962a563c0d4c8208d0ee9e26b0920367efb9ee1564602e1d34ef00417e5304c1c7e3f932e5b1502d20fd54fae72f8aa4dcd23e6c7d6920089c9b84e8bbb2c4fd36b0fe070ae1cb1b0c011a8525b01042e35f41324e77b522745ff0be2c26b755b3797432188e8918e6e5845198ab39fb08a70ed5d287ea393a0111e2373ea4b55f7e39e60c9470381787fa63aa17b650c0da0e90ccc749051fd88a8db74ed8b77f12bf40e5b434a58959e4c6dcb5e7869de40568ab3ba9f3d7f83bf980523ae82240fa6c31e5bed3780ab6d179c21791fb640f9b1211589ebc258be543ca29914eb67a2bc789de1754d3bc470cf474c2b36fdddc07eefee216f75b1384d38c1a0a6dd194e3f794c8a7c77a1c6fb7192520e876339da834746217c39e749d913566f14d2f6242b08c2796b81431f553f2397c8956eb7db5b6d9f380429e3a0741af526806a203cdb28f6f786dfcc0b03b7757f55be78de99783e79f3d32fbfef181ad2abaa23c8846faecb1ff7a973b940e16d1c0c5310f72f46811f5743c28556c40116ef8ad5e0d71b0e731c0faf92203f91137aeafd8a4783f3a3155abf12aa719850b05e533cfd075bdec29ca7263b68dd34c5903e635cb37034f0dbb81f9feb2e4fefca65fb348e9e398f12bfcc8602e129a3edf11d720fac998b03b38eb32fa4450bc50ceef272f7487c87361e72e392137428f1cf791bc5c72d105597c897df10e13741d85ec390d053182351827d84be9bdd8df9f0992dd2918d5b3e9f5627b90b5476857e419c1ff156b4e97aa2b8fa6278155a9a36e10c15d2d20456fd06229b8035af3f4836079806f31b1a92d5e1f3fe2177b28a4938c79fef15655cd93f2986986ba86221e4fdf3663eebb7fb28f2ac059cd360b3e30527f690387f749b772156e30705962f9250ed10527aabc9ec818b5faa8f699a2f485f83fd302001c1969bad4a592b45fe175eed489f85bc372bb07b81fc123da12d11035ed2abfebdae21ccd2b5f98abea47a69a910d98b786d6ef99c45acc1ac795e14c36aa041f2ebf07296f1b5e73b0669bf9c5418b1127f555eeb7a1ad3bc6a12ad109ed7a06fb8734964186832938c89be7508ee69c49bd77f58e18229d676c7a675922347dcf6cbc47a9c07456fb3077bf4df4fd9da20dd6248d700f15b94f0c9d5e2447573ff5a8aa8d5fb51db5d1ffd3b53dbc7a08a6e571eb5f96e54d0c894c2f8ab23206d4aacf32a2c103439314223edc0121aaccede8d249c092dd607bcaeff89f14d1eb4c7163ee1f6025a671a270114e353527dc3833f09bf1233c4080579fa15ea295db455a11649663a4c16f97d85de7aa03014ecc34cfe75be0776071a4b2fe000b01f294d1c0ae715e752e4cbeeb752cda5511353d550cd8129d12eab26c8164e4e4514abb9c8d15b0c7e54557d1b2cef7538f68994cb41fa18143134a4c90f65bb52664659dc6f63904e15edd39d31ad1ccffdd54c580d4bac28aaa458dd3429970b0df61a113b95424da957bbc735cd143dd3263692492242baaa99255b9ee70fcfd43f1f7d7991b263ad67f5b99e64ced4a66e9c286230f4e7941b63bdfee263cc1aae854d8778224a1146b64701ae663b4521fdbe9e8f77d1984aa6cb6691324c2029438e60e2c0825f67faeb6a62794efdf74bf6c9d45fbd182e23b0638902bd0cb947a1c6064edf9adb5bee130ca0103e9edadde85650b173d2bdae65120cd8770ea74af2dcfdf22d02433edbe59c837fdd302131dea520d1596666d9a8b1ac56a98367a0bb917b4bd974124aa2adf8d57e46e91130df0aaf75563fb1c79dbf9122cf93e29fe760b3b6f1dcf5c0e13c4e7984fa0a8167ee21c1ec904b537aee85f6600bfd87b45539832fd14aa3223351", &(0x7f0000000280)=""/198}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x58, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='netfs_read\x00', r3, 0x0, 0x101}, 0x18)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100c000000000063013500000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0xfffffffc}, 0x8, 0x10, &(0x7f00000005c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa660000070290780a010102ac1414aa1101907800"/42], 0x0)
socket$igmp(0x2, 0x3, 0x2)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x64, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
unshare(0x8020080)

619.84871ms ago: executing program 1 (id=2988):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x2010, r0, 0x2bbe0000) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ff070000000000007a28", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000800000000a8959de6aeade56b3b61c98800", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x10000, 0xde4, 0x24002, r1, 0xfffffffb, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x2, 0x9, 0x16, 0x7, 0x6, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2c}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x1, 0x1f, 0x3, 0x80000001}]}, 0x30}}, 0x4000000) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/9, 0x9, <r12=>0x0, &(0x7f0000000640)=""/157, 0x9d}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x25, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x43, '\x00', r3, @cgroup_device=0x6, r11, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x0, 0xfc0d}, 0x10, r12, r0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0xc}, {0x2, 0x5, 0xb, 0x9}, {0x5, 0x5, 0xb, 0x6}, {0x5, 0x1, 0x6, 0x2}], 0x10, 0x507}, 0x94) (async)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)

619.704276ms ago: executing program 1 (id=2989):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000200000000000aaff45"], 0x82)

469.605104ms ago: executing program 1 (id=2990):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'team0\x00', <r2=>0x0}) (rerun: 32)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0xffffffff, <r3=>0x0}, 0x8) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) (async)
pipe(&(0x7f0000001400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)='%pi6   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xf, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x2, 0x7, 0x1, 0x10, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6, 0x0, 0x8, 0x6, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x0, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x3, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x8, &(0x7f0000001640)=[0xffffffffffffffff, r4, r6, r7, r8, r9], &(0x7f0000001680)=[{0x2, 0x2, 0xe, 0x1}, {0x4, 0x5, 0xf, 0x3}, {0x0, 0x4, 0x4, 0x3}, {0x4, 0x2, 0xf, 0xa}, {0x0, 0x2, 0xe}, {0x1, 0x4, 0x10, 0x8}, {0x4, 0x3, 0x4, 0x2}, {0x4, 0x4, 0x3, 0x1}], 0x10, 0xe000000}, 0x94) (async)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001800)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000001900)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001a40)=0xe8)
sendmsg$nl_xfrm(r6, &(0x7f0000001f80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001a80)=@newae={0x494, 0x1e, 0x10, 0x70bd2b, 0x25dfdbfb, {{@in=@local, 0x4d2, 0xa, 0x2b}, @in=@local, 0x8dbb}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010101, 0x4d2, 0x33}, 0x2, @in=@loopback, 0x3501, 0x3, 0x2, 0x4, 0x10000, 0x80000000, 0x9}, {{@in=@multicast1, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3506, 0x4, 0x1, 0xd8, 0x3, 0x2, 0x8}, {{@in6=@local, 0x4d4, 0x6c}, 0xa, @in=@private=0xa010102, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, 0x3}]}, @sa={0xe4, 0x6, {{@in=@multicast2, @in6=@mcast1, 0x4e22, 0x1, 0x4e23, 0x40, 0xa, 0x20, 0x80, 0x67, r2, r11}, {@in=@remote, 0x4d5, 0x2b}, @in=@empty, {0x2, 0x7, 0x10001, 0x110, 0x80, 0x5, 0x3, 0x1ff}, {0x8, 0x7fff, 0x3, 0x8000000000000001}, {0x831, 0x1753, 0xf78}, 0x70bd27, 0x0, 0xa, 0x3, 0x5, 0x13}}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in6=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x2b, r2, r12}, {0x80, 0x3, 0x0, 0x3a1, 0x9, 0x7, 0x3, 0x9}, {0x7, 0xfffffffffffffc01, 0x1ff, 0x5}, 0x1, 0x6e6bb0, 0x2, 0x1, 0x1, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a, 0x8}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@loopback, 0x0, 0x2}}, @proto={0x5, 0x19, 0x32}, @tmpl={0x104, 0x5, [{{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x2, 0x5b, 0x6, 0x430, 0xe}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3506, 0x4, 0x2, 0x7, 0x0, 0x916, 0x7fffffff}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4d6, 0xff}, 0x2, @in=@broadcast, 0x34ff, 0x4, 0x1, 0x80, 0x2, 0xffff8000, 0x6}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0x4, 0x0, 0x6, 0x6, 0x8, 0x8}]}, @algo_comp={0xad, 0x3, {{'deflate\x00'}, 0x328, "99596b5ffa69856409ac533648bbb1b605e86b99539f2b55b5970623ab2bb3a977bb74178db98d98fa4b790ac272830d0fb04206eda7baa6edce3efa0539847fe76cdb6368a5a1618fc46372ad570970b7c91f15c2991f7bf4a23d7f110af6d94c33550f76"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{r5}, &(0x7f0000001fc0), &(0x7f0000002000)=r6}, 0x20) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002180)={@cgroup=r6, 0x7, 0x1, 0xfffffa29, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000020c0)=[0x0, 0x0], &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002240)={0x0, r5, 0x0, 0x1, &(0x7f0000002200)='\x00', <r14=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000021c0)={@ifindex=r10, r5, 0x1a, 0x37, r5, @void, @void, @void, @value=r14, r13}, 0x20) (async)
write$cgroup_int(r6, &(0x7f0000002280)=0x8, 0x12) (async)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000022c0)) (async)
connect$inet6(r6, &(0x7f0000002300)={0xa, 0x4e23, 0x6, @mcast2, 0x1000}, 0x1c) (async)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002340), r15)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000023c0)={<r16=>0x0}, &(0x7f0000002400)=0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000002800)={&(0x7f0000002440)={0x384, 0xf, 0x9, 0x301, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x6}, [@generic="fce8f14abaefad11e555e2ebf5eca804f7c51772c0585c5b17e75e135b", @generic="c388623b7f76b6e0cb1754a7ee0e524db544b4a4e3a5f14a9c26e4ea8e73955101896a92a3a0f86bb0293e99e0185f1f165fc32a02f2b5b96ce43ddaeee9c40524557af2284e5879fc996dcb2bcff4f7327e8f2c751c7df46a07e3bd8effab03bfaa12ff1a7aaf10e2aac284aa7564bef430c4b711782d0519ea8f1991cdf435c83a660de1ccca1d2b4e76d4408beccb73e8cbe1bf839b2b33a1f32df4b0a9a76c4adbc3ffa66ad3152868b43bd4d2d640a639", @typed={0x8, 0x138, 0x0, 0x0, @uid=r12}, @nested={0x108, 0x46, 0x0, 0x1, [@typed={0xea, 0x2e, 0x0, 0x0, @binary="b6084dccb57bd2ae2ef947344d382966228b689b6a07ba49062e92fe14a1e64f8e3284b2c08ec2114243c2e1a5c19438427eb1ddf44654cabb375b44c61a8401d4a5e8910eb1cf3413b5bd1dd9d2e3469cc48cfc80fe1dccdc539a22177a608b0e0f5d128e45fd40c35704b0d1c5a7fe2c4381b062da578d38e0b9991e478d47c138207c8f5021d702309d34adf5b12a48d5f6dd3b0700b565bce8989093f37c6d5fc24ddb88d0ef8b0268ec662c80a9c68526d5b12e7082b408b2fb99577aa88909b685d0f86f720b4b0d182d0db75ed20fad2e398a79cf734c03f194065d2a499dc678e621"}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x1b}]}, @typed={0xe6, 0xf, 0x0, 0x0, @binary="f2c7b38973df91658c1559256042395b0575c6aed64c25267e8a8bae1cc7f97e3a1982b4f01adff0baf3f641dd4104fa51e74e88cc86d5cecf0895900c3d8aefe31d79c2510f9eaf6893c1915782196fe876ebc6d0d419b195d7d2bce625f7bc25e92b8df486e066ec513c5ddef85ad65751e9aadaee246e3d02ed7e925d5f05661ec4b62803b908c75196aa95f8fe35761c1f5fd57c1cabc39286a835d944ff28ca7195f4af58e2df8e7ad823c21e93a1dcfe6579e68642280f74f79df4119a425ff81b76cbf51f184788666eb4b96fb3e400dd8d677cc8a9a57e8a306288559278"}, @nested={0x7b, 0xe1, 0x0, 0x1, [@typed={0x4, 0xf4, 0x0, 0x0, @binary}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@multicast2}, @generic="10962d9b8560b486cbc163ef841735ae1aa47ff7df79c55aa5f0e146624e0f6dc4ab04f46d4165059172bf2819e03b448d9e9ebcfab223efb6d26aee4c995a09406ab5cca7bb9944ebe792fae41cc0", @nested={0x4, 0xaa}, @nested={0x4, 0x77}, @nested={0x4, 0x82}, @typed={0x6, 0x14c, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r16}]}, @typed={0x4, 0xd8}, @generic="ffa315c972d03c6591f577b399659a75000d5c", @typed={0xc, 0x134, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x9c, 0x0, 0x0, @ipv4=@broadcast}]}, 0x384}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async)
writev(r5, &(0x7f0000002a40)=[{&(0x7f0000002880)="d11e8e3922ddae953c28a0aa3860473f2f12df1f79b4934b2d1d", 0x1a}, {0xfffffffffffffffe}, {&(0x7f00000028c0)="b6c1576a10f606ebd95e45f09b61f3dae490e9ce7a73413dfc071e3f3f874dffd10141b75b27561b23fa3d51963e1a8a51b8de2a4328e8e912d1cd9dec88b0a723791fc267c0e08a28366b35e82bb70402f31f5210ffae6ad38b30f8a4e70b9589269c3cefb58891ddf51f59b9d0cd21340af8e004b9af5012bc71b3", 0x7c}, {&(0x7f0000002940)="5f4d7be5e46ba0767ccad257a243256ba1bea87733ea9390c2d7beae1a5ffe051bc7f4ab7408c83b9a081196136ee2b621c39fe24557c52ef2d92d4ff75d2ad4a24789f5e994de8fd47bf2092e1a8fed9c3e76206bb6319b27e4ae0968725991257c26b298c1074b55846d9bed8a764e2d4fc04fa9be9baa32400e2aa2f625ccadd70685fefa23de91ec6a217b88b71f1f762775d7412c741fc862e096e9e7121154d9116c071cc352d329a3a3a0f30d18c035f0c5ce90d670c0a2f11cca5b99bf7a33fe41785295ad9516c53b", 0xcd}], 0x4)
r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002ac0), r15)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r15, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r17, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000002bc0)=0x7, 0x4) (rerun: 64)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002c00)=@ccm_128={{0x303}, "4c0e10a377a51eb5", "e777a26f3afdf49cb50bcae1e2ce87cc", "61cecec3", "6e32ef4bf13b862c"}, 0x28)

398.93778ms ago: executing program 1 (id=2991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x60000000}, 0x0)

397.837294ms ago: executing program 1 (id=2992):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0xfffffffffffffffc, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'vcan0\x00'})

303.530112ms ago: executing program 1 (id=2993):
unshare(0x6a040000)
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005200000"], 0x78)

188.309454ms ago: executing program 2 (id=2994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x32, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x3f00000000000000}, 0x0)

187.888433ms ago: executing program 2 (id=2995):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@remote}, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)={0x40, 0x0, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0)
recvfrom$llc(r3, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0)
listen(r3, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbbab, 0x4, 0x8001, 0x10, 0x4, 0xfffffff9, 0x5}, 0x9c)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480))
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="463fa56163dd", 0x6}], 0x1}}], 0x2, 0x4000000)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1c600}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x64c53}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x40)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r8, 0x0, 0x0)
sendto$rose(r8, 0x0, 0x0, 0xc0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250c000000"], 0x14}}, 0x4004)

0s ago: executing program 0 (id=2996):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x304, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2f0, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x200, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xc0, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729eedfcdef8b67015dd90447d814cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0aa5108d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e228e131439b5dd84f37bb377965a4af38c2020711a2fad2ba4e11f442caf2f22b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}], 0x5, &(0x7f0000000400)=""/29, 0x1d}, 0x400}, {{&(0x7f00000004c0)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000005c0)=""/90, 0x5a}], 0x2, &(0x7f0000000640)=""/11, 0xb}, 0xffff}, {{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000008c0)=[{0xfffffffffffffffe}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/122, 0x7a}], 0x5, &(0x7f0000003740)=""/4096, 0x1000}, 0x1}], 0x3, 0x0, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.0.606'.
[   80.842778][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'.
[   80.863638][ T7817] netlink: 'syz.2.605': attribute type 1 has an invalid length.
[   80.866337][ T7817] netlink: 'syz.2.605': attribute type 1 has an invalid length.
[   81.736079][ T7843] vxcan1 speed is unknown, defaulting to 1000
[   81.787393][ T7848] tipc: Cannot configure node identity twice
[   81.848468][ T7853] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   81.851393][ T7853] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   81.899745][ T7858] ip6t_srh: unknown srh match flags  4000
[   82.388251][ T7872] vxcan1 speed is unknown, defaulting to 1000
[   83.070178][ T7910] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   83.126831][ T7921] xt_policy: too many policy elements
[   83.336991][ T7945] ieee802154 phy0 wpan0: encryption failed: -22
[   83.343455][ T7945] nbd: socks must be embedded in a SOCK_ITEM attr
[   83.468955][ T7954] vxcan1 speed is unknown, defaulting to 1000
[   83.521383][ T7955] tipc: Started in network mode
[   83.529533][ T7955] tipc: Node identity , cluster identity 4711
[   84.116784][ T7966] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   84.401579][ T7974] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   84.465259][ T7982] vxcan1 speed is unknown, defaulting to 1000
[   84.837779][ T8016] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   85.171966][ T8029] validate_nla: 4 callbacks suppressed
[   85.171977][ T8029] netlink: 'syz.2.684': attribute type 13 has an invalid length.
[   85.176586][ T8029] netlink: 'syz.2.684': attribute type 17 has an invalid length.
[   85.209256][ T8029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.227509][ T8029] vxcan1 speed is unknown, defaulting to 1000
[   85.269960][ T8030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.468610][ T8039] netlink: 'syz.1.688': attribute type 10 has an invalid length.
[   85.471110][ T8039] __nla_validate_parse: 17 callbacks suppressed
[   85.471120][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'.
[   85.598116][ T8053] syzkaller1: entered promiscuous mode
[   85.599961][ T8053] syzkaller1: entered allmulticast mode
[   85.671946][ T8057] vxcan1 speed is unknown, defaulting to 1000
[   85.887208][ T8069] netlink: 'syz.0.698': attribute type 10 has an invalid length.
[   85.889849][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.698'.
[   85.893370][ T8069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.897484][ T8069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.900519][ T8069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.903499][ T8069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.912736][ T8069] team0: Port device geneve0 added
[   85.980323][ T8075] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.699'.
[   85.984886][ T8075] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[   85.987912][ T8075] batman_adv: batadv0: Adding interface: team0
[   85.989971][ T8075] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.999510][ T8075] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   86.003195][ T8075] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[   86.006015][ T8075] netlink: 2 bytes leftover after parsing attributes in process `syz.0.699'.
[   86.008937][ T8075] team0: entered promiscuous mode
[   86.010732][ T8075] team_slave_0: entered promiscuous mode
[   86.012717][ T8075] team_slave_1: entered promiscuous mode
[   86.016172][ T8075] geneve0: entered promiscuous mode
[   86.018638][ T8075] 8021q: adding VLAN 0 to HW filter on device team0
[   86.021067][ T8075] batman_adv: batadv0: Interface activated: team0
[   86.023248][ T8075] batman_adv: batadv0: Interface deactivated: team0
[   86.026152][ T8075] batman_adv: batadv0: Removing interface: team0
[   86.301421][ T8088] vxcan1 speed is unknown, defaulting to 1000
[   86.345677][ T8089] tipc: Started in network mode
[   86.347359][ T8089] tipc: Node identity , cluster identity 4711
[   86.659039][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.709'.
[   86.687714][ T8096] tun0: tun_chr_ioctl cmd 1074025673
[   86.692094][ T8096] tun0: tun_chr_ioctl cmd 2147767507
[   86.720591][ T8105] bridge_slave_0: invalid flags given to default FDB implementation
[   86.764354][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'.
[   86.918123][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[   86.957231][ T8127] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond
[   87.105778][ T8137] netlink: 96 bytes leftover after parsing attributes in process `syz.1.725'.
[   87.408167][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'.
[   87.446667][ T8172] bridge_slave_0: invalid flags given to default FDB implementation
[   87.500239][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'.
[   87.537175][ T8191] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[   87.576661][ T8192] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   87.603001][ T8191] veth3: entered promiscuous mode
[   87.609436][ T8191] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   87.703044][ T8212] vxcan1 speed is unknown, defaulting to 1000
[   87.733681][ T8214] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[   87.737390][ T8214] netlink: 'syz.1.750': attribute type 2 has an invalid length.
[   87.742329][ T8214] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[   88.158278][ T8252] bridge_slave_0: invalid flags given to default FDB implementation
[   88.314767][ T8268] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.562168][ T5882] IPVS: starting estimator thread 0...
[   88.568681][ T8299] vxcan1 speed is unknown, defaulting to 1000
[   88.612028][ T8307] tipc: Started in network mode
[   88.613724][ T8307] tipc: Node identity , cluster identity 4711
[   88.675517][ T8301] IPVS: using max 78 ests per chain, 187200 per kthread
[   88.738529][ T8320] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   88.953501][ T8346] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   89.163144][ T8367] macvtap0: entered promiscuous mode
[   89.165152][ T8367] batadv0: entered promiscuous mode
[   89.166971][ T8367] macvtap0: entered allmulticast mode
[   89.168760][ T8367] batadv0: entered allmulticast mode
[   89.171375][ T8367] 8021q: adding VLAN 0 to HW filter on device macvtap0
[   89.177606][ T8370] vxcan1 speed is unknown, defaulting to 1000
[   89.190353][ T8367] batadv0: left allmulticast mode
[   89.194107][ T8367] batadv0: left promiscuous mode
[   89.520022][ T8399] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.773991][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   89.855419][ T8436] bridge_slave_0: default FDB implementation only supports local addresses
[   89.908824][ T8445] bridge_slave_0: invalid flags given to default FDB implementation
[   89.989228][ T8455] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   90.299467][ T8485] validate_nla: 5 callbacks suppressed
[   90.299481][ T8485] netlink: 'syz.2.825': attribute type 10 has an invalid length.
[   90.306151][ T8485] dummy0: entered promiscuous mode
[   90.308303][ T8485] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   90.353557][ T8491] bridge_slave_0: invalid flags given to default FDB implementation
[   90.401878][ T8493] batadv0: entered promiscuous mode
[   90.404476][ T8493] macvtap1: entered promiscuous mode
[   90.406409][ T8493] macvtap1: entered allmulticast mode
[   90.408204][ T8493] batadv0: entered allmulticast mode
[   90.410579][ T8493] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   90.418767][ T8493] batadv0: left allmulticast mode
[   90.420545][ T8493] batadv0: left promiscuous mode
[   90.934072][ T8522] netlink: 'syz.2.841': attribute type 10 has an invalid length.
[   90.936760][ T8522] __nla_validate_parse: 25 callbacks suppressed
[   90.936770][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.841'.
[   90.942332][ T8522] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   91.000898][ T8527] bridge_slave_0: invalid flags given to default FDB implementation
[   91.249510][ T8541] netlink: 136 bytes leftover after parsing attributes in process `syz.1.850'.
[   91.252614][ T8541] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   91.340334][ T8551] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   91.405873][ T8556] vxcan1 speed is unknown, defaulting to 1000
[   91.428836][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[   91.442248][ T8559] netlink: 452 bytes leftover after parsing attributes in process `syz.1.857'.
[   91.452283][ T8560] tipc: Started in network mode
[   91.456988][ T8560] tipc: Node identity , cluster identity 4711
[   91.785707][ T8569] vxcan1 speed is unknown, defaulting to 1000
[   91.826984][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[   91.918610][  T791] IPVS: starting estimator thread 0...
[   91.971297][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   92.010110][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[   92.013987][ T8578] IPVS: using max 79 ests per chain, 189600 per kthread
[   92.078930][ T8592] bridge_slave_0: invalid flags given to default FDB implementation
[   92.130163][ T8597] netlink: 136 bytes leftover after parsing attributes in process `syz.0.871'.
[   92.133142][ T8597] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   92.192113][ T8601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   92.396128][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.877'.
[   92.476261][ T8624] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[   92.478858][ T8624] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.881'.
[   92.514996][ T8634] netlink: 232 bytes leftover after parsing attributes in process `syz.2.884'.
[   92.574382][ T8644] bridge_slave_0: invalid flags given to default FDB implementation
[   92.611240][ T8652] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   92.635855][ T8655] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   92.671958][ T8659] xt_l2tp: unknown flags: 10
[   92.689960][ T8661] vxcan1 speed is unknown, defaulting to 1000
[   92.952681][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.168731][ T8712] DL<Y: renamed from lo
[   93.172546][ T8712] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[   93.219794][ T8716] IPVS: set_ctl: invalid protocol: 29 172.20.20.55:20003
[   93.369937][ T8728] vxcan1 speed is unknown, defaulting to 1000
[   93.416116][ T8731] tipc: Started in network mode
[   93.417788][ T8731] tipc: Node identity , cluster identity 4711
[   93.695347][ T8745] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[   93.914037][ T8765] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   93.916676][ T8765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   94.119803][ T8780] vxcan1 speed is unknown, defaulting to 1000
[   94.751148][ T8824] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   94.855728][ T8836] vxcan1 speed is unknown, defaulting to 1000
[   94.898566][ T8842] tipc: Started in network mode
[   94.900237][ T8842] tipc: Node identity , cluster identity 4711
[   94.963751][ T8846] vxcan1 speed is unknown, defaulting to 1000
[   94.976909][ T8848] netlink: 'syz.1.953': attribute type 4 has an invalid length.
[   95.027870][ T8851] netlink: 'syz.0.955': attribute type 10 has an invalid length.
[   95.047432][ T8851] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   95.116364][ T8853] vxcan1 speed is unknown, defaulting to 1000
[   95.154317][ T8857] tipc: Started in network mode
[   95.156642][ T8857] tipc: Node identity , cluster identity 4711
[   95.262407][ T8860] wg1: entered allmulticast mode
[   95.352295][ T8867] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000
[   95.389014][ T8867] xt_socket: unknown flags 0xd0
[   95.517971][ T8879] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   95.836239][ T8910] netlink: 'syz.2.977': attribute type 10 has an invalid length.
[   95.841847][ T8910] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   96.062221][ T8937] __nla_validate_parse: 23 callbacks suppressed
[   96.062235][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[   96.113805][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[   96.199723][ T8955] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.994'.
[   96.207036][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'.
[   96.209942][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'.
[   96.278995][ T8965] netlink: 'syz.1.998': attribute type 10 has an invalid length.
[   96.281606][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'.
[   96.364873][ T8975] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1002'.
[   96.379735][ T8977] vxcan1 speed is unknown, defaulting to 1000
[   96.399156][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'.
[   96.411356][ T8968] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1000'.
[   96.426631][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.472309][ T8984] tipc: Started in network mode
[   96.476325][ T8984] tipc: Node identity 525edd851122, cluster identity 4711
[   96.478675][ T8984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.488979][ T8984] syzkaller0: entered promiscuous mode
[   96.490806][ T8984] syzkaller0: entered allmulticast mode
[   96.513638][ T8982] tipc: Resetting bearer <eth:syzkaller0>
[   96.520971][ T8982] tipc: Disabling bearer <eth:syzkaller0>
[   96.585725][ T8988] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   96.597169][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'.
[   96.719114][ T9000] vxcan1 speed is unknown, defaulting to 1000
[   96.807277][ T9012] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   96.979665][ T9025] sctp: [Deprecated]: syz.1.1021 (pid 9025) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.979665][ T9025] Use struct sctp_sack_info instead
[   96.993614][ T9025] netlink: 'syz.1.1021': attribute type 21 has an invalid length.
[   97.002106][ T9028] netlink: 'syz.2.1022': attribute type 10 has an invalid length.
[   97.006237][ T9028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   97.045148][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.188925][ T9043] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   97.222373][ T9048] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   97.234581][ T9046] netlink: 'syz.2.1028': attribute type 33 has an invalid length.
[   97.579673][ T9086] netlink: 'syz.2.1038': attribute type 10 has an invalid length.
[   97.582513][ T9086] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   97.667141][ T9092] syzkaller0: MTU too low for tipc bearer
[   97.669061][ T9092] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.672330][ T9092] syzkaller0: entered promiscuous mode
[   97.675273][ T9092] syzkaller0: entered allmulticast mode
[  101.495996][ T9118] vxcan1 speed is unknown, defaulting to 1000
[  101.550142][ T9125] __nla_validate_parse: 14 callbacks suppressed
[  101.550151][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.566538][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.596285][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.604480][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.659103][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.661917][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  101.806105][ T9149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  101.881062][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'.
[  101.888584][ T9154] tipc: Enabled bearer <eth:vlan0>, priority 18
[  101.962982][ T9154] syzkaller1: entered promiscuous mode
[  101.966281][ T9154] syzkaller1: entered allmulticast mode
[  102.135837][ T9186] sctp: [Deprecated]: syz.0.1059 (pid 9186) Use of int in maxseg socket option.
[  102.135837][ T9186] Use struct sctp_assoc_value instead
[  102.248248][ T9196] vxcan1 speed is unknown, defaulting to 1000
[  102.328935][ T9205] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  102.365771][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[  102.519869][ T9228] netlink: 'syz.1.1072': attribute type 10 has an invalid length.
[  102.527336][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1072'.
[  102.757544][ T9259] raw_sendmsg: syz.1.1078 forgot to set AF_INET. Fix it!
[  103.021390][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'.
[  103.027215][ T9282] netlink: 'syz.0.1087': attribute type 6 has an invalid length.
[  103.030759][ T9284] netlink: 'syz.1.1088': attribute type 10 has an invalid length.
[  103.071761][ T9291] netlink: 'syz.0.1091': attribute type 22 has an invalid length.
[  103.078183][ T9291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  103.123207][ T9300] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[  103.382727][ T9329] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  103.465365][ T9337] vxcan1 speed is unknown, defaulting to 1000
[  103.504942][ T9343] tipc: Cannot configure node identity twice
[  103.514707][ T9345] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  103.518493][ T9345] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  103.526218][ T9344] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  103.529219][ T9344] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  103.577642][ T9350] tun0: tun_chr_ioctl cmd 2147767507
[  103.662789][ T9356] vxcan1 speed is unknown, defaulting to 1000
[  104.019704][ T9395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.025259][ T9395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.029864][ T9395] bond0 (unregistering): Released all slaves
[  104.189106][ T9412] vxcan1 speed is unknown, defaulting to 1000
[  104.485882][ T9438] vxcan1 speed is unknown, defaulting to 1000
[  104.598200][ T9442] tipc: Cannot configure node identity twice
[  104.872641][ T9453] netlink: 'syz.1.1136': attribute type 3 has an invalid length.
[  104.930153][ T9452] vxcan1 speed is unknown, defaulting to 1000
[  105.122738][ T9453] vxcan1 speed is unknown, defaulting to 1000
[  105.228813][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.293783][ T9466] vxcan1 speed is unknown, defaulting to 1000
[  105.588060][ T9476] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  105.882529][ T9503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.016801][ T9513] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  106.028515][ T9515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.031136][ T9515] syzkaller0: entered promiscuous mode
[  106.032935][ T9515] syzkaller0: entered allmulticast mode
[  106.038096][ T9516] tipc: Resetting bearer <eth:syzkaller0>
[  106.043481][ T9514] tipc: Resetting bearer <eth:syzkaller0>
[  106.051400][ T9514] tipc: Disabling bearer <eth:syzkaller0>
[  106.292926][ T9538] Bluetooth: MGMT ver 1.23
[  106.515741][ T9555] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  106.575388][ T9559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.586843][ T9561] tipc: Resetting bearer <eth:syzkaller0>
[  106.630326][ T9556] tipc: Disabling bearer <eth:syzkaller0>
[  106.664189][ T9563] bond0: (slave bond_slave_0): Releasing backup interface
[  106.669303][ T9563] bond0: (slave bond_slave_1): Releasing backup interface
[  106.693796][ T9563] team0: Port device team_slave_0 removed
[  106.700523][ T9563] team0: Port device team_slave_1 removed
[  106.702848][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.705402][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.708323][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.711253][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.719233][ T9563] bond1: (slave ip6gretap1): Releasing backup interface
[  106.721702][ T9563] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 46:44:1c:50:b3:b1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  106.731056][ T9563] bond1: (slave veth3): Releasing backup interface
[  106.762733][ T9563] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.777529][ T9566] vxcan1 speed is unknown, defaulting to 1000
[  106.933483][ T9577] __nla_validate_parse: 32 callbacks suppressed
[  106.933493][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'.
[  106.945703][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'.
[  106.960663][ T9581] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1185'.
[  106.984460][ T9584] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  107.094793][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1190'.
[  107.097991][ T9597] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  107.205076][ T9604] vxcan1 speed is unknown, defaulting to 1000
[  107.301561][ T9607] sctp: [Deprecated]: syz.1.1194 (pid 9607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.301561][ T9607] Use struct sctp_sack_info instead
[  107.314442][ T9607] sctp: [Deprecated]: syz.1.1194 (pid 9607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.314442][ T9607] Use struct sctp_sack_info instead
[  107.378498][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  107.381526][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  107.519072][ T9617] vxcan1 speed is unknown, defaulting to 1000
[  107.831429][ T9637] validate_nla: 7 callbacks suppressed
[  107.831444][ T9637] netlink: 'syz.0.1204': attribute type 10 has an invalid length.
[  107.836822][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1204'.
[  107.862101][ T9637] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  107.949289][ T9641] sctp: [Deprecated]: syz.2.1206 (pid 9641) Use of int in max_burst socket option.
[  107.949289][ T9641] Use struct sctp_assoc_value instead
[  108.129219][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'.
[  108.189467][ T9664] vxcan1 speed is unknown, defaulting to 1000
[  108.212799][ T9613] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  108.244190][ T9668] netlink: 'syz.0.1216': attribute type 10 has an invalid length.
[  108.246733][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1216'.
[  108.259367][ T9668] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  108.313379][ T9675] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1218'.
[  108.322036][ T9675] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  108.334083][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  108.336754][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  108.414912][ T9664] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  108.575614][ T9699] netlink: 'syz.2.1229': attribute type 10 has an invalid length.
[  108.578635][ T9699] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  108.656966][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  108.802788][ T9727] vxcan1 speed is unknown, defaulting to 1000
[  109.084275][ T9752] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  109.109608][ T9756] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  109.127053][ T9756] bond0: entered promiscuous mode
[  109.128887][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.205493][ T9766] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  109.376601][  T972] page_pool_release_retry() stalled pool shutdown: id 15, 1 inflight 60 sec
[  109.455217][ T9787] vxcan1 speed is unknown, defaulting to 1000
[  109.458484][ T9789] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  109.558742][ T9794] vxcan1 speed is unknown, defaulting to 1000
[  109.570508][ T9795] tipc: Cannot configure node identity twice
[  109.993292][ T9819] vxcan1 speed is unknown, defaulting to 1000
[  110.309489][ T9849] syz.2.1281 uses old SIOCAX25GETINFO
[  110.338341][ T9852] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  110.408287][ T9856] bond2: entered promiscuous mode
[  110.410023][ T9856] bond2: entered allmulticast mode
[  110.411988][ T9856] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.415575][ T9858] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  110.527906][ T9868] vxcan1 speed is unknown, defaulting to 1000
[  110.735072][ T5882] page_pool_release_retry() stalled pool shutdown: id 16, 1 inflight 60 sec
[  110.759298][ T9894] netlink: 'syz.1.1292': attribute type 1 has an invalid length.
[  110.795670][ T9894] bond5: entered promiscuous mode
[  110.797838][ T9894] 8021q: adding VLAN 0 to HW filter on device bond5
[  110.935331][ T9907] batadv0: entered promiscuous mode
[  110.937527][ T9907] macvtap2: entered promiscuous mode
[  110.939933][ T9907] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  110.954820][ T9907] batadv0: left promiscuous mode
[  111.179764][ T9928] netlink: 'syz.1.1307': attribute type 10 has an invalid length.
[  111.226595][ T9930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.232122][ T9933] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  111.240581][ T9934] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  111.247881][ T9934] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  111.270591][ T9936] IPVS: Unknown mcast interface: bridge0
[  111.279377][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.282949][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.378452][ T9950] netlink: 'syz.2.1317': attribute type 10 has an invalid length.
[  111.381676][ T9950] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  111.414093][ T9948] unsupported nlmsg_type 40
[  111.434947][ T9954] netlink: 'syz.0.1318': attribute type 5 has an invalid length.
[  111.746541][ T9984] netlink: 'syz.0.1330': attribute type 10 has an invalid length.
[  111.749349][ T9984] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  112.021173][T10013] vxcan1 speed is unknown, defaulting to 1000
[  112.061615][T10017] tipc: Cannot configure node identity twice
[  112.249809][T10034] __nla_validate_parse: 22 callbacks suppressed
[  112.249819][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  112.265160][T10034] vxcan1 speed is unknown, defaulting to 1000
[  112.487014][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'.
[  112.595757][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  112.599238][T10049] openvswitch: netlink: Message has 4 unknown bytes.
[  113.637464][T10070] vxcan1 speed is unknown, defaulting to 1000
[  113.876900][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'.
[  114.043783][T10113] lo speed is unknown, defaulting to 1000
[  114.051395][T10113] lo speed is unknown, defaulting to 1000
[  114.053671][T10113] lo speed is unknown, defaulting to 1000
[  114.181533][ T5882] lo speed is unknown, defaulting to 1000
[  114.185322][T10113] infiniband syz1: set active
[  114.187018][T10113] infiniband syz1: added lo
[  114.219039][T10113] RDS/IB: syz1: added
[  114.220668][T10113] smc: adding ib device syz1 with port count 1
[  114.223137][T10113] smc:    ib device syz1 port 1 has pnetid 
[  114.227033][ T5882] lo speed is unknown, defaulting to 1000
[  114.231020][T10113] lo speed is unknown, defaulting to 1000
[  114.310538][T10129] validate_nla: 1 callbacks suppressed
[  114.310553][T10129] netlink: 'syz.1.1374': attribute type 10 has an invalid length.
[  114.315042][T10129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1374'.
[  114.361589][T10113] lo speed is unknown, defaulting to 1000
[  114.461596][T10113] lo speed is unknown, defaulting to 1000
[  114.465657][T10136] net_ratelimit: 1 callbacks suppressed
[  114.465665][T10136] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  114.578708][T10142] xt_hashlimit: size too large, truncated to 1048576
[  114.645906][T10145] vxcan1 speed is unknown, defaulting to 1000
[  114.770979][T10145] lo speed is unknown, defaulting to 1000
[  115.261178][T10174] netlink: 'syz.2.1388': attribute type 10 has an invalid length.
[  115.276711][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1388'.
[  115.403215][T10174] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  115.492054][T10184] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1392'.
[  115.495044][T10184] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  115.604262][T10197] vxcan1 speed is unknown, defaulting to 1000
[  115.659445][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'.
[  115.719706][T10216] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  115.760365][T10219] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1402'.
[  115.763326][T10219] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  115.772916][T10197] lo speed is unknown, defaulting to 1000
[  115.808406][T10206] xt_CT: No such helper "syz0"
[  116.142200][T10247] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1413'.
[  116.145493][T10247] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  116.226715][T10258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.523733][T10285] : renamed from bridge_slave_0
[  116.531968][T10286] xt_hashlimit: size too large, truncated to 1048576
[  116.542917][T10286] syz.1.1427: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  116.555026][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.1.1427 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  116.555037][T10286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.555042][T10286] Call Trace:
[  116.555044][T10286]  <TASK>
[  116.555048][T10286]  dump_stack_lvl+0x189/0x250
[  116.555062][T10286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.555071][T10286]  ? __pfx__printk+0x10/0x10
[  116.555080][T10286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  116.555090][T10286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  116.555099][T10286]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  116.555109][T10286]  warn_alloc+0x214/0x310
[  116.555119][T10286]  ? __pfx_warn_alloc+0x10/0x10
[  116.555129][T10286]  ? __get_vm_area_node+0x28f/0x300
[  116.555139][T10286]  ? htable_create+0xfc/0x7a0
[  116.555149][T10286]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  116.555170][T10286]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  116.555182][T10286]  ? rcu_is_watching+0x15/0xb0
[  116.555190][T10286]  ? htable_create+0xfc/0x7a0
[  116.555246][T10286]  ? htable_create+0xfc/0x7a0
[  116.555251][T10286]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  116.555261][T10286]  ? htable_create+0xfc/0x7a0
[  116.555267][T10286]  ? hashlimit_pernet+0x23/0x240
[  116.555276][T10286]  htable_create+0xfc/0x7a0
[  116.555286][T10286]  hashlimit_mt_check_common+0x719/0xa10
[  116.555296][T10286]  xt_check_match+0x3d1/0xab0
[  116.555307][T10286]  ? __pfx___mutex_lock+0x10/0x10
[  116.555317][T10286]  ? __pfx_xt_check_match+0x10/0x10
[  116.555328][T10286]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  116.555341][T10286]  ? xt_find_match+0x1f7/0x250
[  116.555354][T10286]  translate_table+0x1553/0x2040
[  116.555372][T10286]  ? __pfx_translate_table+0x10/0x10
[  116.555382][T10286]  ? __might_fault+0xb0/0x130
[  116.555399][T10286]  ? _copy_from_user+0x94/0xb0
[  116.555411][T10286]  do_ip6t_set_ctl+0x970/0xce0
[  116.555424][T10286]  ? rcu_is_watching+0x15/0xb0
[  116.555431][T10286]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  116.555448][T10286]  ? __pfx___mutex_lock+0x10/0x10
[  116.555456][T10286]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  116.555467][T10286]  ? __lock_acquire+0xab9/0xd20
[  116.555479][T10286]  nf_setsockopt+0x26f/0x290
[  116.555500][T10286]  rawv6_setsockopt+0x23b/0x5b0
[  116.555512][T10286]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  116.555522][T10286]  ? aa_sock_opt_perm+0x74/0x110
[  116.555536][T10286]  ? sock_common_setsockopt+0x36/0xc0
[  116.555551][T10286]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  116.555567][T10286]  do_sock_setsockopt+0x17c/0x1b0
[  116.555588][T10286]  __x64_sys_setsockopt+0x13f/0x1b0
[  116.555608][T10286]  do_syscall_64+0xfa/0x3b0
[  116.555619][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.555631][T10286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.555643][T10286]  ? exc_page_fault+0x9f/0xf0
[  116.555656][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.555668][T10286] RIP: 0033:0x7f76acf8e9a9
[  116.555680][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.555691][T10286] RSP: 002b:00007f76add1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.555703][T10286] RAX: ffffffffffffffda RBX: 00007f76ad1b6080 RCX: 00007f76acf8e9a9
[  116.555709][T10286] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  116.555713][T10286] RBP: 00007f76ad010d69 R08: 00000000000005c0 R09: 0000000000000000
[  116.555718][T10286] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  116.555722][T10286] R13: 0000000000000001 R14: 00007f76ad1b6080 R15: 00007fff44295a78
[  116.555733][T10286]  </TASK>
[  116.557118][T10286] Mem-Info:
[  116.680576][T10286] active_anon:5119 inactive_anon:0 isolated_anon:0
[  116.680576][T10286]  active_file:1368 inactive_file:38236 isolated_file:0
[  116.680576][T10286]  unevictable:1768 dirty:79 writeback:0
[  116.680576][T10286]  slab_reclaimable:10123 slab_unreclaimable:67115
[  116.680576][T10286]  mapped:18459 shmem:2440 pagetables:951
[  116.680576][T10286]  sec_pagetables:0 bounce:0
[  116.680576][T10286]  kernel_misc_reclaimable:0
[  116.680576][T10286]  free:288537 free_pcp:15848 free_cma:0
[  116.698454][T10286] Node 0 active_anon:11088kB inactive_anon:0kB active_file:4296kB inactive_file:20728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38676kB dirty:296kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6420kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  116.698580][T10292] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  116.712027][T10286] Node 1 active_anon:9388kB inactive_anon:0kB active_file:1176kB inactive_file:132216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35160kB dirty:20kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5316kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  116.727996][T10286] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.736887][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  116.736940][T10286] lowmem_reserve[]: 0 812 812 812 812
[  116.740658][T10286] Node 0 DMA32 free:374904kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11020kB inactive_anon:0kB active_file:4296kB inactive_file:20728kB unevictable:3536kB writepending:296kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:29608kB local_pcp:17012kB free_cma:0kB
[  116.750996][T10286] lowmem_reserve[]: 0 0 0 0 0
[  116.752621][T10286] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  116.763818][T10286] lowmem_reserve[]: 0 0 854 854 854
[  116.765843][T10286] Node 1 Normal free:305392kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9388kB inactive_anon:0kB active_file:1176kB inactive_file:132216kB unevictable:3536kB writepending:20kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34028kB local_pcp:14716kB free_cma:0kB
[  116.776545][T10286] lowmem_reserve[]: 0 0 0 0 0
[  116.778265][T10286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  116.782814][T10286] Node 0 DMA32: 892*4kB (UME) 637*8kB (UME) 494*16kB (UME) 192*32kB (UM) 127*64kB (UME) 50*128kB (UM) 13*256kB (UM) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 78*4096kB (UM) = 374904kB
[  116.788760][T10286] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  116.794038][T10286] Node 1 Normal: 630*4kB (UME) 331*8kB (UME) 134*16kB (UME) 107*32kB (UME) 482*64kB (UME) 225*128kB (UM) 100*256kB (UM) 45*512kB (UME) 32*1024kB (UME) 9*2048kB (UME) 33*4096kB (UM) = 305392kB
[  116.799947][T10286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.803024][T10286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.806113][T10286] 42044 total pagecache pages
[  116.808863][T10286] 0 pages in swap cache
[  116.810491][T10286] Free swap  = 124996kB
[  116.811804][T10286] Total swap = 124996kB
[  116.813093][T10286] 786301 pages RAM
[  116.815945][T10286] 0 pages HighMem/MovableOnly
[  116.817425][T10286] 241058 pages reserved
[  116.819176][T10286] 0 pages cma reserved
[  116.870811][T10303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.888235][T10303] netlink: 'syz.1.1431': attribute type 2 has an invalid length.
[  116.890947][T10303] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  117.003754][T10317] vxcan1 speed is unknown, defaulting to 1000
[  117.092667][T10317] lo speed is unknown, defaulting to 1000
[  117.276819][T10323] vxcan1 speed is unknown, defaulting to 1000
[  117.325877][T10326] tipc: Cannot configure node identity twice
[  117.407671][T10323] lo speed is unknown, defaulting to 1000
[  117.466515][T10339] netlink: 'syz.0.1444': attribute type 4 has an invalid length.
[  117.472133][T10339] netlink: 'syz.0.1444': attribute type 4 has an invalid length.
[  117.863563][T10373] netlink: 'syz.1.1453': attribute type 1 has an invalid length.
[  117.867928][T10373] netlink: 'syz.1.1453': attribute type 3 has an invalid length.
[  117.870342][T10373] __nla_validate_parse: 5 callbacks suppressed
[  117.870348][T10373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1453'.
[  117.877772][T10373] NCSI netlink: No device for ifindex 246
[  117.938121][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1457'.
[  117.941667][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1457'.
[  117.948533][T10383] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'.
[  117.952965][T10383] netlink: 'syz.1.1457': attribute type 6 has an invalid length.
[  117.957044][T10383] netlink: 'syz.1.1457': attribute type 5 has an invalid length.
[  117.959431][T10383] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1457'.
[  118.062097][T10387] vxcan1 speed is unknown, defaulting to 1000
[  118.103553][T10390] tipc: Cannot configure node identity twice
[  118.253419][T10387] lo speed is unknown, defaulting to 1000
[  118.409152][T10395] : entered promiscuous mode
[  118.701642][T10417] vxcan1 speed is unknown, defaulting to 1000
[  118.711883][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'.
[  118.776836][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1470'.
[  118.780505][T10425] nbd: must specify at least one socket
[  118.784452][T10425] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1470'.
[  118.835702][T10427] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.1473'.
[  118.877519][T10417] lo speed is unknown, defaulting to 1000
[  118.909968][T10431] vxcan1 speed is unknown, defaulting to 1000
[  119.031729][T10431] lo speed is unknown, defaulting to 1000
[  119.041609][T10435] vxcan1 speed is unknown, defaulting to 1000
[  119.143500][T10436] vxcan1 speed is unknown, defaulting to 1000
[  119.239444][T10442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1478'.
[  119.248439][T10436] lo speed is unknown, defaulting to 1000
[  119.437372][T10435] lo speed is unknown, defaulting to 1000
[  119.534035][ T5883] page_pool_release_retry() stalled pool shutdown: id 20, 1 inflight 60 sec
[  119.769207][T10481] validate_nla: 6 callbacks suppressed
[  119.769217][T10481] netlink: 'syz.2.1494': attribute type 12 has an invalid length.
[  119.983380][T10502] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  120.233475][T10517] x_tables: duplicate underflow at hook 2
[  120.599816][   T33] audit: type=1804 audit(1753271443.280:3): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1518" name="/newroot/472/cgroup.controllers" dev="tmpfs" ino=2409 res=1 errno=0
[  120.612268][   T33] audit: type=1800 audit(1753271443.290:4): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1518" name="cgroup.controllers" dev="tmpfs" ino=2409 res=0 errno=0
[  120.673153][T10558] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  121.615014][  T972] page_pool_release_retry() stalled pool shutdown: id 22, 1 inflight 60 sec
[  121.650039][T10573] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  121.776388][T10588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.875689][T10609] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  121.930114][T10620] netlink: 'syz.0.1544': attribute type 1 has an invalid length.
[  121.958289][T10620] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.988118][T10620] bond3: (slave ip6gretap2): making interface the new active one
[  121.991198][T10620] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  121.999948][T10620] erspan0: entered allmulticast mode
[  122.003738][T10620] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  122.042801][T10628] netlink: 'syz.0.1548': attribute type 13 has an invalid length.
[  122.062870][T10630] vxcan1 speed is unknown, defaulting to 1000
[  122.149614][T10641] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  122.270292][T10630] lo speed is unknown, defaulting to 1000
[  122.296852][T10654] vxcan1 speed is unknown, defaulting to 1000
[  122.446461][T10654] lo speed is unknown, defaulting to 1000
[  123.093599][T10691] sctp: [Deprecated]: syz.0.1567 (pid 10691) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.093599][T10691] Use struct sctp_sack_info instead
[  123.124076][T10691] sctp: [Deprecated]: syz.0.1567 (pid 10691) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.124076][T10691] Use struct sctp_sack_info instead
[  123.869555][T10708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.875995][T10708] syzkaller0: entered promiscuous mode
[  123.878461][T10708] syzkaller0: entered allmulticast mode
[  123.883321][T10706] tipc: Resetting bearer <eth:syzkaller0>
[  123.895959][T10706] tipc: Disabling bearer <eth:syzkaller0>
[  123.914058][T10710] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  123.918981][ T5883] lo speed is unknown, defaulting to 1000
[  123.962330][T10717] __nla_validate_parse: 14 callbacks suppressed
[  123.962340][T10717] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1577'.
[  123.975864][T10717] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  124.453094][T10753] vxcan1 speed is unknown, defaulting to 1000
[  124.496593][T10754] tipc: Cannot configure node identity twice
[  124.532886][T10753] lo speed is unknown, defaulting to 1000
[  124.999354][T10780] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1596'.
[  125.043604][T10785] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1598'.
[  125.049072][T10785] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  125.150431][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'.
[  125.180903][T10802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1604'.
[  125.184747][T10802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1604'.
[  125.857490][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'.
[  126.214236][T10839] netlink: 'syz.1.1617': attribute type 3 has an invalid length.
[  126.371509][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  126.375013][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  126.416434][T10864] vxcan1 speed is unknown, defaulting to 1000
[  126.503556][T10864] lo speed is unknown, defaulting to 1000
[  126.625987][T10879] netlink: 'syz.0.1630': attribute type 3 has an invalid length.
[  126.711735][T10886] vxcan1 speed is unknown, defaulting to 1000
[  126.742019][T10889] tipc: Cannot configure node identity twice
[  126.817742][T10886] lo speed is unknown, defaulting to 1000
[  126.888812][T10899] SET target dimension over the limit!
[  127.155417][T10909] netlink: 'syz.2.1639': attribute type 3 has an invalid length.
[  127.209925][T10918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1641'.
[  127.308253][T10928] bond0: left promiscuous mode
[  127.335062][T10928] bond3: (slave erspan0): Releasing active interface
[  127.337338][T10928] ip6gretap2: entered promiscuous mode
[  127.340941][T10934] netlink: 'syz.1.1648': attribute type 1 has an invalid length.
[  127.341607][T10928] team_slave_0: left promiscuous mode
[  127.343571][T10934] netlink: 'syz.1.1648': attribute type 1 has an invalid length.
[  127.348979][T10928] team0: Port device team_slave_0 removed
[  127.351233][T10928] team_slave_1: left promiscuous mode
[  127.364102][T10928] team0: Port device team_slave_1 removed
[  127.366232][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.383599][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.389326][T10928] geneve0: left promiscuous mode
[  127.393118][T10928] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.400975][T10928] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.404155][T10928] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.407644][T10928] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.422648][T10928] team0: Port device geneve0 removed
[  127.427672][T10928] bond1: (slave geneve2): Releasing active interface
[  127.431439][T10928] bond3: (slave ip6gretap2): Releasing active interface
[  127.434119][T10928] ip6gretap2: left promiscuous mode
[  127.447744][T10935] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  127.461418][T10942] tipc: Cannot configure node identity twice
[  127.485435][T10938] vxcan1 speed is unknown, defaulting to 1000
[  127.747274][T10938] lo speed is unknown, defaulting to 1000
[  127.809380][T10967] openvswitch: netlink: Flow key attr not present in new flow.
[  127.986721][T10981] netlink: 'syz.1.1663': attribute type 1 has an invalid length.
[  128.069170][T10983] vxcan1 speed is unknown, defaulting to 1000
[  128.158393][T10997] syzkaller1: entered promiscuous mode
[  128.160402][T10997] syzkaller1: entered allmulticast mode
[  128.305990][T10983] lo speed is unknown, defaulting to 1000
[  128.728479][T11027] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  128.783650][T11029] gre3: entered allmulticast mode
[  128.825329][T11031] bond0: (slave wlan1): Releasing backup interface
[  128.910555][T11031] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  129.110036][T11044] __nla_validate_parse: 7 callbacks suppressed
[  129.110073][T11044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1687'.
[  129.295973][T11054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1690'.
[  129.500934][T11063] vxcan1 speed is unknown, defaulting to 1000
[  129.545226][T11064] tipc: Cannot configure node identity twice
[  129.592376][T11063] lo speed is unknown, defaulting to 1000
[  129.662239][T11073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1697'.
[  129.673368][T11073] syz1: rxe_newlink: already configured on lo
[  129.684205][T11072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.747602][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1699'.
[  129.796893][T11078] vxcan1 speed is unknown, defaulting to 1000
[  129.887561][T11078] lo speed is unknown, defaulting to 1000
[  129.969970][T11086] vxcan1 speed is unknown, defaulting to 1000
[  130.178942][T11086] lo speed is unknown, defaulting to 1000
[  130.264141][  T760] wlan0: Trigger new scan to find an IBSS to join
[  130.356944][T11102] vxcan1 speed is unknown, defaulting to 1000
[  130.364953][T11107] tipc: Cannot configure node identity twice
[  130.393514][T11104] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  130.396356][T11104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.430436][T11112] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1710'.
[  130.433514][T11112] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  130.467287][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  130.470193][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'.
[  130.505000][T11113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.508540][T11113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.511369][T11113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.535973][T11113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.541532][T11113] geneve2: entered promiscuous mode
[  130.548200][T11113] geneve2: entered allmulticast mode
[  130.553007][T11102] lo speed is unknown, defaulting to 1000
[  130.587697][T11121] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.666756][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'.
[  130.672593][T11129] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  130.762280][T11140] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1720'.
[  130.791797][T11144] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1722'.
[  130.795814][T11144] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  130.833432][T11147] netlink: 'syz.1.1723': attribute type 1 has an invalid length.
[  130.836612][T11147] netlink: 'syz.1.1723': attribute type 1 has an invalid length.
[  130.938411][T11155] netlink: 'syz.1.1726': attribute type 5 has an invalid length.
[  131.141954][T11173] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  131.268469][T11189] netlink: 'syz.0.1736': attribute type 1 has an invalid length.
[  131.298731][T11189] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.431804][T11193] vxcan1 speed is unknown, defaulting to 1000
[  131.521828][T11203] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  131.531759][T11203] vlan3: entered allmulticast mode
[  131.533594][T11203] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  131.547061][T11193] lo speed is unknown, defaulting to 1000
[  131.719800][T11218] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  131.773150][T11221] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 60392 - 0
[  131.776244][T11221] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 60392 - 0
[  131.779426][T11221] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 60392 - 0
[  131.782175][T11221] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 60392 - 0
[  131.788270][T11221] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 33821 - 0
[  131.791036][T11221] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 33821 - 0
[  131.793830][T11221] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 33821 - 0
[  131.808378][T11221] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 33821 - 0
[  131.817767][T11221] geneve3: entered promiscuous mode
[  131.819505][T11221] geneve3: entered allmulticast mode
[  131.967031][T11231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.108864][T11244] vxcan1 speed is unknown, defaulting to 1000
[  132.191914][T11244] lo speed is unknown, defaulting to 1000
[  132.256347][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.408677][T11257] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  132.568763][T11261] netlink: 'syz.2.1761': attribute type 13 has an invalid length.
[  132.571668][T11261] netlink: 'syz.2.1761': attribute type 17 has an invalid length.
[  132.596952][T11261] dummy0: left promiscuous mode
[  132.600806][T11261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.631267][T11261] vxcan1 speed is unknown, defaulting to 1000
[  132.678501][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.765109][T11261] lo speed is unknown, defaulting to 1000
[  132.806064][T11286] syzkaller1: entered promiscuous mode
[  132.808046][T11286] syzkaller1: entered allmulticast mode
[  133.295486][T11326] vxcan1 speed is unknown, defaulting to 1000
[  133.295642][   T28] wlan0: Trigger new scan to find an IBSS to join
[  133.386691][T11326] lo speed is unknown, defaulting to 1000
[  133.739237][T11352] vxcan1 speed is unknown, defaulting to 1000
[  133.828240][T11355] bridge3: entered promiscuous mode
[  133.830006][T11355] bridge3: entered allmulticast mode
[  133.865269][T11355] team0: Port device bridge3 added
[  133.869473][T11352] lo speed is unknown, defaulting to 1000
[  133.960940][T11355] rdma_rxe: rxe_newlink: failed to add macvlan1
[  134.435946][T11378] __nla_validate_parse: 20 callbacks suppressed
[  134.435954][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1799'.
[  134.444157][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'.
[  134.469431][T11378] bond5: entered promiscuous mode
[  134.471426][T11378] 8021q: adding VLAN 0 to HW filter on device bond5
[  134.613539][T11397] erspan0: left allmulticast mode
[  134.620167][T11397] team0: left promiscuous mode
[  134.626468][T11397] dummy0: left promiscuous mode
[  134.645048][T11397] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  134.658031][T11397] xfrm1: left allmulticast mode
[  134.672712][T11397] gre3: left allmulticast mode
[  134.684705][T11397] bond5: left promiscuous mode
[  134.687523][T11402] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1806'.
[  134.690418][T11402] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  134.809810][T11410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1810'.
[  134.880387][T11415] vxcan1 speed is unknown, defaulting to 1000
[  134.924495][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'.
[  134.962238][T11415] lo speed is unknown, defaulting to 1000
[  135.010084][T11418] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1813'.
[  135.023123][T11418] 0: renamed from hsr_slave_1
[  135.027645][T11418] 0: entered allmulticast mode
[  135.029869][T11418] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  135.244735][T11436] netlink: 'syz.1.1820': attribute type 58 has an invalid length.
[  135.247554][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'.
[  135.296643][T11439] No such timeout policy "syz1"
[  135.310259][T11438] vxcan1 speed is unknown, defaulting to 1000
[  135.352921][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  135.356832][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'.
[  135.360076][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  135.508660][T11438] lo speed is unknown, defaulting to 1000
[  135.510793][T11455] netlink: 'syz.2.1825': attribute type 21 has an invalid length.
[  135.592879][T11465] bond7: entered promiscuous mode
[  135.595097][T11465] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.622284][T11465] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.626184][T11465] bond7: (slave vcan2): The slave device specified does not support setting the MAC address
[  135.630305][T11465] bond7: (slave vcan2): Error -95 calling set_mac_address
[  135.729430][T11473] netlink: 'syz.1.1832': attribute type 4 has an invalid length.
[  135.768646][T11473] 8021q: VLANs not supported on nlmon0
[  135.841689][T11480] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  135.922963][T11484] vxcan1 speed is unknown, defaulting to 1000
[  136.109586][T11484] lo speed is unknown, defaulting to 1000
[  136.179220][T11499] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  136.309540][T11512] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  136.317540][T11517] netlink: 'syz.1.1846': attribute type 10 has an invalid length.
[  136.335373][ T1091] wlan0: Trigger new scan to find an IBSS to join
[  136.564245][T11538] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  136.815249][T11578] netlink: 'syz.2.1865': attribute type 10 has an invalid length.
[  136.818358][T11578] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  136.860839][T11582] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  136.891745][T11589] netlink: 'syz.2.1870': attribute type 4 has an invalid length.
[  136.948844][T11595] netlink: 'syz.0.1872': attribute type 1 has an invalid length.
[  137.028406][T11603] netlink: 'syz.2.1876': attribute type 10 has an invalid length.
[  137.031273][T11603] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  137.284529][  T760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.483222][T11632] vxcan1 speed is unknown, defaulting to 1000
[  137.566487][T11632] lo speed is unknown, defaulting to 1000
[  138.007963][T11652] vxcan1 speed is unknown, defaulting to 1000
[  138.093119][T11652] lo speed is unknown, defaulting to 1000
[  138.403074][T11661] netlink: 'syz.1.1898': attribute type 10 has an invalid length.
[  138.678618][T11688] vxcan1 speed is unknown, defaulting to 1000
[  138.758897][T11688] lo speed is unknown, defaulting to 1000
[  138.829421][T11689] syzkaller1: entered promiscuous mode
[  138.831420][T11689] syzkaller1: entered allmulticast mode
[  139.095776][T11712] IPVS: Scheduler module ip_vs_sip not found
[  139.500852][ T5883] hid-generic 0005:15C2:1010.0001: item fetching failed at offset 0/1
[  139.505916][ T5883] hid-generic 0005:15C2:1010.0001: probe with driver hid-generic failed with error -22
[  139.512064][T11736] syzkaller1: entered promiscuous mode
[  139.515515][T11736] syzkaller1: entered allmulticast mode
[  139.612065][T11747] __nla_validate_parse: 25 callbacks suppressed
[  139.612076][T11747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1925'.
[  139.618637][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'.
[  139.621749][T11749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.626456][T11747] netem: change failed
[  139.630718][T11747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'.
[  139.652855][T11753] vxcan1 speed is unknown, defaulting to 1000
[  139.709779][T11758] netlink: 'syz.0.1929': attribute type 1 has an invalid length.
[  139.717498][T11758] smc: net device bond0 applied user defined pnetid SYZ2
[  139.722644][T11758] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  139.734819][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'.
[  139.798349][T11753] lo speed is unknown, defaulting to 1000
[  139.798402][T11755] vxcan1 speed is unknown, defaulting to 1000
[  139.882613][T11764] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1931'.
[  139.914434][T11757] netlink: 'syz.2.1927': attribute type 13 has an invalid length.
[  139.917035][T11757] netlink: 'syz.2.1927': attribute type 17 has an invalid length.
[  139.939626][T11757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.986799][T11755] lo speed is unknown, defaulting to 1000
[  140.033557][T11775] openvswitch: netlink: Message has 1 unknown bytes.
[  140.039851][T11775] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1935'.
[  140.114211][T11777] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1936'.
[  140.435614][T11811] netlink: 'syz.2.1947': attribute type 10 has an invalid length.
[  140.438869][T11799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1942'.
[  140.442216][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1947'.
[  140.474356][T11813] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1948'.
[  140.751774][T11823] veth7: entered promiscuous mode
[  140.820372][T11828] vxcan1 speed is unknown, defaulting to 1000
[  140.905587][T11828] lo speed is unknown, defaulting to 1000
[  141.031425][T11832] net_ratelimit: 4 callbacks suppressed
[  141.031434][T11832] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  141.483459][T11873] vxcan1 speed is unknown, defaulting to 1000
[  141.579125][T11873] lo speed is unknown, defaulting to 1000
[  141.607652][T11883] vxcan1 speed is unknown, defaulting to 1000
[  141.702758][T11883] lo speed is unknown, defaulting to 1000
[  141.991803][T11897] gre1: entered allmulticast mode
[  142.738926][T11923] vxcan1 speed is unknown, defaulting to 1000
[  142.773492][T11940] netlink: 'syz.1.1989': attribute type 10 has an invalid length.
[  142.823359][T11946] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  142.944250][T11923] lo speed is unknown, defaulting to 1000
[  143.107100][T11974] netlink: 'syz.0.1998': attribute type 10 has an invalid length.
[  143.110199][T11974] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  143.145604][T11978] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  143.157822][T11982] netlink: 'syz.0.2000': attribute type 4 has an invalid length.
[  143.249482][T11986] vxcan1 speed is unknown, defaulting to 1000
[  143.396754][T11986] lo speed is unknown, defaulting to 1000
[  143.461921][T12008] netlink: 'syz.1.2008': attribute type 10 has an invalid length.
[  143.563351][T12013] x_tables: duplicate underflow at hook 2
[  143.674652][T12024] netlink: 'syz.1.2015': attribute type 10 has an invalid length.
[  143.712148][T12030] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  143.881921][T12054] vxcan1 speed is unknown, defaulting to 1000
[  143.887328][T12052] netlink: 'syz.2.2028': attribute type 1 has an invalid length.
[  143.931937][T12060] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  143.939807][T12061] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  144.029351][T12054] lo speed is unknown, defaulting to 1000
[  144.153333][T12074] ipt_REJECT: ECHOREPLY no longer supported.
[  144.329291][T12090] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  144.641069][T12113] vxcan1 speed is unknown, defaulting to 1000
[  144.789929][T12113] lo speed is unknown, defaulting to 1000
[  145.069043][T12131] __nla_validate_parse: 26 callbacks suppressed
[  145.069058][T12131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2053'.
[  145.071846][T12127] vxcan1 speed is unknown, defaulting to 1000
[  145.076168][T12131] dummy0: entered promiscuous mode
[  145.105477][T12134] netlink: 'syz.2.2054': attribute type 3 has an invalid length.
[  145.109105][T12134] netlink: 'syz.2.2054': attribute type 1 has an invalid length.
[  145.235641][T12140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2056'.
[  145.238801][T12140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2056'.
[  145.245896][T12140] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  145.249460][T12140] gretap1: entered promiscuous mode
[  145.251320][T12140] gretap1: entered allmulticast mode
[  145.261180][T12127] lo speed is unknown, defaulting to 1000
[  145.306760][T12144] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2058'.
[  145.443148][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'.
[  145.448009][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2065'.
[  145.521182][T12173] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2068'.
[  145.525023][T12173] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  145.679560][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'.
[  145.682604][T12184] dummy0: left allmulticast mode
[  145.689882][T12184] bridge0: port 1(dummy0) entered disabled state
[  145.711598][T12184] bridge0 (unregistering): left allmulticast mode
[  145.753658][T12189] vxcan1 speed is unknown, defaulting to 1000
[  145.768244][T12200] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  145.941956][T12189] lo speed is unknown, defaulting to 1000
[  145.942789][T12219] xt_TPROXY: Can be used only with -p tcp or -p udp
[  145.969743][T12221] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2080'.
[  145.972828][T12221] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  146.023063][T12217] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2079'.
[  146.286128][T12254] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  146.345614][T12258] vxcan1 speed is unknown, defaulting to 1000
[  147.217919][T12258] lo speed is unknown, defaulting to 1000
[  147.332389][T12268] netlink: 'syz.2.2095': attribute type 10 has an invalid length.
[  147.366363][T12273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.372417][  T791] lo speed is unknown, defaulting to 1000
[  147.374679][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  147.376778][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  147.379965][  T791] syz1: Port: 1 Link DOWN
[  147.381408][  T791] lo speed is unknown, defaulting to 1000
[  147.487193][T12286] veth0_to_bridge: entered promiscuous mode
[  147.489585][T12285] veth0_to_bridge: left promiscuous mode
[  147.540930][T12292] netlink: del zone limit has 4 unknown bytes
[  147.790984][T12307] netlink: 'syz.0.2110': attribute type 1 has an invalid length.
[  147.894276][T12314] vxcan1 speed is unknown, defaulting to 1000
[  147.929550][T12315] tipc: Cannot configure node identity twice
[  147.973516][T12314] lo speed is unknown, defaulting to 1000
[  148.118114][T12318] netlink: 'syz.1.2114': attribute type 4 has an invalid length.
[  148.202676][T12322] x_tables: ip6_tables: udp match: only valid for protocol 17
[  148.386376][T12330] vxcan1 speed is unknown, defaulting to 1000
[  148.496529][T12330] lo speed is unknown, defaulting to 1000
[  148.725951][T12353] netlink: 'syz.1.2126': attribute type 2 has an invalid length.
[  148.750177][T12353] : entered promiscuous mode
[  148.945853][T12363] vxcan1 speed is unknown, defaulting to 1000
[  148.990630][T12364] tipc: Cannot configure node identity twice
[  149.029156][T12363] lo speed is unknown, defaulting to 1000
[  149.189856][T12367] netlink: 'syz.1.2130': attribute type 1 has an invalid length.
[  149.192816][T12367] netlink: 'syz.1.2130': attribute type 29 has an invalid length.
[  149.197199][T12367] netlink: 'syz.1.2130': attribute type 29 has an invalid length.
[  149.200208][T12367] netlink: 'syz.1.2130': attribute type 29 has an invalid length.
[  149.203186][T12367] netlink: 'syz.1.2130': attribute type 29 has an invalid length.
[  149.397812][T12374] vxcan1 speed is unknown, defaulting to 1000
[  149.516536][T12374] lo speed is unknown, defaulting to 1000
[  149.775209][  T791] page_pool_release_retry() stalled pool shutdown: id 38, 1 inflight 60 sec
[  150.741757][T12416] __nla_validate_parse: 44 callbacks suppressed
[  150.741767][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'.
[  150.746945][T12416] netlink: 'syz.1.2141': attribute type 7 has an invalid length.
[  150.749416][T12416] netlink: 'syz.1.2141': attribute type 8 has an invalid length.
[  150.752029][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'.
[  150.758378][T12416] syz_tun: entered promiscuous mode
[  150.761058][T12416] batadv_slave_1: entered promiscuous mode
[  150.763619][T12416] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  150.767108][T12416] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.793782][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'.
[  150.831126][T12425] vxcan1 speed is unknown, defaulting to 1000
[  150.968088][T12425] lo speed is unknown, defaulting to 1000
[  151.145958][T12449] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2152'.
[  151.418872][T12472] delete_channel: no stack
[  151.429380][T12475] delete_channel: no stack
[  151.481627][T12479] vxcan1 speed is unknown, defaulting to 1000
[  151.567632][T12479] lo speed is unknown, defaulting to 1000
[  151.767277][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'.
[  151.770338][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'.
[  151.989479][T12505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2168'.
[  152.028267][T12507] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  152.349335][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'.
[  152.817634][T12528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2176'.
[  152.870489][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2178'.
[  152.873586][T12532] dummy0: entered promiscuous mode
[  152.906309][T12534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.908545][T12535] syzkaller0: entered promiscuous mode
[  152.910312][T12535] syzkaller0: entered allmulticast mode
[  152.924043][T12536] tipc: Resetting bearer <eth:syzkaller0>
[  152.978750][T12534] tipc: Resetting bearer <eth:syzkaller0>
[  152.986889][T12534] tipc: Disabling bearer <eth:syzkaller0>
[  153.276300][T12559] vxcan1 speed is unknown, defaulting to 1000
[  153.325527][T12566] tipc: Cannot configure node identity twice
[  153.365838][T12559] lo speed is unknown, defaulting to 1000
[  153.424232][T12575] netlink: 'syz.1.2195': attribute type 2 has an invalid length.
[  153.712375][T12601] x_tables: duplicate underflow at hook 1
[  153.737648][T12602] x_tables: duplicate underflow at hook 1
[  153.770344][T12604] vxcan1 speed is unknown, defaulting to 1000
[  153.780589][T12607] netlink: 'syz.1.2206': attribute type 282 has an invalid length.
[  153.795368][T12608] tipc: Cannot configure node identity twice
[  153.890172][T12604] lo speed is unknown, defaulting to 1000
[  154.051476][T12628] openvswitch: netlink: Flow key attr not present in new flow.
[  154.058717][T12621] netlink: 'syz.1.2210': attribute type 1 has an invalid length.
[  154.065935][T12628] netlink: 'syz.0.2214': attribute type 2 has an invalid length.
[  154.083513][T12626] vxcan1 speed is unknown, defaulting to 1000
[  154.300101][T12626] lo speed is unknown, defaulting to 1000
[  155.080799][T12680] vxcan1 speed is unknown, defaulting to 1000
[  155.326858][T12701] netlink: 'syz.1.2240': attribute type 9 has an invalid length.
[  155.357857][T12680] lo speed is unknown, defaulting to 1000
[  155.361508][T12707] vxcan1 speed is unknown, defaulting to 1000
[  155.481395][T12707] lo speed is unknown, defaulting to 1000
[  155.727028][T12741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.729389][T12741] IPv6: NLM_F_CREATE should be set when creating new route
[  155.731682][T12741] IPv6: NLM_F_CREATE should be set when creating new route
[  155.734014][T12741] IPv6: NLM_F_CREATE should be set when creating new route
[  155.742072][T12741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.856138][T12743] __nla_validate_parse: 20 callbacks suppressed
[  155.856149][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'.
[  155.905808][T12754] vxcan1 speed is unknown, defaulting to 1000
[  155.965263][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2261'.
[  156.067279][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2263'.
[  156.086856][T12754] lo speed is unknown, defaulting to 1000
[  156.353476][T12795] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2268'.
[  156.447999][T12805] vxcan1 speed is unknown, defaulting to 1000
[  156.465378][T12807] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2274'.
[  156.500285][T12810] tipc: Cannot configure node identity twice
[  156.538918][T12813] net veth1_virt_wifi : renamed from virt_wifi0
[  156.642677][T12805] lo speed is unknown, defaulting to 1000
[  156.713102][T12816] vxcan1 speed is unknown, defaulting to 1000
[  156.858641][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2280'.
[  156.864483][T12816] lo speed is unknown, defaulting to 1000
[  156.919919][T12833] openvswitch: netlink: Multiple metadata blocks provided
[  157.009396][T12837] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2283'.
[  157.031986][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'.
[  157.098462][T12847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'.
[  157.151496][T12849] macvlan1: entered promiscuous mode
[  157.160520][T12849] ipvlan0: entered promiscuous mode
[  157.165140][T12849] ipvlan0: left promiscuous mode
[  157.167134][T12849] macvlan1: left promiscuous mode
[  157.290052][T12862] vxcan1 speed is unknown, defaulting to 1000
[  157.305262][T12860] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2293'.
[  157.472358][T12869] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  157.488710][T12862] lo speed is unknown, defaulting to 1000
[  157.488808][T12867] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  157.560061][T12876] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.825665][T12902] vxcan1 speed is unknown, defaulting to 1000
[  157.840053][T12908] tipc: Cannot configure node identity twice
[  158.084241][T12910] vxcan1 speed is unknown, defaulting to 1000
[  158.085157][T12902] lo speed is unknown, defaulting to 1000
[  158.307340][T12910] lo speed is unknown, defaulting to 1000
[  158.446861][T12938] tun0: tun_chr_ioctl cmd 35111
[  158.826501][T12956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.892328][T12963] netlink: 'syz.2.2321': attribute type 1 has an invalid length.
[  159.058537][T12975] netlink: 'syz.0.2325': attribute type 9 has an invalid length.
[  159.077347][T12975] macvlan3: entered promiscuous mode
[  159.081364][T12975] hsr0: entered promiscuous mode
[  159.085514][T12975] macvlan3: entered allmulticast mode
[  159.089269][T12975] hsr0: entered allmulticast mode
[  159.093019][T12975] hsr_slave_0: entered allmulticast mode
[  159.372971][T13008] vxcan1 speed is unknown, defaulting to 1000
[  159.416416][T13009] tipc: Cannot configure node identity twice
[  159.470012][T13008] lo speed is unknown, defaulting to 1000
[  159.542839][T13018] vxcan1 speed is unknown, defaulting to 1000
[  159.690474][T13018] lo speed is unknown, defaulting to 1000
[  159.788766][T13038] netlink: 'syz.1.2349': attribute type 2 has an invalid length.
[  160.083148][T13068] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  160.117204][T13069] vxcan1 speed is unknown, defaulting to 1000
[  160.140901][T13081] tipc: Cannot configure node identity twice
[  160.179175][T13085] netlink: 'syz.2.2365': attribute type 1 has an invalid length.
[  160.249929][T13091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.252430][T13091] syzkaller0: entered promiscuous mode
[  160.256682][T13091] syzkaller0: entered allmulticast mode
[  160.267532][T13091] tipc: Resetting bearer <eth:syzkaller0>
[  160.270358][T13090] tipc: Resetting bearer <eth:syzkaller0>
[  160.278484][T13090] tipc: Disabling bearer <eth:syzkaller0>
[  160.283332][T13069] lo speed is unknown, defaulting to 1000
[  160.308270][T13093] netlink: 'syz.2.2368': attribute type 49 has an invalid length.
[  160.367576][T13097] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  160.658125][T13122] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  160.673754][T13120] vxcan1 speed is unknown, defaulting to 1000
[  160.710437][T13126] openvswitch: netlink: IP tunnel TTL not specified.
[  160.781976][T13120] lo speed is unknown, defaulting to 1000
[  160.872248][T13137] __nla_validate_parse: 24 callbacks suppressed
[  160.872257][T13137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2384'.
[  160.946458][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  161.057368][T13147] !: renamed from dummy0 (while UP)
[  161.252312][T13154] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2387'.
[  161.258608][T13154] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  161.276264][T13150] vxcan1 speed is unknown, defaulting to 1000
[  161.536323][T13150] lo speed is unknown, defaulting to 1000
[  161.684463][T13187] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  161.689899][T13182] delete_channel: no stack
[  161.778238][T13195] netlink: 'syz.0.2397': attribute type 1 has an invalid length.
[  161.813427][T13195] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.842261][T13195] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.844984][T13195] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  161.848849][T13195] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  161.865368][T13196] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2396'.
[  161.868336][T13196] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  161.910726][T13195] batadv_slave_1: entered promiscuous mode
[  161.918163][T13195] bond6: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  161.922625][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2397'.
[  161.931095][T13195] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.956226][T13203] vxcan1 speed is unknown, defaulting to 1000
[  161.967645][T13211] tipc: Cannot configure node identity twice
[  161.980785][T13213] netlink: 'syz.0.2402': attribute type 4 has an invalid length.
[  161.984624][T13213] netlink: 'syz.0.2402': attribute type 4 has an invalid length.
[  162.094401][T13203] lo speed is unknown, defaulting to 1000
[  162.282110][T13230] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2408'.
[  162.286210][T13230] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  162.447299][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'.
[  162.450478][T13234] netlink: 'syz.1.2410': attribute type 2 has an invalid length.
[  162.453093][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'.
[  162.457258][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'.
[  162.638183][T13241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2412'.
[  162.687466][T13243] bond8: entered promiscuous mode
[  162.689190][T13243] bond8: entered allmulticast mode
[  162.700098][T13243] bridge6: the hash_elasticity option has been deprecated and is always 16
[  162.970933][T13251] vxcan1 speed is unknown, defaulting to 1000
[  163.088015][T13251] lo speed is unknown, defaulting to 1000
[  163.457584][T13266] vxcan1 speed is unknown, defaulting to 1000
[  163.485161][T13269] tipc: Cannot configure node identity twice
[  163.646041][T13266] lo speed is unknown, defaulting to 1000
[  163.750921][T13282] tc_dump_action: action bad kind
[  163.794977][T13290] nbd: illegal input index -381222912
[  163.829755][T13292] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  163.838373][T13296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.848353][T13296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.851301][T13296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.863820][T13296] team0: Port device geneve0 added
[  163.907047][T13302] tc_dump_action: action bad kind
[  163.950075][T13306] validate_nla: 2 callbacks suppressed
[  163.950083][T13306] netlink: 'syz.2.2436': attribute type 1 has an invalid length.
[  164.019611][T13315] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  164.131292][T13327] 8021q: adding VLAN 0 to HW filter on device bond7
[  164.138960][T13327] bond0: (slave bond7): Enslaving as a backup interface with a down link
[  164.205049][T13342] xt_hashlimit: size too large, truncated to 1048576
[  164.263337][T13345] vxcan1 speed is unknown, defaulting to 1000
[  164.294760][T13346] Cannot find add_set index 3 as target
[  164.388971][T13351] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  164.418985][T13345] lo speed is unknown, defaulting to 1000
[  164.442271][T13355] x_tables: duplicate underflow at hook 1
[  164.456758][T13355] x_tables: duplicate underflow at hook 1
[  164.622742][T13368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.667180][T13373] netlink: 'syz.2.2458': attribute type 1 has an invalid length.
[  164.789376][T13382] vxcan1 speed is unknown, defaulting to 1000
[  164.816467][T13390] tipc: Cannot configure node identity twice
[  164.914604][T13382] lo speed is unknown, defaulting to 1000
[  165.020681][T13402] xt_ecn: cannot match TCP bits for non-tcp packets
[  165.461446][T13440] warn_alloc: 1 callbacks suppressed
[  165.461456][T13440] syz.0.2480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  165.469570][T13440] CPU: 0 UID: 0 PID: 13440 Comm: syz.0.2480 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  165.469582][T13440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.469586][T13440] Call Trace:
[  165.469590][T13440]  <TASK>
[  165.469594][T13440]  dump_stack_lvl+0x189/0x250
[  165.469608][T13440]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.469618][T13440]  ? __pfx__printk+0x10/0x10
[  165.469628][T13440]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.469637][T13440]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.469646][T13440]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  165.469656][T13440]  warn_alloc+0x214/0x310
[  165.469664][T13440]  ? stack_depot_save_flags+0x40/0x900
[  165.469675][T13440]  ? __pfx_warn_alloc+0x10/0x10
[  165.469682][T13440]  ? kasan_save_track+0x4f/0x80
[  165.469691][T13440]  ? xskq_create+0x56/0x170
[  165.469699][T13440]  ? xsk_init_queue+0xb0/0x110
[  165.469704][T13440]  ? xsk_setsockopt+0x43f/0x710
[  165.469714][T13440]  ? do_sock_setsockopt+0x17c/0x1b0
[  165.469724][T13440]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  165.469732][T13440]  ? do_syscall_64+0xfa/0x3b0
[  165.469740][T13440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.469750][T13440]  __vmalloc_node_range_noprof+0x125/0x12f0
[  165.469772][T13440]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.469783][T13440]  ? xskq_create+0x56/0x170
[  165.469791][T13440]  ? __kasan_kmalloc+0x93/0xb0
[  165.469801][T13440]  vmalloc_user_noprof+0xad/0xf0
[  165.469811][T13440]  ? xskq_create+0xbf/0x170
[  165.469819][T13440]  xskq_create+0xbf/0x170
[  165.469827][T13440]  xsk_init_queue+0xb0/0x110
[  165.469835][T13440]  xsk_setsockopt+0x43f/0x710
[  165.469846][T13440]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.469857][T13440]  ? __fget_files+0x2a/0x420
[  165.469863][T13440]  ? aa_sock_opt_perm+0x74/0x110
[  165.469872][T13440]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  165.469880][T13440]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.469891][T13440]  do_sock_setsockopt+0x17c/0x1b0
[  165.469903][T13440]  __x64_sys_setsockopt+0x13f/0x1b0
[  165.469915][T13440]  do_syscall_64+0xfa/0x3b0
[  165.469922][T13440]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.469929][T13440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.469936][T13440]  ? exc_page_fault+0x9f/0xf0
[  165.469943][T13440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.469950][T13440] RIP: 0033:0x7fba15b8e9a9
[  165.469958][T13440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.469965][T13440] RSP: 002b:00007fba1697f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  165.469973][T13440] RAX: ffffffffffffffda RBX: 00007fba15db5fa0 RCX: 00007fba15b8e9a9
[  165.469979][T13440] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  165.469983][T13440] RBP: 00007fba15c10d69 R08: 0000000000000004 R09: 0000000000000000
[  165.469987][T13440] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.469992][T13440] R13: 0000000000000000 R14: 00007fba15db5fa0 R15: 00007ffe97341768
[  165.470003][T13440]  </TASK>
[  165.470006][T13440] Mem-Info:
[  165.568865][T13440] active_anon:5152 inactive_anon:0 isolated_anon:0
[  165.568865][T13440]  active_file:1458 inactive_file:38254 isolated_file:0
[  165.568865][T13440]  unevictable:1768 dirty:193 writeback:0
[  165.568865][T13440]  slab_reclaimable:9940 slab_unreclaimable:68622
[  165.568865][T13440]  mapped:18643 shmem:2451 pagetables:1030
[  165.568865][T13440]  sec_pagetables:0 bounce:0
[  165.568865][T13440]  kernel_misc_reclaimable:0
[  165.568865][T13440]  free:278953 free_pcp:24006 free_cma:0
[  165.587012][T13440] Node 0 active_anon:11368kB inactive_anon:0kB active_file:4656kB inactive_file:20732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39392kB dirty:596kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6504kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  165.597448][T13440] Node 1 active_anon:9240kB inactive_anon:0kB active_file:1176kB inactive_file:132284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35180kB dirty:176kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5524kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  165.607677][T13440] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  165.616894][T13440] lowmem_reserve[]: 0 812 812 812 812
[  165.618640][T13440] Node 0 DMA32 free:344036kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11368kB inactive_anon:0kB active_file:4656kB inactive_file:20732kB unevictable:3536kB writepending:596kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:48352kB local_pcp:31860kB free_cma:0kB
[  165.628662][T13440] lowmem_reserve[]: 0 0 0 0 0
[  165.630179][T13440] Node 1 DMA32 free:441576kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16996kB local_pcp:6704kB free_cma:0kB
[  165.639750][T13440] lowmem_reserve[]: 0 0 854 854 854
[  165.641419][T13440] Node 1 Normal free:314552kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9240kB inactive_anon:0kB active_file:1176kB inactive_file:132284kB unevictable:3536kB writepending:176kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:31220kB local_pcp:21520kB free_cma:0kB
[  165.651867][T13440] lowmem_reserve[]: 0 0 0 0 0
[  165.653424][T13440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  165.657830][T13440] Node 0 DMA32: 1757*4kB (UME) 1156*8kB (UME) 373*16kB (UM) 254*32kB (UM) 59*64kB (UM) 43*128kB (UME) 15*256kB (UM) 7*512kB (ME) 2*1024kB (M) 2*2048kB (ME) 71*4096kB (UM) = 344036kB
[  165.663573][T13440] Node 1 DMA32: 7*4kB (UM) 8*8kB (UM) 6*16kB (UM) 6*32kB (UM) 8*64kB (UM) 7*128kB (UM) 8*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 104*4096kB (UM) = 441596kB
[  165.669132][T13440] Node 1 Normal: 628*4kB (UME) 871*8kB (UME) 825*16kB (UME) 463*32kB (UME) 611*64kB (UME) 317*128kB (UM) 195*256kB (UME) 112*512kB (UM) 80*1024kB (UME) 4*2048kB (UM) 0*4096kB = 314552kB
[  165.675386][T13440] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  165.678327][T13440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  165.681243][T13440] 42163 total pagecache pages
[  165.682812][T13440] 0 pages in swap cache
[  165.684481][T13440] Free swap  = 124996kB
[  165.685864][T13440] Total swap = 124996kB
[  165.687246][T13440] 786301 pages RAM
[  165.688498][T13440] 0 pages HighMem/MovableOnly
[  165.690047][T13440] 241058 pages reserved
[  165.691420][T13440] 0 pages cma reserved
[  166.083172][T13474] __nla_validate_parse: 21 callbacks suppressed
[  166.083183][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'.
[  166.115276][T13478] syzkaller0: left promiscuous mode
[  166.117067][T13478] syzkaller0: left allmulticast mode
[  166.150945][T13480] vxcan1 speed is unknown, defaulting to 1000
[  166.229848][T13480] lo speed is unknown, defaulting to 1000
[  166.561177][T13494] vxcan1 speed is unknown, defaulting to 1000
[  166.681170][T13494] lo speed is unknown, defaulting to 1000
[  166.857726][T13500] vxcan1 speed is unknown, defaulting to 1000
[  166.924070][T13504] tipc: Cannot configure node identity twice
[  166.937535][T13508] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2503'.
[  166.940362][T13508] net_ratelimit: 2 callbacks suppressed
[  166.940369][T13508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  166.974456][T13500] lo speed is unknown, defaulting to 1000
[  167.121339][T13521] sctp: [Deprecated]: syz.1.2510 (pid 13521) Use of int in maxseg socket option.
[  167.121339][T13521] Use struct sctp_assoc_value instead
[  167.127530][T13521] netlink: 'syz.1.2510': attribute type 21 has an invalid length.
[  167.131302][T13521] netlink: 'syz.1.2510': attribute type 22 has an invalid length.
[  167.139193][T13521] netlink: 'syz.1.2510': attribute type 23 has an invalid length.
[  167.142934][T13521] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2510'.
[  167.248286][T13529] pim6reg1: entered promiscuous mode
[  167.250100][T13529] pim6reg1: entered allmulticast mode
[  167.280456][T13535] netlink: 'syz.0.2515': attribute type 10 has an invalid length.
[  167.283151][T13535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2515'.
[  167.326313][T13543] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2517'.
[  167.336127][T13543] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  167.354669][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2516'.
[  167.389365][T13529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2514'.
[  167.424835][T13552] xt_TCPMSS: Only works on TCP SYN packets
[  167.433058][T13529] 8021q: adding VLAN 0 to HW filter on device bond9
[  167.436342][T13529] team0: Port device bond9 added
[  167.662121][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2524'.
[  167.683242][T13562] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.692122][T13562] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.695288][T13562] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.702778][T13562] team0 (unregistering): Port device geneve0 removed
[  167.723557][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'.
[  167.876021][T13593] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2529'.
[  167.939915][T13599] vxcan1 speed is unknown, defaulting to 1000
[  167.947652][T13603] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  167.950267][T13603] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  168.019453][T13611] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  168.067348][T13599] lo speed is unknown, defaulting to 1000
[  168.195689][T13627] ieee802154 phy0 wpan0: encryption failed: -22
[  168.288504][T13636] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  168.300458][T13636] syzkaller0: entered promiscuous mode
[  168.305660][T13636] syzkaller0: entered allmulticast mode
[  168.313677][T13641] ip6gre1: entered allmulticast mode
[  168.480104][T13661] xt_CT: You must specify a L4 protocol and not use inversions on it
[  168.486125][T13658] vxcan1 speed is unknown, defaulting to 1000
[  168.545636][T13661] nbd: socks must be embedded in a SOCK_ITEM attr
[  168.555252][T13667] nbd: socks must be embedded in a SOCK_ITEM attr
[  168.666099][T13679] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  168.703466][T13658] lo speed is unknown, defaulting to 1000
[  168.903566][T13701] tc_dump_action: action bad kind
[  168.999043][T13707] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  169.041636][T13716] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  169.176035][T13736] vxcan1 speed is unknown, defaulting to 1000
[  169.291823][T13744] netlink: 'syz.0.2580': attribute type 1 has an invalid length.
[  169.305799][T13746] netlink: 'syz.0.2580': attribute type 1 has an invalid length.
[  169.374877][ T1099] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  169.382565][T13736] lo speed is unknown, defaulting to 1000
[  169.529566][T13755] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  170.174162][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.416019][T13787] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  170.568528][T13797] delete_channel: no stack
[  170.667488][T13809] ipt_REJECT: ECHOREPLY no longer supported.
[  170.819476][T13825] nbd: device at index 2 is going down
[  170.861091][T13835] netlink: 'syz.0.2605': attribute type 10 has an invalid length.
[  171.042080][T13855] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  171.153606][T13868] __nla_validate_parse: 22 callbacks suppressed
[  171.153622][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2616'.
[  171.180114][T13870] netlink: 'syz.1.2617': attribute type 1 has an invalid length.
[  171.209183][T13875] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2620'.
[  171.212395][T13875] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  171.290854][T13880] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2622'.
[  171.387930][T13891] vxcan1 speed is unknown, defaulting to 1000
[  171.475468][T13891] lo speed is unknown, defaulting to 1000
[  171.693226][T13834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.720355][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'.
[  171.781881][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'.
[  171.791984][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'.
[  171.828238][T13910] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2630'.
[  171.861824][T13912] netdevsim netdevsim1: Direct firmware load for 0. failed with error -2
[  171.865299][T13912] netdevsim netdevsim1: Falling back to sysfs fallback for: 0.
[  172.229891][T13921] netlink: 'syz.2.2635': attribute type 1 has an invalid length.
[  172.233248][T13921] netlink: 'syz.2.2635': attribute type 1 has an invalid length.
[  172.238066][T13921] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2635'.
[  172.241768][T13921] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.2635'.
[  172.301261][T13934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2637'.
[  172.374782][T13941] vxcan1 speed is unknown, defaulting to 1000
[  172.464684][T13941] lo speed is unknown, defaulting to 1000
[  172.519762][T13948] netlink: 'syz.0.2643': attribute type 16 has an invalid length.
[  172.818662][T13966] syzkaller0: entered promiscuous mode
[  172.820447][T13966] syzkaller0: entered allmulticast mode
[  173.683346][T13971] syzkaller0: entered promiscuous mode
[  173.685491][T13971] syzkaller0: entered allmulticast mode
[  174.544025][T13979] syz_tun (unregistering): left promiscuous mode
[  174.625993][T13986] net_ratelimit: 1 callbacks suppressed
[  174.626002][T13986] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  174.656473][T13992] openvswitch: netlink: Message has 8 unknown bytes.
[  174.796481][T14015] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  174.856489][T14020] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  174.857125][T14018] vxcan1 speed is unknown, defaulting to 1000
[  174.897063][T14028] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  174.984758][T14018] lo speed is unknown, defaulting to 1000
[  175.031623][T14043] ieee802154 phy0 wpan0: encryption failed: -22
[  175.056544][T14045] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  175.082809][T14047] tc_dump_action: action bad kind
[  175.316311][T14056] netlink: 'syz.2.2680': attribute type 1 has an invalid length.
[  175.351612][T14056] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  175.355306][T14056] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  175.362706][T14056] bond3: (slave vti0): making interface the new active one
[  175.365707][T14056] bond3: (slave vti0): Enslaving as an active interface with an up link
[  175.654118][T14072] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  175.790116][T14086] vxcan1 speed is unknown, defaulting to 1000
[  175.877141][T14086] lo speed is unknown, defaulting to 1000
[  176.056393][T14110] netlink: 'syz.2.2698': attribute type 10 has an invalid length.
[  176.060182][T14110] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  176.130319][T14116] syzkaller0: entered promiscuous mode
[  176.132171][T14116] syzkaller0: entered allmulticast mode
[  176.138598][T14116] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  176.281841][T14128] netlink: 'syz.2.2707': attribute type 10 has an invalid length.
[  176.284490][T14128] __nla_validate_parse: 13 callbacks suppressed
[  176.284502][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2707'.
[  176.290613][T14128] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  176.365457][T14134] netlink: ct family unspecified
[  176.367053][T14134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.386950][T14140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2712'.
[  176.389780][T14140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2712'.
[  176.434100][T14142] syzkaller0: entered promiscuous mode
[  176.436050][T14142] syzkaller0: entered allmulticast mode
[  176.504845][T14148] tc_dump_action: action bad kind
[  176.547446][T14155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2718'.
[  176.573093][T14155] Cannot find del_set index 286 as target
[  176.622590][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'.
[  176.695711][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'.
[  176.795626][T14189] netlink: 'syz.0.2729': attribute type 10 has an invalid length.
[  176.798205][T14189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2729'.
[  176.830090][T14196] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  176.887868][T14203] vxcan1 speed is unknown, defaulting to 1000
[  176.983807][T14203] lo speed is unknown, defaulting to 1000
[  177.027427][T14219] tc_dump_action: action bad kind
[  177.080847][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'.
[  177.083822][T14224] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2740'.
[  177.099836][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'.
[  177.139672][T14227] x_tables: duplicate underflow at hook 2
[  177.199241][T14238] netlink: 'syz.2.2745': attribute type 10 has an invalid length.
[  177.362512][T14247] vxcan1 speed is unknown, defaulting to 1000
[  177.393113][T14250] tipc: Cannot configure node identity twice
[  177.509093][T14256] vxcan1 speed is unknown, defaulting to 1000
[  177.520609][T14247] lo speed is unknown, defaulting to 1000
[  177.638717][T14269] netlink: 'syz.2.2754': attribute type 10 has an invalid length.
[  177.684424][T14256] lo speed is unknown, defaulting to 1000
[  177.765788][T14277] x_tables: duplicate underflow at hook 2
[  177.806398][T14280] netlink: 'syz.0.2758': attribute type 1 has an invalid length.
[  177.826866][T14280] bond8: (slave gretap1): making interface the new active one
[  177.829541][T14280] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  177.836394][T14280] vlan3: entered allmulticast mode
[  177.838036][T14280] bond8: entered allmulticast mode
[  177.839651][T14280] gretap1: entered allmulticast mode
[  177.841980][T14280] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  178.086071][T14301] vxcan1 speed is unknown, defaulting to 1000
[  178.089651][T14295] netlink: 'syz.0.2763': attribute type 3 has an invalid length.
[  178.162468][T14308] tc_dump_action: action bad kind
[  178.187120][T14312] bridge0: entered allmulticast mode
[  178.190527][T14312] bridge_slave_0: entered promiscuous mode
[  178.342073][T14326] pimreg: entered allmulticast mode
[  178.357112][T14301] lo speed is unknown, defaulting to 1000
[  178.475268][T14328] vxcan1 speed is unknown, defaulting to 1000
[  178.747828][T14328] lo speed is unknown, defaulting to 1000
[  178.809153][T14347] ip6tnl2: entered allmulticast mode
[  178.862923][T14348] vxcan1 speed is unknown, defaulting to 1000
[  179.003601][T14365] ip6gre0: entered promiscuous mode
[  179.015204][T14365] ip6gre0: left promiscuous mode
[  179.060439][T14348] lo speed is unknown, defaulting to 1000
[  179.187729][T14380] xt_CT: No such helper "syz0"
[  179.241666][T14383] vxcan1 speed is unknown, defaulting to 1000
[  179.409013][T14383] lo speed is unknown, defaulting to 1000
[  179.666899][T14395] vxcan1 speed is unknown, defaulting to 1000
[  179.712937][T14396] tipc: Cannot configure node identity twice
[  179.758996][T14395] lo speed is unknown, defaulting to 1000
[  179.955888][T14402] tc_dump_action: action bad kind
[  180.110026][T14411] vxcan1 speed is unknown, defaulting to 1000
[  180.198461][T14415] tipc: Cannot configure node identity twice
[  180.299074][T14413] vxcan1 speed is unknown, defaulting to 1000
[  180.364504][T14411] lo speed is unknown, defaulting to 1000
[  180.497402][T14421] tc_dump_action: action bad kind
[  180.503130][T14413] lo speed is unknown, defaulting to 1000
[  180.626662][T14428] netlink: 'syz.2.2804': attribute type 10 has an invalid length.
[  180.635763][T14428] net_ratelimit: 6 callbacks suppressed
[  180.635779][T14428] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  180.831537][T14438] netlink: 'syz.1.2807': attribute type 9 has an invalid length.
[  180.900322][T14443] tc_dump_action: action bad kind
[  180.968985][T14452] netlink: 'syz.2.2812': attribute type 10 has an invalid length.
[  180.971612][T14452] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  181.046788][T14455] netlink: 'syz.2.2813': attribute type 1 has an invalid length.
[  181.111779][T14460] xfrm3: entered promiscuous mode
[  181.113424][T14460] xfrm3: entered allmulticast mode
[  181.178132][T14464] tc_dump_action: action bad kind
[  181.291929][T14474] vxcan1 speed is unknown, defaulting to 1000
[  181.344068][T14478] tipc: Cannot configure node identity twice
[  181.386831][T14481] __nla_validate_parse: 15 callbacks suppressed
[  181.386842][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  181.393426][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2821'.
[  181.422093][T14486] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2822'.
[  181.476639][T14474] lo speed is unknown, defaulting to 1000
[  181.515017][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'.
[  181.520850][T14490] xfrm1: entered promiscuous mode
[  181.522581][T14490] xfrm1: entered allmulticast mode
[  181.564825][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'.
[  181.576772][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'.
[  181.642697][T14494] tc_dump_action: action bad kind
[  181.678039][T14497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2827'.
[  181.683115][T14497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2827'.
[  181.695935][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'.
[  181.702702][T14498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'.
[  181.742174][T14503] vxcan1 speed is unknown, defaulting to 1000
[  181.768517][T14505] netlink: 'syz.1.2830': attribute type 1 has an invalid length.
[  181.878899][T14503] lo speed is unknown, defaulting to 1000
[  181.892984][T14515] tc_dump_action: action bad kind
[  182.058774][T14522] vxcan1 speed is unknown, defaulting to 1000
[  182.061318][T14524] tipc: Cannot configure node identity twice
[  182.102169][T14526] bridge_slave_0: entered allmulticast mode
[  182.357256][T14522] lo speed is unknown, defaulting to 1000
[  182.504379][T14554] tc_dump_action: action bad kind
[  182.530370][T14556] xt_TPROXY: Can be used only with -p tcp or -p udp
[  182.599071][T14558] vlan3: entered allmulticast mode
[  182.718334][T14566] xfrm1: entered promiscuous mode
[  182.720111][T14566] xfrm1: entered allmulticast mode
[  182.976693][T14589] vxcan1 speed is unknown, defaulting to 1000
[  182.977652][T14590] netlink: 'syz.1.2850': attribute type 1 has an invalid length.
[  183.045253][T14594] tc_dump_action: action bad kind
[  183.116234][T14597] netlink: 'syz.1.2853': attribute type 1 has an invalid length.
[  183.118749][T14597] netlink: 'syz.1.2853': attribute type 3 has an invalid length.
[  183.123082][T14597] NCSI netlink: No device for ifindex 246
[  183.200700][T14589] lo speed is unknown, defaulting to 1000
[  183.391923][T14614] vxcan1 speed is unknown, defaulting to 1000
[  183.485324][T14623] x_tables: unsorted underflow at hook 2
[  183.510798][T14614] lo speed is unknown, defaulting to 1000
[  183.822174][T14644] netlink: 'syz.2.2864': attribute type 10 has an invalid length.
[  183.824927][T14644] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  183.918400][T14650] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.140566][T14658] team0 (unregistering): Port device bridge3 removed
[  184.157544][T14660] tc_dump_action: action bad kind
[  184.409952][T14672] netlink: 'syz.0.2875': attribute type 1 has an invalid length.
[  184.446832][T14675] vxcan1 speed is unknown, defaulting to 1000
[  184.556639][T14675] lo speed is unknown, defaulting to 1000
[  184.720487][T14686] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  185.410377][T14702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.415130][T14702] syzkaller0: entered promiscuous mode
[  185.416947][T14702] syzkaller0: entered allmulticast mode
[  185.421833][T14702] tipc: Resetting bearer <eth:syzkaller0>
[  185.426072][T14701] tipc: Resetting bearer <eth:syzkaller0>
[  185.433308][T14701] tipc: Disabling bearer <eth:syzkaller0>
[  185.522645][T14708] vxcan3: entered allmulticast mode
[  185.638487][T14712] vxcan1 speed is unknown, defaulting to 1000
[  185.725593][T14712] lo speed is unknown, defaulting to 1000
[  185.732131][T14715] xt_cgroup: invalid path, errno=-2
[  186.016579][T14741] validate_nla: 1 callbacks suppressed
[  186.016594][T14741] netlink: 'syz.1.2898': attribute type 10 has an invalid length.
[  186.021291][T14741] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  186.090628][T14747] netlink: 'syz.1.2900': attribute type 7 has an invalid length.
[  186.141776][T14748] vxcan1 speed is unknown, defaulting to 1000
[  186.310471][T14753] ip6gre2: entered allmulticast mode
[  186.316291][T14748] lo speed is unknown, defaulting to 1000
[  186.516630][T14780] netlink: 'syz.0.2912': attribute type 11 has an invalid length.
[  186.530571][T14774] netlink: 'syz.2.2909': attribute type 1 has an invalid length.
[  186.533253][T14774] __nla_validate_parse: 20 callbacks suppressed
[  186.533261][T14774] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2909'.
[  186.575635][T14788] netlink: 'syz.1.2911': attribute type 1 has an invalid length.
[  186.587195][T14785] netlink: 'syz.0.2913': attribute type 11 has an invalid length.
[  186.593074][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'.
[  186.714733][T14802] netlink: 'syz.1.2918': attribute type 1 has an invalid length.
[  186.768629][T14802] 8021q: adding VLAN 0 to HW filter on device bond10
[  186.806168][T14808] ipvlan0: entered allmulticast mode
[  186.808455][T14808] bond10: entered allmulticast mode
[  186.848654][T14802] bond10: (slave gretap1): making interface the new active one
[  186.851209][T14802] gretap1: entered allmulticast mode
[  186.853659][T14802] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  186.896789][T14817] netlink: 'syz.1.2925': attribute type 10 has an invalid length.
[  186.899657][T14817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2925'.
[  186.900239][T14816] vxcan1 speed is unknown, defaulting to 1000
[  186.902710][T14817] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  186.948973][T14821] tipc: Can't bind to reserved service type 1
[  186.951617][T14821] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  186.974245][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  187.003523][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'.
[  187.020260][T14816] lo speed is unknown, defaulting to 1000
[  187.047702][T14823] tipc: Resetting bearer <eth:vlan0>
[  187.099792][T14823] tipc: Disabling bearer <eth:ipvlan1>
[  187.136479][T14823] tipc: Disabling bearer <eth:vlan0>
[  187.328580][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'.
[  187.552879][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'.
[  187.629484][T14842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2932'.
[  187.906484][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  188.111722][T14874] vxcan1 speed is unknown, defaulting to 1000
[  188.218845][T14874] lo speed is unknown, defaulting to 1000
[  188.218940][T14876] vxcan1 speed is unknown, defaulting to 1000
[  188.326029][T14876] lo speed is unknown, defaulting to 1000
[  188.651026][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'.
[  188.664687][T14908] syzkaller0: entered promiscuous mode
[  188.666645][T14908] syzkaller0: entered allmulticast mode
[  188.687054][T14908] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  188.773664][T14916] batman_adv: batadv0: Adding interface: dummy0
[  188.776778][T14916] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.788031][T14916] batman_adv: batadv0: Interface activated: dummy0
[  188.800907][T14916] batadv0: mtu less than device minimum
[  188.803416][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.807849][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.811901][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.815820][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.819712][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.823597][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.827577][T14916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  188.851299][T14920] vxcan1 speed is unknown, defaulting to 1000
[  189.010768][T14928] vxcan1 speed is unknown, defaulting to 1000
[  189.102148][T14938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'.
[  189.119236][T14920] lo speed is unknown, defaulting to 1000
[  189.287943][T14928] lo speed is unknown, defaulting to 1000
[  189.571387][T14970] vxcan1 speed is unknown, defaulting to 1000
[  189.697068][T14970] lo speed is unknown, defaulting to 1000
[  189.870340][T14987] nbd: must specify at least one socket
[  190.417260][T15003] bond0: entered promiscuous mode
[  190.420226][T15003] netlink: 'syz.1.2985': attribute type 29 has an invalid length.
[  190.423218][T15003] netlink: 'syz.1.2985': attribute type 29 has an invalid length.
[  190.430954][T15003] netlink: 'syz.1.2985': attribute type 29 has an invalid length.
[  190.434962][T15003] netlink: 'syz.1.2985': attribute type 29 has an invalid length.
[  190.502494][T15006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.507097][T15006] syzkaller0: entered promiscuous mode
[  190.508958][T15006] syzkaller0: entered allmulticast mode
[  190.519060][T15007] vxcan1 speed is unknown, defaulting to 1000
[  190.527466][T15006] bond0: option miimon: invalid value (18446744073709551615)
[  190.529959][T15006] bond0: option miimon: allowed values 0 - 2147483647
[  190.533807][T15006] tipc: Resetting bearer <eth:syzkaller0>
[  190.609077][T15005] tipc: Resetting bearer <eth:syzkaller0>
[  190.629491][T15005] tipc: Disabling bearer <eth:syzkaller0>
[  190.746711][T15007] lo speed is unknown, defaulting to 1000
[  191.078439][T15028] vxcan1 speed is unknown, defaulting to 1000
[  191.205064][T15028] lo speed is unknown, defaulting to 1000
[  191.376055][T15035] 
[  191.376912][T15035] ======================================================
[  191.379370][T15035] WARNING: possible circular locking dependency detected
[  191.381578][T15035] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  191.384688][T15035] ------------------------------------------------------
[  191.386958][T15035] syz.2.2995/15035 is trying to acquire lock:
[  191.388938][T15035] ffffffff8f674738 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  191.392016][T15035] 
[  191.392016][T15035] but task is already holding lock:
[  191.394416][T15035] ffffffff8f6746d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  191.397396][T15035] 
[  191.397396][T15035] which lock already depends on the new lock.
[  191.397396][T15035] 
[  191.400693][T15035] 
[  191.400693][T15035] the existing dependency chain (in reverse order) is:
[  191.403626][T15035] 
[  191.403626][T15035] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  191.406200][T15035]        lock_acquire+0x120/0x360
[  191.407852][T15035]        _raw_spin_lock_bh+0x36/0x50
[  191.409588][T15035]        nr_rt_ioctl+0x390/0xd50
[  191.411184][T15035]        sock_do_ioctl+0xdc/0x300
[  191.412818][T15035]        sock_ioctl+0x576/0x790
[  191.414421][T15035]        __se_sys_ioctl+0xfc/0x170
[  191.416012][T15035]        do_syscall_64+0xfa/0x3b0
[  191.417604][T15035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.419632][T15035] 
[  191.419632][T15035] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  191.422216][T15035]        lock_acquire+0x120/0x360
[  191.423852][T15035]        _raw_spin_lock_bh+0x36/0x50
[  191.425570][T15035]        nr_rt_ioctl+0x193/0xd50
[  191.427197][T15035]        sock_do_ioctl+0xdc/0x300
[  191.428826][T15035]        sock_ioctl+0x576/0x790
[  191.430400][T15035]        __se_sys_ioctl+0xfc/0x170
[  191.432003][T15035]        do_syscall_64+0xfa/0x3b0
[  191.433663][T15035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.435734][T15035] 
[  191.435734][T15035] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  191.438243][T15035]        validate_chain+0xb9b/0x2140
[  191.440086][T15035]        __lock_acquire+0xab9/0xd20
[  191.441836][T15035]        lock_acquire+0x120/0x360
[  191.443514][T15035]        _raw_spin_lock_bh+0x36/0x50
[  191.445274][T15035]        nr_rt_device_down+0xa9/0x720
[  191.447048][T15035]        nr_device_event+0x137/0x150
[  191.448796][T15035]        notifier_call_chain+0x1b6/0x3e0
[  191.450642][T15035]        dev_close_many+0x29c/0x410
[  191.452364][T15035]        netif_close+0x158/0x210
[  191.454001][T15035]        dev_close+0x10a/0x220
[  191.455524][T15035]        bpq_device_event+0x2f4/0x600
[  191.457218][T15035]        notifier_call_chain+0x1b6/0x3e0
[  191.459011][T15035]        dev_close_many+0x29c/0x410
[  191.460724][T15035]        netif_close+0x158/0x210
[  191.462365][T15035]        dev_close+0x10a/0x220
[  191.463955][T15035]        bond_setup_by_slave+0x5f/0x3f0
[  191.465766][T15035]        bond_enslave+0x7a0/0x3a20
[  191.467470][T15035]        bond_do_ioctl+0x635/0x9b0
[  191.469171][T15035]        dev_ifsioc+0x90b/0xf00
[  191.470770][T15035]        dev_ioctl+0x7b4/0x1150
[  191.472392][T15035]        sock_do_ioctl+0x22c/0x300
[  191.474061][T15035]        sock_ioctl+0x576/0x790
[  191.475674][T15035]        __se_sys_ioctl+0xfc/0x170
[  191.477320][T15035]        do_syscall_64+0xfa/0x3b0
[  191.479247][T15035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.481723][T15035] 
[  191.481723][T15035] other info that might help us debug this:
[  191.481723][T15035] 
[  191.485238][T15035] Chain exists of:
[  191.485238][T15035]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  191.485238][T15035] 
[  191.489685][T15035]  Possible unsafe locking scenario:
[  191.489685][T15035] 
[  191.492109][T15035]        CPU0                    CPU1
[  191.493874][T15035]        ----                    ----
[  191.495627][T15035]   lock(nr_neigh_list_lock);
[  191.497193][T15035]                                lock(&nr_node->node_lock);
[  191.499621][T15035]                                lock(nr_neigh_list_lock);
[  191.501965][T15035]   lock(nr_node_list_lock);
[  191.503483][T15035] 
[  191.503483][T15035]  *** DEADLOCK ***
[  191.503483][T15035] 
[  191.506102][T15035] 2 locks held by syz.2.2995/15035:
[  191.507827][T15035]  #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  191.510694][T15035]  #1: ffffffff8f6746d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  191.513927][T15035] 
[  191.513927][T15035] stack backtrace:
[  191.515861][T15035] CPU: 0 UID: 0 PID: 15035 Comm: syz.2.2995 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  191.515872][T15035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.515878][T15035] Call Trace:
[  191.515882][T15035]  <TASK>
[  191.515887][T15035]  dump_stack_lvl+0x189/0x250
[  191.515899][T15035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.515907][T15035]  ? __pfx__printk+0x10/0x10
[  191.515918][T15035]  ? print_lock_name+0xde/0x100
[  191.515928][T15035]  print_circular_bug+0x2ee/0x310
[  191.515939][T15035]  check_noncircular+0x134/0x160
[  191.515949][T15035]  validate_chain+0xb9b/0x2140
[  191.515959][T15035]  ? rt6_disable_ip+0x6b3/0x720
[  191.515970][T15035]  ? __lock_acquire+0xab9/0xd20
[  191.515977][T15035]  __lock_acquire+0xab9/0xd20
[  191.515985][T15035]  ? nr_rt_device_down+0xa9/0x720
[  191.515991][T15035]  lock_acquire+0x120/0x360
[  191.515998][T15035]  ? nr_rt_device_down+0xa9/0x720
[  191.516007][T15035]  ? nr_rt_device_down+0xa9/0x720
[  191.516013][T15035]  _raw_spin_lock_bh+0x36/0x50
[  191.516023][T15035]  ? nr_rt_device_down+0xa9/0x720
[  191.516030][T15035]  nr_rt_device_down+0xa9/0x720
[  191.516038][T15035]  ? do_raw_spin_unlock+0x4d/0x240
[  191.516048][T15035]  nr_device_event+0x137/0x150
[  191.516054][T15035]  notifier_call_chain+0x1b6/0x3e0
[  191.516064][T15035]  dev_close_many+0x29c/0x410
[  191.516074][T15035]  ? __pfx_dev_close_many+0x10/0x10
[  191.516082][T15035]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  191.516093][T15035]  ? bond_netdev_event+0x227/0xe80
[  191.516104][T15035]  netif_close+0x158/0x210
[  191.516112][T15035]  ? __pfx_netif_close+0x10/0x10
[  191.516120][T15035]  ? tun_device_event+0x77/0x1020
[  191.516131][T15035]  dev_close+0x10a/0x220
[  191.516140][T15035]  bpq_device_event+0x2f4/0x600
[  191.516173][T15035]  notifier_call_chain+0x1b6/0x3e0
[  191.516183][T15035]  dev_close_many+0x29c/0x410
[  191.516192][T15035]  ? __pfx_dev_close_many+0x10/0x10
[  191.516202][T15035]  netif_close+0x158/0x210
[  191.516211][T15035]  ? __pfx_netif_close+0x10/0x10
[  191.516219][T15035]  ? do_raw_spin_lock+0x121/0x290
[  191.516229][T15035]  ? __local_bh_enable_ip+0x12d/0x1c0
[  191.516238][T15035]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.516246][T15035]  dev_close+0x10a/0x220
[  191.516256][T15035]  bond_setup_by_slave+0x5f/0x3f0
[  191.516264][T15035]  bond_enslave+0x7a0/0x3a20
[  191.516272][T15035]  ? trace_sched_exit_tp+0x38/0x120
[  191.516279][T15035]  ? __schedule+0x1713/0x4d00
[  191.516287][T15035]  ? __pfx_bond_enslave+0x10/0x10
[  191.516296][T15035]  ? apparmor_capable+0x137/0x1b0
[  191.516304][T15035]  ? full_name_hash+0x92/0xe0
[  191.516313][T15035]  ? netdev_name_node_lookup+0xdf/0x120
[  191.516320][T15035]  bond_do_ioctl+0x635/0x9b0
[  191.516329][T15035]  ? __pfx_bond_do_ioctl+0x10/0x10
[  191.516338][T15035]  ? __mutex_lock+0xa6d/0xe80
[  191.516347][T15035]  ? full_name_hash+0x92/0xe0
[  191.516355][T15035]  ? netdev_name_node_lookup+0xdf/0x120
[  191.516362][T15035]  dev_ifsioc+0x90b/0xf00
[  191.516370][T15035]  ? dev_load+0x21/0x1f0
[  191.516378][T15035]  dev_ioctl+0x7b4/0x1150
[  191.516387][T15035]  sock_do_ioctl+0x22c/0x300
[  191.516395][T15035]  ? __pfx_sock_do_ioctl+0x10/0x10
[  191.516402][T15035]  ? __lock_acquire+0xab9/0xd20
[  191.516411][T15035]  sock_ioctl+0x576/0x790
[  191.516418][T15035]  ? __pfx_sock_ioctl+0x10/0x10
[  191.516425][T15035]  ? __fget_files+0x2a/0x420
[  191.516430][T15035]  ? __fget_files+0x3a0/0x420
[  191.516436][T15035]  ? __fget_files+0x2a/0x420
[  191.516442][T15035]  ? bpf_lsm_file_ioctl+0x9/0x20
[  191.516451][T15035]  ? __pfx_sock_ioctl+0x10/0x10
[  191.516457][T15035]  __se_sys_ioctl+0xfc/0x170
[  191.516466][T15035]  do_syscall_64+0xfa/0x3b0
[  191.516473][T15035]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.516480][T15035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.516487][T15035]  ? exc_page_fault+0x9f/0xf0
[  191.516493][T15035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.516500][T15035] RIP: 0033:0x7f693e38e9a9
[  191.516508][T15035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.516515][T15035] RSP: 002b:00007f693f1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  191.516523][T15035] RAX: ffffffffffffffda RBX: 00007f693e5b6080 RCX: 00007f693e38e9a9
[  191.516528][T15035] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000004
[  191.516533][T15035] RBP: 00007f693e410d69 R08: 0000000000000000 R09: 0000000000000000
[  191.516538][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.516542][T15035] R13: 0000000000000000 R14: 00007f693e5b6080 R15: 00007fff7e9935b8
[  191.516550][T15035]  </TASK>
[  191.674269][T15035] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.678679][T15035] bond0: (slave rose0): Enslaving as an active interface with an up link

VM DIAGNOSIS:
11:51:54  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000006f97 RDI=0000000000006f98 RBP=ffffffff99df6590 RSP=ffffc90007f0e870
R8 =ffff888107f78237 R9 =1ffff11020fef046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f693f1dc6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe22bb6dff8 CR3=0000000034380000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f693e411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021e0914c RBX=ffffffff99ccff30 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900001e0b00 RBP=dffffc0000000000 RSP=ffffc900001e0c10
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff5200003c160
R12=ffff888028ef7190 R13=ffff88810f048a60 R14=0000000000000000 R15=ffff88810f048a48
RIP=ffffffff84c6882f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f613d2a5ba8 CR3=0000000028e8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f76ad011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
