last executing test programs:

1.009017497s ago: executing program 1 (id=1403):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xfff3, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_XOR={0x8, 0x7, 0x948df5a6}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r1, 0xc0189436, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x6, @random="9f44441dc302"}, 0xffffff5d, {0x2, 0x0, @empty}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
unshare(0x22020400)
r2 = socket(0x1e, 0x4, 0x0)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0xad0, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa68, 0x178, 0x178, 0xa68, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast1, 0x0, 0x0, 'wg2\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @loopback, 0xffffffff, 0x0, 'pim6reg\x00', 'syzkaller0\x00', {}, {}, 0x6c, 0x1, 0x43}, 0x0, 0x880, 0x8b0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x202, 0xfffffffc, 0x1ff}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x8, 0x1}, {0x8001, 0x2}, {0xfffffffd, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x3ff, 0x1}, {0x8000, 0x1}, {0x1, 0x1}], [{0x0, 0x401}, {0x1, 0x7}, {0x9, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0xcf6, 0xfe5d}, {0xa30}, {0x0, 0x9}, {0x7, 0x90b2}, {0xce, 0x2}], 0x4, 0x8}, {[{}, {0x4, 0x2}, {0x4, 0x2}, {0xf, 0x2}, {0x2}, {0x7f, 0x3}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x8, 0x3}, {0xffffabc5, 0x2}], [{0xff, 0xffff}, {0x27d8, 0x8}, {0xa, 0x6}, {0x10001, 0x3}, {0x1ff, 0x2}, {0x1, 0x1}, {0x7, 0x87}, {0xcca, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x3}], 0x2, 0x5}, {[{0x6, 0x2}, {0x9, 0x3}, {0x8}, {0x8, 0x3}, {0x80, 0x1}, {0xfff, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0x8}, {0x9, 0x1}], [{0x7, 0xcea}, {0x8, 0x7}, {0x9, 0x9}, {0xb}, {0x3, 0xd9cf}, {0x9, 0xcb5}, {0x1, 0x7}, {0xfffffffd, 0x62d}, {0x1a, 0x5}, {0x5, 0x7}, {0x3, 0x7fff}], 0x3, 0xb}, {[{0x20, 0x2}, {0x2, 0x3}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0xfffffff2}, {0xc8, 0x2}, {0x2, 0x1}, {0x200, 0x2}, {0x10000}, {0x7f}], [{0x8, 0x3}, {0x81, 0x1}, {0x4, 0x5}, {0xd, 0x401}, {0x4, 0xb}, {0x101, 0x6}, {0x2, 0xd}, {0x8, 0x5}, {0x9, 0x81}, {0xffffb445, 0x10000}, {0x7, 0x1}], 0x1, 0x7}, {[{0x8001, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0xf7, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x2}, {0x9, 0x2}, {0x80000001, 0x1}, {0x3, 0x2}, {0x7, 0x3}], [{0x1000, 0x3}, {0x5, 0x9}, {0xf, 0x20000000}, {0x4, 0x2}, {0x7, 0x744}, {0x7, 0x8}, {0x9, 0x2}, {0xe60, 0x3}, {0x85, 0x10000}, {0x4, 0x9}, {0x4, 0xfffffffa}], 0x7, 0xa}, {[{0x2, 0x1}, {0xfffffff7}, {0x7}, {0x3, 0x3}, {0x34, 0x4}, {0x0, 0x3}, {0x5c, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x8, 0x2}, {0xffff8000}], [{0x5, 0x7}, {0x8, 0xa0d}, {0x3, 0xca}, {0xff, 0xd}, {0xff, 0x4}, {0xfffffffd, 0x100}, {0x7, 0x1496}, {0xfff, 0x6}, {0x9, 0x2fee}, {0x2c4a, 0x4}, {0xe, 0x1ff}], 0x6, 0x5}, {[{0x9, 0x2}, {0x5, 0x1}, {0xe567, 0x1}, {0xc, 0x3}, {0x9}, {0x2, 0x1}, {0x8, 0x3}, {0xffff}, {0x97}, {0x880ab95c, 0x3}, {0xf, 0x3}], [{0x7ba4, 0x3}, {0x2, 0x5}, {0x6, 0xda40}, {0x1, 0x1}, {0x7ec6, 0x84c}, {0x8, 0x6}, {0xaa, 0x2}, {0x7, 0x7}, {0x6196, 0xe}, {0x1ff, 0x1}, {0x3400, 0x10001}], 0x1, 0x9}, {[{0x6}, {0x10001}, {0x1ff, 0x2}, {0x400, 0x3}, {0x7bc99eb7, 0x1}, {0x9, 0x1}, {0x1}, {0x1ff, 0x2}, {0x1000, 0x2}, {0x3, 0x2}, {0x6, 0x3}], [{0xfffffffb, 0xb353}, {0x9}, {0xff, 0x8}, {}, {0x2900, 0xc7f}, {0x10001, 0x1}, {0xfff, 0x1}, {0x7, 0x20}, {0xffff3f40, 0x8}, {0x6, 0x2}, {0x80000001, 0x5}], 0x4, 0x4}, {[{0x2, 0x2}, {0x7, 0x3}, {0x10000, 0x1}, {0x9, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x3}], [{0x8, 0x6}, {0x200, 0x200}, {0x4, 0x9}, {0x80000000, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x2be3, 0x80000000}, {0x1, 0x8}, {0xc, 0x3}, {0xfffffffb, 0x6a7}, {0x800, 0x3}], 0x3, 0xa}, {[{0x200, 0x3}, {0x2}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x8e5}, {0xc000000}, {0x8, 0x2}, {0x1, 0x3}, {0x97b, 0x3}, {0x3, 0x1}], [{0x3, 0x6}, {0x0, 0xeeb}, {0x3}, {0x7, 0x3e1}, {0x2, 0x5}, {0x8, 0x10}, {0x7, 0x5}, {0x1, 0xd}, {0x6, 0x6}, {0x0, 0x8}, {0xb, 0xd}], 0x3, 0xa}, {[{0x7ff}, {0x2}, {0x0, 0x2}, {0x81, 0x3}, {0x200, 0x1}, {0x80, 0x3}, {0xa647, 0x2}, {0x9, 0x2}, {0x3ff}, {0x3, 0x2}, {0x3, 0x2}], [{0x9, 0x8}, {0x5, 0x6}, {0x80000001, 0x6}, {0x0, 0x8}, {0xfffffffc, 0xffffffff}, {0x5, 0xdf}, {0xffffffff, 0xffffff9f}, {0x8001, 0x7}, {0x4, 0x7441}, {0x30, 0x8001}, {0x1000, 0x3}], 0xb, 0xb}], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x6}, {0x0, 0x4, 0x1}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb30)
socket$l2tp6(0xa, 0x2, 0x73)
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064010101fb517539dd608a28b13abffb8ef107"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

945.674543ms ago: executing program 1 (id=1404):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000040)) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000040))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0) (async)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x6a, 0x6, 0x68}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48004)

859.829919ms ago: executing program 1 (id=1406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000132c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

857.903664ms ago: executing program 1 (id=1408):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x4}, @restrict={0xc}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/4096, 0x46, 0x1000, 0x0, 0x9, 0x10000}, 0x28)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x82, &(0x7f0000000180)=""/130, 0x41000, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x5, 0x9, 0xb0, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001400)=[r3, 0x1, r4], &(0x7f0000001440)=[{0x2, 0x1, 0xe, 0x6}, {0x3, 0x2, 0x8, 0xb}, {0x3, 0x4, 0x0, 0xa}, {0x4, 0x4, 0x100000a, 0x8}, {0x0, 0x2, 0x1}, {0x1, 0x1, 0x0, 0xb}, {0x2, 0x4, 0x0, 0xb}], 0x10, 0xed0}, 0x94)
close(0x3)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000001980)={&(0x7f0000001580)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000015c0)="6be5a3f0cd361488133c7e98b22c2be7c34a89789a0b778bc3b9dc2b08cb88ce45f3ea958a0f5590d45f807a69e013297bd9a82e4c6bdb53a91543f3fb06bdf32d56e29e33c1f52cbb314e8d213198a8a68feb9165ae73cbdfed738e189015cc762f5c8eac5f3c04b53d8716b5498e7a127252b266bbf6f3c591270bdbcd96cf156441465cd6ed10a25baa4a7620fdd2b5f41470c7fa869c2e8fb109f9d4ea2f573f972629503a3a520a24e1d08f4c18da6efa65cdb97ca25f5475d56424ef044fea36f4e68279d25ff0c6f70de60278020ddec51a", 0xd5}, {&(0x7f00000016c0)="d1b923b1ba47d51aff070be088b9495f31534bbc770f1c08eaab039ad554825a", 0x20}, {&(0x7f0000001700)="b78e86dd2b9c840736ed1d8a3ab4658ba9d9b90c52298325d9c39e797c841844a9040983b390ff861294eaab43b7a5f4f4c56d2d43f42e9eef423b815160565ca245926c8e64c2e20cca5e18fa57910ff7398cb3484c0ae3dd3150f64bba9e3c6f75d3d757a93c046877b6e385bb352e6d07f92cbf21ac0f3e8b1f676658a1986c0692064ade913238f30404ab94ca6054def5ff4a1747", 0x97}, {&(0x7f00000017c0)="93875ba7648936f558458ae0b82213e49d32c8c23629a9e059ff501cbf4ef4e9c51a372d62050c41c21c2cf0fef2e08cb3255969a6aea82318c08e477b67901534995af6d506d9e20587d8514e71af8fcd53df517175c7a736f7a4436825f95cd1d8cd16b3d0fb13a0060d7826882d034b12da8c822ab0a2cc80da4cc142fe2a1bb565e4e81b0fe7c6aeb094d95ccad95eb9ed6e24fdaa5fb580f6461f56ee1ab87d912da7ac4440c9d2a3556a5566a82c9a40f6f5a9097d02e08bf14e3e125f8a0880decb535b6190621f2eeffbb01345d909", 0xd3}], 0x4, &(0x7f0000001900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8e}}], 0x48}, 0x40000)
connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

560.620572ms ago: executing program 1 (id=1414):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}, {0x6, 0x60}]}) (async)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000340)=0x3) (async)
write$ppp(r1, &(0x7f0000000200)="4176adc3a0", 0x5) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = socket(0xa, 0x3, 0x3a)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x1a, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x88}}, 0x4044) (async)
setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async)
recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0xbc3}], 0x1, 0x2141, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, <r7=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async)
getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r9}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x60, 0x0, 0x1d, r8, r9}, {0x9e1c, 0x1, 0x0, 0x4, 0x4, 0xa0, 0xd38, 0x3}, {0x3ff, 0x2, 0x8, 0x4}, 0x9, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x3, 0x3, 0x8001, 0x81, 0xb}}, 0xe8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0) (async)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f00000000c0), 0x4)

560.047919ms ago: executing program 2 (id=1415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000142c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

468.359867ms ago: executing program 2 (id=1417):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000300", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2000c0c0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000180), 0x0}, 0x20)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x40, 0x7, 0x10, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x64, 0x0, 0xd, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}}}}})
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffff000003e400", @ANYRES32=r11, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

350.936465ms ago: executing program 1 (id=1419):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x12022, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0xf9ffff00, 0x0, 0x0}, 0x108)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711266000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
socket(0x11, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)
socket(0x2a, 0x800, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
socket$kcm(0x10, 0x2, 0x0)

350.417371ms ago: executing program 2 (id=1420):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}]}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000640)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd, @exit, @exit, @ringbuf_query]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0/file0\x00'}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0]}, 0x40)
socket(0x10, 0x803, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r7, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10)
close(0x3)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4(r9, 0x0, 0x0, 0x80000)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r10, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

328.054877ms ago: executing program 0 (id=1421):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000800020006000000000002"], 0x80}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001600)={0xa8, 0x60, 0x9, 0x1, 0xc0, 0xaa, 0x5, 0x7, 0xbc, 0x4, 0x4, 0x40, 0x6, 0x4}, 0xe)
recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001580)=""/33, 0x21}, 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000100))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000014c0)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x5, &(0x7f0000001440)=""/74, 0x4a}, 0x0)

325.675228ms ago: executing program 0 (id=1422):
r0 = socket(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x4c}}, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000))

261.009984ms ago: executing program 0 (id=1423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000162c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

209.508391ms ago: executing program 0 (id=1424):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x0)

209.236926ms ago: executing program 2 (id=1425):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000b085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

110.503867ms ago: executing program 0 (id=1426):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@acquire={0x2ac, 0x17, 0x10, 0x70bd25, 0x25dfdbff, {{@in=@local, 0x4d5, 0xff}, @in=@empty, {@in6=@private1, @in=@remote, 0x4e20, 0xd47, 0x4e22, 0x0, 0xa, 0x80, 0x30, 0x29, 0x0, r5}, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e20, 0x0, 0x4e21, 0x7f, 0xa, 0x0, 0x80, 0x6, r6, r7}, {0x9, 0x8000000000000000, 0x80000000, 0xfffffffffffffffb, 0x5, 0x81, 0xf5b, 0x2}, {0xced, 0xb, 0x0, 0x7}, 0xd2b, 0x6e6bbf, 0x2, 0x1, 0x0, 0x1}, 0x1, 0x5, 0x6, 0x70bd2b}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3502, 0x3, 0x3, 0xc, 0x4, 0x9, 0x80000001}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3500, 0x2, 0x1, 0x7, 0x1, 0x400, 0x81}, {{@in=@private=0xa010101, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x3505, 0x3, 0x0, 0xe, 0x2, 0x8000, 0x2}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x3, 0x3, 0x1, 0xc1, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4d5, 0x32}, 0x2, @in=@remote, 0x3505, 0x0, 0x3, 0x4, 0x9, 0x10, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x0, 0x8, 0xfffffffc, 0xfffff801}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0x4014)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000080)=0xfffffffe)

106.80216ms ago: executing program 2 (id=1427):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r2, r1, 0x0, 0x8)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0)
unshare(0x20000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'/28], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r6, &(0x7f0000000a80)="9e74bc995beb2073c51b7ebffdce772ce7b60d758cc3dda54a53c9d337a2efed0fd62ea12d75b2282d79cd7fb1cc6990053696ac3c6fa37e43797cd90b945959006b", 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)="98"}, 0x50)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0xb14, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xae8, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_FW_ACT={0xa68, 0x4, [@m_police={0x9b8, 0xe, 0x0, 0x0, {{0xb}, {0x8b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xe7e1, 0x3, 0x0, 0xb0, 0x7, 0x100, 0x3, 0x4, 0x5, 0x4, 0x4, 0x1ff, 0x8, 0xffff, 0xffffffff, 0x2, 0xe, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x6, 0x37, 0x6, 0x5779, 0x100, 0x8, 0xfffffffc, 0x200, 0x400, 0x98, 0x4, 0x0, 0x5, 0x6, 0x2255, 0x8, 0x6, 0x8, 0xa93, 0x4, 0x575, 0xc, 0x1, 0x8cb1, 0x400, 0x2, 0x6, 0x5, 0x3, 0x8, 0x5, 0x3, 0x4, 0x8000, 0x7, 0x1, 0x9, 0x5ef9a633, 0x2965, 0x7, 0x4, 0x8, 0x2, 0xe, 0x1079, 0x9, 0x9, 0x7, 0x7, 0x401, 0x5ff, 0x4, 0x0, 0xc, 0x1, 0x68, 0x101, 0x8d1, 0x600, 0x3, 0x1, 0x1, 0x3, 0xffff12bd, 0x5, 0x2, 0x5f, 0x6, 0x9bbc, 0x1d, 0x1000, 0x4, 0x3, 0x0, 0x2, 0xb, 0x8d, 0x7, 0x0, 0x7da3, 0xb3b6, 0x2, 0x9, 0xed1d, 0x9, 0x3, 0x7fff, 0xffff7fff, 0x3ff, 0x5, 0x6, 0xab, 0xffff, 0xa79, 0x1, 0x10001, 0x3d, 0x9, 0x2, 0x1, 0xbcea, 0x5, 0x9, 0x7, 0x8, 0x2, 0x9, 0x10001, 0x6, 0x7cf5, 0x4, 0x2, 0x3, 0xc, 0x9, 0x3d5, 0x4ec, 0x9, 0x19, 0xffffffff, 0x7ff, 0x2, 0x0, 0x4, 0x4, 0x6, 0x5, 0x2, 0x400, 0x8, 0xfffffffe, 0x3, 0x6, 0x4, 0x4, 0x8, 0xd71e, 0xdf, 0x1ff, 0x8, 0x5b, 0xf32, 0x6f3d, 0x6, 0x7, 0xc0c6, 0xf, 0x2410, 0x81, 0x10001, 0x40, 0x37e, 0x1, 0x5, 0x8, 0x1, 0x4870, 0x80000001, 0x2, 0x96, 0x6, 0x1000, 0x537, 0x200, 0x2400, 0x1, 0xa9aa, 0xe4, 0x4, 0x5, 0x2, 0x3, 0x3, 0xffff, 0x6, 0x1, 0x0, 0x5, 0x1ff, 0x4, 0xc5, 0x80, 0x5, 0x1, 0x7fc7, 0x9, 0x7fffffff, 0x400, 0x9, 0x8000, 0x0, 0x5, 0x8001, 0x0, 0x3, 0x7f, 0x40, 0xd, 0x5, 0x1, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0xfffffff9, 0xfffffe00, 0x800, 0x4, 0x7, 0x3f, 0x9, 0x80, 0xac, 0x0, 0x7, 0x7ff, 0x0, 0x9, 0x3ff, 0xc, 0x0, 0x2, 0x5, 0x2, 0x8, 0x4, 0x8, 0xff, 0x6, 0x9, 0x9, 0x7, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x3, 0x9, 0x2, {0x1, 0x1, 0x8, 0x9, 0x4, 0x9}, {0x2, 0x0, 0xe6d2, 0x3115, 0x4, 0xfffffffa}, 0x80000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x497, 0xffffffffffffffff, 0x876, 0x2, 0x19c, {0x81, 0x1, 0x8, 0x7ff, 0xb, 0xc3c}, {0x4, 0x2, 0x3, 0x2, 0xc549, 0xffffff7f}, 0x2, 0xffff8001, 0xb6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a2, 0x0, 0x9, 0x8, 0x200, 0x4, 0x1, 0x0, 0x0, 0x4, 0x8000, 0xb0, 0x8, 0x9, 0x1b, 0x4, 0x69, 0xf8, 0x7, 0x1, 0x7, 0x9, 0x9e71, 0x8, 0x81, 0x4, 0x8, 0xfffffffc, 0x400, 0x5, 0x9, 0x8, 0x1ff, 0x800, 0x4, 0x7, 0x3, 0xfe04000, 0x7, 0xffffffbf, 0x1, 0x147, 0x9, 0x7ff, 0x8, 0x3ff, 0x2, 0x2, 0xfffffe01, 0xfffffff8, 0x8, 0x7, 0x22, 0x100, 0x3ff, 0x7, 0x400, 0x0, 0xfffffffb, 0x8, 0xc56, 0x200, 0x4, 0x4, 0x7f, 0x200, 0x9, 0x1, 0xffff8000, 0x0, 0x10001, 0x8000, 0xeec6, 0x20000000, 0x5, 0x100, 0x5, 0x5, 0x282f, 0x0, 0x2, 0x366, 0xc3000, 0xc, 0x7, 0x62c5d1e, 0x6, 0x9, 0x0, 0x9, 0x6, 0xd, 0x3, 0x8001, 0x73, 0x2, 0x2, 0x8, 0x80000001, 0x0, 0x4, 0x4, 0xfffffff8, 0xd4d, 0x6, 0x1, 0xffff, 0x3, 0x0, 0x7, 0x9, 0x10, 0x1, 0x6, 0x95, 0x6, 0x7, 0x7, 0x9, 0x5, 0x84, 0xffff, 0xe, 0x2bec, 0x1, 0x4, 0x4, 0x4, 0xd0, 0x7, 0x0, 0x9, 0x79, 0x7, 0xf3, 0x3, 0x3a53f453, 0x1, 0xffff6acb, 0x6, 0xf, 0x1, 0x2, 0x0, 0x4d9, 0x4, 0x2d7b, 0x401, 0x7fffffff, 0x81bf, 0xfff, 0xd, 0x2cefdd61, 0xe821, 0xe9, 0x3, 0x0, 0x2, 0x8, 0x0, 0xcf9c, 0x2, 0x2, 0x9, 0x2ff, 0x5, 0x80000000, 0x2, 0x66, 0x3, 0x7, 0x4, 0x5, 0x7, 0x1, 0x3, 0x1, 0xfffffffa, 0x200, 0x7f, 0x3ff, 0x47, 0x0, 0x4, 0x7, 0x1ff, 0x72, 0x8, 0x800, 0x6, 0x0, 0x1, 0x1, 0x101, 0xd96, 0xffffffff, 0x6, 0x7, 0x40, 0xe8, 0x3, 0x6, 0x6, 0x5, 0xa7b, 0xfffffffb, 0xfffffff9, 0x7509e3f3, 0x8, 0x7fffffff, 0x5, 0x1, 0x9, 0x4, 0x40, 0x7ff, 0xfffffffd, 0x8, 0x2, 0x18a20, 0x80, 0x800, 0x8, 0x8, 0x1, 0x1000, 0x9, 0x7, 0x0, 0x5, 0x6, 0x7, 0x6, 0x586000, 0x8, 0x7, 0x6, 0x2, 0x400, 0xb, 0x3ff, 0xfffffe3f, 0x3, 0x2, 0x7fffffff, 0x3, 0x10, 0x6, 0x4, 0x7ff, 0x8000, 0x9, 0x8, 0x7fffffff, 0xe500000, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000000}], []]}, {0xd6, 0x6, "cafb3531f09b3657dc5a50f1983dfd596b5acd53a9eff0127a91c6b53552c92ab59d5cecf058f6bda6e510659408a4d2963140c822240c88f75366d7572715115feb4fb9e3c355ee7a4710a018da374881f695645477cb8cbd656d86260887e7f80d03fa61e1281fb6cb4b6c286bc9d7115ee2f4cc6bed0ffa1c083b50bde13ff47cefbaede63f82280ab2514597d7c58c8947b865c49ee138f9f313036ae4fd3b2d34abd0d9d6d6d6ad478f8dcc2cc9bc61da354b9d50eb0fbf777795961671c4183166a31d22bdc76524336f97b1f4e457"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_connmark={0xac, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x7, 0x7c}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x1, 0x3, 0x2, 0x7}, 0x8}}]}, {0x44, 0x6, "65a29dada03f6dbd111e6bbaaf6b291e17f25aa009352b87445cc5ae63e56bfadf5a166bd81f62bdbdaa8b2a586ab0fbb4ce1b0166563d9874084855a60253e4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xe}}]}}]}, 0xb14}, 0x1, 0x0, 0x0, 0x84}, 0x20000800)

425.561µs ago: executing program 0 (id=1428):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000d40)={0x802b}) (rerun: 64)

0s ago: executing program 2 (id=1429):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x4000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x4, 0xfffffffffffffffd, &(0x7f00000000c0)=0xfffffecb)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51710' (ED25519) to the list of known hosts.
syzkaller login: [   57.027644][ T5815] cgroup: Unknown subsys name 'net'
[   57.188828][ T5815] cgroup: Unknown subsys name 'cpuset'
[   57.195903][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.510532][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.691359][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.703876][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.712912][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.716876][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.720456][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.768943][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.782564][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.787242][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.791102][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.794701][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.843023][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.846587][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.849992][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.855801][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.859113][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.997756][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   65.098620][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.101956][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.105029][ T5829] bridge_slave_0: entered allmulticast mode
[   65.107986][ T5829] bridge_slave_0: entered promiscuous mode
[   65.126569][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.128987][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.131617][ T5829] bridge_slave_1: entered allmulticast mode
[   65.135348][ T5829] bridge_slave_1: entered promiscuous mode
[   65.187183][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.226967][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.314993][ T5829] team0: Port device team_slave_0 added
[   65.323936][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   65.331357][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   65.341893][ T5829] team0: Port device team_slave_1 added
[   65.435211][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.438018][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.448467][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.455320][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.458029][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.468127][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.588516][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.591444][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.594921][ T5836] bridge_slave_0: entered allmulticast mode
[   65.598720][ T5836] bridge_slave_0: entered promiscuous mode
[   65.603226][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.606013][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.608883][ T5836] bridge_slave_1: entered allmulticast mode
[   65.613431][ T5836] bridge_slave_1: entered promiscuous mode
[   65.616813][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.619610][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.622670][ T5833] bridge_slave_0: entered allmulticast mode
[   65.626554][ T5833] bridge_slave_0: entered promiscuous mode
[   65.646112][ T5829] hsr_slave_0: entered promiscuous mode
[   65.648626][ T5829] hsr_slave_1: entered promiscuous mode
[   65.678867][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.681746][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.685479][ T5833] bridge_slave_1: entered allmulticast mode
[   65.689260][ T5833] bridge_slave_1: entered promiscuous mode
[   65.711345][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.730462][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.749726][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.756532][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.815674][ T5833] team0: Port device team_slave_0 added
[   65.841578][ T5836] team0: Port device team_slave_0 added
[   65.846816][ T5836] team0: Port device team_slave_1 added
[   65.851267][ T5833] team0: Port device team_slave_1 added
[   65.912007][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.916292][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.926986][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.955981][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.958623][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.969487][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.975077][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.977854][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.989011][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.018859][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.021618][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.032379][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.115157][ T5836] hsr_slave_0: entered promiscuous mode
[   66.118150][ T5836] hsr_slave_1: entered promiscuous mode
[   66.121004][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.125561][ T5836] Cannot create hsr debugfs directory
[   66.186600][ T5833] hsr_slave_0: entered promiscuous mode
[   66.189407][ T5833] hsr_slave_1: entered promiscuous mode
[   66.191918][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.196235][ T5833] Cannot create hsr debugfs directory
[   66.347171][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.357940][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.398689][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.430547][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.565069][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.574591][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.585223][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.592977][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.655718][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.675646][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.687144][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.703211][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.718696][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.769177][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   66.781253][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.784314][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.794411][ T5840] Bluetooth: hci0: command tx timeout
[   66.808587][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.811355][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.862156][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.873526][ T5840] Bluetooth: hci1: command tx timeout
[   66.882532][ T5840] Bluetooth: hci2: command tx timeout
[   66.911045][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   66.922100][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.924982][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.964039][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.966877][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.000644][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.041589][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   67.053213][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.055640][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.073030][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.075434][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.109270][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.184784][ T5829] veth0_vlan: entered promiscuous mode
[   67.190882][ T5829] veth1_vlan: entered promiscuous mode
[   67.241763][ T5829] veth0_macvtap: entered promiscuous mode
[   67.260701][ T5829] veth1_macvtap: entered promiscuous mode
[   67.270623][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.291274][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.308794][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.319973][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.323828][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.326670][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.329406][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.344877][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.368162][ T5836] veth0_vlan: entered promiscuous mode
[   67.406991][ T5836] veth1_vlan: entered promiscuous mode
[   67.451579][ T5833] veth0_vlan: entered promiscuous mode
[   67.469733][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.479145][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.483645][ T5833] veth1_vlan: entered promiscuous mode
[   67.499715][ T5836] veth0_macvtap: entered promiscuous mode
[   67.525643][ T5836] veth1_macvtap: entered promiscuous mode
[   67.530908][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.539566][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.566856][ T5833] veth0_macvtap: entered promiscuous mode
[   67.571899][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.581024][ T5833] veth1_macvtap: entered promiscuous mode
[   67.597984][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.599950][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.621868][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.628727][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.635433][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.638891][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.681048][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.693909][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.704909][ T5895] netlink: 'syz.1.2': attribute type 4 has an invalid length.
[   67.708101][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.713564][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.716970][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.720239][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.725074][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.748501][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.752137][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.756276][ T5895] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.773726][ T5895] nbd: socks must be embedded in a SOCK_ITEM attr
[   67.853558][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.856072][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.901869][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.903588][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.907363][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.907428][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.933606][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'.
[   67.964615][ T5898] Zero length message leads to an empty skb
[   67.975211][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.978237][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.086177][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.200975][ T5919] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   68.328994][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.398906][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'.
[   68.404885][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'.
[   68.415586][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'.
[   68.513797][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.876962][ T5840] Bluetooth: hci0: command tx timeout
[   68.926865][ T5955] netlink: 'syz.2.18': attribute type 5 has an invalid length.
[   68.953697][ T5840] Bluetooth: hci2: command tx timeout
[   68.955918][   T54] Bluetooth: hci1: command tx timeout
[   69.127622][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.143806][ T5969] netlink: 'syz.1.23': attribute type 8 has an invalid length.
[   69.327996][ T5989] tipc: Started in network mode
[   69.330331][ T5989] tipc: Node identity 2, cluster identity 4711
[   69.336963][ T5989] tipc: Node number set to 2
[   70.629358][ T6041] netem: incorrect ge model size
[   70.636729][ T6041] netem: change failed
[   70.802151][ T6056] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   70.840991][ T6054] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   70.846551][ T6054] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.952410][ T5840] Bluetooth: hci0: command tx timeout
[   71.033484][ T5840] Bluetooth: hci2: command tx timeout
[   71.035250][ T5840] Bluetooth: hci1: command tx timeout
[   71.045823][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.052141][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.290267][ T6095] TCP: TCP_TX_DELAY enabled
[   71.313353][ T6091] netlink: 'syz.1.66': attribute type 4 has an invalid length.
[   71.325330][ T6091] netlink: 'syz.1.66': attribute type 4 has an invalid length.
[   71.406600][ T6104] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.479098][ T6112] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   71.742130][ T6132] netlink: 'syz.2.77': attribute type 12 has an invalid length.
[   71.869437][ T6134] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   71.873932][ T6134] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   71.944842][ T6141] bond0: entered promiscuous mode
[   71.946975][ T6141] bond_slave_0: entered promiscuous mode
[   71.949187][ T6141] bond_slave_1: entered promiscuous mode
[   72.004531][ T6145] ip6gretap0: entered promiscuous mode
[   72.076695][ T6148] vlan2: entered allmulticast mode
[   72.270576][ T5837] IPVS: starting estimator thread 0...
[   72.363083][ T6161] IPVS: using max 47 ests per chain, 112800 per kthread
[   72.474786][ T6173] netem: change failed
[   72.595344][    C1] vcan0: j1939_session_tx_dat: 0xffff88810f8f8000: queue data error: -100
[   72.598918][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   72.601980][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   72.605110][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.608413][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.611531][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.614617][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.617732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.620643][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.623883][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.626773][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.629778][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.632819][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.635834][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.638769][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.641802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.644919][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.648028][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.651023][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.653970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.656376][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.659464][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.662588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.665685][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.668675][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.671905][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.674982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.678038][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.681016][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.684230][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.687275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.690350][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.693381][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.696398][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.699355][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.702516][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.705466][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.708479][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.711379][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.714570][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.717488][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.720497][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.723608][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.726666][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.729651][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.732866][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.735862][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.738879][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.741839][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.745046][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.747992][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.751126][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.754221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.757271][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.760242][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.763483][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.766471][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.769566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.772721][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.775789][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.778799][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.781843][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.784961][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.788046][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.790974][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.794114][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.797067][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.800160][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.803256][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.806312][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.809286][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.812460][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.815404][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.818473][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.821424][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.824572][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.827461][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.830557][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.833707][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.836713][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.839655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.842922][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.845863][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.848995][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.852001][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.855151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.858126][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.861185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.864313][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.867369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.870348][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.873569][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.876559][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.879644][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.882802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.885893][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.888885][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.891980][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.895099][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.898305][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.901275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.904519][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.907486][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.910555][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.913828][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.917055][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.920127][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.923388][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.926367][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.929464][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.932555][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.935586][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.938462][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.941465][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.944500][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.947529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.950420][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.953542][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.956504][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.959559][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.962707][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.965749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.968760][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.971898][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.974924][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.977952][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.980864][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.984012][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.986984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.993475][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   72.996520][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.999644][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.002802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.005919][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.008861][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.012724][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.015701][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.018368][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.021208][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.024817][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.027909][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.031106][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.033632][ T5840] Bluetooth: hci0: command tx timeout
[   73.034210][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.039321][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.042477][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.045599][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.048577][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.051726][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.054802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.057908][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.060888][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.064102][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.067085][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.070181][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.073314][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.076391][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.079383][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.082527][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.085509][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.088548][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.091574][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.094743][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.097773][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.100823][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.103873][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.106915][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.109907][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.112630][   T54] Bluetooth: hci2: command tx timeout
[   73.113113][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.113131][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.113198][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.115394][ T5840] Bluetooth: hci1: command tx timeout
[   73.118339][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.129752][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.132918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.136137][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.139173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.142359][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.145370][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.148435][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.151446][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.154705][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.157680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.160751][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.163823][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.166891][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.169900][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.173072][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.176088][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.179179][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.182308][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.185387][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.188367][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.191424][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.194522][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.197635][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.200678][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.203869][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.206878][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.209967][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.213114][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.216172][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.219182][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.222369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.225367][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.228453][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.231439][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.234676][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.237618][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.240768][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.243958][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.247110][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.250202][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.253411][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.256420][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.259537][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.262677][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.265817][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.268678][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.271791][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.274905][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.277967][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.280957][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.284135][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.287117][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.290169][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.293260][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.296318][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   73.299306][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.319610][ T6184] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.428343][ T6205] __nla_validate_parse: 33 callbacks suppressed
[   73.428365][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'.
[   73.437794][ T6207] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   73.440856][ T6207] netlink: 172 bytes leftover after parsing attributes in process `syz.0.101'.
[   73.447816][ T6208] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   73.459742][ T6208] netlink: 172 bytes leftover after parsing attributes in process `syz.0.101'.
[   73.499732][ T6215] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002
[   73.523984][ T6218] netlink: 56 bytes leftover after parsing attributes in process `syz.0.104'.
[   73.524093][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   73.530891][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   73.554829][ T6219] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   73.562449][ T6219] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   73.631276][ T6229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.634109][ T6229] IPv6: NLM_F_CREATE should be set when creating new route
[   73.636341][ T6229] IPv6: NLM_F_CREATE should be set when creating new route
[   73.638466][ T6229] IPv6: NLM_F_CREATE should be set when creating new route
[   73.646056][ T6229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.713189][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.879416][ T6251] Unsupported ieee802154 address type: 0
[   73.883933][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'.
[   73.890152][ T6251] sctp: [Deprecated]: syz.0.113 (pid 6251) Use of int in max_burst socket option.
[   73.890152][ T6251] Use struct sctp_assoc_value instead
[   73.981241][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[   73.986341][ T6258] bridge_slave_1: left allmulticast mode
[   73.991472][ T6258] bridge_slave_1: left promiscuous mode
[   74.000896][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.016478][ T6258] bridge_slave_0: left allmulticast mode
[   74.018233][ T6258] bridge_slave_0: left promiscuous mode
[   74.020101][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.108747][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   74.188317][ T6268] _Z`Ԁ@: entered promiscuous mode
[   74.256991][ T6277] gtp0: entered promiscuous mode
[   74.449502][ T6296] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   74.465778][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.527773][ T6349] batadv_slave_0: entered promiscuous mode
[   75.530936][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.561153][ T6349] batadv_slave_0 (unregistering): left promiscuous mode
[   75.564646][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.689429][ T6368] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[   75.694215][ T6368] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[   75.876598][ T6387] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   75.880755][ T6386] IPVS: stopping backup sync thread 6387 ...
[   76.171238][ T6399] infiniband syz1: set down
[   76.173686][ T6399] infiniband syz1: added syzkaller0
[   76.210655][ T6399] RDS/IB: syz1: added
[   76.215280][ T6399] smc: adding ib device syz1 with port count 1
[   76.220550][ T6399] smc:    ib device syz1 port 1 has pnetid 
[   76.936829][   T27] smc: removing ib device syz1
[   79.035918][ T6399] syz.1.160 (6399) used greatest stack depth: 20104 bytes left
[   79.661949][ T6443] __nla_validate_parse: 19 callbacks suppressed
[   79.661972][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'.
[   79.726388][ T6446] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   79.763864][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   79.853426][ T6455] netlink: 80 bytes leftover after parsing attributes in process `syz.0.173'.
[   79.865224][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   79.892955][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   79.905363][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   79.918697][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   80.038365][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   80.083656][   T10] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   80.087593][   T10] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   80.505028][ T6487] netlink: 'syz.1.185': attribute type 2 has an invalid length.
[   80.639818][ T6493] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   80.706615][ T6499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.188'.
[   80.820619][ T6506] openvswitch: netlink: Duplicate or invalid key (type 0).
[   80.828197][ T6506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.838018][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.842605][ T6499] bond_slave_0: left promiscuous mode
[   80.857223][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.860957][ T6499] bond_slave_1: left promiscuous mode
[   80.866369][ T6499] bond0 (unregistering): Released all slaves
[   80.901464][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'.
[   81.015956][ T6518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.195'.
[   81.023139][ T6512] ipvlan2: entered promiscuous mode
[   81.032058][ T6512] bridge0: port 3(ipvlan2) entered blocking state
[   81.037391][ T6512] bridge0: port 3(ipvlan2) entered disabled state
[   81.040228][ T6512] ipvlan2: entered allmulticast mode
[   81.042658][ T6512] bridge0: entered allmulticast mode
[   81.046634][ T6512] ipvlan2: left allmulticast mode
[   81.049718][ T6512] bridge0: left allmulticast mode
[   81.083787][ T6518] vlan2: entered allmulticast mode
[   81.086013][ T6518] gretap0: entered allmulticast mode
[   81.371790][ T6539] syzkaller0: entered promiscuous mode
[   81.374616][ T6539] syzkaller0: entered allmulticast mode
[   82.454469][ T6570] syz.1.214: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.460157][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.1.214 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   82.460176][ T6570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.460185][ T6570] Call Trace:
[   82.460192][ T6570]  <TASK>
[   82.460200][ T6570]  dump_stack_lvl+0x189/0x250
[   82.460227][ T6570]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.460243][ T6570]  ? __pfx__printk+0x10/0x10
[   82.460262][ T6570]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.460282][ T6570]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.460301][ T6570]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   82.460321][ T6570]  warn_alloc+0x214/0x310
[   82.460358][ T6570]  ? __pfx_warn_alloc+0x10/0x10
[   82.460383][ T6570]  ? __get_vm_area_node+0x28f/0x300
[   82.460401][ T6570]  ? packet_set_ring+0x6f4/0x2380
[   82.460425][ T6570]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   82.460467][ T6570]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.460486][ T6570]  ? alloc_pages_mpol+0x3cd/0x4a0
[   82.460506][ T6570]  ? packet_set_ring+0x6f4/0x2380
[   82.460524][ T6570]  vzalloc_noprof+0xb2/0xf0
[   82.460541][ T6570]  ? packet_set_ring+0x6f4/0x2380
[   82.460560][ T6570]  packet_set_ring+0x6f4/0x2380
[   82.460595][ T6570]  ? __pfx_packet_set_ring+0x10/0x10
[   82.460628][ T6570]  ? _copy_from_user+0x94/0xb0
[   82.460650][ T6570]  packet_setsockopt+0xc5a/0x12c0
[   82.460671][ T6570]  ? __pfx_packet_setsockopt+0x10/0x10
[   82.460685][ T6570]  ? futex_wait+0x285/0x360
[   82.460699][ T6570]  ? __pfx_futex_wait+0x10/0x10
[   82.460716][ T6570]  ? aa_sk_perm+0x81e/0x950
[   82.460768][ T6570]  ? __pfx_aa_sk_perm+0x10/0x10
[   82.460784][ T6570]  ? __lock_acquire+0xab9/0xd20
[   82.460803][ T6570]  ? aa_sock_opt_perm+0x74/0x110
[   82.460826][ T6570]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   82.460847][ T6570]  ? __pfx_packet_setsockopt+0x10/0x10
[   82.460866][ T6570]  do_sock_setsockopt+0x25a/0x3e0
[   82.460888][ T6570]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   82.460908][ T6570]  ? __fget_files+0x2a/0x420
[   82.460934][ T6570]  __x64_sys_setsockopt+0x18b/0x220
[   82.460956][ T6570]  do_syscall_64+0xfa/0x3b0
[   82.460971][ T6570]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.460992][ T6570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.461007][ T6570]  ? exc_page_fault+0x9f/0xf0
[   82.461028][ T6570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.461041][ T6570] RIP: 0033:0x7faa57b8e929
[   82.461056][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.461067][ T6570] RSP: 002b:00007faa589aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   82.461082][ T6570] RAX: ffffffffffffffda RBX: 00007faa57db5fa0 RCX: 00007faa57b8e929
[   82.461092][ T6570] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004
[   82.461100][ T6570] RBP: 00007faa57c10b39 R08: 000000000000001c R09: 0000000000000000
[   82.461108][ T6570] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[   82.461116][ T6570] R13: 0000000000000000 R14: 00007faa57db5fa0 R15: 00007ffda25825a8
[   82.461138][ T6570]  </TASK>
[   82.461144][ T6570] Mem-Info:
[   82.588081][ T6570] active_anon:5233 inactive_anon:0 isolated_anon:0
[   82.588081][ T6570]  active_file:1059 inactive_file:38208 isolated_file:0
[   82.588081][ T6570]  unevictable:1768 dirty:1526 writeback:0
[   82.588081][ T6570]  slab_reclaimable:9330 slab_unreclaimable:52646
[   82.588081][ T6570]  mapped:18051 shmem:2447 pagetables:867
[   82.588081][ T6570]  sec_pagetables:0 bounce:0
[   82.588081][ T6570]  kernel_misc_reclaimable:0
[   82.588081][ T6570]  free:301408 free_pcp:21741 free_cma:0
[   82.602769][ T6570] Node 0 active_anon:13020kB inactive_anon:0kB active_file:2748kB inactive_file:145284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35612kB dirty:4404kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7836kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.613826][ T6570] Node 1 active_anon:7912kB inactive_anon:0kB active_file:1488kB inactive_file:7548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36592kB dirty:1700kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3560kB pagetables:1460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.626470][ T6570] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.638645][ T6570] lowmem_reserve[]: 0 812 812 812 812
[   82.640893][ T6570] Node 0 DMA32 free:269156kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13020kB inactive_anon:0kB active_file:2748kB inactive_file:145284kB unevictable:3536kB writepending:4404kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:38756kB local_pcp:19548kB free_cma:0kB
[   82.654043][ T6570] lowmem_reserve[]: 0 0 0 0 0
[   82.655818][ T6570] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.667325][ T6570] lowmem_reserve[]: 0 0 854 854 854
[   82.669456][ T6570] Node 1 Normal free:462500kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7844kB inactive_anon:0kB active_file:1488kB inactive_file:7548kB unevictable:3536kB writepending:1700kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48540kB local_pcp:21476kB free_cma:0kB
[   82.682700][ T6570] lowmem_reserve[]: 0 0 0 0 0
[   82.684619][ T6570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.690396][ T6570] Node 0 DMA32: 437*4kB (ME) 168*8kB (UME) 113*16kB (M) 86*32kB (UM) 58*64kB (UME) 34*128kB (UME) 10*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 1*2048kB (M) 59*4096kB (UM) = 269156kB
[   82.698050][ T6570] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   82.704589][ T6570] Node 1 Normal: 415*4kB (UME) 121*8kB (M) 190*16kB (UME) 168*32kB (UME) 20*64kB (UE) 9*128kB (UME) 8*256kB (ME) 3*512kB (ME) 5*1024kB (UM) 5*2048kB (UM) 105*4096kB (M) = 462500kB
[   82.711541][ T6570] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.719744][ T6570] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.723688][ T6570] 41714 total pagecache pages
[   82.725506][ T6570] 0 pages in swap cache
[   82.727110][ T6570] Free swap  = 124996kB
[   82.728735][ T6570] Total swap = 124996kB
[   82.730450][ T6570] 786301 pages RAM
[   82.731930][ T6570] 0 pages HighMem/MovableOnly
[   82.739258][ T6570] 241085 pages reserved
[   82.741073][ T6570] 0 pages cma reserved
[   82.901253][ T6596] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   82.904550][ T6596] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   82.913841][ T6595] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   83.110621][ T6617] netlink: 'syz.0.227': attribute type 9 has an invalid length.
[   83.116093][ T6620] SET target dimension over the limit!
[   83.120710][ T6617] netlink: 'syz.0.227': attribute type 6 has an invalid length.
[   83.232120][ T6634] !: renamed from dummy0 (while UP)
[   83.659038][ T6722] netlink: 'syz.0.239': attribute type 10 has an invalid length.
[   83.863190][ T6680] team0 (unregistering): Port device team_slave_0 removed
[   83.870246][ T6680] team0 (unregistering): Port device team_slave_1 removed
[   83.905264][ T6736] sit1: entered promiscuous mode
[   84.028336][ T6747] netlink: 'syz.0.249': attribute type 11 has an invalid length.
[   84.035628][ T6747] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[   84.175301][   T33] audit: type=1800 audit(1752405814.123:2): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=457 res=0 errno=0
[   84.195159][   T33] audit: type=1804 audit(1752405814.143:3): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.254" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=457 res=1 errno=0
[   84.392048][ T6776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   84.440202][ T6788] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   84.524804][ T6796] x_tables: ip6_tables: mh match: only valid for protocol 135
[   84.527602][ T6797] x_tables: ip6_tables: mh match: only valid for protocol 135
[   85.330842][ T6809] __nla_validate_parse: 61 callbacks suppressed
[   85.330858][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'.
[   85.566050][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'.
[   85.808877][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'.
[   85.811654][ T6842] netlink: 'syz.2.283': attribute type 4 has an invalid length.
[   85.911811][ T6850] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   85.980006][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.288'.
[   86.047163][ T6859] ieee802154 phy0 wpan0: encryption failed: -90
[   86.394251][    T9] cfg80211: failed to load regulatory.db
[   86.905373][ T6897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.303'.
[   86.938941][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.008124][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.031368][ T6910] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   87.034683][ T6910] netlink: 244 bytes leftover after parsing attributes in process `syz.1.305'.
[   87.113654][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.207293][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.241105][ T6976] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[   88.245482][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.328'.
[   88.248486][ T6976] dummy0: entered promiscuous mode
[   88.250076][ T6976] dummy0: entered allmulticast mode
[   88.255836][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   88.259663][ T6976] bridge0: port 3(dummy0) entered blocking state
[   88.264063][ T6976] bridge0: port 3(dummy0) entered disabled state
[   88.269448][ T6976] bridge0: port 3(dummy0) entered blocking state
[   88.272493][ T6976] bridge0: port 3(dummy0) entered forwarding state
[   88.635594][ T7000] netlink: 'syz.1.334': attribute type 4 has an invalid length.
[   88.683400][ T7009] net veth1_virt_wifi : renamed from virt_wifi0
[   88.968894][ T7022] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.342'.
[   89.047744][ T7026] dvmrp1: tun_chr_ioctl cmd 1074025677
[   89.050444][ T7026] dvmrp1: linktype set to 805
[   89.256317][ T7047] dvmrp8: entered allmulticast mode
[   89.356449][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   89.362724][ T7059] netlink: 'syz.2.352': attribute type 7 has an invalid length.
[   90.060009][ T7110] netlink: 'syz.2.361': attribute type 3 has an invalid length.
[   90.870164][ T7163] __nla_validate_parse: 1 callbacks suppressed
[   90.870181][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   90.878175][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   90.884250][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   90.889287][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   90.908084][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   90.911554][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   91.030788][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'.
[   91.050509][ T7169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.092170][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   91.107180][ T7171] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   91.109493][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.185637][ T7186] bridge_slave_0: left promiscuous mode
[   91.188056][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.200108][ T7186] bridge_slave_1: left allmulticast mode
[   91.214470][ T7186] bridge_slave_1: left promiscuous mode
[   91.217349][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.229349][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.235905][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.254995][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[   91.259703][ T7186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.264289][ T7186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'.
[   91.638761][ T7216] Bluetooth: MGMT ver 1.23
[   91.843447][ T7234] Illegal XDP return value 16128 on prog  (id 95) dev syz_tun, expect packet loss!
[   91.867783][ T7234] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   92.099530][ T7248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.136459][ T7248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   92.350686][ T7256] netlink: 'syz.0.395': attribute type 23 has an invalid length.
[   92.827604][ T7289] raw_sendmsg: syz.0.405 forgot to set AF_INET. Fix it!
[   93.377909][ T7335] gretap1: entered promiscuous mode
[   93.724010][ T7356] macsec0: entered promiscuous mode
[   93.725953][ T7356] macsec0: entered allmulticast mode
[   93.885132][ T7361] tipc: Can't bind to reserved service type 2
[   94.249801][ T7375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.448390][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.543214][ T7398] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   94.544574][ T5880] hid-generic 0005:04F3:8002.0002: collection stack underflow
[   94.548207][ T5880] hid-generic 0005:04F3:8002.0002: item 0 0 0 12 parsing failed
[   94.551137][ T5880] hid-generic 0005:04F3:8002.0002: probe with driver hid-generic failed with error -22
[   94.590853][ T7401] netlink: 'syz.0.434': attribute type 25 has an invalid length.
[   94.767300][ T7410] netlink: 'syz.0.438': attribute type 1 has an invalid length.
[   94.814155][ T7412] netlink: 'syz.0.439': attribute type 1 has an invalid length.
[   94.906654][ T7417] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   94.998720][ T7422] netlink: 'syz.0.443': attribute type 4 has an invalid length.
[   95.006056][ T7422] netlink: 'syz.0.443': attribute type 4 has an invalid length.
[   95.298787][ T7449] netlink: 'syz.1.453': attribute type 4 has an invalid length.
[   95.489104][ T7468] netlink: 'syz.1.461': attribute type 21 has an invalid length.
[   95.489222][ T7469] netlink: 'syz.1.461': attribute type 21 has an invalid length.
[   95.662590][ T7476] xt_CT: No such helper "snmp"
[   95.803335][ T7493] IPv6: sit2: Disabled Multicast RS
[   95.806060][ T7493] sit2: entered allmulticast mode
[   95.898483][ T7509] syzkaller0: entered promiscuous mode
[   95.900167][ T7509] syzkaller0: entered allmulticast mode
[   95.919464][ T7515] __nla_validate_parse: 28 callbacks suppressed
[   95.919558][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[   95.978065][ T7517] delete_channel: no stack
[   97.358007][ T7534] xt_l2tp: missing protocol rule (udp|l2tpip)
[   97.380806][ T7539] validate_nla: 4 callbacks suppressed
[   97.380848][ T7539] netlink: 'syz.1.487': attribute type 7 has an invalid length.
[   97.390914][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.487'.
[   97.483145][ T7552] bridge0: entered promiscuous mode
[   97.549095][ T7551] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[   97.568753][ T7551] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[   97.638379][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'.
[   97.642718][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'.
[   97.850172][ T7576] xt_CT: No such helper "snmp"
[   97.909870][ T7579] ip_vti0: Master is either lo or non-ether device
[   97.980141][ T7585] netlink: 'syz.0.503': attribute type 62 has an invalid length.
[   98.097271][ T7596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.298586][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'.
[   98.307146][ T7607] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[   98.312105][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.510'.
[   98.325162][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'.
[   98.336068][ T7607] xfrm1: entered promiscuous mode
[   98.338293][ T7607] xfrm1: entered allmulticast mode
[   98.998803][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[   99.138579][ T7637] netlink: 72 bytes leftover after parsing attributes in process `syz.0.520'.
[   99.448516][ T7651] netlink: 'syz.0.523': attribute type 16 has an invalid length.
[   99.449840][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[   99.450980][ T7651] netlink: 'syz.0.523': attribute type 17 has an invalid length.
[   99.508919][ T7651] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.523413][ T7651] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.589092][ T5849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   99.596471][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   99.743955][ T7661] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   99.757158][ T7661] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   99.953944][ T7672] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[  100.070156][ T7673] bond2: (slave gretap1): making interface the new active one
[  100.083129][ T7673] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  100.279032][ T7689] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.295151][ T7689] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.297468][ T7689] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.304066][ T7689] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  100.337134][ T7693] macvlan2: entered promiscuous mode
[  100.339084][ T7693] macvlan2: entered allmulticast mode
[  100.340922][ T7693] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  100.389541][ T7689] ip6gretap0: entered promiscuous mode
[  100.478267][ T7708] netlink: 'syz.2.539': attribute type 24 has an invalid length.
[  100.553761][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.600039][ T7726] Cannot find del_set index 1 as target
[  100.635168][ T5849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.638047][ T5849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.678213][ T7730] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[  101.321800][ T7803] erspan0: entered promiscuous mode
[  101.325409][ T7803] batman_adv: batadv0: Adding interface: macvlan2
[  101.327740][ T7803] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.336312][ T7803] batman_adv: batadv0: Interface activated: macvlan2
[  101.365577][ T7802] __nla_validate_parse: 6 callbacks suppressed
[  101.365591][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[  101.512556][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.522819][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.533739][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.618610][ T7876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.622342][ T7876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.625979][ T7876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.629421][ T7876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.678204][ T7876] batman_adv: batadv0: Interface deactivated: macvlan2
[  102.870845][ T7892] openvswitch: netlink: EtherType 10 is less than min 600
[  103.084442][ T7898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'.
[  103.098281][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[  103.217614][ T7913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.603'.
[  103.323905][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[  104.083813][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.154734][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.184461][ T7946] netlink: 68 bytes leftover after parsing attributes in process `syz.2.610'.
[  104.228074][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.259223][ T7953] Cannot find del_set index 2 as target
[  104.270006][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'.
[  104.270046][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'.
[  104.281358][ T7953] syzkaller1: entered promiscuous mode
[  104.284083][ T7953] syzkaller1: entered allmulticast mode
[  104.567481][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[  104.646898][ T7981] syzkaller1: entered promiscuous mode
[  104.649037][ T7981] syzkaller1: entered allmulticast mode
[  104.738411][ T7991] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004
[  104.811680][ T7995] ipt_REJECT: TCP_RESET invalid for non-tcp
[  104.822605][ T7993] syzkaller1: entered promiscuous mode
[  104.824839][ T7993] syzkaller1: entered allmulticast mode
[  104.830054][ T7993] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  104.872741][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  105.020771][ T8008] validate_nla: 3 callbacks suppressed
[  105.020787][ T8008] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[  105.043879][ T8008] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.062359][ T8008] veth3: entered promiscuous mode
[  105.067386][ T8008] bond3: (slave veth3): Enslaving as an active interface with a down link
[  105.072859][ T8008] erspan0: entered allmulticast mode
[  105.081055][ T8008] bond3: (slave erspan0): making interface the new active one
[  105.085237][ T8008] erspan0: entered promiscuous mode
[  105.088246][ T8008] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  105.092561][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'.
[  105.488370][ T8036] netlink: 'syz.0.640': attribute type 39 has an invalid length.
[  105.799273][ T8055] openvswitch: netlink: IP tunnel TTL not specified.
[  105.803172][ T8055] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  105.806008][ T8055] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  105.849650][ T8060] ip6tnl1: entered promiscuous mode
[  106.177447][ T8081] trusted_key: syz.0.655 sent an empty control message without MSG_MORE.
[  106.340509][ T8099] openvswitch: netlink: Key 6 has unexpected len 15 expected 2
[  106.399271][ T8103] __nla_validate_parse: 9 callbacks suppressed
[  106.399282][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'.
[  106.541212][ T8114] netlink: 56 bytes leftover after parsing attributes in process `syz.1.667'.
[  106.592106][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'.
[  106.614196][ T8116] macvtap1: entered promiscuous mode
[  106.616917][ T8116] team0: entered promiscuous mode
[  106.619214][ T8116] team_slave_0: entered promiscuous mode
[  106.623306][ T8116] team_slave_1: entered promiscuous mode
[  106.625668][ T8116] macvtap1: entered allmulticast mode
[  106.627926][ T8116] team0: entered allmulticast mode
[  106.630058][ T8116] team_slave_0: entered allmulticast mode
[  106.638232][ T8116] team_slave_1: entered allmulticast mode
[  106.641124][ T8116] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  106.649779][ T8119] team0: left allmulticast mode
[  106.651721][ T8119] team_slave_0: left allmulticast mode
[  106.657149][ T8119] team_slave_1: left allmulticast mode
[  106.659300][ T8119] team0: left promiscuous mode
[  106.660890][ T8119] team_slave_0: left promiscuous mode
[  106.663471][ T8119] team_slave_1: left promiscuous mode
[  106.667387][ T8118] unknown channel width for channel at 909000KHz?
[  106.742698][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'.
[  106.745667][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'.
[  106.776432][ T8130] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  106.799405][ T8130] bond2: (slave gretap1): making interface the new active one
[  106.802007][ T8130] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  106.931148][ T8142] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  106.948686][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  107.088851][ T8150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  107.100257][ T8149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  107.161477][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'.
[  107.234129][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'.
[  107.515038][ T8182] netlink: 'syz.2.692': attribute type 1 has an invalid length.
[  108.108421][ T8222] netlink: 'syz.1.705': attribute type 10 has an invalid length.
[  108.121567][ T8222] bridge0: port 4(team0) entered blocking state
[  108.131689][ T8222] bridge0: port 4(team0) entered disabled state
[  108.139014][ T8222] team0: entered allmulticast mode
[  108.141060][ T8222] team_slave_0: entered allmulticast mode
[  108.160621][ T8222] team_slave_1: entered allmulticast mode
[  108.164625][ T8222] team0: entered promiscuous mode
[  108.166498][ T8222] team_slave_0: entered promiscuous mode
[  108.168343][ T8222] team_slave_1: entered promiscuous mode
[  108.170640][ T8222] bridge0: port 4(team0) entered blocking state
[  108.172842][ T8222] bridge0: port 4(team0) entered forwarding state
[  108.209675][ T8233] sctp: [Deprecated]: syz.1.708 (pid 8233) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.209675][ T8233] Use struct sctp_sack_info instead
[  108.525791][ T8262] netlink: 'syz.1.717': attribute type 39 has an invalid length.
[  108.704943][ T8271] erspan0: left allmulticast mode
[  108.931073][ T8271] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.935075][ T8271] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.938614][ T8271] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.942067][ T8271] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.970770][ T8271] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  109.015659][ T8271] xfrm1: left promiscuous mode
[  109.017589][ T8271] xfrm1: left allmulticast mode
[  109.040139][ T8271] veth3: left promiscuous mode
[  109.044781][ T8271] ip6tnl1: left promiscuous mode
[  109.217332][ T8294] batadv_slave_1: entered promiscuous mode
[  109.221006][ T8294] batadv_slave_1: left promiscuous mode
[  109.228435][ T8295] syzkaller1: entered promiscuous mode
[  109.230711][ T8295] syzkaller1: entered allmulticast mode
[  109.288387][ T8295] xt_ecn: cannot match TCP bits for non-tcp packets
[  109.535764][ T8315] netlink: 'syz.2.737': attribute type 13 has an invalid length.
[  109.538319][ T8315] netlink: 'syz.2.737': attribute type 17 has an invalid length.
[  109.558421][ T8315] erspan0: left promiscuous mode
[  109.594522][ T8315] ip6gretap0: left promiscuous mode
[  109.607317][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.612016][ T8315] 8021q: adding VLAN 0 to HW filter on device team0
[  109.620881][ T8315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.629297][ T8315] syz.2.737 (8315) used greatest stack depth: 19736 bytes left
[  109.827805][ T8328] netlink: 'syz.2.741': attribute type 4 has an invalid length.
[  109.835653][ T8328] : renamed from bond0 (while UP)
[  109.870075][ T8330] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[  110.229844][ T8353] IPVS: persistence engine module ip_vs_pe_ not found
[  110.268925][ T8362] netlink: 'syz.0.751': attribute type 6 has an invalid length.
[  110.277674][ T8360] nbd: couldn't find device at index 536870912
[  110.477693][ T8382] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  110.512160][ T8383] tipc: New replicast peer: 255.255.255.255
[  110.514864][ T8383] tipc: Enabled bearer <udp:syz2>, priority 10
[  110.519332][ T8379] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  111.411717][ T8396] __nla_validate_parse: 13 callbacks suppressed
[  111.411732][ T8396] netlink: 27 bytes leftover after parsing attributes in process `syz.2.764'.
[  111.419208][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  111.425145][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  111.601056][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'.
[  111.606670][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'.
[  111.657714][ T8413] netlink: 'syz.0.768': attribute type 12 has an invalid length.
[  111.714739][ T8418] tun0: tun_chr_ioctl cmd 2147767520
[  112.406085][ T8421] netlink: 'syz.0.773': attribute type 64 has an invalid length.
[  112.410308][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'.
[  112.536729][ T8422] netlink: 'syz.0.773': attribute type 1 has an invalid length.
[  112.540008][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'.
[  112.697328][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'.
[  112.757065][ T8437] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  112.861810][ T8444] Cannot find add_set index 0 as target
[  112.899193][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  112.902429][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  113.165079][ T8465] tipc: Started in network mode
[  113.166737][ T8465] tipc: Node identity cab40e5d03c7, cluster identity 4711
[  113.169585][ T8465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.441647][ T8472] tipc: Started in network mode
[  113.445231][ T8472] tipc: Node identity 000000000000000000007e8fdf030001, cluster identity 4711
[  113.448121][ T8472] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  113.671493][ T8481] xt_CT: No such helper "syz0"
[  113.956999][ T8492] xt_SECMARK: invalid mode: 0
[  113.986993][ T8464] tipc: Disabling bearer <eth:syzkaller0>
[  114.057043][ T8496] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  114.059888][ T8497] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  114.113063][ T8503] ip6gre2: entered promiscuous mode
[  114.394529][ T8517] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  114.397309][ T5879] IPVS: starting estimator thread 0...
[  114.408110][ T8522] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[  114.420742][ T8522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.493358][ T8523] IPVS: using max 63 ests per chain, 151200 per kthread
[  115.185399][ T8582] SET target dimension over the limit!
[  115.532746][ T8589] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  116.025687][ T8608] sctp: [Deprecated]: syz.1.830 (pid 8608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.025687][ T8608] Use struct sctp_sack_info instead
[  116.043512][ T8615] netlink: 'syz.0.832': attribute type 1 has an invalid length.
[  116.380109][ T8629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.417460][ T8648] __nla_validate_parse: 16 callbacks suppressed
[  116.417494][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'.
[  116.460414][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[  116.494114][ T8650] syz_tun: entered promiscuous mode
[  116.500323][ T8650] syz_tun: left promiscuous mode
[  116.519346][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[  116.538006][ T8657] syz_tun: entered promiscuous mode
[  116.547292][ T8657] syz_tun: left promiscuous mode
[  116.608616][ T8662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.845'.
[  116.771566][ T8675] netlink: 148 bytes leftover after parsing attributes in process `syz.2.851'.
[  116.790254][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'.
[  116.800414][ T8672] netlink: 'syz.0.850': attribute type 10 has an invalid length.
[  117.087715][ T8709] ieee802154 phy0 wpan0: encryption failed: -22
[  117.120737][ T8710] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.164989][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'.
[  117.167621][ T8713] openvswitch: netlink: Missing key (keys=40, expected=80)
[  117.333632][ T8734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.866'.
[  117.343210][ T8735] netlink: 'syz.0.867': attribute type 1 has an invalid length.
[  117.346227][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'.
[  117.470562][ T8743] sctp: [Deprecated]: syz.0.869 (pid 8743) Use of int in max_burst socket option.
[  117.470562][ T8743] Use struct sctp_assoc_value instead
[  117.592851][ T8759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.921998][ T8792] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.882'.
[  118.378909][ T8796] netlink: 'syz.2.884': attribute type 27 has an invalid length.
[  118.453937][ T8802] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  118.806469][ T8821] netlink: 'syz.0.893': attribute type 4 has an invalid length.
[  119.676477][ T8855] netlink: 'syz.2.902': attribute type 6 has an invalid length.
[  119.811692][ T8864] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  120.087224][ T8880] syzkaller0: entered promiscuous mode
[  120.089445][ T8880] syzkaller0: entered allmulticast mode
[  120.126375][ T8884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.129767][ T8884] syzkaller0: entered promiscuous mode
[  120.131560][ T8884] syzkaller0: entered allmulticast mode
[  120.175664][ T8882] tipc: Resetting bearer <eth:syzkaller0>
[  120.200997][ T8882] tipc: Disabling bearer <eth:syzkaller0>
[  120.297683][ T8888] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  121.254019][ T8939] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.320678][ T8944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  121.442111][ T8951] __nla_validate_parse: 17 callbacks suppressed
[  121.442132][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'.
[  121.566957][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.943'.
[  121.847046][ T8977] sctp: [Deprecated]: syz.0.948 (pid 8977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.847046][ T8977] Use struct sctp_sack_info instead
[  122.009407][ T5840] Bluetooth: hci2: link tx timeout
[  122.011736][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.016742][   T54] Bluetooth: hci2: link tx timeout
[  122.018942][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.022155][ T8986] netlink: 'syz.0.952': attribute type 6 has an invalid length.
[  122.179245][ T8996] netlink: 'syz.0.957': attribute type 29 has an invalid length.
[  122.193690][ T8996] netlink: 'syz.0.957': attribute type 29 has an invalid length.
[  122.206812][ T8996] netlink: 588 bytes leftover after parsing attributes in process `syz.0.957'.
[  123.696649][ T9031] syzkaller1: entered promiscuous mode
[  123.698695][ T9031] syzkaller1: entered allmulticast mode
[  123.890884][ T9042] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[  123.902301][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.971'.
[  124.113415][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  124.275149][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'.
[  124.717495][ T9077] syzkaller1: entered promiscuous mode
[  124.720039][ T9077] syzkaller1: entered allmulticast mode
[  124.741641][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  124.745834][ T9079] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  124.967467][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'.
[  124.970372][ T9092] netlink: 'syz.0.986': attribute type 21 has an invalid length.
[  125.173409][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'.
[  125.212639][ T9107] netlink: 'syz.0.991': attribute type 16 has an invalid length.
[  125.215244][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'.
[  125.289942][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'.
[  125.411387][   T55] block nbd0: Receive control failed (result -32)
[  125.674691][ T9134] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.909852][ T9148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.121933][ T9170] vlan2: entered allmulticast mode
[  126.124137][ T9170] erspan0: entered allmulticast mode
[  126.247661][   T33] audit: type=1107 audit(1752405856.203:4): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6'
[  126.262314][   T33] audit: type=1107 audit(1752405856.213:5): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6'
[  126.492495][ T9206] netlink: 'syz.1.1022': attribute type 4 has an invalid length.
[  126.506122][ T9206] xt_time: invalid argument - start or stop time greater than 23:59:59
[  126.572775][ T9226] bridge0: entered allmulticast mode
[  126.589013][ T9226] pim6reg: entered allmulticast mode
[  126.592428][ T9226] __nla_validate_parse: 7 callbacks suppressed
[  126.592436][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'.
[  126.754624][ T9246] ipt_REJECT: TCP_RESET invalid for non-tcp
[  126.781863][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'.
[  127.086610][    T9] IPVS: starting estimator thread 0...
[  127.121804][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1042'.
[  127.172539][ T9271] IPVS: using max 62 ests per chain, 148800 per kthread
[  127.308859][ T9292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.311776][ T9293] syzkaller0: entered promiscuous mode
[  127.315362][ T9293] syzkaller0: entered allmulticast mode
[  127.328132][ T9293] tipc: Resetting bearer <eth:syzkaller0>
[  127.435373][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'.
[  127.451880][ T9307] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.473872][ T9307] macvlan2: entered promiscuous mode
[  127.477894][ T9307] macvlan2: entered allmulticast mode
[  127.480289][ T9307] bond3: (slave macvlan2): Opening slave failed
[  127.629445][ T9322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  127.635217][ T9322] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  127.671731][ T9323] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  127.896135][ T9339] netlink: 'syz.0.1065': attribute type 1 has an invalid length.
[  127.927942][ T9339] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  127.931972][ T9339] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  127.978465][ T9339] gretap2: entered promiscuous mode
[  127.983712][ T9339] bond4: (slave gretap2): making interface the new active one
[  127.986468][ T9339] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  128.000805][ T9339] macvlan0: entered promiscuous mode
[  128.003568][ T9339] macvlan0: entered allmulticast mode
[  128.005720][ T9339] bond4: entered promiscuous mode
[  128.007864][ T9339] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  128.011861][ T9339] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  128.016400][ T9339] bond4: left promiscuous mode
[  128.138052][ T9291] tipc: Resetting bearer <eth:syzkaller0>
[  128.154295][ T9291] tipc: Disabling bearer <eth:syzkaller0>
[  128.268794][ T9352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1069'.
[  128.270265][ T9350] netlink: 'syz.2.1068': attribute type 2 has an invalid length.
[  128.274030][ T9352] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1069'.
[  128.280913][ T9352] netlink: 'syz.0.1069': attribute type 6 has an invalid length.
[  128.284490][ T9352] netlink: 'syz.0.1069': attribute type 5 has an invalid length.
[  128.287802][ T9352] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1069'.
[  128.373583][ T9361] syzkaller1: entered promiscuous mode
[  128.375790][ T9361] syzkaller1: entered allmulticast mode
[  128.496593][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'.
[  128.590385][ T9378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1077'.
[  128.821132][ T9393] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  129.047365][ T9405] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1092'.
[  129.066404][ T9405] netlink: 'syz.0.1092': attribute type 1 has an invalid length.
[  129.527834][ T9449] Cannot find set identified by id 1 to match
[  129.805466][ T9463] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, failed to enable media
[  130.018192][ T9472] pim6reg: entered allmulticast mode
[  130.021594][ T9472] pim6reg: left allmulticast mode
[  130.308108][ T9495] syzkaller1: entered allmulticast mode
[  130.327720][ T9495] xt_CT: No such helper "syz0"
[  130.633476][ T9524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.521563][ T9548] pim6reg: entered allmulticast mode
[  131.528493][ T9548] pim6reg: left allmulticast mode
[  131.657597][ T9549] __nla_validate_parse: 7 callbacks suppressed
[  131.657609][ T9549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1138'.
[  131.702535][ T9561] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  131.868955][ T9569] tipc: Enabling of bearer <ib:rose0> rejected, failed to enable media
[  132.185155][ T9577] sctp: [Deprecated]: syz.1.1149 (pid 9577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.185155][ T9577] Use struct sctp_sack_info instead
[  132.191975][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'.
[  132.398490][ T9586] ip6tnl1: entered promiscuous mode
[  132.484506][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.535857][ T9590] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  132.539229][ T9590] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1154'.
[  132.542121][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'.
[  132.547513][ T9590] netlink: 'syz.1.1154': attribute type 12 has an invalid length.
[  132.550403][ T9590] netlink: 'syz.1.1154': attribute type 29 has an invalid length.
[  132.555832][ T9590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1154'.
[  132.558588][ T9590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1154'.
[  132.801323][ T9600] netlink: 'syz.1.1159': attribute type 10 has an invalid length.
[  132.805864][ T9600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1159'.
[  132.891345][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'.
[  132.952411][ T5840] Bluetooth: hci0: command tx timeout
[  133.102190][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'.
[  133.292496][ T9622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1167'.
[  133.521196][ T9641] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.675296][ T9659] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  133.677768][ T9659] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  133.882187][ T9670] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  134.265566][ T9689] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  134.269784][ T9689] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  134.294396][ T9689] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  134.537440][ T9705] netlink: 'syz.1.1196': attribute type 1 has an invalid length.
[  134.551433][ T9705] bond4: entered promiscuous mode
[  134.554053][ T9705] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.570093][ T9705] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.575167][ T9705] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  134.578939][ T9705] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  134.584830][ T9705] bond4: (slave vcan1): making interface the new active one
[  134.588595][ T9705] vcan1: entered promiscuous mode
[  134.591003][ T9705] bond4: (slave vcan1): Enslaving as an active interface with an up link
[  134.635103][ T9711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.640492][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  134.646718][   T47] tipc: Node number set to 3379760733
[  134.655492][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  134.658399][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  134.844091][ T9709] infiniband syz2: set down
[  134.846054][ T9709] infiniband syz2: added vxcan1
[  134.851263][   T10] vxcan1 speed is unknown, defaulting to 1000
[  134.880489][ T9709] RDS/IB: syz2: added
[  134.882387][ T9709] smc: adding ib device syz2 with port count 1
[  134.884902][ T9709] smc:    ib device syz2 port 1 has pnetid 
[  134.889411][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  135.079197][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  135.248044][ T9709] vxcan1 speed is unknown, defaulting to 1000
[  135.301238][ T9758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.394720][   T10] vxcan1 speed is unknown, defaulting to 1000
[  135.952683][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  136.776271][ T9815] __nla_validate_parse: 38 callbacks suppressed
[  136.776283][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  136.940394][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'.
[  136.968823][ T9836] netlink: 'syz.0.1231': attribute type 11 has an invalid length.
[  136.971398][ T9836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1231'.
[  137.027679][ T9840] netlink: zone id is out of range
[  137.040679][ T9840] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.1232'.
[  137.089207][ T9844] netlink: 'syz.0.1234': attribute type 5 has an invalid length.
[  137.094043][ T9844] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1234'.
[  137.105607][ T9846] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1235'.
[  137.158964][ T9849] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  137.313921][ T9869] netlink: 'syz.0.1240': attribute type 39 has an invalid length.
[  137.331737][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  137.334567][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  137.434757][ T9886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1246'.
[  137.649907][ T9898] can: request_module (can-proto-3) failed.
[  137.706935][ T9921] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1253'.
[  137.797097][ T9925] vxcan1 speed is unknown, defaulting to 1000
[  137.847822][ T9929] netlink: 'syz.1.1256': attribute type 2 has an invalid length.
[  137.863598][ T9929] macvlan2: entered allmulticast mode
[  137.865458][ T9929] veth1_vlan: entered allmulticast mode
[  137.871162][ T9929] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  137.970235][ T9933] caif0: entered promiscuous mode
[  137.972069][ T9933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.097997][ T9947] syzkaller0: entered promiscuous mode
[  138.100447][ T9947] syzkaller0: entered allmulticast mode
[  138.104000][ T9946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.125088][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  138.138768][ T9946] tipc: Disabling bearer <eth:syzkaller0>
[  138.194142][ T9950] xt_time: unknown flags 0x4
[  138.281779][ T9954] sctp: [Deprecated]: syz.1.1262 (pid 9954) Use of int in maxseg socket option.
[  138.281779][ T9954] Use struct sctp_assoc_value instead
[  138.490870][ T9970] xt_limit: Overflow, try lower: 0/0
[  138.496580][ T9970] netlink: 'syz.1.1267': attribute type 14 has an invalid length.
[  138.522729][ T9970] netlink: 'syz.1.1267': attribute type 12 has an invalid length.
[  138.691387][ T9987] xt_hashlimit: size too large, truncated to 1048576
[  138.747150][ T9988] : renamed from geneve1
[  138.782906][ T9991] pim6reg1: entered promiscuous mode
[  138.784709][ T9991] pim6reg1: entered allmulticast mode
[  139.512969][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  139.573535][T10021] siw: device registration error -23
[  139.652576][T10025] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  140.020737][T10047] netlink: 'syz.2.1292': attribute type 11 has an invalid length.
[  140.393470][T10072] dvmrp1: tun_chr_ioctl cmd 1074025677
[  140.395779][T10072] dvmrp1: linktype set to 805
[  140.604047][T10095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.978635][T10114] netlink: 'syz.0.1309': attribute type 1 has an invalid length.
[  141.003345][T10114] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.018091][T10114] 8021q: adding VLAN 0 to HW filter on device batadv1
[  141.023312][T10114] bond5: (slave batadv1): making interface the new active one
[  141.027493][T10114] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  141.156710][T10128] sctp: [Deprecated]: syz.0.1312 (pid 10128) Use of int in maxseg socket option.
[  141.156710][T10128] Use struct sctp_assoc_value instead
[  141.730414][T10179] netlink: 'syz.0.1330': attribute type 5 has an invalid length.
[  141.912096][T10190] pim6reg1: entered promiscuous mode
[  141.919052][T10190] pim6reg1: entered allmulticast mode
[  141.928347][T10190] dummy0: entered promiscuous mode
[  141.934649][T10190] batadv0: entered promiscuous mode
[  141.939259][T10190] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  141.947205][T10190] dummy0: left promiscuous mode
[  141.949914][T10190] batadv0: left promiscuous mode
[  142.013480][T10195] can: request_module (can-proto-3) failed.
[  142.177637][T10201] __nla_validate_parse: 25 callbacks suppressed
[  142.177655][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  142.571263][T10214] can: request_module (can-proto-3) failed.
[  142.760018][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'.
[  142.766445][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'.
[  142.770016][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'.
[  143.022151][T10239] netlink: 'syz.2.1352': attribute type 4 has an invalid length.
[  143.025652][T10240] netlink: 'syz.2.1352': attribute type 4 has an invalid length.
[  143.030970][T10242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.039415][T10242] syzkaller0: entered promiscuous mode
[  143.041849][T10242] syzkaller0: entered allmulticast mode
[  143.058978][T10242] tipc: Resetting bearer <eth:syzkaller0>
[  143.065018][T10241] tipc: Resetting bearer <eth:syzkaller0>
[  143.078195][T10241] tipc: Disabling bearer <eth:syzkaller0>
[  143.472629][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'.
[  143.767794][T10292] vxcan1 speed is unknown, defaulting to 1000
[  144.001568][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'.
[  144.175180][T10312] delete_channel: no stack
[  144.175359][T10292] netlink: 'syz.0.1371': attribute type 6 has an invalid length.
[  144.181512][T10292] netlink: 'syz.0.1371': attribute type 7 has an invalid length.
[  144.184792][T10292] netlink: 'syz.0.1371': attribute type 8 has an invalid length.
[  144.192176][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'.
[  144.305370][T10320] netlink: 'syz.2.1379': attribute type 1 has an invalid length.
[  144.597958][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'.
[  144.601467][T10340] netlink: 'syz.1.1387': attribute type 20 has an invalid length.
[  144.604790][T10340] netlink: 'syz.1.1387': attribute type 21 has an invalid length.
[  144.631835][T10343] netlink: 'syz.2.1386': attribute type 1 has an invalid length.
[  144.799343][T10355] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1392'.
[  144.942423][T10365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1395'.
[  145.063814][T10369] bond5: entered promiscuous mode
[  145.065773][T10369] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.420202][T10394] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  145.608847][T10413] xt_ecn: cannot match TCP bits for non-tcp packets
[  146.320035][T10457] 
[  146.321045][T10457] ======================================================
[  146.323666][T10457] WARNING: possible circular locking dependency detected
[  146.326255][T10457] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  146.329813][T10457] ------------------------------------------------------
[  146.332823][T10457] syz.2.1429/10457 is trying to acquire lock:
[  146.335132][T10457] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  146.338697][T10457] 
[  146.338697][T10457] but task is already holding lock:
[  146.341696][T10457] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  146.345406][T10457] 
[  146.345406][T10457] which lock already depends on the new lock.
[  146.345406][T10457] 
[  146.349296][T10457] 
[  146.349296][T10457] the existing dependency chain (in reverse order) is:
[  146.352686][T10457] 
[  146.352686][T10457] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  146.355710][T10457]        lock_acquire+0x120/0x360
[  146.357639][T10457]        _raw_spin_lock_bh+0x36/0x50
[  146.359673][T10457]        nr_rt_ioctl+0x390/0xd50
[  146.361560][T10457]        sock_do_ioctl+0xdc/0x300
[  146.363551][T10457]        sock_ioctl+0x576/0x790
[  146.365417][T10457]        __se_sys_ioctl+0xfc/0x170
[  146.367342][T10457]        do_syscall_64+0xfa/0x3b0
[  146.369266][T10457]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.371681][T10457] 
[  146.371681][T10457] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  146.374690][T10457]        lock_acquire+0x120/0x360
[  146.376625][T10457]        _raw_spin_lock_bh+0x36/0x50
[  146.378635][T10457]        nr_rt_ioctl+0x193/0xd50
[  146.380525][T10457]        sock_do_ioctl+0xdc/0x300
[  146.382470][T10457]        sock_ioctl+0x576/0x790
[  146.384296][T10457]        __se_sys_ioctl+0xfc/0x170
[  146.386239][T10457]        do_syscall_64+0xfa/0x3b0
[  146.388163][T10457]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.390632][T10457] 
[  146.390632][T10457] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  146.393627][T10457]        validate_chain+0xb9b/0x2140
[  146.395698][T10457]        __lock_acquire+0xab9/0xd20
[  146.397763][T10457]        lock_acquire+0x120/0x360
[  146.399755][T10457]        _raw_spin_lock_bh+0x36/0x50
[  146.401810][T10457]        nr_rt_device_down+0xa9/0x720
[  146.403929][T10457]        nr_device_event+0x137/0x150
[  146.405986][T10457]        notifier_call_chain+0x1b6/0x3e0
[  146.408183][T10457]        dev_close_many+0x29c/0x410
[  146.410215][T10457]        netif_close+0x158/0x210
[  146.412184][T10457]        dev_close+0x10a/0x220
[  146.414018][T10457]        bpq_device_event+0x2f4/0x600
[  146.416097][T10457]        notifier_call_chain+0x1b6/0x3e0
[  146.418248][T10457]        __dev_notify_flags+0x18d/0x2e0
[  146.420377][T10457]        netif_change_flags+0xe8/0x1a0
[  146.422513][T10457]        dev_change_flags+0x130/0x260
[  146.424561][T10457]        dev_ioctl+0x7b4/0x1150
[  146.426411][T10457]        sock_do_ioctl+0x22c/0x300
[  146.428393][T10457]        sock_ioctl+0x576/0x790
[  146.430321][T10457]        __se_sys_ioctl+0xfc/0x170
[  146.432332][T10457]        do_syscall_64+0xfa/0x3b0
[  146.434302][T10457]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.436751][T10457] 
[  146.436751][T10457] other info that might help us debug this:
[  146.436751][T10457] 
[  146.440536][T10457] Chain exists of:
[  146.440536][T10457]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  146.440536][T10457] 
[  146.445655][T10457]  Possible unsafe locking scenario:
[  146.445655][T10457] 
[  146.448476][T10457]        CPU0                    CPU1
[  146.450498][T10457]        ----                    ----
[  146.452487][T10457]   lock(nr_neigh_list_lock);
[  146.454278][T10457]                                lock(&nr_node->node_lock);
[  146.456999][T10457]                                lock(nr_neigh_list_lock);
[  146.459702][T10457]   lock(nr_node_list_lock);
[  146.461531][T10457] 
[  146.461531][T10457]  *** DEADLOCK ***
[  146.461531][T10457] 
[  146.464542][T10457] 2 locks held by syz.2.1429/10457:
[  146.466111][T10457]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  146.468887][T10457]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  146.472090][T10457] 
[  146.472090][T10457] stack backtrace:
[  146.474008][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.2.1429 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  146.474021][T10457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.474027][T10457] Call Trace:
[  146.474033][T10457]  <TASK>
[  146.474039][T10457]  dump_stack_lvl+0x189/0x250
[  146.474055][T10457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.474065][T10457]  ? __pfx__printk+0x10/0x10
[  146.474076][T10457]  ? print_lock_name+0xde/0x100
[  146.474089][T10457]  print_circular_bug+0x2ee/0x310
[  146.474101][T10457]  check_noncircular+0x134/0x160
[  146.474112][T10457]  validate_chain+0xb9b/0x2140
[  146.474122][T10457]  ? rt6_disable_ip+0x6b3/0x720
[  146.474135][T10457]  ? __lock_acquire+0xab9/0xd20
[  146.474143][T10457]  __lock_acquire+0xab9/0xd20
[  146.474152][T10457]  ? nr_rt_device_down+0xa9/0x720
[  146.474159][T10457]  lock_acquire+0x120/0x360
[  146.474168][T10457]  ? nr_rt_device_down+0xa9/0x720
[  146.474178][T10457]  ? nr_rt_device_down+0xa9/0x720
[  146.474185][T10457]  _raw_spin_lock_bh+0x36/0x50
[  146.474196][T10457]  ? nr_rt_device_down+0xa9/0x720
[  146.474203][T10457]  nr_rt_device_down+0xa9/0x720
[  146.474210][T10457]  ? do_raw_spin_unlock+0x4d/0x240
[  146.474221][T10457]  nr_device_event+0x137/0x150
[  146.474234][T10457]  notifier_call_chain+0x1b6/0x3e0
[  146.474247][T10457]  dev_close_many+0x29c/0x410
[  146.474256][T10457]  ? __pfx_dev_close_many+0x10/0x10
[  146.474264][T10457]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  146.474277][T10457]  ? bond_netdev_event+0x227/0xe80
[  146.474289][T10457]  netif_close+0x158/0x210
[  146.474302][T10457]  ? __pfx_netif_close+0x10/0x10
[  146.474309][T10457]  ? tun_device_event+0x77/0x1020
[  146.474320][T10457]  dev_close+0x10a/0x220
[  146.474331][T10457]  bpq_device_event+0x2f4/0x600
[  146.474342][T10457]  notifier_call_chain+0x1b6/0x3e0
[  146.474352][T10457]  __dev_notify_flags+0x18d/0x2e0
[  146.474363][T10457]  ? __pfx___dev_notify_flags+0x10/0x10
[  146.474371][T10457]  ? __dev_change_flags+0x4cc/0x6d0
[  146.474381][T10457]  ? __pfx___dev_change_flags+0x10/0x10
[  146.474390][T10457]  ? dev_ioctl+0x7a4/0x1150
[  146.474398][T10457]  ? full_name_hash+0x92/0xe0
[  146.474410][T10457]  netif_change_flags+0xe8/0x1a0
[  146.474420][T10457]  dev_change_flags+0x130/0x260
[  146.474456][T10457]  dev_ioctl+0x7b4/0x1150
[  146.474466][T10457]  sock_do_ioctl+0x22c/0x300
[  146.474480][T10457]  ? __pfx_sock_do_ioctl+0x10/0x10
[  146.474491][T10457]  ? __lock_acquire+0xab9/0xd20
[  146.474502][T10457]  sock_ioctl+0x576/0x790
[  146.474514][T10457]  ? __pfx_sock_ioctl+0x10/0x10
[  146.474525][T10457]  ? __fget_files+0x2a/0x420
[  146.474535][T10457]  ? __fget_files+0x3a0/0x420
[  146.474544][T10457]  ? __fget_files+0x2a/0x420
[  146.474553][T10457]  ? bpf_lsm_file_ioctl+0x9/0x20
[  146.474562][T10457]  ? __pfx_sock_ioctl+0x10/0x10
[  146.474572][T10457]  __se_sys_ioctl+0xfc/0x170
[  146.474580][T10457]  do_syscall_64+0xfa/0x3b0
[  146.474588][T10457]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.474598][T10457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.474606][T10457]  ? exc_page_fault+0x9f/0xf0
[  146.474616][T10457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.474624][T10457] RIP: 0033:0x7fe10c38e929
[  146.474634][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.474643][T10457] RSP: 002b:00007fe10d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  146.474651][T10457] RAX: ffffffffffffffda RBX: 00007fe10c5b5fa0 RCX: 00007fe10c38e929
[  146.474658][T10457] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004
[  146.474663][T10457] RBP: 00007fe10c410b39 R08: 0000000000000000 R09: 0000000000000000
[  146.474667][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.474672][T10457] R13: 0000000000000000 R14: 00007fe10c5b5fa0 R15: 00007ffd2ecd2e48
[  146.474682][T10457]  </TASK>
[  146.690367][T10463] 8021q: adding VLAN 0 to HW filter on device bond0

VM DIAGNOSIS:
11:24:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82433b6c RBX=0000000000008e8d RCX=ffff888024848000 RDX=0000000000000002
RSI=ffffc900043f7b80 RDI=ffff8880397d5a00 RBP=ffffc900043f7a70 RSP=ffffc900043f78d8
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=dffffc0000000000 R13=1ffff9200087ef2c R14=ffff88810fd24c00 R15=ffffffff8201eaa0
RIP=ffffffff81c036ac RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faa589896c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a5e54cff8 CR3=00000000294b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006c14 RDI=0000000000006c15 RBP=00000000000003f8 RSP=ffffc900043aedd0
R8 =ffff888020c60237 R9 =1ffff1100418c046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af988a R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe10d1d56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f182a18c020 CR3=000000010d9b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fe792611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
