last executing test programs:

1.168810331s ago: executing program 2 (id=6019):
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)

1.066544544s ago: executing program 2 (id=6022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
unshare(0x22020600)
socket(0x1e, 0x4, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00100000bca2000000000000a6020000f8ffffffb702000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000370429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b010000000000002c0012800b0001006d616373656300001c000280050003000d"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f0000000080), 0x4) (async)
sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b5181", 0x2a}], 0x1}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
writev(r11, &(0x7f00000002c0), 0x2c5) (async)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000340))
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.010496295s ago: executing program 2 (id=6024):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@remote, @multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r5, &(0x7f00000002c0)="4cf7", 0x2)
splice(0xffffffffffffffff, &(0x7f0000000040), r5, 0x0, 0x6, 0x0)
readv(r0, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000015000080000000000000", @ANYRES32=r3, @ANYBLOB="0000000000001422cc00"/20, @ANYRES16=r5, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000000000000000000000410e000000000000000000"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYBLOB="1b667b09ae53cd1755abedb56630fd16774d2fc63a0b055185085d36f7f5e0f5f9260232b9ebe054594a712587b320cc25552785ba893779689ec22da843ad5c2800165473c6790c08645a354d1f62349ca16e1aec18ace411d887c623959d15a7a4487d6ff3935587e662c508520482095695b4942261f3465df013f88c48444e8ccb29f8d16e32c5fbdcd66bf4c821cc690b4a579ce6c566d0eb12e40a38418575baf35ca66558d20ae19c684b4d50b9481599fa4dba65a14b2592eca5b879d2c9391a0739e99b1c92e4e67fa8f011600a18", @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r2, 0x25, 0x10, @void}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0xc000)
syz_emit_ethernet(0x37, &(0x7f0000000140)=ANY=[], 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r9, 0x0, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000540)={0x3, 0x20, 0x6, 0x20, 0x2}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)

950.143938ms ago: executing program 2 (id=6026):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448f0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x20008840, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x1c)

947.64413ms ago: executing program 0 (id=6027):
r0 = socket(0x840000000002, 0x3, 0xff) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002080)={{r2}, "35220f76eaf08867a569a7865041fb8e46571cdc459527db44e402a2bc07d2d7073ad722c10e495d10d35250376cb324c8744bfe1dfe491b7e678f805589bceacd42d384bfa6c5e546efa319954bf8d25c573e0c9121a48e28f855a045fdb23d4165e346007ca7a487e060f1f07f2e1939628bdf967c8228c2a136bf5a4d5c4e19f0250bd53a89a123612d3861cff36a97808dda63ba5967eb98b1a7eb8fe0a5138002463ba5fbd61033beff2b70fbcb29642c4d9feb333f147190c68ec33d022114c7232a72346917222e8957486c0c795ff37d3419ab3c9bc2a45f2f24861961d7049133cbbe0e71bd386cfa7bdda207039e2a24c894efeb062acd876725279bfe2ea38487ab145953ee7153ab322c79eff898ab81aa6550cb191305b70e041c5f897d04d1cef80e640badf462694724ef8059143e86c7c80d74b4f156cca629b53146ba4162e21869d611371756e935b5ee576491a7cb458e94f4f20f99df11c76a6465307b89923d29e2033eddd16d4a7b101129fa4c6633fa687caae211ed5528bc0e0f819c73d8df02bcf7e2014d2231a709bb4180630cdfc7025cf1a3e16ed1b454ead163892c875c25fafe54a19119e4f8c12fb292a4ff23678382e728236573f18ce709c15425e29fd98185b753c414ef2364af61dd7fe21ef0ffa4ba44627b6c7b23380ede223be359cb443c96a2283de31ca79b0ce4b8bc0084adf0abd6958c84371613928d1fb37144af67f74ec77a326daf54bd5367ef8188c4e10ca86cac04180255c64678435cd1d5f1427f3f40dabb23939c8fc84f72b5e2376e278ca5d026212074cc1d9a894e786e79537d560a12e26da9ec17a51cf58c0c442cd948ecf84c35ec15e535ed9ddf372ea3b0f98d0cc06e95dfe5ead516e40b446d3d1e5b870a20b98331d430ceaa85385345bb582bff030358358b79e1af4421a7f04ecfa1876f06257512fa2f4dfa1f7b63d6f878fa5cdfcdcd5ad7383fba84d71a61a065b793f295efa2969cbb4ab402fcf073b5a9abf8137f2ffc279b75dd5e9a4e79c487118e15e1b1125b9625481fc535c6e20ed0bf860dcbc4ffdec43fdcdecd38ba2ddb590b1029b7cbae111cf87680c0c44b87a4591be3f07365c42f1a783aae9c84d28346aab05b8d0223d48adc865740b4c4f925769dc97632adf5d4b20affe92de0cb098a432c14bce6d6984c543abf12284a415485c0b0e9769c1dd704021e6c365c1b3fc3d7486e7c04ddd75bf25149184e001a9c43f2ba3ec1aca781c7851a247943d347541c3ad48b9e817ba4235018956d7588a0d6f760b77e0e871d3a4369d9148f4de263176432780b82f59be71604fb1884abda41146583e09452820b3785c2d00c37a8a5893594e9435beccceb8e5a119a85a889117270110b710f28818bfacf7711fe75bea685675690f92893f155183ea3b53c05f6fc73b007296c3b581cab08c918a06fdd23d5a0fdeb4cd1da7d7393ac9ff4d17790ea0267ca859fac86f9f564762bb888440a9c9e5efd625265659bafff48478650f657a98f4e93e73509d0680db3c9501d119626a78439c584c58ac7da0568bc6b25d08c51d3a4b569f5c5c96f18e1c564970971b1732989c40ac14b9c297a247189dc74f4a70f5ec744776d19e3fcbd00ed823dea19b7b3419246fd3654a9fc184452a2c543c5e5b208fed7184471b334d5189900a8ed55f1baac426f705c910cc0f87a42d0d42ce93006218b1270b7157d6da012f0a0166aaca6231cb4eaf772b344cb660c856ec02e4268302dc264b72b693671122bdac0854959c142976697d337f717692eb96668126df0af5b805ad36c2801864c082676834008d22547f8857605b47f3f66ca1f0a3068e9a8d374805db711767eb32cb5f51d00eb08162393846125708b78331677f6462490664c85bd3ab8600d19f500cdd047d2f2a62eeb4a515383de45d5ad7d5675ec226132ece695d7d878fed14de6392e3447fb3e9f46a6f684f6703474654f4ec0fe0501f7e11c28b9a135d5640deea0c7d8d0700aed6c6acbe4c03e85bf5bb91c2a41486d7f12b4ed8e063938c8afc18fe18e8b39d7370536040895b492f5b1eb74396867b24ac35a1ed4478574f8dbc9d31c5f9744f3bb366ae3eab201c25ef1408978ee57681b7fa1f2e448ce196090e540723e48a47adbeb406a0e68ac7026750f7219c8d2df2d6d2ad1ea14edaf0514df61ef25ef33380b0ed932ae2ce69108ba313be162d2a00d997764a4b2b9795b19e57ff26de093017883a3c7f492be928d7e79237e89b961e09071b92c334b1b8ddafc8ce7a7f4b92ac5fdc9e571b7af167ccfe8359d245d5bb969591c4a4763b24b3553b01b7785fef7c6b15c64e7bc8b06da3da4a358d65cd5d024659795464efc59a1716bbca0d63ea6cd1ba16a17f6e2073194f0a3906886c84d996122d9966719f9d0e659a3f8fcfe0138c7a254462695aa89ab2fc0c81257002e1e2c10e6c344dba7f1d3b9e618bef38ddbd887d30ae2d42f0c73eaac7530af371707ed59cdca911dabe06454fbe320e75dd14319158ad7484c6731dcfa1650d71ccdb781d06a940aa2b359575ad70c9fff1fbd295dcf9038dfd44e76bb7f56cae0d0897b6d7606486f570ecec8bacdd4e07bdd13454eb664800c6dc2feccfc88362a252960b5713ae7b872c749a3dfaadb8fcc766047258e6df4fddfa0493ed1b896fea79bf2d49db4dd8b287bc399c106f31bd733a9ed6526992bb1b4ece3b2476dfddf1e8b3b63142fd009724cc76a8a28fc92d3b9945ad179d596d60c7614ed941046e12c588517cfe96616031ec28583830c824daed1a95e577445e237306c0f9d92e56c3ba10da29ff43d78a64eef1c3112dea461046092098e4a26ad9454b4a9f8def74e3ffaf1332932348c6954424936c64cdd450b3ae79d8dc393e1763f60ce52ecc2dd7f516fc7918c0b01c391071fe983b55864c188a1ddcecfe868d23c1dc0a1c24b6f4ab73929bc42b4bb2059016ac5de21c7114af31797d32e64c5bc4f518ef3303f6c4cd7d067796daeac3997432987506855e243b25d908eaff06e2d65863659c67902d7124e752463c15030e37d54a73dc276038d2075533b610d00572617cef82811ae547be07671dafb7c594109c51c7610617b2c79fab6a5b5d68f60a03c4e8aa39b94a0f2e7cb9daa8c15c962f6aa752aa2cf701f690ae936cf42d6fec9492e5c4e3af73e9c18299ba46d2211defae3fe74c561dd3ee3356b2d6c7f15cdc00168483417424ffe6caa8bff0f8c3fe38a5abaf17fceed8b2ed8b04fc01dc39fae33e39b8efc5b83cb858663fd766d0c3f19821e91bb2a2dd477ca64c52aa62b1ea7a15fd05cabc0f0a546ff95d1cfbe5af72d6ad8f45abba97927ccfbe38a022c6545d6377f3100a8dfd2da29d73f98714947ee203e953a652e0a02d7332a03c2ac3d1bbefc8fad6d1acbfcf5be162d15f0be56681956f4ec3cbea6eac6c4fe4c903fbd5af456cf1874524f0e8a97da65ea107a500317a096035c32ca7cf17d8f3e59045ad65589821c161db4ee0d304c6a44e4d272aa7dca45467eea6717d3359da6656932265c25c069782f3b256274df103b1da986091609b92fa986260ecaed70c18ccb6866dfc83fe600dae74696973f54ab2b2fe30eb28cb85794a30eccf070bd104253700f3b5afefe92c621f72278c5d3bf686a215d6af39f9e830fac3456fac4dfaa475fe7556fc6c98a3935adf2c70d65b05f69e8833e4ed4cbc0f2832961f642499c05df4073a940eec4e9c9f2096918f570607731be9c0756910738dad4fa2202274185178db73098eb8b638a0beaa66562e98adb6dbf412d60e44f197a991cd5764eeea683850c8dd5493fa8d69089591b8c68c6e0423eca03273dba77f4bdb2c3da2d4785b91be54660d3f0b694e88645f8b0819c530db58733237c9359f7d56ccefb28c3d391a4da4a382ac6dbbd6d87692518908ffe344d7423348c1c931a60059262fb396ea39c1e2b689d3b86810e1cb6589f873c2972ea312cdf4692f7cc8d9ac8551b4d3f19396ec0e0dd794c3ca7de7d31fdc7dcf47d455d70046fd89205c5cb8d047e99670d21f9b8d803c3e0b28c53d584938a8ba27de109095c631d0af5e893ca8db8561bac74a830e3ce7874b62f01916ce09df8cc658105c59bc1f6e7da2f350a1495ab89566b902550d79f0beadcb75e5cb7932dc35b6896675508308a703e8e00885711b9f26ff3d87ff075bba1660f0eb93b8f16df55c18901fa5e43f0b782d73b4c6e2cdbb689f817f2e4301eb9e41ea7f39deeafb32496f360c4ad775b693bcb77f17ae4acafecc2a88ca113899790f06b89f585bb318d85fcbb74261a27d89a38859e85903434b16461c42d782aec32da7730c2739010042a32d30c8e946c75dc2e15ff52f110c212d319b3bc332174b6dfd42a1203d571fd1157ad6c232a51d48e817a198b79ee9bbff574132a8c63547ee385834069a3a9f17353b06cda2023e1d18d35393f72d096ae3f286e9c84468b6a84ea8354ddb3cfb52d94578ed7c0709238416e2fbd1f60db7aceb819c0ca01841b4b3b6cafbef47bb0a64197916485f5d0c018f5d03e8c6ed9450a4ff30b8173af34b88fdd5e31e965e255d4f7832e9880f74b31ea782c1de0f70d13de73264326feb8b1399d0971e74f52d0aa0b7da9d95618877f7e3b316cb889ca1f1a916c130182263ab14f0f261f176cda301360860f144d19eec39cb665e42affd7f2fc924342f70edfabe77e485d704c06cb2ec5abfad608b4acce271a441c9f9858c16ff6275ddebd3a97ec45610d6bace1a6b0e77f8b3f9615a1e7aba1719f74091b9d0e34ec7f80febb2ee2b7c7aa8fbc1b1e0c054e85590191fa90d9dec5514fc1171f2c06cd0d98ebc98d6787d6f3076c47fe37c0fbbb3000b2f4704c0c1c1de197a819003583eaeedff8671f27e1c3ba5c1e0e1c1f3c11caff4430cd390e468fff2d2436ffc6261f3867fd606a9f8029a493023004948d327ad2c2f2ccc4e8b09e45930c27d2535b52ea0ba3be68ca92d34b4e8f504587e62846ab0964d8ced8116fbd6e8faf09ac70fbb9112231d483db07da0117b06cf076362dd1a76946f2b5479816477831b353393c1f766e04ceb21c3b5ae9f20fcaa163670464eaf47be1ea41ee36cc62232991550f9391123d6e1fe2ea066b5f4e2183d55178f5a26761e1750587fb0b3cbb0e833ba924138eabd143e551e0452b3358cfeaa222c07f8faf1d0a79b72d0e1f8efc4ebaf3664e13092fef18a1264ba8fdaedc3eb6c8317e4ad3a8bd0c13de6dd51fc2209a9e98fb2322089cf4785e020a84cb73a6c4493e9d88b2c511af647a6c1f50f01bdfd3c4386d960695746648a70382a6f60a051427e7e0e4d349bac7d26099b33d5621f10d75502b88adcd290b04cc6ec0ece5de0eb8fe4d45c0388d6add3c6de9cd9f992a658ead1b1de2f17a4bac1ca3a583b89497b7604899d2d2cb0a2554d601c7ea0179828f749512aa614c1b939db12bcc6bcd75f8f363f719f333120fe293ced2f971c06d71fecedcb35b752a24fd263ff0451d9c557a856d39f0af828c552876752e8ef44a97c2a1a03883139c21a5d1eec951c4fdc8c47390c91bf06e50852a8a8525be2586542863ab9ce613b5d6453b660eac53391391090a1a881f5c7818fed5133fd3aefa890e46be3729b63ca72f0fa1889aafa741b9d12f5b30c1e35643ec0d0cc7a2a9f4544ae4a240ddf7f2f13e3aa39e813ef3b02ed975ae"}) (async)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bd078064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffbfb}}], 0x18}}], 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {@in=@loopback, 0x4d3, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x80000000, 0x0, 0x0, 0x22}, {0x7, 0x3}, {0x2, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x4}, [@encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0x22}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40005}, 0x2004c000)
r5 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=ANY=[@ANYBLOB="94000f000802110000010802110000000160160089b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a5d9a1d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"], 0x94) (rerun: 32)

871.059962ms ago: executing program 2 (id=6028):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x1000000, 0x0, 0x0, 0xf, 0x1, [], "02"}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000000)=""/12, 0x3a, 0xc, 0x1}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b00"], 0x110}, 0x1, 0x0, 0x0, 0x40008880}, 0x40000)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f000001c140)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)='Q', 0x1}], 0x1}}], 0x1, 0x24008080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040000000000000000002500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e0001006970366772657461700000001800028014000700000000000000ff00000000000000000108000d0006000020"], 0x54}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x4)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0)

570.431952ms ago: executing program 1 (id=6030):
r0 = socket(0x9, 0x80000, 0x8005) (async, rerun: 64)
r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002000878e2dbd7000fedbdf250a200004060000000200000014000100fe80000000000000000000000000002c08000a00010000000800100000000000ee1f932632"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) (async)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f) (async, rerun: 64)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0xfffe, 0x0, @local, 0x4}, 0x1c) (async, rerun: 64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x20003, 0xfffffffd}, 0x8) (async)
close(r3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040)
recvmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000000000007b8af8ff0000000009cd8ac543741ebfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"/79], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94)
r7 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000600)="d387c80c62b0bd39aa0dc37b5db9bbc4305605ef2840e6ee4ec6596b4856b63943c877c09aa1f45b0172040464b86a103a0ea373631cd1da", 0x38}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x851)
recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1}, 0x40002040) (async)
recvfrom$unix(r7, &(0x7f0000000000)=""/67, 0x43, 0x40012102, 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x5, 0x58, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0xfffffe30, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0xfffffffe]}})
socket(0x1, 0x5, 0x0) (async)
close(0x3)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) (async)
epoll_create1(0x80000)

520.639434ms ago: executing program 1 (id=6031):
r0 = socket$netlink(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x41, 0x8, 0x0, 0x2, 0xf, 0x6}, {0x6, 0x8d4, 0x3d71, 0x2, 0xae9, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000400)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'team_slave_0\x00'})
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c010000100001000000000000000000fc020000000000000000000000000000e0000001000000000000000000000000000000000000fffe0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000008900010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008020000ca8bdaf566099b58"], 0x17c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x1)

519.458273ms ago: executing program 1 (id=6032):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={<r1=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x2, 0x1, 0x9, 0x3b1, 0x8}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
poll(&(0x7f00000001c0)=[{r0, 0x8}, {r0, 0xc201}], 0x2, 0x97)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, <r3=>0xffffffffffffffff}, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @broadcast, @broadcast}, &(0x7f00000003c0)=0xc)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@fwd={0xc}, @fwd={0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x40, 0x0, 0x30, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f0000000480)=""/238, 0x5d, 0xee, 0x0, 0x1}, 0x28)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xafc7, 0x0, 0x0, 0x0, 0xe3}, [@jmp={0x5, 0x1, 0xd, 0x4, 0x1, 0x2, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x1, 0x1, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x1, r2, 0x1, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x1, 0x5, 0x3}], 0x10, 0x6}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={<r8=>r0, 0x6, 0xb6c0, 0x4})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x15, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x3f}], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x70, '\x00', r4, @fallback=0x24, r5, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0x7e69, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000a00)=[r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000a40)=[{0x3, 0x3, 0x5, 0xa5ae4d0d3399c847}, {0x3, 0x2, 0x2, 0xa}, {0x0, 0x3, 0x10, 0x3}, {0x2, 0x4, 0x8, 0x2}, {0x3, 0x1, 0x4, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x1, 0x8, 0x6}], 0x10, 0x3}, 0x94)
r11 = gettid()
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
r13 = accept4$inet(r8, 0x0, &(0x7f0000001040), 0x0)
r14 = gettid()
r15 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, <r16=>0x0}, &(0x7f00000010c0)=0xc)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001100)=<r17=>0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, <r18=>0x0}, &(0x7f0000001180)=0xc)
ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000011c0)=<r19=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in6}}}, &(0x7f0000001300)=0xe8)
r21 = socket$inet6_udp(0xa, 0x2, 0x0)
r22 = accept4$alg(r8, 0x0, 0x0, 0x800)
r23 = openat$cgroup_subtree(r8, &(0x7f0000001340), 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001380)=<r24=>0x0)
sendmsg$netlink(r8, &(0x7f0000001640)={&(0x7f0000000b80)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)=[{&(0x7f0000000bc0)={0x418, 0x28, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0xc2, 0x13b, 0x0, 0x1, [@typed={0x6, 0x27, 0x0, 0x0, @str='$\x00'}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x9, 0xf3, 0x0, 0x0, @str='{%,&\x00'}, @nested={0x4, 0x118}, @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="70ef30d1436c975a5be6a49e1f38ee8aebacd90e428057ac69118df02903f88e22b675a2336f608b50d8b71cb8669c5e9c3bcf062797d682c8280aacff148b086a7ccaa3b1870fcb853d15eb102388fba389a24f1367f46d39ac45c2a3c211507f8ca507b2cc39570fad51f67441c2748e3aec02f8c7e1da68eb886df972", @typed={0x8, 0xa3, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0xfd4f}, @typed={0x8, 0xf4, 0x0, 0x0, @u32=0xc870}]}, @nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0x11a}]}, @generic="f54ea5686b569cae2f39adce38386930f54b72756a52b30fd2cb98b11d04be8227b6d69c84a8de3d80331a28760dd50c258a6048d1c08a82291987e3d1067daf739cfd60300c91df18c8625cf72f04997eae3dce02160ee85fb4f2d511fe64885bcd330540fe470e17a2fafe6c34d8", @generic="a903f029312094003a94ed09c47abdaa7063810e000cb0f29838daa1c2213178758bab8ce7bd169df3f342b4e268451fab9d0d89a2794478a8977abb3557a13d943e866ac5094591e61336bd63ec99ebfa67514b5308d85d48d8df0556dc95507235fafc76efc8834f468b9e45126d3dea6768b281cba72e3541d265978119aa1ca1c3d6857516280b9df5b979382ece0f39399e80cd04524ec534bb2f06491e96f40b7cdceae0e7eb78410162d4128584cf74d1511cf7117ba11e805bcb83356fe2341c1f97b327513551dc06a34a8f4f", @generic="972ed1cf01b803a6dce8dac03bfe639895f7c9721bd23def2fa547d65cb50f69b4b3cf4ce6156509160e1fe659e78f3e92a4ec9f07de1e4cc845d3a8591ac6bc38943594cab805dd3996bd2941cbbe68b39f2ce9e02324877ad163b2cf21f4bd1ad8e619968115f92a849cb47f36eee641be32ab140634b68a3b7f38141606ae7572095a1dee7eb3", @typed={0x8, 0x96, 0x0, 0x0, @pid=r11}, @nested={0x13e, 0x2, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x4, 0xd1}, @nested={0x4, 0xe6}, @generic="92ed5b6b504d28798ef426eab9744a3a90c7f9c156f6040267d7548c10226c9ae0815438954a0c61b811653682472282a1196a912ce9c68c20a4cdcb0f964d15d2368028a755ff47c4317640530ba72024f0ba4bc708c278867e68fd0419238b3dc4f682de906e7c13d707c77decf359eecf34f02adb503f61adbc789cbe828cac33ba8a72d84f48cb678e45d7532821f97fa181d13803a6798cd9efa78079818552d0bac03536f458612daa813b0c2bbc0d293c044037ce0a7243ef0af7422e45b00e847cd4ee9b1130b134c0e53f89d91e6588", @generic="6559d6867ed754a880896c6fd785cb199049f0e8806b650565f4d80d1e1262cfb8a484559d7ca4ca7eb6a21a838909cdcec73f63ca8f320fb869e26091654dc4174211446c7658ba5ca8ceb261290877cfa9960d965f", @nested={0x4, 0x131}]}, @generic="3cc15ab16f28a4cbca69939173f292ffcac5535ff0cd74342331ea27ac1def82546e7c32a97589bf985adf70"]}, 0x418}], 0x1, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [r12, r5]}}, @rights={{0x28, 0x1, 0x1, [r10, r5, r10, r2, r13, r8]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee01, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r21, r10, r6]}}, @rights={{0x24, 0x1, 0x1, [r10, r0, r9, r22, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r23]}}, @cred={{0x1c, 0x1, 0x2, {r24}}}], 0x140, 0x4004050}, 0x894)

320.160422ms ago: executing program 1 (id=6033):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}}, 0x20000040)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250100000014000600fe8000000000000000000000000000aa06000b002c00000006000b0000000000080000000000000014000500fe80000000000000000000000000001508000c0003000000080008000a0101020a0001005b26242d2b00000014000600"/126], 0x84}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}})
r8 = socket$inet(0x2, 0x2, 0x1)
close(r1)
sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r12, 0x112, 0xb, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {}, {@multicast2}, {}, {@private}, {@broadcast}, {@empty}, {@dev}, {@dev}, {@dev}]}})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

180.30464ms ago: executing program 1 (id=6034):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000)
r5 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000001c0)=0x9, 0x4)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000400000000000000", @ANYRES32, @ANYRES64, @ANYRESDEC=r0, @ANYRES32=r3, @ANYRESDEC=r4], 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r7, &(0x7f0000000140)="f477db1afd46ca887f8c08fd8a8bec3cef1eea33d090fa7f004778fb0a20d05f673aeeec72423c946acfb4b11eae4140ea91c3d58bf0d5fc5bc879b83fcfa73ef5f4dc90016b1add97", 0x49, 0x40840, 0x0, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "448ab78bce"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x24040840)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f3, &(0x7f0000001940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x40, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x4, 0x0, 0x8000, 0x800}, 0x50)

179.526105ms ago: executing program 0 (id=6035):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
r1 = socket$inet6(0xa, 0x3, 0x3)
close(0xffffffffffffffff) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x3ffffffffffffe, 0x3, 0x200000003, 0x9}, {0xa5f}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d3, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x1}}, 0xe8) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x478a70cf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c)

178.226296ms ago: executing program 0 (id=6036):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

100.104854ms ago: executing program 1 (id=6037):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7961fdffff06000000007e0000000c0099006c91000014000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc108001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500000005080211000000086c163a05080211000000380000000301b904060702bb1906000000"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x9, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0xa, 0x1, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x29, 0x0, 0x2)
sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="000000000000000000000000000000005008030973a4a1261437a282f5018e6eebede5ff9d2e96fcf5c717ee03f17a599f62abf79b72c7f178e3ec5fa8da18", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000010000a00701000035cf52530599b474"], 0x48}}, 0x11)

99.545745ms ago: executing program 0 (id=6038):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e20}]}}]}, 0x5c}}, 0x24044000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

98.770787ms ago: executing program 0 (id=6039):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB='%', @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYBLOB="a7e72751f80cd74b4260d9a1aa726ee535f77f78e91a608d88cc5e04b2049c5850a498a93fa5e59b0807135c6912375d7a3917c57b592780252d8f51cec5ca7b708c637de220152c405928e46fc10af78729f4d5fd318098c6dd5f83", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r1], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c0001800800010000000000200003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB='%', @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYBLOB="a7e72751f80cd74b4260d9a1aa726ee535f77f78e91a608d88cc5e04b2049c5850a498a93fa5e59b0807135c6912375d7a3917c57b592780252d8f51cec5ca7b708c637de220152c405928e46fc10af78729f4d5fd318098c6dd5f83", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r1], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c0001800800010000000000200003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)

568.329µs ago: executing program 2 (id=6040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newrule={0x7c, 0x20, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x11, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @private0}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004071}, 0x4840)
read(r4, &(0x7f0000000140)=""/166, 0xa6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async)
close(0x4) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1)
socket$inet6(0xa, 0x3, 0x3a)

0s ago: executing program 0 (id=6041):
socket$can_bcm(0x1d, 0x2, 0x2) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async, rerun: 32)
r3 = socket(0x2, 0x400000000002, 0x0) (rerun: 32)
setsockopt(r3, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) (async, rerun: 32)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) (async, rerun: 32)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x8, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, "00186371ae9b1c03"}}}}}, 0x0) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000003c0)=0x1000, 0x4) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000002c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="56b801002d070000000000000000000018000180140002006970766c050031000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
syz_emit_ethernet(0xae, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003001108004f0000a00000000000019078ac1414bbac1414aa8208a4b1097b21c789131cffffffffac14144a000000030202020fb5c2e4f7bc6b25cccfdc2ef67407124e5bedeb8b35821015f28ad900366150010379070afc9e4b49dd23774202042d6902104e1193ac43c1244164d4115a4cb700000003049078120002282500000000000000002f00007f000001ac1e0001552f01261cb0088c00"/174], 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r7, 0x28, 0x29, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r8, 0x0, 0xc000)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40895}, 0x4000804) (async)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000140)={0x3, 0x4})

kernel console output (not intermixed with test programs):

 in process `syz.1.4162'.
[  364.090632][T21108] bond36: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  364.096418][T21108] bond36 (unregistering): Released all slaves
[  364.241962][T21122] netlink: 'syz.1.4165': attribute type 2 has an invalid length.
[  364.322560][T21126] ipt_REJECT: TCP_RESET invalid for non-tcp
[  364.651412][T21153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.657421][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'.
[  364.734291][T21157] block nbd5: Unsupported socket: should be TCP or UNIX.
[  364.867249][T21168] bond0: invalid ARP target 0.0.0.0 specified for addition
[  364.878611][T21168] bond0: option arp_ip_target: invalid value (0)
[  365.396093][T21200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.891934][T21226] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  366.068363][T21236] netlink: 'syz.2.4202': attribute type 3 has an invalid length.
[  366.123919][T21244] netlink: 'syz.2.4204': attribute type 15 has an invalid length.
[  366.124072][T21242] netlink: 'syz.0.4205': attribute type 1 has an invalid length.
[  366.217180][T21253] xt_hashlimit: size too large, truncated to 1048576
[  366.288936][T21260] netlink: 'syz.1.4208': attribute type 13 has an invalid length.
[  366.492616][ T5873] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.495913][ T5873] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.507205][ T5873] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.511281][ T5873] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.028334][T21301] netlink: 'syz.0.4221': attribute type 12 has an invalid length.
[  367.031592][T21302] netlink: 'syz.0.4221': attribute type 12 has an invalid length.
[  367.127961][T21306] netlink: 'syz.0.4222': attribute type 1 has an invalid length.
[  367.142758][T21306] 8021q: adding VLAN 0 to HW filter on device bond35
[  367.163351][T21306] bond35 (unregistering): Released all slaves
[  367.380027][T21327] netlink: 'syz.0.4227': attribute type 1 has an invalid length.
[  367.519473][T21339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.555945][T21339] syzkaller0: entered promiscuous mode
[  367.558670][T21339] syzkaller0: entered allmulticast mode
[  367.562860][T21339] tipc: Resetting bearer <eth:syzkaller0>
[  367.623774][T21338] tipc: Resetting bearer <eth:syzkaller0>
[  368.721067][T21338] tipc: Disabling bearer <eth:syzkaller0>
[  368.811430][T21358] __nla_validate_parse: 27 callbacks suppressed
[  368.811471][T21358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4235'.
[  368.998876][T21379] netlink: 'syz.2.4240': attribute type 10 has an invalid length.
[  369.005403][T21379] netlink: 'syz.2.4240': attribute type 1 has an invalid length.
[  369.053982][T21386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4241'.
[  369.059998][T21386] net_ratelimit: 57 callbacks suppressed
[  369.060007][T21386] openvswitch: netlink: Flow key attr not present in new flow.
[  369.066312][T21387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4241'.
[  369.069601][T21387] openvswitch: netlink: Flow key attr not present in new flow.
[  369.122669][T21386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4241'.
[  369.523496][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'.
[  369.528149][T21407] 8021q: VLANs not supported on ip_vti0
[  369.599712][T21413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4249'.
[  369.602639][T21413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4249'.
[  369.818638][T21435] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4253'.
[  370.001016][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'.
[  370.005025][T21441] netlink: 'syz.0.4254': attribute type 11 has an invalid length.
[  370.126700][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4257'.
[  370.130591][T21451] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  370.290819][   T34] audit: type=1107 audit(1770407085.909:15): pid=21456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ۗD֪,bؔz"ƶ?0yYYһe)4'
[  370.516145][T21496] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.614158][T21491] 8021q: adding VLAN 0 to HW filter on device bond35
[  370.634604][T21517] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  371.086101][T21542] lo speed is unknown, defaulting to 1000
[  371.088815][T21542] wg1 speed is unknown, defaulting to 1000
[  371.256168][T21571] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.343737][T21571] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.375698][T21574] bridge0: port 1(veth1_to_hsr) entered blocking state
[  371.378523][T21574] bridge0: port 1(veth1_to_hsr) entered disabled state
[  371.380630][T21574] veth1_to_hsr: entered allmulticast mode
[  371.383859][T21574] veth1_to_hsr: entered promiscuous mode
[  371.456677][T21571] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.523603][T21571] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.656545][ T5873] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.669964][ T5873] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.683913][ T5873] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.712859][ T5873] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.163554][T21568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.274932][T21602] validate_nla: 3 callbacks suppressed
[  374.274945][T21602] netlink: 'syz.1.4291': attribute type 1 has an invalid length.
[  374.281481][T21602] __nla_validate_parse: 13 callbacks suppressed
[  374.281490][T21602] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4291'.
[  374.419255][T21609] bond36 (unregistering): Released all slaves
[  374.831102][T21639] syzkaller0: entered allmulticast mode
[  374.835567][T21639] syzkaller0 (unregistering): left allmulticast mode
[  374.895229][T21648] netlink: 'syz.2.4304': attribute type 1 has an invalid length.
[  374.931307][T21648] bond35: entered promiscuous mode
[  374.938990][T21648] 8021q: adding VLAN 0 to HW filter on device bond35
[  374.961023][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4303'.
[  374.968210][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4303'.
[  375.013537][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4306'.
[  375.133536][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4309'.
[  375.205729][T21677] vlan4: entered promiscuous mode
[  375.207993][T21677] erspan1: entered promiscuous mode
[  375.225336][T21681] syzkaller0: entered promiscuous mode
[  375.227119][T21681] syzkaller0: entered allmulticast mode
[  375.290562][T21685] netlink: 'syz.1.4314': attribute type 3 has an invalid length.
[  375.294372][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4314'.
[  375.336088][T21687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4315'.
[  375.531074][T21705] netlink: 'syz.1.4322': attribute type 83 has an invalid length.
[  375.563890][T21709] netlink: 'syz.1.4323': attribute type 2 has an invalid length.
[  375.567813][T21709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.692060][T21720] netlink: 'syz.2.4327': attribute type 1 has an invalid length.
[  375.694956][T21720] netlink: 'syz.2.4327': attribute type 2 has an invalid length.
[  375.700082][T21721] netlink: 'syz.2.4327': attribute type 1 has an invalid length.
[  375.703420][T21721] netlink: 'syz.2.4327': attribute type 2 has an invalid length.
[  375.749085][T21727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4328'.
[  375.988259][T21735] lo speed is unknown, defaulting to 1000
[  375.990776][T21735] wg1 speed is unknown, defaulting to 1000
[  376.402510][T21743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4331'.
[  376.481462][T21750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4334'.
[  376.575087][T21764] netlink: 'syz.2.4337': attribute type 11 has an invalid length.
[  376.632239][T21770] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  376.777247][T21786] siw: device registration error -23
[  376.783864][T21789] netlink: 'syz.1.4343': attribute type 10 has an invalid length.
[  376.959437][T21802] wg1: left promiscuous mode
[  376.961156][T21802] wg1: left allmulticast mode
[  376.965981][T21802] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  376.969339][T21802] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  376.985270][T21802] ipip2: left promiscuous mode
[  376.992495][T21802] ipip2: left allmulticast mode
[  376.994974][T21802] bond17: left promiscuous mode
[  376.996923][T21802] bond17: left allmulticast mode
[  377.001052][T21802] bond18: left promiscuous mode
[  377.002785][T21802] geneve3: left promiscuous mode
[  377.004394][T21802] geneve3: left allmulticast mode
[  377.006401][T21802] vlan1: left promiscuous mode
[  377.009801][T21802] bond0: left promiscuous mode
[  377.011721][T21802] bond8: left promiscuous mode
[  377.013852][T21802] vlan1: left allmulticast mode
[  377.015700][T21802] bond0: left allmulticast mode
[  377.018210][T21802] bond8: left allmulticast mode
[  377.022407][T21802] bond21: left promiscuous mode
[  377.024039][T21802] bond21: left allmulticast mode
[  377.026055][T21802] bond25: left promiscuous mode
[  377.028476][T21802] bridge7: left promiscuous mode
[  377.046837][T21802] vlan3: left promiscuous mode
[  377.048922][T21802] vlan3: left allmulticast mode
[  377.050859][T21802] geneve1: left allmulticast mode
[  377.052774][T21802] vxcan1: left promiscuous mode
[  377.055205][T21802] bond31: left promiscuous mode
[  377.056800][T21802] wireguard64: left promiscuous mode
[  377.060794][T21802] bond35: left promiscuous mode
[  377.062965][T21802] bond35: left allmulticast mode
[  377.065306][T21802] geneve5: left promiscuous mode
[  377.156897][T21822] bond36: entered promiscuous mode
[  377.160318][T21822] 8021q: adding VLAN 0 to HW filter on device bond36
[  377.234258][T21825] bond36: (slave bridge13): making interface the new active one
[  377.236799][T21825] bridge13: entered promiscuous mode
[  377.240865][T21825] bond36: (slave bridge13): Enslaving as an active interface with an up link
[  377.658853][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.661451][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.664036][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.667061][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.670258][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.673129][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.676370][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.688613][T21857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  377.804620][T21873] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  377.810920][T21873] bond0: (slave hsr0): Error -95 calling set_mac_address
[  377.824814][   T34] audit: type=1107 audit(1770407093.449:16): pid=21869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  377.978185][T21893] Unsupported xt match
[  377.978199][T21893] unable to load match
[  377.981008][T21892] syzkaller1: entered promiscuous mode
[  377.982617][T21892] syzkaller1: entered allmulticast mode
[  377.985423][T21894] Unsupported xt match
[  377.985432][T21894] unable to load match
[  378.250395][T21911] bond36: entered promiscuous mode
[  378.252110][T21911] bond36: entered allmulticast mode
[  378.254027][T21911] 8021q: adding VLAN 0 to HW filter on device bond36
[  378.606088][T21916] lo speed is unknown, defaulting to 1000
[  378.609532][T21916] wg1 speed is unknown, defaulting to 1000
[  378.716389][T21930] 8021q: VLANs not supported on sit0
[  379.337500][T21951] validate_nla: 7 callbacks suppressed
[  379.337516][T21951] netlink: 'syz.1.4389': attribute type 1 has an invalid length.
[  379.357526][T21951] bond37: entered promiscuous mode
[  379.359813][T21951] 8021q: adding VLAN 0 to HW filter on device bond37
[  379.376424][T21951] bond37: (slave bridge14): making interface the new active one
[  379.379295][T21951] bridge14: entered promiscuous mode
[  379.382457][T21951] bridge14: left promiscuous mode
[  379.476910][T21956] __nla_validate_parse: 18 callbacks suppressed
[  379.476922][T21956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4390'.
[  379.588592][T21960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4391'.
[  380.126510][T21998] lo speed is unknown, defaulting to 1000
[  380.129016][T21998] wg1 speed is unknown, defaulting to 1000
[  380.555433][T22009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.675864][T21972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  382.958352][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  382.961717][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  382.974441][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  382.978381][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  382.982017][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  382.985784][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  383.363432][T22044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4409'.
[  383.620060][T22064] IPVS: length: 159 != 8
[  383.626344][T22064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4415'.
[  383.636784][T22064] netlink: 'syz.2.4415': attribute type 4 has an invalid length.
[  383.697101][T22064] tc_dump_action: action bad kind
[  383.724755][T22068] netlink: 'syz.1.4417': attribute type 1 has an invalid length.
[  383.737853][T22070] netlink: 'syz.1.4417': attribute type 1 has an invalid length.
[  383.760647][T22072] netem: change failed
[  383.792982][T22076] netlink: 'syz.2.4419': attribute type 21 has an invalid length.
[  383.795388][T22076] netlink: 'syz.2.4419': attribute type 22 has an invalid length.
[  383.799033][T22076] netlink: 'syz.2.4419': attribute type 23 has an invalid length.
[  383.801323][T22076] netlink: 'syz.2.4419': attribute type 25 has an invalid length.
[  383.806631][T22075] lo: entered allmulticast mode
[  383.808849][T22075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.915555][T22085] netlink: 'syz.2.4423': attribute type 1 has an invalid length.
[  383.959184][T22085] 8021q: adding VLAN 0 to HW filter on device bond36
[  383.972821][T22085] nbd: must specify at least one socket
[  383.996768][T22093] netlink: 'syz.1.4425': attribute type 14 has an invalid length.
[  384.290834][T22104] smc: net device hsr0 applied user defined pnetid SYZ2
[  384.293186][T22104] smc: net device hsr0 erased user defined pnetid SYZ2
[  384.344027][T22097] lo speed is unknown, defaulting to 1000
[  384.346616][T22097] wg1 speed is unknown, defaulting to 1000
[  384.528795][T22110] __nla_validate_parse: 4 callbacks suppressed
[  384.528807][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4428'.
[  384.732926][T22099] lo speed is unknown, defaulting to 1000
[  384.735349][T22099] wg1 speed is unknown, defaulting to 1000
[  385.068658][T22125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4432'.
[  385.071357][T22125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  385.140481][T22131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.175513][T22131] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  385.185633][T22131] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  385.286958][T22138] validate_nla: 1 callbacks suppressed
[  385.286970][T22138] netlink: 'syz.1.4435': attribute type 1 has an invalid length.
[  385.310447][T22138] gretap3: entered allmulticast mode
[  385.350252][T22140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4436'.
[  385.401460][T22140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.497014][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'.
[  385.505050][T22145] Unsupported xt match
[  385.505061][T22145] unable to load match
[  385.531866][T22149] netlink: 'syz.0.4439': attribute type 1 has an invalid length.
[  385.592816][T22150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4439'.
[  385.720023][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'.
[  385.775782][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'.
[  385.791236][T22165] ip6tnl4: entered promiscuous mode
[  385.911017][T22177] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4445'.
[  385.913989][T22177] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  388.862376][T22181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.962569][T22199] netlink: 'syz.0.4451': attribute type 2 has an invalid length.
[  389.252924][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4455'.
[  389.398001][T22226] tipc: Resetting bearer <ib:sit0>
[  389.403737][T22226] tipc: Resetting bearer <ib:sit0>
[  389.414639][T22226] tipc: Resetting bearer <ib:dummy0>
[  389.423612][T22226] tipc: Resetting bearer <ib:dummy0>
[  389.436967][T22226] netlink: 'syz.2.4459': attribute type 16 has an invalid length.
[  389.445718][T22226] netlink: 'syz.2.4459': attribute type 17 has an invalid length.
[  389.470760][T22226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  389.508107][   T98] block nbd3: Possible stuck request ffff88810a108000: control (read@0,1024B). Runtime 180 seconds
[  389.512111][   T98] block nbd3: Possible stuck request ffff88810a108200: control (read@1024,1024B). Runtime 180 seconds
[  389.516150][   T98] block nbd3: Possible stuck request ffff88810a108400: control (read@2048,1024B). Runtime 180 seconds
[  389.520451][   T98] block nbd3: Possible stuck request ffff88810a108600: control (read@3072,1024B). Runtime 180 seconds
[  390.072624][T22230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.119985][T22234] netlink: 'syz.1.4462': attribute type 2 has an invalid length.
[  390.122835][T22234] netlink: 'syz.1.4462': attribute type 1 has an invalid length.
[  390.214081][T22240] x_tables: ip_tables: icmp match: only valid for protocol 1
[  390.481264][T22257] netlink: 'syz.0.4471': attribute type 1 has an invalid length.
[  390.551188][T22260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.554083][T22260] syzkaller0: entered promiscuous mode
[  390.556070][T22260] syzkaller0: entered allmulticast mode
[  390.577073][T22260] tipc: Resetting bearer <eth:syzkaller0>
[  390.582263][T22259] tipc: Resetting bearer <eth:syzkaller0>
[  390.598621][T22259] tipc: Disabling bearer <eth:syzkaller0>
[  390.685798][T22262] netlink: 'syz.2.4473': attribute type 23 has an invalid length.
[  390.782516][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'.
[  390.786645][T22273] netlink: 'syz.2.4476': attribute type 10 has an invalid length.
[  390.793925][T22273] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  391.009168][T22288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4479'.
[  391.145710][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4482'.
[  391.158766][T22303] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4483'.
[  391.175471][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4482'.
[  391.606420][T22323] xt_ecn: cannot match TCP bits for non-tcp packets
[  391.735968][T22310] lo speed is unknown, defaulting to 1000
[  391.750377][T22310] wg1 speed is unknown, defaulting to 1000
[  391.867906][T22327] syzkaller0: entered promiscuous mode
[  391.870056][T22327] syzkaller0: entered allmulticast mode
[  392.344966][T22334] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  392.394056][T22337] syzkaller1: entered promiscuous mode
[  392.396313][T22337] syzkaller1: entered allmulticast mode
[  392.413564][T22341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4491'.
[  392.416999][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'.
[  392.864089][T22343] netlink: 'syz.0.4493': attribute type 1 has an invalid length.
[  392.866871][T22343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4493'.
[  393.314196][T22353] openvswitch: netlink: Multiple metadata blocks provided
[  393.317038][T22354] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4495'.
[  393.339547][T22356] netlink: 'syz.2.4497': attribute type 4 has an invalid length.
[  393.399810][T22358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4498'.
[  393.416501][T22360] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  393.513737][T22374] tunl0: Caught tx_queue_len zero misconfig
[  393.562652][T22380] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20003
[  393.565521][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  393.574078][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  393.580165][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  393.586279][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  393.727435][T22395] netlink: 'syz.1.4509': attribute type 1 has an invalid length.
[  393.925101][T22395] lo speed is unknown, defaulting to 1000
[  393.927968][T22395] wg1 speed is unknown, defaulting to 1000
[  394.022727][T22407] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  394.455154][T22423] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  394.616221][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.622186][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.626656][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.630401][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.632628][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.634796][T22430] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  394.726181][T22447] netlink: 'syz.0.4521': attribute type 13 has an invalid length.
[  394.730948][T22447] netlink: 'syz.0.4521': attribute type 17 has an invalid length.
[  394.740344][T22447] ..0{X: left allmulticast mode
[  394.756270][T22447] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.766387][T22447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.799668][T22446] netlink: 'syz.1.4524': attribute type 4 has an invalid length.
[  394.802526][T22446] openvswitch: netlink: Duplicate key (type 32).
[  394.818394][T22457] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  394.844322][T22461] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  394.852415][T22459] netlink: 'syz.2.4527': attribute type 11 has an invalid length.
[  394.917102][T22470] tipc: New replicast peer: 255.255.255.255
[  394.920703][T22470] tipc: Enabled bearer <udp:syz2>, priority 10
[  394.927483][T22468] syzkaller0: create flow: hash 3598460111 index 1
[  394.928213][T22470] netlink: 'syz.1.4530': attribute type 11 has an invalid length.
[  394.949289][  T903] syzkaller0: tun_net_xmit 76
[  394.997585][  T903] syzkaller0: tun_net_xmit 76
[  394.999431][T22468] syzkaller0: delete flow: hash 3598460111 index 1
[  396.320001][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.322561][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.334974][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.337684][ T5873] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.371596][   T34] audit: type=1107 audit(1770407111.999:17): pid=22527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  396.413774][T22532] __nla_validate_parse: 22 callbacks suppressed
[  396.413788][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4536'.
[  396.427619][T22532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.484490][T22542] validate_nla: 1 callbacks suppressed
[  396.484501][T22542] netlink: 'syz.2.4540': attribute type 4 has an invalid length.
[  396.591752][T22544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4539'.
[  398.894358][T22525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  398.991105][T22552] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4541'.
[  399.042278][T22561] netlink: 'syz.1.4546': attribute type 1 has an invalid length.
[  399.058908][T22562] netlink: 'syz.2.4544': attribute type 1 has an invalid length.
[  399.079663][T22561] 8021q: adding VLAN 0 to HW filter on device bond38
[  399.116832][T22561] bond38: (slave veth35): Enslaving as an active interface with a down link
[  399.121844][T22561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4546'.
[  399.125112][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'.
[  399.161955][T22569] digital: digital_start_poll: Unknown protocol
[  399.194083][T22574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4548'.
[  399.452856][T22585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4550'.
[  399.459701][T22585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.492878][T22587] bond0: option min_links: invalid value (18446744071562067968)
[  399.495642][T22587] bond0: option min_links: allowed values 0 - 2147483647
[  399.535375][T22589] netlink: 'syz.0.4552': attribute type 1 has an invalid length.
[  399.570601][T22589] bond37: (slave vxcan3): The slave device specified does not support setting the MAC address
[  399.574296][T22589] bond37: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  399.580938][T22589] bond37: (slave vxcan3): making interface the new active one
[  399.583778][T22589] bond37: (slave vxcan3): Enslaving as an active interface with an up link
[  399.650085][T22595] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4553'.
[  399.652984][T22595] netlink: Unknown conntrack attr (0)
[  402.133655][T22569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  402.232354][T22605] netlink: 'syz.1.4555': attribute type 1 has an invalid length.
[  402.235685][T22605] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4555'.
[  402.253565][T22602] bond0: (slave rose0): Enslaving as an active interface with an up link
[  402.296094][T22614] netlink: 'syz.0.4558': attribute type 1 has an invalid length.
[  402.338204][T22614] bond38: entered promiscuous mode
[  402.340399][T22614] 8021q: adding VLAN 0 to HW filter on device bond38
[  402.402341][T22625] netlink: 'syz.2.4561': attribute type 9 has an invalid length.
[  402.514853][T22635] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  402.523565][T22635] bond39 (unregistering): Released all slaves
[  402.640840][T22642] bond39: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  402.651042][T22642] bond39 (unregistering): Released all slaves
[  402.675782][T22647] netlink: 'syz.0.4565': attribute type 21 has an invalid length.
[  402.679869][T22647] netlink: 'syz.0.4565': attribute type 6 has an invalid length.
[  402.683231][T22647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4565'.
[  402.919539][T22659] xt_ecn: cannot match TCP bits for non-tcp packets
[  402.922270][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'.
[  402.952888][T22659] geneve0: entered promiscuous mode
[  402.954465][T22659] geneve0: entered allmulticast mode
[  402.958626][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.962154][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.964868][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.977971][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.097847][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4571'.
[  403.102383][T22649] lo speed is unknown, defaulting to 1000
[  403.104743][T22649] wg1 speed is unknown, defaulting to 1000
[  403.122812][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'.
[  403.134776][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'.
[  403.138448][T22666] openvswitch: netlink: Duplicate key (type 32).
[  403.242100][T22673] bond9: (slave 9): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  403.250919][T22673] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check.
[  403.256756][T22670] bond9: option mode: unable to set because the bond device has slaves
[  403.397961][T22679] netlink: 'syz.1.4575': attribute type 21 has an invalid length.
[  403.400163][T22679] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4575'.
[  403.402877][T22679] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4575'.
[  403.590118][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'.
[  403.621497][T22689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4576'.
[  403.775475][T22690] 8021q: adding VLAN 0 to HW filter on device bond39
[  403.777932][ T5873] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.780365][ T5873] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.783284][ T5873] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.785693][ T5873] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.789226][ T5873] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.791573][ T5873] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.794078][ T5873] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.796494][ T5873] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.274222][T22715] netlink: 'syz.0.4583': attribute type 30 has an invalid length.
[  404.304338][T22715] bond39: option arp_missed_max: invalid value (0)
[  404.306784][T22715] bond39: option arp_missed_max: allowed values 1 - 255
[  404.312139][T22715] bond39 (unregistering): Released all slaves
[  404.488158][T22720] syzkaller0: entered promiscuous mode
[  404.490370][T22720] syzkaller0: entered allmulticast mode
[  404.506333][T22720] syzkaller0: tun_net_xmit 1
[  404.518539][T22728] netlink: 'syz.1.4586': attribute type 10 has an invalid length.
[  404.523545][T22729] netlink: 'syz.1.4586': attribute type 10 has an invalid length.
[  404.564953][T22720] pim6reg99999999: entered allmulticast mode
[  405.833532][T22739] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  405.835872][T22739] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  406.422264][T22791] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16)
[  406.425643][T22791] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  406.483688][T22793] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  406.486525][T22793] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  407.139030][T22802] syzkaller0: entered promiscuous mode
[  407.140832][T22802] syzkaller0: entered allmulticast mode
[  409.468106][T22793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  409.608691][T22805] __nla_validate_parse: 12 callbacks suppressed
[  409.608706][T22805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4608'.
[  409.866476][T22842] syzkaller0: entered promiscuous mode
[  409.873602][T22842] syzkaller0: entered allmulticast mode
[  409.879462][T22841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.915397][T22841] tipc: Resetting bearer <eth:syzkaller0>
[  409.945534][T22841] tipc: Disabling bearer <eth:syzkaller0>
[  410.002987][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.006632][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'.
[  410.259366][T22858] geneve0: entered promiscuous mode
[  410.262755][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.267828][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.270896][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.273647][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.295786][T22864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4622'.
[  410.301017][T22864] netlink: 'syz.0.4622': attribute type 4 has an invalid length.
[  410.310128][T22864] xfrm0: left promiscuous mode
[  410.311706][T22864] xfrm0: left allmulticast mode
[  410.321676][T22864] ip6gre1: left allmulticast mode
[  410.324175][T22864] macvlan3: left allmulticast mode
[  410.326177][T22864] bridge13: left allmulticast mode
[  410.328437][T22864] macvlan4: left allmulticast mode
[  410.330745][T22864] ipvlan4: left allmulticast mode
[  410.332448][T22864] veth0_vlan: left allmulticast mode
[  410.334541][T22864] geneve4: left allmulticast mode
[  410.336264][T22864] bond28: left promiscuous mode
[  410.338428][T22864] bond28: left allmulticast mode
[  410.340226][T22864] bond29: left promiscuous mode
[  410.341807][T22864] bond29: left allmulticast mode
[  410.345278][T22864] bond36: left promiscuous mode
[  410.346862][T22864] bond36: left allmulticast mode
[  410.348819][T22864] bond38: left promiscuous mode
[  410.356150][T22864] geneve0: left promiscuous mode
[  410.360670][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.363188][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.367492][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.371102][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.465814][T22872] syzkaller0: entered promiscuous mode
[  410.470439][T22872] syzkaller0: entered allmulticast mode
[  410.591071][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4625'.
[  412.914830][T22881] netlink: 'syz.1.4626': attribute type 10 has an invalid length.
[  412.918233][T22881] netlink: 'syz.1.4626': attribute type 10 has an invalid length.
[  412.920833][T22882] netlink: 'syz.1.4626': attribute type 10 has an invalid length.
[  412.925486][T22881] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  413.450168][T22872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.604189][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'.
[  413.672555][T22903] netlink: 'syz.0.4633': attribute type 1 has an invalid length.
[  413.703117][T22903] 8021q: adding VLAN 0 to HW filter on device bond39
[  413.708219][T22903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4633'.
[  413.713249][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4633'.
[  413.720499][T22903] bond39 (unregistering): Released all slaves
[  413.938312][T22918] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4637'.
[  413.951433][T22923] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  413.959718][T22918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4637'.
[  413.962510][T22918] nbd: socks must be embedded in a SOCK_ITEM attr
[  414.050836][T22928] netlink: 'syz.1.4638': attribute type 23 has an invalid length.
[  414.056566][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'.
[  414.163261][T22937] syzkaller0: create flow: hash 170921351 index 1
[  414.187552][ T5809] syzkaller0: tun_net_xmit 76
[  414.225310][T22946] syzkaller0: delete flow: hash 170921351 index 1
[  414.393758][T22953] xt_ecn: cannot match TCP bits for non-tcp packets
[  415.092144][T22956] __nla_validate_parse: 3 callbacks suppressed
[  415.092159][T22956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4646'.
[  415.351784][T22956] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.357583][T22957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4646'.
[  415.444598][T22967] gretap0: entered promiscuous mode
[  415.446727][T22969] x_tables: ip_tables: icmp match: only valid for protocol 1
[  415.465032][T22967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4649'.
[  415.468938][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4649'.
[  415.752255][T22993] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  416.034047][T23015] sctp: [Deprecated]: syz.2.4660 (pid 23015) Use of int in max_burst socket option deprecated.
[  416.034047][T23015] Use struct sctp_assoc_value instead
[  416.119599][T23017] gretap0: left promiscuous mode
[  416.227002][T23027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4663'.
[  416.232715][T23027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4663'.
[  416.254564][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4663'.
[  416.276200][T23027] syzkaller1: entered promiscuous mode
[  416.278398][T23027] syzkaller1: entered allmulticast mode
[  416.660321][T23025] lo speed is unknown, defaulting to 1000
[  416.663684][T23025] wg1 speed is unknown, defaulting to 1000
[  416.949581][T23070] netlink: 'syz.2.4676': attribute type 1 has an invalid length.
[  417.006291][T23070] macvlan0: entered promiscuous mode
[  417.021224][T23070] macvlan0: entered allmulticast mode
[  417.023418][T23070] bond37: entered promiscuous mode
[  417.025189][T23070] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  417.030572][T23077] netlink: 'syz.0.4675': attribute type 62 has an invalid length.
[  417.053965][T23070] bond37: left promiscuous mode
[  417.428743][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4684'.
[  417.571071][T23101] lo speed is unknown, defaulting to 1000
[  417.573532][T23101] wg1 speed is unknown, defaulting to 1000
[  417.873529][T23130] vlan0: entered promiscuous mode
[  417.875606][T23130] macvlan0: entered promiscuous mode
[  418.004853][T23142] ip6t_srh: unknown srh invflags 4000
[  418.592324][T23154] lo speed is unknown, defaulting to 1000
[  418.594860][T23154] wg1 speed is unknown, defaulting to 1000
[  418.740228][T23158] netlink: 'syz.2.4697': attribute type 3 has an invalid length.
[  418.742626][T23158] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4697'.
[  418.898135][T23162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4699'.
[  418.984287][T23170] netlink: 'syz.2.4701': attribute type 13 has an invalid length.
[  419.020734][T23170] tipc: Resetting bearer <ib:sit0>
[  419.081794][T23170] tipc: Resetting bearer <ib:dummy0>
[  419.340561][T23187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.402764][T23197] netlink: 'syz.0.4711': attribute type 1 has an invalid length.
[  419.407898][T23197] netlink: 'syz.0.4711': attribute type 2 has an invalid length.
[  419.410788][T23197] netlink: 'syz.0.4711': attribute type 2 has an invalid length.
[  419.414494][T23197] netlink: 'syz.0.4711': attribute type 2 has an invalid length.
[  419.437746][T23199] syzkaller0: entered promiscuous mode
[  419.439449][T23199] syzkaller0: entered allmulticast mode
[  419.609464][   T98] block nbd3: Possible stuck request ffff88810a108000: control (read@0,1024B). Runtime 210 seconds
[  419.613651][   T98] block nbd3: Possible stuck request ffff88810a108200: control (read@1024,1024B). Runtime 210 seconds
[  419.616993][   T98] block nbd3: Possible stuck request ffff88810a108400: control (read@2048,1024B). Runtime 210 seconds
[  419.620382][   T98] block nbd3: Possible stuck request ffff88810a108600: control (read@3072,1024B). Runtime 210 seconds
[  419.766802][T23238] vlan4: entered promiscuous mode
[  419.768569][T23238] dummy0: entered promiscuous mode
[  419.866866][T23243] netlink: 'syz.0.4723': attribute type 58 has an invalid length.
[  420.092205][T23256] netlink: 'syz.0.4726': attribute type 21 has an invalid length.
[  420.584364][T23267] syzkaller1: entered promiscuous mode
[  420.592360][T23267] syzkaller1: entered allmulticast mode
[  420.857575][T23287] __nla_validate_parse: 94 callbacks suppressed
[  420.857589][T23287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4735'.
[  420.862368][T23287] nbd: must specify a size in bytes for the device
[  420.964644][T23293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4737'.
[  421.131101][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'.
[  421.179326][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'.
[  421.279458][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'.
[  421.282389][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4747'.
[  421.337061][T23334] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  421.342072][T23334] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  421.345061][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'.
[  421.348141][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'.
[  421.350802][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'.
[  421.365332][T23334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'.
[  421.401994][T23338] bond0: (slave macvlan6): Error -98 calling set_mac_address
[  422.060787][T23367] xt_socket: unknown flags 0x50
[  422.119239][T23366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.167058][T23369] bridge18: port 1(veth11) entered blocking state
[  422.169489][T23369] bridge18: port 1(veth11) entered disabled state
[  422.171447][T23369] veth11: entered allmulticast mode
[  422.174221][T23369] veth11: entered promiscuous mode
[  422.334233][T23387] syzkaller0: entered allmulticast mode
[  422.336230][T23387] syzkaller0: entered promiscuous mode
[  422.343347][T23387] syzkaller0 (unregistering): left allmulticast mode
[  422.345433][T23387] syzkaller0 (unregistering): left promiscuous mode
[  422.654400][T23389] lo speed is unknown, defaulting to 1000
[  422.658279][T23389] wg1 speed is unknown, defaulting to 1000
[  422.660385][T23394] validate_nla: 2 callbacks suppressed
[  422.660394][T23394] netlink: 'syz.2.4764': attribute type 1 has an invalid length.
[  422.695239][T23394] gretap5: entered allmulticast mode
[  422.700547][T23394] bond38: (slave gretap5): making interface the new active one
[  422.703387][T23394] bond38: (slave gretap5): Enslaving as an active interface with an up link
[  423.347058][T23436] netlink: 'syz.1.4775': attribute type 1 has an invalid length.
[  423.365020][T23436] 8021q: adding VLAN 0 to HW filter on device bond40
[  423.376562][T23436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.381993][T23436] bond40: (slave batadv0): making interface the new active one
[  423.386284][T23436] bond40: (slave batadv0): Enslaving as an active interface with an up link
[  423.408711][T23436] bond40 (unregistering): (slave batadv0): Releasing active interface
[  423.418003][T23436] bond40 (unregistering): Released all slaves
[  423.919066][T23454] macsec0: entered promiscuous mode
[  423.921015][T23454] macsec0: left promiscuous mode
[  424.014014][ T5873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  424.016536][ T5873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  424.029448][ T5873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  424.032473][ T5873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  424.149550][T23480] sit6: entered promiscuous mode
[  424.396921][T23493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.431645][T23495] netlink: 'syz.1.4796': attribute type 21 has an invalid length.
[  424.435678][T23495] netlink: 'syz.1.4796': attribute type 4 has an invalid length.
[  424.442140][T23497] netlink: 'syz.2.4797': attribute type 13 has an invalid length.
[  424.456873][T23495] netlink: 'syz.1.4796': attribute type 1 has an invalid length.
[  424.529247][T23497] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  424.570940][T23511] netlink: 'syz.2.4800': attribute type 1 has an invalid length.
[  424.608261][T23515] tipc: Resetting bearer <ib:vlan1>
[  424.824322][T23521] veth1_to_hsr: mtu less than device minimum
[  424.916382][T23524] syzkaller0: entered promiscuous mode
[  424.918527][T23524] syzkaller0: entered allmulticast mode
[  424.932092][T23524] netlink: 'syz.0.4803': attribute type 2 has an invalid length.
[  424.940848][T23524] : entered promiscuous mode
[  427.526971][T23506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.627848][T23533] __nla_validate_parse: 31 callbacks suppressed
[  427.627861][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'.
[  427.633487][T23535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4807'.
[  427.634686][T23533] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  427.642918][T23533] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  427.706887][T23544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4809'.
[  427.930365][T23547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.959119][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'.
[  427.976244][T23541] lo speed is unknown, defaulting to 1000
[  427.979569][T23541] wg1 speed is unknown, defaulting to 1000
[  428.197662][T23566] sctp: [Deprecated]: syz.2.4817 (pid 23566) Use of int in max_burst socket option deprecated.
[  428.197662][T23566] Use struct sctp_assoc_value instead
[  428.244315][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  428.253000][T23577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4821'.
[  428.489738][T23591] netlink: 'syz.2.4825': attribute type 1 has an invalid length.
[  428.529391][T23592] bond40 (unregistering): Released all slaves
[  428.559319][T23591] workqueue: Failed to create a rescuer kthread for wq "bond40": -EINTR
[  428.574618][T23596] pim6reg1: entered promiscuous mode
[  428.579253][T23596] pim6reg1: entered allmulticast mode
[  428.625907][T23600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.648233][T23603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.679948][T23606] syzkaller1: entered promiscuous mode
[  428.681721][T23606] syzkaller1: entered allmulticast mode
[  428.746098][T23616] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4829'.
[  428.755615][T23616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4829'.
[  428.850119][T23621] netlink: 'syz.2.4832': attribute type 3 has an invalid length.
[  428.860985][T23619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4831'.
[  428.864882][T23621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4832'.
[  428.946998][T23633] netlink: 'syz.1.4833': attribute type 4 has an invalid length.
[  429.062649][T23647] lo: Caught tx_queue_len zero misconfig
[  429.064418][T23647] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  429.120784][T23653] netlink: 'syz.0.4841': attribute type 4 has an invalid length.
[  429.127264][T23653] netlink: 'syz.0.4841': attribute type 4 has an invalid length.
[  429.157004][T23655] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  429.162193][T23655] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  429.164539][T23655] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  429.170148][T23655] netlink: zone id is out of range
[  429.171767][T23655] netlink: zone id is out of range
[  429.715064][T23623] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.717198][T23623] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  430.014691][T23675] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.019049][T23675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.070710][T23679] bond0: (slave wlan1): Releasing backup interface
[  430.116599][T23680] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  430.139856][T23667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.513887][T23682] netlink: 'syz.0.4850': attribute type 58 has an invalid length.
[  430.613964][T23690] bond39: option tlb_dynamic_lb: invalid value (5)
[  430.619349][T23690] bond39 (unregistering): Released all slaves
[  430.646959][T23623] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  430.649538][T23623] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  430.763903][T23698] netlink: 'syz.1.4855': attribute type 1 has an invalid length.
[  430.816667][T23698] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  430.820710][T23698] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20001
[  430.863338][T23705] netlink: 'syz.2.4858': attribute type 1 has an invalid length.
[  431.118747][T23728] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  431.120964][T23728] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  431.130506][   T34] audit: type=1800 audit(1770407146.759:18): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4859" name="memory.events" dev="tmpfs" ino=8185 res=0 errno=0
[  431.198832][T23714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.274856][T23745] netlink: 'syz.1.4867': attribute type 64 has an invalid length.
[  431.278501][T23745] netlink: 'syz.1.4867': attribute type 1 has an invalid length.
[  431.332422][T23751] 8021q: adding VLAN 0 to HW filter on device bond40
[  431.346446][T23752] bond40: (slave veth37): Enslaving as an active interface with a down link
[  431.353918][T23751] bond0: (slave dummy0): Releasing backup interface
[  431.371312][T23751] bond40: (slave dummy0): making interface the new active one
[  431.375546][T23751] bond40: (slave dummy0): Enslaving as an active interface with an up link
[  431.396331][T23751] bond40 (unregistering): (slave veth37): Releasing active interface
[  431.410214][T23751] bond40 (unregistering): (slave dummy0): Releasing active interface
[  431.417229][T23751] bond40 (unregistering): Released all slaves
[  431.565111][T23762] bond40: entered promiscuous mode
[  431.566888][T23762] 8021q: adding VLAN 0 to HW filter on device bond40
[  431.579883][T23762] 8021q: adding VLAN 0 to HW filter on device bond40
[  431.582960][T23762] bond40: (slave wireguard65): The slave device specified does not support setting the MAC address
[  431.586033][T23762] bond40: (slave wireguard65): Setting fail_over_mac to active for active-backup mode
[  431.593369][T23762] bond40: (slave wireguard65): making interface the new active one
[  431.595704][T23762] wireguard65: entered promiscuous mode
[  431.598165][T23762] bond40: (slave wireguard65): Enslaving as an active interface with an up link
[  431.620616][T23762] bond40: (slave wireguard66): The slave device specified does not support setting the MAC address
[  431.628538][T23762] bond40: (slave wireguard66): Enslaving as a backup interface with an up link
[  432.044328][T23787] lo speed is unknown, defaulting to 1000
[  432.046858][T23787] wg1 speed is unknown, defaulting to 1000
[  432.148005][T23824] IPv6: Can't replace route, no match found
[  432.529747][T23869] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  432.536199][T23869] mac80211_hwsim hwsim2 : renamed from wlan0
[  432.648691][T23875] bond39: entered promiscuous mode
[  432.650720][T23875] 8021q: adding VLAN 0 to HW filter on device bond39
[  432.708069][T23881] __nla_validate_parse: 28 callbacks suppressed
[  432.708082][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'.
[  432.714570][T23881] syzkaller1: entered promiscuous mode
[  432.716747][T23881] syzkaller1: entered allmulticast mode
[  432.771071][T23888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.802403][T23892] xt_CONNSECMARK: invalid mode: 253
[  433.045958][T23898] lo speed is unknown, defaulting to 1000
[  433.048660][T23898] wg1 speed is unknown, defaulting to 1000
[  433.593983][T23905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  433.669681][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4910'.
[  433.670054][T23916] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  433.695709][T23916] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  433.801951][T23926] xt_CT: No such helper "netbios-ns"
[  433.865725][T23931] validate_nla: 4 callbacks suppressed
[  433.865744][T23931] netlink: 'syz.1.4914': attribute type 23 has an invalid length.
[  433.915459][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4916'.
[  433.944829][T23943] only policy match revision 0 supported
[  433.944844][T23943] unable to load match
[  434.277523][T23970] nr0: left promiscuous mode
[  434.279114][T23970] nr0: left allmulticast mode
[  434.365469][T23973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4922'.
[  434.844928][T23994] netlink: 'syz.1.4929': attribute type 1 has an invalid length.
[  434.847989][T23995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4929'.
[  435.008731][T24005] xt_limit: Overflow, try lower: 271964/0
[  435.094955][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4934'.
[  435.566229][T24037] netlink: 'syz.0.4940': attribute type 2 has an invalid length.
[  435.625249][T24042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4940'.
[  435.670360][T24041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4942'.
[  435.679188][T24037] netlink: 'syz.0.4940': attribute type 11 has an invalid length.
[  435.812017][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4945'.
[  435.814719][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4945'.
[  435.825553][T24063] netlink: 'syz.1.4946': attribute type 11 has an invalid length.
[  435.917025][T24075] netlink: 'syz.1.4950': attribute type 10 has an invalid length.
[  435.942888][T24078] vlan6: entered promiscuous mode
[  435.944397][T24078] geneve1: entered promiscuous mode
[  435.946030][T24078] vlan6: entered allmulticast mode
[  435.951693][T24078] geneve1: entered allmulticast mode
[  436.301843][T24075] lo speed is unknown, defaulting to 1000
[  436.304636][T24075] wg1 speed is unknown, defaulting to 1000
[  436.419765][T24093] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  436.423015][T24094] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  436.495232][T24080] lo speed is unknown, defaulting to 1000
[  436.499153][T24080] wg1 speed is unknown, defaulting to 1000
[  436.791912][T24121] netlink: 'syz.0.4961': attribute type 3 has an invalid length.
[  436.861419][T24127] netlink: 'syz.0.4964': attribute type 1 has an invalid length.
[  437.032495][T24149] netlink: 'syz.0.4970': attribute type 10 has an invalid length.
[  437.034917][T24149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  437.038381][T24149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.042516][T24149] hsr0: entered promiscuous mode
[  437.454270][T24177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.536622][T24155] lo speed is unknown, defaulting to 1000
[  437.539282][T24155] wg1 speed is unknown, defaulting to 1000
[  437.686639][T24174] lo speed is unknown, defaulting to 1000
[  437.689367][T24174] wg1 speed is unknown, defaulting to 1000
[  438.080735][T24203] __nla_validate_parse: 7 callbacks suppressed
[  438.080748][T24203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4982'.
[  438.301965][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'.
[  438.311697][T24222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4988'.
[  438.318880][T24223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4989'.
[  438.336636][T24223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4989'.
[  438.351129][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4988'.
[  438.358537][T24222] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  438.450341][T24223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  438.495611][T24235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4992'.
[  438.578471][T24240] netlink: 'syz.1.4994': attribute type 1 has an invalid length.
[  438.587824][T24240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4994'.
[  438.596412][T24240] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4
[  438.656304][T24245] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  438.769583][T24256] netlink: 'syz.0.4996': attribute type 10 has an invalid length.
[  438.778247][T24256] netlink: 'syz.0.4996': attribute type 10 has an invalid length.
[  438.796896][T24256] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  438.811164][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4996'.
[  438.816324][T24251] openvswitch: netlink: Duplicate key (type 32).
[  439.399663][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5009'.
[  439.420584][T24306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.593931][T24309] lo speed is unknown, defaulting to 1000
[  439.596408][T24309] wg1 speed is unknown, defaulting to 1000
[  439.840899][T24333] netlink: 'syz.0.5014': attribute type 5 has an invalid length.
[  440.204568][T24368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.237831][T24371] netlink: 'syz.1.5024': attribute type 1 has an invalid length.
[  440.283939][T24371] bond41: entered promiscuous mode
[  440.314268][T24371] bond41: entered allmulticast mode
[  440.316173][T24371] 8021q: adding VLAN 0 to HW filter on device bond41
[  440.330845][T24376] macvlan4: entered promiscuous mode
[  440.332714][T24376] macvlan4: entered allmulticast mode
[  440.347239][T24378] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  440.360040][T24378] netlink: 'syz.2.5026': attribute type 4 has an invalid length.
[  440.363642][T24378] netlink: 'syz.2.5026': attribute type 4 has an invalid length.
[  440.452973][T24388] vlan0: entered promiscuous mode
[  440.460471][T24388] geneve1: entered promiscuous mode
[  440.544861][T24394] bond40: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  440.555299][T24394] bond40 (unregistering): Released all slaves
[  441.035693][T24438] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  441.038015][T24438] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  441.045338][T24438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.350431][T24479] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  441.359823][T24479] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  441.574999][T24477] lo speed is unknown, defaulting to 1000
[  441.579293][T24477] wg1 speed is unknown, defaulting to 1000
[  441.748030][T12682] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  441.755003][T12682] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  441.778088][   T33] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  441.977759][   T33] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  442.158406][   T33] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  442.399475][T24501] hsr0: left promiscuous mode
[  442.420511][T24501] bond39: left promiscuous mode
[  442.456897][T24501] vlan6: left promiscuous mode
[  442.460847][T24501] geneve1: left promiscuous mode
[  442.463049][T24501] vlan6: left allmulticast mode
[  442.464999][T24501] geneve1: left allmulticast mode
[  442.468515][T24494] lo speed is unknown, defaulting to 1000
[  442.471508][T24505] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  442.474319][T24505] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  442.476915][T24505] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  442.482106][T24494] wg1 speed is unknown, defaulting to 1000
[  443.093073][T24537] bond42 (unregistering): Released all slaves
[  443.105726][T24541] tunl0: Caught tx_queue_len zero misconfig
[  443.153198][T24535] __nla_validate_parse: 16 callbacks suppressed
[  443.153217][T24535] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5069'.
[  443.192264][T24548] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5072'.
[  443.208347][T24548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5072'.
[  443.307663][T24562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5073'.
[  443.351438][T24557] netlink: 'syz.2.5075': attribute type 1 has an invalid length.
[  443.354343][T24557] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5075'.
[  443.500695][T24568] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  443.502963][T24568] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  443.506941][T24568] tipc: Resetting bearer <eth:syzkaller0>
[  443.516684][T24568] netlink: 'syz.1.5077': attribute type 1 has an invalid length.
[  443.524246][T24568] netlink: 'syz.1.5077': attribute type 3 has an invalid length.
[  443.529028][T24568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5077'.
[  443.649334][T24580] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  443.706815][T24583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5081'.
[  443.739042][T24585] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5082'.
[  443.895126][T24572] lo speed is unknown, defaulting to 1000
[  443.897968][T24572] wg1 speed is unknown, defaulting to 1000
[  443.943609][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'.
[  444.012616][T24599] netlink: 'syz.2.5086': attribute type 4 has an invalid length.
[  444.213572][T24610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'.
[  444.375844][T24624] bridge0: port 2(veth0_to_bridge) entered blocking state
[  444.379416][T24624] bridge0: port 2(veth0_to_bridge) entered disabled state
[  444.388711][T24624] veth0_to_bridge: entered allmulticast mode
[  444.394787][T24624] veth0_to_bridge: entered promiscuous mode
[  444.473753][T24627] block nbd0: reconnected socket
[  444.578889][T24622] lo speed is unknown, defaulting to 1000
[  444.583720][T24622] wg1 speed is unknown, defaulting to 1000
[  444.706044][T24646] set match dimension is over the limit!
[  444.951982][T24656] netlink: 'syz.2.5103': attribute type 1 has an invalid length.
[  444.957016][T24662] xt_hashlimit: max too large, truncated to 1048576
[  444.961254][T24662] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  444.971392][T24662] netlink: 'syz.1.5104': attribute type 4 has an invalid length.
[  444.978956][T24663] netlink: 'syz.1.5104': attribute type 4 has an invalid length.
[  444.988246][T24662] netlink: 'syz.1.5104': attribute type 4 has an invalid length.
[  444.993854][T24663] netlink: 'syz.1.5104': attribute type 4 has an invalid length.
[  444.994104][   T33] lo speed is unknown, defaulting to 1000
[  444.998950][   T33] syz2: Port: 1 Link ACTIVE
[  445.140635][   T58] block nbd0: Receive control failed (result -32)
[  445.653396][T24702] netlink: 'syz.2.5117': attribute type 1 has an invalid length.
[  445.758334][T24716] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  445.907497][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  446.562483][T24736] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  446.566231][T24736] netlink: 'syz.1.5125': attribute type 13 has an invalid length.
[  446.594495][T24736] tipc: Resetting bearer <ib:vlan1>
[  446.770162][ T5809] lo speed is unknown, defaulting to 1000
[  446.772034][ T5809] syz2: Port: 1 Link DOWN
[  446.869894][T24742] netlink: 'syz.2.5127': attribute type 1 has an invalid length.
[  446.915989][T24742] 8021q: adding VLAN 0 to HW filter on device bond41
[  446.938072][T24742] macvlan0: entered promiscuous mode
[  446.940195][T24742] macvlan0: entered allmulticast mode
[  446.942659][T24742] bond41: entered allmulticast mode
[  446.944618][T24742] bond41: entered promiscuous mode
[  446.947067][T24742] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  446.956624][T24742] team0: Port device macvlan0 added
[  447.085903][T24756] veth0: entered promiscuous mode
[  447.104660][T24755] veth0: left promiscuous mode
[  447.232541][T24763] netlink: 'syz.1.5133': attribute type 2 has an invalid length.
[  447.277874][T24763] openvswitch: netlink: Flow key attr not present in new flow.
[  447.469567][T24751] lo speed is unknown, defaulting to 1000
[  447.471978][T24751] wg1 speed is unknown, defaulting to 1000
[  447.614219][T24777] sch_tbf: burst 2097152 is lower than device lo mtu (11337746) !
[  448.160190][T24718] Set syz1 is full, maxelem 65536 reached
[  448.214657][T24809] __nla_validate_parse: 14 callbacks suppressed
[  448.214670][T24809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5143'.
[  448.217984][T24807] netlink: 'syz.1.5142': attribute type 15 has an invalid length.
[  448.233818][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5143'.
[  448.260985][T24809] bond9: (slave ip6gretap4): Enslaving as an active interface with an up link
[  448.359131][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'.
[  448.490133][T24831] netlink: 'syz.2.5147': attribute type 11 has an invalid length.
[  448.735604][T24854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5152'.
[  448.781198][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5153'.
[  448.787757][T24859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5154'.
[  448.818675][T24859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5154'.
[  448.821246][T24859] nbd: device at index 64 is going down
[  448.948890][T24814] lo speed is unknown, defaulting to 1000
[  448.951378][T24814] wg1 speed is unknown, defaulting to 1000
[  449.091581][T24815] lo speed is unknown, defaulting to 1000
[  449.095782][T24815] wg1 speed is unknown, defaulting to 1000
[  449.286841][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'.
[  449.318157][T24886] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5156'.
[  449.337897][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5160'.
[  449.453872][T24890] syzkaller0: mtu less than device minimum
[  449.676593][T24878] lo speed is unknown, defaulting to 1000
[  449.680058][T24878] wg1 speed is unknown, defaulting to 1000
[  449.680321][   T98] block nbd3: Possible stuck request ffff88810a108000: control (read@0,1024B). Runtime 240 seconds
[  449.686328][   T98] block nbd3: Possible stuck request ffff88810a108200: control (read@1024,1024B). Runtime 240 seconds
[  449.691070][   T98] block nbd3: Possible stuck request ffff88810a108400: control (read@2048,1024B). Runtime 240 seconds
[  449.695372][   T98] block nbd3: Possible stuck request ffff88810a108600: control (read@3072,1024B). Runtime 240 seconds
[  449.868429][T24899] lo speed is unknown, defaulting to 1000
[  449.872648][T24899] wg1 speed is unknown, defaulting to 1000
[  450.087849][T24916] Bluetooth: hci0: Opcode 0x080f failed: -22
[  450.345748][T24911] lo speed is unknown, defaulting to 1000
[  450.408126][T24911] wg1 speed is unknown, defaulting to 1000
[  450.678390][T24945] sctp: [Deprecated]: syz.0.5174 (pid 24945) Use of int in max_burst socket option deprecated.
[  450.678390][T24945] Use struct sctp_assoc_value instead
[  451.127076][T24977] validate_nla: 1 callbacks suppressed
[  451.127089][T24977] netlink: 'syz.0.5181': attribute type 2 has an invalid length.
[  451.132038][T24977] netlink: 'syz.0.5181': attribute type 1 has an invalid length.
[  451.134816][T24977] netlink: 'syz.0.5181': attribute type 1 has an invalid length.
[  451.351373][T24981] tipc: Disabling bearer <ib:dummy0>
[  451.625652][T24993] geneve5: entered promiscuous mode
[  451.627884][T24993] geneve5: entered allmulticast mode
[  451.630752][T12682] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  451.633671][T12682] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  451.643540][T12682] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  451.650104][T12682] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  451.714693][T25007] sctp: [Deprecated]: syz.0.5187 (pid 25007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  451.714693][T25007] Use struct sctp_sack_info instead
[  451.880184][T25018] IPv6: Can't replace route, no match found
[  452.212246][T25039] batadv3: entered promiscuous mode
[  452.215311][T25039] 8021q: adding VLAN 0 to HW filter on device batadv3
[  452.263886][T25041] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  452.268464][T25041] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  452.352982][T25049] netlink: 'syz.1.5201': attribute type 1 has an invalid length.
[  452.355802][T25044] bond41: left allmulticast mode
[  452.359302][T25044] bond41: left promiscuous mode
[  452.373652][T12682] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.376238][T12682] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.402422][T25049] 8021q: adding VLAN 0 to HW filter on device bond42
[  452.406213][T12682] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.410071][T12682] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.419316][T25049] 8021q: adding VLAN 0 to HW filter on device batadv4
[  452.423890][T25049] bond42: (slave batadv4): making interface the new active one
[  452.427001][T25049] bond42: (slave batadv4): Enslaving as an active interface with an up link
[  452.460307][T25049] bond42 (unregistering): (slave batadv4): Releasing active interface
[  452.466794][T25049] bond42 (unregistering): Released all slaves
[  452.578574][T25065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  452.596296][T25066] tipc: Resetting bearer <eth:syzkaller0>
[  452.615067][T25063] netlink: 'syz.0.5204': attribute type 2 has an invalid length.
[  452.623105][T25063] netlink: 'syz.0.5204': attribute type 8 has an invalid length.
[  452.672492][T25071] netlink: 'syz.1.5207': attribute type 3 has an invalid length.
[  453.001768][T25101] netlink: 'syz.0.5214': attribute type 13 has an invalid length.
[  453.060317][T12682] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  453.063487][T12682] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  453.066228][T12682] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  453.068949][T12682] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  453.515143][T25133] __nla_validate_parse: 16 callbacks suppressed
[  453.515160][T25133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5222'.
[  453.549540][T25136] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  453.755932][T25150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5227'.
[  453.760330][T25150] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5227'.
[  453.766090][T25150] netlink: 'syz.0.5227': attribute type 5 has an invalid length.
[  453.774828][T25150] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5227'.
[  453.873581][T25155] syzkaller1: entered promiscuous mode
[  453.875452][T25155] syzkaller1: entered allmulticast mode
[  453.930967][T25155] syzkaller1: left promiscuous mode
[  453.934050][T25155] syzkaller1: left allmulticast mode
[  453.944126][T25164] syzkaller1: entered promiscuous mode
[  453.949779][T25164] syzkaller1: entered allmulticast mode
[  453.964939][T25168] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5234'.
[  453.968658][T25168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5234'.
[  453.974163][T25168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5234'.
[  454.056070][T25163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5233'.
[  454.094829][T25163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5233'.
[  454.175469][T25191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5239'.
[  454.179908][T25191] netem: change failed
[  454.383683][T25196] sctp: [Deprecated]: syz.2.5236 (pid 25196) Use of int in max_burst socket option.
[  454.383683][T25196] Use struct sctp_assoc_value instead
[  454.454359][T25208] syzkaller0: entered promiscuous mode
[  454.456679][T25208] syzkaller0: entered allmulticast mode
[  454.543967][T25180] lo speed is unknown, defaulting to 1000
[  454.549050][T25180] wg1 speed is unknown, defaulting to 1000
[  454.577573][T25210] netlink: 'syz.0.5245': attribute type 21 has an invalid length.
[  455.006705][T25227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.415955][T25265] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  455.536087][T25267] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  455.539150][T25267] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  455.544043][T25267] bond35: left promiscuous mode
[  455.549221][T25267] gretap5: left allmulticast mode
[  455.551652][T25267] macvlan0: left promiscuous mode
[  455.724685][T25280] veth15: entered promiscuous mode
[  456.094652][T25287] lo speed is unknown, defaulting to 1000
[  456.097713][T25287] wg1 speed is unknown, defaulting to 1000
[  456.286822][T25293] lo speed is unknown, defaulting to 1000
[  456.292833][T25293] wg1 speed is unknown, defaulting to 1000
[  456.400187][T25311] sctp: [Deprecated]: syz.2.5274 (pid 25311) Use of int in max_burst socket option deprecated.
[  456.400187][T25311] Use struct sctp_assoc_value instead
[  457.889027][T25315] lo speed is unknown, defaulting to 1000
[  457.926837][T25315] wg1 speed is unknown, defaulting to 1000
[  458.071518][T25338] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  458.073638][T25338] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  458.258272][T25345] bridge22: entered promiscuous mode
[  458.259895][T25345] bridge22: entered allmulticast mode
[  458.346434][T25344] bridge23: entered promiscuous mode
[  458.348277][T25344] bridge23: entered allmulticast mode
[  458.594573][T25363] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  458.596781][T25363] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  458.839357][T25390] validate_nla: 6 callbacks suppressed
[  458.839377][T25390] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  458.850261][T25390] __nla_validate_parse: 15 callbacks suppressed
[  458.850281][T25390] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5294'.
[  458.888926][T25392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5296'.
[  458.892987][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'.
[  458.995489][T25384] lo speed is unknown, defaulting to 1000
[  458.998490][T25384] wg1 speed is unknown, defaulting to 1000
[  459.269648][T25402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5299'.
[  459.601540][T25443] netlink: 'syz.2.5311': attribute type 1 has an invalid length.
[  459.604268][T25443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5311'.
[  459.628759][T25444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5311'.
[  459.632049][T25444] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5311'.
[  459.635383][T25444] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5311'.
[  459.731188][T25450] netlink: 'syz.1.5310': attribute type 4 has an invalid length.
[  459.737028][T25450] netlink: 'syz.1.5310': attribute type 4 has an invalid length.
[  459.744229][  T903] lo speed is unknown, defaulting to 1000
[  459.746105][  T903] syz2: Port: 1 Link ACTIVE
[  460.547791][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'.
[  460.550640][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'.
[  460.724161][T25486] xt_TPROXY: Can be used only with -p tcp or -p udp
[  460.783113][T25490] netlink: 'syz.1.5324': attribute type 1 has an invalid length.
[  460.785820][T25490] netlink: 'syz.1.5324': attribute type 1 has an invalid length.
[  460.790084][T25491] netlink: 'syz.1.5324': attribute type 1 has an invalid length.
[  460.830658][T25495] netlink: 'syz.1.5325': attribute type 10 has an invalid length.
[  461.036547][T25495] lo speed is unknown, defaulting to 1000
[  461.039249][T25495] wg1 speed is unknown, defaulting to 1000
[  461.662988][T25531] netlink: 'syz.0.5335': attribute type 10 has an invalid length.
[  461.669583][T25531] bond0: (slave dummy0): Releasing backup interface
[  461.883290][T25520] lo speed is unknown, defaulting to 1000
[  461.886115][T25520] wg1 speed is unknown, defaulting to 1000
[  462.492448][T25595] geneve5: left promiscuous mode
[  462.495632][T25595] veth15: left promiscuous mode
[  462.501267][T25595] bridge22: left promiscuous mode
[  462.504304][T25595] bridge23: left promiscuous mode
[  463.055357][T25641] netlink: 'syz.2.5357': attribute type 12 has an invalid length.
[  463.100410][T25646] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  463.386371][T25649] bond42: (slave bridge24): Enslaving as an active interface with an up link
[  463.429912][T25652] nft_compat: unsupported protocol 0
[  463.569528][T25661] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  463.781093][T25673] sctp: [Deprecated]: syz.1.5364 (pid 25673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  463.781093][T25673] Use struct sctp_sack_info instead
[  463.802240][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.941274][T25680] __nla_validate_parse: 18 callbacks suppressed
[  463.941291][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'.
[  463.946735][T25680] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5366'.
[  463.950232][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'.
[  464.051401][T25686] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5369'.
[  464.579979][T25715] sock: sock_set_timeout: `syz.0.5378' (pid 25715) tries to set negative timeout
[  464.812097][T25731] syzkaller1: entered promiscuous mode
[  464.815318][T25731] syzkaller1: entered allmulticast mode
[  464.996754][T25739] pim6reg1: entered promiscuous mode
[  464.999370][T25739] pim6reg1: entered allmulticast mode
[  465.861804][T25783] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  465.865761][T25783] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  465.870598][T25783] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  465.895319][T25783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5394'.
[  466.115676][T25800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5398'.
[  466.288255][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'.
[  466.292841][T25790] lo speed is unknown, defaulting to 1000
[  466.295570][T25790] wg1 speed is unknown, defaulting to 1000
[  466.339535][T25808] validate_nla: 1 callbacks suppressed
[  466.339552][T25808] netlink: 'syz.1.5400': attribute type 4 has an invalid length.
[  466.401013][T25814] netlink: 'syz.0.5402': attribute type 23 has an invalid length.
[  466.519291][T25823] netlink: 'syz.2.5405': attribute type 1 has an invalid length.
[  466.521916][T25823] netlink: 'syz.2.5405': attribute type 2 has an invalid length.
[  466.617662][T25828] Cannot find add_set index 2 as target
[  466.683357][T25828] vlan0: entered promiscuous mode
[  466.685432][T25828] vlan0: entered allmulticast mode
[  466.712250][T25836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5410'.
[  466.715166][T25836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5410'.
[  466.718549][T25833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5410'.
[  467.176836][   T34] audit: type=1800 audit(1770407182.799:19): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5418" name="memory.events" dev="tmpfs" ino=8719 res=0 errno=0
[  467.219996][T25862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.320763][T25882] netlink: 'syz.1.5425': attribute type 1 has an invalid length.
[  467.371051][T25888] vlan1: entered promiscuous mode
[  467.373020][T25888] bond0: entered promiscuous mode
[  467.374864][T25888] bond8: entered promiscuous mode
[  467.388949][T25887] vlan1: left promiscuous mode
[  467.390879][T25887] bond0: left promiscuous mode
[  467.392331][T25887] bond8: left promiscuous mode
[  467.504312][T25892] netlink: 'syz.1.5428': attribute type 1 has an invalid length.
[  467.530676][T25892] veth41: entered promiscuous mode
[  467.537199][T25892] bond44: (slave veth41): Enslaving as a backup interface with a down link
[  467.547219][T25892] 8021q: adding VLAN 0 to HW filter on device bond44
[  467.709858][T25908] netlink: 'syz.1.5432': attribute type 1 has an invalid length.
[  468.072938][T25948] netlink: 'syz.2.5441': attribute type 1 has an invalid length.
[  468.105942][T25948] 8021q: adding VLAN 0 to HW filter on device bond42
[  468.280334][T25960] netlink: 'syz.0.5445': attribute type 10 has an invalid length.
[  468.309909][T25923] lo speed is unknown, defaulting to 1000
[  468.313191][T25923] wg1 speed is unknown, defaulting to 1000
[  468.519641][T25972] xt_socket: unknown flags 0xfc
[  468.527478][T25968] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  468.563746][T25962] lo speed is unknown, defaulting to 1000
[  468.569865][T25962] wg1 speed is unknown, defaulting to 1000
[  468.736569][T25991] netlink: 'syz.0.5451': attribute type 3 has an invalid length.
[  469.069621][T26011] 8021q: adding VLAN 0 to HW filter on device bond43
[  469.116693][T26004] bond45: entered promiscuous mode
[  469.119311][T26004] 8021q: adding VLAN 0 to HW filter on device bond45
[  469.274913][T26031] bond0: (slave gre0): Error: Device type is different from other slaves
[  469.357973][T26033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.513373][T26053] __nla_validate_parse: 16 callbacks suppressed
[  469.513384][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'.
[  469.521149][T26053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5471'.
[  469.553201][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'.
[  469.556555][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'.
[  469.562590][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5473'.
[  469.709918][T26079] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  469.720943][T26081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5478'.
[  469.730946][T26081] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  470.143042][T26102] lo speed is unknown, defaulting to 1000
[  470.145633][T26102] wg1 speed is unknown, defaulting to 1000
[  470.211239][T26107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5484'.
[  470.321563][T26109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5485'.
[  470.732834][T26120] mac80211_hwsim hwsim84 syzkaller0: entered promiscuous mode
[  470.737421][T26120] mac80211_hwsim hwsim84 syzkaller0: entered allmulticast mode
[  470.772028][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5491'.
[  470.776412][T26134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'.
[  470.823481][T26139] xt_l2tp: invalid flags combination: 0
[  470.852222][T26141] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  470.854591][T26141] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000
[  470.878707][T26112] lo speed is unknown, defaulting to 1000
[  470.881906][T26112] wg1 speed is unknown, defaulting to 1000
[  470.989273][T26154] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  470.991363][T26154] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  471.471156][T26197] validate_nla: 16 callbacks suppressed
[  471.471259][T26197] netlink: 'syz.2.5509': attribute type 2 has an invalid length.
[  471.514712][T26199] hsr_slave_1 (unregistering): left promiscuous mode
[  471.629231][T26206] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  471.632052][T26206] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  471.911444][T26234] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  471.975640][T26238] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR
[  472.026616][T26247] IPv6: NLM_F_CREATE should be specified when creating new route
[  472.438999][T26251] lo speed is unknown, defaulting to 1000
[  472.441573][T26251] wg1 speed is unknown, defaulting to 1000
[  472.545628][T26264] netlink: 'syz.1.5530': attribute type 6 has an invalid length.
[  472.904959][T26293] netlink: 'syz.1.5536': attribute type 1 has an invalid length.
[  472.919577][T26293] bond46: entered promiscuous mode
[  472.921312][T26293] 8021q: adding VLAN 0 to HW filter on device bond46
[  472.940521][T26293] bond46: (slave bridge14): making interface the new active one
[  472.943279][T26293] bridge14: entered promiscuous mode
[  472.945620][T26293] bond46: (slave bridge14): Enslaving as an active interface with an up link
[  473.141647][T26300] bond47: entered promiscuous mode
[  473.143555][T26300] 8021q: adding VLAN 0 to HW filter on device bond47
[  473.155290][T26300] bond47 (unregistering): Released all slaves
[  473.682540][T26326] xt_ecn: cannot match TCP bits for non-tcp packets
[  473.778001][T26339] netlink: 'syz.1.5551': attribute type 4 has an invalid length.
[  473.791299][T26332] netlink: 'syz.2.5549': attribute type 10 has an invalid length.
[  473.888861][T26348] netlink: 'syz.2.5554': attribute type 1 has an invalid length.
[  473.894449][T26350] nbd: nbd1 already in use
[  473.926842][T26348] bond43: (slave vxcan1): The slave device specified does not support setting the MAC address
[  473.930555][T26348] bond43: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  473.936734][T26348] bond43: (slave vxcan1): making interface the new active one
[  473.939626][T26348] bond43: (slave vxcan1): Enslaving as an active interface with an up link
[  473.944793][T26348] bond43 (unregistering): (slave vxcan1): Releasing backup interface
[  473.952256][T26348] bond43 (unregistering): Released all slaves
[  474.414715][T26388] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  474.422076][T26388] : renamed from bond_slave_0
[  474.474398][T26390] netlink: 'syz.2.5564': attribute type 13 has an invalid length.
[  474.783804][T26404] netlink: zone id is out of range
[  474.786512][T26404] netlink: zone id is out of range
[  474.790911][T26404] netlink: zone id is out of range
[  474.792577][T26404] netlink: zone id is out of range
[  474.794237][T26404] netlink: zone id is out of range
[  474.795853][T26404] netlink: zone id is out of range
[  474.797689][T26404] netlink: zone id is out of range
[  474.799282][T26404] netlink: zone id is out of range
[  474.800835][T26404] netlink: zone id is out of range
[  474.802488][T26404] netlink: zone id is out of range
[  474.964182][T26423] xt_hashlimit: size too large, truncated to 1048576
[  475.153841][T26429] __nla_validate_parse: 27 callbacks suppressed
[  475.153859][T26429] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5574'.
[  475.279267][T26433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5575'.
[  475.352218][T26436] siw: device registration error -23
[  475.551418][T26448] netlink: 'syz.0.5581': attribute type 5 has an invalid length.
[  475.627770][T26450] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  475.736446][T26456] netlink: 'syz.0.5583': attribute type 2 has an invalid length.
[  475.740738][T26456] netlink: 'syz.0.5583': attribute type 1 has an invalid length.
[  475.744281][T26456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5583'.
[  475.828890][T26461] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5585'.
[  475.930857][T26463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5586'.
[  476.635448][T26469] netlink: 'syz.2.5589': attribute type 1 has an invalid length.
[  476.665154][T26469] bond43: (slave geneve8): making interface the new active one
[  476.669049][T26469] bond43: (slave geneve8): Enslaving as an active interface with an up link
[  476.672469][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  476.676912][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  476.677251][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'.
[  476.687904][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  476.691017][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  476.697037][T26469] bond43 (unregistering): (slave geneve8): Releasing active interface
[  476.699289][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'.
[  476.704722][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5587'.
[  476.718625][T26469] bond43 (unregistering): Released all slaves
[  476.718775][T26476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5588'.
[  476.748228][T12682] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.751501][T26476] bridge_slave_0: entered allmulticast mode
[  476.754666][T26474] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  476.755367][T12682] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.759415][T26474] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  476.763436][T12682] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.772413][T12682] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.866368][T26482] tipc: Resetting bearer <eth:vlan0>
[  476.878901][T26485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5593'.
[  476.928184][T26488] netlink: 'syz.2.5594': attribute type 1 has an invalid length.
[  476.930850][T26489] netlink: 'syz.2.5594': attribute type 1 has an invalid length.
[  477.866597][T26545] vlan4: entered promiscuous mode
[  477.871774][T26545] vlan4: entered allmulticast mode
[  477.898763][T26529] Can't find ip_set type has
[  477.961727][T26558] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  478.168295][T26579] 8021q: adding VLAN 0 to HW filter on device bond13
[  478.338207][T26602] netlink: 'syz.2.5624': attribute type 1 has an invalid length.
[  478.387943][   T34] audit: type=1800 audit(1770407194.019:20): pid=26595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5620" name="memory.events" dev="tmpfs" ino=10242 res=0 errno=0
[  478.399822][ T7090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.402133][ T7090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.417864][T26584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.834785][T26613] lo speed is unknown, defaulting to 1000
[  478.838058][T26613] wg1 speed is unknown, defaulting to 1000
[  479.002179][T26633] syzkaller1: entered promiscuous mode
[  479.016271][T26633] syzkaller1: entered allmulticast mode
[  479.165705][T26641] netlink: 'syz.1.5633': attribute type 4 has an invalid length.
[  479.175498][  T903] lo speed is unknown, defaulting to 1000
[  479.180885][  T903] syz2: Port: 1 Link DOWN
[  479.267949][T26644] netlink: 'syz.1.5634': attribute type 10 has an invalid length.
[  479.270566][T26644] netlink: 'syz.1.5634': attribute type 10 has an invalid length.
[  479.279277][T26644] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  479.532766][T26643] lo speed is unknown, defaulting to 1000
[  479.535325][T26643] wg1 speed is unknown, defaulting to 1000
[  479.761178][   T98] block nbd3: Possible stuck request ffff88810a108000: control (read@0,1024B). Runtime 270 seconds
[  479.765308][   T98] block nbd3: Possible stuck request ffff88810a108200: control (read@1024,1024B). Runtime 270 seconds
[  479.769824][   T98] block nbd3: Possible stuck request ffff88810a108400: control (read@2048,1024B). Runtime 270 seconds
[  479.774470][   T98] block nbd3: Possible stuck request ffff88810a108600: control (read@3072,1024B). Runtime 270 seconds
[  479.963099][T26680] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  479.969822][T26678] netlink: 'syz.2.5644': attribute type 1 has an invalid length.
[  480.089458][T26688] netlink: 'syz.2.5647': attribute type 1 has an invalid length.
[  480.419906][T26695] __nla_validate_parse: 95 callbacks suppressed
[  480.419924][T26695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5649'.
[  480.728532][T26699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5650'.
[  480.740448][T26699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5650'.
[  481.326952][ T5806] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  481.332559][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  481.332578][ T5806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  481.332587][ T5806] Call Trace:
[  481.332594][ T5806]  <TASK>
[  481.332601][ T5806]  dump_stack_lvl+0xe8/0x150
[  481.332622][ T5806]  dump_header+0xd3/0x4c0
[  481.332639][ T5806]  oom_kill_process+0x263/0x800
[  481.332655][ T5806]  out_of_memory+0xe55/0x11f0
[  481.332674][ T5806]  ? __pfx___mutex_lock+0x10/0x10
[  481.332692][ T5806]  ? __pfx_out_of_memory+0x10/0x10
[  481.332715][ T5806]  mem_cgroup_out_of_memory+0x158/0x270
[  481.332736][ T5806]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  481.332756][ T5806]  ? _raw_spin_unlock+0x28/0x50
[  481.332770][ T5806]  ? memcg1_oom_prepare+0x37e/0x450
[  481.332784][ T5806]  try_charge_memcg+0xdfb/0x12a0
[  481.332805][ T5806]  ? __pfx_try_charge_memcg+0x10/0x10
[  481.332820][ T5806]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  481.332844][ T5806]  charge_memcg+0x9f/0x180
[  481.332857][ T5806]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  481.332871][ T5806]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  481.332887][ T5806]  __read_swap_cache_async+0x212/0x480
[  481.332912][ T5806]  swap_cluster_readahead+0x358/0x680
[  481.332934][ T5806]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  481.332956][ T5806]  ? get_vma_policy+0x27b/0x3c0
[  481.332969][ T5806]  swapin_readahead+0x196/0xc50
[  481.332978][ T5806]  ? finish_task_switch+0x161/0x920
[  481.332993][ T5806]  ? swap_table_get+0x1e/0x260
[  481.333011][ T5806]  ? __pfx_swapin_readahead+0x10/0x10
[  481.333028][ T5806]  ? swap_table_get+0x1e/0x260
[  481.333042][ T5806]  ? swap_table_get+0x1e/0x260
[  481.333054][ T5806]  ? swap_table_get+0x1e/0x260
[  481.333071][ T5806]  ? swap_table_get+0x216/0x260
[  481.333087][ T5806]  ? swap_cache_get_folio+0x513/0x520
[  481.333109][ T5806]  do_swap_page+0x4d4/0x5e20
[  481.333155][ T5806]  ? ___pte_offset_map+0x29/0x240
[  481.333170][ T5806]  ? do_swap_page+0x192/0x5e20
[  481.333180][ T5806]  ? __pfx_do_swap_page+0x10/0x10
[  481.333195][ T5806]  ? __lock_acquire+0x6b5/0x2cf0
[  481.333209][ T5806]  ? __pfx_default_wake_function+0x10/0x10
[  481.333223][ T5806]  ? ___pte_offset_map+0x1ae/0x240
[  481.333241][ T5806]  ? pte_offset_map_rw_nolock+0xea/0x160
[  481.333261][ T5806]  handle_mm_fault+0x12d2/0x32a0
[  481.333314][ T5806]  ? handle_mm_fault+0xee/0x32a0
[  481.333336][ T5806]  ? __pfx_handle_mm_fault+0x10/0x10
[  481.333351][ T5806]  ? lock_vma_under_rcu+0x45a/0x500
[  481.333383][ T5806]  do_user_addr_fault+0xa73/0x1360
[  481.333405][ T5806]  ? rcu_is_watching+0x15/0xb0
[  481.333420][ T5806]  ? trace_page_fault_user+0x84/0x1c0
[  481.333435][ T5806]  exc_page_fault+0x6a/0xc0
[  481.333460][ T5806]  asm_exc_page_fault+0x26/0x30
[  481.333472][ T5806] RIP: 0033:0x7fe36915b58e
[  481.333483][ T5806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  481.333490][ T5806] RSP: 002b:00007ffd8f4cfee8 EFLAGS: 00010246
[  481.333498][ T5806] RAX: 0000000000000000 RBX: 0000555574582500 RCX: 00007fe36915b58e
[  481.333504][ T5806] RDX: 00007ffd8f4cff40 RSI: 0000000000000000 RDI: 0000000000000000
[  481.333508][ T5806] RBP: 00007ffd8f4cffac R08: 0000000000000000 R09: 0000000000000000
[  481.333513][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  481.333518][ T5806] R13: 00000000000927c0 R14: 0000000000075594 R15: 00007ffd8f4d0000
[  481.333531][ T5806]  </TASK>
[  481.333535][ T5806] memory: usage 307200kB, limit 307200kB, failcnt 498
[  481.452909][ T5806] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0
[  481.456236][ T5806] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  481.459485][ T5806] Memory cgroup stats for /syz2:
[  481.462951][ T5806] cache 0
[  481.466210][ T5806] rss 0
[  481.468268][ T5806] rss_huge 0
[  481.469724][ T5806] shmem 0
[  481.471092][ T5806] mapped_file 0
[  481.472644][ T5806] dirty 0
[  481.474116][ T5806] writeback 0
[  481.487452][ T5806] workingset_refault_anon 19
[  481.489362][ T5806] workingset_refault_file 7
[  481.492335][ T5806] swap 225280
[  481.494856][ T5806] swapcached 12288
[  481.499050][ T5806] pgpgin 244966
[  481.503465][ T5806] pgpgout 244963
[  481.506077][ T5806] pgfault 416514
[  481.511671][ T5806] pgmajfault 25
[  481.514962][ T5806] inactive_anon 12288
[  481.516317][ T5806] active_anon 0
[  481.517761][ T5806] inactive_file 0
[  481.522357][ T5806] active_file 0
[  481.524606][ T5806] unevictable 0
[  481.526859][ T5806] hierarchical_memory_limit 314572800
[  481.531794][ T5806] hierarchical_memsw_limit 9223372036854771712
[  481.535958][ T5806] total_cache 0
[  481.539461][ T5806] total_rss 0
[  481.540446][ T5806] total_rss_huge 0
[  481.543556][ T5806] total_shmem 0
[  481.544730][ T5806] total_mapped_file 0
[  481.546086][ T5806] total_dirty 0
[  481.547119][ T5806] total_writeback 0
[  481.550002][ T5806] total_workingset_refault_anon 19
[  481.551601][ T5806] total_workingset_refault_file 7
[  481.553143][ T5806] total_swap 225280
[  481.554368][ T5806] total_swapcached 12288
[  481.555676][ T5806] total_pgpgin 244966
[  481.556915][ T5806] total_pgpgout 244963
[  481.558941][ T5806] total_pgfault 416515
[  481.560236][ T5806] total_pgmajfault 25
[  481.561502][ T5806] total_inactive_anon 12288
[  481.562906][ T5806] total_active_anon 0
[  481.564146][ T5806] total_inactive_file 0
[  481.565508][ T5806] total_active_file 0
[  481.566740][ T5806] total_unevictable 0
[  481.569637][ T5806] anon_cost 0
[  481.570727][ T5806] file_cost 0
[  481.571721][ T5806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5650,pid=26697,uid=0
[  481.578542][ T5806] Memory cgroup out of memory: Killed process 26697 (syz.2.5650) total-vm:167864kB, anon-rss:1340kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  481.586605][T26721] netlink: 'syz.0.5655': attribute type 1 has an invalid length.
[  481.874354][T26731] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5656'.
[  481.932904][T26733] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  482.017803][T26733] xt_CT: You must specify a L4 protocol and not use inversions on it
[  482.021725][T26742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5662'.
[  482.031212][T26742] net_ratelimit: 12 callbacks suppressed
[  482.031256][T26742] openvswitch: netlink: IP tunnel dst address not specified
[  482.273674][T26752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5666'.
[  482.474418][T26756] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  482.533854][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5667'.
[  482.556039][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'.
[  482.600514][T26770] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5669'.
[  482.610448][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'.
[  482.639925][T26770] ip6gretap0: entered promiscuous mode
[  482.642193][T26770] gretap0: entered promiscuous mode
[  482.669482][T26770] gretap0: left promiscuous mode
[  482.678089][T26770] ip6gretap0: left promiscuous mode
[  482.798626][T26785] netlink: 'syz.1.5674': attribute type 1 has an invalid length.
[  482.850046][T26784] bond47: (slave vxcan7): The slave device specified does not support setting the MAC address
[  482.851233][T26790] openvswitch: netlink: Tunnel attr 154 out of range max 16
[  482.853409][T26784] bond47: (slave vxcan7): Error -95 calling set_mac_address
[  483.034261][T26806] netlink: 'syz.1.5678': attribute type 1 has an invalid length.
[  483.036700][T26806] netlink: 'syz.1.5678': attribute type 1 has an invalid length.
[  483.061660][T26806] netlink: 'syz.1.5678': attribute type 1 has an invalid length.
[  483.072260][T26809] netlink: 'syz.1.5678': attribute type 1 has an invalid length.
[  483.125333][T26808] tipc: Resetting bearer <eth:syzkaller0>
[  483.603517][T26852] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  483.675392][T26858] netlink: 'syz.0.5692': attribute type 4 has an invalid length.
[  483.729875][T26859] delete_channel: no stack
[  483.888444][T26873] netlink: 'syz.0.5695': attribute type 1 has an invalid length.
[  483.926615][T26873] bond44: (slave vxcan5): The slave device specified does not support setting the MAC address
[  483.931877][T26873] bond44: (slave vxcan5): Error -95 calling set_mac_address
[  483.984888][T26875] bond44: (slave bridge25): Enslaving as an active interface with a down link
[  484.011230][T26873] macvlan1: entered promiscuous mode
[  484.013563][T26873] macvlan1: entered allmulticast mode
[  484.016244][T26873] bond44: entered promiscuous mode
[  484.018477][T26873] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  484.022154][T26873] bond44: left promiscuous mode
[  484.454395][T26899] netlink: 'syz.2.5700': attribute type 1 has an invalid length.
[  484.678165][T26921] tipc: Resetting bearer <eth:syzkaller0>
[  484.900763][T26938] netem: change failed
[  485.356352][T26960] lo speed is unknown, defaulting to 1000
[  485.360533][T26960] wg1 speed is unknown, defaulting to 1000
[  485.587797][T26984] __nla_validate_parse: 17 callbacks suppressed
[  485.587808][T26984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5726'.
[  485.592302][T26985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5726'.
[  485.623742][T26984] vlan5: entered allmulticast mode
[  485.787253][T26995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5729'.
[  485.795083][T26997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5730'.
[  485.924419][T27004] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  485.933091][T27004] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  485.935897][T27004] tipc: Resetting bearer <eth:syzkaller0>
[  486.050595][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'.
[  486.162149][T27016] netlink: 'syz.2.5736': attribute type 21 has an invalid length.
[  486.164735][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'.
[  486.168327][T27016] netlink: 'syz.2.5736': attribute type 21 has an invalid length.
[  486.171240][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'.
[  486.360036][T27026] ip6tnl0: Caught tx_queue_len zero misconfig
[  486.368519][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5739'.
[  487.146903][T27094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5758'.
[  487.206403][T27100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5760'.
[  487.293989][T27113] bridge27: entered allmulticast mode
[  487.677917][T27142] syzkaller1: entered promiscuous mode
[  487.680596][T27142] syzkaller1: entered allmulticast mode
[  487.790271][T27124] lo speed is unknown, defaulting to 1000
[  487.792910][T27124] wg1 speed is unknown, defaulting to 1000
[  487.995485][T27162] validate_nla: 2 callbacks suppressed
[  487.995507][T27162] netlink: 'syz.0.5777': attribute type 1 has an invalid length.
[  488.064158][T27164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.063274][T27194] netlink: 'syz.0.5787': attribute type 9 has an invalid length.
[  489.066274][T27194] netlink: 'syz.0.5787': attribute type 11 has an invalid length.
[  489.069866][T27194] netlink: 'syz.0.5787': attribute type 12 has an invalid length.
[  489.076246][T27194] nbd: must specify a size in bytes for the device
[  489.344586][T27212] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  489.431924][T27231] netlink: 'syz.0.5795': attribute type 1 has an invalid length.
[  489.451646][T27231] 8021q: adding VLAN 0 to HW filter on device bond45
[  489.490027][T27234] veth21: entered promiscuous mode
[  489.496769][T27234] bond45: (slave veth21): Enslaving as an active interface with an up link
[  489.510408][T27241] netlink: 'syz.2.5797': attribute type 1 has an invalid length.
[  489.529343][T27241] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR
[  489.921769][T27292] netlink: 'syz.2.5807': attribute type 1 has an invalid length.
[  489.926884][T27292] netlink: 'syz.2.5807': attribute type 2 has an invalid length.
[  489.988912][T27282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  490.020576][T27282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.157657][T27307] netlink: 'syz.2.5811': attribute type 1 has an invalid length.
[  490.160565][T27307] netlink: 'syz.2.5811': attribute type 2 has an invalid length.
[  490.495937][T27302] lo speed is unknown, defaulting to 1000
[  490.499652][T27302] wg1 speed is unknown, defaulting to 1000
[  490.610789][T27353] 8021q: adding VLAN 0 to HW filter on device bond45
[  490.619032][T27353] bond44: (slave bond45): making interface the new active one
[  490.622227][T27353] bond44: (slave bond45): Enslaving as an active interface with an up link
[  490.636673][T27353] bond44: (slave gretap6): Enslaving as a backup interface with an up link
[  490.641756][T27353] __nla_validate_parse: 30 callbacks suppressed
[  490.641767][T27353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5820'.
[  490.650749][T27353] 8021q: adding VLAN 0 to HW filter on device bond44
[  490.654030][T27362] tipc: Resetting bearer <eth:syzkaller0>
[  490.839014][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'.
[  490.842019][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'.
[  490.910390][T27386] 8021q: adding VLAN 0 to HW filter on device bond49
[  490.913502][T27386] bond48: (slave bond49): making interface the new active one
[  490.936647][T27386] bond48: (slave bond49): Enslaving as an active interface with an up link
[  490.940821][T27392] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5830'.
[  490.950095][T27392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5830'.
[  490.951913][T27387] 8021q: adding VLAN 0 to HW filter on device bond50
[  490.952907][T27392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5830'.
[  490.956033][T27387] bond48: (slave bond50): Enslaving as a backup interface with an up link
[  490.969462][T27386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5829'.
[  490.977013][T27392] block nbd0: NBD_DISCONNECT
[  490.979608][T27392] block nbd0: Send disconnect failed -32
[  490.982925][T27392] block nbd0: shutting down sockets
[  490.994685][T27386] 8021q: adding VLAN 0 to HW filter on device bond48
[  490.998855][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5829'.
[  491.002217][T27386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5829'.
[  491.093089][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5832'.
[  491.282115][T27402] veth42: entered allmulticast mode
[  491.731385][T27405] bond46: entered promiscuous mode
[  491.733353][T27405] bond46: entered allmulticast mode
[  491.735604][T27405] 8021q: adding VLAN 0 to HW filter on device bond46
[  492.122650][T27436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.517911][T27461] syzkaller1: tun_chr_ioctl cmd 1074025677
[  492.519831][T27461] syzkaller1: linktype set to 270
[  493.356038][T27489] dvmrp12: entered allmulticast mode
[  493.371159][T27488] dvmrp12: left allmulticast mode
[  493.481484][T27483] lo speed is unknown, defaulting to 1000
[  493.484170][T27483] wg1 speed is unknown, defaulting to 1000
[  493.538830][T27495] IPVS: set_ctl: invalid protocol: 255 172.30.0.2:3620
[  493.666669][T27500] validate_nla: 6 callbacks suppressed
[  493.666702][T27500] netlink: 'syz.2.5859': attribute type 4 has an invalid length.
[  493.679991][T27500] netlink: 'syz.2.5859': attribute type 4 has an invalid length.
[  494.094123][T27546] lo: Caught tx_queue_len zero misconfig
[  494.096410][T27546] netem: change failed
[  494.226432][T27551] netlink: 'syz.2.5874': attribute type 2 has an invalid length.
[  494.245098][T27551] netlink: 'syz.2.5874': attribute type 10 has an invalid length.
[  494.939394][T27597] x_tables: ip_tables: icmp match: only valid for protocol 1
[  494.943110][T27598] syzkaller1: entered promiscuous mode
[  494.945795][T27598] syzkaller1: entered allmulticast mode
[  495.056874][T27607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.062462][T27603] nbd: couldn't find a device at index 0
[  495.135030][T27617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.221156][T27625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.263997][T27631] bond47: option lp_interval: invalid value (0)
[  495.265755][T27631] bond47: option lp_interval: allowed values 1 - 2147483647
[  495.274950][T27631] bond47 (unregistering): Released all slaves
[  495.328038][T27636] bond51 (unregistering): Released all slaves
[  495.736852][T27664] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  495.791847][   T34] audit: type=1800 audit(1770407211.419:21): pid=27669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5899" name=CB dev="tmpfs" ino=9480 res=0 errno=0
[  495.841329][T27672] pim6reg1: entered promiscuous mode
[  495.843335][T27672] pim6reg1: entered allmulticast mode
[  496.082237][T27686] netlink: 'syz.2.5905': attribute type 1 has an invalid length.
[  496.084668][T27686] netlink: 'syz.2.5905': attribute type 4 has an invalid length.
[  496.086961][T27686] __nla_validate_parse: 11 callbacks suppressed
[  496.086970][T27686] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5905'.
[  496.094950][T27687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5904'.
[  496.109327][T27686] netlink: 'syz.2.5905': attribute type 1 has an invalid length.
[  496.111610][T27686] netlink: 'syz.2.5905': attribute type 4 has an invalid length.
[  496.114517][T27686] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5905'.
[  496.160944][T27693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5907'.
[  496.163581][T27693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5907'.
[  496.243880][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'.
[  496.297670][T27708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5910'.
[  496.303662][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5912'.
[  496.306681][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5912'.
[  496.317697][T27716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5911'.
[  496.323244][T27716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4
[  496.330659][T27716] batman_adv: batadv0: Adding interface: ip6gretap4
[  496.333931][T27716] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.342310][T27716] batman_adv: batadv0: Interface activated: ip6gretap4
[  496.657635][   T57] block nbd5: Receive control failed (result -32)
[  497.050574][T27746] netlink: 'syz.2.5920': attribute type 14 has an invalid length.
[  497.059251][T27746] netlink: 'syz.2.5920': attribute type 11 has an invalid length.
[  497.130089][T27753] netlink: 'syz.0.5922': attribute type 11 has an invalid length.
[  497.300078][T27775] macsec4: entered promiscuous mode
[  497.301638][T27775] mac80211_hwsim hwsim4 dvmrp1: entered promiscuous mode
[  497.421589][T27786] 8021q: adding VLAN 0 to HW filter on device bond46
[  497.443556][T27790] xt_hashlimit: invalid rate
[  497.458264][T27794] syzkaller1: entered promiscuous mode
[  497.459934][T27794] syzkaller1: entered allmulticast mode
[  497.605872][T27816] vlan0: entered promiscuous mode
[  497.615951][T27816] vlan0: entered allmulticast mode
[  497.619913][T27816] hsr_slave_1: entered allmulticast mode
[  497.648298][T27822] 8021q: adding VLAN 0 to HW filter on device bond47
[  497.652483][T27822] bond47: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  497.701403][T27828] IPVS: stopping backup sync thread 13106 ...
[  497.965466][T27865] 8021q: adding VLAN 0 to HW filter on device bond51
[  498.101489][T27894] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  498.133008][T27894] bond48: Unable to set down delay as MII monitoring is disabled
[  498.139440][T27894] bond48 (unregistering): Released all slaves
[  498.170439][T27884] syzkaller1: entered promiscuous mode
[  498.172586][T27884] syzkaller1: entered allmulticast mode
[  498.284465][T27894] netlink: set zone limit has 4 unknown bytes
[  498.441271][T27916] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  498.557142][T27901] lo speed is unknown, defaulting to 1000
[  498.560170][T27901] wg1 speed is unknown, defaulting to 1000
[  498.604754][T27928] pim6reg1: entered promiscuous mode
[  498.606440][T27928] pim6reg1: entered allmulticast mode
[  498.798174][T27922] lo speed is unknown, defaulting to 1000
[  498.802441][T27922] wg1 speed is unknown, defaulting to 1000
[  498.971865][T27923] lo speed is unknown, defaulting to 1000
[  498.975737][T27923] wg1 speed is unknown, defaulting to 1000
[  499.471614][T27936] validate_nla: 14 callbacks suppressed
[  499.471628][T27936] netlink: 'syz.2.5971': attribute type 4 has an invalid length.
[  499.550222][T27943] netlink: 'syz.1.5974': attribute type 2 has an invalid length.
[  499.570399][T27944] netlink: 'syz.1.5974': attribute type 2 has an invalid length.
[  499.670383][T27955] x_tables: duplicate underflow at hook 2
[  499.761263][T27962] netlink: 'syz.1.5979': attribute type 1 has an invalid length.
[  499.783967][T27962] lo: left allmulticast mode
[  499.792918][T27962] bridge_slave_0: left allmulticast mode
[  499.803681][T27962] tipc: Resetting bearer <eth:syzkaller0>
[  499.923573][T27962] bond36: left promiscuous mode
[  499.925051][T27962] bridge13: left promiscuous mode
[  499.926696][T27962] bond37: left promiscuous mode
[  499.931147][T27962] ip6tnl4: left promiscuous mode
[  499.933177][T27962] sit6: left promiscuous mode
[  499.935029][T27962] bond40: left promiscuous mode
[  499.936433][T27962] wireguard65: left promiscuous mode
[  499.943330][T27962] bond41: left promiscuous mode
[  499.945228][T27962] bond41: left allmulticast mode
[  499.946854][T27962] macvlan4: left promiscuous mode
[  499.948750][T27962] macvlan4: left allmulticast mode
[  499.950824][T27962] batadv3: left promiscuous mode
[  499.963924][T27962] veth41: left promiscuous mode
[  499.968053][T27962] bond45: left promiscuous mode
[  499.974223][T27962] bond46: left promiscuous mode
[  499.977705][T27962] bridge14: left promiscuous mode
[  499.988469][T27962] vlan4: left promiscuous mode
[  499.989884][T27962] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  499.991983][T27962] vlan4: left allmulticast mode
[  499.993382][T27962] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  500.012587][T27962] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  500.024398][T27962] mac80211_hwsim hwsim4 dvmrp1: left promiscuous mode
[  500.026589][T27962] macsec4: left promiscuous mode
[  500.031867][T27962] vlan0: left promiscuous mode
[  500.036753][T27962] vlan0: left allmulticast mode
[  500.039193][T27962] hsr_slave_1: left allmulticast mode
[  500.051914][T27956] lo speed is unknown, defaulting to 1000
[  500.054384][T27956] wg1 speed is unknown, defaulting to 1000
[  500.062760][T27965] syzkaller1: entered promiscuous mode
[  500.064367][T27965] syzkaller1: entered allmulticast mode
[  500.171911][T27951] lo speed is unknown, defaulting to 1000
[  500.174571][T27951] wg1 speed is unknown, defaulting to 1000
[  500.626538][T27992] sctp: [Deprecated]: syz.2.5984 (pid 27992) Use of int in maxseg socket option.
[  500.626538][T27992] Use struct sctp_assoc_value instead
[  500.678969][T27994] sctp: [Deprecated]: syz.2.5985 (pid 27994) Use of struct sctp_assoc_value in delayed_ack socket option.
[  500.678969][T27994] Use struct sctp_sack_info instead
[  500.702124][T27994] raw_sendmsg: syz.2.5985 forgot to set AF_INET. Fix it!
[  500.820541][T28008] sctp: [Deprecated]: syz.2.5989 (pid 28008) Use of int in max_burst socket option.
[  500.820541][T28008] Use struct sctp_assoc_value instead
[  501.276149][T28045] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) !
[  501.441826][T28055] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.454587][T28055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.483790][T28059] netlink: 'syz.1.6000': attribute type 1 has an invalid length.
[  501.501511][T28059] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[  501.529237][T28065] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  501.599903][T28068] __nla_validate_parse: 92 callbacks suppressed
[  501.599918][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'.
[  501.604445][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'.
[  501.641762][T28074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6004'.
[  501.734484][T28082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6007'.
[  501.882830][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6013'.
[  501.885526][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6013'.
[  501.888915][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6013'.
[  501.895166][T28100] netlink: 'syz.1.6013': attribute type 1 has an invalid length.
[  501.897851][T28100] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6013'.
[  501.991606][T28102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6014'.
[  502.166701][T28118] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6016'.
[  502.299520][T28129] netlink: 'syz.0.6020': attribute type 10 has an invalid length.
[  502.356445][T28131] ipt_REJECT: ECHOREPLY no longer supported.
[  502.501171][T28147] sctp: [Deprecated]: syz.2.6026 (pid 28147) Use of int in max_burst socket option deprecated.
[  502.501171][T28147] Use struct sctp_assoc_value instead
[  502.564989][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.569057][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.573349][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.579255][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.585582][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.590048][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.594364][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.598571][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.602524][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.606899][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.615744][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.620150][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.624089][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.629299][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.633090][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.638370][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.642322][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.646146][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.650326][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.654143][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.658296][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.661873][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.665602][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.669830][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.673833][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.678117][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.682096][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.685842][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.691066][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.694779][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.698867][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.702839][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.706777][T28153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  503.200249][   T57] block nbd6: Receive control failed (result -32)
[  503.248883][T28177] nbd: nbd1 already in use
[  503.254858][T28177] block nbd1: NBD_DISCONNECT
[  503.260185][T28177] block nbd1: Send disconnect failed -22
[  503.262219][T28177] block nbd1: shutting down sockets
[  503.326396][T28184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  503.329295][T28184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  503.449909][   T27] smc: removing ib device syz1
[  503.472853][T28198] tipc: Disabling bearer <eth:vlan0>
[  503.500809][T28204] tipc: Resetting bearer <eth:syzkaller0>
[  503.514729][T28204] tipc: Resetting bearer <ib:vlan1>
[  503.542754][ T5845] ==================================================================
[  503.545238][ T5845] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  503.547721][ T5845] Read of size 8 at addr ffff88816d9f62f0 by task kworker/0:3/5845
[  503.550141][ T5845] 
[  503.550937][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[  503.550949][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  503.550956][ T5845] Workqueue: events smc_ib_port_event_work
[  503.550976][ T5845] Call Trace:
[  503.550982][ T5845]  <TASK>
[  503.550987][ T5845]  dump_stack_lvl+0xe8/0x150
[  503.551001][ T5845]  print_report+0xba/0x230
[  503.551011][ T5845]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  503.551023][ T5845]  kasan_report+0x117/0x150
[  503.551035][ T5845]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  503.551047][ T5845]  __ethtool_get_link_ksettings+0x5e/0x170
[  503.551060][ T5845]  ib_get_eth_speed+0x180/0x7f0
[  503.551073][ T5845]  ? rxe_query_port+0x7e/0x3d0
[  503.551082][ T5845]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  503.551125][ T5845]  ? do_raw_spin_unlock+0x4d/0x210
[  503.551139][ T5845]  rxe_query_port+0x93/0x3d0
[  503.551149][ T5845]  ib_query_port+0x170/0x830
[  503.551162][ T5845]  smc_ib_port_event_work+0x15a/0x940
[  503.551177][ T5845]  ? process_scheduled_works+0xa0f/0x17a0
[  503.551186][ T5845]  ? process_scheduled_works+0xa0f/0x17a0
[  503.551194][ T5845]  process_scheduled_works+0xaec/0x17a0
[  503.551429][ T5845]  ? __pfx_process_scheduled_works+0x10/0x10
[  503.551437][ T5845]  ? do_raw_spin_lock+0x12b/0x2f0
[  503.551449][ T5845]  ? assign_work+0x3d3/0x440
[  503.551458][ T5845]  worker_thread+0x89f/0xd90
[  503.551471][ T5845]  kthread+0x726/0x8b0
[  503.551483][ T5845]  ? __pfx_worker_thread+0x10/0x10
[  503.551491][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.551502][ T5845]  ? _raw_spin_unlock_irq+0x23/0x50
[  503.551511][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.551521][ T5845]  ret_from_fork+0x51b/0xa40
[  503.551530][ T5845]  ? __pfx_ret_from_fork+0x10/0x10
[  503.551537][ T5845]  ? __switch_to+0xc82/0x1410
[  503.551551][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.551561][ T5845]  ret_from_fork_asm+0x1a/0x30
[  503.551575][ T5845]  </TASK>
[  503.551579][ T5845] 
[  503.607981][ T5845] Allocated by task 5807:
[  503.609259][ T5845]  kasan_save_track+0x3e/0x80
[  503.610624][ T5845]  __kasan_kmalloc+0x93/0xb0
[  503.611999][ T5845]  __kvmalloc_node_noprof+0x59a/0x8d0
[  503.613645][ T5845]  alloc_netdev_mqs+0xa6/0x11b0
[  503.615128][ T5845]  rtnl_create_link+0x31f/0xd70
[  503.616821][ T5845]  rtnl_newlink_create+0x277/0xb70
[  503.618484][ T5845]  rtnl_newlink+0x1666/0x1be0
[  503.619838][ T5845]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  503.621242][ T5845]  netlink_rcv_skb+0x232/0x4b0
[  503.622951][ T5845]  netlink_unicast+0x80f/0x9b0
[  503.624774][ T5845]  netlink_sendmsg+0x813/0xb40
[  503.626572][ T5845]  __sock_sendmsg+0x21c/0x270
[  503.628242][ T5845]  __sys_sendto+0x3c0/0x550
[  503.629649][ T5845]  __x64_sys_sendto+0xde/0x100
[  503.631335][ T5845]  do_syscall_64+0xe2/0xf80
[  503.633125][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.635245][ T5845] 
[  503.636076][ T5845] Freed by task 28198:
[  503.637470][ T5845]  kasan_save_track+0x3e/0x80
[  503.638909][ T5845]  kasan_save_free_info+0x46/0x50
[  503.640392][ T5845]  __kasan_slab_free+0x5c/0x80
[  503.641849][ T5845]  kfree+0x1be/0x650
[  503.643054][ T5845]  device_release+0x9e/0x1d0
[  503.644592][ T5845]  kobject_put+0x228/0x560
[  503.645904][ T5845]  netdev_run_todo+0xc75/0xde0
[  503.647330][ T5845]  rtnl_dellink+0x6a7/0x820
[  503.648974][ T5845]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  503.650705][ T5845]  netlink_rcv_skb+0x232/0x4b0
[  503.652238][ T5845]  netlink_unicast+0x80f/0x9b0
[  503.653679][ T5845]  netlink_sendmsg+0x813/0xb40
[  503.655107][ T5845]  __sock_sendmsg+0x21c/0x270
[  503.656547][ T5845]  ____sys_sendmsg+0x4d7/0x810
[  503.657981][ T5845]  ___sys_sendmsg+0x2a5/0x360
[  503.659397][ T5845]  __x64_sys_sendmsg+0x1bd/0x2a0
[  503.660848][ T5845]  do_syscall_64+0xe2/0xf80
[  503.662258][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.663972][ T5845] 
[  503.664688][ T5845] The buggy address belongs to the object at ffff88816d9f6000
[  503.664688][ T5845]  which belongs to the cache kmalloc-cg-4k of size 4096
[  503.669000][ T5845] The buggy address is located 752 bytes inside of
[  503.669000][ T5845]  freed 4096-byte region [ffff88816d9f6000, ffff88816d9f7000)
[  503.673121][ T5845] 
[  503.673816][ T5845] The buggy address belongs to the physical page:
[  503.675641][ T5845] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16d9f0
[  503.678285][ T5845] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  503.680684][ T5845] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  503.682982][ T5845] page_type: f5(slab)
[  503.684492][ T5845] raw: 057ff00000000040 ffff88810004b500 dead000000000122 0000000000000000
[  503.687179][ T5845] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  503.690048][ T5845] head: 057ff00000000040 ffff88810004b500 dead000000000122 0000000000000000
[  503.692657][ T5845] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  503.695251][ T5845] head: 057ff00000000003 ffffea0005b67c01 00000000ffffffff 00000000ffffffff
[  503.697891][ T5845] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  503.700624][ T5845] page dumped because: kasan: bad access detected
[  503.702971][ T5845] page_owner tracks the page as allocated
[  503.704990][ T5845] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 65515089272, free_ts 38818406114
[  503.712701][ T5845]  post_alloc_hook+0x228/0x280
[  503.714501][ T5845]  get_page_from_freelist+0x24dc/0x2580
[  503.716462][ T5845]  __alloc_frozen_pages_noprof+0x18d/0x380
[  503.718610][ T5845]  alloc_pages_mpol+0x232/0x4a0
[  503.720426][ T5845]  allocate_slab+0x86/0x3a0
[  503.722139][ T5845]  ___slab_alloc+0xd82/0x1760
[  503.723847][ T5845]  __slab_alloc+0x65/0x100
[  503.725492][ T5845]  __kmalloc_cache_noprof+0x40d/0x6e0
[  503.727413][ T5845]  ipv6_add_dev+0x6aa/0x13a0
[  503.729062][ T5845]  addrconf_notify+0x771/0x1050
[  503.730820][ T5845]  notifier_call_chain+0x19d/0x3a0
[  503.732687][ T5845]  register_netdevice+0x1637/0x1ae0
[  503.734573][ T5845]  geneve_configure+0x611/0xa30
[  503.736362][ T5845]  geneve_newlink+0x1b9/0x260
[  503.738052][ T5845]  rtnl_newlink_create+0x329/0xb70
[  503.739905][ T5845]  rtnl_newlink+0x1666/0x1be0
[  503.741605][ T5845] page last free pid 5578 tgid 5578 stack trace:
[  503.743865][ T5845]  __free_frozen_pages+0xbb0/0xd10
[  503.745551][ T5845]  __put_partials+0x146/0x170
[  503.746924][ T5845]  __slab_free+0x294/0x320
[  503.748263][ T5845]  qlist_free_all+0x97/0x100
[  503.749612][ T5845]  kasan_quarantine_reduce+0x148/0x160
[  503.751189][ T5845]  __kasan_slab_alloc+0x22/0x80
[  503.753003][ T5845]  __kmalloc_noprof+0x3c2/0x7e0
[  503.754463][ T5845]  tomoyo_realpath_from_path+0xe3/0x5d0
[  503.756089][ T5845]  tomoyo_path_perm+0x283/0x560
[  503.757495][ T5845]  security_inode_getattr+0x12b/0x310
[  503.759027][ T5845]  vfs_fstatat+0xb1/0x170
[  503.760340][ T5845]  __x64_sys_newfstatat+0x151/0x200
[  503.761902][ T5845]  do_syscall_64+0xe2/0xf80
[  503.763392][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.765088][ T5845] 
[  503.765782][ T5845] Memory state around the buggy address:
[  503.767392][ T5845]  ffff88816d9f6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.769669][ T5845]  ffff88816d9f6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.771984][ T5845] >ffff88816d9f6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.774308][ T5845]                                                              ^
[  503.776650][ T5845]  ffff88816d9f6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.779062][ T5845]  ffff88816d9f6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.781386][ T5845] ==================================================================
[  503.794795][ T5845] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  503.797489][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[  503.800528][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  503.804091][ T5845] Workqueue: events smc_ib_port_event_work
[  503.806157][ T5845] Call Trace:
[  503.807368][ T5845]  <TASK>
[  503.808432][ T5845]  vpanic+0x1e0/0x670
[  503.809848][ T5845]  panic+0xc5/0xd0
[  503.811210][ T5845]  ? __pfx_panic+0x10/0x10
[  503.812773][ T5845]  ? preempt_schedule_thunk+0x16/0x30
[  503.814664][ T5845]  ? preempt_schedule_thunk+0x16/0x30
[  503.816566][ T5845]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  503.818677][ T5845]  check_panic_on_warn+0x89/0xb0
[  503.820450][ T5845]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  503.822538][ T5845]  end_report+0x6f/0x140
[  503.823992][ T5845]  kasan_report+0x128/0x150
[  503.825580][ T5845]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  503.827272][ T5845]  __ethtool_get_link_ksettings+0x5e/0x170
[  503.828806][ T5845]  ib_get_eth_speed+0x180/0x7f0
[  503.830204][ T5845]  ? rxe_query_port+0x7e/0x3d0
[  503.831617][ T5845]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  503.833389][ T5845]  ? do_raw_spin_unlock+0x4d/0x210
[  503.835204][ T5845]  rxe_query_port+0x93/0x3d0
[  503.836885][ T5845]  ib_query_port+0x170/0x830
[  503.838565][ T5845]  smc_ib_port_event_work+0x15a/0x940
[  503.840236][ T5845]  ? process_scheduled_works+0xa0f/0x17a0
[  503.841853][ T5845]  ? process_scheduled_works+0xa0f/0x17a0
[  503.843495][ T5845]  process_scheduled_works+0xaec/0x17a0
[  503.845123][ T5845]  ? __pfx_process_scheduled_works+0x10/0x10
[  503.846823][ T5845]  ? do_raw_spin_lock+0x12b/0x2f0
[  503.848286][ T5845]  ? assign_work+0x3d3/0x440
[  503.849612][ T5845]  worker_thread+0x89f/0xd90
[  503.850949][ T5845]  kthread+0x726/0x8b0
[  503.852114][ T5845]  ? __pfx_worker_thread+0x10/0x10
[  503.853573][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.854930][ T5845]  ? _raw_spin_unlock_irq+0x23/0x50
[  503.856362][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.857724][ T5845]  ret_from_fork+0x51b/0xa40
[  503.858934][ T5845]  ? __pfx_ret_from_fork+0x10/0x10
[  503.860825][ T5845]  ? __switch_to+0xc82/0x1410
[  503.862309][ T5845]  ? __pfx_kthread+0x10/0x10
[  503.863677][ T5845]  ret_from_fork_asm+0x1a/0x30
[  503.865111][ T5845]  </TASK>
[  503.866617][ T5845] Kernel Offset: disabled
[  503.868445][ T5845] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:46:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b7442c RBX=ffffffff8d501ee4 RCX=ffff88810d8e8000 RDX=0000000000000000
RSI=000000000000002a RDI=0000000000000000 RBP=ffffc90005066c70 RSP=ffffc90005066ae0
R8 =ffffc90005066bc0 R9 =ffffc90005066cc0 R10=0000000000000073 R11=0000000000000000
R12=ffffc90005066c00 R13=dffffc0000000000 R14=000000000000772a R15=ffffffff818c8d2b
RIP=ffffffff81c27eb6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e31a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f29361e8400 CR3=0000000111ffc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=74b499055352cf35 00000107a0000001
XMM02=18daa85fece378f1 c7729bf7ab629f59 XMM03=7af103ee17c7f5fc 962e9dffe5edeb6e
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000003404eb RBX=ffffffff8198227d RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dad953d RDI=ffffffff8be73900 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c6336db R9 =1ffff110478c66db R10=dffffc0000000000 R11=ffffed10478c66dc
R12=ffffffff8fcf2170 R13=1ffff1102c155000 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff8b7a2b2f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a991a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f29beb61440 CR3=00000001ba2d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 000000ffffffffff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
