last executing test programs:

2.781831336s ago: executing program 4 (id=7078):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e0", 0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "f4fc2aaecf9a3e83", "257652a2d66752817c4dfdfef66ca83236d3864a6a19677b9b0c32f7fea08567", "6fc3116c", "dbbfd37909afc8de"}, 0x38)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e0", 0x5, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "f4fc2aaecf9a3e83", "257652a2d66752817c4dfdfef66ca83236d3864a6a19677b9b0c32f7fea08567", "6fc3116c", "dbbfd37909afc8de"}, 0x38) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) (async)

2.635470334s ago: executing program 4 (id=7081):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03030040009fb5543d250c00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3079d2a1ca25d3ac)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffff7, 0x54}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8a}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0xb}}, @NL80211_ATTR_BSSID={0xa}]}, 0x68}}, 0x4000)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x58, 0x8, "00279a3e7bc0fb79d9e61c182b130963c1cd381e4a8ede58dfbff172919aa19f3553d73e175fa6d87bbc34ce8af6956d1c1f59133c63343ce4b0f2d51f4b2f652c5998009f0df5bda077d27696f7f8d0fc8475a4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xc, 0x8, "d9f18c3cd307a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x40)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03030040009fb5543d250c00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3079d2a1ca25d3ac) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) (async)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffff7, 0x54}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8a}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0xb}}, @NL80211_ATTR_BSSID={0xa}]}, 0x68}}, 0x4000) (async)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x58, 0x8, "00279a3e7bc0fb79d9e61c182b130963c1cd381e4a8ede58dfbff172919aa19f3553d73e175fa6d87bbc34ce8af6956d1c1f59133c63343ce4b0f2d51f4b2f652c5998009f0df5bda077d27696f7f8d0fc8475a4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xc, 0x8, "d9f18c3cd307a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x40) (async)

2.364982809s ago: executing program 4 (id=7086):
close(0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000002c0)={0x5, &(0x7f00000001c0)=[{0x8, 0xf, 0x2, 0x6}, {0x1000, 0x7, 0x7f, 0x80}, {0x5, 0x2, 0x0, 0x6}, {0x1, 0x3, 0x3, 0x26}, {0x4, 0x81, 0x4, 0x8}]})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x11, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x14, 0x2d, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0)

2.12051455s ago: executing program 1 (id=7091):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7e)
r1 = socket(0x40000000015, 0x5, 0x0)
close(0x3)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

2.008758218s ago: executing program 2 (id=7093):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000001614016a61"], 0x10}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0xe8}}, 0x4000)

1.764614628s ago: executing program 1 (id=7094):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x1)

1.764226357s ago: executing program 2 (id=7095):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x800, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

1.52769781s ago: executing program 2 (id=7096):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400000000001400028005000100060000000800090000000000fbff0000000000000000"], 0x44}}, 0x0)

1.52727099s ago: executing program 1 (id=7097):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r7, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x88, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x44051)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="55ee4addb0838779ff7a51df6a145e9ed9d2b922db8a944a832300dc1f10cbf4ccbb2409629506dba59a", 0x2a}], 0x1}, 0x4)

1.464530062s ago: executing program 0 (id=7098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x270bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x81}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8800)

1.343585976s ago: executing program 0 (id=7100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0)

1.324989709s ago: executing program 4 (id=7101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0xc044801)
sendmsg$nl_generic(r7, 0x0, 0x0)
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r7, 0x0, r8, 0x0, 0x10500, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x7, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x1d, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x6, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r14, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r15 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'hsr0\x00'})
setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)

1.320889951s ago: executing program 2 (id=7102):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
unshare(0x46000480)

1.248570846s ago: executing program 0 (id=7103):
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000117b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.207334895s ago: executing program 0 (id=7104):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000040)={0xb, 0x81})

999.986868ms ago: executing program 1 (id=7106):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) (async)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0xb)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="bbb47c", 0x3}], 0x1) (async, rerun: 64)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 64)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000000c0))
close(0x3)

992.967933ms ago: executing program 3 (id=7107):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)

924.283177ms ago: executing program 3 (id=7108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xa7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a0102"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90)

899.826433ms ago: executing program 0 (id=7109):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6, 0x2}, 0x2, 0xfb}, [{0x2, 0x9c, 0x84, 0x80000001, 0x2, 0x7}, {0x1, 0x7, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x0, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x4, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x6}, {0xfffff9fd, 0x9, 0xf6d, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0xffffff53}, {0x5, 0xa, 0x2, 0x3ff, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x5, 0x8}, {0xf61, 0x301, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7, 0x7fffffff}, {0xfff, 0x47e0, 0x40001, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0x2, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0xffffff01, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x6}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000080}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x3, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x403, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x8, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0xaa}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0xffffffff, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0xb49, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x7, 0x6, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207c}, {0x10, 0x0, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880)

775.58125ms ago: executing program 3 (id=7110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x300, 0x0, 0x0, {}, [{0x4}]}, 0xfffffffffffffdbf}}, 0x8004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000100))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r3, 0x8b1a, &(0x7f0000000040))
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000080)=0x3ff, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

657.675828ms ago: executing program 4 (id=7111):
r0 = socket(0x10, 0x80002, 0x0)
r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc0800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="714dfb897862a2bedf09ee91582a377239cff0fc2be0364f23a579c97a26e5cf6a299a202a14bda7ceff21b1d33c95", 0x2f}, {&(0x7f00000001c0)="9f26b88df802cf85201705aa6a020584375ef7e68171adfaf461df249edd750af0aadd550e08eb6ee38d805d9b31901a353d7f9409031c869cda8bd125df7804eb12a13c25866d953f7d85ce55631e9587a2c32bb7546a89da1a8ebcabbc9316e8d100ec498f3a0728f2bc36ba9e147782ecfb3738bb0b3b10285331a98461ddea38fe4f6f65527287be735f2275e29bbd23071c9e375cc86f13a751ad340718b8b3b3335ecf6cb887bc006d84d105074e7ab9ce28c6035cf34922bc37975a114424b3b294dd0fa005d779d3e916005b2fb221b67f91b34faf8ed0aa76d0", 0xde}, {&(0x7f00000002c0)="e0dbb101aa0408a996b0d3c51296da5f2c8cd4666e853b28eb83f9fbe59b8278baee77091329875a497e9a1aed676f74a1549a47818594250278b8aeac9a1369a9e2655bca2dea93325ce043fba826ad9d52e7c85e12c175bf0e10299822c9c354d9b9564a92f207d5cef6e84424ddfc40565aca8d17c4b6d7a8ab40bfb291417adaffb65829202a3e2314edffbc3899f935390a1db1ea82adc70a81aed76d698f5d768c612c49813e64ea048a90651042385a49a4a065f8cf1b3c5b6e8b32a6c6f7465ad3aafcead6b708", 0xcb}], 0x3, &(0x7f0000000400)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@end, @generic={0x7, 0x8, "ccdb37455c43"}]}}}], 0x20}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

585.323234ms ago: executing program 1 (id=7112):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000000c0)={0x400, 0xc, 0x7c7f, 0x19, 0x4, 0x26, 0x3, "74598146efcfe45835b6ca276d3bf8c18a98ca59", "b5449d99865a4576216672dd56ab70fa27aa9bb8"})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x22020400)
r3 = socket$alg(0x26, 0x5, 0x0)
accept4(r3, 0x0, 0x0, 0x6e02a6c3770c3083)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x8, 0x2, 0x9, 0x7, 0xfff7, 0x1, 0x5]}, &(0x7f00000001c0)=0x12)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @private2, 0x3b5d1a97}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
syz_emit_ethernet(0x200000, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb86bfe1bbf0eedd9}, 0x404c81d)
r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10, 0x80000)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x0]}, 0x6)

532.393243ms ago: executing program 2 (id=7113):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="e904a20000000180c200000e08"], 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0xffffffff}}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="b0b3", 0x2}, {&(0x7f00000001c0)="0d16511f89d1570963cae8dba936fb78dd584bc2963d62f75a8221a5cfd7b3cdb48db1167f8a158fc2d1"}, {&(0x7f0000000200)="e4d775944865f9c8d9c4a4fd02c05d610f42ccb17529e7a845a7756bcf8274f20352f73ff349f0c9668466e432f7ac5f35c8733d11bc449733ccd21ae9c9d94e7dcc600b0145f53c57bc8cf095596a4c94f3691441c8ddd51a5e13690540149d89e70543225acc9c9d88de48ca518946"}], 0x41, 0x0, 0x0, 0x20000851}, 0x0)
recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r4=>0x0, 0x58}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r4, &(0x7f0000000440)=0x4)

486.955847ms ago: executing program 3 (id=7114):
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000187b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

360.761936ms ago: executing program 3 (id=7115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\a\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006970366772653000000000000000000018000380080002000000000004000100080004003423d5d2"], 0x44}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000500)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8)
sendmmsg$inet_sctp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x224}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="4a3d89702fcd054030cded71fbe66d9300eb6f3c06ff947715bc33aa44198f6921fc9e805349abab24d849e17cce1b1672df6e21fab425f8916427db82907fc56975d442640f66ee0dcc1e6ef3f30c64a18c5f3d2ab1fd0a7638dbb9e86d289a7e0836a58b6e888d3512858aa1bc045489fa901938ad01e8dbd623953b01f72595f55b64f636610331374b6da37771fa00f6eaa8b872fc23f443b4bd5a6dfa389f12a4a0327d514cebf452c20f3cf9e51110cce7", 0xb4}, {&(0x7f00000003c0)="ac6d3423191cce7ee34b06aa4530c83431", 0x11}], 0x2}}, {{&(0x7f0000000440)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000480)="4e6908d99c99f28fc2b9076b977866fd18116bfa67dc59dff6fb36359650662b2a58a87f91c0d3b0aae75ae6f4d98598", 0x30}, {&(0x7f0000000780)="634903c3146e3537de3ff7fbe0185e7d0194eb75a7e7277049743f38b59a73031e6c6e2543279a4fab925fd837c2ef201c395024aceddb8a81d59e9f69f5fc54cad95801dd5e0fa2bafd0ddda388ec2bfa62b75fd38a9a2d3b2b7130c94de230d0a3e5fee8e90b4f2575a156fd170a47bb36a34fb36c538ebfa770c0ec6757dbf64575f646651d8adbeffc", 0x8b}], 0x2, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x58c8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x62}}], 0x48}}], 0x2, 0x20008050)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0xffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'gre0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={<r11=>0x0, 0xc1, "3195e64a5ee358fda66ec2bf048b81b7610a73fe21d0282f77f9c5b8bf3dc77be09755238084a5aaa0360748766ba3d861f6e807f5c7901f117f134458370015d6547ea99e7f94efdf3b547b23e272a955f3c5954c7865725859823e0b977938f41ca44e870f7997ef5bf53153f416f63396bb22668e570dbea8c11c5225ebf1563300c72962e45bef68ffe0d6964c4f857c7cbaba16ef84847b1d297f4775a506c326d5eb2b15e3b59fc7da7c768703612c08457da90ba6eee5404b493b98dfe2"}, &(0x7f0000000280)=0xc9)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r11, 0x3}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)

219.167736ms ago: executing program 3 (id=7116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r2, &(0x7f0000000080), 0xe)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)=ANY=[@ANYBLOB="8400f100", @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf252b0000000c00990008000000080000001e002a008c108000baad74e11edd48bd2428dba46eb372060303030303030000040008011b002400c80b0982486c36806c02910603180bb0861882600b066000240023800600190000c00000050007000100000006001800030000000600180006000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="28000000000801040000000000000007050000030900010073797a30000000000c00030003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000044)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfc0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0)
recvfrom(r0, &(0x7f0000001240)=""/152, 0x98, 0x21, &(0x7f0000001300)=@rc={0x1f, @none, 0x3}, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003c40)={0x4b5, 0x46, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
readv(r1, &(0x7f0000000100)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

218.623852ms ago: executing program 1 (id=7117):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa1e4900004beac6f1adc800", "4f96068f", "bff2a81527ae4190"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30c)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r5, 0x0, 0x20000000002)

165.187726ms ago: executing program 0 (id=7118):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005", @ANYRES16=r0, @ANYBLOB="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", @ANYRES16=r3], 0x3c}}, 0xeefcc0137fe0e95a)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x24000000)

124.766778ms ago: executing program 4 (id=7119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffff052c}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$inet6(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r7}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0xa164d9c2c504f2c3}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x104}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80)

0s ago: executing program 2 (id=7120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x20, 0x20, 0x9, 0xfffffffd, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xdb, 0x0, 0x0, [0x5, 0x56, 0xfffffffd, 0x7, 0x101, 0x2, 0x73e]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0x4, "9528"}, {0x0, 0xc, "02c8582bea086696a716"}, {0x0, 0x10, "cc457dfb05edf3b3b633fc107527"}, {0x0, 0x3, "8c"}, {0x7, 0x10, "7e99babf4d176d18619d10f067dc"}]}, @ssrr={0x89, 0xf, 0xc5, [@empty, @loopback, @loopback]}, @generic={0x9b, 0x10, "d38d6bb6a2c0dd1fc5ef1d850c00"}, @lsrr={0x83, 0xf, 0x63, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}]}}}}})
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@loopback, @remote}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r4 = epoll_create1(0x0)
sendmsg$tipc(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="c89317c3d7cc53321bcbb868ac1ad756db02d99a52979a09b3d98fcb94a64ae14d61da709ffeed1a1854e17a769f25627f558d69f0a893e46fd5b3b3b2967f069c05432f5303df7fcdd75117e3b1298360e19c6abf2230a4ccf702133f54eeee7a32e5d59d517c31bf439d6cb6882e44e7cad3eca0ffb435af05145e490bf141b525839feab199855a3c722a352d589b73a1315ca58364aea2f712d8dd7f89182a67e0e22d9218a77e6c7b7f", 0xac}, {&(0x7f0000000380)="2c24ff", 0x3}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, &(0x7f0000001400)="ece225e82283179620d2283c770a34a49e8700aa01ac2fb9b85772e77074de80bfc16c363ec47221de84f39d3dca5f7a144e6f6358097b0a30586b2093edd3d0b9d3f72729c6e9a02de1cb10b348b97261b1be10aea2acb99778d9af66a39b670cd14857656421f700fa532f618e2570fc5bc44952e98c6b1e835be0285816bc3071acbe8497d883cf9197cb55a8e7cc9a448a7396b03115825844a278e3693f753077af6ab2450572c1fe7c1b50228a5445a90da82fe3ad4e2419caeb5ecee85dd5aeec0e436b3075a789c3031d5b473f84d86b2d381c0c43476381ccae62e5a48e8d7b53cd8e60cf4337bd027cfa", 0xef, 0x40000}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbf6, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x5c, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0xc}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

83826038 R14: 00007f9283825fa0 R15: 00007fff9f4259b8
[  817.930136][T26956]  </TASK>
[  818.629453][T26978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5591'.
[  818.706942][T26976] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5592'.
[  818.768123][T11164] net_ratelimit: 1 callbacks suppressed
[  818.768153][T11164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.773095][T26987] netlink: 'syz.1.5595': attribute type 10 has an invalid length.
[  818.775950][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.881118][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5594'.
[  818.886001][T26993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.903427][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.918053][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5594'.
[  819.033330][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5596'.
[  819.052083][T26987] netlink: 'syz.1.5595': attribute type 10 has an invalid length.
[  819.200416][T27003] FAULT_INJECTION: forcing a failure.
[  819.200416][T27003] name failslab, interval 1, probability 0, space 0, times 0
[  819.286085][T27003] CPU: 0 UID: 0 PID: 27003 Comm: syz.4.5598 Not tainted syzkaller #0 PREEMPT(full) 
[  819.286113][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  819.286124][T27003] Call Trace:
[  819.286131][T27003]  <TASK>
[  819.286139][T27003]  dump_stack_lvl+0xe8/0x150
[  819.286172][T27003]  should_fail_ex+0x40c/0x560
[  819.286198][T27003]  should_failslab+0xa8/0x100
[  819.286228][T27003]  __kmalloc_cache_noprof+0xa8/0x660
[  819.286252][T27003]  ? nfnetlink_rcv+0x1021/0x28c0
[  819.286278][T27003]  ? nfnetlink_rcv+0x1021/0x28c0
[  819.286309][T27003]  nfnetlink_rcv+0x1021/0x28c0
[  819.286367][T27003]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  819.286408][T27003]  ? ref_tracker_free+0x689/0x830
[  819.286449][T27003]  ? skb_clone+0x246/0x3a0
[  819.286469][T27003]  ? __netlink_deliver_tap+0x811/0x860
[  819.286495][T27003]  ? netlink_deliver_tap+0x2e/0x1b0
[  819.286511][T27003]  ? netlink_deliver_tap+0x2e/0x1b0
[  819.286533][T27003]  netlink_unicast+0x7bb/0x940
[  819.286571][T27003]  netlink_sendmsg+0x813/0xb40
[  819.286600][T27003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.286623][T27003]  ? aa_sock_msg_perm+0xf1/0x1b0
[  819.286645][T27003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.286663][T27003]  sock_sendmsg_nosec+0x13a/0x180
[  819.286689][T27003]  ____sys_sendmsg+0x54e/0x850
[  819.286712][T27003]  ? __pfx_____sys_sendmsg+0x10/0x10
[  819.286740][T27003]  ? import_iovec+0x73/0xa0
[  819.286776][T27003]  ___sys_sendmsg+0x2a5/0x360
[  819.286793][T27003]  ? __lock_acquire+0x683/0x2cf0
[  819.286822][T27003]  ? __pfx____sys_sendmsg+0x10/0x10
[  819.286872][T27003]  ? __fget_files+0x2a/0x420
[  819.286894][T27003]  ? __fget_files+0x3a2/0x420
[  819.286926][T27003]  __x64_sys_sendmsg+0x1b1/0x290
[  819.286946][T27003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  819.286981][T27003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.287000][T27003]  do_syscall_64+0x174/0x580
[  819.287019][T27003]  ? clear_bhb_loop+0x40/0x90
[  819.287041][T27003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.287059][T27003] RIP: 0033:0x7f0ffd39de99
[  819.287076][T27003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.287091][T27003] RSP: 002b:00007f0ffe342028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  819.287110][T27003] RAX: ffffffffffffffda RBX: 00007f0ffd625fa0 RCX: 00007f0ffd39de99
[  819.287123][T27003] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003
[  819.287135][T27003] RBP: 00007f0ffe342090 R08: 0000000000000000 R09: 0000000000000000
[  819.287146][T27003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  819.287157][T27003] R13: 00007f0ffd626038 R14: 00007f0ffd625fa0 R15: 00007ffc5e734858
[  819.287187][T27003]  </TASK>
[  819.580805][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.590754][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.910264][T27030] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5607'.
[  819.973826][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5607'.
[  820.141994][T27039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5609'.
[  820.200766][T27039] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  820.214866][T27039] bond3: (slave vti0): Error -95 calling set_mac_address
[  820.281311][T27042] netlink: 'syz.1.5610': attribute type 2 has an invalid length.
[  820.289082][T27042] netlink: 'syz.1.5610': attribute type 2 has an invalid length.
[  820.392420][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5612'.
[  820.507905][T27048] FAULT_INJECTION: forcing a failure.
[  820.507905][T27048] name failslab, interval 1, probability 0, space 0, times 0
[  820.522086][T27048] CPU: 1 UID: 0 PID: 27048 Comm: syz.0.5613 Not tainted syzkaller #0 PREEMPT(full) 
[  820.522110][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  820.522121][T27048] Call Trace:
[  820.522128][T27048]  <TASK>
[  820.522135][T27048]  dump_stack_lvl+0xe8/0x150
[  820.522170][T27048]  should_fail_ex+0x40c/0x560
[  820.522197][T27048]  should_failslab+0xa8/0x100
[  820.522227][T27048]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  820.522249][T27048]  ? local_lock_release+0x9c/0x160
[  820.522278][T27048]  ? __alloc_skb+0x1d7/0x7a0
[  820.522299][T27048]  ? __alloc_skb+0x1d7/0x7a0
[  820.522329][T27048]  __alloc_skb+0x1d7/0x7a0
[  820.522358][T27048]  netlink_ack+0x136/0xb30
[  820.522381][T27048]  ? __kmalloc_cache_noprof+0x150/0x660
[  820.522402][T27048]  ? nfnetlink_rcv+0x1021/0x28c0
[  820.522434][T27048]  nfnetlink_rcv+0x260c/0x28c0
[  820.522492][T27048]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  820.522533][T27048]  ? ref_tracker_free+0x689/0x830
[  820.522576][T27048]  ? skb_clone+0x246/0x3a0
[  820.522597][T27048]  ? __netlink_deliver_tap+0x811/0x860
[  820.522623][T27048]  ? netlink_deliver_tap+0x2e/0x1b0
[  820.522640][T27048]  ? netlink_deliver_tap+0x2e/0x1b0
[  820.522663][T27048]  netlink_unicast+0x7bb/0x940
[  820.522698][T27048]  netlink_sendmsg+0x813/0xb40
[  820.522725][T27048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.522748][T27048]  ? aa_sock_msg_perm+0xf1/0x1b0
[  820.522775][T27048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.522792][T27048]  sock_sendmsg_nosec+0x13a/0x180
[  820.522817][T27048]  ____sys_sendmsg+0x54e/0x850
[  820.522840][T27048]  ? __pfx_____sys_sendmsg+0x10/0x10
[  820.522866][T27048]  ? import_iovec+0x73/0xa0
[  820.522896][T27048]  ___sys_sendmsg+0x2a5/0x360
[  820.522912][T27048]  ? __lock_acquire+0x683/0x2cf0
[  820.522941][T27048]  ? __pfx____sys_sendmsg+0x10/0x10
[  820.522991][T27048]  ? __fget_files+0x2a/0x420
[  820.523014][T27048]  ? __fget_files+0x3a2/0x420
[  820.523046][T27048]  __x64_sys_sendmsg+0x1b1/0x290
[  820.523073][T27048]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  820.523108][T27048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.523129][T27048]  do_syscall_64+0x174/0x580
[  820.523147][T27048]  ? trace_irq_disable+0x3b/0x140
[  820.523170][T27048]  ? clear_bhb_loop+0x40/0x90
[  820.523192][T27048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.523209][T27048] RIP: 0033:0x7fdcdd59de99
[  820.523227][T27048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.523242][T27048] RSP: 002b:00007fdcdb7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  820.523261][T27048] RAX: ffffffffffffffda RBX: 00007fdcdd825fa0 RCX: 00007fdcdd59de99
[  820.523274][T27048] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003
[  820.523285][T27048] RBP: 00007fdcdb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  820.523296][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  820.523307][T27048] R13: 00007fdcdd826038 R14: 00007fdcdd825fa0 R15: 00007fffec1ebe38
[  820.523336][T27048]  </TASK>
[  820.841175][T16634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.753831][T27108] x_tables: ip6_tables: mh match: only valid for protocol 135
[  821.823617][T27112] xt_TCPMSS: Only works on TCP SYN packets
[  822.043111][T27125] netlink: 'syz.0.5635': attribute type 12 has an invalid length.
[  822.629838][T27138] netlink: 'syz.2.5640': attribute type 1 has an invalid length.
[  822.637602][T27138] netlink: 'syz.2.5640': attribute type 3 has an invalid length.
[  823.236770][T27178] __nla_validate_parse: 4 callbacks suppressed
[  823.236787][T27178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5651'.
[  823.524545][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5654'.
[  823.533523][T27189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5654'.
[  823.695886][T27195] vlan3: entered allmulticast mode
[  823.895355][T27198] lo speed is unknown, defaulting to 1000
[  823.945553][T16638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.385437][T27219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5663'.
[  824.488162][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.498031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.547209][T27219] 8021q: adding VLAN 0 to HW filter on device bond9
[  824.716322][T27235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5668'.
[  824.746043][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5665'.
[  824.955712][T27245] netlink: 'syz.3.5671': attribute type 4 has an invalid length.
[  825.036432][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5672'.
[  825.057445][T27248] Cannot find set identified by id 65534 to match
[  825.098177][T11162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.107678][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.161872][T27252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5674'.
[  827.039347][T16638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.371295][T27217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  827.843178][T27279] IPv6: NLM_F_CREATE should be specified when creating new route
[  827.851956][T27279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5681'.
[  827.861504][T27279] bond0: entered allmulticast mode
[  828.039947][T27295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5687'.
[  828.541627][T27328] __nla_validate_parse: 1 callbacks suppressed
[  828.541643][T27328] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5695'.
[  829.309434][T27360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5708'.
[  829.454615][T27366] syzkaller0: entered promiscuous mode
[  829.460137][T27366] syzkaller0: entered allmulticast mode
[  829.984322][T27392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'.
[  830.069345][T16634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.225156][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.234374][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.284917][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.294153][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.356160][T27410] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5730'.
[  830.366510][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5730'.
[  830.438792][T27415] netlink: 'syz.3.5731': attribute type 1 has an invalid length.
[  830.452038][T27415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'.
[  830.693783][T27428] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  830.968787][T27436] tc action pedit 'at' offset -2147483647 out of bounds
[  831.009729][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'.
[  831.323041][T27452] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  831.330415][T27452] tipc: Enabled bearer <udp:s>, priority 10
[  831.498019][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  831.591286][T27462] netlink: 'syz.2.5753': attribute type 1 has an invalid length.
[  831.711448][T27468] netlink: 'syz.3.5755': attribute type 10 has an invalid length.
[  831.733402][T27462] 8021q: adding VLAN 0 to HW filter on device bond5
[  831.745333][T27468] syz_tun: left allmulticast mode
[  831.750635][T27468] bridge0: port 4(syz_tun) entered disabled state
[  831.762871][T27468] 
: (slave syz_tun): Enslaving as an active interface with an up link
[  831.772596][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  831.807879][T27466] bond5: (slave veth5): Enslaving as an active interface with a down link
[  831.853660][T27470] bond5: (slave macvlan1): making interface the new active one
[  831.863027][T27470] macvlan1: entered promiscuous mode
[  831.882054][T27470] bond5: (slave macvlan1): Enslaving as an active interface with an up link
[  831.999074][T27480] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5760'.
[  832.064148][T27480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5760'.
[  832.405569][   T29] audit: type=1107 audit(1784553914.197:18): pid=27497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ
[  832.405569][   T29] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ	fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õ�ãÀ´sϨöÈ-I¤
!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðÙ´áµ�ŽõÙ�µ]Êaÿ××'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË#
[  832.405569][   T29] Ð’ôš…h†‘0ÜV°ä¤Z”2“'
[  832.474600][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  832.548921][T27508] netlink: 'syz.2.5772': attribute type 14 has an invalid length.
[  832.614065][T27510] nftables ruleset with unbound set
[  832.752302][T27516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5777'.
[  833.072140][T27531] syzkaller0: entered promiscuous mode
[  833.079883][T27531] syzkaller0: entered allmulticast mode
[  833.093726][T16634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.535132][T27564] netlink: 'syz.0.5794': attribute type 1 has an invalid length.
[  833.683661][T27572] __nla_validate_parse: 4 callbacks suppressed
[  833.683693][T27572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5797'.
[  834.175809][T27594] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5805'.
[  834.213269][T27594] syz_tun: entered allmulticast mode
[  834.319733][T27601] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5805'.
[  834.481256][T27589] syz_tun: left allmulticast mode
[  834.543868][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.568965][T27616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.639952][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.660383][T27616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.669361][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.678310][T27616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5810'.
[  834.713913][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5812'.
[  834.993543][T27627] bond0: (slave wireguard1): refused to change device type
[  835.008379][T27634] netlink: 'syz.0.5815': attribute type 10 has an invalid length.
[  835.036844][T27634] netlink: 'syz.0.5815': attribute type 1 has an invalid length.
[  835.060820][T27633] bridge4: entered promiscuous mode
[  835.067345][T27633] bridge4: entered allmulticast mode
[  835.125414][T27633] net_ratelimit: 3 callbacks suppressed
[  835.125460][T27633] openvswitch: netlink: ct_state flags ffffffff unsupported
[  835.370112][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  835.371802][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.387203][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.613209][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  835.985676][T27695] xt_TCPMSS: Only works on TCP SYN packets
[  836.044850][ T7061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.053215][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.144717][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.321131][T27714] veth9: entered promiscuous mode
[  836.327353][T27712] bridge0: entered promiscuous mode
[  836.333456][T27712] bridge0: entered allmulticast mode
[  836.634817][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  836.671915][T27723] dvmrp1: entered allmulticast mode
[  836.737135][T27723] pim6reg: entered allmulticast mode
[  837.004930][T27737] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  837.075154][T27733] block nbd0: Unsupported socket: should be TCP or UNIX.
[  837.270078][T27753] netlink: 'syz.1.5849': attribute type 11 has an invalid length.
[  837.281894][T27752] netlink: 'syz.1.5849': attribute type 11 has an invalid length.
[  837.773183][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  837.848886][T27789] netlink: 'syz.4.5860': attribute type 7 has an invalid length.
[  837.876897][T27789] netlink: 'syz.4.5860': attribute type 7 has an invalid length.
[  837.952344][T27789] macsec3: entered promiscuous mode
[  838.056491][T27802] set match dimension is over the limit!
[  838.575997][T27829] netlink: 'syz.1.5874': attribute type 21 has an invalid length.
[  838.584125][T27830] IPv6: Can't replace route, no match found
[  838.635783][T27830] IPv6: Can't replace route, no match found
[  838.643070][T27830] IPv6: Can't replace route, no match found
[  838.654597][T27830] IPv6: Can't replace route, no match found
[  838.669621][T27830] IPv6: Can't replace route, no match found
[  838.693802][T27830] IPv6: Can't replace route, no match found
[  838.720154][T27830] IPv6: Can't replace route, no match found
[  838.726375][T27830] IPv6: Can't replace route, no match found
[  838.732955][T27830] IPv6: Can't replace route, no match found
[  838.739482][T27830] IPv6: Can't replace route, no match found
[  838.745695][T27830] IPv6: Can't replace route, no match found
[  838.751864][T27830] IPv6: Can't replace route, no match found
[  838.758010][T27830] IPv6: Can't replace route, no match found
[  838.764177][T27830] IPv6: Can't replace route, no match found
[  838.952476][T27846] __nla_validate_parse: 18 callbacks suppressed
[  838.952495][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5880'.
[  839.065543][T27849] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5881'.
[  839.085602][T27847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  839.092835][T27847] IPv6: NLM_F_CREATE should be set when creating new route
[  839.100073][T27847] IPv6: NLM_F_CREATE should be set when creating new route
[  839.107296][T27847] IPv6: NLM_F_CREATE should be set when creating new route
[  839.137616][T16306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  839.155513][T16306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  839.168687][T16306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  839.200175][T16306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  839.213581][T16306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  839.222374][T27847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  839.730979][T27868] netlink: 'syz.1.5883': attribute type 64 has an invalid length.
[  839.830130][T27858] netlink: 'syz.1.5883': attribute type 64 has an invalid length.
[  840.081689][T27868] sock: sock_timestamping_bind_phc: sock not bind to device
[  840.090770][T27856] sock: sock_timestamping_bind_phc: sock not bind to device
[  840.100259][T16681] 
: (slave syz_tun): Releasing backup interface
[  840.111317][T27868] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  840.126530][T27858] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5883'.
[  840.165716][T27897] netlink: 'syz.0.5894': attribute type 4 has an invalid length.
[  840.316083][T27848] lo speed is unknown, defaulting to 1000
[  840.953694][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'.
[  840.972455][    C0] net_ratelimit: 4 callbacks suppressed
[  840.972488][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  840.974068][T27945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5903'.
[  840.994135][T27945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5903'.
[  841.188561][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5905'.
[  841.267597][T27956] set match dimension is over the limit!
[  841.309246][T16306] Bluetooth: hci0: command tx timeout
[  841.409290][T27848] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.434039][T27848] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.441325][T27848] bridge_slave_0: entered allmulticast mode
[  841.455367][T27848] bridge_slave_0: entered promiscuous mode
[  841.467775][T27848] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.476529][T27848] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.486609][T27848] bridge_slave_1: entered allmulticast mode
[  841.495653][T27848] bridge_slave_1: entered promiscuous mode
[  841.559005][T27975] xt_HMARK: spi-set and port-set can't be combined
[  841.625042][T27848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  841.637893][T27848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  841.709873][T27848] team0: Port device team_slave_0 added
[  841.738367][T27848] team0: Port device team_slave_1 added
[  841.774490][T27982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5912'.
[  841.788736][T27848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.795709][T27848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.821604][T27848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  841.834672][T27848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  841.857575][T27848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.883494][T27848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.043153][T27848] hsr_slave_0: entered promiscuous mode
[  842.047947][T27993] netlink: 'syz.1.5917': attribute type 1 has an invalid length.
[  842.049821][T27848] hsr_slave_1: entered promiscuous mode
[  842.188366][T28000] netlink: 'syz.0.5920': attribute type 11 has an invalid length.
[  842.211249][T27993] netlink: 'syz.1.5917': attribute type 1 has an invalid length.
[  842.226184][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  842.259712][T27995] netlink: 'syz.2.5918': attribute type 1 has an invalid length.
[  842.267485][T27995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5918'.
[  842.392721][T27993] 8021q: adding VLAN 0 to HW filter on device bond10
[  842.435152][T28006] bond10: (slave gretap1): making interface the new active one
[  842.444408][T28006] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  842.518314][T28008] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  842.534025][T28008] bond10 (unregistering): Released all slaves
[  842.959811][T28029] sctp: [Deprecated]: syz.0.5926 (pid 28029) Use of int in maxseg socket option.
[  842.959811][T28029] Use struct sctp_assoc_value instead
[  843.032508][T28029] sctp: [Deprecated]: syz.0.5926 (pid 28029) Use of struct sctp_assoc_value in delayed_ack socket option.
[  843.032508][T28029] Use struct sctp_sack_info instead
[  843.062824][T28029] sctp: [Deprecated]: syz.0.5926 (pid 28029) Use of struct sctp_assoc_value in delayed_ack socket option.
[  843.062824][T28029] Use struct sctp_sack_info instead
[  843.183034][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  843.252492][T11162] macvlan1: left promiscuous mode
[  843.346941][T16306] Bluetooth: hci0: command tx timeout
[  843.402314][T28047] IPVS: Unknown mcast interface: caif0
[  843.441027][T28052] erspan0: entered promiscuous mode
[  843.513132][T28052] erspan0: entered allmulticast mode
[  843.651289][T27848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  843.664371][T27848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.770022][T28068] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5940'.
[  843.782772][T28073] smc: net device vlan1 applied user defined pnetid SYZ2
[  844.040509][T27848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  844.050815][T27848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.071946][T28089] netlink: 'syz.2.5943': attribute type 11 has an invalid length.
[  844.096535][T28080] netlink: 'syz.0.5944': attribute type 1 has an invalid length.
[  844.100893][T28089] netlink: 'syz.2.5943': attribute type 10 has an invalid length.
[  844.136743][T28089] __nla_validate_parse: 1 callbacks suppressed
[  844.136762][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5943'.
[  844.242234][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  844.414536][T28099] netlink: 'syz.2.5948': attribute type 58 has an invalid length.
[  844.442255][T28099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5948'.
[  844.648114][T27848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  844.707624][T27848] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  844.734343][T27848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  844.768775][T27848] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  844.812038][T27848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  844.880561][T27848] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  844.940830][T28103] IPv6: sit1: Disabled Multicast RS
[  844.952156][T28118] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  844.976134][T28103] sit1: entered allmulticast mode
[  844.991801][T27848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  845.035610][T27848] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  845.184403][T28121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5954'.
[  845.200788][T28138] netlink: 'syz.0.5957': attribute type 8 has an invalid length.
[  845.292429][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  845.395669][T28140] xt_hashlimit: size too large, truncated to 1048576
[  845.431007][T28144] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5960'.
[  845.440699][T28143] syzkaller0: entered promiscuous mode
[  845.440721][T28143] syzkaller0: entered allmulticast mode
[  845.461692][T16306] Bluetooth: hci0: command tx timeout
[  845.620374][T27848] 8021q: adding VLAN 0 to HW filter on device bond0
[  845.652013][T28154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5962'.
[  845.808587][T27848] 8021q: adding VLAN 0 to HW filter on device team0
[  845.837353][T11153] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.844503][T11153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  845.921296][T11162] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.928447][T11162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.028207][T28172] netlink: 'syz.1.5968': attribute type 12 has an invalid length.
[  846.402693][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  846.486248][T28187] netlink: 'syz.1.5974': attribute type 1 has an invalid length.
[  846.704058][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.833786][T28216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.853876][T15808] hid-generic 0005:0002:0000.0002: item fetching failed at offset 0/1
[  846.863807][T15808] hid-generic 0005:0002:0000.0002: probe with driver hid-generic failed with error -22
[  846.972537][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5981'.
[  847.106603][T28228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5981'.
[  847.353724][T27848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.389155][T27848] veth0_vlan: entered promiscuous mode
[  847.402745][T27848] veth1_vlan: entered promiscuous mode
[  847.428977][T27848] veth0_macvtap: entered promiscuous mode
[  847.439338][T27848] veth1_macvtap: entered promiscuous mode
[  847.452251][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  847.527732][T27848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  847.587748][T16306] Bluetooth: hci0: command tx timeout
[  847.602822][T27848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  847.645242][T11164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.664286][T11164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.717117][T11164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.793567][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.814177][T11164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  848.172245][T28272] netlink: 'syz.4.5991': attribute type 1 has an invalid length.
[  848.216681][T28272] 8021q: adding VLAN 0 to HW filter on device bond9
[  848.552393][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  848.568530][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.893285][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.602394][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  849.999201][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.165342][T28230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.286484][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.320563][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.453312][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.476469][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.508068][T28325] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6005'.
[  851.176681][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6010'.
[  851.209819][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6010'.
[  851.219830][T28347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6010'.
[  851.310464][T21692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  851.355198][T28353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6010'.
[  851.377432][T21692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  851.402007][T21692] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  851.450709][T28356] net_ratelimit: 2 callbacks suppressed
[  851.450725][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.465436][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.476375][T21692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  851.493096][T21692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  851.594393][T16634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.702476][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  851.874638][T28365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6015'.
[  851.883668][T28365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6015'.
[  852.198549][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.291128][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6018'.
[  852.616767][T28379] 8021q: adding VLAN 0 to HW filter on device bond6
[  852.704771][T28379] bond6: entered allmulticast mode
[  852.744335][T28379] bond0: (slave bond6): Enslaving as an active interface with an up link
[  852.797439][T28396] ip6t_rpfilter: unknown options
[  852.862631][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  852.931959][T28400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.940797][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.984237][T28349] lo speed is unknown, defaulting to 1000
[  853.363248][T15808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.469471][ T1173] tipc: Subscription rejected, illegal request
[  853.641633][T21692] Bluetooth: hci1: command tx timeout
[  853.801048][T28426] netlink: 'syz.1.6029': attribute type 3 has an invalid length.
[  853.868443][T28424] macvtap0: entered promiscuous mode
[  853.873781][T28424] vlan0: entered promiscuous mode
[  853.879221][T28424] macvtap0: entered allmulticast mode
[  853.884608][T28424] vlan0: entered allmulticast mode
[  853.889726][T28424] veth0_vlan: entered allmulticast mode
[  853.914844][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  854.060463][T28349] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.084278][T28349] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.093190][T28349] bridge_slave_0: entered allmulticast mode
[  854.100998][T28349] bridge_slave_0: entered promiscuous mode
[  854.151063][T28349] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.162194][T28349] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.169465][T28349] bridge_slave_1: entered allmulticast mode
[  854.177227][T28349] bridge_slave_1: entered promiscuous mode
[  854.178227][T28439] IPv6: Can't replace route, no match found
[  854.401712][T28349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.465384][T28449] x_tables: unsorted entry at hook 3
[  854.483088][T28349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.547020][T28349] team0: Port device team_slave_0 added
[  854.564483][T28349] team0: Port device team_slave_1 added
[  854.704599][T28349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  854.717525][T28349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  854.780145][T28464] netlink: 'syz.4.6039': attribute type 11 has an invalid length.
[  854.789574][T28349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  854.803736][T28349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  854.811638][T28349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  854.837539][T28349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  854.960345][T28470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6045'.
[  854.967243][T28349] hsr_slave_0: entered promiscuous mode
[  854.975984][T28349] hsr_slave_1: entered promiscuous mode
[  854.982329][T28349] debugfs: 'hsr0' already exists in 'hsr'
[  854.985661][T28470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6045'.
[  855.116495][T28349] Cannot create hsr debugfs directory
[  855.616330][T28485] __nla_validate_parse: 2 callbacks suppressed
[  855.616350][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6048'.
[  855.717921][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6049'.
[  855.731126][T28349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  855.742151][T28349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.752426][T28349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  855.767993][T21692] Bluetooth: hci1: command tx timeout
[  855.860228][T28500] x_tables: duplicate underflow at hook 2
[  856.050978][T28349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  856.097589][T28510] netlink: 'syz.2.6055': attribute type 1 has an invalid length.
[  856.114776][T28349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.125076][T28349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  856.171857][T28510] 8021q: adding VLAN 0 to HW filter on device bond7
[  856.206395][T28509] bond7: (slave geneve2): making interface the new active one
[  856.215639][T28509] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  856.287328][   T29] audit: type=1800 audit(1784553938.017:19): pid=28512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6056" name="memory.events" dev="tmpfs" ino=101 res=0 errno=0
[  856.333789][T28527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6058'.
[  856.383146][T28531] netlink: 'syz.4.6060': attribute type 3 has an invalid length.
[  856.655826][ T5804] net_ratelimit: 13 callbacks suppressed
[  856.655845][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.691570][T28349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  856.702743][T28349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.713423][T28349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  856.802588][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6064'.
[  856.900785][T28555] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  857.043381][T28561] netlink: 'syz.2.6069': attribute type 1 has an invalid length.
[  857.051157][T28561] netlink: 'syz.2.6069': attribute type 1 has an invalid length.
[  857.165286][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  857.219181][T11162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.237205][T28569] syzkaller0: entered promiscuous mode
[  857.242719][T28569] syzkaller0: entered allmulticast mode
[  857.394072][T28349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  857.404422][T28349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.419252][T28349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  857.463465][T11162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.474614][T28581] netlink: 'syz.4.6075': attribute type 10 has an invalid length.
[  857.482833][ T1124] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  857.494313][T11162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.510210][T28583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6076'.
[  857.577765][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6077'.
[  857.607458][T28586] sctp: [Deprecated]: syz.1.6077 (pid 28586) Use of int in maxseg socket option.
[  857.607458][T28586] Use struct sctp_assoc_value instead
[  857.671895][T28408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.706702][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.883862][T21692] Bluetooth: hci1: command tx timeout
[  857.929064][T28598] netlink: zone id is out of range
[  857.945871][T28598] netlink: zone id is out of range
[  858.037240][T28602] netlink: 'syz.1.6083': attribute type 1 has an invalid length.
[  858.079684][T28573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  858.124126][T28602] 8021q: adding VLAN 0 to HW filter on device bond12
[  858.200369][T28606] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  858.218217][T28349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  858.230094][T28610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6085'.
[  858.231355][T28349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  858.287612][T28613] netlink: 'syz.3.6086': attribute type 21 has an invalid length.
[  858.305090][T28613] IPv6: NLM_F_CREATE should be specified when creating new route
[  858.313046][T28613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  858.329693][T28613] IPv6: NLM_F_CREATE should be set when creating new route
[  858.336980][T28613] IPv6: NLM_F_CREATE should be set when creating new route
[  858.344210][T28613] IPv6: NLM_F_CREATE should be set when creating new route
[  858.389248][T28349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  858.425895][T28349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  858.450351][T28602] macvlan2: entered promiscuous mode
[  858.472987][T28602] macvlan2: entered allmulticast mode
[  858.481542][T28602] bond12: entered promiscuous mode
[  858.487874][T28602] veth0_to_bond: entered promiscuous mode
[  858.503854][T28602] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  858.536807][T28602] bond12: left promiscuous mode
[  858.546261][T28602] veth0_to_bond: left promiscuous mode
[  858.588631][T28349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  858.610928][T28349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  858.633113][T28349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  858.643826][T28349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  858.808985][T28349] 8021q: adding VLAN 0 to HW filter on device bond0
[  858.831029][T28349] 8021q: adding VLAN 0 to HW filter on device team0
[  858.868592][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.885223][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  858.909215][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.916361][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.924795][T28640] x_tables: ip6_tables: mh match: only valid for protocol 135
[  859.138182][T28642] sctp: [Deprecated]: syz.1.6093 (pid 28642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  859.138182][T28642] Use struct sctp_sack_info instead
[  859.215324][T28659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6096'.
[  859.451232][T28673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6098'.
[  859.625293][T28677] netlink: 'syz.4.6100': attribute type 2 has an invalid length.
[  859.636682][T28677] netlink: 'syz.4.6100': attribute type 2 has an invalid length.
[  859.645755][T28677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6100'.
[  859.808785][T28349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  859.942522][T21692] Bluetooth: hci1: command tx timeout
[  860.001166][T28349] veth0_vlan: entered promiscuous mode
[  860.018289][T28349] veth1_vlan: entered promiscuous mode
[  860.094907][T28707] sctp: [Deprecated]: syz.1.6104 (pid 28707) Use of struct sctp_assoc_value in delayed_ack socket option.
[  860.094907][T28707] Use struct sctp_sack_info instead
[  860.155909][T28349] veth0_macvtap: entered promiscuous mode
[  860.199480][T28349] veth1_macvtap: entered promiscuous mode
[  860.431041][T28349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  860.476936][T28349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.536321][ T7053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.594813][ T7053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.686122][ T7053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.697562][ T7049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.862317][ T7049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.870226][ T7049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.072392][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  861.080250][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.107973][T28732] bond0: entered allmulticast mode
[  861.135081][T28732] bond_slave_0: entered allmulticast mode
[  861.141959][T28732] bond_slave_1: entered allmulticast mode
[  861.149359][T28732] bond2: entered allmulticast mode
[  861.165120][T28739] __nla_validate_parse: 1 callbacks suppressed
[  861.165138][T28739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6110'.
[  861.185788][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6110'.
[  861.206667][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6110'.
[  861.691723][T28775] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6117'.
[  861.700802][T28775] 0·: renamed from hsr0 (while UP)
[  861.875652][T28775] 0·: entered allmulticast mode
[  861.881195][T28775] hsr_slave_0: entered allmulticast mode
[  861.901396][T28775] hsr_slave_1: entered allmulticast mode
[  861.901548][T28782] tipc: Trying to set illegal importance in message
[  861.917114][T28775] net_ratelimit: 22 callbacks suppressed
[  861.917129][T28775] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  862.022587][T28408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.033039][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.060539][T16306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  862.064689][T28778] syzkaller0: entered promiscuous mode
[  862.080197][T16306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  862.093087][T16306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  862.112612][T28778] syzkaller0: entered allmulticast mode
[  862.125239][T28778] 0: reclassify loop, rule prio 0, protocol 800
[  862.152010][T16306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  862.171702][T16306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  862.298411][T28786] syzkaller0: entered promiscuous mode
[  862.304193][T28786] syzkaller0: entered allmulticast mode
[  862.492381][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  862.928054][  T197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  862.942313][  T197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.969865][T28813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6127'.
[  862.997138][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6126'.
[  863.023209][T28783] lo speed is unknown, defaulting to 1000
[  863.024144][T28815] netlink: 'syz.4.6126': attribute type 30 has an invalid length.
[  863.108291][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.123166][ T7061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.439171][  T197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  863.449470][  T197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.602813][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  863.609949][T28783] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.610078][T28783] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.610289][T28783] bridge_slave_0: entered allmulticast mode
[  863.612033][T28783] bridge_slave_0: entered promiscuous mode
[  863.671974][T28783] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.679115][T28783] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.686316][T28783] bridge_slave_1: entered allmulticast mode
[  863.693745][T28783] bridge_slave_1: entered promiscuous mode
[  863.739857][T28840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6132'.
[  863.821547][T28783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.831265][T28840] syzkaller1: entered promiscuous mode
[  863.836768][T28840] syzkaller1: entered allmulticast mode
[  863.849922][T28783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.928015][T28783] team0: Port device team_slave_0 added
[  863.954139][  T197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  863.964884][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.979876][  T197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.010472][T28783] team0: Port device team_slave_1 added
[  864.039945][T28783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.048592][T28783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.076960][T28783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.094080][T28783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  864.101051][T28783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.126930][T28783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.177511][T28783] hsr_slave_0: entered promiscuous mode
[  864.183829][T28783] hsr_slave_1: entered promiscuous mode
[  864.203890][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.216182][T28783] debugfs: 'hsr0' already exists in 'hsr'
[  864.221946][T28783] Cannot create hsr debugfs directory
[  864.314797][T16306] Bluetooth: hci5: command tx timeout
[  864.506606][  T197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  864.520853][  T197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.551268][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6136'.
[  864.609844][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6137'.
[  864.618755][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'.
[  864.636316][ T7049] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  864.644689][ T7049] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  864.652881][ T7049] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  864.671268][ T7049] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  865.189028][T28871] netlink: 'syz.0.6142': attribute type 1 has an invalid length.
[  865.277180][T28876] ip6gre1: entered allmulticast mode
[  865.352017][T28871] 8021q: adding VLAN 0 to HW filter on device bond1
[  866.418473][T16306] Bluetooth: hci5: command tx timeout
[  866.899678][T28915] netlink: 'syz.3.6149': attribute type 83 has an invalid length.
[  866.922901][  T197] bond7 (unregistering): (slave geneve2): Releasing active interface
[  867.010098][  T197] bond1 (unregistering): (slave bridge0): Releasing active interface
[  867.064660][  T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.073525][  T197] bond_slave_0: left allmulticast mode
[  867.096644][  T197] bond0 (unregistering): (slave bond6): Releasing backup interface
[  867.105277][  T197] bond6 (unregistering): left allmulticast mode
[  867.111848][  T197] bond0 (unregistering): Released all slaves
[  867.132101][  T197] bond1 (unregistering): Released all slaves
[  867.150482][  T197] bond2 (unregistering): Released all slaves
[  867.169005][  T197] bond3 (unregistering): Released all slaves
[  867.252639][  T197] bond4 (unregistering): Released all slaves
[  867.273116][  T197] bond5 (unregistering): (slave veth5): Releasing active interface
[  867.282946][  T197] macvlan1: entered promiscuous mode
[  867.291691][  T197] bond5 (unregistering): (slave macvlan1): Releasing active interface
[  867.318021][  T197] bond5 (unregistering): Released all slaves
[  867.336613][  T197] bond6 (unregistering): Released all slaves
[  867.355097][  T197] bond7 (unregistering): Released all slaves
[  867.373632][T28887] veth0: entered promiscuous mode
[  867.378738][T28887] veth0: left promiscuous mode
[  867.390252][T28890] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.402712][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  867.409639][T28917] veth1_to_bond: entered allmulticast mode
[  867.437107][T28919] veth1_to_bond: entered promiscuous mode
[  867.563716][T28916] veth1_to_bond: left promiscuous mode
[  867.569388][T28916] veth1_to_bond: left allmulticast mode
[  867.705367][T28926] macvlan2: entered promiscuous mode
[  867.734147][T28926] macvlan2: entered allmulticast mode
[  867.894176][T28939] __nla_validate_parse: 6 callbacks suppressed
[  867.894192][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6154'.
[  867.952899][    C0] net_ratelimit: 7 callbacks suppressed
[  867.952932][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  868.130520][T28928] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  868.167324][T28947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.174742][T28947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.182871][T28947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  868.190284][T28947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.287167][T28939] macvlan2: entered promiscuous mode
[  868.292510][T28939] macvlan2: entered allmulticast mode
[  868.298348][T28939] bond10: (slave macvlan2): Error -98 calling set_mac_address
[  868.506616][T16306] Bluetooth: hci5: command tx timeout
[  868.620981][T28959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6158'.
[  868.825905][T28965] syzkaller0: entered promiscuous mode
[  868.843566][T28965] syzkaller0: entered allmulticast mode
[  868.953923][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6161'.
[  869.052522][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  869.752546][T28783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  869.807220][T28783] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  869.815798][T28783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  869.826636][T28783] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  869.851110][T28783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  869.888015][T28783] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  869.896618][T28783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  869.907187][T28783] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  870.021143][T29014] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  870.221981][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  870.284084][T28783] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.321777][T28783] 8021q: adding VLAN 0 to HW filter on device team0
[  870.350378][T11150] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.357539][T11150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.373755][T11150] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.380912][T11150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.457580][T28783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  870.467955][T28783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  870.576054][T16306] Bluetooth: hci5: command tx timeout
[  870.843495][  T197] vlan0: left allmulticast mode
[  870.848397][  T197] veth0_vlan: left allmulticast mode
[  870.853786][  T197] vlan0: left promiscuous mode
[  870.886847][  T197] veth1_vlan: left promiscuous mode
[  870.892244][  T197] veth0_vlan: left promiscuous mode
[  871.319449][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  872.341854][T29046] batadv_slave_1: entered promiscuous mode
[  872.347904][T29046] batadv_slave_1: left promiscuous mode
[  872.423212][T29067] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6179'.
[  872.442001][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  872.744152][T29077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6184'.
[  872.774078][T29077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6184'.
[  872.831511][ T7061] tipc: Subscription rejected, illegal request
[  873.140039][T29095] netlink: 'syz.3.6186': attribute type 1 has an invalid length.
[  873.221060][T29095] 8021q: adding VLAN 0 to HW filter on device bond1
[  873.235702][T29102] netlink: 'syz.4.6187': attribute type 1 has an invalid length.
[  873.265917][T29094] netlink: 'syz.4.6187': attribute type 1 has an invalid length.
[  873.301768][T29094] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6187'.
[  873.325961][T29095] bond1: (slave geneve2): making interface the new active one
[  873.349472][T29095] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  873.396191][T28783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.537370][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  873.637353][  T197] IPVS: stop unused estimator thread 0...
[  873.757103][T28783] veth0_vlan: entered promiscuous mode
[  873.760245][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6191'.
[  873.770692][T28783] veth1_vlan: entered promiscuous mode
[  873.848033][T28783] veth0_macvtap: entered promiscuous mode
[  873.891004][T29125] netlink: 'syz.1.6195': attribute type 2 has an invalid length.
[  873.915801][T29122] netlink: 'syz.0.6193': attribute type 4 has an invalid length.
[  873.950906][T28783] veth1_macvtap: entered promiscuous mode
[  873.967985][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'.
[  874.026043][T28783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.067097][T28783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.269707][T28726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.279497][T28726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.291946][T29130] Unsupported xt match
[  874.291978][T29130] unable to load match
[  874.334447][T28726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.348011][T28726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  874.566465][  T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.575016][  T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.585893][T28726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.599284][T28726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.683337][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  874.716108][T29153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6203'.
[  874.954470][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6207'.
[  875.306842][T21692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  875.318933][T21692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  875.446362][T21692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  875.507011][T21692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  875.514662][T21692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  875.529942][T29176] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6211'.
[  875.570757][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6211'.
[  875.989693][T29171] lo speed is unknown, defaulting to 1000
[  876.240022][T29214] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  876.447275][T29223] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  876.525862][T29171] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.533870][T29171] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.542049][T29171] bridge_slave_0: entered allmulticast mode
[  876.556568][T29171] bridge_slave_0: entered promiscuous mode
[  876.571594][T29171] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.581547][T29171] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.589442][T29171] bridge_slave_1: entered allmulticast mode
[  876.597299][T29171] bridge_slave_1: entered promiscuous mode
[  876.763158][T29233] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6223'.
[  876.781258][T29171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.783296][T29235] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6224'.
[  876.816183][T29171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.947487][T29171] team0: Port device team_slave_0 added
[  876.973338][T29171] team0: Port device team_slave_1 added
[  877.055364][T29171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  877.063845][T29171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.094054][T29171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  877.122485][T29246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6226'.
[  877.134528][T29171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  877.141489][T29171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.167360][T29171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  877.276765][T29171] hsr_slave_0: entered promiscuous mode
[  877.283451][T29171] hsr_slave_1: entered promiscuous mode
[  877.289832][T29171] debugfs: 'hsr0' already exists in 'hsr'
[  877.295931][T29171] Cannot create hsr debugfs directory
[  877.633478][T21692] Bluetooth: hci2: command tx timeout
[  877.634862][T29171] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  877.670725][T29171] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.389346][T29171] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  878.401758][T29171] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.446201][T29305] __nla_validate_parse: 7 callbacks suppressed
[  878.446216][T29305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6246'.
[  878.489403][T29312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6246'.
[  878.545756][T29171] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  878.555540][T29171] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.579551][T29305] netlink: 'syz.2.6246': attribute type 1 has an invalid length.
[  878.640283][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'.
[  878.799238][T29171] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  878.809558][T29171] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.444952][T29342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6255'.
[  879.609616][T29355] syzkaller0: entered promiscuous mode
[  879.621315][T29355] syzkaller0: entered allmulticast mode
[  879.649141][T29171] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  879.661907][T29171] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  879.702476][T29171] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  879.726523][T21692] Bluetooth: hci2: command tx timeout
[  879.761874][T29171] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  879.796431][T29171] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  879.864790][T29171] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  879.926176][T29171] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  879.974866][T29171] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  880.146369][T29376] netlink: 'syz.4.6264': attribute type 2 has an invalid length.
[  880.170707][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6263'.
[  880.228143][T29171] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.276144][T29171] 8021q: adding VLAN 0 to HW filter on device team0
[  880.331671][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.338826][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.338945][T29383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6266'.
[  880.404958][  T197] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.412696][  T197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  880.439813][T29385] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  880.588488][T29397] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  880.780219][T29403] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check.
[  880.865022][T29401] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check.
[  881.094681][T29415] netlink: 'syz.2.6276': attribute type 21 has an invalid length.
[  881.420314][T29438] ip6erspan0: entered allmulticast mode
[  881.454289][T29171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  881.501564][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.557589][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.574896][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.583826][T29171] veth0_vlan: entered promiscuous mode
[  881.596233][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.617236][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.623120][T29445] netlink: 'syz.3.6282': attribute type 4 has an invalid length.
[  881.628840][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.651558][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.663373][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.680042][T29171] veth1_vlan: entered promiscuous mode
[  881.689049][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.706398][T29441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.763900][T29171] veth0_macvtap: entered promiscuous mode
[  881.774711][T29171] veth1_macvtap: entered promiscuous mode
[  881.794536][T29447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.806490][T29447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.832340][T21692] Bluetooth: hci2: command tx timeout
[  881.842521][T29171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.858773][T29171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.908301][  T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.921339][T29444] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  881.956241][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  881.973988][T29453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.992159][T28408] IPVS: starting estimator thread 0...
[  882.001907][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.022452][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  882.269552][T29454] IPVS: using max 40 ests per chain, 96000 per kthread
[  882.315784][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  882.325116][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.377643][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  882.386893][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.769469][T29483] mac80211_hwsim hwsim59 ÿ
: renamed from wlan1 (while UP)
[  883.018636][T29491] bridge0: port 3(veth1_to_bridge) entered blocking state
[  883.026175][T29491] bridge0: port 3(veth1_to_bridge) entered disabled state
[  883.048881][T29491] veth1_to_bridge: entered allmulticast mode
[  883.085039][T29491] veth1_to_bridge: entered promiscuous mode
[  883.402436][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6299'.
[  883.460960][T29503] sctp: [Deprecated]: syz.3.6302 (pid 29503) Use of int in max_burst socket option.
[  883.460960][T29503] Use struct sctp_assoc_value instead
[  883.942442][T21692] Bluetooth: hci2: command tx timeout
[  884.243542][T29538] netlink: 'syz.3.6310': attribute type 29 has an invalid length.
[  888.039894][T29548] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check.
[  888.360713][T29560] syzkaller1: entered promiscuous mode
[  888.366232][T29560] syzkaller1: entered allmulticast mode
[  888.383436][T29565] netlink: 'syz.2.6318': attribute type 11 has an invalid length.
[  888.435848][T29565] netlink: 'syz.2.6318': attribute type 11 has an invalid length.
[  888.466047][T29565] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6318'.
[  888.479497][T29572] ip_vti0: left allmulticast mode
[  888.540165][T29572] team0: entered promiscuous mode
[  888.549643][T29572] 8021q: adding VLAN 0 to HW filter on device team0
[  888.793195][T29581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6326'.
[  888.803292][T29581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6326'.
[  888.810801][T29579] netlink: 'syz.4.6323': attribute type 10 has an invalid length.
[  888.831919][T29583] netlink: 'syz.3.6324': attribute type 1 has an invalid length.
[  888.980458][T29592] tipc: Started in network mode
[  888.985927][T29592] tipc: Node identity ac14140f, cluster identity 4711
[  888.994197][T29592] tipc: New replicast peer: 255.255.255.255
[  889.000996][T29592] tipc: Enabled bearer <udp:s2>, priority 10
[  889.091592][T29597] tipc: Started in network mode
[  889.110455][T29597] tipc: Node identity 9a67bc35994c, cluster identity 4711
[  889.117757][T29597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  889.135342][T29597] syzkaller0: entered promiscuous mode
[  889.140847][T29597] syzkaller0: entered allmulticast mode
[  889.191015][T29600] openvswitch: netlink: nsh attr 109 is out of range max 3
[  889.192919][T29597] tipc: Resetting bearer <eth:syzkaller0>
[  889.218055][T29603] netlink: 'syz.1.6329': attribute type 9 has an invalid length.
[  889.225829][T29603] netlink: 'syz.1.6329': attribute type 6 has an invalid length.
[  889.234958][T29596] tipc: Resetting bearer <eth:syzkaller0>
[  889.258360][T29596] tipc: Disabling bearer <eth:syzkaller0>
[  889.367518][T29610] syzkaller0: entered promiscuous mode
[  889.372991][T29610] syzkaller0: entered allmulticast mode
[  890.123074][T17033] tipc: Node number set to 2886997007
[  890.599082][T29655] xt_CT: No such helper "snmp"
[  890.620659][T29655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6348'.
[  890.661594][T29659] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6349'.
[  890.670674][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6349'.
[  890.802120][T29667] geneve2: entered promiscuous mode
[  890.809664][ T1046] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 34083 - 0
[  890.822871][ T1046] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 34083 - 0
[  890.836877][ T1046] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 34083 - 0
[  890.845696][ T1046] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 34083 - 0
[  890.861986][T29667] syzkaller0: entered promiscuous mode
[  890.867477][T29667] syzkaller0: entered allmulticast mode
[  890.892571][T29669] syzkaller1: tun_chr_ioctl cmd 1074025677
[  890.898502][T29669] syzkaller1: Refused to change device type
[  890.906782][T29669] syzkaller1: tun_chr_ioctl cmd 3224918121
[  890.921162][T29669] syzkaller0: entered promiscuous mode
[  890.926665][T29669] syzkaller0: entered allmulticast mode
[  890.991241][T29678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6352'.
[  891.035430][T29681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.050454][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6354'.
[  891.146458][T29683] netlink: 'syz.0.6355': attribute type 2 has an invalid length.
[  891.155165][T29683] netlink: 'syz.0.6355': attribute type 2 has an invalid length.
[  891.162896][T29683] netlink: 67 bytes leftover after parsing attributes in process `syz.0.6355'.
[  891.615081][T29698] xt_hashlimit: size too large, truncated to 1048576
[  891.776287][T29707] netlink: 'syz.3.6362': attribute type 1 has an invalid length.
[  891.825849][T29707] 8021q: adding VLAN 0 to HW filter on device bond2
[  891.847470][T29707] netlink: 'syz.3.6362': attribute type 5 has an invalid length.
[  891.986238][T29715] netlink: 'syz.3.6362': attribute type 10 has an invalid length.
[  891.994994][T29715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6362'.
[  892.300726][T29707] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  892.328336][T29713] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  892.339624][T29715] dummy0: entered promiscuous mode
[  892.346175][T29715] bond2: (slave dummy0): Releasing backup interface
[  892.538903][T29729] netlink: 'syz.3.6368': attribute type 2 has an invalid length.
[  892.547027][T29729] netlink: 'syz.3.6368': attribute type 2 has an invalid length.
[  892.554976][T29729] netlink: 'syz.3.6368': attribute type 2 has an invalid length.
[  892.635786][T29734] sctp: [Deprecated]: syz.3.6370 (pid 29734) Use of int in max_burst socket option deprecated.
[  892.635786][T29734] Use struct sctp_assoc_value instead
[  892.662271][T29736] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  892.670030][T29736] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  892.830267][T16306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  892.841435][T16306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  892.849797][T16306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  892.857720][T16306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  892.865296][T16306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  893.727599][T29739] lo speed is unknown, defaulting to 1000
[  893.754315][T29766] xt_hashlimit: size too large, truncated to 1048576
[  894.154975][T29785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6379'.
[  894.167511][T29785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6379'.
[  894.395928][T29739] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.403199][T29739] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.410452][T29739] bridge_slave_0: entered allmulticast mode
[  894.418185][T29739] bridge_slave_0: entered promiscuous mode
[  894.427336][T29739] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.429912][T29796] netlink: 'syz.3.6384': attribute type 1 has an invalid length.
[  894.449180][T29739] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.456476][T29739] bridge_slave_1: entered allmulticast mode
[  894.464255][T29739] bridge_slave_1: entered promiscuous mode
[  894.508011][T29739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  894.557866][T29796] 8021q: adding VLAN 0 to HW filter on device bond3
[  894.570545][T29739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  894.633306][T29800] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  894.678050][T29739] team0: Port device team_slave_0 added
[  894.689876][T29796] macvlan2: entered promiscuous mode
[  894.695556][T29796] macvlan2: entered allmulticast mode
[  894.701993][T29796] bond3: entered promiscuous mode
[  894.707051][T29796] veth0_to_bond: entered promiscuous mode
[  894.714403][T29796] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  894.723547][T29796] bond3: left promiscuous mode
[  894.728345][T29796] veth0_to_bond: left promiscuous mode
[  894.752324][T29739] team0: Port device team_slave_1 added
[  894.823850][T29739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  894.830824][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.857590][T29739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  894.870431][T29739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  894.895310][T16306] Bluetooth: hci4: command tx timeout
[  894.904741][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.930648][T29739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  895.062364][T29739] hsr_slave_0: entered promiscuous mode
[  895.070520][T29739] hsr_slave_1: entered promiscuous mode
[  895.079915][T29739] debugfs: 'hsr0' already exists in 'hsr'
[  895.086624][T29739] Cannot create hsr debugfs directory
[  895.285836][T29814] netlink: 'syz.3.6390': attribute type 15 has an invalid length.
[  895.477319][T29739] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  895.521111][T29739] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.528334][T29823] nbd: nbd0 already in use
[  895.531268][T29739] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57817 - 0
[  895.537046][T29824] nbd: nbd0 already in use
[  895.573564][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'.
[  895.582477][T29826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6395'.
[  895.603337][T29820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6392'.
[  895.616358][T29820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6392'.
[  895.714838][  T197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  895.724448][  T197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  895.739747][T29828] netlink: 'syz.0.6396': attribute type 1 has an invalid length.
[  895.760967][T29739] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  895.773971][T29739] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.783722][T29739] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57817 - 0
[  895.802773][  T197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  895.830822][  T197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  895.901334][   T29] audit: type=1804 audit(1784553977.707:20): pid=29833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6398" name="/newroot/107/cgroup.controllers" dev="tmpfs" ino=562 res=1 errno=0
[  895.923756][   T29] audit: type=1800 audit(1784553977.707:21): pid=29833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6398" name="cgroup.controllers" dev="tmpfs" ino=562 res=0 errno=0
[  896.026359][T29835] bridge: RTM_NEWNEIGH with invalid state 0x20
[  896.036361][T29739] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.046137][T29739] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.055883][T29739] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57817 - 0
[  896.368760][T29840] syzkaller0: entered promiscuous mode
[  896.374266][T29840] syzkaller0: entered allmulticast mode
[  896.455907][T29739] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.465799][T29739] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.475551][T29739] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57817 - 0
[  896.911548][T29856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6408'.
[  896.922788][T29854] syzkaller0: entered promiscuous mode
[  896.928573][T29854] syzkaller0: entered allmulticast mode
[  896.936751][T29858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6409'.
[  896.991800][T16306] Bluetooth: hci4: command tx timeout
[  897.219794][T29739] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  897.268273][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  897.289412][T29739] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  897.344277][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  897.360827][T29739] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  897.397574][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  897.434642][T29739] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  897.500805][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  897.744933][T29902] netlink: 'syz.3.6418': attribute type 1 has an invalid length.
[  897.787052][T29902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6418'.
[  897.797659][T29902] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.6418'.
[  897.946151][T29739] 8021q: adding VLAN 0 to HW filter on device bond0
[  897.959291][T29917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  897.976958][T29739] 8021q: adding VLAN 0 to HW filter on device team0
[  898.026253][T28726] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.033414][T28726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  898.057224][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.064375][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  898.349413][T29933] syz_tun: entered allmulticast mode
[  898.534293][T29933] syz_tun: left allmulticast mode
[  898.847105][T29949] netlink: 'syz.0.6430': attribute type 1 has an invalid length.
[  898.871972][T29949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  899.113664][T16306] Bluetooth: hci4: command tx timeout
[  899.151105][T29739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  899.207706][T29975] __nla_validate_parse: 2 callbacks suppressed
[  899.207724][T29975] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6436'.
[  899.317635][T29975] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6436'.
[  899.400789][T29984] sctp: [Deprecated]: syz.2.6437 (pid 29984) Use of int in max_burst socket option.
[  899.400789][T29984] Use struct sctp_assoc_value instead
[  899.923178][T30007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6444'.
[  900.078885][T29739] veth0_vlan: entered promiscuous mode
[  900.123382][T29739] veth1_vlan: entered promiscuous mode
[  900.149711][T29739] veth0_macvtap: entered promiscuous mode
[  900.178614][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6447'.
[  900.281745][T29739] veth1_macvtap: entered promiscuous mode
[  900.343200][T29739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  900.381288][T29739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  900.452593][ T7049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.505488][ T7049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.584218][ T7049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.596068][ T7049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.640851][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  900.806611][T11160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  900.814573][T11160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.885887][T30045] xt_l2tp: v2 tid > 0xffff: 1114244
[  900.906457][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  900.914693][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.138273][T16306] Bluetooth: hci4: command tx timeout
[  901.171536][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6371'.
[  901.832708][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'.
[  901.860724][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'.
[  902.152145][T30109] openvswitch: netlink: IPv4 tun info is not correct
[  902.294835][T30121] x_tables: duplicate underflow at hook 1
[  902.329877][T30125] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  902.547171][T30135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  902.570396][T30135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  902.804829][T30150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  902.812254][T30150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.829499][T30150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  902.867754][T30150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  902.980530][T30153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6484'.
[  903.216639][T16306] Bluetooth: hci4: command tx timeout
[  925.718698][T30172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6493'.
[  925.811588][T30183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6495'.
[  925.878415][T30183] Bluetooth: MGMT ver 1.23
[  925.993824][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6498'.
[  926.018828][T30191] xt_l2tp: v2 doesn't support IP mode
[  926.428351][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6503'.
[  926.440061][ T7117] IPVS: starting estimator thread 0...
[  926.587917][T30216] IPVS: using max 33 ests per chain, 79200 per kthread
[  926.683656][T30225] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  926.738669][T30220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.846001][T30234] v: renamed from veth0_vlan (while UP)
[  926.950624][T30236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6512'.
[  926.959616][T30236] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6512'.
[  926.968568][T30236] netlink: 'syz.1.6512': attribute type 5 has an invalid length.
[  927.031183][T30236] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6512'.
[  927.039723][T30239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.099543][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6512'.
[  927.276718][T30254] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  927.587957][T30270] netlink: 'syz.4.6518': attribute type 21 has an invalid length.
[  927.739787][T30278] syzkaller1: entered promiscuous mode
[  927.768965][T30278] syzkaller1: entered allmulticast mode
[  927.835528][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'.
[  928.186642][T30297] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.205265][T30297] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.369342][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6529'.
[  928.628219][T30319] netlink: 'syz.4.6535': attribute type 1 has an invalid length.
[  928.661864][ T5804] tipc: Node number set to 53197877
[  928.667492][T28723] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.677148][T28723] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.686945][T28723] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.695845][T28723] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  929.246438][T30349] netlink: 'syz.2.6543': attribute type 5 has an invalid length.
[  929.365386][T30351] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  929.378005][T30351] bond2 (unregistering): Released all slaves
[  929.450515][T30359] --map-set only usable from mangle table
[  929.959615][T30377] lo speed is unknown, defaulting to 1000
[  930.271012][T30391] lo speed is unknown, defaulting to 1000
[  930.344354][T30405] netlink: 'syz.0.6562': attribute type 32 has an invalid length.
[  930.344969][T30406] netlink: 'syz.0.6562': attribute type 32 has an invalid length.
[  930.376845][T30405] bond2: option coupled_control: invalid value (72)
[  930.385223][T30405] bond2 (unregistering): Released all slaves
[  930.584538][T30406] bond2: option coupled_control: invalid value (72)
[  930.643472][T30406] bond2 (unregistering): Released all slaves
[  930.823363][T30419] netlink: 'syz.3.6566': attribute type 49 has an invalid length.
[  930.957569][T30423] __nla_validate_parse: 7 callbacks suppressed
[  930.957586][T30423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6568'.
[  930.958673][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6568'.
[  931.224780][T30419] ip6gretap0: entered promiscuous mode
[  931.230403][T30419] ip6gretap0: entered allmulticast mode
[  931.603350][T30446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6574'.
[  931.620936][T30450] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6575'.
[  931.665473][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'.
[  931.699581][T30452] netlink: 'syz.0.6573': attribute type 5 has an invalid length.
[  931.725932][T30452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6573'.
[  931.815618][T30444] netlink: 'syz.0.6573': attribute type 1 has an invalid length.
[  931.846453][T30457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  931.992183][T30452] bond2: (slave geneve2): making interface the new active one
[  932.004342][T30452] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  932.026816][T11153] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  932.035660][T11153] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  932.044473][T11153] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  932.053277][T11153] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  932.353284][T30481] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6582'.
[  933.354697][T30506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6587'.
[  935.317943][T30476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  935.528018][T30514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6588'.
[  935.587729][T30522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6590'.
[  935.628381][T30524] xt_hashlimit: size too large, truncated to 1048576
[  935.632434][T30528] openvswitch: netlink: Message has 8 unknown bytes.
[  935.649034][T30512] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  935.672964][T30528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  935.779729][T30537] netlink: 'syz.0.6592': attribute type 1 has an invalid length.
[  936.164070][T30543] syzkaller0: entered promiscuous mode
[  936.173139][T30543] syzkaller0: entered allmulticast mode
[  936.237188][T30547] pimreg3: entered allmulticast mode
[  936.244833][T30544] netlink: 'syz.3.6593': attribute type 1 has an invalid length.
[  936.409192][T30551] SET target dimension over the limit!
[  936.789352][T30572] Bluetooth: MGMT ver 1.23
[  936.902477][T30576] __nla_validate_parse: 2 callbacks suppressed
[  936.902494][T30576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6606'.
[  936.917541][T30576] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6606'.
[  936.927737][T30576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6606'.
[  937.046172][T30576] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  937.415107][T30604] netlink: 'syz.3.6616': attribute type 13 has an invalid length.
[  937.422961][T30604] netlink: 556 bytes leftover after parsing attributes in process `syz.3.6616'.
[  937.514040][T30616] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6616'.
[  937.525294][T30616] netlink: 'syz.3.6616': attribute type 83 has an invalid length.
[  937.633459][T30610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6613'.
[  937.838466][T30627] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6619'.
[  937.875590][T30629] geneve3: entered promiscuous mode
[  937.880838][T30629] geneve3: entered allmulticast mode
[  937.894416][T30629] syzkaller0: entered promiscuous mode
[  937.899921][T30629] syzkaller0: entered allmulticast mode
[  938.168053][T30642] geneve3: entered promiscuous mode
[  938.169582][T30644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6625'.
[  938.173879][T30642] geneve3: entered allmulticast mode
[  938.190364][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[  938.199223][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  938.214252][T30644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6625'.
[  938.223429][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  938.232242][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  938.241060][T30646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  938.326449][T30649] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6626'.
[  938.888855][T30673] xt_hashlimit: size too large, truncated to 1048576
[  939.412582][T30704] x_tables: unsorted underflow at hook 2
[  939.527502][T30715] bridge2: port 1(erspan0) entered blocking state
[  939.534147][T30715] bridge2: port 1(erspan0) entered disabled state
[  939.540786][T30715] erspan0: entered allmulticast mode
[  939.581782][T30715] erspan0: entered promiscuous mode
[  939.589051][T30715] bridge2: port 1(erspan0) entered blocking state
[  939.595589][T30715] bridge2: port 1(erspan0) entered forwarding state
[  939.659644][T30726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  939.734352][T30733] bridge2: entered promiscuous mode
[  939.739659][T30733] bridge2: entered allmulticast mode
[  939.754787][T30733] bridge3: entered promiscuous mode
[  939.760086][T30733] bridge3: entered allmulticast mode
[  939.775689][T30733] bridge4: entered promiscuous mode
[  939.780984][T30733] bridge4: entered allmulticast mode
[  939.794990][T30733] bridge5: entered promiscuous mode
[  939.913911][T30733] bridge5: entered allmulticast mode
[  940.006778][T30733] bridge6: entered promiscuous mode
[  940.012036][T30733] bridge6: entered allmulticast mode
[  940.020207][T30746] veth0_to_bridge: entered promiscuous mode
[  940.095519][T30733] bridge7: entered promiscuous mode
[  940.100937][T30733] bridge7: entered allmulticast mode
[  940.108381][T30745] veth0_to_bridge: left promiscuous mode
[  940.203844][T30733] bridge8: entered promiscuous mode
[  940.227892][T30733] bridge8: entered allmulticast mode
[  940.246921][T30733] bridge9: entered promiscuous mode
[  940.292373][T30733] bridge9: entered allmulticast mode
[  940.321983][T30733] bridge10: entered promiscuous mode
[  940.332784][T30733] bridge10: entered allmulticast mode
[  940.360052][T30733] bridge11: entered promiscuous mode
[  940.370977][T30733] bridge11: entered allmulticast mode
[  940.421070][T30733] bridge12: entered promiscuous mode
[  940.426490][T30733] bridge12: entered allmulticast mode
[  940.454528][T30733] bridge13: entered promiscuous mode
[  940.459996][T30733] bridge13: entered allmulticast mode
[  940.510425][T30733] bridge14: entered promiscuous mode
[  940.534249][T30733] bridge14: entered allmulticast mode
[  940.662582][T30782] netlink: 'syz.2.6664': attribute type 1 has an invalid length.
[  940.758366][T30782] bond1: (slave veth0_to_bond): making interface the new active one
[  940.767774][T30782] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  940.845233][T30788] bridge_slave_1: left allmulticast mode
[  940.850931][T30788] bridge_slave_1: left promiscuous mode
[  940.857482][T30788] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.352884][T30801] netlink: 'syz.2.6668': attribute type 1 has an invalid length.
[  941.549359][T30820] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  941.557152][T30820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  941.629161][T30821] netlink: 'syz.2.6674': attribute type 32 has an invalid length.
[  941.646035][T30821] netlink: 'syz.2.6674': attribute type 17 has an invalid length.
[  941.675054][T30821] gretap0: entered promiscuous mode
[  941.765001][T30821] gretap0: left promiscuous mode
[  941.950285][T30837] __nla_validate_parse: 14 callbacks suppressed
[  941.950304][T30837] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6680'.
[  942.196306][T30846] netlink: 'syz.0.6683': attribute type 29 has an invalid length.
[  942.208282][T30846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6683'.
[  942.432097][T30859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6686'.
[  942.487737][T30859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6686'.
[  942.569320][T30865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6688'.
[  942.698800][T30883] netdevsim netdevsim4: Direct firmware load for . failed with error -2
[  942.726955][T30865] 8021q: adding VLAN 0 to HW filter on device bond2
[  942.734383][T30878] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6691'.
[  942.739304][T30883] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  942.890165][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6698'.
[  942.908406][T30897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6698'.
[  942.951001][T30901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6699'.
[  943.077245][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'.
[  943.109748][T30903] netlink: 'syz.0.6700': attribute type 8 has an invalid length.
[  943.794344][T30952] netlink: 'syz.1.6713': attribute type 10 has an invalid length.
[  943.828972][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  943.842159][T30952] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  944.049399][T30960] sctp: [Deprecated]: syz.0.6716 (pid 30960) Use of int in max_burst socket option deprecated.
[  944.049399][T30960] Use struct sctp_assoc_value instead
[  944.296723][T30974] xt_TPROXY: Can be used only with -p tcp or -p udp
[  944.396079][T30981] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  944.547151][   T29] audit: type=1804 audit(1784554026.337:22): pid=30992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6726" name="/newroot/91/cgroup.controllers" dev="tmpfs" ino=480 res=1 errno=0
[  944.648719][   T29] audit: type=1800 audit(1784554026.337:23): pid=30992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6726" name="cgroup.controllers" dev="tmpfs" ino=480 res=0 errno=0
[  944.865599][T31009] syzkaller0: create flow: hash 2552534206 index 1
[  944.953099][T31010] netlink: 'syz.0.6730': attribute type 4 has an invalid length.
[  945.286206][T31020] netlink: 'syz.1.6733': attribute type 83 has an invalid length.
[  945.381370][T31036] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  945.398678][ T7061] syzkaller0: tun_net_xmit 76
[  945.449576][ T7061] syzkaller0: tun_net_xmit 48
[  945.536212][T30996] syzkaller0: delete flow: hash 2552534206 index 1
[  945.829362][T31012] block nbd2: Unsupported socket: should be TCP or UNIX.
[  945.854615][T31012] block nbd2: shutting down sockets
[  949.182659][T31065] geneve3: entered promiscuous mode
[  949.191870][ T1046] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 41152 - 0
[  949.200714][ T1046] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 41152 - 0
[  949.209849][ T1046] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 41152 - 0
[  949.218660][ T1046] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 41152 - 0
[  949.439731][T31085] __nla_validate_parse: 2 callbacks suppressed
[  949.439749][T31085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6743'.
[  949.615684][T31095] syz_tun: entered allmulticast mode
[  949.691377][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6747'.
[  949.737486][T31095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6748'.
[  950.988253][T31131] syzkaller0: entered promiscuous mode
[  950.993775][T31131] syzkaller0: entered allmulticast mode
[  951.320049][T31094] syz_tun: left allmulticast mode
[  951.402497][T31094] syz.0.6748 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  951.413495][T31094] CPU: 0 UID: 0 PID: 31094 Comm: syz.0.6748 Not tainted syzkaller #0 PREEMPT(full) 
[  951.413519][T31094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  951.413531][T31094] Call Trace:
[  951.413539][T31094]  <TASK>
[  951.413548][T31094]  dump_stack_lvl+0xe8/0x150
[  951.413585][T31094]  dump_header+0xd3/0x4b0
[  951.413618][T31094]  oom_kill_process+0x3ab/0x970
[  951.413644][T31094]  out_of_memory+0x1064/0x1480
[  951.413661][T31094]  ? try_charge_memcg+0xbca/0x1590
[  951.413701][T31094]  ? __pfx_out_of_memory+0x10/0x10
[  951.413717][T31094]  ? do_raw_spin_unlock+0xf5/0x210
[  951.413754][T31094]  try_charge_memcg+0xc74/0x1590
[  951.413795][T31094]  ? __pfx_try_charge_memcg+0x10/0x10
[  951.413818][T31094]  ? percpu_ref_tryget+0x15/0x180
[  951.413865][T31094]  ? charge_memcg+0x20/0x2b0
[  951.413892][T31094]  charge_memcg+0x19c/0x2b0
[  951.413918][T31094]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  951.413943][T31094]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  951.413971][T31094]  swap_cache_alloc_folio+0x4de/0x990
[  951.414007][T31094]  swap_cache_read_folio+0x44/0x120
[  951.414031][T31094]  swap_cluster_readahead+0x3a0/0x640
[  951.414058][T31094]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  951.414093][T31094]  ? get_vma_policy+0x27b/0x3c0
[  951.414123][T31094]  swapin_readahead+0x19a/0xc10
[  951.414147][T31094]  ? swap_table_get+0x1e/0x260
[  951.414167][T31094]  ? swap_table_get+0x1e/0x260
[  951.414187][T31094]  ? __pfx_swapin_readahead+0x10/0x10
[  951.414210][T31094]  ? swap_table_get+0x1e/0x260
[  951.414228][T31094]  ? swap_table_get+0x1e/0x260
[  951.414244][T31094]  ? swap_table_get+0x1e/0x260
[  951.414263][T31094]  ? swap_table_get+0x216/0x260
[  951.414280][T31094]  ? swap_cache_get_folio+0x2e7/0x2f0
[  951.414303][T31094]  do_swap_page+0x455/0x5060
[  951.414338][T31094]  ? __pte_offset_map+0x29/0x240
[  951.414361][T31094]  ? __lock_acquire+0x683/0x2cf0
[  951.414382][T31094]  ? do_swap_page+0x124/0x5060
[  951.414407][T31094]  ? __pfx_do_swap_page+0x10/0x10
[  951.414430][T31094]  ? __pte_offset_map+0x1ae/0x240
[  951.414452][T31094]  ? pte_offset_map_rw_nolock+0xea/0x160
[  951.414475][T31094]  handle_mm_fault+0x124c/0x3080
[  951.414505][T31094]  ? handle_mm_fault+0xec/0x3080
[  951.414528][T31094]  ? __pfx_handle_mm_fault+0x10/0x10
[  951.414543][T31094]  ? lock_vma_under_rcu+0x45a/0x500
[  951.414573][T31094]  ? task_work_run+0x21f/0x270
[  951.414619][T31094]  do_user_addr_fault+0xa4d/0x1340
[  951.414652][T31094]  ? trace_page_fault_user+0x84/0x1e0
[  951.414677][T31094]  exc_page_fault+0x6a/0xc0
[  951.414706][T31094]  asm_exc_page_fault+0x26/0x30
[  951.414722][T31094] RIP: 0033:0x7f98dc79dea1
[  951.414740][T31094] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  951.414754][T31094] RSP: 002b:00007ffe64b2d838 EFLAGS: 00010217
[  951.414769][T31094] RAX: 0000000000000000 RBX: 00007f98dca27da0 RCX: 00007f98dc79de99
[  951.414781][T31094] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  951.414791][T31094] RBP: 00007f98dca27da0 R08: 0000000000000006 R09: 0000000000000000
[  951.414802][T31094] R10: 00007f98dca27cb0 R11: 0000000000000246 R12: 00000000000e8090
[  951.414814][T31094] R13: 00007f98dca2618c R14: 00000000000e7f6a R15: 00007f98dca26180
[  951.414843][T31094]  </TASK>
[  951.414860][T31094] memory: usage 307200kB, limit 307200kB, failcnt 537
[  951.787576][T31094] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0
[  951.795512][T31094] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0
[  951.802806][T31094] Memory cgroup stats for /syz0:
[  951.802929][T31094] cache 0
[  951.813353][T31094] rss 0
[  951.816143][T31094] rss_huge 0
[  951.819340][T31094] shmem 0
[  951.822285][T31094] mapped_file 0
[  951.825741][T31094] dirty 0
[  951.828688][T31094] writeback 0
[  951.831974][T31094] workingset_refault_anon 2
[  951.836468][T31094] workingset_refault_file 0
[  951.840962][T31094] swap 212992
[  951.844238][T31094] swapcached 229376
[  951.848045][T31094] pgpgin 110704
[  951.903173][T31094] pgpgout 110702
[  951.906767][T31094] pgfault 233514
[  951.910311][T31094] pgmajfault 3
[  951.913676][T31094] inactive_anon 0
[  951.917712][T31094] active_anon 8192
[  951.921435][T31094] inactive_file 0
[  951.925063][T31094] active_file 0
[  951.928516][T31094] unevictable 0
[  951.931971][T31094] hierarchical_memory_limit 314572800
[  951.937332][T31094] hierarchical_memsw_limit 9223372036854771712
[  951.943481][T31094] total_cache 0
[  951.946939][T31094] total_rss 0
[  951.950225][T31094] total_rss_huge 0
[  951.953981][T31094] total_shmem 0
[  951.957438][T31094] total_mapped_file 0
[  951.971812][T31094] total_dirty 0
[  951.975295][T31094] total_writeback 0
[  951.979098][T31094] total_workingset_refault_anon 2
[  951.984109][T31094] total_workingset_refault_file 0
[  951.989121][T31094] total_swap 212992
[  951.992918][T31094] total_swapcached 229376
[  951.997232][T31094] total_pgpgin 110707
[  952.001202][T31094] total_pgpgout 110705
[  952.005257][T31094] total_pgfault 233520
[  952.009312][T31094] total_pgmajfault 3
[  952.013196][T31094] total_inactive_anon 0
[  952.017360][T31094] total_active_anon 8192
[  952.021591][T31094] total_inactive_file 0
[  952.025739][T31094] total_active_file 0
[  952.029715][T31094] total_unevictable 0
[  952.033695][T31094] anon_cost 0
[  952.036986][T31094] file_cost 0
[  952.040273][T31094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6748,pid=31094,uid=0
[  952.055405][T31094] Memory cgroup out of memory: Killed process 31094 (syz.0.6748) total-vm:167972kB, anon-rss:1252kB, file-rss:23320kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  952.266708][T31139] netlink: 'syz.0.6756': attribute type 1 has an invalid length.
[  952.295908][T31139] bond5: option mode: invalid value (7)
[  952.345173][T31139] bond5 (unregistering): Released all slaves
[  952.443706][T31141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  952.610063][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6757'.
[  952.705611][T31100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  953.927768][T31169] geneve4: entered promiscuous mode
[  953.952489][T31169] geneve4: entered allmulticast mode
[  954.045438][T31171] netlink: 'syz.1.6765': attribute type 4 has an invalid length.
[  954.069512][T31171] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6765'.
[  954.286552][T31176] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6765'.
[  954.312422][T31176] openvswitch: netlink: Message has 512 unknown bytes.
[  954.337777][T31176] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6765'.
[  956.195479][T31150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  958.560723][  T197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  958.569572][  T197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  958.578552][  T197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  958.618662][T31196] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  958.850124][  T197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  958.881771][T31205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6772'.
[  959.196591][T31238] gre1: entered promiscuous mode
[  959.201584][T31238] gre1: entered allmulticast mode
[  959.241354][T31236] netlink: 'syz.3.6782': attribute type 9 has an invalid length.
[  959.329901][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6784'.
[  959.379764][T31240] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.399392][T31240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  959.983050][T31268] netlink: 'syz.0.6792': attribute type 1 has an invalid length.
[  963.483089][T31287] netlink: 'syz.4.6795': attribute type 17 has an invalid length.
[  963.490975][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'.
[  963.499845][T31287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6795'.
[  963.949040][T31310] netlink: 'syz.0.6804': attribute type 1 has an invalid length.
[  964.034699][T31310] 8021q: adding VLAN 0 to HW filter on device bond5
[  964.082011][T31320] vlan2: entered promiscuous mode
[  964.087774][T31320] bond5: entered promiscuous mode
[  964.094079][T31320] vlan2: entered allmulticast mode
[  964.100471][T31320] bond5: entered allmulticast mode
[  964.319878][T31331] netlink: 'syz.2.6812': attribute type 1 has an invalid length.
[  964.422806][T31341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6810'.
[  967.977558][T31310] bond5: (slave bridge15): making interface the new active one
[  967.985481][T31310] bridge15: entered promiscuous mode
[  967.991132][T31310] bridge15: entered allmulticast mode
[  967.999729][T31310] bond5: (slave bridge15): Enslaving as an active interface with an up link
[  968.019621][T31331] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  968.304157][T31351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6815'.
[  968.875990][T31375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6820'.
[  968.973754][T31382] ip6gre1: entered allmulticast mode
[  969.009912][ T1173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  969.266634][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6825'.
[  969.497928][T31410] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6828'.
[  969.782978][T31420] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  973.333937][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  973.428923][ T5287] v: left promiscuous mode
[  973.538945][T18571] v: entered promiscuous mode
[  973.947971][T31466] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.6840'.
[  973.957394][T31466] netlink: 'syz.3.6840': attribute type 1 has an invalid length.
[  974.499323][T31434] Bluetooth: hci1: command 0x0406 tx timeout
[  974.579982][T31492] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6847'.
[  975.610229][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6857'.
[  977.444517][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  979.296023][T31562] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  979.363292][T31562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6861'.
[  979.464288][T31569] netlink: 'syz.1.6863': attribute type 11 has an invalid length.
[  979.596051][T31434] Bluetooth: hci0: command 0x0406 tx timeout
[  979.825554][T31577] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  979.828107][T18571] IPVS: starting estimator thread 0...
[  980.085803][T31598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6873'.
[  980.152254][T31598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6873'.
[  980.203581][T31587] IPVS: using max 32 ests per chain, 76800 per kthread
[  980.257214][T31606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6875'.
[  980.276882][T31606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6875'.
[  980.294343][T31606] erspan0: entered promiscuous mode
[  980.384476][T31606] gretap0: entered promiscuous mode
[  981.275082][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6879'.
[  982.566917][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  984.635385][T31434] Bluetooth: hci5: command 0x0406 tx timeout
[  984.915234][T31629] bond0: (slave bond_slave_1): Releasing backup interface
[  985.122352][T31641] x_tables: unsorted underflow at hook 2
[  985.314967][T31651] xt_hashlimit: size too large, truncated to 1048576
[  985.349146][T31652] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6889'.
[  985.460450][T31657] syzkaller0: entered promiscuous mode
[  985.516650][T31657] syzkaller0: entered allmulticast mode
[  986.042583][T31682] netlink: 420 bytes leftover after parsing attributes in process `syz.4.6898'.
[  986.058153][T31686] netlink: 'syz.2.6899': attribute type 9 has an invalid length.
[  990.283442][T31696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6903'.
[  990.459042][T31703] netlink: 'syz.3.6904': attribute type 11 has an invalid length.
[  990.466906][T31703] netlink: 'syz.3.6904': attribute type 4 has an invalid length.
[  990.480928][T31703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6904'.
[  990.511252][T31703] vlan3: entered promiscuous mode
[  990.567623][T31703] syz_tun: entered promiscuous mode
[  990.731915][T31717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6909'.
[  990.811034][T31717] geneve2: entered promiscuous mode
[  990.915052][T31728] IPVS: Unknown mcast interface: caif0
[  991.009979][T31732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6914'.
[  991.287586][T31753] x_tables: unsorted entry at hook 1
[  991.306350][T31753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6919'.
[  991.446102][T31748] IPVS: persistence engine module ip_vs_pe_À
 not found
[  991.622811][T31769] set match dimension is over the limit!
[  991.643327][T31765] set match dimension is over the limit!
[  991.656624][T31776] Cannot find set identified by id 0 to match
[  991.678833][T31776] veth0: entered promiscuous mode
[  991.865296][T11153] tipc: Subscription rejected, illegal request
[  992.409005][T31762] veth0: left promiscuous mode
[  992.757592][T31829] IPv6: sit1: Disabled Multicast RS
[  992.763888][T31829] sit1: entered allmulticast mode
[  993.007180][T31839] veth1_macvtap: left promiscuous mode
[  993.013091][T31839] macsec0: entered promiscuous mode
[  993.018383][T31839] macsec0: entered allmulticast mode
[  993.043866][T31840] veth1_macvtap: entered promiscuous mode
[  993.049633][T31840] veth1_macvtap: entered allmulticast mode
[  993.055916][T31840] macsec0: left promiscuous mode
[  993.115884][T31840] macsec0: left allmulticast mode
[  993.139347][T31840] veth1_macvtap: left allmulticast mode
[  993.342426][T31847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6942'.
[  993.795331][T31865] xt_hashlimit: size too large, truncated to 1048576
[  993.988200][T31876] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6951'.
[  994.020583][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6951'.
[  994.248920][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6957'.
[  994.318810][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6957'.
[  994.823308][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'.
[  994.850853][T31931] netlink: 'syz.3.6966': attribute type 1 has an invalid length.
[  994.896299][T31931] bond4: entered promiscuous mode
[  994.907087][T31931] 8021q: adding VLAN 0 to HW filter on device bond4
[  994.913267][T31937] netlink: 'syz.4.6969': attribute type 2 has an invalid length.
[  994.984337][T31931] 8021q: adding VLAN 0 to HW filter on device bond4
[  994.998621][T31931] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  995.017119][T31931] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  995.030039][T31931] bond4: (slave vti0): making interface the new active one
[  995.037478][T31931] vti0: entered promiscuous mode
[  995.044028][T31931] bond4: (slave vti0): Enslaving as an active interface with an up link
[  995.068726][T31944] netlink: 'syz.3.6966': attribute type 11 has an invalid length.
[  995.504500][T31961] geneve3: entered promiscuous mode
[  995.514555][T31964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6978'.
[  995.564452][T31969] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6980'.
[  995.740849][T31975] x_tables: duplicate underflow at hook 3
[  995.767241][T31976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6984'.
[  995.810080][T31977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.890666][T31977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.975438][T31985] ip_vti0: entered promiscuous mode
[  995.987475][T31985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6983'.
[  996.011901][T31992] syzkaller1: entered promiscuous mode
[  996.017408][T31992] syzkaller1: entered allmulticast mode
[  996.459641][T32014] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6994'.
[  996.470040][T32016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6993'.
[  996.522165][T32016] Cannot find set identified by id 65534 to match
[  996.773265][T32033] openvswitch: netlink: Key type 31 is not supported
[  996.898401][T32038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7001'.
[  996.908377][T32038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7001'.
[  997.042598][T32042] x_tables: unsorted underflow at hook 1
[  997.161112][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7004'.
[  997.322789][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7004'.
[  997.616844][T32064] block nbd2: shutting down sockets
[  998.128050][T32106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  998.522195][T32129] 8021q: VLANs not supported on lo
[  998.564533][T32129] bridge_slave_0: left allmulticast mode
[  998.606436][T32134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  998.614375][T32134] IPv6: NLM_F_CREATE should be set when creating new route
[  998.622290][T32134] IPv6: NLM_F_CREATE should be set when creating new route
[  998.628469][T32129] bridge_slave_0: left promiscuous mode
[  998.630070][T32134] IPv6: NLM_F_CREATE should be set when creating new route
[  998.635265][T32129] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.658827][T32135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  998.682779][T32129] bond3: (slave veth0_to_bond): Releasing backup interface
[  998.702027][T32129] bond0: (slave bond_slave_0): Releasing backup interface
[  998.793945][T32129] bond0: (slave bond_slave_1): Releasing backup interface
[  998.844384][T32129] team0: Port device team_slave_0 removed
[  998.852103][T32129] team0: Port device team_slave_1 removed
[  998.858308][T32129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  998.949794][T32143] veth0: entered promiscuous mode
[  998.966780][T32141] veth0: left promiscuous mode
[  999.089957][T32147] netlink: 'syz.4.7031': attribute type 1 has an invalid length.
[  999.215219][T32147] bond2: entered promiscuous mode
[  999.220648][T32147] 8021q: adding VLAN 0 to HW filter on device bond2
[  999.826279][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1000.341069][T32212] syzkaller0: entered promiscuous mode
[ 1000.385692][T32212] syzkaller0: entered allmulticast mode
[ 1000.456980][T32224] tipc: Failed to remove unknown binding: 66,0,0/0:1539079345/1539079347
[ 1000.465455][T32224] tipc: Failed to remove unknown binding: 66,0,0/0:1539079345/1539079346
[ 1000.478601][T32224] tipc: Failed to remove unknown binding: 66,0,0/0:1539079345/1539079347
[ 1000.505582][T32224] tipc: Failed to remove unknown binding: 66,0,0/0:1539079345/1539079346
[ 1000.533705][T32224] tipc: Started in network mode
[ 1000.538610][T32224] tipc: Node identity e0000001, cluster identity 4711
[ 1000.545416][T32224] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1000.741587][T32242] netlink: 'syz.3.7057': attribute type 1 has an invalid length.
[ 1000.756361][T32245] __nla_validate_parse: 6 callbacks suppressed
[ 1000.756377][T32245] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.7057'.
[ 1001.127489][T32267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7063'.
[ 1001.205063][T32273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7065'.
[ 1001.436549][T32280] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7068'.
[ 1001.775290][T32300] netlink: 'syz.1.7073': attribute type 1 has an invalid length.
[ 1001.862188][T32300] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1001.873329][T32300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7073'.
[ 1001.882222][T32300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7073'.
[ 1002.099291][T32315] nbd: must specify a device to reconfigure
[ 1002.226091][T32323] x_tables: duplicate underflow at hook 1
[ 1002.398027][T32326] netlink: 4084 bytes leftover after parsing attributes in process `syz.3.7079'.
[ 1002.712206][T32347] netlink: 'syz.2.7085': attribute type 10 has an invalid length.
[ 1002.817391][T32347] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1002.840810][T32347] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1003.100125][T32365] netlink: 'syz.0.7090': attribute type 21 has an invalid length.
[ 1003.137229][T32365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7090'.
[ 1003.290961][T32369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7086'.
[ 1003.383713][T32365] netlink: 'syz.0.7090': attribute type 3 has an invalid length.
[ 1003.429059][T32365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7090'.
[ 1003.483921][T32385] netlink: zone id is out of range
[ 1003.489146][T32385] netlink: zone id is out of range
[ 1003.494293][T32385] netlink: zone id is out of range
[ 1003.987684][T32403] lo speed is unknown, defaulting to 1000
[ 1003.988175][T32406] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1004.084222][T32411] xt_limit: Overflow, try lower: 271964/0
[ 1004.146543][T32402] netlink: 'syz.4.7101': attribute type 5 has an invalid length.
[ 1004.326760][T32427] netlink: 'syz.3.7110': attribute type 3 has an invalid length.
[ 1004.411355][T32427] netlink: 'syz.3.7110': attribute type 3 has an invalid length.
[ 1005.098939][T32457] syzkaller0: entered promiscuous mode
[ 1005.105183][T32457] syzkaller0: entered allmulticast mode
[ 1005.249944][T16306] block nbd2: Receive control failed (result -1)
[ 1005.262824][T16306] 
[ 1005.265180][T16306] ======================================================
[ 1005.272266][T16306] WARNING: possible circular locking dependency detected
[ 1005.279346][T16306] syzkaller #0 Not tainted
[ 1005.283754][T16306] ------------------------------------------------------
[ 1005.290811][T16306] kworker/u9:0/16306 is trying to acquire lock:
[ 1005.297029][T16306] ffff88806585b860 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390
[ 1005.306531][T16306] 
[ 1005.306531][T16306] but task is already holding lock:
[ 1005.313887][T16306] ffff88807fd73468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[ 1005.322865][T16306] 
[ 1005.322865][T16306] which lock already depends on the new lock.
[ 1005.322865][T16306] 
[ 1005.333261][T16306] 
[ 1005.333261][T16306] the existing dependency chain (in reverse order) is:
[ 1005.342280][T16306] 
[ 1005.342280][T16306] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1005.350018][T16306]        __mutex_lock+0x19d/0x1550
[ 1005.355122][T16306]        nbd_queue_rq+0x373/0x1150
[ 1005.360275][T16306]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1005.366413][T16306]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1005.373302][T16306]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1005.379799][T16306]        blk_mq_run_work_fn+0x16c/0x300
[ 1005.385345][T16306]        process_scheduled_works+0xa8e/0x14e0
[ 1005.391410][T16306]        worker_thread+0xa47/0xfb0
[ 1005.396512][T16306]        kthread+0x388/0x470
[ 1005.401095][T16306]        ret_from_fork+0x514/0xb70
[ 1005.406227][T16306]        ret_from_fork_asm+0x1a/0x30
[ 1005.411500][T16306] 
[ 1005.411500][T16306] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1005.418694][T16306]        __mutex_lock+0x19d/0x1550
[ 1005.423800][T16306]        nbd_queue_rq+0xc1/0x1150
[ 1005.428816][T16306]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1005.434880][T16306]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1005.441740][T16306]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1005.448256][T16306]        blk_mq_run_work_fn+0x16c/0x300
[ 1005.453801][T16306]        process_scheduled_works+0xa8e/0x14e0
[ 1005.459886][T16306]        worker_thread+0xa47/0xfb0
[ 1005.464988][T16306]        kthread+0x388/0x470
[ 1005.469574][T16306]        ret_from_fork+0x514/0xb70
[ 1005.474692][T16306]        ret_from_fork_asm+0x1a/0x30
[ 1005.479984][T16306] 
[ 1005.479984][T16306] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1005.487100][T16306]        __synchronize_srcu+0xc9/0x2f0
[ 1005.492559][T16306]        elevator_switch+0x1e8/0x7b0
[ 1005.497941][T16306]        elevator_change+0x2fa/0x480
[ 1005.503220][T16306]        elevator_set_default+0x375/0x440
[ 1005.508932][T16306]        blk_register_queue+0x3f3/0x4e0
[ 1005.514521][T16306]        __add_disk+0x6cb/0xe30
[ 1005.519359][T16306]        add_disk_fwnode+0x100/0x3a0
[ 1005.524633][T16306]        nbd_dev_add+0x733/0xb60
[ 1005.529563][T16306]        nbd_init+0x15f/0x1e0
[ 1005.534335][T16306]        do_one_initcall+0x250/0x870
[ 1005.539619][T16306]        do_initcall_level+0x10a/0x1a0
[ 1005.545131][T16306]        do_initcalls+0x59/0xa0
[ 1005.549972][T16306]        kernel_init_freeable+0x29d/0x3e0
[ 1005.555678][T16306]        kernel_init+0x1d/0x1d0
[ 1005.560526][T16306]        ret_from_fork+0x514/0xb70
[ 1005.565653][T16306]        ret_from_fork_asm+0x1a/0x30
[ 1005.570938][T16306] 
[ 1005.570938][T16306] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1005.578757][T16306]        __mutex_lock+0x19d/0x1550
[ 1005.583865][T16306]        elevator_change+0x1af/0x480
[ 1005.589147][T16306]        elevator_set_none+0xb5/0x140
[ 1005.594515][T16306]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1005.600840][T16306]        nbd_start_device+0x189/0xb30
[ 1005.606209][T16306]        nbd_genl_connect+0x1597/0x1c10
[ 1005.611745][T16306]        genl_family_rcv_msg_doit+0x233/0x340
[ 1005.617802][T16306]        genl_rcv_msg+0x614/0x7a0
[ 1005.622832][T16306]        netlink_rcv_skb+0x226/0x4a0
[ 1005.628104][T16306]        genl_rcv+0x28/0x40
[ 1005.632595][T16306]        netlink_unicast+0x7bb/0x940
[ 1005.637882][T16306]        netlink_sendmsg+0x813/0xb40
[ 1005.643154][T16306]        sock_sendmsg_nosec+0x13a/0x180
[ 1005.648692][T16306]        ____sys_sendmsg+0x54e/0x850
[ 1005.653968][T16306]        ___sys_sendmsg+0x2a5/0x360
[ 1005.659151][T16306]        __x64_sys_sendmsg+0x1b1/0x290
[ 1005.664595][T16306]        do_syscall_64+0x174/0x580
[ 1005.669693][T16306]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1005.676092][T16306] 
[ 1005.676092][T16306] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1005.684690][T16306]        blk_alloc_queue+0x544/0x690
[ 1005.689971][T16306]        __blk_mq_alloc_disk+0x194/0x390
[ 1005.695639][T16306]        nbd_dev_add+0x494/0xb60
[ 1005.700573][T16306]        nbd_init+0x15f/0x1e0
[ 1005.705241][T16306]        do_one_initcall+0x250/0x870
[ 1005.710522][T16306]        do_initcall_level+0x10a/0x1a0
[ 1005.715989][T16306]        do_initcalls+0x59/0xa0
[ 1005.720829][T16306]        kernel_init_freeable+0x29d/0x3e0
[ 1005.726536][T16306]        kernel_init+0x1d/0x1d0
[ 1005.731372][T16306]        ret_from_fork+0x514/0xb70
[ 1005.736480][T16306]        ret_from_fork_asm+0x1a/0x30
[ 1005.741755][T16306] 
[ 1005.741755][T16306] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1005.748956][T16306]        fs_reclaim_acquire+0x71/0x100
[ 1005.754413][T16306]        __kmalloc_noprof+0xbc/0x720
[ 1005.759685][T16306]        tls_sw_sendmsg+0x599/0x2860
[ 1005.765066][T16306]        sock_sendmsg_nosec+0x90/0x180
[ 1005.770515][T16306]        sock_sendmsg+0x1ca/0x2d0
[ 1005.775580][T16306]        splice_to_socket+0xb5e/0x12a0
[ 1005.781043][T16306]        direct_splice_actor+0x101/0x160
[ 1005.786673][T16306]        splice_direct_to_actor+0x57b/0xcb0
[ 1005.792577][T16306]        do_splice_direct+0x195/0x290
[ 1005.797950][T16306]        do_sendfile+0x52e/0x7c0
[ 1005.802888][T16306]        __se_sys_sendfile64+0x144/0x1a0
[ 1005.808510][T16306]        do_syscall_64+0x174/0x580
[ 1005.813611][T16306]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1005.820012][T16306] 
[ 1005.820012][T16306] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[ 1005.828086][T16306]        __lock_acquire+0x1520/0x2cf0
[ 1005.833459][T16306]        lock_acquire+0x106/0x350
[ 1005.838490][T16306]        lock_sock_nested+0x41/0x100
[ 1005.843789][T16306]        inet_shutdown+0x6a/0x390
[ 1005.848806][T16306]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1005.854425][T16306]        recv_work+0x1cee/0x1e10
[ 1005.859350][T16306]        process_scheduled_works+0xa8e/0x14e0
[ 1005.865403][T16306]        worker_thread+0xa47/0xfb0
[ 1005.870503][T16306]        kthread+0x388/0x470
[ 1005.875086][T16306]        ret_from_fork+0x514/0xb70
[ 1005.880189][T16306]        ret_from_fork_asm+0x1a/0x30
[ 1005.885461][T16306] 
[ 1005.885461][T16306] other info that might help us debug this:
[ 1005.885461][T16306] 
[ 1005.895673][T16306] Chain exists of:
[ 1005.895673][T16306]   sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock
[ 1005.895673][T16306] 
[ 1005.908699][T16306]  Possible unsafe locking scenario:
[ 1005.908699][T16306] 
[ 1005.916265][T16306]        CPU0                    CPU1
[ 1005.921652][T16306]        ----                    ----
[ 1005.927006][T16306]   lock(&nsock->tx_lock);
[ 1005.931452][T16306]                                lock(&cmd->lock);
[ 1005.937949][T16306]                                lock(&nsock->tx_lock);
[ 1005.944882][T16306]   lock(sk_lock-AF_INET6-NBD);
[ 1005.949728][T16306] 
[ 1005.949728][T16306]  *** DEADLOCK ***
[ 1005.949728][T16306] 
[ 1005.957860][T16306] 3 locks held by kworker/u9:0/16306:
[ 1005.963211][T16306]  #0: ffff888027754140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1005.974508][T16306]  #1: ffffc9000d667c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1005.986242][T16306]  #2: ffff88807fd73468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[ 1005.995557][T16306] 
[ 1005.995557][T16306] stack backtrace:
[ 1006.001445][T16306] CPU: 1 UID: 0 PID: 16306 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1006.001464][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1006.001475][T16306] Workqueue: nbd2-recv recv_work
[ 1006.001496][T16306] Call Trace:
[ 1006.001503][T16306]  <TASK>
[ 1006.001512][T16306]  dump_stack_lvl+0xe8/0x150
[ 1006.001535][T16306]  print_circular_bug+0x2e1/0x300
[ 1006.001552][T16306]  check_noncircular+0x12e/0x150
[ 1006.001578][T16306]  __lock_acquire+0x1520/0x2cf0
[ 1006.001602][T16306]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1006.001621][T16306]  ? preempt_schedule_notrace+0x57/0x90
[ 1006.001644][T16306]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1006.001661][T16306]  ? __pfx_inet_shutdown+0x10/0x10
[ 1006.001684][T16306]  ? inet_shutdown+0x6a/0x390
[ 1006.001702][T16306]  lock_acquire+0x106/0x350
[ 1006.001720][T16306]  ? inet_shutdown+0x6a/0x390
[ 1006.001746][T16306]  lock_sock_nested+0x41/0x100
[ 1006.001765][T16306]  ? inet_shutdown+0x6a/0x390
[ 1006.001785][T16306]  inet_shutdown+0x6a/0x390
[ 1006.001805][T16306]  nbd_mark_nsock_dead+0x2cb/0x550
[ 1006.001827][T16306]  recv_work+0x1cee/0x1e10
[ 1006.001848][T16306]  ? lockdep_unlock+0x5d/0xd0
[ 1006.001864][T16306]  ? __lock_acquire+0x13e8/0x2cf0
[ 1006.001885][T16306]  ? __pfx_recv_work+0x10/0x10
[ 1006.001904][T16306]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1006.001920][T16306]  ? process_scheduled_works+0xa20/0x14e0
[ 1006.001942][T16306]  ? rcu_is_watching+0x15/0xb0
[ 1006.001963][T16306]  ? process_scheduled_works+0xa20/0x14e0
[ 1006.001981][T16306]  process_scheduled_works+0xa8e/0x14e0
[ 1006.002007][T16306]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1006.002026][T16306]  ? assign_work+0x3cf/0x5d0
[ 1006.002044][T16306]  worker_thread+0xa47/0xfb0
[ 1006.002072][T16306]  kthread+0x388/0x470
[ 1006.002093][T16306]  ? __pfx_worker_thread+0x10/0x10
[ 1006.002109][T16306]  ? __pfx_kthread+0x10/0x10
[ 1006.002127][T16306]  ret_from_fork+0x514/0xb70
[ 1006.002150][T16306]  ? __pfx_ret_from_fork+0x10/0x10
[ 1006.002170][T16306]  ? __switch_to+0xc89/0x1420
[ 1006.002189][T16306]  ? __pfx_kthread+0x10/0x10
[ 1006.002208][T16306]  ret_from_fork_asm+0x1a/0x30
[ 1006.002229][T16306]  </TASK>
[ 1006.283566][T32467] __nla_validate_parse: 6 callbacks suppressed
[ 1006.283599][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7116'.
[ 1006.429426][T32466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7116'.
[ 1006.438665][T32466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7116'.
[ 1010.212251][T16306] Bluetooth: hci2: command 0x0406 tx timeout