last executing test programs:

2.379391361s ago: executing program 3 (id=6434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'dh\x00', 0x5, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10)
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000180)={0x5, 0x1ff, 0x0, 0xffffffffffff46d3, 0x3})
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0xfffffffffffffcd5, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0x8e}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x144}}, 0x800)

2.081783039s ago: executing program 4 (id=6440):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x20000000, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xfff)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040), 0x8)

1.737475052s ago: executing program 2 (id=6443):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x441}, @IFA_LOCAL={0xf, 0x2, @remote}]}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000006000000000099000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x2f, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.58680319s ago: executing program 1 (id=6444):
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2)

1.585124904s ago: executing program 2 (id=6446):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0)

1.539605607s ago: executing program 2 (id=6447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async)
listen(r4, 0x6d5) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async, rerun: 32)
write(r5, &(0x7f0000000080)="0b000300010001", 0x7) (rerun: 32)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async)
r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000180)={'b', ' *:* ', 'r\x00'}, 0x8)

1.395068736s ago: executing program 3 (id=6448):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b1b, &(0x7f0000000040))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000001580)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000001600)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001640)=<r4=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000017c0)={0x0, <r5=>0x0}, &(0x7f0000001800)=0xc)
r6 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c40)={0x0, <r7=>0x0}, &(0x7f0000001c80)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000001d00)=0xc)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001d40), 0x4100, 0x0)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d80), 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0)={0x0, <r11=>0x0}, &(0x7f0000001e00)=0xc)
r12 = getgid()
r13 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e40)={<r14=>0x0}, &(0x7f0000001e80)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@dev}}}, &(0x7f0000001fc0)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000380)={<r17=>0x0, <r18=>0x0, <r19=>0x0}, &(0x7f00000003c0)=0xc)
r20 = syz_open_procfs$namespace(r17, &(0x7f0000001780)='ns/ipc\x00')
r21 = getpid()
sendmmsg$unix(r16, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, r19}}}, @cred={{0x1c, 0x1, 0x2, {r21, r18}}}, @rights={{0x18, 0x1, 0x1, [r20, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280)={0x0, <r22=>0x0}, &(0x7f00000022c0)=0xc)
r23 = getgid()
r24 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r24, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r20, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800)
r25 = socket(0xb, 0x4, 0xd494)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="670026d9a428daeb580b059af90913772d4f4cd236b5bc96bf5c4c000a1b328372795b06fe1bf003fc14d399f130747d1141022de022f962101d609aab6c8a414468da641ab08f0218f20f55bb3a50f24d0b75ec5065127f85559acf70106bf69ee0ff6d606f6d0f776735aa48abcf890f01e31cbf671799287cc2cf6a2180a267a0268cd089ac66860e40eb49025422d6f456eda7c46a1dff7eb62feadac7e38f981abba12f3cef22fa9ff79844d895216ac32b4b832510068aed6a4431609b1665ec3a76b1adfe67a175fa8027c3a7e2", 0xd1}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r0, r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x40000}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="31d9b473a76df24b3b", 0x9}], 0x2, &(0x7f0000001840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000063406cdd00000000602f1405000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x80}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001940)="14a4aee3e36a92bcb36f3a451daf2da685", 0x11}, {&(0x7f0000001980)="4293d1a9973b8ae3743bd8886f9f327896df73080db2fa49d5ec81c9a1dff9de267b27e94eb7b56fc6c751c9e70c744ecef77e7c4311c5ec104379b2965ae456c6693d6d678742", 0x47}, {&(0x7f0000001a00)="eabe5d8ebf48018e32c29f7b88cf3b32f7718fe6302ebca75843fa7df6a1480ccaf0885202c4092b4529af1904eda5c4ae382342f12c7a993401bcd493", 0x3d}, {&(0x7f0000001a40)="035a1601e6b5009ad223a8eb8f0290e65f669c69280604b97ce380b6a3b03115796076870f028bff7f57e6fafe9d5280bafa947688e092d1e89df3f28d87863907813274f969da2596d56903b4f311ccd1d2cc2cb2265b3986b40bb8effa826c1b534113b15aec40e24c908be91c2af271be027a1277d9b1e71dcc3346bf1959ea3b175954f83f3cf2d47863fd724056ad704c20ebf7718534b3646fcd03cb129f941dca00c6c474", 0xa8}, {&(0x7f0000001b00)="53de7b169142c99a70cffa148341383b0930672b7623588dcfd5e954858f6f8e34f014117eadc12a7707f554897a1c9d6787cad21f4451fad44d008ac1a1b4c821787bfbf7e0b16c9ac542ae90295dc31c4802cdaed06ee39ac44007477b5f9d032b05515e27c96191e57bc64ccd67a21d18f821c8835c70f4dae2991e926930e2f21328291faa392afbb66f7e4abab8650779cacf857004d5ec60fb5c890614120373", 0xa3}], 0x5, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r13, r0, r1, r0, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xffffffffffffffff}}}], 0xe0, 0x4000081}}, {{&(0x7f0000002100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002180)="e22aec532b193a1242a122978af1628ce727843b1ff31aa8fd3cef05e2b5a7fad4bd53ac3e7908a9b3f60267fa305d46dba8c26e1b6ee41da8b8bb8571d3b43690a631fee3f4c4a9cbd6755ec63ef845ad1e71e79715806815b98ee47db73743a7426632f8b51b01d9ae85a0", 0x6c}, {&(0x7f0000002200)="1770fe3a01d0351953627e6cff56887f37", 0x11}], 0x2, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r17, r22, r23}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r24, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r25, r0]}}], 0x78, 0x8000}}], 0x4, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffe91, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}, 0xfffffffffffffd99}}]}, 0x138}}, 0x0)

1.308924334s ago: executing program 2 (id=6450):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r1, &(0x7f0000000000), 0x10)
close(r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x2)
r5 = socket$inet(0x2, 0xa, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}})
recvmsg(r2, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1}, 0x10100)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.167917403s ago: executing program 3 (id=6452):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
recvfrom$inet6(r1, &(0x7f0000000080)=""/109, 0x6d, 0x2100, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x200, 0x200, 0x168, 0x298, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

1.166448551s ago: executing program 2 (id=6453):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r0=>0x0}, &(0x7f00000000c0)=0x14)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000d10000000000000000000000000004100", @ANYRES32=0x0, @ANYBLOB="00000000800007001c0012800c0001006d6163766c616e000c000280080003000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) (async)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x8f, 0x0, 0x1, 0x6, 0x400, 0x7}, &(0x7f0000000280)=0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x26, 0x80001, 0x8)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) (async)
sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="3cffff001900020029bd7000ffe5df258080204dff01c8040008000008001e000600000008000220ac1e000106001d004e23000008001e0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="806f49ce28a919e0591ecb25037ded72730bc124a87675ebe3ba16d8f3048f9e5803b35ef7237a1407d1bd162bb37b9ab56304be29e7c4a8e0b285e4f3597c1473705754a9850319e190373bc16041dc649a974d27a74d556ff8c3c0deea6df77be1b13ea4b158215aaa8f38", @ANYRES16=r6, @ANYBLOB="000126bd7000f8dbdf2501000000050005000300000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0xfffffffd}}) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r9, &(0x7f0000000100)}, 0x20) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000fcffffff7311420000000000851000000200000095000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', r0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11}, 0x94)

1.108307802s ago: executing program 3 (id=6454):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}}, 0x400d4)
r4 = socket$kcm(0x2d, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000380)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850)

1.092500999s ago: executing program 4 (id=6455):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="92100000000065740000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000001000002006970766c616e3100"/35, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40)

992.35942ms ago: executing program 2 (id=6457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f000000a740)={0x0, 0x0, &(0x7f000000a700)={&(0x7f0000002bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x4004044)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x4e20, 0x0, 0x6, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x800007fc, 0x9141, 0x0, 0x0, 0x80f42, 0x5, 0x4}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x4, 0x33}, 0x2, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0x9}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x4e20, 0x0, 0x6, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x800007fc, 0x9141, 0x0, 0x0, 0x80f42, 0x5, 0x4}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x4, 0x33}, 0x2, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0x9}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000027bd7000fddbdf250b0000000a000900bbbbbbbbbbbb000008000300", @ANYRES32=r5, @ANYBLOB="08003b000100000005002e000100000008000b0000800000080034001100000008002c003103000005002e0000000000bb7d57d481479f4f2c6cba2674ebae62f490b939e992868fe4cfbee08012284325c16d6a5b7fc43fc55c05f998451d4cd72ebfbd81125badac8c9509c85a127ac6c40863d318b88aa296d42f8da4764b17cdfc3f46b77a922f82799a5fb98bf265641de3ca4f09a13bc3cc87028fec534f4c2b1623d84ef33774716106f92e62f7d0b1ce6d82253d07c0fd8f2283550c4e64cf17e40e23f59e3fa413d0754caa19b04ecfcf652e63ff379203c8e9301ffd81aaeeaefd810aa7ccee33070a16"], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x28004800)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) (async)
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000040)=0x4000000e, 0x4) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000040)=0x4000000e, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10], 0x30, 0x40400d1}}], 0x1, 0x20008090)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x400000, 0x0) (async)
splice(r9, 0x0, r11, 0x0, 0x400000, 0x0)
sendmsg$netlink(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001e40)={0x34, 0x34, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x43}, @generic="b2ee7b1abad78bdcd08b8a164704b56052", @typed={0xc, 0x103, 0x0, 0x0, @u64=0x9}]}, 0x34}, {&(0x7f0000005e80)={0x6c8, 0x2e, 0x1, 0x70bd26, 0x10d, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0xa1, 0xee, 0x0, 0x0, @binary="2dc10bd69651fbaa0e6bf5bcbbbb7d156411f36ec9b1d42b2f6aa0c9e34ce8da00dd1a564a4ec1b09cf85ff3938fcf6cdc3a6c28a28f03696f90561bd2be92777e6821b454999a2c52ad5695a5c4256663026caef3f5eafb317129f5423c3af13a13b271a60ef5c17609884c45e22aa2269d09d21683f2219396d1532330394aebb52c95a9fe979059c2423c7bd6c591a4f682a4dd79374022469f1dd7"}, @nested={0x60c, 0xa3, 0x0, 0x1, [@nested={0x4, 0xaf}, @nested={0x10, 0xe9, 0x0, 0x1, [@typed={0xc, 0xca, 0x0, 0x0, @str='ip6gre0\x00'}]}, @nested={0x4, 0x92}, @nested={0x5ed, 0x12e, 0x0, 0x1, [@generic="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"]}]}]}, 0x6c8}], 0x2, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmsg$netlink(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001e40)={0x34, 0x34, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x43}, @generic="b2ee7b1abad78bdcd08b8a164704b56052", @typed={0xc, 0x103, 0x0, 0x0, @u64=0x9}]}, 0x34}, {&(0x7f0000005e80)={0x6c8, 0x2e, 0x1, 0x70bd26, 0x10d, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0xa1, 0xee, 0x0, 0x0, @binary="2dc10bd69651fbaa0e6bf5bcbbbb7d156411f36ec9b1d42b2f6aa0c9e34ce8da00dd1a564a4ec1b09cf85ff3938fcf6cdc3a6c28a28f03696f90561bd2be92777e6821b454999a2c52ad5695a5c4256663026caef3f5eafb317129f5423c3af13a13b271a60ef5c17609884c45e22aa2269d09d21683f2219396d1532330394aebb52c95a9fe979059c2423c7bd6c591a4f682a4dd79374022469f1dd7"}, @nested={0x60c, 0xa3, 0x0, 0x1, [@nested={0x4, 0xaf}, @nested={0x10, 0xe9, 0x0, 0x1, [@typed={0xc, 0xca, 0x0, 0x0, @str='ip6gre0\x00'}]}, @nested={0x4, 0x92}, @nested={0x5ed, 0x12e, 0x0, 0x1, [@generic="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"]}]}]}, 0x6c8}], 0x2, 0x0, 0x0, 0x40}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

950.657179ms ago: executing program 3 (id=6458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8020000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r1], 0x2a8}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000280), &(0x7f0000000300)=0x8)
r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000240)={@private=0xa010100, @multicast2, @multicast1}, 0xc)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000340)={0x1, 0x7fff, 0x4})
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x15}, 0x20)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040)
r8 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20000000)
bind$netlink(r7, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000096030000000000000000010000000000", @ANYRES32=r10, @ANYBLOB="800002000a0002000180c20000000000"], 0x28}}, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r11, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x81)

871.798301ms ago: executing program 4 (id=6459):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$key(0xf, 0x3, 0x2) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000001010800044000000000080006400000000108000740000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000003f024517d74a1d628eced52de200000000720100009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

811.964743ms ago: executing program 0 (id=6461):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64)
getsockopt(r0, 0x200000000114, 0x1, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) (async)
recvmsg$kcm(r0, &(0x7f0000003680)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/225, 0xe1}, {&(0x7f0000001340)=""/218, 0xda}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/95, 0x5f}, {&(0x7f00000034c0)=""/234, 0xea}], 0x7, &(0x7f0000003640)=""/61, 0x3d}, 0x160) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

755.571262ms ago: executing program 0 (id=6462):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000340)={<r2=>r0, &(0x7f0000000080)='GPL\x00', 0x4000, &(0x7f0000000200)={@align=0x6f, {0xedf9, 0x8, 0x2, 0x100000000}}, 0xfffffff8, &(0x7f0000000240), &(0x7f0000000300)=0x1})
bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c)
mmap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x2000001, 0x4000010, r1, 0x4b957000)
setsockopt$sock_timeval(r1, 0x1, 0x50, &(0x7f0000abaff9), 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0fcc3c3d9d0b6ad525faec57ce3815e295f1b864e8b6b89f3068ee38a1630c7fdc078a6477aa6954e37f8b26c6b245a6c0fc07bc15f46b0322779fa029deb1f4d04be068be214e76c447fe084252af74ae9ccd4feeb45ae5cf8a1a179d3893cd79361e0bf268e692e93bea9d4f51f16f371136f0c25075b6628ab455f87212e01b44a885ff576195b1b583b5df9909dbc"], 0x20}, 0x1, 0x0, 0x0, 0x3000c001}, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x10}, 0x94)

626.901107ms ago: executing program 1 (id=6463):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r3=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r4=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1dc, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xa8, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0x4}, {0x9, 0x1, '};,\x15&'}]}, {0x34, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x6, 0x1, '!:'}, {0x7, 0x1, '%}:'}, {0x6, 0x1, '>+'}, {0x6, 0x1, '*)'}, {0x7, 0x1, '**@'}]}, {0x54, 0x0, 0x0, 0x1, [{0x9, 0x1, '[K)(\x84'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '^'}, {0x4}, {0x12, 0x1, '\'#$+#\'-}^$!#^-'}, {0x9, 0x1, '*@,&@'}, {0x6, 0x1, '-&'}, {0x7, 0x1, '#]{'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}]}, @NFC_ATTR_LLC_SDP={0x108, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x6, 0x1, '/&'}, {0xd, 0x1, '\'-$*#}$/%'}, {0x6, 0x1, '{%'}, {0x6, 0x1, '%.'}, {0x1f, 0x1, '.@%@,[$}/\':+\'$&-/--:/*]::\xcd,'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x5, 0x1, ')'}, {0x4}, {0x5, 0x1, ':'}, {0xc, 0x1, '^/^/\xbd-{@'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '(-/*'}]}, {0x28, 0x0, 0x0, 0x1, [{0x6, 0x1, '.$'}, {0x5, 0x1, '+'}, {0x13, 0x1, '.*{}\\*}(/%]\xdc\']['}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '*'}, {0x4}, {0xb, 0x1, '{.$O.$('}, {0x4}, {0x7, 0x1, '\x8c%/'}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, '!#],:%'}, {0x8, 0x1, ':!,:'}, {0x7, 0x1, ':#)'}, {0x7, 0x1, ']\x8b)'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{<r5=>0xffffffffffffffff, &(0x7f00000003c0)='[@(\\*\\\\{-/\xdc\x00', 0x30000, &(0x7f0000000400)={@_ha_fsid={[0x7, 0x5]}, {0xca12, 0x6, 0x33990af6, 0x10001}}, 0xb, &(0x7f0000000440), &(0x7f0000000480)}, {[0x6, 0xffff, 0x0, 0x72]}, 0x7, 0x84, &(0x7f00000004c0)=""/132})
sendmmsg$alg(r5, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="b6b97775c73baf62c296f6069c27ce228d4d3f370d559165411c6c7505cbdc13264bd0fb5de5e733e54c40847724a413027cba44d54d1dc2ef3367c712f2825d71d772b8683358666c63f86085246e5d1d692ac30f3a3dc4e8427b3e4283a5d6d8912a09a1d9dcdf9c979af5fb3d674ebf6767f04afdfc92048b2f4c82a0448def", 0x81}, {&(0x7f00000006c0)="dd7f9f61fd823de06c70317ed02138a37c1758c17855f421b707ab4b24ae1f97933b5ddd36c70bc16cb66afdb462eb09ca38be7e524de5d4ac077cc3615773187dca8027b4712f8ee0cb3875ea53e1a2a7ae177a0e191984c9c3c0f3a35fde0279f6d221d74ca93188ced1c8043c7e7e18cd2a1feef6e1a9520035ccebdc0621f14fc646736698ddfeb4231c94622509aa2c8af58f5b2357ac721507e11d1f16535d4f98e0e7d76701f0311f718db260fc", 0xb1}, {&(0x7f0000000780)="801210d3a0467c280c434d4a81ac63b33f1183313c923d740fcd2becfaa58504afe5e5a2", 0x24}, {&(0x7f00000007c0)="e274acb79d80172abfb5c2151cc21fd87ac0e875c6ec4f0495fa4f712508a5c7af296b34847c8b782bd3fb67b2381be6f862e13d51ecb019a30dfaf7dd154fc06e0c157473d493075d6341f8d06aede09c476389d05bf54c4514af9cd125a515a99b7831aee0e9b4af98f65c7cb02b624d5b7c21a381b60a8a48d03c16cf72da14865e346a407d9500a7cefadb013354d870d9c9bef5ab3b73eeb608d06ed4", 0x9f}], 0x4, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x8a}, @op={0x18}], 0x30, 0x4000040}], 0x1, 0x8800) (async)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x8, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000018)
getpeername$inet6(r5, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000ac0)=0x1c) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r5)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x27c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8000}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4575}, @NL80211_ATTR_PEER_MEASUREMENTS={0x230, 0x111, 0x0, 0x1, {0x22c, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffe000}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4110}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000000}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000e80)=0x1, 0x4) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r5)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80920800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x20004099)
recvmmsg(r5, &(0x7f0000002300)=[{{&(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=""/254, 0xfe}, 0x2}, {{&(0x7f00000011c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, &(0x7f0000002280)=""/105, 0x69}, 0x8}], 0x2, 0x2000, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r8, 0x40086e81, &(0x7f0000002380)=0x3) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000023c0)="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", 0x1000) (async)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f00000033c0)={0x2, 0x76})
sendto$inet6(0xffffffffffffffff, &(0x7f0000003400)="b237515c7620ad92e9cf344e7d446a776d516e655e7a7b6d1e0e84decc83f1998753515ca3d3efca2096bb868cf26db9e88f49f8f88ba2a5fc701083f5ebefb94425acbfdf1fe7900ccf74755d15a1888c6b5065feb3d6f92a0b22921bc852a978fdc79029c5807a41714fa0a2b3501c0d0b7139657068823413e97f96f855984b582cde9d3b5d3e9999ddec912e6270d4c93121e19f62146b4bccee5667540dd97f21b83dd4641b2ac8a266419abd", 0xaf, 0x2400c085, &(0x7f00000034c0)={0xa, 0x4e24, 0x3, @mcast1, 0x1}, 0x1c) (async)
sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003640), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000003740)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x7c, r9, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1fffffffe}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c001) (async)
recvmsg$unix(r5, &(0x7f0000003b80)={&(0x7f0000003780), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003800)=""/202, 0xca}, {&(0x7f0000003900)=""/206, 0xce}, {&(0x7f0000003a00)=""/59, 0x3b}, {&(0x7f0000003a40)=""/249, 0xf9}], 0x4}, 0x2002) (async)
ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000003bc0)={{0x1}, 0x100, '.\x00'}) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x1, 0x4) (async)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003d40), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003d80)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x38, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0xc000)

564.50376ms ago: executing program 0 (id=6464):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

562.431117ms ago: executing program 3 (id=6465):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x40}, 0x43) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff000000], [0x0, 0xff], 'veth0_macvtap\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth1_to_hsr\x00', {0x3ff}}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [0x0, 0xffffffff], 'erspan0\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "8258", 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040)
sendto$inet6(r5, &(0x7f0000000000)="b8881d500600283a46890e30f9375459cddc15001a7af9958652920e2dde6f8f8a238b5546f03dc038dd62b292a61970a016635130478f7768fae0ebe2379ff25dd5b7e28145e8ddf7c58dfe0347f3716d737081a3fc4e1ed4bd40c043f2c9e0b11d63e1e862c4356a0b5865499144a7e66f7268333a9a640dc9e19eb0abead7256e2eea85ce337610cad1214894bfc1e5679034173f436b3724520dc2118d9343bbfe10903900000000000000", 0x4d, 0x4040005, &(0x7f00000000c0)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c)

559.751771ms ago: executing program 4 (id=6466):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008880) (async, rerun: 64)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c4, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xab0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a5dfccc977dd68a3decb4a5d85b8455aea12f5d51259e5"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d3b09546945746246371879c8b24dd9d0178d6721ffff8a2eb"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc617}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4922efcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0xc0}, 0x4040502) (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80a4}, 0x4000000)

464.988751ms ago: executing program 1 (id=6467):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x400d010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x17, 0x2, {{0x4, 0x1, 0xff, 0x3, 0x80000001, 0xee9}}}}]}, 0x4c}}, 0x20040084)
r8 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0)
r9 = socket(0xf, 0x3, 0x2)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28)
sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0xb, 0x0, 0x7, 0x63}, 0x10}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x68}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

383.965408ms ago: executing program 0 (id=6468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x4010)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x36a18}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0)

353.385215ms ago: executing program 4 (id=6469):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
r2 = accept(r0, 0x0, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
shutdown(r2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

306.484017ms ago: executing program 0 (id=6470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000005e40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000005f00)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8000000}}}, 0x24}}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0xb7ec}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4094)
recvmsg(r0, &(0x7f0000001680)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001240)=""/74, 0x4a}, {&(0x7f00000012c0)=""/156, 0x9c}, {&(0x7f0000001380)=""/31, 0x1f}, {&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f00000014c0)=""/129, 0x81}, {&(0x7f0000001580)=""/64, 0x40}], 0x8, &(0x7f0000001640)=""/5, 0x5}, 0x40012020)

247.717957ms ago: executing program 1 (id=6471):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'ip_vti0\x00', {0x1}, 0xa38})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)

246.93737ms ago: executing program 4 (id=6472):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r9)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r13=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14)
close(r0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r14, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r14, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r14, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xfffffffb}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r14, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r14, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38)

195.905792ms ago: executing program 0 (id=6473):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="fffdff0faaaaaaaaaa00d0960043ea"], 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000500))
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000800000000000054020000080001007063690011000200303030303a30301e31302e3000000000"], 0x30}}, 0x0)
close(0xffffffffffffffff) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000c5918162db714591dbf198313735b33e8caa7428dd3c7e304886c6f8dad9ec258cc9f56a3d7d448bf5db8f4ae7309fc892f1ce43b1bffa6262a84357b61123d2aa4b493e3f11b1e21ad57e05a456859db7477f92e2950e5d90149355da09b004d2cce9a8674ab836e14489c28ce685fa6084f2dcde3ddbd7", @ANYRES16=r14, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0002000000"], 0x34}}, 0x4044890) (async)
socketpair(0x21, 0xa, 0x1, &(0x7f0000000280)) (async)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'veth0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r16, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

154.218867ms ago: executing program 1 (id=6474):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000180000000a0000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}]}, 0x21)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000180000000a0000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}]}, 0x21) (async)

0s ago: executing program 1 (id=6475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r1, 0x0, 0xfffffffffffffe4e, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

kernel console output (not intermixed with test programs):

577] syzkaller1: entered allmulticast mode
[  677.245490][T23581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4693'.
[  677.260203][T23581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4693'.
[  677.480089][T23589] Bluetooth: hci0: Opcode 0x080f failed: -22
[  677.526729][T23595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4696'.
[  677.774934][T23617] netlink: 'syz.1.4700': attribute type 3 has an invalid length.
[  677.804703][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4700'.
[  677.814046][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'.
[  677.934294][T23625] netlink: 'syz.2.4704': attribute type 1 has an invalid length.
[  677.978891][T23625] 8021q: adding VLAN 0 to HW filter on device bond12
[  678.009233][T23625] bond12: (slave gretap2): making interface the new active one
[  678.020610][T23625] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  678.087581][T23635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4704'.
[  678.195335][T23637] netlink: 798 bytes leftover after parsing attributes in process `syz.4.4707'.
[  678.255217][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'.
[  678.381333][T23648] IPv6: sit2: Disabled Multicast RS
[  678.396439][T23648] sit2: entered allmulticast mode
[  678.661010][T23656] bond4: Removing last ns target with arp_interval on
[  679.022043][T23680] tc_dump_action: action bad kind
[  679.201801][T23688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.332390][T23695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.506601][T23705] netlink: 'syz.4.4730': attribute type 1 has an invalid length.
[  679.555557][T23699] bond7: Removing last arp target with arp_interval on
[  679.604478][T23705] 8021q: adding VLAN 0 to HW filter on device bond5
[  679.620058][T23710] netlink: 'syz.2.4731': attribute type 1 has an invalid length.
[  679.805186][T23728] netlink: 'syz.4.4734': attribute type 4 has an invalid length.
[  680.339426][T23759] netlink: 'syz.1.4745': attribute type 1 has an invalid length.
[  680.961452][T23793] 8021q: VLANs not supported on gre0
[  681.219640][T23797] __nla_validate_parse: 9 callbacks suppressed
[  681.219658][T23797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4756'.
[  681.287903][T23801] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  681.342494][T23809] pimreg: entered allmulticast mode
[  681.549832][T23814] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  681.590328][T23819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4764'.
[  681.886369][T23837] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4767'.
[  682.347926][T23860] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  682.452247][T23867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[  682.491792][T23869] x_tables: duplicate underflow at hook 2
[  682.499055][T23873] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4779'.
[  682.510935][T23873] netlink: Conntrack attr has 4 unknown bytes
[  682.532101][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'.
[  682.568580][T23876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4780'.
[  682.697244][T23881] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4781'.
[  682.815815][T23887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4784'.
[  682.834008][T23887] netlink: 'syz.4.4784': attribute type 7 has an invalid length.
[  682.852524][T23887] netlink: 'syz.4.4784': attribute type 8 has an invalid length.
[  682.881212][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4784'.
[  683.697891][T23934] nbd: must specify a device to reconfigure
[  683.952459][T23940] syzkaller0: entered promiscuous mode
[  683.965824][T23940] syzkaller0: entered allmulticast mode
[  684.758121][   T29] audit: type=1800 audit(1777728438.637:6): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4803" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2280 res=0 errno=0
[  685.694853][T23833] Set syz1 is full, maxelem 65536 reached
[  687.249311][T23986] __nla_validate_parse: 2 callbacks suppressed
[  687.249330][T23986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4809'.
[  687.286911][T23993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4809'.
[  687.305646][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4811'.
[  687.319668][T23986] netlink: 'syz.3.4809': attribute type 1 has an invalid length.
[  687.678545][T24019] IPVS: sed: FWM 3 0x00000003 - no destination available
[  687.695765][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  687.741833][T24021] bond0: Caught tx_queue_len zero misconfig
[  688.020660][T24039] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4827'.
[  688.101570][T24043] ipvlan2: entered promiscuous mode
[  688.126566][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4828'.
[  688.189966][T24046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  689.230925][T24120] veth0_to_bond: entered allmulticast mode
[  689.284145][T24120] sctp: [Deprecated]: syz.4.4848 (pid 24120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  689.284145][T24120] Use struct sctp_sack_info instead
[  689.306304][T24127] sctp: [Deprecated]: syz.3.4850 (pid 24127) Use of struct sctp_assoc_value in delayed_ack socket option.
[  689.306304][T24127] Use struct sctp_sack_info instead
[  689.343255][T24127] openvswitch: netlink: Missing key (keys=40, expected=100)
[  689.389435][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4849'.
[  689.637147][T24146] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  689.699849][T24144] syzkaller0: entered promiscuous mode
[  690.066005][T24166] 8021q: VLANs not supported on vxcan1
[  690.148951][T24172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4864'.
[  690.159256][T24168] erspan0: entered promiscuous mode
[  690.181396][T24172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4864'.
[  690.349440][T24182] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4869'.
[  690.402010][T24182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4869'.
[  690.489318][T24188] netlink: 'syz.4.4870': attribute type 11 has an invalid length.
[  690.516531][T24188] netlink: 'syz.4.4870': attribute type 11 has an invalid length.
[  690.726994][T24200] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  692.414463][T24302] syzkaller0: entered promiscuous mode
[  692.423897][T24302] syzkaller0: entered allmulticast mode
[  692.444090][T24302] 0: reclassify loop, rule prio 0, protocol 800
[  692.614764][T24320] IPVS: ip_vs_edit_dest(): server weight less than zero
[  692.846086][T24331] netlink: 'syz.0.4906': attribute type 2 has an invalid length.
[  692.977572][T24342] netlink: 'syz.3.4907': attribute type 4 has an invalid length.
[  693.087075][T24352] netlink: 'syz.2.4908': attribute type 11 has an invalid length.
[  693.480638][T24371] __nla_validate_parse: 8 callbacks suppressed
[  693.480655][T24371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4913'.
[  693.619378][T24380] syzkaller0: entered promiscuous mode
[  693.649430][T24380] syzkaller0: entered allmulticast mode
[  693.673430][T24388] sctp: [Deprecated]: syz.3.4916 (pid 24388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  693.673430][T24388] Use struct sctp_sack_info instead
[  693.691490][T24380] 0: reclassify loop, rule prio 0, protocol 800
[  694.102210][T24411] netlink: 'syz.2.4921': attribute type 1 has an invalid length.
[  694.113909][T24413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4922'.
[  694.156680][T24411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4921'.
[  694.271733][T24424] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  694.334646][T24424] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  694.405913][T24424] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  694.443339][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4926'.
[  694.501293][T24424] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  694.523558][T24436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4926'.
[  694.672350][T12971] smbdirect: ib_dev[syz2] removed
[  694.688237][T24441] netlink: 'syz.0.4929': attribute type 8 has an invalid length.
[  694.709497][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4929'.
[  694.760183][T24441] bond0: entered promiscuous mode
[  694.779854][T24441] bond_slave_0: entered promiscuous mode
[  694.799685][T24441] bond_slave_1: entered promiscuous mode
[  694.833761][T24441] gretap0: entered promiscuous mode
[  694.862539][T24441] hsr1: entered promiscuous mode
[  695.037518][T24446] syzkaller0: entered promiscuous mode
[  695.047589][T24446] syzkaller0: entered allmulticast mode
[  695.072166][T24470] geneve0: mtu less than device minimum
[  695.180786][T24476] netlink: 'syz.1.4937': attribute type 1 has an invalid length.
[  695.205656][T24476] netlink: 'syz.1.4937': attribute type 2 has an invalid length.
[  697.687346][T24519] netlink: 320 bytes leftover after parsing attributes in process `syz.3.4950'.
[  698.077077][T24476] infiniband syz1: set down
[  698.093953][T24476] infiniband syz1: added bond_slave_1
[  698.118177][T24476] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  698.134575][T24476] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  698.140207][T24551] C: entered allmulticast mode
[  698.152301][T24476] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  698.195221][T24551] tunl0: entered allmulticast mode
[  698.209948][T24476] RDS/IB: syz1: added
[  698.219259][T24476] smc: adding ib device syz1 with port count 1
[  698.226257][T24551] gre0: entered allmulticast mode
[  698.231518][T24476] smc:    ib device syz1 port 1 has no pnetid
[  698.232948][T24551] erspan0: entered allmulticast mode
[  698.266701][T24551] ip_vti0: entered allmulticast mode
[  698.277972][T24551] ip6_vti0: entered allmulticast mode
[  698.288768][T24556] netlink: 'syz.4.4959': attribute type 21 has an invalid length.
[  698.302327][T24551] sit0: entered allmulticast mode
[  698.309591][T24551] ip6tnl0: entered allmulticast mode
[  698.315342][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4959'.
[  698.325666][T24551] ip6gre0: entered allmulticast mode
[  698.331229][T24551] syz_tun: entered allmulticast mode
[  698.337143][T24551] ip6gretap0: entered allmulticast mode
[  698.344117][T24551] bridge0: entered allmulticast mode
[  698.349610][T24551] vcan0: entered allmulticast mode
[  698.355040][T24551] .`¹: entered allmulticast mode
[  698.360024][T24551] bond_slave_0: entered allmulticast mode
[  698.366243][T24551] team0: entered allmulticast mode
[  698.371367][T24551] team_slave_0: entered allmulticast mode
[  698.377655][T24551] team_slave_1: entered allmulticast mode
[  698.383637][T24551] nlmon0: entered allmulticast mode
[  698.389014][T24551] batadv0: entered allmulticast mode
[  698.394586][T24551] vxcan0: entered allmulticast mode
[  698.399971][T24551] vxcan1: entered allmulticast mode
[  698.407014][T24551] veth0: entered allmulticast mode
[  698.413742][T24551] veth1: entered allmulticast mode
[  698.419005][T24551] wg0: entered allmulticast mode
[  698.424201][T24551] wg1: entered allmulticast mode
[  698.429250][T24551] wg2: entered allmulticast mode
[  698.434787][T24551] veth0_to_bridge: entered allmulticast mode
[  698.440972][T24551] veth1_to_bridge: entered allmulticast mode
[  698.447307][T24551] veth0_to_bond: entered allmulticast mode
[  698.453373][T24551] veth1_to_bond: entered allmulticast mode
[  698.459268][T24551] bond_slave_1: entered allmulticast mode
[  698.465686][T24551] veth0_to_team: entered allmulticast mode
[  698.471657][T24551] veth1_to_team: entered allmulticast mode
[  698.477918][T24551] veth0_to_batadv: entered allmulticast mode
[  698.484037][T24551] batadv_slave_0: entered allmulticast mode
[  698.490010][T24551] veth1_to_batadv: entered allmulticast mode
[  698.496579][T24551] batadv_slave_1: entered allmulticast mode
[  698.502716][T24551] xfrm0: entered allmulticast mode
[  698.507943][T24551] veth0_to_hsr: entered allmulticast mode
[  698.513883][T24551] hsr_slave_0: entered allmulticast mode
[  698.519646][T24551] veth1_to_hsr: entered allmulticast mode
[  698.525872][T24551] hsr_slave_1: entered allmulticast mode
[  698.531605][T24551] hsr0: entered allmulticast mode
[  698.536878][T24551] veth1_virt_wifi: entered allmulticast mode
[  698.543157][T24551] veth0_virt_wifi: entered allmulticast mode
[  698.549320][T24551] virt_wifi0: entered allmulticast mode
[  698.555605][T24551] veth1_macvtap: entered allmulticast mode
[  698.561529][T24551] veth0_macvtap: entered allmulticast mode
[  698.567548][T24551] macvtap0: entered allmulticast mode
[  698.573110][T24551] macsec0: entered allmulticast mode
[  698.578454][T24551] geneve0: entered allmulticast mode
[  698.585994][T24551] geneve1: entered allmulticast mode
[  698.591644][T24551] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  698.599192][T24551] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  698.606734][T24551] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  698.614786][T24551] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  698.622422][T24551] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  698.630420][T24551] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  698.637751][T24551] bond1: entered allmulticast mode
[  698.643559][T24551] ip6tnl1: entered allmulticast mode
[  698.648927][T24551] vlan2: entered allmulticast mode
[  698.654842][T24551] bond2: entered allmulticast mode
[  698.660041][T24551] bond3: entered allmulticast mode
[  698.666279][T24551] bond4: entered allmulticast mode
[  698.671490][T24551] ipvlan2: entered allmulticast mode
[  698.677664][T24551] veth2: entered allmulticast mode
[  698.683005][T24551] veth3: entered allmulticast mode
[  698.688218][T24551] gretap1: entered allmulticast mode
[  698.693780][T24551] bridge1: entered allmulticast mode
[  698.699154][T24551] macsec1: entered allmulticast mode
[  698.705031][T24551] bond5: entered allmulticast mode
[  698.710234][T24551] bridge2: entered allmulticast mode
[  698.715761][T24551] bond6: entered allmulticast mode
[  698.720956][T24551] gre1: entered allmulticast mode
[  698.726132][T24551] mac80211_hwsim hwsim40 wlan2: entered allmulticast mode
[  698.733893][T24551] vlan1: entered allmulticast mode
[  698.739147][T24551] veth4: entered allmulticast mode
[  698.744571][T24551] veth5: entered allmulticast mode
[  698.749797][T24551] bond7: entered allmulticast mode
[  698.755119][T24551] : entered allmulticast mode
[  698.759975][T24551] bond8: entered allmulticast mode
[  698.769678][T24551] bond9: left promiscuous mode
[  698.774555][T24551] bond9: entered allmulticast mode
[  698.780931][T24551] bridge3: entered allmulticast mode
[  698.786823][T24551] bond10: left promiscuous mode
[  698.791693][T24551] bond10: entered allmulticast mode
[  698.798186][T24551] bridge4: entered allmulticast mode
[  698.803790][T24551] veth6: entered allmulticast mode
[  698.808996][T24551] veth7: left promiscuous mode
[  698.814111][T24551] bond11: entered allmulticast mode
[  698.819458][T24551] vxlan0: entered allmulticast mode
[  698.825520][T24551] gtp0: entered allmulticast mode
[  698.831540][T24551] veth8: entered allmulticast mode
[  698.836981][T24551] veth9: entered allmulticast mode
[  698.842249][T24551] mac80211_hwsim hwsim46 wlan3: entered allmulticast mode
[  698.849918][T24551] sit1: entered allmulticast mode
[  698.856228][T24551] : entered allmulticast mode
[  698.861584][T24551] @: entered allmulticast mode
[  698.868019][T24551] macsec2: entered allmulticast mode
[  698.874121][T24551] bond0: left promiscuous mode
[  698.878896][T24551] bridge5: left promiscuous mode
[  698.884615][T24551] bond0: entered allmulticast mode
[  698.889737][T24551] bridge5: entered allmulticast mode
[  698.897439][T24551] vlan0: entered allmulticast mode
[  698.904407][T24551] bond12: entered allmulticast mode
[  698.909607][T24551] gretap2: entered allmulticast mode
[  698.917511][T24551] veth10: entered allmulticast mode
[  698.923095][T24551] veth11: entered allmulticast mode
[  698.928415][T24551] macsec3: entered allmulticast mode
[  698.934426][T24551] ip6tnl2: entered allmulticast mode
[  698.939857][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4958'.
[  698.973521][T12971] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  698.985963][T24556] netlink: 'syz.4.4959': attribute type 21 has an invalid length.
[  699.002900][T12971] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.016641][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4959'.
[  699.034315][ T8873] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.071056][ T8873] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.279056][T24566] syzkaller0: entered promiscuous mode
[  699.312680][T24566] syzkaller0: entered allmulticast mode
[  699.329966][T24566] 0: reclassify loop, rule prio 0, protocol 800
[  699.356569][T24572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4965'.
[  699.411524][T24574] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  699.828445][T24598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4973'.
[  699.899647][T24607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4973'.
[  699.914277][T24603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  700.022317][T24611] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  700.297007][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4980'.
[  700.675276][T24646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4988'.
[  700.930609][T24654] IPv6: NLM_F_CREATE should be specified when creating new route
[  701.355679][T24683] netlink: 'syz.2.4997': attribute type 29 has an invalid length.
[  701.533260][T24688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4999'.
[  701.554754][T24688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4999'.
[  701.743727][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5002'.
[  701.926090][T24698] syzkaller0: entered promiscuous mode
[  701.953800][T24698] syzkaller0: entered allmulticast mode
[  702.869724][T24762] syzkaller1: entered promiscuous mode
[  702.877910][T24762] syzkaller1: entered allmulticast mode
[  702.948905][T24773] netlink: 'syz.1.5023': attribute type 11 has an invalid length.
[  703.027526][T24777] x_tables: unsorted underflow at hook 1
[  703.486748][T24802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  703.538897][T24799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.549491][T24799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.604725][T24803] syzkaller0: entered promiscuous mode
[  703.618322][T24803] syzkaller0: entered allmulticast mode
[  703.718506][T24799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.729992][T24799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.820708][T24818] netlink: 'syz.2.5038': attribute type 10 has an invalid length.
[  703.855107][T24799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.882823][T24799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.950056][T24820] __nla_validate_parse: 13 callbacks suppressed
[  703.950072][T24820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5040'.
[  703.979359][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5041'.
[  704.172317][T24831] syzkaller1: entered promiscuous mode
[  704.191898][T24831] syzkaller1: entered allmulticast mode
[  704.440390][T12955] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  704.454185][T12955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.536819][T12955] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  704.551319][T12955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.579144][T12955] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  704.605357][T12955] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.695548][T12948] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  704.720019][T12948] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.740200][T24868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5048'.
[  705.208607][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5056'.
[  705.226445][T24897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5056'.
[  705.416228][T24904] netlink: 'syz.3.5061': attribute type 1 has an invalid length.
[  705.432464][T24904] netlink: 'syz.3.5061': attribute type 2 has an invalid length.
[  705.455694][T24914] netlink: 'syz.2.5059': attribute type 1 has an invalid length.
[  705.487369][T24914] netlink: 'syz.2.5059': attribute type 2 has an invalid length.
[  705.540056][T24915] netlink: 'syz.0.5063': attribute type 1 has an invalid length.
[  705.678343][T24915] 8021q: adding VLAN 0 to HW filter on device bond9
[  705.725161][T24915] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  705.771221][T24921] vlan2: entered promiscuous mode
[  705.786405][T24921] bond9: entered promiscuous mode
[  705.791624][T24921] vlan2: entered allmulticast mode
[  705.797722][T24921] bond9: entered allmulticast mode
[  705.865829][T24927] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  705.887662][T24927] bond7: (slave lo): Enslaving as an active interface with an up link
[  705.917860][T24927] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  705.942018][T24915] netem: change failed
[  706.116412][T24944] ¾x9ÿ: renamed from bridge_slave_0
[  706.275449][T24953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.281754][T24955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5076'.
[  706.441938][T24967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5079'.
[  706.530157][T24975] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5081'.
[  706.934137][T25000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5092'.
[  707.009526][T25010] netlink: 'syz.2.5093': attribute type 1 has an invalid length.
[  707.055747][T25014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5094'.
[  707.129897][T25015] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  707.186596][T25024] xt_hashlimit: size too large, truncated to 1048576
[  707.194683][T25015] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  707.697117][T25014] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.704829][T25014] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.066097][T25053] netlink: 'syz.2.5102': attribute type 21 has an invalid length.
[  708.551322][T25082] IPv6: addrconf: prefix option has invalid lifetime
[  708.635181][T25089] IPv6: addrconf: prefix option has invalid lifetime
[  708.657810][T25080] syzkaller0: entered promiscuous mode
[  708.677285][T25080] syzkaller0: entered allmulticast mode
[  708.695528][T25082] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  708.699564][T25095] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  708.756207][T25099] --map-set only usable from mangle table
[  708.758108][T25101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  709.225638][T25128] __nla_validate_parse: 4 callbacks suppressed
[  709.225658][T25128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5124'.
[  711.410446][T25166] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5130'.
[  711.442135][T25166] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  711.554662][T25180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5134'.
[  711.738952][T25198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5139'.
[  711.740049][T25196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5138'.
[  711.760733][T25196] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5138'.
[  711.770298][T25196] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5138'.
[  711.843251][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'.
[  712.047589][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5143'.
[  712.049960][T25213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5142'.
[  712.103993][T12971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0
[  712.125914][T12971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0
[  712.158927][T12971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0
[  712.188514][T12971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0
[  712.335164][T25225] netlink: 'syz.0.5146': attribute type 28 has an invalid length.
[  712.373338][T25225] netlink: 'syz.0.5146': attribute type 3 has an invalid length.
[  712.946693][T25278] netlink: 'syz.1.5160': attribute type 23 has an invalid length.
[  713.092221][T25282] veth1_to_bridge: entered allmulticast mode
[  713.258884][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  713.272201][T25300] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[  713.306281][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  713.333611][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  713.348669][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  713.364218][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  713.374926][T25304] 8021q: adding VLAN 0 to HW filter on device bond8
[  713.398245][T25297] netlink: 'syz.0.5168': attribute type 29 has an invalid length.
[  714.126821][T25366] bond6: (slave bridge3): making interface the new active one
[  714.135696][T25366] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  714.169710][T25360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  714.210002][T25357] macvlan2: entered promiscuous mode
[  714.216910][T25357] macvlan2: entered allmulticast mode
[  714.223819][T25357] bond6: entered promiscuous mode
[  714.229050][T25357] bridge3: entered promiscuous mode
[  714.238241][T25357] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  714.246268][T25357] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  714.263736][T25357] bond6: left promiscuous mode
[  714.275934][T25357] bridge3: left promiscuous mode
[  714.492542][T25389] __nla_validate_parse: 18 callbacks suppressed
[  714.492562][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'.
[  714.522981][T25389] openvswitch: netlink: Flow actions attr not present in new flow.
[  714.536797][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5193'.
[  714.553442][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5193'.
[  714.751980][T25408] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5199'.
[  714.752446][T25409] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5200'.
[  714.790758][T25411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5202'.
[  714.805448][T25409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5200'.
[  714.943587][T25416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5204'.
[  714.958659][T25419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5206'.
[  715.187048][T25432] vcan0: entered promiscuous mode
[  715.202828][T25432] vcan0: entered allmulticast mode
[  715.780660][T25471] x_tables: duplicate entry at hook 3
[  715.828551][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5218'.
[  715.932784][T12955] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  715.957240][ T5625] block nbd1: Receive control failed (result -32)
[  715.969986][T12955] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  716.006937][T12955] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  716.020676][  T334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  716.576250][T25517] openvswitch: netlink: Flow key attr not present in new flow.
[  716.870888][T25536] bond6: Removing last arp target with arp_interval on
[  717.147277][T25554] IPv6: NLM_F_CREATE should be specified when creating new route
[  717.326571][T25563] syzkaller0: entered promiscuous mode
[  717.338391][T25563] syzkaller0: entered allmulticast mode
[  717.357880][T25563] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  717.394018][T25563] xt_hashlimit: size too large, truncated to 1048576
[  717.419525][T25566] validate_nla: 12 callbacks suppressed
[  717.419542][T25566] netlink: 'syz.0.5250': attribute type 1 has an invalid length.
[  717.489823][T25571] bond9: (slave gre0): Device is not bonding slave
[  717.501789][T25571] bond9: option active_slave: invalid value (gre0)
[  717.516915][T25571] bond9 (unregistering): Released all slaves
[  719.753038][T25599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  719.987730][T25623] netlink: 'syz.2.5265': attribute type 5 has an invalid length.
[  720.030460][T25624] IPVS: persistence engine module ip_vs_pe_À
 not found
[  720.060850][T25624] __nla_validate_parse: 15 callbacks suppressed
[  720.060868][T25624] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5264'.
[  720.198537][T25636] netlink: 'syz.4.5269': attribute type 1 has an invalid length.
[  720.367679][T25636] bond7: entered promiscuous mode
[  720.393881][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5274'.
[  720.395859][T25636] 8021q: adding VLAN 0 to HW filter on device bond7
[  720.418796][T25643] lo speed is unknown, defaulting to 1000
[  720.444304][T25643] lo speed is unknown, defaulting to 1000
[  720.453704][T25643] lo speed is unknown, defaulting to 1000
[  720.632530][T25666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5279'.
[  720.686822][T25666] netlink: 'syz.3.5279': attribute type 8 has an invalid length.
[  721.089219][T25643] infiniband syz0: set active
[  721.102420][T25643] infiniband syz0: added lo
[  721.135558][T25643] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  721.151274][T25643] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  721.170657][T25689] veth9: entered allmulticast mode
[  721.174380][T25643] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  721.199973][ T5754] lo speed is unknown, defaulting to 1000
[  721.220162][T25643] RDS/IB: syz0: added
[  721.225240][T25643] smc: adding ib device syz0 with port count 1
[  721.231497][T25643] smc:    ib device syz0 port 1 has no pnetid
[  721.286371][ T5754] lo speed is unknown, defaulting to 1000
[  721.286959][T25691] syz_tun: entered allmulticast mode
[  721.305168][T25643] lo speed is unknown, defaulting to 1000
[  721.308467][T25696] netlink: 'syz.3.5287': attribute type 1 has an invalid length.
[  721.312470][T25702] ±ÿ: entered promiscuous mode
[  721.336658][T25696] nbd: error processing sock list
[  721.348448][T25702] ±ÿ: left allmulticast mode
[  721.367104][T25702] netlink: 'syz.0.5289': attribute type 2 has an invalid length.
[  721.396949][T25702] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  721.530655][T25710] x_tables: unsorted entry at hook 1
[  721.688129][T25716] netlink: 'syz.4.5293': attribute type 5 has an invalid length.
[  721.744946][T25719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5294'.
[  721.759188][T25721] ip6tnl0: Caught tx_queue_len zero misconfig
[  721.796672][T25723] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5294'.
[  721.812254][T25725] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5296'.
[  721.842108][T25723] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5294'.
[  721.884378][T25723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5294'.
[  721.904818][T25719] netlink: 'syz.3.5294': attribute type 3 has an invalid length.
[  721.925103][T25719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5294'.
[  721.971110][T25735] tipc: New replicast peer: 255.255.255.255
[  722.004035][T25735] tipc: Enabled bearer <udp:syz2>, priority 10
[  722.024718][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5300'.
[  722.188679][T25737] syzkaller0: entered promiscuous mode
[  722.203443][T25737] syzkaller0: entered allmulticast mode
[  722.220358][T25643] lo speed is unknown, defaulting to 1000
[  724.252918][T25769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  724.262468][T25769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  724.520698][T25643] lo speed is unknown, defaulting to 1000
[  724.526650][T20548] tipc: Node number set to 3031167
[  724.952089][T25643] lo speed is unknown, defaulting to 1000
[  725.467970][T25643] lo speed is unknown, defaulting to 1000
[  725.496173][T25813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5319'.
[  725.669104][T25831] nbd: must specify an index to disconnect
[  725.882212][T25643] lo speed is unknown, defaulting to 1000
[  726.023270][T25845] IPVS: set_ctl: invalid protocol: 20551 10.1.1.2:0
[  726.485569][T25877] xfrm1: entered allmulticast mode
[  726.578716][T25885] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5337'.
[  726.746075][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5339'.
[  726.970247][T11845] IPVS: starting estimator thread 0...
[  726.973211][T25899] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  727.019623][T25906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5345'.
[  727.066346][T25902] IPVS: using max 28 ests per chain, 67200 per kthread
[  727.086106][T25909] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5344'.
[  727.483720][T25930] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  727.834785][T25914] netlink: 'syz.3.5346': attribute type 16 has an invalid length.
[  727.851861][T25914] netlink: 'syz.3.5346': attribute type 17 has an invalid length.
[  727.878400][T25914] ip_vti0: left promiscuous mode
[  727.913102][T25952] x_tables: duplicate underflow at hook 4
[  727.924125][T25914] team0: left promiscuous mode
[  727.935981][T25914] team_slave_0: left promiscuous mode
[  727.944842][T25914] team_slave_1: left promiscuous mode
[  727.964058][T25914] veth1_to_bridge: left allmulticast mode
[  727.986211][T25914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  728.006447][  T334] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.013678][  T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.170926][T25961] bond9: entered allmulticast mode
[  728.177938][T25961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5356'.
[  728.258889][T25965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5357'.
[  728.308814][T25967] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  728.320457][T25967] bond7 (unregistering): Released all slaves
[  728.456741][T25978] netlink: 'syz.3.5362': attribute type 1 has an invalid length.
[  728.472157][T25979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5361'.
[  728.483341][T25979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5361'.
[  729.006515][T26013] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5372'.
[  729.563673][T26036] netlink: 'syz.2.5379': attribute type 21 has an invalid length.
[  729.935748][T26055] syzkaller0: entered promiscuous mode
[  729.962804][T26055] syzkaller0: entered allmulticast mode
[  729.981825][T26055] bond0: Caught tx_queue_len zero misconfig
[  730.067800][T26068] netlink: 'syz.3.5386': attribute type 83 has an invalid length.
[  730.086028][T26060] netlink: 'syz.4.5385': attribute type 2 has an invalid length.
[  730.093413][T26068] netlink: 'syz.3.5386': attribute type 83 has an invalid length.
[  730.119652][T26066] netlink: 'syz.4.5385': attribute type 2 has an invalid length.
[  730.151738][T26066] netlink: 'syz.4.5385': attribute type 11 has an invalid length.
[  730.157611][T26068] netlink: 'syz.3.5386': attribute type 83 has an invalid length.
[  730.679863][T26110] IPVS: length: 239 != 24
[  731.038999][T26137] bond14: entered promiscuous mode
[  731.054488][T26137] macvlan0: entered promiscuous mode
[  731.060009][T26137] macvlan0: entered allmulticast mode
[  731.066588][T26137] bond14: (slave macvlan0): Opening slave failed
[  731.272424][T26155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  731.335970][T26155] bond8: option arp_all_targets: invalid value (18446744073709551613)
[  731.347179][T26155] bond8 (unregistering): Released all slaves
[  731.584397][T26174] xt_TCPMSS: Only works on TCP SYN packets
[  731.619742][T26178] tunl0: Caught tx_queue_len zero misconfig
[  731.663895][T26174] vlan3: entered allmulticast mode
[  731.675791][T26174] bond0: entered allmulticast mode
[  731.681270][T26174] bridge1: entered allmulticast mode
[  731.789730][T26180] 8021q: adding VLAN 0 to HW filter on device bond15
[  732.043355][T26190] bond15: (slave veth15): Enslaving as an active interface with a down link
[  732.310692][T26212] __nla_validate_parse: 6 callbacks suppressed
[  732.310733][T26212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5429'.
[  732.414555][T26203] 8021q: adding VLAN 0 to HW filter on device bond16
[  732.452396][T26220] bond16: (slave ip6gretap1): making interface the new active one
[  732.464655][T26220] bond16: (slave ip6gretap1): Enslaving as an active interface with an up link
[  732.617404][T26226] netlink: 372 bytes leftover after parsing attributes in process `syz.0.5434'.
[  732.731512][T26229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  732.810631][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5435'.
[  733.131859][T26263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5442'.
[  733.171565][T26263] validate_nla: 35 callbacks suppressed
[  733.171582][T26263] netlink: 'syz.2.5442': attribute type 1 has an invalid length.
[  733.239414][T26258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5442'.
[  733.524101][T26293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5449'.
[  733.691465][T26302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5449'.
[  733.751647][T26284] 8021q: adding VLAN 0 to HW filter on device bond10
[  733.760352][T26284] bridge0: port 3(bond10) entered blocking state
[  733.770018][T26284] bridge0: port 3(bond10) entered disabled state
[  733.777066][T26284] bond10: entered allmulticast mode
[  733.785753][T26284] bond10: entered promiscuous mode
[  733.927911][T26320] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5453'.
[  733.981834][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5453'.
[  734.000372][T26328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5457'.
[  734.247794][T26340] geneve1: Caught tx_queue_len zero misconfig
[  734.316064][T26346] netlink: 'syz.2.5463': attribute type 1 has an invalid length.
[  734.890824][T26387] veth0: Caught tx_queue_len zero misconfig
[  735.296986][T26418] netlink: 'syz.2.5486': attribute type 1 has an invalid length.
[  735.312561][T26418] netlink: 'syz.2.5486': attribute type 1 has an invalid length.
[  735.453766][T26429] openvswitch: netlink: VLAN attribute unexpected.
[  735.619481][T26442] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  735.789150][T26455] sctp: [Deprecated]: syz.4.5499 (pid 26455) Use of int in maxseg socket option.
[  735.789150][T26455] Use struct sctp_assoc_value instead
[  736.081933][T26461] syzkaller0: entered promiscuous mode
[  736.107142][T26461] syzkaller0: entered allmulticast mode
[  736.262227][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  736.278629][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  736.286866][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  736.299431][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  736.308662][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  738.422795][ T5632] Bluetooth: hci3: command tx timeout
[  738.490757][T26491] pim6reg: entered allmulticast mode
[  738.520993][T26495] pim6reg: left allmulticast mode
[  738.631096][T26510] __nla_validate_parse: 6 callbacks suppressed
[  738.631113][T26510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5512'.
[  738.968099][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'.
[  739.095264][T26545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  739.173807][T26545] tipc: Disabling bearer <eth:syzkaller0>
[  739.208891][T26550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  739.222055][T26550] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  739.235698][T26550] gretap1: entered promiscuous mode
[  739.241017][T26550] gretap1: entered allmulticast mode
[  739.373797][T26552] syzkaller0: entered promiscuous mode
[  739.386189][T26552] syzkaller0: entered allmulticast mode
[  739.506732][T26559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5523'.
[  739.828956][T26568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5526'.
[  740.513038][ T5632] Bluetooth: hci3: command tx timeout
[  741.714321][T26478] lo speed is unknown, defaulting to 1000
[  741.720213][T26579] netlink: 'syz.1.5530': attribute type 29 has an invalid length.
[  741.858682][T26588] netlink: get zone limit has 4 unknown bytes
[  741.867140][T26586] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5531'.
[  741.879865][T26588] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  741.905623][T26586] netlink: Unknown conntrack attr (0)
[  741.937886][T26592] netlink: 'syz.4.5534': attribute type 4 has an invalid length.
[  741.948708][T26586] netlink: 'syz.1.5531': attribute type 4 has an invalid length.
[  741.960203][T26592] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5534'.
[  741.983320][T26592] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5534'.
[  742.049203][T26598] openvswitch: netlink: VLAN attribute unexpected.
[  742.570323][T26601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5536'.
[  742.581105][T26601] tipc: Invalid UDP bearer configuration
[  742.581153][T26601] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  742.597849][ T5632] Bluetooth: hci3: command tx timeout
[  742.617611][T26624] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5541'.
[  742.707495][T26624] bond11: entered promiscuous mode
[  742.712901][T26624] bond11: entered allmulticast mode
[  742.718684][T26624] 8021q: adding VLAN 0 to HW filter on device bond11
[  742.867774][T26640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5541'.
[  742.903354][T26478] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.913306][T26478] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.922314][T26478] bridge_slave_0: entered allmulticast mode
[  742.931090][T26478] bridge_slave_0: entered promiscuous mode
[  742.959510][T26478] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.977291][T26478] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.998339][T26478] bridge_slave_1: entered allmulticast mode
[  743.022292][T26478] bridge_slave_1: entered promiscuous mode
[  743.166407][T26653] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  743.183736][T26653] bond11 (unregistering): Released all slaves
[  743.227803][T26478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.252915][T26661] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  743.269290][T26478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.380799][T26478] team0: Port device team_slave_0 added
[  743.400590][T26478] team0: Port device team_slave_1 added
[  743.519383][T26478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.538713][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.565958][T26478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.579561][T26478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.603005][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.632270][T26478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.699634][T26677] sock: sock_timestamping_bind_phc: sock not bind to device
[  743.718697][T26478] hsr_slave_0: entered promiscuous mode
[  743.725592][T26478] hsr_slave_1: entered promiscuous mode
[  743.733288][T26478] debugfs: 'hsr0' already exists in 'hsr'
[  743.739326][T26478] Cannot create hsr debugfs directory
[  743.750633][T26624] lo speed is unknown, defaulting to 1000
[  743.787784][T26679] __nla_validate_parse: 3 callbacks suppressed
[  743.787802][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5554'.
[  743.813607][T26679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5554'.
[  743.854570][T26675] syzkaller0: entered promiscuous mode
[  743.860224][T26675] syzkaller0: entered allmulticast mode
[  743.873615][T26675] 0: reclassify loop, rule prio 0, protocol 800
[  743.931526][T26682] bond3: (slave lo): Releasing backup interface
[  743.947209][T26682] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  743.968627][T26682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  744.102683][T26684] syzkaller0: entered promiscuous mode
[  744.108967][T26684] syzkaller0: entered allmulticast mode
[  744.663180][ T5632] Bluetooth: hci3: command tx timeout
[  745.239462][T26710] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5561'.
[  745.251981][ T5632] block nbd3: Receive control failed (result -32)
[  745.584806][T26723] netlink: 'syz.3.5564': attribute type 11 has an invalid length.
[  745.594631][T26723] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5564'.
[  746.482973][T26727] team0: Device gtp0 is of different type
[  746.881169][T26742] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  747.057134][T26757] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5572'.
[  747.076782][T26758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5572'.
[  747.532226][T26777] netlink: 'syz.3.5576': attribute type 16 has an invalid length.
[  747.559537][T26777] netlink: 'syz.3.5576': attribute type 17 has an invalid length.
[  747.621606][T26778] syzkaller0: entered promiscuous mode
[  747.627360][T26778] syzkaller0: entered allmulticast mode
[  747.658948][T26777] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  748.045990][T26791] netlink: 'syz.3.5579': attribute type 1 has an invalid length.
[  749.854242][T26791] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  750.063345][T26478] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  750.097629][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  750.126191][T26478] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  750.213843][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  750.237160][T26478] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  750.245729][T26818] xt_addrtype: ipv6 does not support BROADCAST matching
[  750.278980][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  750.297869][T26478] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  750.310661][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  750.408370][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5589'.
[  750.451446][T26833] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  750.493908][T26833] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5589'.
[  750.604355][T26478] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.628541][T26478] 8021q: adding VLAN 0 to HW filter on device team0
[  750.655203][T26847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5595'.
[  750.678422][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.685678][T26847] netlink: 572 bytes leftover after parsing attributes in process `syz.3.5595'.
[  750.685680][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.744675][T26845] syzkaller0: entered promiscuous mode
[  750.750361][T26845] syzkaller0: entered allmulticast mode
[  750.767345][T12948] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.774557][T12948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.180741][T26868] netlink: 'syz.1.5600': attribute type 1 has an invalid length.
[  753.022938][T26868] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  753.081479][T26873] netlink: 'syz.3.5601': attribute type 1 has an invalid length.
[  753.150660][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5601'.
[  753.161848][T26878] netlink: 'syz.0.5603': attribute type 3 has an invalid length.
[  753.172133][T26878] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5603'.
[  753.214824][T26873] 8021q: adding VLAN 0 to HW filter on device bond8
[  753.245798][T26879] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  753.269036][T26879] bond8: entered allmulticast mode
[  753.271841][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5605'.
[  753.287036][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5605'.
[  753.296148][T26885] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  753.591295][T26888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  753.848086][T26916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5612'.
[  753.966294][T26924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5614'.
[  754.579230][T26959] xt_CT: You must specify a L4 protocol and not use inversions on it
[  754.591655][ T8876] bond0: (slave bond_slave_0): interface is now down
[  754.595598][T26963] sctp: [Deprecated]: syz.4.5622 (pid 26963) Use of int in max_burst socket option.
[  754.595598][T26963] Use struct sctp_assoc_value instead
[  754.632735][ T8876] bond0: (slave bond_slave_1): interface is now down
[  754.669197][T26964] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  754.703570][T26478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.803679][T12971] bond0: (slave bond_slave_0): interface is now down
[  754.815767][T12971] bond0: (slave bond_slave_1): interface is now down
[  754.818796][T26478] veth0_vlan: entered promiscuous mode
[  754.897358][T26478] veth1_vlan: entered promiscuous mode
[  754.974659][   T79] bond0: (slave bond_slave_0): interface is now down
[  754.995051][   T79] bond0: (slave bond_slave_1): interface is now down
[  755.086485][T26985] ip6tnl4: entered promiscuous mode
[  755.129006][T26478] veth0_macvtap: entered promiscuous mode
[  755.151070][T26478] veth1_macvtap: entered promiscuous mode
[  755.157673][T12971] bond0: (slave bond_slave_0): interface is now down
[  755.174066][T12971] bond0: (slave bond_slave_1): interface is now down
[  755.231000][T12971] bond0: now running without any active interface!
[  755.337543][T26478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  755.385642][T26478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.431162][T27006] netlink: 'syz.0.5635': attribute type 1 has an invalid length.
[  755.444626][T12955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.457885][T12955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.494695][T27014] netlink: 'syz.1.5637': attribute type 5 has an invalid length.
[  755.539698][T27006] 8021q: adding VLAN 0 to HW filter on device bond11
[  755.548192][T12955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.557261][T12955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.582952][T27015] bond11: (slave gretap2): making interface the new active one
[  755.593340][T27015] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  755.949136][T27025] syzkaller0: entered promiscuous mode
[  755.954947][T27025] syzkaller0: entered allmulticast mode
[  758.006298][T12948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  758.030793][T12948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.313424][T27057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  758.345076][T27061] __nla_validate_parse: 45 callbacks suppressed
[  758.345094][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5647'.
[  758.361233][T27057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.405853][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5647'.
[  758.510086][T27067] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5648'.
[  758.647591][T27076] netlink: 'syz.2.5502': attribute type 1 has an invalid length.
[  758.673462][T27076] netlink: 'syz.2.5502': attribute type 4 has an invalid length.
[  758.704419][T27076] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.5502'.
[  758.788879][T27078] bond12: option mode: invalid value (133)
[  758.796256][T27078] bond12 (unregistering): Released all slaves
[  759.008557][T27088] syzkaller0: entered promiscuous mode
[  759.021900][T27088] syzkaller0: entered allmulticast mode
[  759.080216][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'.
[  759.147643][T27114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5660'.
[  759.297289][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5662'.
[  761.245995][T27117] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  761.375265][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'.
[  761.395970][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'.
[  761.417680][T27141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5666'.
[  762.110760][T27178] syzkaller0: entered promiscuous mode
[  762.127102][T27178] syzkaller0: entered allmulticast mode
[  762.141414][T27180] syzkaller0: entered promiscuous mode
[  762.150040][T27180] syzkaller0: entered allmulticast mode
[  762.158393][T27185] ip6tnl0: Caught tx_queue_len zero misconfig
[  762.388533][T27201] ip6t_srh: unknown srh invflags 4000
[  762.394771][T27203] ip6t_srh: unknown srh invflags 4000
[  764.683338][T27223] __nla_validate_parse: 10 callbacks suppressed
[  764.683356][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'.
[  764.709203][T27224] netlink: zone id is out of range
[  764.715115][T27224] netlink: zone id is out of range
[  764.721378][T27224] netlink: zone id is out of range
[  764.738763][T27224] netlink: zone id is out of range
[  764.756547][T27224] netlink: zone id is out of range
[  764.776754][T27224] netlink: zone id is out of range
[  764.806667][T27224] netlink: zone id is out of range
[  764.817780][T27224] netlink: zone id is out of range
[  764.829255][T27224] netlink: zone id is out of range
[  764.845515][T27224] netlink: zone id is out of range
[  764.855166][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5697'.
[  764.859025][T27236] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5696'.
[  764.871016][T27237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5697'.
[  764.884391][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5697'.
[  764.893939][T27237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5697'.
[  764.904990][T27239] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5698'.
[  764.917231][T27237] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5697'.
[  764.941750][T27239] geneve3: entered promiscuous mode
[  764.950508][ T8873] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53487 - 0
[  764.955680][T27236] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5696'.
[  764.975611][ T8873] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53487 - 0
[  764.987720][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5698'.
[  765.001142][ T8873] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53487 - 0
[  765.044796][T12952] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53487 - 0
[  765.056450][T27236] netlink: 'syz.2.5696': attribute type 2 has an invalid length.
[  765.225672][T27263] team_slave_1: Caught tx_queue_len zero misconfig
[  765.574135][T27292] tipc: Started in network mode
[  765.579191][T27292] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  765.589011][T27292] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  765.598140][T27293] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  765.630638][T27294] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  765.646015][T27294] bond1 (unregistering): Released all slaves
[  765.670395][T27297] netlink: 'syz.3.5714': attribute type 1 has an invalid length.
[  765.792181][T27303] netlink: 'syz.4.5716': attribute type 142 has an invalid length.
[  765.999791][T27315] netlink: 'syz.3.5719': attribute type 30 has an invalid length.
[  766.330412][T27339] netlink: 'syz.3.5726': attribute type 10 has an invalid length.
[  766.387890][T27339] 8021q: adding VLAN 0 to HW filter on device team0
[  766.419706][T27339] bond0: (slave team0): Enslaving as an active interface with a down link
[  766.442696][   T12] bond0: (slave team0): link status definitely up
[  766.455713][   T12] bond0: active interface up!
[  766.602724][ T8873] bond0: (slave team0): interface is now down
[  766.612044][ T8873] bond0: now running without any active interface!
[  766.665644][T27367] netlink: 'syz.0.5737': attribute type 1 has an invalid length.
[  766.709553][T27371] Bluetooth: MGMT ver 1.23
[  766.724987][T27367] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  766.755597][T27367] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  766.790786][T27367] bond12: (slave ip6gre1): making interface the new active one
[  766.800736][T27367] bond12: (slave ip6gre1): Enslaving as an active interface with an up link
[  766.824976][T27374] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  766.839791][T27374] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  766.858009][T27374] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  766.884297][T27374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  767.005449][ T8873] smbdirect: ib_dev[syz2] removed
[  767.764759][T27425] IPVS: set_ctl: invalid protocol: 51 172.20.20.12:20001
[  767.815484][T27432] netlink: 'syz.4.5760': attribute type 10 has an invalid length.
[  767.856062][T27432] syz_tun: entered promiscuous mode
[  767.988829][T27458] netlink: 'syz.2.5766': attribute type 29 has an invalid length.
[  768.116943][T27465] netlink: 'syz.2.5766': attribute type 29 has an invalid length.
[  768.218847][T27452] netlink: 'syz.1.5765': attribute type 15 has an invalid length.
[  768.249195][T27056] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  768.259389][T27056] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  768.294158][T27056] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  768.312836][T27056] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  768.980526][T27500] 8021q: adding VLAN 0 to HW filter on device bond1
[  769.101862][T27511] bond1: (slave gretap1): making interface the new active one
[  769.124941][T27511] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  769.538791][T27557] tipc: Resetting bearer <eth:ipvlan0>
[  769.773819][T27581] __nla_validate_parse: 17 callbacks suppressed
[  769.773840][T27581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5794'.
[  769.796118][T27581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5794'.
[  769.852224][T27582] batman_adv: batadv0: Adding interface: dummy0
[  769.869987][T27582] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  769.900611][T27588] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5798'.
[  769.924865][T27582] batman_adv: batadv0: Interface activated: dummy0
[  769.959887][T27595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  769.962374][T27587] net_ratelimit: 46 callbacks suppressed
[  769.962388][T27587] batadv0: mtu less than device minimum
[  769.967204][T27595] IPv6: NLM_F_CREATE should be set when creating new route
[  769.967454][T27595] IPv6: NLM_F_CREATE should be set when creating new route
[  769.993080][T27595] IPv6: NLM_F_CREATE should be set when creating new route
[  769.996079][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.014550][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.019830][T27598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  770.026305][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.043844][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.054982][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.066648][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.078349][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.089583][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.101295][T27587] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  770.331036][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5801'.
[  770.346141][T27613] validate_nla: 3 callbacks suppressed
[  770.346176][T27613] netlink: 'syz.4.5804': attribute type 1 has an invalid length.
[  770.418161][T27602] syzkaller0: entered promiscuous mode
[  770.426180][T27602] syzkaller0: entered allmulticast mode
[  770.489070][T27613] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  770.932921][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5812'.
[  773.024078][T27666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5814'.
[  773.036281][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5815'.
[  773.147896][T27673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5818'.
[  773.165400][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5816'.
[  773.277578][T27686] "syz.1.5821" (27686) uses obsolete ecb(arc4) skcipher
[  773.311871][T27689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5822'.
[  773.480967][T27701] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  773.575925][T27704] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  773.773637][T27719] ±ÿ: Caught tx_queue_len zero misconfig
[  774.047270][T27737] netlink: 'syz.3.5837': attribute type 5 has an invalid length.
[  774.846087][T27786] __nla_validate_parse: 3 callbacks suppressed
[  774.846105][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'.
[  774.882111][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'.
[  775.013959][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'.
[  775.035154][T27802] net_ratelimit: 12 callbacks suppressed
[  775.035172][T27802] openvswitch: netlink: Missing key (keys=40, expected=80)
[  775.087016][T27807] netlink: 'syz.4.5856': attribute type 1 has an invalid length.
[  775.122159][T27807] bond8: entered promiscuous mode
[  775.128486][T27807] 8021q: adding VLAN 0 to HW filter on device bond8
[  775.170680][T27810] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  775.227935][T27807] bridge6: entered promiscuous mode
[  775.233592][T27057] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  775.252126][T27807] bond8: (slave bridge6): Enslaving as an active interface with an up link
[  775.265851][T27818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5857'.
[  775.318725][T27811] veth11: entered promiscuous mode
[  775.329582][T27811] veth11: entered allmulticast mode
[  775.344824][T27811] bond8: (slave veth11): Enslaving as a backup interface with a down link
[  775.411198][T12948] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  775.496613][T27825] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5860'.
[  775.637530][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5862'.
[  775.650988][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5862'.
[  776.043001][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5869'.
[  776.066038][T27863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5870'.
[  776.088705][T27863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5870'.
[  776.587059][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  776.598474][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  776.610641][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  776.626250][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  776.637533][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  776.704467][T27893] syzkaller0: entered promiscuous mode
[  776.738903][T27893] syzkaller0: entered allmulticast mode
[  776.851830][T27902] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  777.011450][T27901] syzkaller0: entered promiscuous mode
[  777.018047][T27901] syzkaller0: entered allmulticast mode
[  777.140945][T27911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.196765][T27913] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  778.746159][ T5625] Bluetooth: hci5: command tx timeout
[  779.268654][T27913] C: entered promiscuous mode
[  779.278272][T27913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  779.633200][T27930] syzkaller0: entered promiscuous mode
[  779.638761][T27930] syzkaller0: entered allmulticast mode
[  780.823061][ T5625] Bluetooth: hci5: command tx timeout
[  782.380094][T27996] syzkaller0: entered promiscuous mode
[  782.388516][T27998] rdma_op ffff88807c33e1f0 conn xmit_rdma 0000000000000000
[  782.396144][T27996] syzkaller0: entered allmulticast mode
[  782.419776][T27891] lo speed is unknown, defaulting to 1000
[  782.883194][T28023] __nla_validate_parse: 5 callbacks suppressed
[  782.884558][T28023] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5913'.
[  782.903331][ T5625] Bluetooth: hci5: command tx timeout
[  783.437133][T28049] 
: renamed from bond0
[  783.482905][T27891] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.490276][T27891] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.499062][T27891] bridge_slave_0: entered allmulticast mode
[  783.508438][T27891] bridge_slave_0: entered promiscuous mode
[  783.520492][T27891] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.528572][T27891] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.538719][T27891] bridge_slave_1: entered allmulticast mode
[  783.547632][T27891] bridge_slave_1: entered promiscuous mode
[  783.587796][T27891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.601874][T27891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.675934][T27891] team0: Port device team_slave_0 added
[  783.698172][T27891] team0: Port device team_slave_1 added
[  783.829385][T27891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  783.851697][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  783.879999][T27891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  783.888134][T28080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5926'.
[  783.893228][T27891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  783.908024][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  783.937692][T27891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  784.099481][T27891] hsr_slave_0: entered promiscuous mode
[  784.113735][T27891] hsr_slave_1: entered promiscuous mode
[  784.131253][T27891] debugfs: 'hsr0' already exists in 'hsr'
[  784.150646][T27891] Cannot create hsr debugfs directory
[  784.168044][T28094] FAULT_INJECTION: forcing a failure.
[  784.168044][T28094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  784.201620][T28094] CPU: 0 UID: 0 PID: 28094 Comm: syz.1.5928 Not tainted syzkaller #0 PREEMPT(full) 
[  784.201646][T28094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  784.201657][T28094] Call Trace:
[  784.201664][T28094]  <TASK>
[  784.201671][T28094]  dump_stack_lvl+0xe8/0x150
[  784.201697][T28094]  should_fail_ex+0x412/0x560
[  784.201723][T28094]  _copy_from_user+0x2d/0xb0
[  784.201749][T28094]  ___sys_recvmsg+0x175/0x590
[  784.201779][T28094]  ? get_pid_task+0x20/0x1f0
[  784.201800][T28094]  ? get_pid_task+0x20/0x1f0
[  784.201826][T28094]  ? __pfx____sys_recvmsg+0x10/0x10
[  784.201851][T28094]  ? __fget_files+0x2a/0x420
[  784.201886][T28094]  ? __fget_files+0x3a0/0x420
[  784.201917][T28094]  __x64_sys_recvmsg+0x1ba/0x2a0
[  784.201944][T28094]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  784.201974][T28094]  ? __pfx_ksys_write+0x10/0x10
[  784.202007][T28094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.202025][T28094]  do_syscall_64+0x15f/0xf80
[  784.202047][T28094]  ? trace_irq_disable+0x3b/0x140
[  784.202073][T28094]  ? clear_bhb_loop+0x40/0x90
[  784.202095][T28094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.202113][T28094] RIP: 0033:0x7fd55079cdd9
[  784.202130][T28094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.202145][T28094] RSP: 002b:00007fd551731028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  784.202165][T28094] RAX: ffffffffffffffda RBX: 00007fd550a15fa0 RCX: 00007fd55079cdd9
[  784.202178][T28094] RDX: 0000000000020100 RSI: 0000200000000040 RDI: 0000000000000003
[  784.202188][T28094] RBP: 00007fd551731090 R08: 0000000000000000 R09: 0000000000000000
[  784.202199][T28094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  784.202209][T28094] R13: 00007fd550a16038 R14: 00007fd550a15fa0 R15: 00007ffe8862ee48
[  784.202240][T28094]  </TASK>
[  784.573452][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'.
[  784.616043][T28118] netlink: 'syz.4.5936': attribute type 1 has an invalid length.
[  784.714618][T28120] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  784.724949][T28120] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  784.738184][T28120] bond9: (slave vxcan1): making interface the new active one
[  784.749339][T28120] bond9: (slave vxcan1): Enslaving as an active interface with an up link
[  784.797745][T28124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  784.889114][T28129] netlink: 'syz.4.5940': attribute type 1 has an invalid length.
[  784.967117][T28139] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5940'.
[  784.982859][ T5625] Bluetooth: hci5: command tx timeout
[  785.027774][T27891] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.038424][T27891] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.119867][T27891] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.141589][T27891] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.243225][T28152] tipc: Invalid UDP bearer configuration
[  785.243273][T28152] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  785.291048][T27891] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.311199][T27891] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.337790][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5948'.
[  785.407810][T27891] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.435740][T27891] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.615391][T28184] netlink: 'syz.0.5955': attribute type 1 has an invalid length.
[  785.630076][T28184] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5955'.
[  785.707919][T28188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5956'.
[  785.719864][T28188] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  785.749019][T28188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5956'.
[  785.795938][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'.
[  785.807171][T28189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5953'.
[  785.859906][T28197] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  786.589008][T28213] netem: change failed
[  786.597944][T28213] netem: change failed
[  786.607108][T28213] netem: change failed
[  786.611973][T28213] netem: change failed
[  786.617980][T28213] netem: change failed
[  786.626981][T28213] netem: change failed
[  786.640034][T28213] netem: change failed
[  786.645425][T28213] netem: change failed
[  786.650061][T28213] netem: change failed
[  786.656187][T28213] netem: change failed
[  786.663521][T28213] netem: change failed
[  786.668461][T28213] netem: change failed
[  786.677374][T28213] netem: change failed
[  786.686500][T28213] netem: change failed
[  786.697084][T28213] netem: change failed
[  786.703773][T28213] netem: change failed
[  786.716914][T28213] netem: change failed
[  786.735374][T28213] netem: change failed
[  786.741960][T28213] netem: change failed
[  786.746889][T28213] netem: change failed
[  786.751514][T28213] netem: change failed
[  786.761027][T28213] netem: change failed
[  786.765832][T28213] netem: change failed
[  786.770416][T28213] netem: change failed
[  786.776797][T28213] netem: change failed
[  786.781435][T28213] netem: change failed
[  786.788683][T28213] netem: change failed
[  786.795174][T28213] netem: change failed
[  786.799804][T28213] netem: change failed
[  786.805815][T28213] netem: change failed
[  786.810960][T28213] netem: change failed
[  786.817816][T28213] netem: change failed
[  786.824919][T28213] netem: change failed
[  786.829624][T28213] netem: change failed
[  786.834525][T28213] netem: change failed
[  786.846833][T28228] macsec3: entered promiscuous mode
[  786.852250][T28228] batadv0: entered promiscuous mode
[  786.858720][T28228] 8021q: adding VLAN 0 to HW filter on device macsec3
[  786.866684][T28228] batadv0: left promiscuous mode
[  786.885411][T28213] netem: change failed
[  786.890821][T28213] netem: change failed
[  786.895833][T28213] netem: change failed
[  786.900272][T28213] netem: change failed
[  786.905639][T28213] netem: change failed
[  786.910055][T28213] netem: change failed
[  786.914884][T28213] netem: change failed
[  786.919451][T28213] netem: change failed
[  786.924569][T28213] netem: change failed
[  786.929753][T28213] netem: change failed
[  786.939677][T28213] netem: change failed
[  786.947929][T28213] netem: change failed
[  786.957037][T28213] netem: change failed
[  786.961724][T28213] netem: change failed
[  786.967125][T28213] netem: change failed
[  786.971679][T28213] netem: change failed
[  786.978295][T28213] netem: change failed
[  786.986235][T28213] netem: change failed
[  786.993475][T28213] netem: change failed
[  786.998167][T28213] netem: change failed
[  787.003192][T28213] netem: change failed
[  787.007782][T28213] netem: change failed
[  787.014386][T28213] netem: change failed
[  787.019947][T28213] netem: change failed
[  787.025803][T28213] netem: change failed
[  787.030439][T28213] netem: change failed
[  787.035482][T28213] netem: change failed
[  787.040128][T28213] netem: change failed
[  787.044869][T28213] netem: change failed
[  787.049489][T28213] netem: change failed
[  787.139220][T28240] netlink: 'syz.1.5970': attribute type 39 has an invalid length.
[  788.475962][T28167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  788.504732][T28246] __nla_validate_parse: 2 callbacks suppressed
[  788.504747][T28246] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5972'.
[  788.505168][T27891] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  788.556286][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  788.565732][T27891] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  788.602389][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  788.618484][T27891] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  788.644660][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  788.672276][T27891] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  788.690409][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  788.790221][T28283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5977'.
[  788.838700][T28283] xt_hashlimit: size too large, truncated to 1048576
[  788.909175][T28288] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5977'.
[  788.982932][T27891] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.018513][T27891] 8021q: adding VLAN 0 to HW filter on device team0
[  789.035807][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.043037][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.085127][T27057] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.092307][T27057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.093381][T28299] netlink: 788 bytes leftover after parsing attributes in process `syz.1.5983'.
[  789.340518][T28307] bond3: (slave 
2
6±ÿ): Releasing backup interface
[  789.360789][T28307] bond3: (slave 
2
6±ÿ): last VLAN challenged slave left bond - VLAN blocking is removed
[  789.373135][T28307] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  789.410807][T28304] syzkaller0: entered promiscuous mode
[  789.445200][T28304] syzkaller0: entered allmulticast mode
[  789.457692][T28319] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5988'.
[  789.537105][T28304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5984'.
[  789.577770][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5989'.
[  789.588544][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5989'.
[  789.659703][T28326] erspan0: entered promiscuous mode
[  789.668022][T28326] erspan0: left promiscuous mode
[  789.724893][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5989'.
[  789.752426][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5989'.
[  789.806918][T28326] erspan0: entered promiscuous mode
[  790.599796][T28326] erspan0: left promiscuous mode
[  790.628320][T28347] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.812250][T28357] netlink: 'syz.0.5996': attribute type 29 has an invalid length.
[  790.837758][T28359] netlink: 'syz.0.5996': attribute type 29 has an invalid length.
[  790.989756][T28368] team0: Failed to send options change via netlink (err -105)
[  791.003513][T28368] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  791.014456][T28368] team0: Port device team_slave_0 removed
[  791.096882][T27891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.213868][T28387] bond0: Error: Cannot enslave bond to itself.
[  791.296849][T27891] veth0_vlan: entered promiscuous mode
[  791.334812][T27891] veth1_vlan: entered promiscuous mode
[  791.423404][T27891] veth0_macvtap: entered promiscuous mode
[  791.438874][T27891] veth1_macvtap: entered promiscuous mode
[  791.478995][T27891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.510174][T27891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.548334][ T8874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.564274][ T8874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.595564][ T8874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.170394][ T8874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.511233][T28415] netlink: 'syz.2.6012': attribute type 64 has an invalid length.
[  792.615513][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.650745][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.780652][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.783809][ T8874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.793568][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.803179][ T8874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.830181][T28422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  792.988222][T28429] xt_CT: You must specify a L4 protocol and not use inversions on it
[  793.096450][T28441] vlan2: entered promiscuous mode
[  793.106442][T28441] hsr0: entered promiscuous mode
[  793.114078][T28441] vlan2: entered allmulticast mode
[  793.123514][T28441] hsr0: entered allmulticast mode
[  793.129186][T28441] hsr_slave_0: entered allmulticast mode
[  793.137481][T28441] hsr_slave_1: entered allmulticast mode
[  793.405626][T28466] Cannot find add_set index 4 as target
[  793.429174][T28464] netlink: 'syz.4.6027': attribute type 8 has an invalid length.
[  793.639992][T28478] C: left promiscuous mode
[  793.653105][T28461] netlink: 'syz.3.6026': attribute type 21 has an invalid length.
[  793.662970][T28478] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  793.680311][T28482] __nla_validate_parse: 7 callbacks suppressed
[  793.680326][T28482] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6034'.
[  793.718436][T28483] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6034'.
[  793.745000][T28461] netlink: 'syz.3.6026': attribute type 1 has an invalid length.
[  793.768113][T28461] syzkaller1: entered promiscuous mode
[  793.804380][T28461] syzkaller1: entered allmulticast mode
[  793.837298][T28493] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  794.456321][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  794.475533][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  794.484438][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  794.492010][T28520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6044'.
[  794.492460][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  794.511090][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  794.624874][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6044'.
[  794.741877][T16916] syz_tun (unregistering): left allmulticast mode
[  794.930396][T28541] netlink: 'syz.1.6052': attribute type 15 has an invalid length.
[  794.945676][T28544] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6054'.
[  794.958392][T28541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6052'.
[  795.356539][T28574] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6061'.
[  795.377160][T28572] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6059'.
[  795.561016][T28590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  795.676570][T28598] Cannot find set identified by id 0 to match
[  795.776468][T28603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6070'.
[  795.791098][T28601] netlink: 'syz.1.6069': attribute type 21 has an invalid length.
[  795.793203][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6070'.
[  795.819490][T28601] IPv6: NLM_F_CREATE should be specified when creating new route
[  795.846984][T28611] x_tables: duplicate underflow at hook 1
[  796.231373][T28514] lo speed is unknown, defaulting to 1000
[  796.231819][T28622] netlink: zone id is out of range
[  796.246156][T28622] netlink: zone id is out of range
[  796.251314][T28622] netlink: zone id is out of range
[  796.256693][T28622] netlink: zone id is out of range
[  796.261859][T28622] netlink: zone id is out of range
[  796.269363][T28622] netlink: zone id is out of range
[  796.275030][T28622] netlink: zone id is out of range
[  796.489559][T28639] netlink: 'syz.2.6079': attribute type 14 has an invalid length.
[  796.551888][  T334] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  796.551905][T28639] netlink: 'syz.2.6079': attribute type 14 has an invalid length.
[  796.583577][ T5632] Bluetooth: hci2: command tx timeout
[  796.613046][  T334] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  796.637533][  T334] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  796.653852][  T334] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  796.984200][T28514] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.991503][T28514] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.999370][T28514] bridge_slave_0: entered allmulticast mode
[  797.007341][T28514] bridge_slave_0: entered promiscuous mode
[  797.016475][T28514] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.024074][T28514] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.032301][T28514] bridge_slave_1: entered allmulticast mode
[  797.040177][T28514] bridge_slave_1: entered promiscuous mode
[  797.084950][T28514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.097347][T28514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.143418][T28514] team0: Port device team_slave_0 added
[  797.152357][T28514] team0: Port device team_slave_1 added
[  797.191996][T28514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.199375][T28514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.227764][T28514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.242121][T28514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.249681][T28514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.277646][T28514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.450117][T28514] hsr_slave_0: entered promiscuous mode
[  797.476573][T28514] hsr_slave_1: entered promiscuous mode
[  797.487369][T28514] debugfs: 'hsr0' already exists in 'hsr'
[  797.521313][T28514] Cannot create hsr debugfs directory
[  797.582533][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.583760][T28687] netlink: 'syz.1.6089': attribute type 1 has an invalid length.
[  797.606868][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.686700][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.699119][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.722108][T28695] bond0: (slave gretap2): making interface the new active one
[  797.730553][T28695] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  797.762302][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.791717][T28683] netlink: 'syz.3.6090': attribute type 29 has an invalid length.
[  797.920450][T28713] netlink: 'syz.1.6097': attribute type 1 has an invalid length.
[  797.964262][T28716] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000
[  798.222185][T28514] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.238717][T28514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.422413][T28514] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.452694][T28514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.558233][T28514] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.591881][T28514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.662786][ T5632] Bluetooth: hci2: command tx timeout
[  798.695733][T28514] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.714443][T28514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.816307][T28763] netdevsim netdevsim0 
: renamed from netdevsim0
[  798.831561][T28763] __nla_validate_parse: 12 callbacks suppressed
[  798.831578][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'.
[  798.935203][T28769] SET target dimension over the limit!
[  799.048569][T28514] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  799.059668][T28514] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  799.067829][T28514] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  799.079326][T28514] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  799.088325][T28514] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  799.101389][T28514] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  799.109705][T28514] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  799.121008][T28514] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  799.289848][T28514] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.316793][T28514] 8021q: adding VLAN 0 to HW filter on device team0
[  799.330443][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.337666][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.361178][  T334] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.368403][  T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.879867][T28804] tipc: Started in network mode
[  799.892258][T28804] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  799.913757][T28804] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  799.985757][T28809] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  800.135452][T28812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6120'.
[  800.350876][T28514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.481729][T28835] vlan2: entered allmulticast mode
[  800.493461][T28835] bond0: entered allmulticast mode
[  800.499340][T28835] bond_slave_0: entered allmulticast mode
[  800.510825][T28835] bond_slave_1: entered allmulticast mode
[  800.633899][T28880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6130'.
[  800.679252][T28883] nbd: couldn't find a device at index 1048580
[  800.754202][ T5632] Bluetooth: hci2: command tx timeout
[  800.936119][T28514] veth0_vlan: entered promiscuous mode
[  800.951455][T28514] veth1_vlan: entered promiscuous mode
[  801.001263][T28514] veth0_macvtap: entered promiscuous mode
[  801.019132][T28514] veth1_macvtap: entered promiscuous mode
[  801.036677][T20661] tipc: Node number set to 10136234
[  801.039345][T28909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  801.057638][T28911] Bluetooth: MGMT ver 1.23
[  801.072260][T28514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.121966][T28514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  801.151777][T12950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.162108][T12950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.171568][T12950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.185159][T12950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.824223][ T5632] Bluetooth: hci2: command tx timeout
[  803.717600][T28886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  803.828751][T28850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.859651][T28850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.929026][T28868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.959668][T28868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.964287][T28943] syzkaller1: entered promiscuous mode
[  803.984822][T28943] syzkaller1: entered allmulticast mode
[  804.313555][T28961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6039'.
[  804.456667][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6151'.
[  804.562360][T28969] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.569711][T28969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  804.659755][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  804.681758][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  804.695466][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  804.709068][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  804.720173][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  804.918414][T28984] net_ratelimit: 7 callbacks suppressed
[  804.918432][T28984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  804.997361][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6155'.
[  805.072035][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'.
[  805.103754][T28994] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6156'.
[  805.344174][T29014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6163'.
[  805.358884][T29014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6163'.
[  805.368501][T29015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6162'.
[  805.575032][T29023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6165'.
[  805.783831][T29037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6170'.
[  805.808961][T29037] gretap0: entered promiscuous mode
[  805.816789][T29037] gretap0: left promiscuous mode
[  805.890694][T28872] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  805.914635][T28872] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  805.944682][T28868] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  805.968431][T28868] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  806.273226][T28977] lo speed is unknown, defaulting to 1000
[  806.743839][ T5625] Bluetooth: hci4: command tx timeout
[  807.199151][T28977] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.211016][T28977] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.219722][T28977] bridge_slave_0: entered allmulticast mode
[  807.227795][T28977] bridge_slave_0: entered promiscuous mode
[  807.238816][T28977] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.251133][T28977] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.258635][T28977] bridge_slave_1: entered allmulticast mode
[  807.268818][T28977] bridge_slave_1: entered promiscuous mode
[  807.296716][T29114] veth1_macvtap: left promiscuous mode
[  807.323291][T29114] macsec0: entered promiscuous mode
[  807.328578][T29114] macsec0: entered allmulticast mode
[  807.339579][T29119] veth1_macvtap: entered promiscuous mode
[  807.345923][T29119] veth1_macvtap: entered allmulticast mode
[  807.352208][T29119] macsec0: left promiscuous mode
[  807.358970][T29119] macsec0: left allmulticast mode
[  807.365335][T29119] veth1_macvtap: left allmulticast mode
[  807.393747][T28977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.432513][T28977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.607071][T29146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.651342][T28977] team0: Port device team_slave_0 added
[  807.681789][T28977] team0: Port device team_slave_1 added
[  807.729736][T28977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.743317][T28977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.769760][T28977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.788195][T28977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.799276][T28977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.827985][T28977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.896212][T28977] hsr_slave_0: entered promiscuous mode
[  807.903055][T28977] hsr_slave_1: entered promiscuous mode
[  807.910219][T28977] debugfs: 'hsr0' already exists in 'hsr'
[  807.918668][T28977] Cannot create hsr debugfs directory
[  807.926889][T29161] 0·: renamed from hsr0 (while UP)
[  807.937494][T29161] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  808.124788][T28977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.137425][T28977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  808.148603][T28977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53487 - 0
[  808.318953][T28977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.338105][T28977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  808.360148][T28977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53487 - 0
[  808.427125][T28977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.437881][T28977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  808.450798][T28977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53487 - 0
[  808.472218][T29186] : entered promiscuous mode
[  808.537918][T28977] netdevsim netdevsim0 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.548661][T28977] netdevsim netdevsim0 
 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  808.559177][T28977] netdevsim netdevsim0 
 (unregistering): unset [1, 1] type 2 family 0 port 53487 - 0
[  808.823568][ T5625] Bluetooth: hci4: command tx timeout
[  810.327716][T29126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  810.363123][T28977] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  810.418807][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  810.440307][T28977] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  810.488645][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  810.513092][T28977] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  810.527479][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  810.539246][T28977] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  810.559682][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  810.696203][T29194] veth5: entered allmulticast mode
[  810.882189][T29219] bond0: Error: Cannot enslave bond to itself.
[  810.903664][ T5632] Bluetooth: hci4: command tx timeout
[  810.984726][ T5625] block nbd4: Receive control failed (result -32)
[  811.001476][T28977] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.027581][T28977] 8021q: adding VLAN 0 to HW filter on device team0
[  811.069987][T28869] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.077215][T28869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  811.088683][T29230] xt_TPROXY: Can be used only with -p tcp or -p udp
[  811.101386][T28869] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.108614][T28869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  811.158361][T29234] __nla_validate_parse: 5 callbacks suppressed
[  811.158380][T29234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6215'.
[  811.196778][T28977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  811.207514][T28977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  811.284625][T29240] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes.
[  811.325316][T29240] syz.3.6217 (29240) used obsolete PPPIOCDETACH ioctl
[  811.477811][T29249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  811.534875][T29253] lo: Caught tx_queue_len zero misconfig
[  811.630598][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6222'.
[  811.661654][T29256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'.
[  811.808953][T29263] openvswitch: netlink: Duplicate key (type 2).
[  812.237523][T28977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  812.333714][T29291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6231'.
[  812.416971][T28977] veth0_vlan: entered promiscuous mode
[  812.440986][T29291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6231'.
[  812.459595][T29232] lo speed is unknown, defaulting to 1000
[  812.467074][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'.
[  812.498498][T28977] veth1_vlan: entered promiscuous mode
[  812.617391][T28977] veth0_macvtap: entered promiscuous mode
[  812.657954][T28977] veth1_macvtap: entered promiscuous mode
[  812.709264][T28977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  812.750910][T28977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  812.789790][T28872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.834908][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.868282][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.903924][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.984229][ T5625] Bluetooth: hci4: command tx timeout
[  813.275897][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.297237][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.416727][T28873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.438737][T28873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.187808][   T10] IPVS: starting estimator thread 0...
[  814.304077][T29321] IPVS: using max 26 ests per chain, 62400 per kthread
[  814.865806][T29342] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6248'.
[  814.905067][T29341] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6247'.
[  814.932077][T29341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6247'.
[  814.975425][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6241'.
[  815.496298][T29376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  815.538495][T29376] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  815.555838][T29376] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.566506][T29376] gretap1: entered promiscuous mode
[  815.571940][T29376] gretap1: entered allmulticast mode
[  815.826022][T29397] openvswitch: netlink: Flow actions attr not present in new flow.
[  816.039600][T29412] validate_nla: 12 callbacks suppressed
[  816.039619][T29412] netlink: 'syz.2.6268': attribute type 1 has an invalid length.
[  816.331192][T29429] __nla_validate_parse: 5 callbacks suppressed
[  816.331205][T29429] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6273'.
[  816.343153][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.361732][T29432] netlink: 'syz.3.6274': attribute type 10 has an invalid length.
[  816.374311][T29432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6274'.
[  816.388321][T29432] dummy0: entered promiscuous mode
[  816.400358][T29432] bridge0: port 3(dummy0) entered blocking state
[  816.407265][T29432] bridge0: port 3(dummy0) entered disabled state
[  816.415798][T29432] dummy0: entered allmulticast mode
[  816.427341][T29432] bridge0: port 3(dummy0) entered blocking state
[  816.433854][T29432] bridge0: port 3(dummy0) entered forwarding state
[  816.437116][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6274'.
[  816.588049][T29446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6278'.
[  816.616248][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6279'.
[  816.692231][T29447] team0: Port device team_slave_0 removed
[  816.756466][T29451] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  816.766216][T29451] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  816.776914][T29451] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  816.961447][T29467] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  816.973648][T29467] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  817.029896][T29469] xt_hashlimit: size too large, truncated to 1048576
[  817.263617][T29480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  817.297096][T29480] xt_HMARK: proto mask must be zero with L3 mode
[  817.311010][T29480] netlink: 'syz.0.6290': attribute type 21 has an invalid length.
[  817.344330][T29480] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  817.356839][T29480] bond1 (unregistering): Released all slaves
[  817.645462][T29502] netlink: 'syz.2.6297': attribute type 2 has an invalid length.
[  817.687053][T29502] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6297'.
[  817.708439][T29505] netlink: 'syz.2.6297': attribute type 1 has an invalid length.
[  817.721276][T29505] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6297'.
[  817.747087][T29505] workqueue: Failed to create a rescuer kthread for wq "phy5-mac-cmds": -EINTR
[  817.839231][T29513] xt_hashlimit: size too large, truncated to 1048576
[  817.896948][T29516] x_tables: unsorted underflow at hook 1
[  817.909425][T29523] netlink: 'syz.2.6301': attribute type 1 has an invalid length.
[  817.910310][T29521] tipc: Resetting bearer <eth:ipvlan0>
[  817.934865][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6301'.
[  818.002338][T29529] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6302'.
[  818.045045][T29529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6302'.
[  818.172069][T29537] syzkaller0: entered promiscuous mode
[  818.192412][T29537] syzkaller0: entered allmulticast mode
[  818.299012][T29541] netlink: 'syz.2.6308': attribute type 12 has an invalid length.
[  818.338967][T29541] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode
[  818.362375][T29541] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode
[  818.394584][T29546] netlink: 'syz.0.6309': attribute type 1 has an invalid length.
[  818.402536][T29546] netlink: 'syz.0.6309': attribute type 2 has an invalid length.
[  818.853569][T29567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  818.880972][T28873] gretap0: left promiscuous mode
[  818.891398][T28873] bridge0: port 3(gretap0) entered disabled state
[  818.921088][T28873] bridge_slave_1: left promiscuous mode
[  818.937528][T28873] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.985055][T28873] ¾x9ÿ: left promiscuous mode
[  818.991279][T28873] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  819.217300][T28873] bond16 (unregistering): (slave ip6gretap1): Releasing active interface
[  819.426494][T29610] can: request_module (can-proto-0) failed.
[  819.435661][T28873] bond12 (unregistering): (slave gretap2): Releasing active interface
[  819.440748][T29606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  819.777395][T28873] bond0 (unregistering): (slave bridge5): Releasing backup interface
[  820.029394][T28873] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.038648][T28873] .`¹ (unregistering): Released all slaves
[  820.048894][T28873] bond1 (unregistering): Released all slaves
[  820.066582][T28873] bond2 (unregistering): Released all slaves
[  820.080774][T28873] bond3 (unregistering): Released all slaves
[  820.094487][T28873] bond4 (unregistering): Released all slaves
[  820.120771][T28873] bond5 (unregistering): Released all slaves
[  820.139230][T28873] bond6 (unregistering): Released all slaves
[  820.152450][T28873] bond7 (unregistering): Released all slaves
[  820.167738][T28873] bond8 (unregistering): Released all slaves
[  820.181285][T28873] bond9 (unregistering): Released all slaves
[  820.200917][T28873] bond10 (unregistering): Released all slaves
[  820.222755][T28873] bond11 (unregistering): Released all slaves
[  820.240420][T28873] bond0 (unregistering): Released all slaves
[  820.256571][T28873] bond12 (unregistering): Released all slaves
[  820.277895][T28873] bond13 (unregistering): Released all slaves
[  820.291195][T28873] bond14 (unregistering): Released all slaves
[  820.306931][T28873] bond15 (unregistering): (slave veth15): Releasing active interface
[  820.322343][T28873] bond15 (unregistering): Released all slaves
[  820.339303][T28873] bond16 (unregistering): Released all slaves
[  820.355217][T29600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.429027][T29600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.533052][T29603] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.540817][T29603] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.566190][T29603] bridge0: entered promiscuous mode
[  820.838956][T28873] : left promiscuous mode
[  820.978483][T29623] team0: Cannot enslave team device to itself
[  821.049498][T28873] tipc: Disabling bearer <udp:syz2>
[  821.066037][T28873] tipc: Left network mode
[  821.201076][T29635] netlink: 'syz.0.6332': attribute type 10 has an invalid length.
[  821.245900][T29643] netlink: 'syz.0.6332': attribute type 10 has an invalid length.
[  821.264549][T29635] syz_tun: entered promiscuous mode
[  821.312181][T29635] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  821.561781][T29659] __nla_validate_parse: 3 callbacks suppressed
[  821.561799][T29659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6336'.
[  821.952215][T29670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.993421][T29670] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6340'.
[  822.297209][T29684] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6343'.
[  822.313750][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'.
[  822.574651][T29697] netlink: 'syz.3.6346': attribute type 2 has an invalid length.
[  822.908767][T29707] netlink: 'syz.3.6348': attribute type 2 has an invalid length.
[  823.943305][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.961212][T29757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6359'.
[  824.046772][T29762] netlink: 'syz.0.6361': attribute type 28 has an invalid length.
[  824.097491][T29762] netlink: 'syz.0.6361': attribute type 3 has an invalid length.
[  824.135820][T29762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6361'.
[  824.184429][T28873] hsr_slave_0: left promiscuous mode
[  824.203740][T28873] hsr_slave_1: left promiscuous mode
[  824.215931][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6363'.
[  824.220899][T28873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  824.255153][T29776] xt_connbytes: Forcing CT accounting to be enabled
[  824.269489][T28873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  824.389477][T29776] xt_CT: No such helper "netbios-ns"
[  824.715259][T28873] team0 (unregistering): Port device team_slave_1 removed
[  824.747115][T28873] team0 (unregistering): Port device team_slave_0 removed
[  825.011648][T29785] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.018882][T29785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  825.026488][T29785] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.033693][T29785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  825.126798][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6368'.
[  825.137656][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6368'.
[  825.185989][T29813] syzkaller1: entered promiscuous mode
[  825.203686][T29813] syzkaller1: entered allmulticast mode
[  825.221679][T20662] IPVS: starting estimator thread 0...
[  825.324256][T29818] IPVS: using max 29 ests per chain, 69600 per kthread
[  825.443374][T29827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6371'.
[  825.570901][T29833] x_tables: duplicate entry at hook 2
[  825.658928][T29838] siw: device registration error -23
[  825.744519][T28873] IPVS: stop unused estimator thread 0...
[  825.804443][T29851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  825.811756][T29851] IPv6: NLM_F_CREATE should be set when creating new route
[  825.880482][T29850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  826.081931][T29869] ip6tnl1: entered promiscuous mode
[  826.279292][T29883] openvswitch: netlink: Duplicate or invalid key (type 0).
[  826.297213][T29883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.302100][T29884] netlink: 'syz.2.6385': attribute type 2 has an invalid length.
[  826.317047][T29881] x_tables: duplicate underflow at hook 2
[  826.701896][T29900] netlink: 'syz.0.6394': attribute type 11 has an invalid length.
[  826.828434][T29909] --map-set only usable from mangle table
[  826.850098][T29909] --map-set only usable from mangle table
[  827.001585][T29916] ip6tnl0: Caught tx_queue_len zero misconfig
[  827.190379][T29929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  827.224521][T29934] __nla_validate_parse: 7 callbacks suppressed
[  827.224534][T29934] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6406'.
[  827.274456][T29936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6407'.
[  827.274999][T29937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6407'.
[  827.382507][T29941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6409'.
[  827.778079][T29960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6415'.
[  827.802395][T29962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'.
[  827.837764][T29962] vlan4: entered allmulticast mode
[  827.843165][T29962] bridge4: entered allmulticast mode
[  827.879493][T29962] bond2 (unregistering): Released all slaves
[  827.903332][T29965] bridge13: entered promiscuous mode
[  827.909133][T29965] bridge13: entered allmulticast mode
[  828.065658][T29974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6419'.
[  828.120193][T29976] tipc: Started in network mode
[  828.127994][T29976] tipc: Node identity 12dc0f0b6a9b, cluster identity 4711
[  828.146998][T29976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.170563][T29976] syzkaller0: entered promiscuous mode
[  828.176413][T29976] syzkaller0: entered allmulticast mode
[  828.215206][T29976] tipc: Resetting bearer <eth:syzkaller0>
[  828.226081][T29975] tipc: Resetting bearer <eth:syzkaller0>
[  828.248494][T29975] tipc: Disabling bearer <eth:syzkaller0>
[  828.270920][T29983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6423'.
[  828.349865][T29985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6424'.
[  828.360304][T29985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6424'.
[  828.628403][T30000] batadv1: entered allmulticast mode
[  828.755964][T29994] nbd5: detected capacity change from 0 to 63
[  828.771925][ T5632] block nbd5: Receive control failed (result -32)
[  828.772283][ T5625] block nbd5: Receive control failed (result -32)
[  828.799530][T29848] block nbd5: Send control failed (result -32)
[  828.818316][T29848] block nbd5: Request send failed, requeueing
[  828.868034][ T2452] block nbd5: Dead connection, failed to find a fallback
[  828.880996][ T2452] block nbd5: shutting down sockets
[  828.887830][ T2452] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  828.901429][ T2452] Buffer I/O error on dev nbd5, logical block 0, async page read
[  828.913788][T29848] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  828.923834][T29848] Buffer I/O error on dev nbd5, logical block 1, async page read
[  828.944583][T29848] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  828.953796][T29848] Buffer I/O error on dev nbd5, logical block 2, async page read
[  828.961742][T29848] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  828.971910][T29848] Buffer I/O error on dev nbd5, logical block 3, async page read
[  828.980003][T29848] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  828.990058][T29848] Buffer I/O error on dev nbd5, logical block 0, async page read
[  828.999079][T29848] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  829.008499][T29848] Buffer I/O error on dev nbd5, logical block 1, async page read
[  829.016744][T29848] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  829.026575][T29848] Buffer I/O error on dev nbd5, logical block 2, async page read
[  829.045581][T29848] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  829.073017][T29848] Buffer I/O error on dev nbd5, logical block 3, async page read
[  829.103115][T29848] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  829.136093][T29848] Buffer I/O error on dev nbd5, logical block 0, async page read
[  829.169381][T29848] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  829.201654][T29848] Buffer I/O error on dev nbd5, logical block 1, async page read
[  829.233284][T20662] IPVS: starting estimator thread 0...
[  829.249004][T29848] ldm_validate_partition_table(): Disk read failed.
[  829.290093][T29848] Dev nbd5: unable to read RDB block 0
[  829.334501][T29848]  nbd5: unable to read partition table
[  829.343456][T30023] IPVS: using max 29 ests per chain, 69600 per kthread
[  829.437089][T29848] ldm_validate_partition_table(): Disk read failed.
[  829.474396][T29848] Dev nbd5: unable to read RDB block 0
[  829.506709][T29848]  nbd5: unable to read partition table
[  829.936722][T30066] Cannot find map_set index 135 as target
[  830.198930][T30079] netlink: 'syz.0.6449': attribute type 12 has an invalid length.
[  830.672498][T30109] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  830.705517][T30113] netlink: 'syz.4.6459': attribute type 1 has an invalid length.
[  830.727633][T30114] netlink: 'syz.4.6459': attribute type 1 has an invalid length.
[  830.840900][T30113] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  830.842225][T30114] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  831.033279][T30137] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  831.140252][T30145] netem: invalid attributes len -5
[  831.155683][T30145] netem: change failed
[  831.290731][T30154] tipc: Started in network mode
[  831.298583][T30154] tipc: Node identity 8000000, cluster identity 4711
[  831.308100][T30154] tipc: Node number set to 134217728
[  831.518272][T30158] 
[  831.520639][T30158] ======================================================
[  831.527639][T30158] WARNING: possible circular locking dependency detected
[  831.534653][T30158] syzkaller #0 Not tainted
[  831.539052][T30158] ------------------------------------------------------
[  831.546049][T30158] syz.4.6472/30158 is trying to acquire lock:
[  831.552095][T30158] ffffffff8f0ac988 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0
[  831.561740][T30158] 
[  831.561740][T30158] but task is already holding lock:
[  831.569087][T30158] ffff88805d453860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  831.571075][T30176] netlink: 'syz.1.6475': attribute type 14 has an invalid length.
[  831.578425][T30158] 
[  831.578425][T30158] which lock already depends on the new lock.
[  831.578425][T30158] 
[  831.578435][T30158] 
[  831.578435][T30158] the existing dependency chain (in reverse order) is:
[  831.578442][T30158] 
[  831.578442][T30158] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  831.578468][T30158]        lock_sock_nested+0x41/0x100
[  831.578488][T30158]        inet_shutdown+0x6a/0x390
[  831.578510][T30158]        nbd_mark_nsock_dead+0x2e9/0x560
[  831.578526][T30158]        recv_work+0x1c2e/0x1d40
[  831.578542][T30158]        process_scheduled_works+0xb5d/0x1860
[  831.578558][T30158]        worker_thread+0xa53/0xfc0
[  831.578573][T30158]        kthread+0x388/0x470
[  831.578592][T30158]        ret_from_fork+0x514/0xb70
[  831.587240][T30176] netlink: 'syz.1.6475': attribute type 13 has an invalid length.
[  831.596760][T30158]        ret_from_fork_asm+0x1a/0x30
[  831.596789][T30158] 
[  831.596789][T30158] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  831.596814][T30158]        __mutex_lock+0x1a3/0x1550
[  831.596832][T30158]        nbd_queue_rq+0x37b/0x1100
[  831.596846][T30158]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  831.596868][T30158]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  831.596890][T30158]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  831.596911][T30158]        blk_mq_run_hw_queue+0x348/0x4f0
[  831.596927][T30158]        blk_mq_dispatch_list+0xd16/0xe10
[  831.596949][T30158]        blk_mq_flush_plug_list+0x48d/0x570
[  831.596971][T30158]        __blk_flush_plug+0x3ed/0x4d0
[  831.596992][T30158]        __submit_bio+0x28d/0x580
[  831.597014][T30158]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  831.597035][T30158]        block_read_full_folio+0x599/0x830
[  831.597052][T30158]        filemap_read_folio+0x137/0x3b0
[  831.597074][T30158]        do_read_cache_folio+0x358/0x590
[  831.597104][T30158]        read_part_sector+0xb6/0x2b0
[  831.597125][T30158]        adfspart_check_ICS+0xb1/0x960
[  831.597146][T30158]        bdev_disk_changed+0x817/0x1770
[  831.597165][T30158]        blkdev_get_whole+0x380/0x510
[  831.777642][T30158]        bdev_open+0x31e/0xd30
[  831.782403][T30158]        blkdev_open+0x470/0x610
[  831.787328][T30158]        do_dentry_open+0x785/0x14e0
[  831.792611][T30158]        vfs_open+0x3b/0x340
[  831.797193][T30158]        path_openat+0x2e08/0x3860
[  831.802323][T30158]        do_file_open+0x23e/0x4a0
[  831.807357][T30158]        do_sys_openat2+0x113/0x200
[  831.812548][T30158]        __x64_sys_openat+0x138/0x170
[  831.817915][T30158]        do_syscall_64+0x15f/0xf80
[  831.823034][T30158]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.829466][T30158] 
[  831.829466][T30158] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  831.836665][T30158]        __mutex_lock+0x1a3/0x1550
[  831.841777][T30158]        nbd_queue_rq+0xc6/0x1100
[  831.846795][T30158]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  831.852856][T30158]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  831.859705][T30158]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  831.866197][T30158]        blk_mq_run_hw_queue+0x348/0x4f0
[  831.871819][T30158]        blk_mq_dispatch_list+0xd16/0xe10
[  831.877536][T30158]        blk_mq_flush_plug_list+0x48d/0x570
[  831.883418][T30158]        __blk_flush_plug+0x3ed/0x4d0
[  831.888779][T30158]        __submit_bio+0x28d/0x580
[  831.893801][T30158]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  831.899944][T30158]        block_read_full_folio+0x599/0x830
[  831.905760][T30158]        filemap_read_folio+0x137/0x3b0
[  831.911295][T30158]        do_read_cache_folio+0x358/0x590
[  831.916916][T30158]        read_part_sector+0xb6/0x2b0
[  831.922191][T30158]        adfspart_check_ICS+0xb1/0x960
[  831.927637][T30158]        bdev_disk_changed+0x817/0x1770
[  831.933181][T30158]        blkdev_get_whole+0x380/0x510
[  831.938540][T30158]        bdev_open+0x31e/0xd30
[  831.943298][T30158]        blkdev_open+0x470/0x610
[  831.948229][T30158]        do_dentry_open+0x785/0x14e0
[  831.953501][T30158]        vfs_open+0x3b/0x340
[  831.958076][T30158]        path_openat+0x2e08/0x3860
[  831.963174][T30158]        do_file_open+0x23e/0x4a0
[  831.968193][T30158]        do_sys_openat2+0x113/0x200
[  831.973394][T30158]        __x64_sys_openat+0x138/0x170
[  831.978750][T30158]        do_syscall_64+0x15f/0xf80
[  831.983862][T30158]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.990260][T30158] 
[  831.990260][T30158] -> #5 (set->srcu){.+.+}-{0:0}:
[  831.997369][T30158]        __synchronize_srcu+0xca/0x300
[  832.002824][T30158]        elevator_switch+0x1e8/0x7a0
[  832.008102][T30158]        elevator_change+0x2cc/0x450
[  832.013381][T30158]        elevator_set_default+0x36c/0x430
[  832.019086][T30158]        blk_register_queue+0x3e9/0x4e0
[  832.024628][T30158]        __add_disk+0x677/0xd50
[  832.029474][T30158]        add_disk_fwnode+0xfb/0x480
[  832.034664][T30158]        nbd_dev_add+0x72c/0xb50
[  832.039592][T30158]        nbd_init+0x168/0x1f0
[  832.044260][T30158]        do_one_initcall+0x250/0x870
[  832.049530][T30158]        do_initcall_level+0x104/0x190
[  832.054976][T30158]        do_initcalls+0x59/0xa0
[  832.059813][T30158]        kernel_init_freeable+0x2a6/0x3e0
[  832.065519][T30158]        kernel_init+0x1d/0x1d0
[  832.070369][T30158]        ret_from_fork+0x514/0xb70
[  832.075481][T30158]        ret_from_fork_asm+0x1a/0x30
[  832.080749][T30158] 
[  832.080749][T30158] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  832.088553][T30158]        __mutex_lock+0x1a3/0x1550
[  832.093651][T30158]        elevator_change+0x1b3/0x450
[  832.098924][T30158]        elevator_set_none+0xb5/0x140
[  832.104290][T30158]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  832.110602][T30158]        nbd_start_device+0x17f/0xb10
[  832.115955][T30158]        nbd_genl_connect+0x165b/0x1cf0
[  832.121484][T30158]        genl_family_rcv_msg_doit+0x22a/0x330
[  832.127557][T30158]        genl_rcv_msg+0x61c/0x7a0
[  832.132571][T30158]        netlink_rcv_skb+0x232/0x4b0
[  832.137841][T30158]        genl_rcv+0x28/0x40
[  832.142328][T30158]        netlink_unicast+0x75c/0x8e0
[  832.147594][T30158]        netlink_sendmsg+0x813/0xb40
[  832.152870][T30158]        ____sys_sendmsg+0x972/0x9f0
[  832.158146][T30158]        ___sys_sendmsg+0x2a5/0x360
[  832.163340][T30158]        __x64_sys_sendmsg+0x1bd/0x2a0
[  832.168783][T30158]        do_syscall_64+0x15f/0xf80
[  832.173880][T30158]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.180278][T30158] 
[  832.180278][T30158] -> #3 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[  832.188865][T30158]        blk_alloc_queue+0x546/0x680
[  832.194141][T30158]        __blk_mq_alloc_disk+0x197/0x390
[  832.199761][T30158]        nbd_dev_add+0x499/0xb50
[  832.204681][T30158]        nbd_init+0x168/0x1f0
[  832.209338][T30158]        do_one_initcall+0x250/0x870
[  832.214616][T30158]        do_initcall_level+0x104/0x190
[  832.220063][T30158]        do_initcalls+0x59/0xa0
[  832.224900][T30158]        kernel_init_freeable+0x2a6/0x3e0
[  832.230602][T30158]        kernel_init+0x1d/0x1d0
[  832.235441][T30158]        ret_from_fork+0x514/0xb70
[  832.240533][T30158]        ret_from_fork_asm+0x1a/0x30
[  832.245816][T30158] 
[  832.245816][T30158] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  832.253014][T30158]        fs_reclaim_acquire+0x71/0x100
[  832.258461][T30158]        __kmalloc_cache_noprof+0x40/0x660
[  832.264267][T30158]        cryptomgr_notify+0x85/0x930
[  832.269541][T30158]        notifier_call_chain+0x1ad/0x3d0
[  832.275169][T30158]        blocking_notifier_call_chain+0x6a/0x90
[  832.281396][T30158]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  832.287194][T30158]        crypto_alloc_tfm_node+0x13e/0x3f0
[  832.292982][T30158]        crypto_alloc_sync_skcipher+0x39/0xd0
[  832.299039][T30158]        rxkad_init+0x20/0xe0
[  832.303705][T30158]        rxrpc_init_security+0x72/0x120
[  832.309235][T30158]        af_rxrpc_init+0x13d/0x2e0
[  832.314326][T30158]        do_one_initcall+0x250/0x870
[  832.319593][T30158]        do_initcall_level+0x104/0x190
[  832.325040][T30158]        do_initcalls+0x59/0xa0
[  832.329878][T30158]        kernel_init_freeable+0x2a6/0x3e0
[  832.335596][T30158]        kernel_init+0x1d/0x1d0
[  832.340437][T30158]        ret_from_fork+0x514/0xb70
[  832.345530][T30158]        ret_from_fork_asm+0x1a/0x30
[  832.350806][T30158] 
[  832.350806][T30158] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[  832.358868][T30158]        down_read+0x47/0x2e0
[  832.363543][T30158]        blocking_notifier_call_chain+0x54/0x90
[  832.369772][T30158]        __crypto_register_alg+0x32b/0x3c0
[  832.375573][T30158]        crypto_register_alg+0x447/0x810
[  832.381199][T30158]        do_one_initcall+0x250/0x870
[  832.386478][T30158]        do_initcall_level+0x104/0x190
[  832.391924][T30158]        do_initcalls+0x59/0xa0
[  832.396767][T30158]        kernel_init_freeable+0x2a6/0x3e0
[  832.402473][T30158]        kernel_init+0x1d/0x1d0
[  832.407321][T30158]        ret_from_fork+0x514/0xb70
[  832.412414][T30158]        ret_from_fork_asm+0x1a/0x30
[  832.417684][T30158] 
[  832.417684][T30158] -> #0 (crypto_alg_sem){++++}-{4:4}:
[  832.425237][T30158]        __lock_acquire+0x15a5/0x2cf0
[  832.430593][T30158]        lock_acquire+0x106/0x350
[  832.435598][T30158]        down_write+0x96/0x200
[  832.440349][T30158]        crypto_alg_mod_lookup+0x211/0x5f0
[  832.446146][T30158]        crypto_alloc_tfm_node+0x13e/0x3f0
[  832.451944][T30158]        tls_set_sw_offload+0xa33/0x1780
[  832.457568][T30158]        tls_setsockopt+0xef2/0x15c0
[  832.462850][T30158]        do_sock_setsockopt+0x17c/0x1b0
[  832.468382][T30158]        __x64_sys_setsockopt+0x13d/0x1b0
[  832.474095][T30158]        do_syscall_64+0x15f/0xf80
[  832.479196][T30158]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.485689][T30158] 
[  832.485689][T30158] other info that might help us debug this:
[  832.485689][T30158] 
[  832.495947][T30158] Chain exists of:
[  832.495947][T30158]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[  832.495947][T30158] 
[  832.508995][T30158]  Possible unsafe locking scenario:
[  832.508995][T30158] 
[  832.516430][T30158]        CPU0                    CPU1
[  832.521777][T30158]        ----                    ----
[  832.527148][T30158]   lock(sk_lock-AF_INET6);
[  832.531641][T30158]                                lock(&nsock->tx_lock);
[  832.538561][T30158]                                lock(sk_lock-AF_INET6);
[  832.545574][T30158]   lock(crypto_alg_sem);
[  832.549905][T30158] 
[  832.549905][T30158]  *** DEADLOCK ***
[  832.549905][T30158] 
[  832.558056][T30158] 1 lock held by syz.4.6472/30158:
[  832.563154][T30158]  #0: ffff88805d453860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  832.572893][T30158] 
[  832.572893][T30158] stack backtrace:
[  832.578772][T30158] CPU: 0 UID: 0 PID: 30158 Comm: syz.4.6472 Not tainted syzkaller #0 PREEMPT(full) 
[  832.578790][T30158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  832.578799][T30158] Call Trace:
[  832.578807][T30158]  <TASK>
[  832.578815][T30158]  dump_stack_lvl+0xe8/0x150
[  832.578833][T30158]  print_circular_bug+0x2e1/0x300
[  832.578854][T30158]  check_noncircular+0x12e/0x150
[  832.578873][T30158]  __lock_acquire+0x15a5/0x2cf0
[  832.578896][T30158]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  832.578911][T30158]  lock_acquire+0x106/0x350
[  832.578924][T30158]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  832.578944][T30158]  down_write+0x96/0x200
[  832.578962][T30158]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  832.578977][T30158]  ? __pfx_down_write+0x10/0x10
[  832.578997][T30158]  ? crypto_larval_alloc+0x1bf/0x290
[  832.579012][T30158]  crypto_alg_mod_lookup+0x211/0x5f0
[  832.579028][T30158]  crypto_alloc_tfm_node+0x13e/0x3f0
[  832.579044][T30158]  ? timer_init_key+0x161/0x2c0
[  832.579065][T30158]  tls_set_sw_offload+0xa33/0x1780
[  832.579093][T30158]  tls_setsockopt+0xef2/0x15c0
[  832.579112][T30158]  ? __pfx_tls_setsockopt+0x10/0x10
[  832.579131][T30158]  ? __fget_files+0x2a/0x420
[  832.579147][T30158]  ? aa_sock_opt_perm+0xff/0x1a0
[  832.579164][T30158]  ? sock_common_setsockopt+0x36/0xc0
[  832.579178][T30158]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  832.579192][T30158]  do_sock_setsockopt+0x17c/0x1b0
[  832.579211][T30158]  __x64_sys_setsockopt+0x13d/0x1b0
[  832.579228][T30158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.579242][T30158]  do_syscall_64+0x15f/0xf80
[  832.579258][T30158]  ? trace_irq_disable+0x3b/0x140
[  832.579278][T30158]  ? clear_bhb_loop+0x40/0x90
[  832.579294][T30158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.579308][T30158] RIP: 0033:0x7f6cd479cdd9
[  832.579322][T30158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.579333][T30158] RSP: 002b:00007f6cd5654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  832.579348][T30158] RAX: ffffffffffffffda RBX: 00007f6cd4a16090 RCX: 00007f6cd479cdd9
[  832.579358][T30158] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005
[  832.579367][T30158] RBP: 00007f6cd4832d69 R08: 0000000000000038 R09: 0000000000000000
[  832.579375][T30158] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  832.579384][T30158] R13: 00007f6cd4a16128 R14: 00007f6cd4a16090 R15: 00007ffc4f580de8
[  832.579401][T30158]  </TASK>
[  832.824083][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079c37000: rx timeout, send abort
[  832.833319][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079c37000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  838.662785][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog