last executing test programs:

3.66701473s ago: executing program 3 (id=4787):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="200000000d14000126bd7000fbdbdf2508003e000400000008000100020000009031e4edf2c982136b8c5ad6142f0f315d446d4496f6d4a893e07ee4143f21bae4864d9442275b8ab0c034a93f241855aea70bc03bec8cdd3df996d3c0b3643f7c72ecf83aab0b2222668bf96d3318f98e6fd9"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000040)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x100, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffd, 0x29}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6}, {0xfb, 0x6}, {0x1, 0x5}], "023cb0e35b88b98d"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xf7, 0x1}], "92ecc13e702ca7b4"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x6}, {0x79, 0x2}, {0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x5d}, {0xa3, 0x1}, {0xf8, 0x6}, {0x6, 0x7}, {0x6, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x2, 0x3}], "68ae4b63e41159ed"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x2}, {0xff, 0x7}, {0x5}, {0x8, 0x3}, {0x4, 0x2}, {0xc, 0x5}, {0x81, 0x3}], "cec71bfc696ee97c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1, 0x3}, {0x0, 0x1}, {0x8, 0x5}, {0xa, 0x4}, {0x2}, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0x6}, {0xf0, 0x6}, {0x7f, 0x6}, {0xe, 0x4}, {0x2, 0x7}, {0x9}, {0x88, 0x7}], "f79f4888bd9caee6"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "b4726b0f0a7e22e7"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xc, 0x1}, {0x24, 0x1}, {0x6, 0x3}, {0x7, 0x3}], "0498869f266117b0"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3, 0x7}, {0x1, 0x4}, {0x79, 0x6}, {0x9}, {0x9, 0x1}, {0x81, 0x1}, {0x1, 0x7}, {0x8, 0x3}, {0x87, 0x7}, {0x9, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {}], "e6922d9ce34257be"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000012c0)={{r0}, "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"})
write(r2, &(0x7f0000000b00)="6dfc1faf45b5f14932dd8f5f62d3811765867c23d40353b4c7c38b2c9fa9243b5585f027bfaf068fbbd2329a2de58f41f070ba91823aa3fd9d1a43ec617d97ab60bc497fab80c4517ef8f49952ead338a9a35537b2c0c0b5486c3f6c8c30ef54f9d66c3d3999ad786e09923f00228ffa847cf063ccefcee97858cdbbfeb1420b42811a97822aa93e76a35d11f63094b9cec685d90304940fb5bdb50f523c683d6b9614453e936cd22ee5fa0f16864d75269e92a0ab450ed7c3e4c25e7be74fa7d8a0fb5bbd48f9b09e023c33bb53a7dd372c945601e63d44b88ce8fbc94c7066", 0xe0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0xe4}, 0x1, 0x0, 0x0, 0xc001}, 0x20050850)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
accept$packet(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000c00)=0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe90, 0xf23a, 0xc, 0x4}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x9}, {0xffff}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0xe, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="660a000000000000631121000000000030b1fefff0ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b741d1df10000000186900000e000000000000000160e222c59f930900000018460000fcffffff008000000000001900000000000000ff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0xb}, 0x94)
recvmmsg(r2, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0)

3.372010865s ago: executing program 2 (id=4790):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
readv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x10, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x7, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6df, 0x3, 0xf, 0x8001, 0x5, 0xeaa, 0x8, 0x20, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

2.981937641s ago: executing program 2 (id=4793):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) (async, rerun: 64)
setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) (rerun: 64)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0}) (async)
socketpair(0x21, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'ip6_vti0\x00'}}) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251d00000008000300", @ANYRES32=r3, @ANYBLOB='\x00', @ANYBLOB, @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x110) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (rerun: 32)

2.455143046s ago: executing program 3 (id=4798):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r2, 0x1000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)

2.326843715s ago: executing program 2 (id=4800):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r13=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r10, r13, 0x25, 0x2, @void}, 0x10)
write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f"], 0xfdef)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000002000100000e400058"}}}]}, 0x48}}, 0x20008080)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYRESHEX=r1], 0x2c}}, 0x884)

2.231317204s ago: executing program 3 (id=4801):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2001, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r5, 0x25, 0x0, @void}, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r6, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x18}, 0x922bac8576b92dde)
r8 = socket$inet6(0xa, 0x5, 0xa)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x18000000000002a0, 0xb6, 0x0, &(0x7f00000005c0)="3783030768442688b80714f086dd4ee0ffff00feba9c8c1177fb86dd1402e000030c874a07237600a55dcd7c29170c7fe395a780a6502f3bd7bd28cdb558dfd249a63f90270c7af0e5f11e9a5ae3da08379a6be6468b4e13513680938422b56277ed227f4b898349e41632b4453241e6bea1a1cea6a1f220230f3b8bbf1a31fde5a2e87053d90b74d89b356ff9af78db80e4a0c70f8af3097943bc8587e263db1a143d8af48fa9fc00"/182, 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000}, 0x2f)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x200, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {0x2}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x8, 0x53, 0xdc1, 0x0, r2, 0x53a, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xe, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @generic={0x1, 0xd, 0x2, 0x3, 0x3}], &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x5a, &(0x7f0000000680)=""/90, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7], 0x0, 0x10, 0xfff}, 0x94)

1.836016125s ago: executing program 4 (id=4804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000000c0)={'wlan0\x00', 0x1})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)

1.61573897s ago: executing program 1 (id=4805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r1, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x2b, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xffff}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001540)={@map=r0, r1, 0x5}, 0x20)

1.5725138s ago: executing program 0 (id=4806):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r2, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280f1ff00000200000005000e0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@newqdisc={0x1d0, 0x24, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0x1d}, {0xd}, {0xfff3, 0xa}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7f, 0x6, 0x5, 0x1, 0x8, 0xd, 0x6}}, {0x10, 0x2, [0xa, 0x0, 0xf036, 0x200, 0xe86c, 0x9]}}, {{0x1c, 0x1, {0x80, 0x80, 0x6, 0x3ae, 0x2, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x7d, 0x3, 0x5, 0xe]}}, {{0x1c, 0x1, {0x1, 0x1, 0x0, 0x0, 0x2, 0x7, 0x2, 0x9}}, {0x16, 0x2, [0x5, 0x3, 0x80, 0x4, 0x7, 0xffff, 0x0, 0xffff, 0x24]}}, {{0x1c, 0x1, {0x7, 0x3, 0xba81, 0xcaf, 0x1, 0x8001, 0x0, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0x6]}}, {{0x1c, 0x1, {0x0, 0x9, 0x0, 0x88, 0x0, 0x0, 0x1ac}}, {0x4}}]}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x69, 0x2, 0x3, 0x2, 0x1, 0x3ff, 0x6, 0x5}}, {0xe, 0x2, [0x3, 0x8, 0x3, 0x0, 0x7]}}, {{0x1c, 0x1, {0x4, 0x2, 0x3ff, 0x616f, 0x2, 0x3, 0x7272, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xa, 0xa4, 0x401, 0xfffffff9, 0x0, 0x2, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x9, 0x7f, 0x2, 0x0, 0xc6, 0x6, 0x4}}, {0xc, 0x2, [0x16, 0x9, 0x6, 0x0]}}, {{0x1c, 0x1, {0x91, 0x6, 0x3084, 0x4, 0x2, 0x292, 0x5}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @TCA_RATE={0x6, 0x5, {0x47, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40800}, 0x404c095)

1.46853859s ago: executing program 2 (id=4807):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

1.467943428s ago: executing program 4 (id=4808):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000480)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff89, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0)

1.34437413s ago: executing program 3 (id=4809):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0)
recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)

1.268930569s ago: executing program 4 (id=4810):
socketpair(0x6, 0x80000, 0x7, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000080000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x2004c800}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140))
syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa3afffe8000864e9eaee7f4977e4a24f3420571a9a100000000000000000000000097ee6639c239499d0000000000000000018800907810000000284928fec47e3e0146c0e2a7684b43ca563b5e0e18cdf66a4afa503c60a1c5a2a1fcc9ead0431cdc968fe997a5fcdd793a200993368ed5673026d628547a57ec2605253dbb45418eebc4a6ed04d34a44391937e6427032d4e5b545a101164b47bf144a53fe2bcf19e5e8ce4f402a8094b18739bdb17e2c8ca7fa9c672b1c250354a2aabc612682e6358fc54fbaf806da3c5ff4ee6ed7af15d43d3850d4a13684cdf6afe7ba856ceecdd2f15b0ef5444875abcc90a162dcd042f42617ccde2455a41e3675eeafb973f99cb83ea8afe5cecc"], 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24044884)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0xc000)

1.187302206s ago: executing program 2 (id=4811):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x184, 0x30, 0x200, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x10c, 0x1, [@m_ctinfo={0x108, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0xd3, 0x6, "a6fc5f62bb038474f06bd2c3a5659f40effd0d8d492c0e6c09ccd267f1fd2a1a26a790141660b08e2596cbd9a01ce3f1c273e55f9cd090ea25db9a09f6731c3de4e20a75b3d2270b433f5ae9293b654839677adc0833e31ee1e9fe88fbb068c62d9d45fd1044b48dfd70e77ac8ca1af5350fdf89d211bc535a0a0095aa0e8aa6b68314f7f213cfc1826199c29522d67cf20c92b94f3e4cf16ff5f0e17c6f62645c6646cf92f80c964f5ab3b2ebc8e3a4b0461f12e0b0e88fc4ef0cdd5d9fc6056fdd43922e22564a4d3d9b68ce5256"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x184}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x28, 0x0, &(0x7f0000000580))
socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2b, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffe}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40820)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c095}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
poll(&(0x7f0000000000)=[{r8, 0x125}], 0x1, 0x9)
bind$unix(r8, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="b4d10eeda2a84ae832cbb58c41d738bbdd5c8714361c2cd896fa28ae3fba8ab9d00e4bd13eab3b901febc1924d5aef8101b5ed260b828a38a097", 0x3a, 0x0, 0x0, 0x31)
socket$kcm(0x29, 0x5, 0x0)

1.181141691s ago: executing program 0 (id=4812):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x200, 0xfffff800, 0x18400, 0xffffffffffffffff, 0x8657, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xa}, 0x50)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x7, 0x0, 0x6, 0x4, 0x2, 0x3}, {0x80000001, 0x2, 0x6, 0x7fffffff, 0xff, 0x3ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0xc, 0x2, 0x0, 0x4, 0x1, 0x8000, [{0x9, 0x2, 0x155}, {0x7, 0x5, 0x3}]}, @float={0x6, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x0, 0x0]}}, &(0x7f0000000400)=""/38, 0x54, 0x26, 0x0, 0x80000001, 0x10000, @value=r2}, 0x28)
close(r1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r4=>0x0, 0x0, 0xba, 0x1, 0x8001, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8707, 0x8000, 0x30f3, 0x200000}})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x8, '\x00', r4, r1, 0x5, 0x3, 0x4}, 0x50)
write$cgroup_int(r5, &(0x7f0000000600)=0x9, 0x12)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1}, 0x50)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000006c0)=0xfffffffa, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000700)=@gcm_128={{0x303}, "24b6f4a3cb2b44ff", "98aad84e7f6f5e6c38f6cc7d0f970c8f", "75b8cec3", "11d938acb64d6775"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000740)=@gcm_128={{0x303}, "1b5099fbdb13a5e3", "7cf5180e69bb3d6a7754e17a480dd5fd", "1f5e5ed3", "e82435d431ee6a84"}, 0x28)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000780)=0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x6, 0xff, 0x3, 0x0, 0x8000, r6, 0x11, '\x00', r4, r3, 0x2, 0x0, 0x3, 0x0, @value=r1}, 0x50)
r8 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r3)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000a00)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)=@delpolicy={0x1ec, 0x14, 0x2, 0x70bd2a, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e20, 0xfffc, 0x4e24, 0x5, 0x2, 0x20, 0x20, 0x29, r4}}, [@proto={0x5, 0x19, 0x6c}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd27, 0x6}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010102}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e20, 0x6, 0x4e22, 0x9, 0xa, 0xa0, 0x20, 0xf9, r4, r10}, {0xba6, 0x7, 0xf, 0x5, 0x9, 0xe48, 0xc2a, 0x8000000000000001}, {0x7, 0x400, 0xffffffffffffffff, 0x4}, 0xaf2c9f4, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}}, @migrate={0x9c, 0x11, [{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@remote, @in6=@local, 0x74, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x33, 0x1, 0x0, 0x3506, 0x2}]}, @mark={0xc, 0x15, {0x350759, 0xe}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x7, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x37d0cc89}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}]}, &(0x7f0000000d00)='syzkaller\x00', 0x4, 0xc1, &(0x7f0000000d40)=""/193, 0x40f00, 0x16, '\x00', r9, 0x25, r3, 0x8, &(0x7f0000000e40)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e80)=[r5, r7], &(0x7f0000000ec0)=[{0x5, 0x1, 0x0, 0xa}], 0x10, 0x4}, 0x94)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000fc0)=0xd6, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = openat$cgroup_ro(r1, &(0x7f0000001000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
sendmsg$inet(r11, &(0x7f0000001380)={&(0x7f0000001040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001080)="147eaf95e012c9426b0013417570cfda073dd4647dd2511b8116743ded77b8f199b1f82427b9e1e8f25ec0d3515e06fa51f38eda8e687cc442180f22fa", 0x3d}, {&(0x7f00000010c0)="33b829eb5b5fb7434e6e8770f2933693f05747cec08ede1f08b523e265544f1d20190bc3c7aba9f2a767ec229f3d5dcd7bd5658ec1d7b15e5a0855634ade1ea65fef68f490f611430ab20f40fead1b0f798461a0f3a84b8e9c9d5891d350a4d22d0ada1720b11eaaa7b16a9f31acf9c7962f1cfb4471eda6ee5c67cd31f8e057645c8c8917399e3981d59a70a86fd0f01a", 0x91}, {&(0x7f0000001180)="38f72dcd3fd7c2c0e26d5fb37d03ac3f8d820a979a1e2b2f64e390f38d2586057f4d3acef61643", 0x27}, {&(0x7f00000011c0)="be3774687a29fa24f3ae4da54fd59f295b171749241acbe179c24fee15831aca014ac110bfef031c30f65e7b0d83d005cbb984cf732178fd7bf7901c26820adaa93d38417fd7d03966ecdcda56facfa90849bfb7cda9ed7eb2275e6435b54c381cff78", 0x63}], 0x4, &(0x7f0000001280)=[@ip_retopts={{0x50, 0x0, 0x7, {[@rr={0x7, 0xf, 0x8a, [@empty, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x77, 0x0, 0x2, [0x2, 0xf, 0x9, 0x8, 0x4, 0x10001, 0xd, 0x0, 0x8, 0x9]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3c3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x100}, 0x880)
bind$alg(r1, &(0x7f00000013c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001440), r13)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r12)
r14 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$unix(r12, &(0x7f0000001980)=[{{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)="fde558da11ade5069a2c96e1708ccd528edc44930d3fe7a927994756877dd421a5956a71d13ec6a7e7dea58cea4d5653f758aa3f2939bd", 0x37}, {&(0x7f0000001580)="e128b92802c45a0ca09a2999611a26f03a7c639a5517f81927b2a3d92c03e7a809d7fe5554b2559018fa5b7d0ceae2bbb7557f31e3aa3e96209c9ca005056ae230cbd561cd201a950640c0f9d62806f436bbf993a1089bc6d04eade4341d498c1a0aeb", 0x63}, {&(0x7f0000001600)="00541b065a5ef2b3afbe2d16442bcb7b769130a5c14eb84c4e3cbf9a3ca7d16b5b30167c8556eae2410e378d4ed0540ece545f99b0964cd6d6b16def3f6c4bbb6ba4d999b066a574d762678388d1b30404ca60fd66ed89188f3679100c3df6c0752865d334fc3d8fa60c159a76db", 0x6e}, {&(0x7f0000001680)="c89fdca984ce5d03152326fd970ed72c381a7cd48d16b8e38e852331dd77a3caaedf2a289ee8b425990504f12003a28b1458236735428b90551b723803", 0x3d}], 0x4, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [r5, r14, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @rights={{0x34, 0x1, 0x1, [r11, r7, r2, r1, r7, r11, r3, 0xffffffffffffffff, r5]}}], 0xa0, 0x4000000}}], 0x1, 0x4000)

1.152099859s ago: executing program 1 (id=4813):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000017c0)='devices.list\x00', 0x275a, 0x0)
socket(0x9, 0x1, 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000001080)='net_prio.prioidx\x00', 0x0, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r2 = socket$inet6(0xa, 0x805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001032bf2f0a0a030000000000000000000700000058ff010073797a30000000004c000000094a010400000000000000000700000008000a4000009ff23f2f1e00000900020073797a30000000000900010073797a3000000000080005400000000d08000c400000000200001169620000000280140000001000010000000000000000000084000a000000000000"], 0x94}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x38}}, 0x14)
getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000340))
sendmsg$tipc(r0, &(0x7f0000001780)={&(0x7f0000001340)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001380)="1a32edd71b09483dc6f357d2ba4a410b1ab3528d5bf21f643ca8eba5ef94dbf5ec9e77a17dee55d045b1aa3582208f377c6e5e956ef15e0bc754c4c40f335544bd8c15b75c1b726efcfd81c95c1cc043310cdef8540ec14767cbc41cf8f06eab36a6f0db351a0cafa38cd63755ee2b407c3ebbb143aa9b454389c4e23fc68787310b13bbe18ba4330bcb48030dbf1410bec848c03f4bfb3238227c2ed19d36e30c9dae7e83126980bc62c5ad59318926347cbd9662df0d6d8bcd5749b78eef050c797e283b1dfb339d64974601c0d155b17ba60243397be89dba98c5482bc75256", 0xe1}, {&(0x7f0000001480)="42c644101d5e7067d4fbb4d0ed3367b3c6ee46a5eac0572dc4965874cbd00e4e35543db59b29a232d5a419751f8adebfef8cb0150e8bd1506b078ba2900321a8d2de9fd9d1c7d19fe8a1fe7ffa986146de771096370e1030eb713ba0f2f6a77d319bb0cea03b4120fc1a6ae1bdfd", 0x6e}, {&(0x7f0000001500)="5ac44d0c2ff333c46fd48f469bbeb7d7bd1dbc8aff89e9ef783d7cf4b194e077866a83ac7e2fd57e6cb731cfa2158eab916c5cee1ba42804c4177e7b58cc96961eb68909768e071fcb1a9685acfddcf4aede3f90a1ee1ff7e749a16d00f74e70c2428710562c8a4e19b74390dc22512c7dd094ea68aa923e78fe52126e97af1d6edf986a68bd466fd9ce485d9e0ea9e63c15518b85e32b1e891f00e16cdf4e08887c07f42741b6c8159cdbdbacc71db5c759746bfb2ab906da937a7625dad86a4399e9b061496215c8d25a6faa2da62c2d8186c6c550ea4e9f7e48942c16030225bf11aa946a40279370a733f04c8097", 0xf0}, {&(0x7f0000001600)}, {&(0x7f0000001640)="dd3d6bb76c083b8fb254d7b655846cd2dea9eefc8414aad4d14039988b406302ae7e057aef43992819aaf621596476a4797ecb6e2a1b6c5212cecd56af3557b4b2f60ea3339f2e378380099d34b0b3dfb45c5a08d40a911029b2098cb3868b40eb24df0e4ca263a452ebb6f6450b55bee60f65937f485edc2c687d72e514e78d81787a5a33824b8d66fcc7c3131dae4be959c6ff2f5e2529783ac2a2ea64b36bca0583ea8c", 0xa5}], 0x5, 0x0, 0x0, 0x4040040}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000010c0), &(0x7f0000001100)=0x4)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="000000001000000004001a"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)

1.035942097s ago: executing program 3 (id=4814):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0x71af}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x24040000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0x71af}, 0x1c)
writev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="0a96b4d828d109e6e550c8a553f7dfa9a1c0b3166b3f5bfde1408511d8b9f0b44bde62f22ea27f506d34e27dd4a70b41936008ce5c378c10c22e73e1c06475b450f3d32db2316326777e0e476eda1f72b9f791ee27c8f7546b08806f957766bbc5bab172e55fbeac52688a8f", 0x6c}, {&(0x7f0000000240)="fc83efcc08669c5366e152dd34a6327cb21cd91ac59504f7a7148ed03f950ceeab29212644e6d4bdf0ffaeb03b74", 0x2e}], 0x2)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0)
close(r1) (async)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="09000000305110b8a4d7603fadbbe3", 0xf}], 0x2)

895.941838ms ago: executing program 4 (id=4815):
r0 = socket(0x11, 0x2, 0x7)
write(0xffffffffffffffff, &(0x7f0000000340)="1ebb5f4df0c54957fcf372c0dd1ab1ad187b94777ec3496382856e93313d9ca10ddccde23559329615466fdf3fd255f571f135bc9d78af228dd2359654424d69b370e4764c20abf5b83528fd7662ddaf8eed684f2cd944a5", 0x58)
r1 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r4, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0xec, &(0x7f0000000040)={'batadv_slave_1\x00', @ifru_names='syzkaller0\x00'})

879.638694ms ago: executing program 0 (id=4816):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xe}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)

840.220758ms ago: executing program 1 (id=4817):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=0x1, 0x5, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={<r2=>r0, &(0x7f00000002c0)='\x00', 0x200180, &(0x7f0000000300)={@_ha_fsid={[0x9, 0x8]}, {0x2, 0x9, 0x0, 0xeb}}, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x8})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r2, r0, 0x31, 0x5, r0, @void, @value=r0, @void, @void, r1}, 0x20)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f00000002c0)=0xb58d, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0xe32, @local, 0x6}, @in={0x2, 0x4e20, @broadcast}], 0x2c)

766.657797ms ago: executing program 2 (id=4818):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4)
sendto$inet6(r1, &(0x7f00000005c0)="42c415f72a70", 0x6, 0x4000, &(0x7f0000000680)={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0xfedb, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4, [{0xd, 0x5}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x10003}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8cd9}}, @union={0xe, 0x0, 0x0, 0x5, 0x1, 0x7d6, [{0x0, 0x0, 0x400}]}]}}, 0x0, 0x52}, 0x20)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r4, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x5}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x184}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000081}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x55, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3e37}, [@IFLA_PHYS_SWITCH_ID={0xd, 0x24, "fcc5a7428705c6ca69"}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8005802)

646.740692ms ago: executing program 0 (id=4819):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x283a6ce3, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000980), 0xe)
pipe(&(0x7f00000002c0)) (async)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) (async)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10)

519.921553ms ago: executing program 4 (id=4820):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
splice(r0, &(0x7f0000000000)=0x6, r5, &(0x7f0000000040)=0x9, 0x0, 0x1) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0xb, 0x5, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "9165fc6dcdbcb752a9ab4ce99e89b07e"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async)
sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

519.223755ms ago: executing program 1 (id=4821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', <r4=>0x0, 0x7800, 0x700, 0x7fff, 0x4, {{0x42, 0x4, 0x0, 0xa, 0x108, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xa0, 0x3, 0xf, [{@private=0xa010101}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0x7, 0xd5, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x23, 0x58, [@empty, @loopback, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x61, 0x0, [{0x1, 0x11, "961fbe5911f9b687141eeb1bf2c9a9"}, {0x7, 0x11, "576ffb24d668b189239a3a439f9857"}, {0x1, 0x8, "c1c5ae9c2d0c"}, {0x5, 0x12, "82df35e9548854290e101aaf0956a72f"}, {0x0, 0x2}, {0x0, 0x10, "4a8cc1a34eb0e27df0b7fda9b154"}, {0x0, 0x2}, {0x0, 0xb, "c6019a7b99fae38941"}]}, @generic={0x89, 0x7, "679e87669b"}, @timestamp_prespec={0x44, 0x44, 0x51, 0x3, 0xc, [{@empty, 0xff}, {@broadcast, 0x10000}, {@empty, 0x9}, {@loopback, 0x1}, {@loopback, 0x3}, {@local, 0x10001}, {@remote, 0x9}, {@private=0xa010100, 0x8}]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', <r6=>0x0, 0x7800, 0x80, 0x66, 0x200, {{0x26, 0x4, 0x2, 0x3f, 0x98, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x88, 0xd, "5b7e221967fc358c9ec22b"}, @timestamp_addr={0x44, 0x44, 0x78, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@private=0xa010101, 0x1}, {@multicast2, 0x1f}, {@multicast2, 0x1}, {@multicast1, 0xc}, {@local, 0x3}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @lsrr={0x83, 0x13, 0x44, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2}, @local, @multicast2]}, @generic={0x94, 0xa, "efd2bec8895c44ef"}, @rr={0x7, 0xb, 0xac, [@loopback, @loopback]}, @noop, @generic={0x7, 0x8, "338228438f8e"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x1b8, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x20000810)

419.27421ms ago: executing program 3 (id=4822):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20002331a787efe76100bcbcb200b0537600006800010000f30caa7af63c260d3eabcf", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/235, 0xeb}}], 0x1, 0x10000, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008000}, 0x4000081)

291.044806ms ago: executing program 1 (id=4823):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a3000000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x1)
sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000080)="ae8b39863f7e1df8aa0fc78539de144638f367c007a74f1a7059defbdf337234b3ff380b17fc6ef5fa08037a2e33368f0be9826746f8b40ea1a932ea64d8bb7a262901a3a21bbb48c6a47ac15ed636d30930b8d3be01a90d7892f610b7e1643557c1634d7fec0d3821787e539989cb1645bc410439ec0f4a50a9d5cdc34efbe17efc2e69aa5727297fc40b4a9cd7952943c3e98bed8e63eb446110e827cc95e4d53e", 0xa2, 0x40081, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000080)="ae8b39863f7e1df8aa0fc78539de144638f367c007a74f1a7059defbdf337234b3ff380b17fc6ef5fa08037a2e33368f0be9826746f8b40ea1a932ea64d8bb7a262901a3a21bbb48c6a47ac15ed636d30930b8d3be01a90d7892f610b7e1643557c1634d7fec0d3821787e539989cb1645bc410439ec0f4a50a9d5cdc34efbe17efc2e69aa5727297fc40b4a9cd7952943c3e98bed8e63eb446110e827cc95e4d53e", 0xa2, 0x40081, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)

253.600462ms ago: executing program 0 (id=4824):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x4) (async)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c, 0x800)
getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=""/70, &(0x7f0000000180)=0x46) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x240, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x8}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xff3}}, {0x8, 0xb, 0x3bf}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x80}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000000)

127.381027ms ago: executing program 1 (id=4825):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10)
sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x1d, &(0x7f0000000000), 0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket(0x2a, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt(r5, 0x66f9, 0x100, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r6})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r10=>r9, 0x2f, 0xf1, 0x6, 0x40, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x700, 0x10, 0x6, 0x3}})
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x200, 0x80, &(0x7f0000000480)=""/128, 0x41100, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x6, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0xe, 0xb}], 0x10, 0xc}, 0x94)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002640)=@newtfilter={0x1340, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x6}, {0x9, 0xf}, {0xd, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x12f4, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0xfff2, 0xac, 0x4, 0x6}, {0xfff9, 0x0, 0x5, 0x3}, {0x800, 0x80, 0x8, 0x8}, {0x6, 0x8, 0xd7, 0xf4}, {0x5, 0x0, 0x10, 0xf}, {0x9, 0x2, 0x7}, {0x5, 0x3, 0xa6, 0xd}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x95, 0x6}, {0x7, 0x9, 0x9, 0x6}, {0x6, 0x8b, 0xe9, 0x4e}, {0xc1, 0x7, 0x80, 0x6}, {0x1, 0x2, 0x1, 0x5}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r11}, @TCA_BPF_ACT={0xc44, 0x1, [@m_gact={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x1, 0xaed, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x200, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2f, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0xfffffffd, 0x4, 0x8, 0x9}}]}, {0x75, 0x6, "dad243642ca4010e1bfde2e6c59bf47a426b32499cdc1ad53120305ce365e129ed158688b6ae8292e898786c8f5dc49d054a48a90c452e38f4d980823706079d28e1547c684a2e4a411ebe13e7e68b78726c1be745540b9fb6d14279916c666713406222e1bbb8bbb6751bc0881b2601b1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_skbmod={0xdc, 0x0, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x100, 0x0, 0xff, 0x400}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x69, 0x6, "553dbbedf65fcbbc2d2b25234fcc4e8cbd1fc90c61b481dcb2968c54f74b0487972dab62f264b1652ceaa15bd48c3dc42553e8e81acfac357777ddaccbc165c375018932ec5f532f2a0c7ab0cf367b19cc554fbb8b67e3c77c2f9f453b4ee654e0940d4b9c"}, {0xc, 0x7, {0xcc915969deaa5358, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x25c, 0x16, 0x0, 0x0, {{0x7}, {0x1a4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_TARG={0x8e, 0x6, {0x46, 'mangle\x00', 0x4f, 0x4, "81f41e020189b7ece1817c8c4711a8b6d3c011ff34bdc4726fd3dbdec17d03d1659b030d96bd7b54be1ec80bb256b62d5bf6d9a27304fba198cdaf852784adfcd2ff24b4170b695e7b6e95f3110ab941953b3e7abf45499abc402a98c00ca31b136da2e2"}}, @TCA_IPT_TARG={0xe5, 0x6, {0x3, 'filter\x00', 0x3, 0x8000, "21788b385727582fb2d77278418ca080f24ca498cfdb27b793c233cf7caeb6064f05f4758d244026df779892cbd6655469e6825c873a0d89ad1cf6d10a46f7e6c1705d18c59c2741f547f6a02ca626165038a4a9ac31e3e2ca9c239744671b3f28703d24fe021c907e82d75d58da915adf7c4e1f4960e3c7619c2014bb1ea22bc4bcc193ac6aa14caef58f7887541a4d6adad92810385fe73c75b4578ea94bc05a133bd595b8198940399f7c08adbcc5037ea1cb04cddc15485466"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x93, 0x6, "dd7aacb3e8921f880e1087dfcbcb115893a21fb5a1414b2d0a7f2627fca6185008edd2eaf110d6bfd62671f959cf5a9942baec6d4a46a89ef0b2f0a153fdac15bee7897ecd487670d73ddebf85da15cad72aa6b98b214e2031d593007aa07cdd037cb2262ee4fbd1b6db509a41af1263f7e5fb0071cf1ab6b9d7a10663d968a75db4d1c3278606ababff1a7cbb4f40"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x88, 0x5, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x10000000, 0x9, 0x10000}, 0xd8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x7f, 0x7, 0x6, 0x98ec}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x81, 0x2, 0x9, 0x9}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x140, 0x1, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10001, 0x400, 0x10000000, 0x4, 0x623}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb249}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbe28c3d}]}, {0xc2, 0x6, "8605ae7b73d5cc82d64cb17763617e4726a978ef5728ebc111a3d9a7a275bb151b2f9be405f89aa2baf53b90e2c557fae470a0459f0511d3fc1f6c8b9c3b933f10653dca763fd37b1f16ff3d5d45499e25a18a96505b4a5aa327f8ccbf3a21ad2155bc8825453c6fba9c09b60c1fe9c3c3963b373931e6cfc48639a20d8da9bb7d99c66d71b36a05dcae7d64047ccf0223cff5f72963734e1fdf501213cf550a2229f436087f3c1953e14f535033627ed5ba81a64e632e5fe3320a3e5ed1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xc4, 0xf, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff001, 0x2, 0xffffffffffffffff, 0x8e}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xa752, 0x0, 0x7, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}]}, {0x3e, 0x6, "ee05fdf7f86f7401d5a679dfe84a67b66d71e6ef9e45660a7b8c4b9a5ad2aed5c540bd2488a52ec29b6713aa70ccba248638ee4ae2e46e5ff62e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x468, 0x1e, 0x0, 0x0, {{0xb}, {0x428, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x400, 0x9, 0x2, 0x3000000, 0x3, 0x3, 0xd, 0x400, 0x1ff, 0x7, 0x9, 0xff, 0x2, 0xf0, 0x6, 0x200, 0xfffffffa, 0x1000, 0x10, 0x6, 0x0, 0x0, 0x0, 0x52be, 0x2, 0x7, 0xc, 0x2, 0x0, 0x401, 0x141, 0x8, 0x0, 0x6, 0x6, 0x3, 0x5, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x71a, 0x10001, 0x8, 0xfffffffc, 0x0, 0x1, 0x1, 0xfffffff7, 0x5, 0x299d, 0x8, 0x7ff, 0xe, 0x4, 0x0, 0x400, 0x9, 0xc7, 0xa, 0x10001, 0x41c6, 0xc, 0x1, 0x4398, 0x3, 0x0, 0x4, 0x101, 0x9, 0x7, 0x50e6, 0x3, 0x80000000, 0x0, 0xf, 0x3a, 0x400, 0x5d66, 0x1, 0x40, 0x6, 0x4, 0x2, 0x7f7, 0x1, 0x2, 0x67c, 0x10, 0x1, 0x6, 0x9, 0x9, 0x2, 0x200, 0x2, 0x101, 0x5, 0x40, 0xd, 0x8, 0x6, 0x324, 0x7, 0xffff, 0x8, 0x6, 0x2, 0x3, 0x85, 0x9, 0x0, 0x6, 0x7, 0x1, 0x7, 0x7f, 0x200, 0x7, 0x9, 0x10, 0x6, 0x3, 0xd9b, 0xff, 0x2, 0xc28f, 0x1, 0x8, 0xb, 0xff, 0xfffffffa, 0x7, 0x7, 0x7fff, 0x2, 0x0, 0x3, 0x7, 0xc, 0x2, 0x9, 0x10, 0x1ff, 0x6, 0x7, 0x1, 0x11710f5d, 0x4f, 0x1, 0x8, 0x6, 0x4, 0x7, 0x4, 0x0, 0x4a5, 0xf0000000, 0xf0, 0x2, 0x0, 0xd, 0x4, 0xdd54, 0x1ff, 0x4, 0x7, 0x3, 0x0, 0xd, 0xba1, 0x8, 0x8, 0x7, 0x5, 0x7f, 0x6, 0x5, 0x2, 0x1, 0x80000, 0xd, 0x0, 0x6, 0x7fffffff, 0x40, 0x3, 0x51, 0x3, 0x5, 0x4, 0xb47, 0xcbb, 0x2, 0x9, 0xaab4, 0x0, 0xa, 0x0, 0xd128, 0x1, 0x2, 0xf, 0x7ff, 0x9, 0x2, 0x4, 0x5, 0x6c5f, 0xdc5d, 0x6db8968d, 0x8, 0x69, 0xc23, 0x78, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2, 0x2, 0xfffffff8, 0x4f, 0x8, 0xfffffff9, 0x3, 0x8, 0xf, 0x400, 0x8, 0x46, 0x5, 0x4, 0x401, 0x2, 0xfb, 0x6, 0xd3c, 0x401, 0x2, 0x4, 0x0, 0xc, 0x961, 0x9, 0x7fff, 0xb, 0x2, 0x0, 0xfffffffa, 0x0, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x16, 0x6, "36458fc89c742ebc27065b5258b4a3d9c411"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x98, 0xf, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_ACTION={0x6, 0x3, 0xa}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x45, 0x6, "e5627afa716d633645117b42bb52e6d923852c3ff7e906d5f9ed64f85ba6e2d6c73bad61293c81e73d94c0fd8faf059007fdaa083c8078aa5ca0851e61b4fc0058"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x90, 0x10, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd, 0xb83f, 0x4, 0x4, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc888}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe26}]}, {0x23, 0x6, "f90ebb074cb01137d04898e430c15db4aefd230230c14c0b5f1b19f8139bc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x544, 0x1, [@m_sample={0x100, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x34}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x4, 0xc, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff, 0xc, 0x6, 0x80, 0xff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x5, 0x2, 0x1, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0x6c, 0x6, "76a997fe200c3bb4ba44f28e3868b30300dba6fe593fc7a1a0d137b34050840dbd3afacad4584d7d7e6eea408725c5794fef3ced92129f788c96b2f438196ecf548f046978e8b6a11fba318c94965a2cd6e6c3ea7cf53928cda71fc583071fdcf3ba9170f4ba9237"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x170, 0xd, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xacb, 0x3, 0x8, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb, 0x5, 0x8, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xcffa, 0x2, 0x4, 0x2}}]}, {0xd4, 0x6, "e86a2c27d6541d0c3e07001d317eb6b1354fc1d3b658c2264046f28276a7efe05672df8d890c22d23b140e95fb530adb8d95a6300f90d1be61fc66b27980c209be2255f99730c4c169ee3e6ca633e4c9d843cf17fd0d13dc5a3438d5f15cbaecba4beaaab105d5b2f109e7a829a5229d03bc5bcc5c4007dcc60db041fa4ef6da69aef0eed6b44716642b6bc1c610be417d7d8ad4652362056b3992843a0be1d6b8a6e5b117cf34a3f190810a6f48e69f9b05d801c7cdf7b0096bc446f5260f9bd0d6424eec181edeaaf911f9e3229551"}, {0xc, 0x7, {0x1, 0xe632b56417353091}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x16c, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xeb, 0x6, "e651f24817bc2dc282e2fb6cf6412214c0770ba4eb09fc9ad15bea53825ff6cab06ab25426c162fdeaf69a68677701ba734b29e12dae9e31904d966bf853637ffab225e199a77ecdeb623648b8c9eb0a77b6fcb8aa8b15ec72fdeb167194705c68dd17e112e1565fe818bc7ed40d996c4b47b480a22f353710c261b9f8587a110bf5316abee1105121193e32dc0dc93c06782ee94972381b56baee8a9af1c58bb669fbdb62b234210ba35de69faa290eedaa40771755f66e04193bfd3031899004bd361bc9512965a1cf03dcc56a5b8b56755dd7ed284a26f62c5e058b7271cbbce1475881f2af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x164, 0x19, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xe5, 0x4, 0x5, 0x3ff}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdc2be}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xfffff20a, 0x20000000, 0x7, 0x1}, 0x2}}]}, {0xd6, 0x6, "1e13e5ce16b0e42f1e51864d2e94e8b3fbf56760ff76ccb0b8f2b5cc60250fe158a5fd04d694cfb3bafeb995d38142693c9d039c6a1c143ec817f181f80f17b89f3880b6fadd95c5bd4476882e2327bef955b694de3612b20757f451c8f27becc9ca3ee68c58bae3a3f4de466400c733048dd2b3c505370449556b823fba5e02d379ac5ee77fe1c88fd7f3606864defe1a9735a3c7f96eed285ad9cea17c454eeb092b1c5d604d94062c51bb6982d8df0c5a226d922a4fe365ded8427b5f3017aea7798c2080a7f4b971d1efb19c4056e165"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8, 0x6, r12}, @TCA_BPF_ACT={0xbc, 0x1, [@m_simple={0xb8, 0x16, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0xfff, 0x10000000, 0xd, 0x5}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x8, 0x10000006, 0x0, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0x10000000, 0x2, 0xff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x10000, 0xffffffffffffffff, 0xc39, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffff000}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x1340}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r14, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x42f, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="f3ade86a8c19"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r9, @sk_msg}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r15, 0x26, 0x1, 0x6, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], <r16=>0x0}, 0x40)
r17 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r15, 0x0, 0x25, 0x6, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r15, r15, 0x11, 0x2014, 0x0, @value=r17, @void, @void, @void, r16}, 0x20)

126.538801ms ago: executing program 4 (id=4826):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800fd000000000000000000000000003ba3bf10"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303, 0x3a}, "29d908ffe57400", "2a049a6f6100000000e070b60d0e380800000200", "33681901", "00000046ec29c700"}, 0x38) (async)
sendmsg$nl_route(r0, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0}) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x44000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b794}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x2}}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x20041044)

0s ago: executing program 0 (id=4827):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd8, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x29, 0x3, 0x22}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xffffffff, 0x3, '\x00', 'syz1\x00', {0x288}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x9, "c34f4fa3674725f98eb7db4fbbce4dc92acbedd49c47bb93617280c6a193"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

4] bridge_slave_1: entered promiscuous mode
[  490.177346][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.197338][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.290262][T17326] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  490.337775][T17264] team0: Port device team_slave_0 added
[  490.386804][T17264] team0: Port device team_slave_1 added
[  490.495480][T17332] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  490.530071][ T5839] Bluetooth: hci2: command tx timeout
[  490.544997][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.568899][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.666015][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.704772][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.721872][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.779486][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.983210][T17264] hsr_slave_0: entered promiscuous mode
[  491.003733][T17264] hsr_slave_1: entered promiscuous mode
[  491.032395][T17264] debugfs: 'hsr0' already exists in 'hsr'
[  491.045309][T17264] Cannot create hsr debugfs directory
[  491.726636][T17264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  491.776242][T17264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.025488][T17264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.039009][T17264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.117692][T17389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'.
[  492.205542][T17264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.231149][T17264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.610809][ T5839] Bluetooth: hci2: command tx timeout
[  492.917671][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'.
[  492.967248][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3056'.
[  493.078734][T17421] bond12: entered promiscuous mode
[  493.084769][T17421] 8021q: adding VLAN 0 to HW filter on device bond12
[  493.121263][T17434] veth0: entered promiscuous mode
[  493.130831][T17435] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3060'.
[  493.160298][T17435] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  493.169192][T17434] veth0: left promiscuous mode
[  493.192733][T17264] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  493.233954][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  493.271346][T17264] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  493.299016][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  493.313945][T17264] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  493.346011][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  493.372255][T17264] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  493.409739][T17264] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  493.441765][T17445] block nbd1: NBD_DISCONNECT
[  493.461391][T17445] block nbd1: Send disconnect failed -32
[  493.478593][T17445] block nbd1: shutting down sockets
[  493.503818][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'.
[  493.518080][    C1] blk_print_req_error: 138 callbacks suppressed
[  493.518102][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.533886][    C1] buffer_io_error: 138 callbacks suppressed
[  493.533903][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.552614][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.561756][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.571314][ T5880] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.581489][ T5880] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.598336][T17452] netlink: 'syz.0.3065': attribute type 10 has an invalid length.
[  493.605366][ T5880] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.621367][ T5880] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.633597][ T5880] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.650685][ T5880] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.663344][ T5880] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.679740][ T5880] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.692976][ T5880] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.756368][ T5880] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.785607][ T5880] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.837113][ T5880] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.860792][ T5880] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.870439][ T5880] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.924034][ T5880] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.953060][T17465] sctp: [Deprecated]: syz.0.3068 (pid 17465) Use of int in maxseg socket option.
[  493.953060][T17465] Use struct sctp_assoc_value instead
[  493.971294][ T5880] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.993135][ T5880] ldm_validate_partition_table(): Disk read failed.
[  494.022252][ T5880] Dev nbd1: unable to read RDB block 0
[  494.054707][ T5880]  nbd1: unable to read partition table
[  494.154496][T17264] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.197458][ T5196] udevd[5196]: worker [5880] terminated by signal 9 (Killed)
[  494.209429][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  494.217717][    C0] lec:lec_tx_timeout: lec0
[  494.222527][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  494.232755][ T5196] udevd[5196]: worker [5880] failed while handling '/devices/virtual/block/nbd1'
[  494.282468][T17264] 8021q: adding VLAN 0 to HW filter on device team0
[  494.394063][T17484] "syz.0.3072" (17484) uses obsolete ecb(arc4) skcipher
[  494.404163][T17477] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  494.414169][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3072'.
[  494.438280][T17477] bond1 (unregistering): Released all slaves
[  494.580682][  T987] batadv0: left allmulticast mode
[  494.588552][  T987] batadv0: left promiscuous mode
[  494.605563][  T987] bridge0: port 3(batadv0) entered disabled state
[  494.648948][  T987] bridge_slave_1: left allmulticast mode
[  494.677922][  T987] bridge_slave_1: left promiscuous mode
[  494.690246][ T5839] Bluetooth: hci2: command tx timeout
[  494.704941][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.721946][  T987] bridge_slave_0: left allmulticast mode
[  494.732428][  T987] bridge_slave_0: left promiscuous mode
[  494.738411][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.758725][T17497] netlink: 'syz.3.3076': attribute type 21 has an invalid length.
[  494.867233][ T7922] hid (null): global environment stack underflow
[  494.953155][ T7922] hid-generic 0005:15C2:0004.0001: global environment stack underflow
[  494.964360][ T7922] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed
[  494.974784][ T7922] hid-generic 0005:15C2:0004.0001: probe with driver hid-generic failed with error -22
[  494.988492][  T987] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[  495.000869][  T987] ip6gre1 (unregistering): left promiscuous mode
[  495.269661][  T987] bond6 (unregistering): (slave geneve5): Releasing active interface
[  495.449770][  T987] bond5 (unregistering): (slave bridge3): Releasing active interface
[  495.564490][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'.
[  495.630877][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  495.640059][  T987] bond_slave_0: left allmulticast mode
[  495.650030][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.662204][  T987] bond_slave_1: left allmulticast mode
[  495.672676][  T987] bond0 (unregistering): Released all slaves
[  495.685533][  T987] bond1 (unregistering): Released all slaves
[  495.705417][  T987] bond2 (unregistering): (slave vxcan3): Releasing backup interface
[  495.715561][  T987] bond2 (unregistering): Released all slaves
[  495.733320][  T987] bond3 (unregistering): Released all slaves
[  495.751499][  T987] bond4 (unregistering): (slave C): Releasing backup interface
[  495.760753][  T987] bond4 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed
[  495.773809][  T987] bond4 (unregistering): Released all slaves
[  495.796416][  T987] bond5 (unregistering): Released all slaves
[  495.813731][  T987] bond6 (unregistering): Released all slaves
[  495.833433][  T987] bond7 (unregistering): Released all slaves
[  495.856467][  T987] bond8 (unregistering): Released all slaves
[  495.875796][T17497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3076'.
[  495.894659][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.901901][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.000693][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.008015][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.104544][  T987] : left promiscuous mode
[  496.405847][T17530] netlink: 'syz.3.3085': attribute type 1 has an invalid length.
[  496.441830][T17530] netlink: 'syz.3.3085': attribute type 2 has an invalid length.
[  496.778503][ T5839] Bluetooth: hci2: command tx timeout
[  496.977320][T17264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.100522][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'.
[  497.135761][T17563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3095'.
[  497.326465][T17264] veth0_vlan: entered promiscuous mode
[  497.335643][T17574] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3099'.
[  497.419032][T17264] veth1_vlan: entered promiscuous mode
[  499.239306][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  499.247533][    C0] lec:lec_tx_timeout: lec0
[  499.253041][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  499.824446][T17264] veth0_macvtap: entered promiscuous mode
[  499.873094][T17264] veth1_macvtap: entered promiscuous mode
[  499.991236][T17264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.022380][T17561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  500.044711][T17264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.097181][T17601] netlink: 'syz.1.3105': attribute type 12 has an invalid length.
[  500.139733][T17601] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3105'.
[  500.226539][ T1345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.238765][ T1345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.273730][ T1345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.364662][ T1345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.787340][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.797460][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3112'.
[  500.812502][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.854579][T17629] Bluetooth: MGMT ver 1.23
[  500.866951][T17624] xfrm1: entered promiscuous mode
[  500.874096][T17624] xfrm1: entered allmulticast mode
[  501.014164][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3112'.
[  501.049007][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.062438][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.131507][  T987] hsr_slave_0: left promiscuous mode
[  501.155243][  T987] veth1_macvtap: left promiscuous mode
[  501.182011][  T987] veth0_macvtap: left promiscuous mode
[  501.310102][T17649] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3005'.
[  501.321765][T17649] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3005'.
[  501.653609][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.755188][T17654] ieee802154 phy1 wpan1: encryption failed: -22
[  502.025393][T17662] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  502.040620][  T795] IPVS: starting estimator thread 0...
[  502.169413][T17665] IPVS: using max 28 ests per chain, 67200 per kthread
[  502.201522][  T987] IPVS: stop unused estimator thread 0...
[  502.322496][T17674] netlink: 696 bytes leftover after parsing attributes in process `syz.3.3125'.
[  503.813285][T17635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  504.259373][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  504.267480][    C0] lec:lec_tx_timeout: lec0
[  504.272646][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  504.370669][T17689] netlink: 'syz.3.3131': attribute type 1 has an invalid length.
[  504.406724][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  504.421764][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  504.432506][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  504.443415][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  504.456350][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  504.521823][T17691] lo speed is unknown, defaulting to 1000
[  504.911138][T17703] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3133'.
[  505.007991][T17706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3134'.
[  505.206258][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3135'.
[  505.226796][T17712] xt_hashlimit: invalid rate
[  505.243413][T17713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3136'.
[  505.286619][T17713] netlink: 'syz.1.3136': attribute type 10 has an invalid length.
[  505.566588][T17729] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3141'.
[  505.650411][T17734] xt_CT: You must specify a L4 protocol and not use inversions on it
[  505.654506][T17691] chnl_net:caif_netlink_parms(): no params data found
[  505.853240][T17747] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3146'.
[  505.903663][ T5914] IPVS: starting estimator thread 0...
[  505.973685][T17691] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.989549][T17691] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.998208][T17691] bridge_slave_0: entered allmulticast mode
[  506.012801][T17691] bridge_slave_0: entered promiscuous mode
[  506.019388][T17748] IPVS: using max 28 ests per chain, 67200 per kthread
[  506.041900][T17738] lo speed is unknown, defaulting to 1000
[  506.045558][T17691] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.063995][T17691] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.079649][T17691] bridge_slave_1: entered allmulticast mode
[  506.095355][T17691] bridge_slave_1: entered promiscuous mode
[  506.111715][T17751] netlink: 'syz.3.3148': attribute type 1 has an invalid length.
[  506.167186][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'.
[  506.190474][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'.
[  506.274662][T17751] bond1: entered promiscuous mode
[  506.283778][T17751] 8021q: adding VLAN 0 to HW filter on device bond1
[  506.401369][T17757] bond1: (slave bridge1): making interface the new active one
[  506.415391][T17757] bridge1: entered promiscuous mode
[  506.425403][T17757] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  506.449372][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.500461][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.529464][ T5839] Bluetooth: hci0: command tx timeout
[  506.583161][T17767] netlink: 'syz.1.3150': attribute type 2 has an invalid length.
[  506.604736][T17768] sctp: [Deprecated]: syz.3.3151 (pid 17768) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.604736][T17768] Use struct sctp_sack_info instead
[  506.746466][T17767] �9: entered promiscuous mode
[  506.772279][T17691] team0: Port device team_slave_0 added
[  506.802818][T17691] team0: Port device team_slave_1 added
[  506.921597][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.928765][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.968011][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.015383][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.022869][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.050991][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.244384][T17795] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  507.365632][T17691] hsr_slave_0: entered promiscuous mode
[  507.412670][T17691] hsr_slave_1: entered promiscuous mode
[  507.433571][T17691] debugfs: 'hsr0' already exists in 'hsr'
[  507.458662][T17691] Cannot create hsr debugfs directory
[  507.684379][T17807] netlink: 'syz.1.3163': attribute type 25 has an invalid length.
[  507.705896][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3163'.
[  507.812472][T17807] netlink: 'syz.1.3163': attribute type 25 has an invalid length.
[  507.826450][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3163'.
[  507.842084][T17811] xt_hashlimit: size too large, truncated to 1048576
[  508.173054][T17822] openvswitch: netlink: EtherType 50a is less than min 600
[  508.609662][ T5839] Bluetooth: hci0: command tx timeout
[  508.917312][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'.
[  508.935379][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'.
[  508.986470][T17691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  509.040019][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.051283][T17691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  509.076602][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.143003][T17863] bond2: option all_slaves_active: invalid value (7)
[  509.153668][T17863] bond2 (unregistering): Released all slaves
[  509.196225][T17691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  509.211808][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.230744][T17691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  509.270381][T17691] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.442488][T17691] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.502814][T17691] 8021q: adding VLAN 0 to HW filter on device team0
[  509.538241][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.545514][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.623168][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.630659][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.766839][T17892] C: renamed from lo (while UP)
[  509.775634][T17892] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  510.131300][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.274220][T17910] __nla_validate_parse: 3 callbacks suppressed
[  510.274242][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  510.292039][T17691] veth0_vlan: entered promiscuous mode
[  510.310161][T17910] openvswitch: netlink: Flow actions attr not present in new flow.
[  510.325510][T17691] veth1_vlan: entered promiscuous mode
[  510.392531][T17691] veth0_macvtap: entered promiscuous mode
[  510.464907][T17914] sctp: [Deprecated]: syz.1.3194 (pid 17914) Use of int in max_burst socket option.
[  510.464907][T17914] Use struct sctp_assoc_value instead
[  510.490399][T17691] veth1_macvtap: entered promiscuous mode
[  510.527452][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.596727][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.609986][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms
[  510.618153][    C0] lec:lec_tx_timeout: lec0
[  510.625332][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  510.674969][ T1345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.689522][ T5839] Bluetooth: hci0: command tx timeout
[  510.711086][ T1345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.753080][T17918] netlink: 'syz.4.3196': attribute type 1 has an invalid length.
[  510.768927][ T1345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.796799][ T1345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.122906][  T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.160577][  T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.188685][T17938] netlink: 'syz.3.3205': attribute type 18 has an invalid length.
[  511.307569][T17943] xt_hashlimit: size too large, truncated to 1048576
[  511.328713][T17940] IPv6: sit3: Disabled Multicast RS
[  511.373299][T17946] IPv6: addrconf: prefix option has invalid lifetime
[  511.436980][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'.
[  511.459682][T17953] x_tables: ip_tables: ah match: only valid for protocol 51
[  511.469473][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.472496][T17952] x_tables: ip_tables: ah match: only valid for protocol 51
[  511.477518][   T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  511.496898][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.511346][T17952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3209'.
[  511.521033][   T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  511.521084][   T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  511.530184][ T1345] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  511.824381][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3214'.
[  511.915830][T17974] ip6gre1: entered promiscuous mode
[  511.922318][T17974] ip6gre1: entered allmulticast mode
[  512.071306][T17981] veth0: entered promiscuous mode
[  512.180847][T17987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3220'.
[  512.501396][T17996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  512.523534][T17996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  512.540907][T17996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  512.553691][T17996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  512.562184][T17996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  512.692726][T17993] C speed is unknown, defaulting to 1000
[  512.770302][T17996] Bluetooth: hci0: command tx timeout
[  512.834867][T17978] veth0: left promiscuous mode
[  513.047263][T18010] : entered promiscuous mode
[  513.123284][T18015] netlink: 'syz.0.3229': attribute type 1 has an invalid length.
[  513.191006][ T5834] syz_tun (unregistering): left allmulticast mode
[  513.248667][T18015] bond1: entered promiscuous mode
[  513.260758][T18015] 8021q: adding VLAN 0 to HW filter on device bond1
[  513.277845][T18018] ip6_vti0: entered promiscuous mode
[  513.296157][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'.
[  513.332162][T18018] Cannot find add_set index 0 as target
[  513.362954][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'.
[  513.394851][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'.
[  513.424012][T18015] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3229'.
[  513.918412][T17993] chnl_net:caif_netlink_parms(): no params data found
[  513.980137][T18052] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3236'.
[  514.417586][T18075] netlink: 'syz.3.3243': attribute type 25 has an invalid length.
[  514.515978][T17993] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.535449][T17993] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.558103][T17993] bridge_slave_0: entered allmulticast mode
[  514.578633][T17993] bridge_slave_0: entered promiscuous mode
[  514.595399][T17993] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.609736][T17996] Bluetooth: hci1: command tx timeout
[  514.615903][T17993] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.628173][T18086] netlink: 'syz.2.3244': attribute type 15 has an invalid length.
[  514.646101][T17993] bridge_slave_1: entered allmulticast mode
[  514.687794][T17993] bridge_slave_1: entered promiscuous mode
[  514.939185][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.052143][T18086] syzkaller0: entered promiscuous mode
[  515.057659][T18086] syzkaller0: entered allmulticast mode
[  515.071660][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.210424][T18112] IPv6: addrconf: prefix option has invalid lifetime
[  515.480717][T18123] __nla_validate_parse: 4 callbacks suppressed
[  515.480735][T18123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3255'.
[  516.379540][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  516.387615][    C0] lec:lec_tx_timeout: lec0
[  516.395013][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  516.691918][T17996] Bluetooth: hci1: command tx timeout
[  518.197221][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'.
[  518.231726][T17993] team0: Port device team_slave_0 added
[  518.252369][T17993] team0: Port device team_slave_1 added
[  518.398675][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.424983][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.490655][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.518180][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.525638][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.569454][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.608523][T18140] syzkaller0: entered promiscuous mode
[  518.623622][T18140] syzkaller0: entered allmulticast mode
[  518.643511][T18146] ������: renamed from virt_wifi0
[  518.652637][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  518.780326][T17996] Bluetooth: hci1: command tx timeout
[  518.835101][T17993] hsr_slave_0: entered promiscuous mode
[  518.843394][T17993] hsr_slave_1: entered promiscuous mode
[  518.850066][T17993] debugfs: 'hsr0' already exists in 'hsr'
[  518.855989][T17993] Cannot create hsr debugfs directory
[  519.138814][T17993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.152135][T17993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.303231][T17993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.315081][T17993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.463947][T18178] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3269'.
[  519.594170][T17993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.612789][T17993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.666156][T18181] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  519.674337][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3272'.
[  519.713789][T18181] tipc: Started in network mode
[  519.718827][T18181] tipc: Node identity f248bdbc8ae4, cluster identity 4711
[  519.740212][T18181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.827186][T17993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.842977][T18194] netlink: 'syz.0.3274': attribute type 24 has an invalid length.
[  519.852936][T17993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.882838][T18181] syzkaller0: entered promiscuous mode
[  519.897202][T18181] syzkaller0: entered allmulticast mode
[  519.917143][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3270'.
[  519.963024][T18195] tipc: Resetting bearer <eth:syzkaller0>
[  520.023630][T18179] tipc: Resetting bearer <eth:syzkaller0>
[  520.087038][T18203] netlink: 'syz.0.3277': attribute type 30 has an invalid length.
[  520.105700][T18179] tipc: Disabling bearer <eth:syzkaller0>
[  520.648088][T18231] x_tables: unsorted entry at hook 3
[  520.654877][T18223] C speed is unknown, defaulting to 1000
[  520.657582][T17993] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  520.696211][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  520.722915][T17993] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  520.764144][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  520.791330][T17993] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  520.835148][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  520.855693][T17996] Bluetooth: hci1: command tx timeout
[  520.871720][T17993] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  520.923809][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  521.518272][T17993] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.577371][T18255] sctp: [Deprecated]: syz.3.3289 (pid 18255) Use of int in maxseg socket option.
[  521.577371][T18255] Use struct sctp_assoc_value instead
[  521.596215][T17993] 8021q: adding VLAN 0 to HW filter on device team0
[  521.618714][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.626106][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.663193][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.670485][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.105434][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3295'.
[  522.129877][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms
[  522.138076][    C0] lec:lec_tx_timeout: lec0
[  522.146183][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  522.170162][T18273] netlink: 'syz.4.3295': attribute type 1 has an invalid length.
[  522.197144][T18273] netlink: 'syz.4.3295': attribute type 3 has an invalid length.
[  522.205570][T18273] netlink: 'syz.4.3295': attribute type 7 has an invalid length.
[  522.214989][T18273] netlink: 'syz.4.3295': attribute type 8 has an invalid length.
[  522.223533][T18273] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3295'.
[  522.233757][T18273] NCSI netlink: No device for ifindex 131092
[  522.402368][T18280] netlink: 'syz.3.3296': attribute type 1 has an invalid length.
[  522.411338][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'.
[  522.446639][T18280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3296'.
[  522.474676][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.510059][T18280] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3296'.
[  522.547808][T18280] netlink: 'syz.3.3296': attribute type 1 has an invalid length.
[  522.599667][T18280] netlink: 'syz.3.3296': attribute type 8 has an invalid length.
[  522.643363][T18280] netlink: 582 bytes leftover after parsing attributes in process `syz.3.3296'.
[  522.686558][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3299'.
[  522.714945][T17993] veth0_vlan: entered promiscuous mode
[  522.753006][T17993] veth1_vlan: entered promiscuous mode
[  522.914736][T17993] veth0_macvtap: entered promiscuous mode
[  522.942662][T17993] veth1_macvtap: entered promiscuous mode
[  522.953458][T18303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'.
[  523.039955][T18305] syzkaller1: entered promiscuous mode
[  523.059170][T18305] syzkaller1: entered allmulticast mode
[  523.118701][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.133558][ T7922] IPVS: starting estimator thread 0...
[  523.142334][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'.
[  523.167899][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'.
[  523.187854][T18305] netlink: 'syz.3.3305': attribute type 14 has an invalid length.
[  523.226061][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.240096][T18315] IPVS: using max 24 ests per chain, 57600 per kthread
[  523.296206][T18321] xt_l2tp: v2 doesn't support IP mode
[  523.416993][T18313] syzkaller0: entered promiscuous mode
[  523.436159][T18313] syzkaller0: entered allmulticast mode
[  523.473816][   T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.743830][   T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.755251][   T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.825568][   T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.105270][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.136804][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.159883][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  527.168005][    C0] lec:lec_tx_timeout: lec0
[  527.173398][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  527.189743][T18363] __nla_validate_parse: 1 callbacks suppressed
[  527.189764][T18363] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3315'.
[  527.274912][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.307369][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.323278][T18372] validate_nla: 1 callbacks suppressed
[  527.323301][T18372] netlink: 'syz.4.3320': attribute type 1 has an invalid length.
[  527.376759][T18372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3320'.
[  527.405252][T18372] netlink: 'syz.4.3320': attribute type 1 has an invalid length.
[  527.428569][T18372] netlink: 'syz.4.3320': attribute type 8 has an invalid length.
[  527.447556][T18372] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3320'.
[  527.716426][T18385] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  527.806309][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'.
[  528.060326][T18399] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3327'.
[  528.097554][T18399] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.105185][T18399] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.877384][T18438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3339'.
[  528.891330][T18437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3338'.
[  528.922453][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3338'.
[  528.976508][T18433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3337'.
[  529.195712][T18448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3342'.
[  529.240026][T18448] syzkaller0: entered promiscuous mode
[  529.260754][T18448] syzkaller0: entered allmulticast mode
[  529.630495][T18468] netlink: 'syz.2.3347': attribute type 1 has an invalid length.
[  529.687967][T18470] sctp: [Deprecated]: syz.4.3348 (pid 18470) Use of int in max_burst socket option deprecated.
[  529.687967][T18470] Use struct sctp_assoc_value instead
[  529.962912][T18495] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  530.213985][T18500] syzkaller0: entered promiscuous mode
[  532.199840][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  532.208222][    C0] lec:lec_tx_timeout: lec0
[  532.212883][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  534.253133][T18572] netlink: 'syz.3.3377': attribute type 18 has an invalid length.
[  534.302997][T18572] bridge_slave_0: left allmulticast mode
[  534.322518][T18572] bridge_slave_0: left promiscuous mode
[  534.342945][T18572] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.368273][T18572] bridge_slave_1: left allmulticast mode
[  534.377160][T18572] bridge_slave_1: left promiscuous mode
[  534.390664][T18572] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.406481][T18572] bond0: (slave bond_slave_0): Releasing backup interface
[  534.416943][T18581] netlink: 'syz.1.3381': attribute type 1 has an invalid length.
[  534.426739][T18572] bond0: (slave bond_slave_1): Releasing backup interface
[  534.451945][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  534.489836][T18572] team0: Port device team_slave_0 removed
[  534.517249][T18572] team0: Port device team_slave_1 removed
[  534.543085][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.554707][T18572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.572275][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.580367][T18572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.591934][T18572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  534.790568][T18589] syzkaller0: entered promiscuous mode
[  534.807073][T18589] syzkaller0: entered allmulticast mode
[  534.832740][T18597] __nla_validate_parse: 2 callbacks suppressed
[  534.832757][T18597] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3385'.
[  534.873781][T18597] netlink: Unknown conntrack attr (type=2304, max=9)
[  535.223214][T18621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3392'.
[  535.242263][T18614] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  535.258207][T18614] bond1 (unregistering): Released all slaves
[  535.561575][T18639] tipc: MTU too low for tipc bearer
[  535.710625][T18642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.835365][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3401'.
[  535.864449][T18655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3401'.
[  535.957478][T18642] syzkaller0: entered promiscuous mode
[  535.983115][T18642] syzkaller0: entered allmulticast mode
[  536.010890][T18642] tipc: Resetting bearer <eth:syzkaller0>
[  536.028079][T18664] netlink: 'syz.1.3404': attribute type 4 has an invalid length.
[  536.051301][T18664] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3404'.
[  536.085830][T18667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'.
[  536.250620][T18670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3406'.
[  536.425156][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'.
[  536.469618][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'.
[  536.558524][T18641] tipc: Resetting bearer <eth:syzkaller0>
[  537.209877][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  537.218061][    C0] lec:lec_tx_timeout: lec0
[  537.223445][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  539.578082][T18641] tipc: Disabling bearer <eth:syzkaller0>
[  539.598543][ T7922] tipc: Node number set to 2024586684
[  539.928297][T18720] IPv6: NLM_F_CREATE should be specified when creating new route
[  539.965562][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3421'.
[  540.066554][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'.
[  540.100392][T18733] ip6erspan0: entered allmulticast mode
[  540.365333][T18745] C speed is unknown, defaulting to 1000
[  540.527994][T18761] af_packet: tpacket_rcv: packet too big, clamped from 184 to 4294967272. macoff=96
[  540.844109][T18772] lo: entered promiscuous mode
[  540.881653][T18772] netlink: 'syz.4.3434': attribute type 2 has an invalid length.
[  540.899380][T18772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  541.429013][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'.
[  542.048936][T18824] netlink: 'syz.2.3450': attribute type 39 has an invalid length.
[  542.067101][T18824] hsr_slave_1 (unregistering): left promiscuous mode
[  542.240000][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  542.248260][    C0] lec:lec_tx_timeout: lec0
[  542.253535][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  544.630878][T18805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  544.853700][T18830] xt_HMARK: spi-set and port-set can't be combined
[  544.875814][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'.
[  544.931555][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'.
[  545.088387][T18839] syzkaller1: entered promiscuous mode
[  545.112535][T18839] syzkaller1: entered allmulticast mode
[  545.299662][T18856] netlink: 'syz.4.3458': attribute type 1 has an invalid length.
[  545.463568][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'.
[  545.500458][T18856] 8021q: adding VLAN 0 to HW filter on device bond2
[  545.562535][T18862] netlink: 'syz.3.3462': attribute type 1 has an invalid length.
[  545.593661][T18862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3462'.
[  545.808941][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  545.821593][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  545.918141][T18887] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  548.049284][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  548.057390][    C0] lec:lec_tx_timeout: lec0
[  548.062903][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  548.121032][T18845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  548.436217][T18905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3474'.
[  548.448254][T18905] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3474'.
[  548.463161][T18905] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3474'.
[  548.512586][T18907] Bluetooth: MGMT ver 1.23
[  548.626859][T18908] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  548.647133][T18913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3478'.
[  548.793952][T18930] openvswitch: netlink: Message has 4 unknown bytes.
[  549.194118][T18949] xt_hashlimit: invalid rate
[  549.373355][T18954] bond1: option all_slaves_active: invalid value (222)
[  549.388649][T18954] bond1 (unregistering): Released all slaves
[  549.736216][T18976] netlink: 'syz.3.3493': attribute type 21 has an invalid length.
[  549.767630][T18976] netlink: 'syz.3.3493': attribute type 22 has an invalid length.
[  549.790130][T18976] netlink: 'syz.3.3493': attribute type 23 has an invalid length.
[  549.805120][T18976] netlink: 'syz.3.3493': attribute type 25 has an invalid length.
[  549.819988][T17996] Bluetooth: hci3: command 0x0406 tx timeout
[  549.827273][T18976] netlink: 'syz.3.3493': attribute type 26 has an invalid length.
[  549.854186][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3493'.
[  549.864163][T18979] syzkaller0: entered promiscuous mode
[  549.885116][T18979] syzkaller0: entered allmulticast mode
[  550.158317][T18993] tipc: Started in network mode
[  550.163540][T18993] tipc: Node identity 3a503d7fbad6, cluster identity 4711
[  550.182184][T18993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.240486][T18993] syzkaller0: entered promiscuous mode
[  550.259601][T18993] syzkaller0: entered allmulticast mode
[  550.347359][T18963] infiniband syz0: set active
[  550.365504][T18997] tipc: Resetting bearer <eth:syzkaller0>
[  550.377564][T18963] infiniband syz0: added veth0_vlan
[  550.401303][T18992] tipc: Resetting bearer <eth:syzkaller0>
[  550.428479][T18963] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  550.438294][T18963] infiniband syz0: Couldn't open port 1
[  550.463191][T18992] tipc: Disabling bearer <eth:syzkaller0>
[  550.572811][T18963] RDS/IB: syz0: added
[  550.590639][T18963] smc: adding ib device syz0 with port count 1
[  550.608369][T18963] smc:    ib device syz0 port 1 has no pnetid
[  550.776132][T19020] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3504'.
[  550.797237][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3505'.
[  551.057882][T19028] ipt_REJECT: TCP_RESET invalid for non-tcp
[  551.305879][T19043] netlink: 752 bytes leftover after parsing attributes in process `syz.0.3513'.
[  551.386288][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3514'.
[  551.396442][T19045] openvswitch: netlink: Flow key attr not present in new flow.
[  552.160564][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.203374][T19038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.394495][T19071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3516'.
[  552.924220][T19042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  553.054280][  T192] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.083038][  T192] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.092206][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  553.092285][    C0] lec:lec_tx_timeout: lec0
[  553.101896][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  553.136648][T19073] netlink: 'syz.0.3517': attribute type 1 has an invalid length.
[  553.182217][  T192] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.214839][T19073] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  553.215172][  T192] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.372783][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3520'.
[  553.627809][T19094] bond3 (unregistering): Released all slaves
[  553.712626][T19097] netlink: 'syz.1.3524': attribute type 11 has an invalid length.
[  553.722656][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3525'.
[  554.014250][T19111] bridge0: port 3(syz_tun) entered blocking state
[  554.029511][T19111] bridge0: port 3(syz_tun) entered disabled state
[  554.045905][T19111] syz_tun: entered allmulticast mode
[  554.061129][T19111] syz_tun: entered promiscuous mode
[  554.067249][T19111] bridge0: port 3(syz_tun) entered blocking state
[  554.074037][T19111] bridge0: port 3(syz_tun) entered forwarding state
[  554.179165][T19117] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  554.885985][T19124] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3531'.
[  556.322792][T19083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.554577][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'.
[  556.589195][T19148] macvtap1: entered allmulticast mode
[  556.600410][T19148] veth0_macvtap: entered allmulticast mode
[  557.023519][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3546'.
[  557.115404][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  557.159694][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  557.391040][T19152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3541'.
[  557.735024][T19214] Bluetooth: MGMT ver 1.23
[  557.773582][T19216] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3557'.
[  557.981463][T19224] openvswitch: netlink: Message has 1 unknown bytes.
[  557.998437][T19224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.109945][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  558.118150][    C0] lec:lec_tx_timeout: lec0
[  558.123479][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  558.204600][T19232] xt_ecn: cannot match TCP bits for non-tcp packets
[  558.212598][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'.
[  558.258364][T19235] veth0: entered promiscuous mode
[  558.283915][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'.
[  558.301843][T19236] netlink: 'syz.4.3564': attribute type 9 has an invalid length.
[  558.650603][T19249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3570'.
[  558.701282][T19255] sctp: [Deprecated]: syz.2.3573 (pid 19255) Use of int in max_burst socket option deprecated.
[  558.701282][T19255] Use struct sctp_assoc_value instead
[  558.847133][T19263] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3574'.
[  558.858211][T19256] C speed is unknown, defaulting to 1000
[  559.081840][T19272] syzkaller0: entered allmulticast mode
[  559.178037][T19272] syzkaller0: left allmulticast mode
[  559.810463][T17996] Bluetooth: hci2: command 0x0401 tx timeout
[  559.818170][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  559.851532][T19301] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  560.068274][T19317] netlink: 'syz.0.3591': attribute type 1 has an invalid length.
[  560.095502][T19317] netlink: 'syz.0.3591': attribute type 4 has an invalid length.
[  561.226181][T19355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.317513][T19351] syzkaller0: entered promiscuous mode
[  561.352183][T19351] syzkaller0: entered allmulticast mode
[  561.851286][T19384] __nla_validate_parse: 5 callbacks suppressed
[  561.851307][T19384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3614'.
[  562.158549][T19396] netlink: 'syz.3.3618': attribute type 21 has an invalid length.
[  562.167586][T19396] IPv6: NLM_F_CREATE should be specified when creating new route
[  562.718379][T19442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3626'.
[  562.834192][T19460] netlink: 'syz.4.3629': attribute type 4 has an invalid length.
[  562.994124][T19469] netlink: 'syz.4.3632': attribute type 1 has an invalid length.
[  563.007009][T19469] netlink: 'syz.4.3632': attribute type 2 has an invalid length.
[  563.018772][T19469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3632'.
[  563.097306][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  563.134650][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807e806000: rx timeout, send abort
[  563.147559][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  563.155709][    C0] lec:lec_tx_timeout: lec0
[  563.161778][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  563.229957][T19473] syzkaller0: entered promiscuous mode
[  563.235718][T19473] syzkaller0: entered allmulticast mode
[  563.645928][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807e806000: abort rx timeout. Force session deactivation
[  563.781943][T19484] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3638'.
[  564.666199][T19488] netlink: 'syz.2.3639': attribute type 1 has an invalid length.
[  564.676904][T19488] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  565.475101][T19413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.755678][T19509] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3645'.
[  565.822283][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3648'.
[  565.933009][T19523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.955697][T19527] tipc: Failed to remove unknown binding: 66,0,0/2024586684:4134664033/4134664035
[  565.976872][T19527] tipc: Failed to remove unknown binding: 66,0,0/2024586684:4134664033/4134664034
[  565.998574][T19523] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3649'.
[  566.011483][T19526] tipc: Failed to remove unknown binding: 66,0,0/2024586684:4134664033/4134664035
[  566.031025][T19526] tipc: Failed to remove unknown binding: 66,0,0/2024586684:4134664033/4134664034
[  566.122880][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3652'.
[  566.538516][T19054] IPVS: starting estimator thread 0...
[  566.597962][T19547] C speed is unknown, defaulting to 1000
[  566.677935][T19563] IPVS: using max 25 ests per chain, 60000 per kthread
[  566.815996][T19572] netlink: 'syz.3.3658': attribute type 4 has an invalid length.
[  566.837626][T19571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3659'.
[  567.025903][T19571] bond1 (unregistering): Released all slaves
[  567.369979][T19589] netlink: 'syz.1.3662': attribute type 1 has an invalid length.
[  567.455391][T19596] netlink: 'syz.0.3663': attribute type 2 has an invalid length.
[  567.480458][T19596] netlink: 'syz.0.3663': attribute type 8 has an invalid length.
[  567.510444][T19596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3663'.
[  567.794934][T19602] bridge2: entered promiscuous mode
[  567.821567][T19602] bridge2: entered allmulticast mode
[  567.852685][T19605] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3667'.
[  567.869583][T19605] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3667'.
[  568.169862][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  568.178220][    C0] lec:lec_tx_timeout: lec0
[  568.183472][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  568.250803][T19632] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3673'.
[  568.396148][T19641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3675'.
[  568.615689][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'.
[  568.668464][T19649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.758596][T19649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.932256][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'.
[  568.974442][T19654] vlan3: entered allmulticast mode
[  568.980728][T19654] hsr0: entered allmulticast mode
[  568.986795][T19654] hsr_slave_0: entered allmulticast mode
[  568.993263][T19654] hsr_slave_1: entered allmulticast mode
[  571.821153][T19662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.024781][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3689'.
[  572.058107][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'.
[  572.189968][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3693'.
[  572.596586][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  572.606241][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  572.616747][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  572.653938][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  572.668509][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'.
[  573.174267][T19735] syzkaller1: entered promiscuous mode
[  573.194421][T19735] syzkaller1: entered allmulticast mode
[  573.200790][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  573.200819][    C0] lec:lec_tx_timeout: lec0
[  573.209071][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  573.233563][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'.
[  573.253504][T19742] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3705'.
[  573.275387][T19742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3705'.
[  573.368511][T19742] pimreg3: entered allmulticast mode
[  573.611545][T19757] bond0: (slave gre0): refused to change device type
[  573.633173][T19759] lo: left promiscuous mode
[  573.639530][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3708'.
[  573.657890][T19759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  573.682874][T19761] netlink: 'syz.1.3711': attribute type 3 has an invalid length.
[  573.697462][T19764] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3710'.
[  573.712848][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'.
[  573.960476][T19771] syz_tun: entered allmulticast mode
[  573.981138][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'.
[  574.014068][T19777] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3716'.
[  574.023858][T19777] netlink: 'syz.0.3716': attribute type 1 has an invalid length.
[  574.516232][T19799] netlink: 'syz.3.3723': attribute type 64 has an invalid length.
[  574.538320][T19799] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3723'.
[  574.585083][T19799] ipvlan2: entered allmulticast mode
[  574.598271][T19799] batadv_slave_1: entered allmulticast mode
[  574.634631][T19799] batman_adv: batadv0: Adding interface: ipvlan2
[  574.654572][T19799] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.721476][T19799] batman_adv: batadv0: Interface activated: ipvlan2
[  574.957780][T19815] syzkaller1: entered promiscuous mode
[  574.976081][T19815] syzkaller1: entered allmulticast mode
[  575.102045][T19819] �x9�: renamed from bridge_slave_0
[  575.244924][T19822] netlink: 'syz.0.3729': attribute type 5 has an invalid length.
[  576.802294][T19884] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  576.965210][T19883] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.978574][T19883] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.063415][T19856] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  577.265779][T19903] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  577.405537][T19906] sctp: [Deprecated]: syz.2.3759 (pid 19906) Use of struct sctp_assoc_value in delayed_ack socket option.
[  577.405537][T19906] Use struct sctp_sack_info instead
[  577.717141][T19929] __nla_validate_parse: 9 callbacks suppressed
[  577.717163][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'.
[  577.759530][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'.
[  577.791384][T19931] tipc: Started in network mode
[  577.817738][T19931] tipc: Node identity f643e80e86ea, cluster identity 4711
[  577.852819][T19931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  577.945471][T19940] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3769'.
[  577.957953][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'.
[  578.044722][T19937] syzkaller0: entered promiscuous mode
[  578.056626][T19937] syzkaller0: entered allmulticast mode
[  578.064319][T19937] tipc: Resetting bearer <eth:syzkaller0>
[  578.115103][T19928] tipc: Resetting bearer <eth:syzkaller0>
[  578.209870][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  578.218081][    C0] lec:lec_tx_timeout: lec0
[  578.223672][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  581.248042][T19928] tipc: Disabling bearer <eth:syzkaller0>
[  581.280452][T19055] tipc: Node number set to 1890183182
[  581.526349][T19972] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  581.543263][T19966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.876574][T19995] openvswitch: netlink: IPv6 tunnel dst address is zero
[  582.090162][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3783'.
[  582.116157][T20003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3783'.
[  582.135740][T20001] netlink: 'syz.2.3783': attribute type 7 has an invalid length.
[  582.153880][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'.
[  582.165363][T20001] netlink: 'syz.2.3783': attribute type 8 has an invalid length.
[  582.188493][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'.
[  582.197778][T20003] netlink: 'syz.2.3783': attribute type 7 has an invalid length.
[  582.197802][T20003] netlink: 'syz.2.3783': attribute type 8 has an invalid length.
[  582.197816][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'.
[  582.216298][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'.
[  582.933230][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3793'.
[  583.231302][T20056] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  583.241029][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  583.249296][    C0] lec:lec_tx_timeout: lec0
[  583.254554][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  583.274024][T20056] bond4 (unregistering): Released all slaves
[  583.546880][T20071] netlink: 'syz.4.3800': attribute type 1 has an invalid length.
[  583.576127][T20071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3800'.
[  583.586220][T20071] NCSI netlink: No device for ifindex 0
[  583.615500][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3799'.
[  583.647151][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'.
[  583.750201][T20079] bond2 (unregistering): Released all slaves
[  584.223673][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'.
[  584.536021][T20120] syzkaller0: entered promiscuous mode
[  584.542555][T20120] syzkaller0: entered allmulticast mode
[  584.614448][T20129] xt_l2tp: invalid flags combination: 8
[  584.696885][T20132] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  584.856376][T20138] netlink: 'syz.3.3818': attribute type 1 has an invalid length.
[  585.027598][T20141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3819'.
[  585.060408][T20141] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3819'.
[  585.443099][T20158] xt_l2tp: invalid flags combination: 0
[  586.291316][T20173] netlink: 'syz.2.3824': attribute type 11 has an invalid length.
[  586.370112][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  586.380295][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  588.201342][T20141] veth3: entered promiscuous mode
[  588.270056][T20170] syzkaller0: entered promiscuous mode
[  588.296447][T20170] syzkaller0: entered allmulticast mode
[  588.648423][T20194] bridge1: entered promiscuous mode
[  588.664159][T20194] bridge1: entered allmulticast mode
[  588.688283][T20192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  589.089622][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  589.097842][    C0] lec:lec_tx_timeout: lec0
[  589.103914][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  589.536280][T20216] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3838'.
[  589.551988][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'.
[  589.624330][T20218] vlan2: entered allmulticast mode
[  589.640948][T20218] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode
[  590.089079][T20237] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3846'.
[  590.101069][T20238] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3846'.
[  590.355752][T19058] IPVS: starting estimator thread 0...
[  590.474764][T20254] IPVS: using max 26 ests per chain, 62400 per kthread
[  590.557000][T20256] syzkaller1: entered allmulticast mode
[  590.587248][T20259] netlink: 'syz.0.3850': attribute type 21 has an invalid length.
[  590.607559][T20259] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3850'.
[  590.632982][T20259] netlink: 'syz.0.3850': attribute type 5 has an invalid length.
[  590.651307][T20259] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3850'.
[  591.132563][T20276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3855'.
[  591.182744][T20276] bond0: entered promiscuous mode
[  591.188050][T20276] bond_slave_0: entered promiscuous mode
[  591.195218][T20276] bond_slave_1: entered promiscuous mode
[  591.204814][T20276] gretap0: entered promiscuous mode
[  591.222044][T20276] hsr1: entered promiscuous mode
[  591.394587][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'.
[  591.405081][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3859'.
[  591.461958][T20286] bond2: option all_slaves_active: invalid value (222)
[  591.474293][T20286] bond2 (unregistering): Released all slaves
[  591.521147][T20289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.825161][T20302] netlink: 'syz.0.3863': attribute type 29 has an invalid length.
[  591.859572][T20302] netlink: 'syz.0.3863': attribute type 29 has an invalid length.
[  591.875125][T20302] IPv6: NLM_F_REPLACE set, but no existing node found!
[  592.163249][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3867'.
[  592.759880][T20352] netlink: 'syz.4.3879': attribute type 2 has an invalid length.
[  592.793796][T20352] �9: entered promiscuous mode
[  593.178688][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.273237][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.312600][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.338530][T20379] IPVS: length: 143 != 8
[  593.464883][T20384] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  593.477104][T20384] team0 (unregistering): Port device team_slave_0 removed
[  593.498764][T20384] team0 (unregistering): Failed to send options change via netlink (err -105)
[  593.518833][T20384] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  593.531030][T20384] team0 (unregistering): Port device team_slave_1 removed
[  593.826365][T20404] syzkaller0: entered promiscuous mode
[  593.841367][T20404] syzkaller0: entered allmulticast mode
[  594.008538][T20419] netlink: 'syz.1.3899': attribute type 1 has an invalid length.
[  594.017468][T20419] netlink: 'syz.1.3899': attribute type 4 has an invalid length.
[  594.119859][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  594.127967][    C0] lec:lec_tx_timeout: lec0
[  594.134015][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  594.277118][T20434] ip6gre0: Master is either lo or non-ether device
[  594.284211][T20435] netlink: 'syz.4.3905': attribute type 1 has an invalid length.
[  594.329005][T20435] bond3: entered promiscuous mode
[  594.355020][T20435] 8021q: adding VLAN 0 to HW filter on device bond3
[  594.403304][T20445] nftables ruleset with unbound chain
[  594.446111][T20435] 8021q: adding VLAN 0 to HW filter on device bond3
[  594.457301][T20435] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  594.486847][T20435] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  594.505249][T20435] bond3: (slave vti0): making interface the new active one
[  594.513752][T20435] vti0: entered promiscuous mode
[  594.534360][T20435] bond3: (slave vti0): Enslaving as an active interface with an up link
[  594.685680][T20453] lo: entered promiscuous mode
[  594.700541][T20453] tunl0: entered promiscuous mode
[  594.715355][T20453] gre0: entered promiscuous mode
[  594.779140][T20453] erspan0: entered promiscuous mode
[  594.790811][T20453] ip_vti0: entered promiscuous mode
[  594.886432][T20460] __nla_validate_parse: 48 callbacks suppressed
[  594.886454][T20460] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3913'.
[  595.075674][T20471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.200754][T20471] syzkaller0: entered promiscuous mode
[  595.206504][T20471] syzkaller0: entered allmulticast mode
[  595.217450][T20471] tipc: Resetting bearer <eth:syzkaller0>
[  595.292688][T20470] tipc: Resetting bearer <eth:syzkaller0>
[  595.446242][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  595.585746][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880597e0800: rx timeout, send abort
[  595.901579][T20492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'.
[  595.917011][T20491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'.
[  596.085069][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880597e1400: rx timeout, send abort
[  596.098435][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880597e0800: abort rx timeout. Force session deactivation
[  596.593486][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880597e1400: abort rx timeout. Force session deactivation
[  598.345614][T20470] tipc: Disabling bearer <eth:syzkaller0>
[  598.377548][T20487] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  598.563696][T20501] x_tables: duplicate underflow at hook 1
[  598.610765][T20503] netlink: 'syz.2.3925': attribute type 10 has an invalid length.
[  598.885053][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3926'.
[  598.996101][T20523] ipt_rpfilter: unknown options
[  599.081264][T20526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3932'.
[  599.095601][T20526] netlink: 'syz.4.3932': attribute type 2 has an invalid length.
[  599.149907][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  599.158039][    C0] lec:lec_tx_timeout: lec0
[  599.163437][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  599.195942][T20528] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3933'.
[  599.342289][T20539] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  599.367931][T20539] �9: entered promiscuous mode
[  599.574786][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'.
[  599.981088][T20562] syzkaller0: entered promiscuous mode
[  599.986756][T20562] syzkaller0: entered allmulticast mode
[  599.993892][T20561] tipc: Started in network mode
[  599.999962][T20561] tipc: Node identity 26bdf0bad506, cluster identity 4711
[  600.019922][T20561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  600.219113][T20561] tipc: Resetting bearer <eth:syzkaller0>
[  600.262863][T20585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.501093][T20593] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  601.092677][ T1345] wlan1: Trigger new scan to find an IBSS to join
[  603.151758][T20561] tipc: Disabling bearer <eth:syzkaller0>
[  603.194257][T20593] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  603.312097][T19049] tipc: Node number set to 4089180346
[  603.523226][T20611] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  603.562482][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'.
[  603.621625][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'.
[  603.668399][T20611] netlink: 'syz.2.3956': attribute type 12 has an invalid length.
[  603.684714][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'.
[  603.703413][T20611] netlink: 'syz.2.3956': attribute type 11 has an invalid length.
[  603.781628][T20630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3962'.
[  604.030915][T20642] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3964'.
[  604.053301][T19429] wlan1: Trigger new scan to find an IBSS to join
[  604.101983][T20642] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0
[  604.156816][T20648] x_tables: duplicate underflow at hook 1
[  604.179963][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  604.188164][    C0] lec:lec_tx_timeout: lec0
[  604.193975][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  604.290882][T20655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3969'.
[  604.374399][T20658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3969'.
[  604.709041][T20670] netlink: 'syz.3.3973': attribute type 1 has an invalid length.
[  604.717321][T20674] netlink: 'syz.0.3975': attribute type 12 has an invalid length.
[  604.725786][T20670] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3973'.
[  604.744090][T20673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.151014][T20695] netlink: 'syz.0.3981': attribute type 75 has an invalid length.
[  605.291784][T20698] xt_cluster: node mask cannot exceed total number of nodes
[  605.499089][T20711] netlink: 'syz.4.3988': attribute type 4 has an invalid length.
[  605.766801][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3989'.
[  605.900115][T20726] netlink: 'syz.0.3993': attribute type 2 has an invalid length.
[  605.924362][T19449] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.925028][T20726] netlink: 'syz.0.3993': attribute type 2 has an invalid length.
[  605.956841][T19449] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.328680][T20751] openvswitch: netlink: Missing key (keys=40, expected=80)
[  606.443585][T20749] netlink: 'syz.3.4000': attribute type 39 has an invalid length.
[  606.568402][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'.
[  607.010664][   T12] wlan1: Creating new IBSS network, BSSID fe:6f:70:a0:d8:b2
[  608.143563][T20835] netlink: 'syz.0.4028': attribute type 10 has an invalid length.
[  608.172683][T20835] team0: Device ipvlan1 failed to register rx_handler
[  608.345089][T20841] tipc: Resetting bearer <eth:syzkaller0>
[  608.516162][T20841] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  608.525402][T20845] xt_hashlimit: size too large, truncated to 1048576
[  608.532703][T20841] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  608.660501][T20841] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  608.692533][T20841] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  608.700955][T20855] __nla_validate_parse: 6 callbacks suppressed
[  608.700975][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4032'.
[  608.897922][T20841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  608.918127][T20841] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  609.142564][T20841] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  609.159738][T20841] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  609.209867][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  609.218042][    C0] lec:lec_tx_timeout: lec0
[  609.223656][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  609.409873][T20841] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  609.443846][T20841] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  609.970581][T20896] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4042'.
[  610.197633][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4046'.
[  610.383535][T20910] bond4: entered promiscuous mode
[  610.417886][T20910] bond4: entered allmulticast mode
[  610.563625][T20916] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4047'.
[  610.681818][T20914] C speed is unknown, defaulting to 1000
[  610.688894][T20923] netlink: 'syz.2.4050': attribute type 30 has an invalid length.
[  610.778894][T20926] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4050'.
[  611.105465][T20941] erspan0: entered promiscuous mode
[  611.137128][T20941] erspan0: entered allmulticast mode
[  611.166074][T20945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.253089][T20948] netlink: 'syz.0.4057': attribute type 21 has an invalid length.
[  611.280172][T20948] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4057'.
[  611.329004][T20948] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4057'.
[  611.598832][T20963] openvswitch: netlink: Flow actions attr not present in new flow.
[  611.789987][T20973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4064'.
[  611.835273][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[  611.854247][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[  612.422203][T20997] syzkaller1: entered promiscuous mode
[  612.442228][T20997] syzkaller1: entered allmulticast mode
[  612.746593][T21009] netlink: 'syz.0.4075': attribute type 1 has an invalid length.
[  612.756056][T21010] netlink: 'syz.0.4075': attribute type 1 has an invalid length.
[  612.944057][T21021] netlink: 'syz.2.4078': attribute type 10 has an invalid length.
[  612.987925][T21010] 8021q: adding VLAN 0 to HW filter on device bond4
[  613.070189][T21016] bond4: (slave geneve2): making interface the new active one
[  613.084141][T21016] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  613.200023][T19449] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  613.233589][T19449] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  613.351038][T19449] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  613.390581][T19449] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  614.239883][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  614.248110][    C0] lec:lec_tx_timeout: lec0
[  614.253370][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  614.263725][T21083] netlink: 'syz.3.4093': attribute type 2 has an invalid length.
[  614.301449][T21083] netlink: 'syz.3.4093': attribute type 8 has an invalid length.
[  614.320140][T21083] __nla_validate_parse: 9 callbacks suppressed
[  614.320163][T21083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4093'.
[  614.615929][T21100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4097'.
[  614.708029][T21101] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  614.888060][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4090'.
[  614.909950][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4090'.
[  615.128358][T21114] syzkaller0: entered promiscuous mode
[  615.150949][T21114] syzkaller0: entered allmulticast mode
[  615.640163][T21153] vcan1: entered promiscuous mode
[  615.656697][T21153] vcan1: entered allmulticast mode
[  615.685893][T21157] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  615.788195][T21163] syzkaller1: entered promiscuous mode
[  615.804785][T21163] syzkaller1: entered allmulticast mode
[  616.004824][T21172] SET target dimension over the limit!
[  616.295682][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4121'.
[  616.373593][T21184] netlink: 'syz.4.4121': attribute type 3 has an invalid length.
[  620.049328][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  620.057403][    C0] lec:lec_tx_timeout: lec0
[  620.062972][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  624.535301][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  625.089356][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  625.097429][    C0] lec:lec_tx_timeout: lec0
[  625.102749][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  630.109759][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  630.118094][    C0] lec:lec_tx_timeout: lec0
[  630.123783][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  635.140005][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  635.148120][    C0] lec:lec_tx_timeout: lec0
[  635.153601][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  638.812544][T21216] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4127'.
[  638.872957][T21220] netlink: 'syz.2.4129': attribute type 3 has an invalid length.
[  638.986076][T21231] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4132'.
[  639.074518][T21237] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4134'.
[  639.094289][T21237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4134'.
[  639.112448][T21237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4134'.
[  639.131235][T21239] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  639.456228][T21252] ieee802154 phy1 wpan1: encryption failed: -22
[  639.549061][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'.
[  639.588143][T21260] ip6erspan0: entered promiscuous mode
[  639.921845][T21275] tipc: Started in network mode
[  639.947800][T21275] tipc: Node identity bbbbbb01, cluster identity 4711
[  639.985303][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4147'.
[  640.029771][T21275] tipc: Enabled bearer <eth:rose0>, priority 10
[  640.067923][T21286] syzkaller0: entered promiscuous mode
[  640.082925][T21286] syzkaller0: entered allmulticast mode
[  640.169845][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  640.178170][    C0] lec:lec_tx_timeout: lec0
[  640.183657][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  640.376178][T21297] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4154'.
[  640.454048][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4153'.
[  640.528360][T21303] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  640.557067][T21305] netlink: 'syz.0.4156': attribute type 1 has an invalid length.
[  640.594638][T21305] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4156'.
[  641.121559][ T7922] tipc: Node number set to 3149642497
[  641.765802][T21364] C speed is unknown, defaulting to 1000
[  641.881393][T21374] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  641.900406][T21375] netlink: 'syz.3.4175': attribute type 7 has an invalid length.
[  641.946716][T21374] bond0: entered promiscuous mode
[  641.975130][T21374] bond_slave_0: entered promiscuous mode
[  642.007471][T21374] bond_slave_1: entered promiscuous mode
[  642.080591][T21375] gretap0: entered promiscuous mode
[  642.101522][T21375] erspan0: entered promiscuous mode
[  642.114624][T21375] debugfs: 'hsr1' already exists in 'hsr'
[  642.130664][T21375] Cannot create hsr debugfs directory
[  642.275074][T21388] netlink: 'syz.1.4177': attribute type 1 has an invalid length.
[  642.294044][T21387] netlink: 'syz.1.4177': attribute type 1 has an invalid length.
[  642.315266][T21391] x_tables: unsorted underflow at hook 4
[  642.400003][T21388] bond2: entered promiscuous mode
[  642.423274][T21388] 8021q: adding VLAN 0 to HW filter on device bond2
[  642.493431][T21397] IPv6: sit1: Disabled Multicast RS
[  642.534694][T21401] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  642.740665][T21410] IPv6: NLM_F_CREATE should be specified when creating new route
[  643.841443][T21448] openvswitch: netlink: Missing valid actions attribute.
[  643.880792][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.957274][T21452] __nla_validate_parse: 11 callbacks suppressed
[  643.957295][T21452] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4197'.
[  644.021936][T21456] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4197'.
[  644.054146][T21457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'.
[  644.081430][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4197'.
[  644.441053][T21470] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4204'.
[  644.477616][T21470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4204'.
[  644.502937][T21472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4206'.
[  644.657874][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'.
[  644.669079][T21476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4208'.
[  644.765558][T21476] geneve2: entered promiscuous mode
[  644.771749][T21476] geneve2: entered allmulticast mode
[  645.199882][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  645.208028][    C0] lec:lec_tx_timeout: lec0
[  645.213352][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  645.832287][T21527] netlink: get zone limit has 4 unknown bytes
[  645.839802][T21527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4224'.
[  646.144902][T21542] h: entered promiscuous mode
[  646.551607][T21563] bond0: entered allmulticast mode
[  646.576557][T21563] bond_slave_0: entered allmulticast mode
[  646.595414][T21563] bond_slave_1: entered allmulticast mode
[  646.676675][T21567] netlink: 'syz.2.4235': attribute type 1 has an invalid length.
[  646.764906][T21567] 8021q: adding VLAN 0 to HW filter on device bond5
[  646.801542][T21578] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001
[  647.341305][T21606] syzkaller1: entered promiscuous mode
[  647.348389][T21606] syzkaller1: entered allmulticast mode
[  647.695871][T21615] block nbd0: not configured, cannot reconfigure
[  648.311519][T21643] �x9� (unregistering): left allmulticast mode
[  648.317962][T21643] �x9� (unregistering): left promiscuous mode
[  648.327892][T21643] bridge0: port 1(
1�x9�) entered disabled state
[  648.746655][T21660] netlink: 'syz.4.4266': attribute type 13 has an invalid length.
[  648.770563][T21660] macvtap0: entered allmulticast mode
[  648.784698][T21660] macvtap0: refused to change device tx_queue_len
[  648.827334][   T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  648.860628][   T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  648.874041][   T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  648.887054][   T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  649.270459][T21687] syzkaller0: entered promiscuous mode
[  649.279717][T21687] syzkaller0: entered allmulticast mode
[  649.314620][T21694] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  649.325281][T21693] netlink: 'syz.3.4276': attribute type 1 has an invalid length.
[  649.341159][T21690] __nla_validate_parse: 10 callbacks suppressed
[  649.341173][T21690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4275'.
[  649.380115][T21694] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4277'.
[  649.403557][T21693] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  649.414678][T21693] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  649.428559][T21693] bond2: (slave vxcan3): making interface the new active one
[  649.437967][T21693] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[  649.460040][T21698] netlink: 'syz.4.4277': attribute type 1 has an invalid length.
[  649.523550][T21700] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  649.916726][T21717] xt_hashlimit: size too large, truncated to 1048576
[  650.135221][T21734] netlink: 'syz.2.4289': attribute type 2 has an invalid length.
[  650.194964][T21734] v�: entered promiscuous mode
[  650.207098][T21735] netlink: 'syz.2.4289': attribute type 2 has an invalid length.
[  650.229945][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  650.238729][    C0] lec:lec_tx_timeout: lec0
[  650.244295][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  650.677428][T21759] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4296'.
[  650.699845][T21759] netem: invalid attributes len -24
[  650.705563][T21759] netem: change failed
[  650.775717][T21761] syzkaller1: entered promiscuous mode
[  650.794423][T21761] syzkaller1: entered allmulticast mode
[  650.948130][T21767] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  651.010154][T21767] bond6 (unregistering): Released all slaves
[  651.240289][T21774] netlink: 'syz.0.4301': attribute type 1 has an invalid length.
[  651.494656][T21797] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4305'.
[  651.506495][T21797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4305'.
[  651.558449][T21781] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  651.583363][T21781] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  651.601137][T21781] bond5: (slave ip6gre1): making interface the new active one
[  651.612327][T21781] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  651.744766][T21806] 8021q: VLANs not supported on wg0
[  652.054270][T21815] syzkaller0: entered promiscuous mode
[  652.087874][T21815] syzkaller0: entered allmulticast mode
[  652.189066][T21822] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4312'.
[  652.318038][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4312'.
[  652.410704][T21834] nbd: must specify an index to disconnect
[  652.513230][T21840] tipc: Enabled bearer <eth:macvlan1>, priority 7
[  652.593111][T21845] SET target dimension over the limit!
[  652.803297][T21860] netlink: 'syz.4.4323': attribute type 1 has an invalid length.
[  652.813157][T21854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'.
[  652.854033][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.884617][T21864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4323'.
[  652.907003][T21865] set match dimension is over the limit!
[  652.943861][T21860] 8021q: adding VLAN 0 to HW filter on device bond4
[  652.966373][T21864] bond4: (slave geneve3): making interface the new active one
[  652.980284][T21864] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  653.007869][   T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.032255][T21866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4324'.
[  653.055420][   T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.085331][   T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.113559][   T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.222966][T21876] syz.3.4328 uses old SIOCAX25GETINFO
[  653.878841][T21922] netlink: 'syz.3.4340': attribute type 4 has an invalid length.
[  653.918539][T21922] netlink: 'syz.3.4340': attribute type 4 has an invalid length.
[  654.403370][T21947] netlink: 'syz.0.4346': attribute type 1 has an invalid length.
[  654.411445][T21947] __nla_validate_parse: 8 callbacks suppressed
[  654.411466][T21947] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4346'.
[  654.429776][T21947] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4346'.
[  654.439018][T21947] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4346'.
[  654.455120][T21943] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4345'.
[  654.525063][T21950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4348'.
[  654.547287][T21951] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  654.747832][T21962] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4352'.
[  654.766523][T21963] netlink: 'syz.4.4353': attribute type 12 has an invalid length.
[  654.791101][T21963] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4353'.
[  654.818866][T21966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4354'.
[  654.872514][T21969] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4355'.
[  654.904246][T21969] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1
[  655.045100][T21977] 8021q: VLANs not supported on lo
[  655.259931][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  655.268150][    C0] lec:lec_tx_timeout: lec0
[  655.273821][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  655.786103][T22009] xt_hashlimit: size too large, truncated to 1048576
[  655.796601][T22016] openvswitch: netlink: Invalid VLAN frame
[  656.035198][T22027] sctp: [Deprecated]: syz.1.4371 (pid 22027) Use of int in max_burst socket option.
[  656.035198][T22027] Use struct sctp_assoc_value instead
[  656.083218][T22027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4371'.
[  656.630299][T22057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  656.708072][T22059] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  656.914747][T22068] pim6reg: entered allmulticast mode
[  656.936496][T22068] pim6reg: left allmulticast mode
[  657.165109][T22081] batadv_slave_1: entered promiscuous mode
[  657.232869][T22080] batadv_slave_1: left promiscuous mode
[  657.260689][T22086] syzkaller0: entered promiscuous mode
[  657.266698][T22086] syzkaller0: entered allmulticast mode
[  657.281525][T22086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.301322][T22084] tipc: Resetting bearer <eth:syzkaller0>
[  657.346031][T22084] tipc: Disabling bearer <eth:syzkaller0>
[  657.545610][T22091] C speed is unknown, defaulting to 1000
[  660.764485][ T1106] bond7 (unregistering): (slave bridge3): Releasing backup interface
[  660.773866][ T1106] bridge3 (unregistering): left promiscuous mode
[  661.085774][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  661.097453][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  661.109403][ T1106] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  661.119066][ T1106] bond0 (unregistering): Released all slaves
[  661.131969][ T1106] bond1 (unregistering): Released all slaves
[  661.148511][ T1106] bond2 (unregistering): Released all slaves
[  661.167941][ T1106] bond3 (unregistering): (slave bond4): Releasing backup interface
[  661.177810][ T1106] bond3 (unregistering): Released all slaves
[  661.198326][ T1106] bond4 (unregistering): Released all slaves
[  661.218445][ T1106] bond5 (unregistering): Released all slaves
[  661.235165][ T1106] bond6 (unregistering): Released all slaves
[  661.251887][ T1106] bond7 (unregistering): Released all slaves
[  661.272675][ T1106] bond8 (unregistering): Released all slaves
[  661.292102][ T1106] bond9 (unregistering): Released all slaves
[  661.311633][ T1106] bond10 (unregistering): Released all slaves
[  661.332704][ T1106] bond11 (unregistering): Released all slaves
[  661.576672][ T1106] �9: left promiscuous mode
[  661.649280][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms
[  661.657585][    C0] lec:lec_tx_timeout: lec0
[  661.665491][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  661.674160][ T1106] tipc: Disabling bearer <eth:syzkaller0>
[  661.693545][ T1106] tipc: Disabling bearer <udp:syz2>
[  661.702915][ T1106] tipc: Disabling bearer <eth:vlan0>
[  661.708905][ T1106] tipc: Left network mode
[  662.565083][ T1106] hsr_slave_0: left promiscuous mode
[  662.572042][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.589617][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.916988][ T1106] team0 (unregistering): Port device team_slave_1 removed
[  662.957163][ T1106] team0 (unregistering): Port device team_slave_0 removed
[  663.164724][   T77] smc: removing ib device syz2
[  663.175017][T19058] C speed is unknown, defaulting to 1000
[  663.194942][T19058] syz2: Port: 1 Link DOWN
[  665.380682][ T1106] IPVS: stop unused estimator thread 0...
[  667.409280][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  667.417558][    C0] lec:lec_tx_timeout: lec0
[  667.423316][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  673.169284][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  673.177386][    C0] lec:lec_tx_timeout: lec0
[  673.183158][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  678.199947][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  678.208288][    C0] lec:lec_tx_timeout: lec0
[  680.007036][T22218] __nla_validate_parse: 1 callbacks suppressed
[  680.007057][T22218] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4399'.
[  680.137398][T22225] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  680.204673][T22231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4402'.
[  680.325593][T22235] Can't find ip_set type 
[  680.452705][T22245] netlink: 'syz.2.4405': attribute type 1 has an invalid length.
[  680.471833][T22245] syzkaller1: tun_chr_ioctl cmd 1074025677
[  680.481087][T19051] syzkaller1: tun_net_xmit 90
[  680.488598][T22245] syzkaller1: Linktype set failed because interface is up
[  680.701034][T22260] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4409'.
[  680.823043][T22263] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  680.903665][T22266] syzkaller1: entered promiscuous mode
[  680.909844][T22266] syzkaller1: entered allmulticast mode
[  680.929384][T22271] openvswitch: netlink: IPv4 tun info is not correct
[  681.426910][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4416'.
[  681.448460][T22299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  681.781183][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'.
[  681.853453][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4425'.
[  682.072894][T22336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'.
[  682.113439][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'.
[  682.133467][T22341] netlink: 'syz.4.4429': attribute type 4 has an invalid length.
[  682.146983][T22341] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4429'.
[  682.158073][T22342] netlink: 'syz.4.4429': attribute type 4 has an invalid length.
[  682.255064][T22342] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4429'.
[  682.525212][T22355] syzkaller1: entered promiscuous mode
[  682.535619][T22355] syzkaller1: entered allmulticast mode
[  682.703934][T22370] netlink: 'syz.4.4439': attribute type 1 has an invalid length.
[  682.929069][T22380] tipc: Enabled bearer <ib:gretap0>, priority 0
[  683.112712][T22389] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  683.252873][T22388] xt_CT: You must specify a L4 protocol and not use inversions on it
[  683.562219][T22408] syzkaller1: entered promiscuous mode
[  683.568712][T22408] syzkaller1: entered allmulticast mode
[  684.088302][T22434] veth0_to_bridge: entered promiscuous mode
[  684.113082][T22437] netlink: 'syz.3.4460': attribute type 11 has an invalid length.
[  684.154268][T22437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.196077][T22437] netlink: 'syz.3.4460': attribute type 11 has an invalid length.
[  684.239857][T22445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.301246][T22450] netlink: 'syz.4.4463': attribute type 2 has an invalid length.
[  684.326770][T22432] veth0_to_bridge: left promiscuous mode
[  684.968151][T22486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.986663][T22488] netlink: 'syz.4.4474': attribute type 19 has an invalid length.
[  685.007026][T22490] netlink: 'syz.0.4471': attribute type 5 has an invalid length.
[  685.070072][T22490] netlink: 'syz.0.4471': attribute type 6 has an invalid length.
[  685.116079][T22490] __nla_validate_parse: 14 callbacks suppressed
[  685.116099][T22490] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4471'.
[  685.170287][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4475'.
[  685.370892][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4477'.
[  685.401648][T22499] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.416639][T22499] 8021q: adding VLAN 0 to HW filter on device team0
[  685.435152][T22499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  685.885515][T22524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4485'.
[  685.975016][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.995888][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  686.473390][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'.
[  686.503131][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'.
[  686.545689][T22546] netlink: 'syz.3.4488': attribute type 1 has an invalid length.
[  686.567912][T22546] netlink: 'syz.3.4488': attribute type 2 has an invalid length.
[  686.577375][T22547] netlink: 'syz.3.4488': attribute type 1 has an invalid length.
[  686.590401][T22547] netlink: 'syz.3.4488': attribute type 2 has an invalid length.
[  686.644714][T22552] syzkaller1: entered promiscuous mode
[  686.673024][T22552] syzkaller1: entered allmulticast mode
[  686.869919][T22571] netlink: 'syz.3.4494': attribute type 16 has an invalid length.
[  686.878455][T22571] netlink: 'syz.3.4494': attribute type 17 has an invalid length.
[  687.051038][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4498'.
[  687.081520][T22571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  687.116641][T22577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  687.427326][T22591] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.471945][T22591] bridge_slave_1: left allmulticast mode
[  687.487974][T22591] bridge_slave_1: left promiscuous mode
[  687.503866][T22591] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.543986][T22595] syzkaller0: entered promiscuous mode
[  687.548389][T22596] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  687.557119][T22595] syzkaller0: entered allmulticast mode
[  687.575170][T22595] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) !
[  687.742421][T22613] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  687.759757][T22613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  687.778030][T22612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.928617][T22622] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4511'.
[  687.944345][T22625] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4512'.
[  687.963466][T22622] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.984581][T22628] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4511'.
[  688.386160][T22652] netlink: 'syz.2.4520': attribute type 1 has an invalid length.
[  688.454738][T22652] bond7: entered promiscuous mode
[  688.460742][T22652] 8021q: adding VLAN 0 to HW filter on device bond7
[  688.507319][T22652] 8021q: adding VLAN 0 to HW filter on device bond7
[  688.521556][T22652] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  688.534478][T22652] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  688.554090][T22652] bond7: (slave ip6gre1): making interface the new active one
[  688.565577][T22652] ip6gre1: entered promiscuous mode
[  688.577954][T22652] bond7: (slave ip6gre1): Enslaving as an active interface with an up link
[  688.613216][T22652] netlink: 'syz.2.4520': attribute type 1 has an invalid length.
[  689.077368][T22682] bond8: option fail_over_mac: invalid value (16)
[  689.106593][T22692] xt_l2tp: v2 tid > 0xffff: 1114244
[  689.117982][T22682] bond8 (unregistering): Released all slaves
[  691.090665][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms
[  691.098915][    C0] lec:lec_tx_timeout: lec0
[  691.104534][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  696.119318][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  696.127451][    C0] lec:lec_tx_timeout: lec0
[  716.070192][T22722] __nla_validate_parse: 3 callbacks suppressed
[  716.070211][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4539'.
[  716.090724][T22722] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4539'.
[  716.110579][T22722] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4539'.
[  716.181816][T22726] batadv_slave_0: entered promiscuous mode
[  716.357137][T22731] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4540'.
[  716.381925][T22733] gtp0: entered promiscuous mode
[  716.396879][T22733] gtp0: entered allmulticast mode
[  716.480753][T22731] bond3 (unregistering): Released all slaves
[  716.746679][T22749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4546'.
[  716.822938][T22749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4546'.
[  716.832812][T22758] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4548'.
[  716.846255][T22758] netlink: Unknown conntrack attr (0)
[  716.881676][T22761] sctp: [Deprecated]: syz.1.4547 (pid 22761) Use of int in max_burst socket option deprecated.
[  716.881676][T22761] Use struct sctp_assoc_value instead
[  716.900567][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'.
[  717.068633][T22764] tipc: Started in network mode
[  717.082327][T22764] tipc: Node identity ac14140f, cluster identity 4711
[  717.090815][T22764] tipc: New replicast peer: 255.255.255.255
[  717.101382][T22764] tipc: Enabled bearer <udp:syz2>, priority 10
[  717.155673][T19429] syzkaller0: tun_net_xmit 76
[  717.163508][T19429] syzkaller0: tun_net_xmit 48
[  717.175321][T22766] syzkaller0: create flow: hash 3716986159 index 1
[  717.203753][T19051] syzkaller0: tun_net_xmit 76
[  717.423493][T22771] syzkaller0: delete flow: hash 3716986159 index 1
[  720.846682][T19051] tipc: Node number set to 2886997007
[  721.116480][T22803] syzkaller1: entered promiscuous mode
[  721.119721][T22806] x_tables: duplicate underflow at hook 2
[  721.138106][T22803] syzkaller1: entered allmulticast mode
[  721.272582][T22812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4562'.
[  721.308647][T22812] netlink: 83 bytes leftover after parsing attributes in process `syz.0.4562'.
[  721.319022][T22819] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  721.336120][T22819] bond3 (unregistering): Released all slaves
[  721.704321][T22836] netlink: 'syz.0.4569': attribute type 3 has an invalid length.
[  721.925196][T22853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4573'.
[  722.030925][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'.
[  722.205810][T22867] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:0
[  722.227218][T22871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'.
[  722.308709][T22876] netlink: 'syz.0.4581': attribute type 1 has an invalid length.
[  722.346135][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'.
[  722.355724][T22876] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4581'.
[  722.366404][T22876] netlink: 'syz.0.4581': attribute type 1 has an invalid length.
[  722.436198][T22880] netlink: 'syz.3.4582': attribute type 2 has an invalid length.
[  722.731111][T22897] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4587'.
[  722.753125][T22904] netlink: 'syz.4.4589': attribute type 3 has an invalid length.
[  722.834408][T22897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'.
[  723.296232][T22934] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4597'.
[  723.461000][T22940] openvswitch: netlink: Flow actions attr not present in new flow.
[  723.501783][T22943] netlink: 'syz.0.4600': attribute type 7 has an invalid length.
[  723.950442][T22961] netlink: 'syz.2.4604': attribute type 3 has an invalid length.
[  724.212190][T22973] netlink: 'syz.3.4610': attribute type 1 has an invalid length.
[  724.212672][T22970] tunl0: entered promiscuous mode
[  724.220349][T22973] netlink: 'syz.3.4610': attribute type 1 has an invalid length.
[  724.237090][T22970] netlink: 'syz.1.4608': attribute type 3 has an invalid length.
[  724.392388][T22980] sctp: [Deprecated]: syz.0.4613 (pid 22980) Use of struct sctp_assoc_value in delayed_ack socket option.
[  724.392388][T22980] Use struct sctp_sack_info instead
[  724.735049][T22996] xt_l2tp: wrong L2TP version: 0
[  725.595424][T23037] openvswitch: netlink: IPv4 tun info is not correct
[  725.608889][T23038] openvswitch: netlink: IPv4 tun info is not correct
[  725.733124][ T5839] block nbd0: Receive control failed (result -32)
[  725.794656][T23046] sctp: [Deprecated]: syz.4.4633 (pid 23046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  725.794656][T23046] Use struct sctp_sack_info instead
[  726.143200][T23061] NCSI netlink: No device for ifindex 0
[  726.910214][T23079] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  727.194793][T23087] __nla_validate_parse: 9 callbacks suppressed
[  727.194818][T23087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4646'.
[  727.229609][T23085] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode
[  727.259691][T23085] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode
[  727.284439][T23083] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) !
[  727.532556][T23098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  727.921633][T23108] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4651'.
[  728.054471][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4654'.
[  728.144910][T23123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.816570][T23144] sctp: [Deprecated]: syz.1.4659 (pid 23144) Use of int in max_burst socket option.
[  728.816570][T23144] Use struct sctp_assoc_value instead
[  728.994357][T23147] validate_nla: 2 callbacks suppressed
[  728.994378][T23147] netlink: 'syz.4.4660': attribute type 9 has an invalid length.
[  729.198799][T23154] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4662'.
[  729.228545][T23166] syzkaller1: entered promiscuous mode
[  729.266569][T23166] syzkaller1: entered allmulticast mode
[  729.302939][T23160] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  729.715414][T23176] netlink: 'syz.2.4666': attribute type 1 has an invalid length.
[  729.726512][T23177] syzkaller1: entered promiscuous mode
[  729.763091][T23177] syzkaller1: entered allmulticast mode
[  729.846863][T23176] 8021q: adding VLAN 0 to HW filter on device bond8
[  729.947829][T23192] 8021q: adding VLAN 0 to HW filter on device bond8
[  729.956652][T23192] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  729.976767][T23192] bond8: (slave vcan1): Error -95 calling set_mac_address
[  730.105241][T23197] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4670'.
[  730.380866][T23207] netlink: 'syz.4.4671': attribute type 10 has an invalid length.
[  730.390109][T23204] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4672'.
[  730.434770][T23207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.532299][T23207] batadv0: entered allmulticast mode
[  730.548910][T23207] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  730.934154][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4677'.
[  730.976258][T23234] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4680'.
[  731.209932][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4681'.
[  731.396358][T23255] netlink: 39 bytes leftover after parsing attributes in process `syz.0.4686'.
[  731.446038][T23257] netlink: 'syz.4.4687': attribute type 39 has an invalid length.
[  731.454550][T23258] netlink: 'syz.4.4687': attribute type 39 has an invalid length.
[  731.542929][T23268] netlink: 'syz.3.4689': attribute type 6 has an invalid length.
[  732.185024][T23297] pim6reg527: entered allmulticast mode
[  732.625701][T23319] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  733.075912][T23349] __nla_validate_parse: 3 callbacks suppressed
[  733.075930][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4716'.
[  733.112005][T23350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4715'.
[  733.254565][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.296653][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.312702][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.325297][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.337850][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.348344][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.367973][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.396571][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.419027][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  733.450621][T23357] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  734.023036][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4722'.
[  736.749478][T23394] ip6t_srh: unknown srh match flags  4000
[  737.268103][T23407] netlink: 'syz.3.4734': attribute type 10 has an invalid length.
[  737.301080][T23414] netlink: 'syz.4.4736': attribute type 1 has an invalid length.
[  737.356668][T23407] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  737.379594][T23413] netlink: 'syz.3.4734': attribute type 10 has an invalid length.
[  737.404939][T23413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4734'.
[  737.498572][T23413] batadv0: entered promiscuous mode
[  737.536346][T23413] batadv0: entered allmulticast mode
[  737.742695][T23431] netlink: 'syz.4.4740': attribute type 8 has an invalid length.
[  737.766726][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'.
[  737.832341][T23428] netlink: 'syz.4.4740': attribute type 1 has an invalid length.
[  737.893839][T23428] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4740'.
[  737.988330][T23438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4744'.
[  738.282113][T23445] nbd1: detected capacity change from 0 to 127
[  738.308054][T23451] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4747'.
[  738.335569][T22739] block nbd1: Send control failed (result -22)
[  738.344836][T22739] block nbd1: Request send failed, requeueing
[  738.370192][T23446] nbd2: detected capacity change from 0 to 127
[  738.403731][ T5839] block nbd1: Receive control failed (result -32)
[  738.407761][T17996] block nbd2: Receive control failed (result -32)
[  738.419030][T22795] block nbd2: Send control failed (result -32)
[  738.424629][T23451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4747'.
[  738.447781][T22795] block nbd2: Request send failed, requeueing
[  738.471257][T23451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4747'.
[  738.494534][T22795] block nbd2: Dead connection, failed to find a fallback
[  738.507016][T23451] netlink: 'syz.0.4747': attribute type 6 has an invalid length.
[  738.516876][T23451] netlink: 'syz.0.4747': attribute type 5 has an invalid length.
[  738.525954][   T25] block nbd1: Dead connection, failed to find a fallback
[  738.534258][   T25] block nbd1: shutting down sockets
[  738.540472][   T25] blk_print_req_error: 22 callbacks suppressed
[  738.540513][   T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.558010][   T25] buffer_io_error: 22 callbacks suppressed
[  738.558027][   T25] Buffer I/O error on dev nbd1, logical block 0, async page read
[  738.569077][T22739] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.582308][T22795] block nbd2: shutting down sockets
[  738.582496][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.591215][T22795] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.611648][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  738.629301][T23451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4747'.
[  738.648665][T22739] Buffer I/O error on dev nbd1, logical block 1, async page read
[  738.656537][T22795] Buffer I/O error on dev nbd2, logical block 1, async page read
[  738.656749][T22795] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.656778][T22795] Buffer I/O error on dev nbd2, logical block 2, async page read
[  738.656913][T22795] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.656939][T22795] Buffer I/O error on dev nbd2, logical block 3, async page read
[  738.657086][T22795] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.657111][T22795] Buffer I/O error on dev nbd2, logical block 0, async page read
[  738.657239][T22795] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.657265][T22795] Buffer I/O error on dev nbd2, logical block 1, async page read
[  738.657445][T22795] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.657473][T22795] Buffer I/O error on dev nbd2, logical block 2, async page read
[  738.734583][T22739] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.734619][T22739] Buffer I/O error on dev nbd1, logical block 2, async page read
[  738.793940][T22739] ldm_validate_partition_table(): Disk read failed.
[  738.843848][T22739] Dev nbd1: unable to read RDB block 0
[  738.895154][T22739]  nbd1: unable to read partition table
[  738.938490][T22795] ldm_validate_partition_table(): Disk read failed.
[  739.005372][T22795] Dev nbd2: unable to read RDB block 0
[  739.047649][T22739] ldm_validate_partition_table(): Disk read failed.
[  739.066224][T22795]  nbd2: unable to read partition table
[  739.095719][T22739] Dev nbd1: unable to read RDB block 0
[  739.122831][T23464] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4750'.
[  739.135169][T22739]  nbd1: unable to read partition table
[  739.207842][T22795] ldm_validate_partition_table(): Disk read failed.
[  739.283866][T22795] Dev nbd2: unable to read RDB block 0
[  739.336502][T22795]  nbd2: unable to read partition table
[  739.358249][T23466] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  739.471144][T22739] ldm_validate_partition_table(): Disk read failed.
[  739.516730][T22739] Dev nbd2: unable to read RDB block 0
[  739.545979][T22739]  nbd2: unable to read partition table
[  739.663057][T22739] ldm_validate_partition_table(): Disk read failed.
[  739.681562][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4753'.
[  739.726237][T22739] Dev nbd2: unable to read RDB block 0
[  739.758033][T22739]  nbd2: unable to read partition table
[  739.952632][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4754'.
[  740.417093][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'.
[  740.798551][T23510] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4762'.
[  740.910034][T23518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4764'.
[  741.223864][T23527] net_ratelimit: 21739 callbacks suppressed
[  741.223887][T23527] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  741.242057][T23527] netlink: 'syz.0.4767': attribute type 16 has an invalid length.
[  741.251790][T23527] netlink: 'syz.0.4767': attribute type 17 has an invalid length.
[  741.275898][T23527] lo: left promiscuous mode
[  741.291941][T23527] tunl0: left promiscuous mode
[  741.308281][T23527] gre0: left promiscuous mode
[  741.456277][T23527] erspan0: left promiscuous mode
[  741.482358][T23527] ip_vti0: left promiscuous mode
[  741.524141][T23527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  741.547141][T23532] veth0: entered promiscuous mode
[  741.656316][T23533] veth0: left promiscuous mode
[  741.925539][T23549] xt_hashlimit: size too large, truncated to 1048576
[  741.960739][T23549] netlink: 'syz.2.4774': attribute type 11 has an invalid length.
[  741.999172][T23555] netlink: 'syz.1.4773': attribute type 4 has an invalid length.
[  743.637373][T23616] netlink: 'syz.3.4787': attribute type 11 has an invalid length.
[  743.665446][T23616] __nla_validate_parse: 6 callbacks suppressed
[  743.665467][T23616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4787'.
[  743.705187][T23619] tipc: Failed to remove unknown binding: 66,0,0/4089180346:113369739/113369740
[  743.745594][T23619] tipc: Failed to remove unknown binding: 66,0,0/4089180346:113369739/113369740
[  743.775615][T23616] netlink: 212256 bytes leftover after parsing attributes in process `syz.3.4787'.
[  743.843604][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4789'.
[  744.191264][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.232084][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.285034][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.317150][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.361855][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.396616][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.424273][T23639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  744.720256][T23655] syzkaller0: entered promiscuous mode
[  744.733317][T23655] syzkaller0: entered allmulticast mode
[  744.742113][T23654] netlink: 'syz.0.4799': attribute type 17 has an invalid length.
[  744.833723][T23654] erspan0: entered promiscuous mode
[  744.867363][T23654] erspan0: left promiscuous mode
[  744.934911][T23663] bond9: entered promiscuous mode
[  745.007762][T23663] syzkaller1: entered promiscuous mode
[  745.055062][T23663] syzkaller1: entered allmulticast mode
[  745.174157][T23673] team0: Cannot enslave team device to itself
[  745.377163][T23681] IPv6: sit2: Disabled Multicast RS
[  746.227331][T23713] sctp: [Deprecated]: syz.0.4816 (pid 23713) Use of int in max_burst socket option.
[  746.227331][T23713] Use struct sctp_assoc_value instead
[  746.278174][T23713] vlan3: entered promiscuous mode
[  746.286505][T23713] bridge0: entered promiscuous mode
[  746.657165][T23726] netlink: 'syz.4.4820': attribute type 1 has an invalid length.
[  747.084050][T23749] 
[  747.086453][T23749] ======================================================
[  747.093505][T23749] WARNING: possible circular locking dependency detected
[  747.100745][T23749] syzkaller #0 Not tainted
[  747.105198][T23749] ------------------------------------------------------
[  747.112253][T23749] syz.4.4826/23749 is trying to acquire lock:
[  747.118458][T23749] ffffffff8f0a3568 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0
[  747.128192][T23749] 
[  747.128192][T23749] but task is already holding lock:
[  747.135705][T23749] ffff888096501d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  747.145116][T23749] 
[  747.145116][T23749] which lock already depends on the new lock.
[  747.145116][T23749] 
[  747.155550][T23749] 
[  747.155550][T23749] the existing dependency chain (in reverse order) is:
[  747.164681][T23749] 
[  747.164681][T23749] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  747.172453][T23749]        lock_sock_nested+0x41/0x100
[  747.177804][T23749]        tcp_sendmsg+0x21/0x50
[  747.182591][T23749]        sock_sendmsg+0x267/0x450
[  747.187659][T23749]        __sock_xmit+0x251/0x510
[  747.192671][T23749]        nbd_send_cmd+0x85b/0x1c80
[  747.197900][T23749]        nbd_queue_rq+0xf2a/0x1100
[  747.203126][T23749]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  747.209317][T23749]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  747.216294][T23749]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  747.223021][T23749]        blk_mq_run_hw_queue+0x348/0x4f0
[  747.228709][T23749]        blk_mq_dispatch_list+0xd16/0xe10
[  747.234457][T23749]        blk_mq_flush_plug_list+0x48d/0x570
[  747.240484][T23749]        __blk_flush_plug+0x3ed/0x4d0
[  747.245986][T23749]        __submit_bio+0x28d/0x580
[  747.251047][T23749]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  747.257226][T23749]        block_read_full_folio+0x599/0x830
[  747.263055][T23749]        filemap_read_folio+0x137/0x3b0
[  747.268796][T23749]        do_read_cache_folio+0x358/0x590
[  747.274448][T23749]        read_part_sector+0xb6/0x2b0
[  747.279754][T23749]        adfspart_check_ICS+0xb1/0x960
[  747.285318][T23749]        bdev_disk_changed+0x817/0x1770
[  747.290895][T23749]        blkdev_get_whole+0x380/0x510
[  747.296298][T23749]        bdev_open+0x31e/0xd30
[  747.301085][T23749]        blkdev_open+0x470/0x610
[  747.306048][T23749]        do_dentry_open+0x785/0x14e0
[  747.311356][T23749]        vfs_open+0x3b/0x340
[  747.316050][T23749]        path_openat+0x2e08/0x3860
[  747.321194][T23749]        do_file_open+0x23e/0x4a0
[  747.326508][T23749]        do_sys_openat2+0x113/0x200
[  747.331737][T23749]        __x64_sys_openat+0x138/0x170
[  747.337134][T23749]        do_syscall_64+0x15f/0xf80
[  747.342268][T23749]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.348896][T23749] 
[  747.348896][T23749] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  747.356568][T23749]        __mutex_lock+0x1a3/0x1550
[  747.361845][T23749]        nbd_queue_rq+0x37b/0x1100
[  747.368123][T23749]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  747.374218][T23749]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  747.381092][T23749]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  747.387620][T23749]        blk_mq_run_hw_queue+0x348/0x4f0
[  747.393556][T23749]        blk_mq_dispatch_list+0xd16/0xe10
[  747.399388][T23749]        blk_mq_flush_plug_list+0x48d/0x570
[  747.405391][T23749]        __blk_flush_plug+0x3ed/0x4d0
[  747.410789][T23749]        __submit_bio+0x28d/0x580
[  747.415836][T23749]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  747.422009][T23749]        block_read_full_folio+0x599/0x830
[  747.427842][T23749]        filemap_read_folio+0x137/0x3b0
[  747.433405][T23749]        do_read_cache_folio+0x358/0x590
[  747.439062][T23749]        read_part_sector+0xb6/0x2b0
[  747.444457][T23749]        adfspart_check_ICS+0xb1/0x960
[  747.449994][T23749]        bdev_disk_changed+0x817/0x1770
[  747.455578][T23749]        blkdev_get_whole+0x380/0x510
[  747.461072][T23749]        bdev_open+0x31e/0xd30
[  747.465853][T23749]        blkdev_open+0x470/0x610
[  747.470816][T23749]        do_dentry_open+0x785/0x14e0
[  747.476297][T23749]        vfs_open+0x3b/0x340
[  747.480920][T23749]        path_openat+0x2e08/0x3860
[  747.486080][T23749]        do_file_open+0x23e/0x4a0
[  747.491313][T23749]        do_sys_openat2+0x113/0x200
[  747.496547][T23749]        __x64_sys_openat+0x138/0x170
[  747.501952][T23749]        do_syscall_64+0x15f/0xf80
[  747.507093][T23749]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.513765][T23749] 
[  747.513765][T23749] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  747.521002][T23749]        __mutex_lock+0x1a3/0x1550
[  747.526577][T23749]        nbd_queue_rq+0xc6/0x1100
[  747.531737][T23749]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  747.537924][T23749]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  747.544883][T23749]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  747.551548][T23749]        blk_mq_run_hw_queue+0x348/0x4f0
[  747.557303][T23749]        blk_mq_dispatch_list+0xd16/0xe10
[  747.563050][T23749]        blk_mq_flush_plug_list+0x48d/0x570
[  747.568965][T23749]        __blk_flush_plug+0x3ed/0x4d0
[  747.574361][T23749]        __submit_bio+0x28d/0x580
[  747.579668][T23749]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  747.585924][T23749]        block_read_full_folio+0x599/0x830
[  747.591785][T23749]        filemap_read_folio+0x137/0x3b0
[  747.597585][T23749]        do_read_cache_folio+0x358/0x590
[  747.603334][T23749]        read_part_sector+0xb6/0x2b0
[  747.608857][T23749]        adfspart_check_ICS+0xb1/0x960
[  747.614531][T23749]        bdev_disk_changed+0x817/0x1770
[  747.620102][T23749]        blkdev_get_whole+0x380/0x510
[  747.625679][T23749]        bdev_open+0x31e/0xd30
[  747.630479][T23749]        blkdev_open+0x470/0x610
[  747.635493][T23749]        do_dentry_open+0x785/0x14e0
[  747.640825][T23749]        vfs_open+0x3b/0x340
[  747.645645][T23749]        path_openat+0x2e08/0x3860
[  747.650813][T23749]        do_file_open+0x23e/0x4a0
[  747.656070][T23749]        do_sys_openat2+0x113/0x200
[  747.661300][T23749]        __x64_sys_openat+0x138/0x170
[  747.666785][T23749]        do_syscall_64+0x15f/0xf80
[  747.671915][T23749]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.678434][T23749] 
[  747.678434][T23749] -> #5 (set->srcu){.+.+}-{0:0}:
[  747.685677][T23749]        __synchronize_srcu+0xca/0x300
[  747.691171][T23749]        elevator_switch+0x1e8/0x7a0
[  747.696572][T23749]        elevator_change+0x2cc/0x450
[  747.701924][T23749]        elevator_set_default+0x36c/0x430
[  747.707669][T23749]        blk_register_queue+0x3e9/0x4e0
[  747.713257][T23749]        __add_disk+0x677/0xd50
[  747.718323][T23749]        add_disk_fwnode+0xfb/0x480
[  747.723630][T23749]        nbd_dev_add+0x72c/0xb50
[  747.728587][T23749]        nbd_init+0x168/0x1f0
[  747.733301][T23749]        do_one_initcall+0x250/0x870
[  747.738620][T23749]        do_initcall_level+0x104/0x190
[  747.744117][T23749]        do_initcalls+0x59/0xa0
[  747.748995][T23749]        kernel_init_freeable+0x2a6/0x3e0
[  747.754749][T23749]        kernel_init+0x1d/0x1d0
[  747.759731][T23749]        ret_from_fork+0x514/0xb70
[  747.764872][T23749]        ret_from_fork_asm+0x1a/0x30
[  747.770192][T23749] 
[  747.770192][T23749] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  747.778138][T23749]        __mutex_lock+0x1a3/0x1550
[  747.783301][T23749]        elevator_change+0x1b3/0x450
[  747.788635][T23749]        elevator_set_none+0xb5/0x140
[  747.794140][T23749]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  747.800514][T23749]        nbd_start_device+0x17f/0xb10
[  747.805926][T23749]        nbd_genl_connect+0x165b/0x1cf0
[  747.811675][T23749]        genl_family_rcv_msg_doit+0x22a/0x330
[  747.817876][T23749]        genl_rcv_msg+0x61c/0x7a0
[  747.823012][T23749]        netlink_rcv_skb+0x232/0x4b0
[  747.828420][T23749]        genl_rcv+0x28/0x40
[  747.832946][T23749]        netlink_unicast+0x75c/0x8e0
[  747.838347][T23749]        netlink_sendmsg+0x813/0xb40
[  747.843830][T23749]        ____sys_sendmsg+0x972/0x9f0
[  747.849161][T23749]        ___sys_sendmsg+0x2a5/0x360
[  747.854738][T23749]        __x64_sys_sendmsg+0x1bd/0x2a0
[  747.860317][T23749]        do_syscall_64+0x15f/0xf80
[  747.865548][T23749]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.872092][T23749] 
[  747.872092][T23749] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  747.880908][T23749]        blk_alloc_queue+0x546/0x680
[  747.886309][T23749]        __blk_mq_alloc_disk+0x197/0x390
[  747.892049][T23749]        nbd_dev_add+0x499/0xb50
[  747.897009][T23749]        nbd_init+0x168/0x1f0
[  747.902147][T23749]        do_one_initcall+0x250/0x870
[  747.907457][T23749]        do_initcall_level+0x104/0x190
[  747.912955][T23749]        do_initcalls+0x59/0xa0
[  747.918265][T23749]        kernel_init_freeable+0x2a6/0x3e0
[  747.924022][T23749]        kernel_init+0x1d/0x1d0
[  747.928899][T23749]        ret_from_fork+0x514/0xb70
[  747.934124][T23749]        ret_from_fork_asm+0x1a/0x30
[  747.939480][T23749] 
[  747.939480][T23749] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  747.947132][T23749]        fs_reclaim_acquire+0x71/0x100
[  747.952979][T23749]        __kmalloc_cache_noprof+0x40/0x660
[  747.958859][T23749]        cryptomgr_notify+0x85/0x930
[  747.964175][T23749]        notifier_call_chain+0x1ad/0x3d0
[  747.969847][T23749]        blocking_notifier_call_chain+0x6a/0x90
[  747.976113][T23749]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  747.982045][T23749]        crypto_alloc_tfm_node+0x13e/0x3f0
[  747.987921][T23749]        crypto_alloc_sync_skcipher+0x39/0xd0
[  747.994028][T23749]        rxkad_init+0x20/0xe0
[  747.998737][T23749]        rxrpc_init_security+0x72/0x120
[  748.004551][T23749]        af_rxrpc_init+0x13d/0x2e0
[  748.009974][T23749]        do_one_initcall+0x250/0x870
[  748.015370][T23749]        do_initcall_level+0x104/0x190
[  748.021124][T23749]        do_initcalls+0x59/0xa0
[  748.026102][T23749]        kernel_init_freeable+0x2a6/0x3e0
[  748.031848][T23749]        kernel_init+0x1d/0x1d0
[  748.036828][T23749]        ret_from_fork+0x514/0xb70
[  748.041969][T23749]        ret_from_fork_asm+0x1a/0x30
[  748.047294][T23749] 
[  748.047294][T23749] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[  748.055534][T23749]        down_read+0x47/0x2e0
[  748.060414][T23749]        blocking_notifier_call_chain+0x54/0x90
[  748.066712][T23749]        __crypto_register_alg+0x32b/0x3c0
[  748.072570][T23749]        crypto_register_alg+0x447/0x810
[  748.078238][T23749]        do_one_initcall+0x250/0x870
[  748.083733][T23749]        do_initcall_level+0x104/0x190
[  748.089451][T23749]        do_initcalls+0x59/0xa0
[  748.094326][T23749]        kernel_init_freeable+0x2a6/0x3e0
[  748.100080][T23749]        kernel_init+0x1d/0x1d0
[  748.104960][T23749]        ret_from_fork+0x514/0xb70
[  748.110102][T23749]        ret_from_fork_asm+0x1a/0x30
[  748.115418][T23749] 
[  748.115418][T23749] -> #0 (crypto_alg_sem){++++}-{4:4}:
[  748.123303][T23749]        __lock_acquire+0x15a5/0x2cf0
[  748.128715][T23749]        lock_acquire+0x106/0x350
[  748.133784][T23749]        down_write+0x96/0x200
[  748.138575][T23749]        crypto_alg_mod_lookup+0x211/0x5f0
[  748.144525][T23749]        crypto_alloc_tfm_node+0x13e/0x3f0
[  748.150375][T23749]        tls_set_sw_offload+0xa33/0x1780
[  748.156219][T23749]        tls_setsockopt+0xef2/0x15c0
[  748.161646][T23749]        do_sock_setsockopt+0x17c/0x1b0
[  748.167220][T23749]        __x64_sys_setsockopt+0x13d/0x1b0
[  748.173065][T23749]        do_syscall_64+0x15f/0xf80
[  748.178293][T23749]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.184748][T23749] 
[  748.184748][T23749] other info that might help us debug this:
[  748.184748][T23749] 
[  748.195031][T23749] Chain exists of:
[  748.195031][T23749]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[  748.195031][T23749] 
[  748.208396][T23749]  Possible unsafe locking scenario:
[  748.208396][T23749] 
[  748.215883][T23749]        CPU0                    CPU1
[  748.221281][T23749]        ----                    ----
[  748.226668][T23749]   lock(sk_lock-AF_INET6);
[  748.231395][T23749]                                lock(&nsock->tx_lock);
[  748.238497][T23749]                                lock(sk_lock-AF_INET6);
[  748.245568][T23749]   lock(crypto_alg_sem);
[  748.249934][T23749] 
[  748.249934][T23749]  *** DEADLOCK ***
[  748.249934][T23749] 
[  748.258280][T23749] 1 lock held by syz.4.4826/23749:
[  748.263406][T23749]  #0: ffff888096501d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0
[  748.273201][T23749] 
[  748.273201][T23749] stack backtrace:
[  748.279267][T23749] CPU: 1 UID: 0 PID: 23749 Comm: syz.4.4826 Not tainted syzkaller #0 PREEMPT(full) 
[  748.279289][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  748.279308][T23749] Call Trace:
[  748.279317][T23749]  <TASK>
[  748.279325][T23749]  dump_stack_lvl+0xe8/0x150
[  748.279353][T23749]  print_circular_bug+0x2e1/0x300
[  748.279383][T23749]  check_noncircular+0x12e/0x150
[  748.279414][T23749]  __lock_acquire+0x15a5/0x2cf0
[  748.279448][T23749]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  748.279469][T23749]  lock_acquire+0x106/0x350
[  748.279490][T23749]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  748.279516][T23749]  down_write+0x96/0x200
[  748.279540][T23749]  ? crypto_alg_mod_lookup+0x211/0x5f0
[  748.279561][T23749]  ? __pfx_down_write+0x10/0x10
[  748.279587][T23749]  ? crypto_larval_alloc+0x1bf/0x290
[  748.279607][T23749]  crypto_alg_mod_lookup+0x211/0x5f0
[  748.279630][T23749]  crypto_alloc_tfm_node+0x13e/0x3f0
[  748.279658][T23749]  ? timer_init_key+0x161/0x2c0
[  748.279679][T23749]  tls_set_sw_offload+0xa33/0x1780
[  748.279704][T23749]  tls_setsockopt+0xef2/0x15c0
[  748.279732][T23749]  ? __pfx_tls_setsockopt+0x10/0x10
[  748.279760][T23749]  ? __fget_files+0x2a/0x420
[  748.279781][T23749]  ? aa_sock_opt_perm+0xff/0x1a0
[  748.279805][T23749]  ? sock_common_setsockopt+0x36/0xc0
[  748.279832][T23749]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  748.279855][T23749]  do_sock_setsockopt+0x17c/0x1b0
[  748.279888][T23749]  __x64_sys_setsockopt+0x13d/0x1b0
[  748.279914][T23749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.279932][T23749]  do_syscall_64+0x15f/0xf80
[  748.279955][T23749]  ? clear_bhb_loop+0x40/0x90
[  748.279974][T23749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.279995][T23749] RIP: 0033:0x7f3162d9c819
[  748.280017][T23749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  748.280032][T23749] RSP: 002b:00007f3163c80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  748.280051][T23749] RAX: ffffffffffffffda RBX: 00007f3163015fa0 RCX: 00007f3162d9c819
[  748.280064][T23749] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000006
[  748.280075][T23749] RBP: 00007f3162e32c91 R08: 0000000000000038 R09: 0000000000000000
[  748.280086][T23749] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  748.280097][T23749] R13: 00007f3163016038 R14: 00007f3163015fa0 R15: 00007ffc988e0868
[  748.280117][T23749]  </TASK>
[  748.478941][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  748.587299][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  748.611334][T23757] No such timeout policy "syz1"
[  754.049181][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms
[  754.057246][    C0] lec:lec_tx_timeout: lec0
[  754.061892][    C0] lec:lec_start_xmit: lec0:No lecd attached