last executing test programs:

3.18203285s ago: executing program 3 (id=3577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002000010027bd7000fbdbdf340a000040010000000600000008000a000700000008000d"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @dev={0xac, 0x14, 0x14, 0x2c}}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)

2.940701146s ago: executing program 3 (id=3580):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
recvfrom$phonet(r1, &(0x7f0000000000)=""/106, 0x6a, 0x2, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{&(0x7f0000000540)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="57c778df", 0x4}, {&(0x7f0000000180)="ef9b510000d71636360fbe1c6d229c19a9", 0x11}, {0x0, 0x13}], 0x3}}], 0x2, 0x48014)

2.754746617s ago: executing program 3 (id=3584):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x207, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x101, 0x3, 0x6, 0x874b}, 0x10) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x101, 0x3, 0x6, 0x874b}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)

2.561793673s ago: executing program 1 (id=3589):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fd00128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed886d00000026b353fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1ac1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xb8, 0x117, 0x2, 0x9f, "f8304c03c7dcf935da0cac866585a49b0419585bb59fdcc9502f699c24bc700d80e34a0dd175032c97ac6affa5554f454dc64c06debc6e4cdb42c19f3184a5f28e1e010e3b559bb4b0a596e62e646af5556cbb1a79b54c5a86597d391d63927208f4cc7473a03619f6aadd7b8a569e8aef08b151cc969891f86658b1b4e533a5c9d8b9a33160741d9d8b1bd6f6fe694974f86e57fd51f6d4f99dc9a9940c94"}], 0xd0, 0x44015}, {0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x20010, r0, 0xe15a7000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x4, 0x700000000000000}, 0x0)
getsockname$packet(r3, &(0x7f0000000d80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a08020000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cac0009800800014000000006a00002800c0001800800014000000003040001800400018024000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e2080001400000000008000140000000070800014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000005140001800800014000000005080001400000000120010980000102802c000180080001400000000508000140000000000800014000000002080001400000000108000140000000085400018008000140000000800800014000000000080001400000004008000140000000000800014000000004080001400000000808000140000002000800014000000009080001400800000108000140ffffffff24000180080001402ab1b75d08000140000008df080001400000080008000140000000004400018008000140000000060800014000000802080001400000000008000140000000030800014000000003080001400000000308000140000000050800014000970632e39df8b0de00000714000180080001400000800008000140000000041c0002800c00018008000140000003430c0001800800014000000002140000001000010000000000"], 0x230}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@mpls_getroute={0x178, 0x1a, 0x4, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x80, 0x10, 0x3, 0x834acd5cafa3e46, 0x0, 0xff, 0xf}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_NEWDST={0x84, 0x13, [{0x5}, {0x5, 0x0, 0x1}, {0x3}, {0xfff7f}, {0x2, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0x6}, {0xcc5}, {0x3}, {0x8, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x4}, {0x3}, {0xff02a, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0xc}, {0x57}, {0x4, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0xfe}, {0x3, 0x0, 0x1}, {0x8}, {}, {0x8b2c}, {0xce}, {0x5, 0x0, 0x1}, {0x8000}, {0xe, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7}]}, @RTA_VIA={0x14, 0x12, {0x3, "566e14c0a38558094196839a7568"}}, @RTA_OIF={0x8, 0x4, r10}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1, 0x0, r10}}, @RTA_NEWDST={0x84, 0x13, [{0x5}, {0x18e}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x842ac}, {0x200, 0x0, 0x1}, {0x7}, {0x7fff, 0x0, 0x1}, {0x5}, {0xfffff}, {0x77e8}, {0x6, 0x0, 0x1}, {0x800}, {0x4, 0x0, 0x1}, {0x5e2e, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x217b}, {0x7, 0x0, 0x1}, {0x100}, {0x4}, {0x2, 0x0, 0x1}, {0x1}, {}, {0xffff, 0x0, 0x1}, {0x6}, {0x3}, {0x1}, {0x1}, {0x912fb}, {0xff, 0x0, 0x1}, {0x81, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0xa, "5bd22a2dbed7463d7c9a3cfb1b5f"}}, @RTA_OIF={0x8, 0x4, r10}]}, 0x178}, 0x1, 0x0, 0x0, 0x8081}, 0x884)
r12 = socket$inet6(0xa, 0x1, 0x14786a46)
getsockopt$IP_SET_OP_VERSION(r12, 0x1, 0x53, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.550626267s ago: executing program 3 (id=3590):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delroute={0x34, 0x19, 0x901, 0xfffffffd, 0x25dfdbfb, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x2000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8}]}, 0x34}}, 0x20040810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)={0x34, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0xfffffffffffffdfa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xa0)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000101030c0000000000000000000002800c000280050001"], 0x3c}}, 0x54)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c00028008000240000000f2080001400000000108000340000000030900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = epoll_create(0xea3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000380)={0xb0000001})
connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, 0x0}, 0x20)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000280))
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x50c, 0x70bd27, 0x25dfdbf8, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d5}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000002c0)=0xc5, 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000000000061184a000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0))

2.438959067s ago: executing program 0 (id=3591):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$cgroup_devices(r2, 0x0, 0x6)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080))
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000002900000004000000000000000000000004018f000000000810000000000000002900000004"], 0x38}}], 0x1, 0x40000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x400, 0x108, 0x108, 0x0, 0x318, 0x108, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x101}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @empty, @local}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xcd, 0xf, {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e23, @empty}}, 0x81, 0x10}, 0x90)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

2.088384202s ago: executing program 2 (id=3594):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @loopback, @private}, &(0x7f0000000080)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x4, 0x6, 0x3, 0x400, r0, 0x40, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94)

2.023195642s ago: executing program 3 (id=3595):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x5}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000001940)=""/4091, 0xffb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000240)=""/109, 0x6d}], 0x6}, 0x40012122)
bind$inet(r1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan4\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffff800}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x800)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1, 0x7160b73}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20)

1.893885902s ago: executing program 2 (id=3597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-arm64-neon\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@empty}, &(0x7f0000000080)=0x14)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@migrate={0xec, 0x21, 0x1, 0x1, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x32, 0x0, 0x0, 0xffffffff, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0)
r7 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="d819", 0x2}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000004}], 0x1, 0x40080)
readv(r7, &(0x7f0000000300)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1)

1.518754639s ago: executing program 2 (id=3599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x0, 0x4, 0x53, 0xfffff02b}, {0xc, 0x1, 0x8, 0x1}]}, 0x10) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001900)={{}, "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"})
r2 = epoll_create1(0x0)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 32)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @remote, 0x2}, @isdn={0x22, 0x3, 0x0, 0x7f, 0x6}, @ax25={0x3, @default, 0x3}, 0x4, 0x0, 0x0, 0x0, 0xebcc, &(0x7f0000000080)='veth1_to_bond\x00', 0x0, 0x0, 0x8}) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000004})

1.508406857s ago: executing program 1 (id=3600):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0), 0xffffffffffffff10)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d72"], 0xa)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@x25, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x18}, 0x8008081)
ioctl$sock_ifreq(r1, 0x8920, &(0x7f0000000200)={'batadv_slave_0\x00', @ifru_names='veth0_vlan\x00'})
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000540)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xb)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0)

1.41972321s ago: executing program 3 (id=3601):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000004c0)="c8", 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(&(0x7f00000000c0)=[{r2, 0x2187}], 0x1, 0x403)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r5 = socket(0x1d, 0x2, 0x6)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x80, @mcast1, 0x4, 0x1}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)={0x44e8, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x44bc, 0x3, 0x0, 0x1, [{0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x1cc, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x1bc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xa6}, @NFTA_BITWISE_MASK={0x188, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "ed250a7d66b110a2edc989da6b5e5156eee050068d2098b28497306ea7d25071d81d1d88d03aca085f0bffaf799f0f15e301db8686ee42a724183fe260a6b27abc169aaad375abcc1b985d32bfdb057ec7651185a2a51d57ec951c96aedcddebd72e32adf444b961d697147cfb7d477960b31e57a193f3ad12c8e23338e8dc74759dcd5f726e024c8c97ef7c60e01eb8b57969225e252257c88e57da4c3986735d3ebdbb8cc363819c02dfbd7f942ca921928c01be2a8b93cf8fbbe6ae4b4c17dd8994556081c1543b22cbd58f79a1a049cc0a626731"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x6, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "532f867286ecbb8c593d744e6e458e8b93bbad4f52405ea7ee32cdbe25e4f6c278f288786b"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x14d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x1144, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x2b, 0x1, "b0663e6f4a420f42f27a30327ca43120898f877bdf70c3ce5382073e089cc5726308301539434b"}, @NFTA_DATA_VALUE={0x60, 0x1, "d01bca966c7b5d54552f2e1ccceaa2efb39e96e513141f844e749c69825fe1a4b204d11af3e9ba21a9afb1b5698a0edb3ca716b5f3219e80cba46ca0dea4525ca9165340db2efee3babc12b2f64952fe5fd8953cef46aff87a72fafe"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7, 0x1, "887822"}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @flow_offload={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz2\x00'}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x258, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "c15655a956033d8ee258e138e0cd60d052b9d592897dfafc0dd0e0fc83e59c7753969630c558d5eb6fdc9d061abf9ccde834a3f408d1ccae4817ba30d573de1ff0e55db808057355c34f3c218e3577c5845a15cbc2af92dd21dfcefec54c2a5c4aab1caa863024402d145218ba4425ff6769e1f13ed36cd4541de33367adbed97f0267e0336818dc55a5c16771f9a181362ae2a94ab56e87fd15fccd593b750ccf0e850a1d123e200fe201fa2263d1903d3ae1beec230570f1bb84dd2ea047295dfcf9b1c9a5da0d4e4945883eedb552fa3173c7a62ae978b6cbd90fd474db8019d11167d93537a064c41221509cb3ff18c71332de9c2e"}, @NFTA_DATA_VALUE={0x97, 0x1, "aa63a0a6ec85f6ae1767c08281bd994d8392e76fcc2ce3e2e1f7ecb87a62fa1672985b0d2a02a6f1bc381dbbd84dcd926bc6fa5beedb31694b5ccc30014e9badb7ef21a04e0f595010af2d249bd4dbcdfa7a1da374c96aa3fee955426a0b57a365ac433a04a4d483e741fe3ce815588f3a7eb16b022d840635c6484ec4c37c8d50b8e4b6cc21db13855b6b4b2d668f830a0501"}, @NFTA_DATA_VALUE={0x7f, 0x1, "64e9f22f65c4f0ea1c35ba867b0ebfa9b5bdf3892aa651b083c38d66f68e7ef701e327e58d042ea79a08f48a4794a130f0a773b55f644985180b88a26bef669dca6a95736fc8535dac55d7d3605e9fc1ada1212ef5e6681459471670518dc0e631fa1e1072da895d7a0c3d24ae651e5ba5302276731f58537d52bd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x29c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x2ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "6ea0ff0641dc1f0b943d5aedb8471ee29b8823cb97eca653a1bf9f7dda4fb6cbd7bbf5d6935bcbc85a2b6514d3a17055032d76f8208fba1c6639fe1f5bea817b05d8d94340114983078a358262da0aaa6ba0860a134384481c37ae938af57d0e24596b59704d65ce48e1a6726108a0dcff0164cd4446101eb85ebe"}, @NFTA_DATA_VALUE={0x8d, 0x1, "eb8a9c9f271cea770403260dc023339d3e39a95137728777942b4cbeef28b310395d0d583f57e12a377e80cd6aaf8e3fe5c66b12924487f459a6abe9a534a3d526ff50c3bfb219172a702d78d19c2e17b185ea86f3bbf68c9801385ecd93b1900bc37950722be66dd21709257cedc7261abc686d4f751ccbcbde2a9969fac83c54c9cc3b33e1c44dff"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "428fb383cb78ca3f4c4c0b9c27d8aa057cbaa5317586606c07cb941cb8d8baeba702cff5c5da17194f85a0857a924536cc3b0f3ceb0ad3615083230d650542c086896fc8c645b62c89b6a3a16fb50050a4039229ed9d7ddfb069a47e09ba1670ee65a3687f6b28ae51d9d44158a0d6cf5755a1572cc6d7d302de0a6cfa4e171d854c268be90f88fdd3c000d16a793443d7666ab7a92828b58d39b6f5b528b9f5c687d0fc20729218363531adf88fa5a7f93c63f5530a4e1fe0a44b5643dc42747b058f0bf3d2bc0e72bd9932b6b6a251b88dbd5e703f67fc56cf67ead0fc0eef4918"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xdc, 0x6, 0x1, 0x0, "c90c731159a0c8e99b9dd0daa825b16c8de4d9d5b8bf151c91d0bd8f9636131da48670b8f60059feb0efa670c4e2ad561097bb39a524ade2040e85cd374bd4c2639bbb9cd247aaaf3bf14bb0815c18616753bd89de6824f8ec91dca2d3dd576340ec904f0770da4e1fc431d8aa78c4cfe31d8eb8e14469d0de788bb8696e3f0e3f77fbc050d35a7a317006e81d85e695a27db0f2282fb7c611f322cb821cdc3880fd0429c0e58ac3220299761b5c82979c2789c295a287d160edb6d92855ed906b58d2cfa6afc54e7ff0a9763bca1c505a69ea0398afa2cd"}, @NFTA_SET_ELEM_KEY={0x10a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x64, 0x1, "1c16d3fb27f68545ad87b87a6f8623c4959eb24a6dc642a6696a4f21e00a212fba7ca3e635aeabeca6bd2674ba195df5e6e0ae78353b3125346e6001acd04ab9affc98d367044a4be8fd410f511e1f721aa5965439ca35001992ecf070b6d129"}, @NFTA_DATA_VALUE={0x0, 0x1, "28a30e2a71835a8b0c78cb1efc16120a23870b2abca09cabac6574e63713f9e4a232d73ae1dcda2ffa116e9d34867a03624c844acd627d1ab510e0ee7fdfac480222482614a5fdc2f0d27a1b64a41bc45a532822b1e473f19b5f219173ad7497024fcb0fbfe9672f773d5db3535b91b58e088ac9"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "74bbc52a94cf481a7a5a3ef7ecb84deccd7174fa265dd5cf5e8140630b1a5c7b0bd347ce57c3b21a3a02268572ae6df516d439d16a94076f95be8db6a065c6ea7778b5ad15e50cb41485e62f1bc8869ba6ed82027ac6c9aef2a5ecb847fbaa24c2e8f461e48710d7edc95902cff1117978fbe8e8ff361ce6810b071a7b75feedea57f11b6b8c2dba73c1cb3579e8373be91152a589b8df7339f8ee7c48fefd87e4b70c66f32163315e04f536298701767d4c3e293effdaec88be668a5a960d6b753ff59ab3bc8aa10a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPR={0x18c, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x17c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xd7, 0x3, "710b51f805c292ad28d404db67d970067c8c1633cd63737cfffa206dd041620fdb0b0754c512b15dc154e975ea54b594c396fbe784c5257fb87ee7c21c1d1c46b98396565f3da43a1598634f871c2b0eeb2246df9a6a538058b31ddb2a3dfb1764ffbc5bfd540351b1bacfd1e291175d021d44ef58f24dbdbf9a84affd67fe4cee010f277ac33e5cc23d253c57b9e2a6e7702a53e7fc9effb659791d20642f4f7fee5f6642e5d2d18b3190e2979f5db4261d0d5f103f2261237bd2353b5b8ca85aba215667a2f5116d1a51a4b1551660d7a29f"}, @NFTA_TARGET_INFO={0xa, 0x3, "4426c84c5012"}, @NFTA_TARGET_INFO={0x8b, 0x3, "46a9e3327a73b5ec93a8d0c34cb302f8d3ba2e5314e24c12091fd7e227459344e5122d622506f5b407e3bf1434ce4aede6355a8b6153391b131a0d41a44be4ac9736e11cdecfa67b9612f767fdda646256f1928adbfcc091ca468759e764437d5397c30953a9101ee0d9a8787f929597ad9e4357a2fdf24ae646ebd1605f34b22d33c73c1ddeb2"}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}]}}}, @NFTA_SET_ELEM_KEY={0x11b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x6a, 0x1, "1d7b2fc98179bf0d330aa8614d4f5913d6555bbb64e44917ddb7bd4b327971b3bdf048781b6e0c560250dacd3b986bdfbd1a5e73c17929f86092547a0b8679b2a14f6cbf8292f48520fd6ecc06e1c8b2c9fb01f55a9ee65f7bd56d753a7edcd75e6f1a465c8f"}, @NFTA_DATA_VALUE={0x93, 0x1, "f46b7d7bbf28e1fa51aa9a80fc06f5a6b42436e749158699218891e04779aaaeb448be6804fad11b4d53cd67b17fae4c83269cdd871616300245fc72638fe907b44bb3c97898572a5ac7185b7d65cbbbecc277e7932c9725aa33c25c8baef30c81348179f8bdbbc5a80224ac9c9e4ae44c240cda2a05152f3426d779c985f98ff63cbce56be6bf7a22ceed934c96ac"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'L\\'}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "a6d5b93c29ea083cd63c0176e07aaffa0f6f561e13d4d04d8f16bded98147d2fd848723059f925661a1fa06c24487b51a419eb34a545dfbd1e399e1f29f949275a837c6c569b37fd53237c5fe9b042092fb4656c8175b3b28f5ee110386277cfaa91a25a9618852bf32bdc8d738417e657cdf8ec409eb179f7b4206474ecac867eaece34d33fede3a7100309d029351832549a758a822616cae31eaeeb057a20c3ca2e78c4868712df0cfd380e7cfc29f941a20269f8d4cee9ebf53ac9d6aed7a10cd3a4fd470483e5c8e850d71a05c4606dd27835deac0dce178455"}]}]}, {0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "938da2e0a8a7236e1b63e94e2afe3e8a12d7ce61908aa98e44c0d7ba04671fa91297bdee1ea24a32cfcdd361f5bc9118a4f2c1126ad391f1b2cf450c3a0425cf8f742c2db8faa41cfcc5343d22e59146ad07104ec2b53e85c1a7b1de4b8e65f33327f4a59468e5df49dfd93362eaf207500e2dcde265244a6fde77371229f42462dc3e4adfb4c2"}, @NFTA_SET_ELEM_DATA={0x3a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "7e64c3124f9de8e78508e24be51f3da24737687fbe61d3835cfc85bc7beca7fd781ddc02c34440be8428ac90900f09569ffa3552b9bea1f5958d1a730d0e71c0c5041de761874d9c6376c282f67cab76035ca6f4236cccc4a2ee251c713744b0915a07cfbca14dbd5baef9d8df407a21ad9df2ae67c98fa7a3ff922631a522f046bb04d2b84b75dc780751ff008516ca40d66f3e575f470481c0ec2e7b6bcc93ec785e8b0320f2bad23dfd9037248482a480163fec4c0ce672df0d501e4a4d822fe3209eaa5cb04a1612cc7d5f6c2eae3b09f227f340"}, @NFTA_DATA_VALUE={0xdb, 0x1, "5c301820c26a691242823a3e9f1b73cae2703827f47d3188ddc8f1d47b6983b34785a240b212faf0bb7ab8fc3520a17b4009a39277ea890b8ea04102d2baad282ba33d7641666162c8e5bb56ffc95320f47840ca79d8078c45cc74f423f0aa2243439e6837af3397c989693298f02332f939029d9c5277a1ff48de1a9450b660346f73609667d192a0aaea7b93d6c1640a54df55b39b2a3104d4d3a158d0397cfff60a5d3f5b88f728888c59d51bc319ae43852fed7fca80cfe245b77f7b704ad4cf6f01c07ba046ec2e0053d826be3333fe51947c3d4f"}, @NFTA_DATA_VALUE={0x90, 0x1, "4a72db3c44f39c06fa8ac57b275c01af7db3f75f06ad6b15bd85004652801f657afc1aa75daab8c112d853b77eea366fa5100cdbc450c1325a285830e4cc6c0d6cefd4bf9e0251cbe63f44f2b059e2874aaf8fee4caa71cf263e28a8b51ed4f8fa55df9e269ae9407ffbd7ce43dfc7c47a6b8c73ba0831aa685a07f631cb9a9fdfa38683df6a471b8705d46e"}, @NFTA_DATA_VALUE={0x6c, 0x1, "e1356c38c3ca14ed7e777d4b597a1a0bc6bb6c1081015f65c73fe72f6423769b9c807112bb98ffe68ff4742d477718933d51b15257728f9ded76459358ca0560ca8b084caa5874ae42b5c97e22e6f08ed1281f034a330b662c081c7ea82d41fe67c68045725d6770"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x27, 0x1, "521bb666a139f9a9f18e0bce000141a4e49c82f6f4271a903e4cbc2ef926b77afca0be"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "0035e7c578b44cccd5d5f333a6ef17756dc4ff1651c8bd8bdaca9c147a9c89316f6ab613a985f7bb065ec54c10e29c5f7f6b28e8b5af66d8adead6c404a9f82f7a81791c954bcf5eff886c8a6bf36880ea021ed19fc73fbde7"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44e8}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000440))

1.407141261s ago: executing program 4 (id=3602):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000100)="36e6736a645224a3405f10", &(0x7f0000000240), 0x2}, 0x20)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80)
r3 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0xc4a9e000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d020000000000000000000005fa0d"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x1}, 0x28)

1.270982329s ago: executing program 2 (id=3603):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))

1.249518627s ago: executing program 2 (id=3604):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52765e1a97c5da42a110cfc487f25a4407", 0x39}], 0x1, 0x0, 0x0, 0x4008011}, 0x4040004)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0)
sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3)
close(r1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r9, @ANYBLOB="00082772ea93e400fe3ffd0000f464247fbce71c6c1830162393c70560787201065b899d65e65d24807c59846f8fbde3f95f83ec2b8ebe20d8c9336d5b0dcd15cc9b3a3f85f1c2a23ecc1a870a60d25987a391298064a284f8a16a9d758f5cdddfc6d59531a47bc197c3f7b38f8bc4c3d85dd0f946149902f9c0d89aac2847bccd01a8e40c709f51b8d2023ebd50fdb35162658fbf61ae9f5fdf61b0d284f1382121679e373b42638a0de274dcf0f498c5fed8d1a4031395b08ac9f47df7b37e15cfaf64155046203bbe51713029fbe02fe8e4149500"/229, @ANYRES32=r10, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.128858896s ago: executing program 4 (id=3605):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x4001}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x1500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x100, 0x6, 0x1268, 0x54840, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0xa94a, 0x4, 0x80c0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x5}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0xa94a, 0x4, 0x80c0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x5}, 0x50)
r9 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r9) (async)
close(r9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x35d, 0xbe, &(0x7f0000000240)=""/190, 0x41000, 0x20, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x40, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r5, 0x1, r6, r7, r8, r9], 0x0, 0x10, 0x3}, 0x94)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4)

1.047789263s ago: executing program 0 (id=3606):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0xb, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f, 0x0, 0x30, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4b}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r1, 0x0, 0x1, 0x1}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, 0x0}}], 0x1, 0x24000045)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000500), &(0x7f0000001200)=@tcp, 0x1}, 0x20)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d61737100000000140002800800024000000015080003400000000e0900020073797a3200000000140000001100000000000a000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002f0001031dbd700afadbdf250600acb1"], 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @rr={0x7, 0x27, 0xb6, [@remote, @multicast2, @loopback, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x4d, 0x3, 0x0, [{@loopback, 0x7}, {@remote, 0x9}, {@private=0xa010102, 0x2}, {@empty, 0xece}, {@remote, 0xd6a0}]}]}}}], 0x90}, 0x24048894)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4)
bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x1f, &(0x7f00000006c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffc0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

775.579297ms ago: executing program 4 (id=3607):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = accept(r0, 0x0, 0x0)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c4)

726.087144ms ago: executing program 0 (id=3608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)
accept4(r2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611934000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

669.047268ms ago: executing program 4 (id=3609):
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgsoup@\xc8`>\x82E\b-\xc81\xbcO\x93YT\xb4\x87\xfd\xec\xf6\xf8m\x03\x14\x1d\xfb\xb6\x9f\xc5\xb2um\xf5\xd6r\x85\x8eB\xb6\xd4\xe1k\x92\x03x\xf8\xc2\x14\xee\x9c\xbc\xa1i\x87\x93\"\x1bF\'VkH\xf2N@\xff\x12\r\xedr\xaf\x92,!\x9c\x98\xf5\xdc-\xc3\t>\xbb\xfa\xb6\xbe\xc0\xbc\xadv\x8e0\xae\xa3\xd2\xa6\xd3\x12\x97\xe9\xe7\xe8\xa8\xecB}\x1a\xd7\xb5&\xa7\xe2Y\xc5\xee\xf0I\x8e\xc4\xb9\x92s\xec6\x92\x9e\x9c\x8cp6\xbc\x88RIF\xfcW\xaa\xd1I\xff\xdf\xb5\r\x0e\x1e\f]\xb8y\xf2\x92CO;4<\xc2\xdd%s\xb7>\xeb}SG\x17\x85QT#\xfa\xc1\xf1\x85\xdd\x82[\x86\xc6\x95\tT\xe4\xffN\rg\xc0E\xfax\xc9\x06j\x98\xc3}\xe7\x1f\xeaGY\xe0\x98\x9b\xe7E\x93\x0eE\x96\x8c\xc6\xf0\xb2\x82\xfdB*\x85\xa2\xe0V}\xfc\xbb\xf6\x89?\x9c\xaa\t\xf7a\x9c\xebk\xb8\xd8\xdaq\xc9\xf7q\xda', 0x101, 0x0, 0xf, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x3a) (async)
socket$inet6(0xa, 0x2, 0x3a)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xa4, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000000000}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x0) (async)
socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x40094)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
connect$inet6(r9, &(0x7f0000000740)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1d}, 0x1c)
recvmsg$can_j1939(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003)

538.794927ms ago: executing program 0 (id=3610):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x58, 0x30, 0x800, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x0, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000400))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="3801000000"], 0x138}}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000001042687c486cd090ba25a3cfbab10400085000090f229dc08eb2d7e9833cafacf2a1cf657ce626da21498e738aa84053c30aeaf67d5589d0561b18f31d170bfc9ab5a5092dbefd0e84d10256d794d567fb15bc673c9ccedec84f353e5edc2000000000000"], 0x1c}}, 0x20004000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x2000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

537.650173ms ago: executing program 1 (id=3611):
r0 = socket(0x6, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000500070012000800000018007f0000000600080000000000050017000000000005001a000000000006000a00ffff20060500190004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a874000"/252, 0xfc)

456.845846ms ago: executing program 4 (id=3612):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0xf, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3de77a5aaaffeed177962fd6ef8e1fcd1cab2cfe2a8a742e23e44622a31b46f64735929a714596310df73aadcaed2335433afab5cfcaae1040a77fc6a2e93137266ca820f3bd0306205e82438cd28a", @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYBLOB="040013000a000600080211000001000006001000800500000600120000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

361.079123ms ago: executing program 1 (id=3613):
unshare(0x28000600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x4}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)

238.722505ms ago: executing program 1 (id=3614):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000"], 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x44800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x78c, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000121401000000000002000000080001000000000008004b0013000000080003000200000008", @ANYBLOB="066c98ac00a46f8836cd5db3470e2ab3030313e706b6e433110d7e204fa8674914e81c0c081463b60c858275a0713e30d0b7b6448295050fa146eccbfc3ab90e44e85b611a606ad7f374e22ab8eb3ce5add1c99c063f781f98aa813dfeae2f5d02c2e8312b762f01a130b5f25ad06f80eea050c83094ca329d3d79e7c899e8bffb5c63c5735fa4d353957a3ed8ad776e60db5c0c62d25ed34d9c40e125bda54ff9375456cddc5fdf8a3dceaea47ec648d1b481a6d269debbe2e58f1ad5264066d329572c5f9659f80d50f7dd76b696672668332c59779000cf6104c5fa1f8a0cbcc5b3ecb040c66d520a2af67e87d380d1b1f9a26bfe301f", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040041)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x16, 0x1, 0x5, 0x1f, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_key={0x1a, 0x8, 0x628, 0x0, "85fb8c1f9bebe3ae4dbeaf57a6d70e52d34173a27dd1a4c89b26033f77a277d64ca9fc388a6247727aa6f7c5cdae1847a8ec55f186ed398bd144d1f837a8c241a3f880cecea291b273bdc68edc989f17cc4f18f084de1dcc38707c6c72f24537b17af63d7daa624eabb1e6573d5fef28f6fe67b30bccb7c4f0cffefe3b6eb34982c138ddaf7f2d67c21e1ad1ff2519b9f30c4f1c0000ced2668e06f91471479ff20b9e3394506bde05fcb63ff7e74587771e4d79554eb748a8414d924475ef4cfb82e7972e"}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0xf8}}, 0x4008001)

214.708782ms ago: executing program 1 (id=3615):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0)

178.87266ms ago: executing program 4 (id=3616):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0)
read$nci(r1, &(0x7f00000015c0)=""/115, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

130.826529ms ago: executing program 0 (id=3617):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x3000c000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc)

130.208319ms ago: executing program 2 (id=3618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="a183ffffffff030000000500000008", @ANYRES64=r1], 0x8c}}, 0x4c044)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000020104000000000000000002000000240002801400018008000100e000000203000200ac1414000c0002800500010000000000300003802c00018014000300fe8000000000000000020000000000aa14000400fe88000000000000000000000000000104"], 0x6c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r10, 0x5, 0xd00, 0x0, {0x22}}, 0x14}}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r11=>0x0})
connect$inet6(r2, &(0x7f0000001a80)={0xa, 0x4e21, 0x80, @loopback, 0x6}, 0x1c)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x875}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20004815)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x84, r12, 0x4, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf801}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x401}}]}, 0x84}, 0x1, 0x0, 0x0, 0x480c0}, 0x40)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000018c0)={@mcast2, <r13=>0x0}, &(0x7f0000001900)=0x14)
sendmmsg$inet6(r2, &(0x7f00000033c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @mcast1, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="f5767d3afa858c", 0x7}, {&(0x7f0000001780)="aea5f1b789a15b884f5f3511908194d7dfb51277a52e0a6ff985bcdedb6dda18749e7aa37df777ef2b2528480120d0faf03645120252762863acae316cd9a886c18c68ea869d375390e61f0c12a5f0f0f873946c615d2e3f49720d6b707173822530b463dd9c1f09cb0417c7dcf477a3a8109da1c2b9abe879", 0x79}, {&(0x7f0000001800)="07f6c113f7a83b32902e98a76fa0fbfd5461dc10853cf636254e28ea9fdb6bc2f89bf194b139bcb76f8f125c045fb532a8b0712b0058c92e741f4b7a4fc44b3c5685685d7d8968a7993f27604b0955df92e12527869f2fd28218ae52af90ce22b366b52a505ac92818d45a404bcffecb57588da4c10a45071b4c471b2daf2c", 0x7f}], 0x4, &(0x7f00000034c0)=ANY=[@ANYBLOB="f8010000000000002900000037000000323b000000000000d7b2bdb2e73004452a5b5c361b91bf9089cab310ba4f65cd10c701ce2d9adb0c25e0e1dfc347ba779972cf62aaa2b81208f62e7b549b2e1b0c5cfbc0f9178d3ecb1a8f039caa2b6d876304c3458164c9c28d7bd4693a6093c4b99e4ba07b77d531f8acd8b99ee423584aafa12a4bbab611f7bd9f206970898d730aab8da604cdf6b865161227de13b7b81398541f145afedeede957ee5c1a597f42027170dbeea14ce6e403ede80741eed46d690bc60723dc4d56074800000003107f02000700000000000000637bffffffffffffcd0b00000000000005000000000000000400000000000000090000000000000000100000000000000300000000000000c204000005960502000004010807580000000214040400400000000000000001040000000000000900000000000000020000000000000000800300000000000700000000000000010000000100000001010000000000000500000000000000e50d000000000000047744c934f45433ccc910b364f85611e55d9a6c30e7e0df8f9d34b223087f56e4af496d4b535d1bdc9a4876d5c9734ddb860ce8f3e4326bc3ffb5d6b65abe13de767d7af27efdae7b4b0b49fab86032b94befd7607ec350ba4898c8b410dde04c622472179967ca84274ab9d88431e8ba7ec6845df3c6171d0000380000000000000029000000390000000204010600000000fe8000000000000000000000000000aa2001000000000000000000000000000214000000000000002900000034000000050000000000000014000000000000002900000008000000000000800000000024000000000000002900000032000000200100"/640, @ANYRES32=r13, @ANYBLOB="00000000e4e695caf96595088eeda46c35db1cb183e573b40845c99bbeb880dc106abd241928cdc63bc0258ec8904ce2159c83bfc8e3792a5ba999c6036103cb67f577c3043f52896a6955065c762838e69c0a78b4ebafea82267799e509e02571815be4bbfdd20332420b293f77d3d51cc5fe8353e23f"], 0x288}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c00)="f919b9fdb7081ae4463e75d6af6a586b6cfeff75fc0ff056809d4d495f962647060baf595d1ddba24d46aaa1232671877537812383cf1c123401", 0x3a}], 0x1, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x11e0}}, {{&(0x7f0000002e80)={0xa, 0x4e22, 0x25, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x130, 0x29, 0x36, {0x0, 0x22, '\x00', [@generic={0x81, 0x4e, "82b045c89de65bf5690ddf9dae885a0322fcea89f04605e5c7c0c02a4a807f9a5ea1a8e71ef580338374fbc97f342def174d55d9521b7b29e6c570028a496912850fd3335a0d98024b649b0dbf82"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x1, [0x10, 0xffff, 0x9, 0x7]}}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3, 0xc1, [0x5, 0x5, 0x4, 0x37e6, 0x7fff, 0xe13a]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x8, [0x9, 0x0]}}, @ra={0x5, 0x2, 0x77d3}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x38, {0x2, 0xc, 0xd, 0x400, [0xffffffffffffff1a, 0xfffffffffffffff7, 0x7, 0x100, 0x7, 0x4]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6a7395bb}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3a, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7dfa}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0xc0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}, @dstopts={{0x60, 0x29, 0x37, {0xff, 0x8, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x40, [0x4, 0x5a, 0x31a, 0x400]}}, @pad1, @pad1]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2b, 0xb, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x4, 0x9, [0xffffffff, 0x4, 0xc8, 0x5, 0xfffffffeffffffff, 0x2, 0xe, 0x8, 0x1, 0xe9]}}]}}}], 0x288}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)="bc0da064f62bfc07139614946bcf3e69e226327c06936844fc8247bcfd5d0b3068eac2a7b9509bfac58231dc52a06fde7cbcaefdc80de2015d9254865c020d121ce9da5a38dd265a1c68a827f0c2c6ef6a4d3ae2c9b543e41a8433a58b1ac04c16b7c4addcbd20746d239675e01c45c7a4d701b34c35f2b2b2e58a3ee065d109e52bc130b117cc01a92f95158cb5f9d044119a2786e0e99548613eed0079a3d2616c1d2093147cb02f5d8741f1c1cf3d1a330b09929b094ea7d2b349c89ac804c52111487de9c2cfb6f30a6404552725cd845cd1ac6d29647d4dc079d3d70cdb26b8fb64bb8ebd3d7b1f3747e2fee08ae90e4407a7f8", 0xf6}], 0x1, &(0x7f0000003300)=[@rthdr={{0x68, 0x29, 0x39, {0x1d, 0xa, 0x0, 0x2, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @rand_addr=' \x01\x00', @empty, @empty]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x5, 0x0, [@private0]}}}], 0x90}}], 0x4, 0x4008001)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r5, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c00050003000000000000000800010003"], 0xf8}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4)

0s ago: executing program 0 (id=3619):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003600)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2a24d, 0x504}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x8814)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6c67, @mcast1, 0x8a5}], 0x1c)

kernel console output (not intermixed with test programs):

im2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.299160][ T8870] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.434901][T14558] lo: Caught tx_queue_len zero misconfig
[  340.746232][T14566] netlink: 'syz.4.2169': attribute type 210 has an invalid length.
[  341.618801][T14577] veth1: Caught tx_queue_len zero misconfig
[  341.772383][T14584] syzkaller0: entered promiscuous mode
[  341.792511][T14584] syzkaller0: entered allmulticast mode
[  341.818460][T14584] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  342.026941][T14599] syzkaller0: entered promiscuous mode
[  342.032714][T14599] syzkaller0: entered allmulticast mode
[  342.702749][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'.
[  342.965949][T14645] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2189'.
[  343.668186][T14680] 8021q: adding VLAN 0 to HW filter on device bond13
[  343.692221][T14680] bridge0: port 1(bond13) entered blocking state
[  343.727430][T14680] bridge0: port 1(bond13) entered disabled state
[  343.746129][T14680] bond13: entered allmulticast mode
[  343.775634][T14680] bond13: entered promiscuous mode
[  343.909028][T14694] syzkaller0: entered promiscuous mode
[  343.922716][T14694] syzkaller0: entered allmulticast mode
[  344.048139][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2201'.
[  344.306949][T14717] netlink: 'syz.4.2204': attribute type 9 has an invalid length.
[  344.788282][T14734] lo speed is unknown, defaulting to 1000
[  344.869488][T14744] can: request_module (can-proto-0) failed.
[  344.940752][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'.
[  345.046439][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'.
[  345.139090][T14764] xfrm1: entered allmulticast mode
[  345.344508][T14771] netlink: 'syz.0.2215': attribute type 3 has an invalid length.
[  345.369882][T14774] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2214'.
[  345.412515][T14773] netlink: 'syz.1.2216': attribute type 7 has an invalid length.
[  345.498288][ T6445] bridge0: entered promiscuous mode
[  345.515740][T14777] ipvlan0: Caught tx_queue_len zero misconfig
[  346.019463][T14797] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0
[  346.526410][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'.
[  346.539657][T14814] netlink: 'syz.3.2224': attribute type 1 has an invalid length.
[  346.636166][T14820] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2227'.
[  346.662242][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'.
[  346.880757][T14826] netlink: zone id is out of range
[  346.909684][T14826] netlink: del zone limit has 4 unknown bytes
[  347.361865][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2235'.
[  347.550911][T14862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.906311][T14871] __nla_validate_parse: 3 callbacks suppressed
[  347.906377][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2238'.
[  348.324961][T14882] netlink: 'syz.1.2244': attribute type 1 has an invalid length.
[  348.350295][T14882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2244'.
[  348.971794][T14902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.035463][T14907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.208320][T14902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2248'.
[  349.342476][T14917] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2253'.
[  350.702393][T14959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2264'.
[  351.115936][T14973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.950631][T15002] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2276'.
[  351.976547][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'.
[  351.982036][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'.
[  351.987977][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2276'.
[  352.006785][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'.
[  352.041128][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.070668][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.090430][T14982] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  352.521796][T15014] syzkaller1: entered promiscuous mode
[  352.535111][T15014] syzkaller1: entered allmulticast mode
[  353.627066][T15047] __nla_validate_parse: 4 callbacks suppressed
[  353.627120][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'.
[  354.211478][T15067] ipip1: entered promiscuous mode
[  354.318629][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'.
[  354.411105][T15074] netlink: 'syz.0.2298': attribute type 1 has an invalid length.
[  354.429651][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.448947][T15074] netlink: 'syz.0.2298': attribute type 2 has an invalid length.
[  354.698991][T15079] syzkaller0: entered promiscuous mode
[  354.716718][T15079] syzkaller0: entered allmulticast mode
[  354.955807][T15097] team0: entered allmulticast mode
[  354.963862][T15097] syz_tun: entered allmulticast mode
[  354.976466][T15097] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  355.715386][T15113] netlink: 'syz.4.2309': attribute type 1 has an invalid length.
[  355.724264][T15113] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2309'.
[  355.733944][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'.
[  356.711432][T15130] netlink: 'syz.1.2310': attribute type 1 has an invalid length.
[  359.195584][T15130] 8021q: adding VLAN 0 to HW filter on device bond14
[  359.220161][T15122] bond14: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  359.255674][T15122] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  359.431257][T15150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.772657][T15150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.830685][T15163] bridge0: entered allmulticast mode
[  360.038990][T15150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.341760][T15150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.045177][   T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.082765][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2330'.
[  361.206572][T15207] 8021q: adding VLAN 0 to HW filter on device bond4
[  361.221354][ T9573] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.291307][T15210] bond0: entered promiscuous mode
[  361.315428][T15210] bond8: entered promiscuous mode
[  361.346307][T15210] batadv0: entered promiscuous mode
[  361.372927][T15210] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  361.396289][T15210] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  361.408611][T15210] 8021q: adding VLAN 0 to HW filter on device hsr2
[  361.424073][T15210] bond0: left promiscuous mode
[  361.429697][T15210] bond8: left promiscuous mode
[  361.446127][T15210] batadv0: left promiscuous mode
[  361.587694][ T9573] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.679907][ T9573] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.955424][T15232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2335'.
[  361.983797][T15226] macsec1: entered promiscuous mode
[  362.157278][T15232] netlink: 'syz.3.2335': attribute type 1 has an invalid length.
[  362.191692][T15232] netlink: 'syz.3.2335': attribute type 2 has an invalid length.
[  362.472718][T15254] xt_hashlimit: size too large, truncated to 1048576
[  363.220412][T15271] syzkaller0: entered promiscuous mode
[  363.239442][T15271] syzkaller0: entered allmulticast mode
[  363.266390][T15271] 0: reclassify loop, rule prio 0, protocol 800
[  363.373073][T15275] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  363.392342][T15275] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2343'.
[  364.335128][T15293] netlink: 'syz.1.2347': attribute type 15 has an invalid length.
[  364.507284][T15283] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2345'.
[  364.533377][T15291] netlink: 'syz.1.2347': attribute type 1 has an invalid length.
[  364.544368][T15291] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2347'.
[  364.912515][T15307] bond5 (unregistering): Released all slaves
[  364.990740][T15317] netlink: 'syz.3.2351': attribute type 13 has an invalid length.
[  365.332277][T15320] batman_adv: batadv0: Adding interface: vlan4
[  365.344104][T15320] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[  365.867910][T15348] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  365.985217][T15360] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2359'.
[  366.687935][T15378] netlink: 'syz.4.2367': attribute type 1 has an invalid length.
[  366.865757][T15378] bond9: entered promiscuous mode
[  366.922493][T15378] 8021q: adding VLAN 0 to HW filter on device bond9
[  367.123292][T15396] netlink: 'syz.1.2372': attribute type 30 has an invalid length.
[  367.226427][T15378] 8021q: adding VLAN 0 to HW filter on device bond9
[  367.248482][T15378] bond9: (slave ipip2): The slave device specified does not support setting the MAC address
[  367.260145][T15378] bond9: (slave ipip2): Setting fail_over_mac to active for active-backup mode
[  367.281099][T15378] bond9: (slave ipip2): making interface the new active one
[  367.289075][T15378] ipip2: entered promiscuous mode
[  367.299620][T15378] bond9: (slave ipip2): Enslaving as an active interface with an up link
[  367.343954][T15396] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  367.348082][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  367.465621][T15408] batadv_slave_1: entered promiscuous mode
[  367.496733][T15408] macvlan2: entered allmulticast mode
[  367.512753][T15408] batadv_slave_1: entered allmulticast mode
[  367.537998][T15408] batman_adv: batadv0: Adding interface: macvlan2
[  367.565295][T15408] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.609485][T15408] batman_adv: batadv0: Interface activated: macvlan2
[  368.017664][T15434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.894153][T15469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2387'.
[  368.907273][T15472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2387'.
[  368.968156][T15442] bond0: (slave netdevsim1): Releasing backup interface
[  369.218740][T15475] ip6erspan0: entered allmulticast mode
[  369.380778][T15478] lo speed is unknown, defaulting to 1000
[  369.453602][T15480] syzkaller0: entered promiscuous mode
[  369.460436][T15480] syzkaller0: entered allmulticast mode
[  369.696595][T15492] netlink: ct family unspecified
[  369.702515][T15492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.345130][T15508] veth1_to_team: Caught tx_queue_len zero misconfig
[  371.000306][T15533] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2400'.
[  371.191147][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'.
[  373.660525][T15522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.671890][T15527] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2400'.
[  374.047526][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2408'.
[  374.355341][T15585] batadv_slave_0: Caught tx_queue_len zero misconfig
[  374.669772][T15585] xfrm0: Caught tx_queue_len zero misconfig
[  374.761000][T15600] netlink: 'syz.1.2414': attribute type 1 has an invalid length.
[  375.118464][T15604] bond15: (slave bridge3): making interface the new active one
[  375.135212][T15604] bond15: (slave bridge3): Enslaving as an active interface with an up link
[  377.222547][T15580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  377.466097][T15652] netlink: zone id is out of range
[  377.476865][T15652] netlink: zone id is out of range
[  377.488748][T15652] netlink: zone id is out of range
[  377.524854][T15652] netlink: zone id is out of range
[  377.595606][T15652] netlink: zone id is out of range
[  377.668090][T15652] netlink: zone id is out of range
[  377.684309][T15649] siw: device registration error -23
[  377.729529][T15652] netlink: zone id is out of range
[  377.789860][T15652] netlink: zone id is out of range
[  377.839149][T15652] netlink: zone id is out of range
[  377.907305][T15652] netlink: zone id is out of range
[  378.466061][T15669] x_tables: duplicate underflow at hook 3
[  378.822345][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  380.650272][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'.
[  380.775817][T15666] lo speed is unknown, defaulting to 1000
[  380.978508][T15685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2431'.
[  381.062049][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'.
[  381.695417][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'.
[  381.723706][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'.
[  381.976155][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'.
[  382.020053][T15724] netlink: 'syz.3.2439': attribute type 2 has an invalid length.
[  382.368310][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'.
[  382.875262][T15761] sctp: [Deprecated]: syz.0.2447 (pid 15761) Use of int in max_burst socket option.
[  382.875262][T15761] Use struct sctp_assoc_value instead
[  386.008908][T15768] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2447'.
[  386.037946][T15775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2449'.
[  386.262155][T15774] lo speed is unknown, defaulting to 1000
[  386.561310][T15784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  386.618468][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'.
[  387.023954][T15807] netlink: 'syz.0.2460': attribute type 9 has an invalid length.
[  387.080814][T15807] netlink: 'syz.0.2460': attribute type 6 has an invalid length.
[  387.140871][T15807] netlink: 'syz.0.2460': attribute type 7 has an invalid length.
[  387.161758][T15802] syzkaller0: entered promiscuous mode
[  387.169754][T15807] netlink: 'syz.0.2460': attribute type 8 has an invalid length.
[  387.178328][T15802] syzkaller0: entered allmulticast mode
[  387.463649][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'.
[  387.650643][T15820] netlink: 'syz.3.2463': attribute type 4 has an invalid length.
[  387.711197][T15822] netlink: 'syz.3.2463': attribute type 4 has an invalid length.
[  388.248542][T15840] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2467'.
[  388.286867][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'.
[  388.298256][T15840] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2467'.
[  388.468482][T15847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2469'.
[  388.505238][T15846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2470'.
[  388.596979][T15846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'.
[  388.710962][T15846] syzkaller1: entered promiscuous mode
[  388.714288][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.741668][T15846] syzkaller1: entered allmulticast mode
[  388.776377][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.814058][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.838214][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.856275][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.891896][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.917159][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.954747][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  388.981508][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.003770][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.024667][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.062379][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.074462][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.094528][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.126758][T15863] net_ratelimit: 1704 callbacks suppressed
[  389.126778][T15863] IPVS: rr: FWM 3 0x00000003 - no destination available
[  389.142562][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.178280][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.221740][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.254994][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.299643][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.347130][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.386036][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.403093][T15874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  389.429688][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.465841][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.485002][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.506780][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.516826][T15852] ieee802154 phy1 wpan1: encryption failed: -22
[  389.538092][T15883] tunl0: Caught tx_queue_len zero misconfig
[  391.411769][T15927] bond16: entered promiscuous mode
[  391.415891][T15936] sctp: [Deprecated]: syz.3.2496 (pid 15936) Use of int in max_burst socket option.
[  391.415891][T15936] Use struct sctp_assoc_value instead
[  391.436716][T15927] bond16: entered allmulticast mode
[  391.503930][T15927] 8021q: adding VLAN 0 to HW filter on device bond16
[  393.609445][T15971] __nla_validate_parse: 5 callbacks suppressed
[  393.609466][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'.
[  393.614627][T15969] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2502'.
[  393.737690][T15975] syzkaller0: entered promiscuous mode
[  393.762376][T15975] syzkaller0: entered allmulticast mode
[  394.063077][T15992] sit0: left promiscuous mode
[  394.097633][T15992] 8021q: adding VLAN 0 to HW filter on device team0
[  394.148730][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.149779][T15994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2508'.
[  394.335545][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.364971][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.399698][T15992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  394.412714][T15992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  394.450888][T15992] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  394.470413][T15992] veth1_vlan: left promiscuous mode
[  394.482343][T15992] veth0_vlan: left promiscuous mode
[  394.496373][T15992] veth0_vlan: entered promiscuous mode
[  394.515205][T15992] veth1_vlan: entered promiscuous mode
[  394.545495][T15992] veth1_macvtap: left promiscuous mode
[  394.554331][T15992] veth0_macvtap: left promiscuous mode
[  394.565966][T15992] veth0_macvtap: entered promiscuous mode
[  394.607653][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  394.622148][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  394.640215][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  394.649393][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'.
[  394.663071][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  394.685035][T15992] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.717912][T15992] 8021q: adding VLAN 0 to HW filter on device bond4
[  394.784244][T15992] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network
[  394.795994][T15992] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  394.809206][T15992] ip6gre2: left promiscuous mode
[  394.820097][T15992] syzkaller0: left promiscuous mode
[  394.829334][T15992] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.838116][T15992] vlan2: left promiscuous mode
[  394.843016][T15992] hsr0: left promiscuous mode
[  394.856781][T15992] ipip1: left promiscuous mode
[  394.862338][T15992] bond9: left promiscuous mode
[  394.867789][T15992] ipip2: left promiscuous mode
[  394.884052][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.891274][ T1032] bridge0: port 1(bridge_slave_0) entered listening state
[  394.954359][ T8860] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.966273][ T8860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.981614][ T8860] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.991339][ T8860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.021598][ T8860] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.047455][ T8860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.071791][ T8860] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  395.092923][ T8860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.239844][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  395.465949][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'.
[  395.634533][T16031] vlan4: entered allmulticast mode
[  395.640245][T16031] bond0: entered allmulticast mode
[  396.588354][T15979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.879141][T16042] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2520'.
[  396.907797][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'.
[  397.400488][T16061] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  397.439383][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'.
[  397.872986][T16061] 8021q: adding VLAN 0 to HW filter on device bond12
[  398.089392][T16077] veth7: entered allmulticast mode
[  398.149530][T16077] bond12: (slave veth7): Enslaving as an active interface with a down link
[  398.184745][T16078] bond0: (slave ipvlan0): Device is not bonding slave
[  398.194630][T16078] bond0: option active_slave: invalid value (ipvlan0)
[  398.212144][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'.
[  398.247415][T16084] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  399.390754][T16133] __nla_validate_parse: 1 callbacks suppressed
[  399.390774][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2540'.
[  399.463692][T16134] gre2: entered allmulticast mode
[  399.469321][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'.
[  399.615246][T16133] veth0_to_team: entered promiscuous mode
[  399.622954][T16133] veth0_to_team: left promiscuous mode
[  399.963408][T16149] netlink: 'syz.1.2546': attribute type 2 has an invalid length.
[  400.003771][T16149] netlink: 'syz.1.2546': attribute type 11 has an invalid length.
[  400.028553][T16149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2546'.
[  400.219146][T16158] batadv_slave_0: entered allmulticast mode
[  400.236114][T16158] batadv_slave_0: left allmulticast mode
[  400.311046][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'.
[  400.352610][T16166] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2549'.
[  400.388488][T16158] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2549'.
[  401.135747][T16191] bridge0: port 1(vlan5) entered blocking state
[  401.160042][T16191] bridge0: port 1(vlan5) entered disabled state
[  401.179280][T16191] vlan5: entered allmulticast mode
[  401.189228][T16191] geneve0: entered allmulticast mode
[  401.210966][T16191] vlan5: entered promiscuous mode
[  401.231746][T16191] geneve0: entered promiscuous mode
[  401.360092][T16202] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2562'.
[  401.368976][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.442691][T16198] syzkaller0: entered promiscuous mode
[  401.454278][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.459771][T16198] syzkaller0: entered allmulticast mode
[  401.852106][T16220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.300928][T16234] netlink: zone id is out of range
[  402.343802][T16234] netlink: zone id is out of range
[  402.365800][T16234] netlink: zone id is out of range
[  402.377822][T16236] netlink: 'syz.0.2570': attribute type 6 has an invalid length.
[  402.397421][T16234] netlink: zone id is out of range
[  402.418481][T16234] netlink: zone id is out of range
[  402.437891][T16234] netlink: zone id is out of range
[  402.456682][T16234] netlink: zone id is out of range
[  402.478753][T16234] netlink: zone id is out of range
[  402.505856][T16234] netlink: zone id is out of range
[  402.533115][T16234] netlink: zone id is out of range
[  402.962145][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'.
[  403.091244][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'.
[  403.220250][T16247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2573'.
[  403.409598][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory
[  403.870446][T16289] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  404.022080][T16287] netlink: 'syz.3.2578': attribute type 1 has an invalid length.
[  404.156508][T16292] bond13: (slave gretap2): making interface the new active one
[  404.168534][T16292] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  404.181973][T16290] ÿÿÿÿÿÿ: renamed from bond_slave_0
[  404.433321][T16287] 8021q: adding VLAN 0 to HW filter on device bond5
[  405.084261][T16321] __nla_validate_parse: 11 callbacks suppressed
[  405.084322][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'.
[  405.121847][T16325] netlink: 'syz.2.2589': attribute type 1 has an invalid length.
[  405.270737][T16332] syzkaller1: entered promiscuous mode
[  405.308430][T16332] syzkaller1: entered allmulticast mode
[  406.024960][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'.
[  406.508856][T16376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2600'.
[  406.978461][T16388] netlink: 'syz.3.2605': attribute type 2 has an invalid length.
[  407.438779][T16413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2609'.
[  408.052091][T16433] nft_compat: unsupported protocol 5
[  408.425872][T16446] netlink: 'syz.0.2616': attribute type 9 has an invalid length.
[  408.978389][T16462] net_ratelimit: 4 callbacks suppressed
[  408.978410][T16462] openvswitch: netlink: Missing valid actions attribute.
[  409.025650][T16462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.039358][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2622'.
[  409.070716][T16468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2622'.
[  409.943440][T16501] netlink: 'syz.3.2629': attribute type 1 has an invalid length.
[  410.035460][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2629'.
[  410.915695][T16535] macvlan0: entered promiscuous mode
[  410.980363][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'.
[  411.039114][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'.
[  411.040653][T16540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2637'.
[  411.288224][T16548] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.316894][T16542] macvlan0 (unregistering): left promiscuous mode
[  411.327189][T16548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.426341][T16533] lo speed is unknown, defaulting to 1000
[  411.816256][T16563] IPv6: addrconf: prefix option has invalid lifetime
[  411.936319][T16563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  412.575694][T16582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2650'.
[  412.630958][T16582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2650'.
[  412.883729][T16594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2649'.
[  413.619165][T16607] FAULT_INJECTION: forcing a failure.
[  413.619165][T16607] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  413.646274][T16607] CPU: 1 UID: 0 PID: 16607 Comm: syz.3.2656 Not tainted syzkaller #0 PREEMPT(full) 
[  413.646307][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  413.646319][T16607] Call Trace:
[  413.646327][T16607]  <TASK>
[  413.646336][T16607]  dump_stack_lvl+0xe8/0x150
[  413.646470][T16607]  should_fail_ex+0x40c/0x560
[  413.646597][T16607]  _copy_from_user+0x2d/0xb0
[  413.646673][T16607]  __sys_bpf+0x2e7/0xd90
[  413.646741][T16607]  ? __pfx___sys_bpf+0x10/0x10
[  413.646779][T16607]  ? __fget_files+0x2a/0x420
[  413.646869][T16607]  ? ksys_write+0x242/0x270
[  413.646916][T16607]  ? __pfx_ksys_write+0x10/0x10
[  413.646951][T16607]  __x64_sys_bpf+0xba/0xd0
[  413.646974][T16607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.647022][T16607]  do_syscall_64+0x174/0x580
[  413.647140][T16607]  ? trace_irq_disable+0x3b/0x140
[  413.647165][T16607]  ? clear_bhb_loop+0x40/0x90
[  413.647190][T16607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.647210][T16607] RIP: 0033:0x7f99ed59de99
[  413.647231][T16607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.647248][T16607] RSP: 002b:00007f99ee386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  413.647272][T16607] RAX: ffffffffffffffda RBX: 00007f99ed825fa0 RCX: 00007f99ed59de99
[  413.647286][T16607] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[  413.647298][T16607] RBP: 00007f99ee386090 R08: 0000000000000000 R09: 0000000000000000
[  413.647310][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.647322][T16607] R13: 00007f99ed826038 R14: 00007f99ed825fa0 R15: 00007ffcbf02bf68
[  413.647354][T16607]  </TASK>
[  414.084158][T16618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2659'.
[  414.093178][T16618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2659'.
[  415.398139][T16651] lo speed is unknown, defaulting to 1000
[  415.999487][T16656] lo speed is unknown, defaulting to 1000
[  416.272946][T16663] netlink: 'syz.0.2668': attribute type 2 has an invalid length.
[  416.316285][T16663] : entered promiscuous mode
[  417.021706][T16618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.667081][T16679] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.696688][T16679] 8021q: adding VLAN 0 to HW filter on device team0
[  418.044475][T16679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  418.068332][T16679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  418.085236][T16679] veth1_vlan: left promiscuous mode
[  418.091990][T16679] veth0_vlan: left promiscuous mode
[  418.099096][T16679] veth0_vlan: entered promiscuous mode
[  418.107341][T16679] veth1_vlan: entered promiscuous mode
[  418.119093][T16679] veth1_macvtap: left promiscuous mode
[  418.129163][T16679] veth0_macvtap: entered promiscuous mode
[  418.136401][T16679] veth1_macvtap: entered promiscuous mode
[  418.151463][T16679] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  418.324312][ T8857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.349593][ T8857] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.433062][ T8857] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.482060][ T8857] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.514459][ T6445] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  418.567477][T16707] __nla_validate_parse: 4 callbacks suppressed
[  418.567499][T16707] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2681'.
[  418.609469][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'.
[  419.025223][ T8857] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.135142][ T6445] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.386409][T16746] syzkaller1: entered promiscuous mode
[  419.392188][T16746] syzkaller1: entered allmulticast mode
[  419.409165][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'.
[  419.463552][T16748] netlink: 864 bytes leftover after parsing attributes in process `syz.3.2694'.
[  419.598523][T16753] xt_hashlimit: size too large, truncated to 1048576
[  420.098397][ T8860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.124228][ T8860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.731105][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'.
[  420.833696][  T808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.360133][T16832] netlink: 'syz.2.2717': attribute type 1 has an invalid length.
[  421.395113][T16832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2717'.
[  421.395488][T16814] netlink: 'syz.4.2712': attribute type 4 has an invalid length.
[  421.426067][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2712'.
[  421.435079][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2712'.
[  421.459624][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2712'.
[  421.498344][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2718'.
[  421.727860][T16849] openvswitch: netlink: Flow actions attr not present in new flow.
[  422.238034][T16870] lo speed is unknown, defaulting to 1000
[  422.256449][T16873] openvswitch: netlink: Duplicate or invalid key (type 0).
[  422.263836][T16873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.448668][T16884] sctp: [Deprecated]: syz.0.2732 (pid 16884) Use of int in max_burst socket option.
[  422.448668][T16884] Use struct sctp_assoc_value instead
[  422.592665][T16896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.791941][T16900] syzkaller0: entered promiscuous mode
[  422.844556][T16900] syzkaller0: entered allmulticast mode
[  422.908732][T16907] sctp: [Deprecated]: syz.4.2739 (pid 16907) Use of struct sctp_assoc_value in delayed_ack socket option.
[  422.908732][T16907] Use struct sctp_sack_info instead
[  424.098464][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.537998][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  425.932048][T16923] bridge6: entered promiscuous mode
[  425.937658][T16923] bridge6: entered allmulticast mode
[  426.028333][T16934] __nla_validate_parse: 5 callbacks suppressed
[  426.028353][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'.
[  426.045750][T16934] netlink: 'syz.2.2745': attribute type 30 has an invalid length.
[  426.123682][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'.
[  426.173586][T16926] bond17: entered promiscuous mode
[  426.178843][T16936] netlink: 'syz.2.2745': attribute type 30 has an invalid length.
[  426.186738][T16926] bond17: entered allmulticast mode
[  426.192425][T16926] 8021q: adding VLAN 0 to HW filter on device bond17
[  426.201140][T16927] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  426.536073][T16955] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2753'.
[  426.553529][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2753'.
[  426.562510][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2753'.
[  426.571520][T16955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2753'.
[  426.617139][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'.
[  426.982253][   T29] audit: type=1800 audit(1784594385.163:11): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2757" name="memory.events" dev="tmpfs" ino=2795 res=0 errno=0
[  427.416458][T17005] netlink: 'syz.3.2760': attribute type 16 has an invalid length.
[  427.424441][T17005] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2760'.
[  427.730169][T17020] netlink: 'syz.3.2765': attribute type 5 has an invalid length.
[  427.868608][T17024] lo speed is unknown, defaulting to 1000
[  430.557885][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  430.617621][T17012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.898379][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'.
[  430.952321][   T29] audit: type=1800 audit(1784594389.163:12): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2771" name="memory.events" dev="tmpfs" ino=2886 res=0 errno=0
[  431.037486][T17062] ipvlan2: entered allmulticast mode
[  431.042856][T17062] syz_tun: entered allmulticast mode
[  431.492114][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'.
[  431.521011][T17093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2778'.
[  431.943935][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.214308][T17132] netlink: 'syz.2.2793': attribute type 27 has an invalid length.
[  432.225073][T17130] tipc: New replicast peer: 255.255.255.255
[  432.231617][T17130] tipc: Enabled bearer <udp:syz2>, priority 10
[  432.256265][T17132] ip6erspan0: left allmulticast mode
[  432.270291][T17132] veth7: left allmulticast mode
[  432.281543][ T8857] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.291095][ T8857] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.349402][T17134] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.357167][T17134] 8021q: adding VLAN 0 to HW filter on device team0
[  432.387359][T17134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  432.398934][T17134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.414861][T17134] veth1_vlan: left promiscuous mode
[  432.420879][T17134] veth0_vlan: left promiscuous mode
[  432.427651][T17134] veth0_vlan: entered promiscuous mode
[  432.434887][T17134] veth1_vlan: entered promiscuous mode
[  432.462979][T17134] 8021q: adding VLAN 0 to HW filter on device bond1
[  432.472082][T17134] 8021q: adding VLAN 0 to HW filter on device bond2
[  432.482829][T17134] 8021q: adding VLAN 0 to HW filter on device bond3
[  432.490307][T17134] 8021q: adding VLAN 0 to HW filter on device bond4
[  432.505905][T17134] 8021q: adding VLAN 0 to HW filter on device bond5
[  432.515828][T17134] 8021q: adding VLAN 0 to HW filter on device bond6
[  432.523583][T17134] 8021q: adding VLAN 0 to HW filter on device bond7
[  432.532624][T17134] 8021q: adding VLAN 0 to HW filter on device bond8
[  432.540415][T17134] 8021q: adding VLAN 0 to HW filter on device bond9
[  432.548124][T17134] 8021q: adding VLAN 0 to HW filter on device bond10
[  432.564444][T17134] veth0_to_team: entered promiscuous mode
[  432.572516][T17134] 8021q: adding VLAN 0 to HW filter on device bond11
[  432.585281][T17134] 8021q: adding VLAN 0 to HW filter on device eth0
[  432.593417][T17134] 8021q: adding VLAN 0 to HW filter on device eth1
[  432.601376][T17134] 8021q: adding VLAN 0 to HW filter on device eth2
[  432.610897][T17134] 8021q: adding VLAN 0 to HW filter on device eth3
[  432.624607][T17134] 8021q: adding VLAN 0 to HW filter on device bond12
[  432.636187][T17134] 8021q: adding VLAN 0 to HW filter on device bond13
[  432.644865][ T8857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.653202][    T9] lo speed is unknown, defaulting to 1000
[  432.666159][   T35] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  432.677355][    T9] syz2: Port: 1 Link ACTIVE
[  432.687534][   T35] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  432.699797][   T35] bond12: (slave veth7): making interface the new active one
[  432.712978][   T35] bond12: active interface up!
[  432.735450][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.746097][T17135] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2794'.
[  432.817580][   T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.833801][ T8860] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  432.855433][ T8860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.872583][ T9577] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  432.880514][ T9577] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  432.904994][ T1235] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  432.924031][ T8860] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  432.932268][ T8860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.946194][ T9577] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  432.954034][ T9577] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  433.014346][ T1235] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  433.153212][T17149] lo speed is unknown, defaulting to 1000
[  433.186680][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.236881][    T9] tipc: Node number set to 1977778136
[  433.242876][ T1235] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  433.302953][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'.
[  433.376032][T17161] sctp: [Deprecated]: syz.4.2803 (pid 17161) Use of int in maxseg socket option.
[  433.376032][T17161] Use struct sctp_assoc_value instead
[  433.423737][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'.
[  433.458553][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'.
[  433.529853][T17159] xt_socket: unknown flags 0x4
[  433.537878][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[  433.616049][T17157] veth1: entered allmulticast mode
[  433.625701][T17157] bond7: (slave veth1): Enslaving as an active interface with an up link
[  433.644825][T17177] bond7 (unregistering): (slave veth1): Releasing backup interface
[  433.658810][T17177] bond7 (unregistering): Released all slaves
[  433.723205][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  433.744478][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  433.753634][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  433.776614][T17182] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  434.008551][T17189] ip6erspan1: entered allmulticast mode
[  434.059163][T17196] netdevsim netdevsim4: Direct firmware load for á failed with error -2
[  434.067837][T17196] netdevsim netdevsim4: Falling back to sysfs fallback for: á
[  434.228979][T17207] netlink: 'syz.3.2814': attribute type 13 has an invalid length.
[  434.614672][T17218] syzkaller0: entered promiscuous mode
[  434.620222][T17218] syzkaller0: entered allmulticast mode
[  435.354924][T17234] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  435.430212][T17242] netlink: 'syz.1.2821': attribute type 11 has an invalid length.
[  435.438547][T17242] netlink: 'syz.1.2821': attribute type 13 has an invalid length.
[  435.536463][T17234] team0: Device xfrm0 is of different type
[  435.632448][T17257] lo speed is unknown, defaulting to 1000
[  436.103886][T17268] syzkaller1: entered promiscuous mode
[  436.110360][T17268] syzkaller1: entered allmulticast mode
[  436.295238][T17273] ipvlan2: entered promiscuous mode
[  437.053892][    C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  437.053937][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  438.229791][T17236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.242098][T17253] netlink: 'syz.0.2823': attribute type 23 has an invalid length.
[  438.513829][T17281] netlink: 'syz.0.2828': attribute type 23 has an invalid length.
[  438.564839][T17281] __nla_validate_parse: 39 callbacks suppressed
[  438.564860][T17281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2828'.
[  438.908596][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2833'.
[  438.920721][T17293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2832'.
[  438.945275][T17293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2832'.
[  438.969228][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  438.970159][T17296] lo speed is unknown, defaulting to 1000
[  439.185870][T17305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2837'.
[  439.485511][T17318] 8021q: VLANs not supported on tunl0
[  439.592308][T17324] netlink: 'syz.0.2842': attribute type 5 has an invalid length.
[  439.628723][T17323] netlink: 'syz.0.2842': attribute type 5 has an invalid length.
[  439.762329][T17333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2844'.
[  440.265630][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  440.767220][T17372] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  441.288716][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'.
[  441.410011][T17391] ip6t_REJECT: ECHOREPLY is not supported
[  441.963399][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'.
[  442.018728][T17422] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2867'.
[  442.424564][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.518866][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.555162][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.578441][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2872'.
[  442.597412][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.609908][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.723310][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.870767][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.880246][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.915675][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.923491][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  443.152701][ T5623] syz_tun (unregistering): left allmulticast mode
[  443.163824][ T5623] team0: Port device syz_tun removed
[  443.346470][T17464] team0: Device xfrm0 is of different type
[  443.592149][T17471] __nla_validate_parse: 1 callbacks suppressed
[  443.592172][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'.
[  443.767316][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.829362][T17482] ip6tnl5: entered allmulticast mode
[  443.836218][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.851323][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.851473][T17433] lo speed is unknown, defaulting to 1000
[  443.861395][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.862358][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.863147][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.914838][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.924766][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  443.977320][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  444.134872][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  444.644927][T17509] netlink: 'syz.4.2885': attribute type 1 has an invalid length.
[  444.657888][T17513] nbd: must specify at least one socket
[  444.906701][T17433] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.948241][T17433] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.955528][T17433] bridge_slave_0: entered allmulticast mode
[  444.994876][T17433] bridge_slave_0: entered promiscuous mode
[  445.003908][T17433] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.016771][T17433] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.025105][T17433] bridge_slave_1: entered allmulticast mode
[  445.045009][ T5642] Bluetooth: hci5: command tx timeout
[  445.065072][T17433] bridge_slave_1: entered promiscuous mode
[  445.080569][T17518] lo speed is unknown, defaulting to 1000
[  445.124576][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.137660][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.350224][T17433] team0: Port device team_slave_0 added
[  445.413869][T17433] team0: Port device team_slave_1 added
[  445.508462][T17529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.593291][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.671177][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.706793][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.721102][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.729175][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.766951][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.789861][T17545] bridge4: entered promiscuous mode
[  445.795137][T17545] bridge4: entered allmulticast mode
[  445.804611][T17545] team0: Port device bridge4 added
[  446.038074][T17433] hsr_slave_0: entered promiscuous mode
[  446.045166][T17433] hsr_slave_1: entered promiscuous mode
[  446.051822][T17433] debugfs: 'hsr0' already exists in 'hsr'
[  446.063592][T17433] Cannot create hsr debugfs directory
[  446.065710][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  446.158141][T17565] block nbd5: Unsupported socket: should be TCP or UNIX.
[  446.575175][T17433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.938205][T17433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.074073][ T5642] Bluetooth: hci5: command tx timeout
[  447.156061][T17433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.180401][T17567] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  447.304221][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  447.304400][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  447.716315][T17433] netdevsim netdevsim3 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.967131][T17637] netlink: 'syz.4.2922': attribute type 1 has an invalid length.
[  448.114493][T17641] x_tables: unsorted underflow at hook 4
[  448.382497][T17656] IPVS: Error binding to the multicast addr
[  448.571724][T17433] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  448.584562][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  448.592743][T17433] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  448.610637][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  448.619512][T17433] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  448.633344][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  448.662350][T17433] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  448.727984][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.829209][T17682] __nla_validate_parse: 66 callbacks suppressed
[  448.829230][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'.
[  448.858921][T17682] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2931'.
[  449.006386][T17433] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.045300][T17433] 8021q: adding VLAN 0 to HW filter on device team0
[  449.077158][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.084361][ T9572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.127821][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.135217][ T8857] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.174172][ T5642] Bluetooth: hci5: command tx timeout
[  449.179753][T17693] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2933'.
[  449.192973][T17693] tc_dump_action: action bad kind
[  449.266769][T17433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  449.277175][T17433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.846723][T17712] syzkaller0: entered promiscuous mode
[  449.960035][T17717] netdevsim netdevsim1: Direct firmware load for .® failed with error -2
[  449.983261][T17717] netdevsim netdevsim1: Falling back to sysfs fallback for: .®
[  450.023530][T17718] syz_tun: entered allmulticast mode
[  450.083211][T17720] ieee802154 phy1 wpan1: encryption failed: -22
[  450.095518][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'.
[  450.115960][T17720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2940'.
[  450.158937][T17720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2940'.
[  450.431265][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.552899][T17433] veth0_vlan: entered promiscuous mode
[  450.592236][T17433] veth1_vlan: entered promiscuous mode
[  450.634187][T17433] veth0_macvtap: entered promiscuous mode
[  450.643795][T17742] xt_hashlimit: size too large, truncated to 1048576
[  450.646160][T17433] veth1_macvtap: entered promiscuous mode
[  450.676511][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.721346][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.753785][ T9572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.833141][ T9572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.842063][T17715] syz_tun: left allmulticast mode
[  450.854686][ T9572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.875046][ T9572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.042960][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.050851][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.151612][ T8860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.159496][ T8860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.234805][ T5642] Bluetooth: hci5: command tx timeout
[  451.408297][T17766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.946938][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  451.958424][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  451.966819][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  451.984388][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  451.998285][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  452.278631][T17799] syzkaller1: tun_chr_ioctl cmd 1074025677
[  452.295257][T17799] syzkaller1: linktype set to 782
[  452.776630][T17785] lo speed is unknown, defaulting to 1000
[  453.186220][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'.
[  453.311523][T17785] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.318835][T17785] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.328015][T17785] bridge_slave_0: entered allmulticast mode
[  453.336451][T17785] bridge_slave_0: entered promiscuous mode
[  453.345943][T17785] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.353547][T17785] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.360816][T17785] bridge_slave_1: entered allmulticast mode
[  453.369544][T17785] bridge_slave_1: entered promiscuous mode
[  453.425052][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.438643][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.502135][T17785] team0: Port device team_slave_0 added
[  453.511418][T17785] team0: Port device team_slave_1 added
[  453.549384][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.556376][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.582303][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.625513][T17813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  453.693254][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.738857][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.787501][T17846] netlink: 'syz.4.2966': attribute type 1 has an invalid length.
[  453.804954][T17849] netlink: 'syz.0.2967': attribute type 1 has an invalid length.
[  453.812833][T17849] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2967'.
[  453.822405][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.855556][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'.
[  454.038031][T17785] hsr_slave_0: entered promiscuous mode
[  454.045044][T17785] hsr_slave_1: entered promiscuous mode
[  454.067169][T17785] debugfs: 'hsr0' already exists in 'hsr'
[  454.072965][T17785] Cannot create hsr debugfs directory
[  454.123839][ T5642] Bluetooth: hci1: command tx timeout
[  454.632447][T17873] netlink: 'syz.0.2971': attribute type 1 has an invalid length.
[  454.660174][T17873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2971'.
[  454.690675][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'.
[  454.711873][T17879] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001
[  454.719732][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'.
[  454.759029][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'.
[  454.771832][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'.
[  454.805906][T17883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2975'.
[  454.814795][T17879] 8021q: adding VLAN 0 to HW filter on device bond10
[  455.156753][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'.
[  455.243876][T17901] xt_hashlimit: size too large, truncated to 1048576
[  455.634402][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.641718][    C0] bridge0: topology change detected, propagating
[  456.204382][ T5642] Bluetooth: hci1: command tx timeout
[  456.342625][T17936] FAULT_INJECTION: forcing a failure.
[  456.342625][T17936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.355915][T17936] CPU: 1 UID: 0 PID: 17936 Comm: syz.3.2994 Not tainted syzkaller #0 PREEMPT(full) 
[  456.355943][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  456.355955][T17936] Call Trace:
[  456.355963][T17936]  <TASK>
[  456.355972][T17936]  dump_stack_lvl+0xe8/0x150
[  456.356009][T17936]  should_fail_ex+0x40c/0x560
[  456.356039][T17936]  _copy_from_user+0x2d/0xb0
[  456.356071][T17936]  do_sys_poll+0x258/0x1110
[  456.356105][T17936]  ? __lock_acquire+0x683/0x2cf0
[  456.356186][T17936]  ? __pfx_do_sys_poll+0x10/0x10
[  456.356209][T17936]  ? aa_file_perm+0x18b/0x15f0
[  456.356392][T17936]  ? ktime_get_ts64+0xa9/0x410
[  456.356460][T17936]  ? __pfx_timespec64_add_safe+0x10/0x10
[  456.356508][T17936]  __x64_sys_poll+0x190/0x360
[  456.356535][T17936]  ? __pfx___x64_sys_poll+0x10/0x10
[  456.356567][T17936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.356589][T17936]  do_syscall_64+0x174/0x580
[  456.356610][T17936]  ? trace_irq_disable+0x3b/0x140
[  456.356635][T17936]  ? clear_bhb_loop+0x40/0x90
[  456.356660][T17936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.356680][T17936] RIP: 0033:0x7fab0f59de99
[  456.356701][T17936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.356718][T17936] RSP: 002b:00007fab1053a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  456.356741][T17936] RAX: ffffffffffffffda RBX: 00007fab0f825fa0 RCX: 00007fab0f59de99
[  456.356756][T17936] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  456.356769][T17936] RBP: 00007fab1053a090 R08: 0000000000000000 R09: 0000000000000000
[  456.356781][T17936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.356793][T17936] R13: 00007fab0f826038 R14: 00007fab0f825fa0 R15: 00007ffcd56b6238
[  456.356826][T17936]  </TASK>
[  456.399259][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'.
[  456.619939][T17938] netlink: 'syz.4.2995': attribute type 29 has an invalid length.
[  456.627957][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'.
[  456.738356][T17926] veth0_macvtap: left promiscuous mode
[  456.758640][T17926] vlan4: left allmulticast mode
[  456.763523][T17926] bond0: left allmulticast mode
[  456.800676][T17926] bond17: left promiscuous mode
[  456.808700][T17926] bond17: left allmulticast mode
[  456.891842][   T35] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.917590][   T35] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.940357][   T35] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.969255][   T35] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.211146][T17948] lo speed is unknown, defaulting to 1000
[  457.629794][T17966] netlink: 'syz.4.3001': attribute type 12 has an invalid length.
[  457.897838][T17981] netlink: 'syz.3.3002': attribute type 1 has an invalid length.
[  457.912091][T17785] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  457.931246][T17785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.988091][T17785] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  458.026365][T17983] Bluetooth: MGMT ver 1.23
[  458.041202][T17785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  458.056868][T17983] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  458.082741][T17785] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  458.141839][T17785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  458.152183][T17785] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  458.178652][T17785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  458.229160][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  458.244690][T17986] siw: device registration error -23
[  458.283732][ T5642] Bluetooth: hci1: command tx timeout
[  458.579893][T17785] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.597314][T18010] syzkaller0: entered promiscuous mode
[  458.602860][T18010] syzkaller0: entered allmulticast mode
[  458.628141][T17785] 8021q: adding VLAN 0 to HW filter on device team0
[  458.637418][T18010] tipc: Started in network mode
[  458.643089][T18010] tipc: Node identity 5a0eca633682, cluster identity 4711
[  458.650801][T18010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.673521][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.680969][ T9575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.764800][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.772097][ T9575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.806778][T18010] tipc: Resetting bearer <eth:syzkaller0>
[  458.851464][T18010] tipc: Disabling bearer <eth:syzkaller0>
[  459.002378][T18026] __nla_validate_parse: 3 callbacks suppressed
[  459.002399][T18026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3016'.
[  459.819589][T18059] syzkaller1: entered promiscuous mode
[  459.825128][T18059] syzkaller1: entered allmulticast mode
[  460.297379][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.351203][T17785] veth0_vlan: entered promiscuous mode
[  460.363543][ T5642] Bluetooth: hci1: command tx timeout
[  460.463541][T17785] veth1_vlan: entered promiscuous mode
[  460.521306][T17785] veth0_macvtap: entered promiscuous mode
[  460.532934][T17785] veth1_macvtap: entered promiscuous mode
[  460.560841][T18081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3026'.
[  460.564686][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.612698][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.648158][ T8860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.667080][ T8860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.675855][ T8860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.684600][ T8860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.962238][ T8860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.992720][ T8860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.101400][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.119125][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.130048][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3030'.
[  461.140316][T18092] xt_TCPMSS: Only works on TCP SYN packets
[  461.325868][T18096] netlink: 'syz.2.3032': attribute type 1 has an invalid length.
[  461.351465][T18096] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3032'.
[  461.364557][T18097] lo speed is unknown, defaulting to 1000
[  461.372801][T18096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3032'.
[  461.730029][T18102] syzkaller0: entered promiscuous mode
[  461.743282][T18102] syzkaller0: entered allmulticast mode
[  461.962854][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  461.977307][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  461.987506][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  462.002044][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  462.014182][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  462.417090][T18123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3037'.
[  462.445778][ T5629] Bluetooth: hci1: command tx timeout
[  462.495871][T18131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3039'.
[  462.652853][T18131] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3039'.
[  462.686894][T18131] syzkaller0: entered promiscuous mode
[  462.692440][T18131] syzkaller0: entered allmulticast mode
[  462.752197][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'.
[  462.905830][   T29] audit: type=1800 audit(1784594421.123:13): pid=18142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3042" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2968 res=0 errno=0
[  462.945327][T18106] lo speed is unknown, defaulting to 1000
[  463.265615][ T5627] syz_tun (unregistering): left promiscuous mode
[  463.379855][T18150] lo speed is unknown, defaulting to 1000
[  463.957445][T18106] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.980157][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  463.980977][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  464.000995][T18106] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.008334][T18106] bridge_slave_0: entered allmulticast mode
[  464.016660][T18106] bridge_slave_0: entered promiscuous mode
[  464.035283][ T5629] Bluetooth: hci4: command tx timeout
[  464.057556][T18106] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.064768][T18106] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.072017][T18106] bridge_slave_1: entered allmulticast mode
[  464.215072][T18106] bridge_slave_1: entered promiscuous mode
[  464.373119][T18106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.468295][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.479199][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.505088][T18106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.561774][T18181] syzkaller0: entered promiscuous mode
[  464.567311][T18181] syzkaller0: entered allmulticast mode
[  464.592849][T18106] team0: Port device team_slave_0 added
[  464.602966][T18106] team0: Port device team_slave_1 added
[  464.690000][T18106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.697125][T18106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.725689][T18106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.739014][T18106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.746921][T18106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.774595][T18106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.843036][T18106] hsr_slave_0: entered promiscuous mode
[  464.851167][T18106] hsr_slave_1: entered promiscuous mode
[  464.858027][T18106] debugfs: 'hsr0' already exists in 'hsr'
[  464.864756][T18106] Cannot create hsr debugfs directory
[  464.996119][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.009112][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.270554][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'.
[  465.455166][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'.
[  465.464385][T18196] tc_dump_action: action bad kind
[  465.606561][T18200] netlink: 'syz.3.3058': attribute type 10 has an invalid length.
[  465.620152][T18200] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  465.629627][T18200] team0: Port device netdevsim1 added
[  465.637698][T18200] netlink: 'syz.3.3058': attribute type 10 has an invalid length.
[  465.836941][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.856448][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.104217][ T5629] Bluetooth: hci4: command tx timeout
[  466.206494][T18221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3064'.
[  466.232281][T18221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.489302][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  466.550611][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.575497][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.598441][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'.
[  466.725913][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  466.978536][T18243] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3072'.
[  466.988166][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'.
[  467.002401][T18245] netlink: 'syz.3.3074': attribute type 1 has an invalid length.
[  467.055265][T18245] 8021q: adding VLAN 0 to HW filter on device bond1
[  467.141822][T18245] bond1: (slave veth0_to_bond): making interface the new active one
[  467.151702][T18245] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  467.316952][T18249] netlink: 'syz.3.3074': attribute type 1 has an invalid length.
[  467.337476][   T49] bond7: left allmulticast mode
[  467.346748][   T49] bond7: left promiscuous mode
[  467.355705][   T49] bridge0: port 2(bond7) entered disabled state
[  467.366174][   T49] bridge_slave_0: left allmulticast mode
[  467.379003][   T49] bridge_slave_0: left promiscuous mode
[  467.385106][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.411663][   T49] pimreg9: left allmulticast mode
[  467.789791][   T49] bond9 (unregistering): (slave ipip2): Releasing backup interface
[  467.842357][   T49] team0: Port device bridge4 removed
[  467.888669][   T49] bond1 (unregistering): Released all slaves
[  467.902600][   T49] bond2 (unregistering): Released all slaves
[  467.916731][   T49] bond3 (unregistering): Released all slaves
[  467.930705][   T49] bond4 (unregistering): Released all slaves
[  467.944487][   T49] bond5 (unregistering): Released all slaves
[  467.970104][   T49] bond6 (unregistering): Released all slaves
[  467.984300][   T49] bond7 (unregistering): Released all slaves
[  468.009645][   T49] bond0 (unregistering): (slave bond8): Releasing backup interface
[  468.019251][   T49] bond0 (unregistering): Released all slaves
[  468.033163][   T49] bond8 (unregistering): Released all slaves
[  468.046957][   T49] bond9 (unregistering): Released all slaves
[  468.080873][   T49] bond10 (unregistering): Released all slaves
[  468.183441][ T5629] Bluetooth: hci4: command tx timeout
[  468.359560][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'.
[  468.604305][   T49] tipc: Disabling bearer <udp:syz2>
[  468.644779][   T49] tipc: Left network mode
[  468.878101][T18298] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  469.494601][T18316] syzkaller0: entered promiscuous mode
[  469.508360][T18316] syzkaller0: entered allmulticast mode
[  469.849155][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  470.030515][T18340] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.038649][T18340] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.048807][T18340] bridge0: entered allmulticast mode
[  470.157965][T18344] openvswitch: netlink: Missing valid actions attribute.
[  470.165436][T18344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.294027][ T5629] Bluetooth: hci4: command tx timeout
[  470.451383][T18362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3101'.
[  470.462405][T18362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3101'.
[  470.899180][T18383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'.
[  471.069560][T18390] lo speed is unknown, defaulting to 1000
[  471.982526][T18106] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  472.021756][T18106] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  472.033012][T18106] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  472.047430][T18106] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.055917][T18106] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  472.092181][T18106] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  472.115675][T18106] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  472.130194][T18106] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  473.469250][T18106] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.516059][T18106] 8021q: adding VLAN 0 to HW filter on device team0
[  473.527457][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3119'.
[  473.582531][T18478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3118'.
[  473.617144][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.624342][ T9577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.640216][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.645466][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3120'.
[  473.647456][ T9577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.919433][   T49] hsr_slave_0: left promiscuous mode
[  473.930968][   T49] hsr_slave_1: left promiscuous mode
[  473.940621][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.960064][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.976876][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.985522][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.196229][   T49] veth0_macvtap: left promiscuous mode
[  474.202030][   T49] veth1_vlan: left promiscuous mode
[  474.209653][   T49] veth0_vlan: left promiscuous mode
[  474.251190][T18506] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3122'.
[  474.631253][   T49] team0 (unregistering): Port device 
7
6žÿ removed
[  474.665220][   T49] team0 (unregistering): Port device team_slave_0 removed
[  474.830956][T18510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3122'.
[  475.009736][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'.
[  475.196696][T18524] syzkaller0: entered promiscuous mode
[  475.213246][T18524] syzkaller0: entered allmulticast mode
[  475.671209][   T49] IPVS: stop unused estimator thread 0...
[  475.810087][T18545] pimreg9: entered allmulticast mode
[  475.885771][T18548] --map-set only usable from mangle table
[  476.035867][T18106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.427969][T18567] netlink: 'syz.3.3139': attribute type 9 has an invalid length.
[  476.637257][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'.
[  476.962857][T18106] veth0_vlan: entered promiscuous mode
[  476.987850][T18595] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.3144'.
[  476.988313][T18106] veth1_vlan: entered promiscuous mode
[  477.023983][T18595] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3144'.
[  477.049737][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'.
[  477.113779][T18601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3146'.
[  477.128998][T18106] veth0_macvtap: entered promiscuous mode
[  477.166372][T18106] veth1_macvtap: entered promiscuous mode
[  477.240406][T18106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.272739][T18106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.315289][ T9577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.335773][ T9577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.355651][ T9577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.365640][ T9577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.588088][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.612506][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.718915][T18617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3152'.
[  477.739516][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.748302][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3152'.
[  477.764800][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.798760][T18618] syzkaller1: entered promiscuous mode
[  477.819389][T18618] syzkaller1: entered allmulticast mode
[  477.916556][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'.
[  477.941069][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3154'.
[  477.965119][ T6435] IPVS: starting estimator thread 0...
[  477.979862][T18626] IPVS: nq: FWM 3 0x00000003 - no destination available
[  477.988772][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3154'.
[  478.063403][T18629] IPVS: using max 26 ests per chain, 62400 per kthread
[  478.200513][T18639] syzkaller0: entered promiscuous mode
[  478.219279][T18639] syzkaller0: entered allmulticast mode
[  478.547112][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  478.566926][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  478.585841][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  478.599270][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  478.608831][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  478.705574][T18657] openvswitch: netlink: Flow actions attr not present in new flow.
[  478.892773][ T6435] IPVS: starting estimator thread 0...
[  478.993785][T18667] IPVS: using max 27 ests per chain, 64800 per kthread
[  479.084773][T18670] netlink: 'syz.3.3164': attribute type 4 has an invalid length.
[  479.135516][T18669] netlink: 'syz.3.3164': attribute type 4 has an invalid length.
[  479.455234][T18691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.545432][T18691] team0: Device xfrm0 is of different type
[  479.573424][T18681] syzkaller1: entered promiscuous mode
[  479.598056][T18681] syzkaller1: entered allmulticast mode
[  479.886034][T18648] lo speed is unknown, defaulting to 1000
[  480.654529][ T5642] Bluetooth: hci3: command tx timeout
[  481.052875][T18752] IPv6: addrconf: prefix option has invalid lifetime
[  481.278571][T18752] veth11: entered allmulticast mode
[  481.322148][T18752] bond14: (slave veth11): Enslaving as an active interface with an up link
[  481.455156][T18744] bond14 (unregistering): (slave veth11): Releasing backup interface
[  481.475340][T18744] bond14 (unregistering): Released all slaves
[  481.513825][T18648] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.521567][T18648] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.529546][T18648] bridge_slave_0: entered allmulticast mode
[  481.560324][T18648] bridge_slave_0: entered promiscuous mode
[  481.615761][T18648] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.662730][T18648] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.699065][T18648] bridge_slave_1: entered allmulticast mode
[  481.726565][T18648] bridge_slave_1: entered promiscuous mode
[  481.955761][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.016837][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.266791][T18784] Cannot find del_set index 0 as target
[  482.518983][T18648] team0: Port device team_slave_0 added
[  482.732010][   T49] vlan5: left allmulticast mode
[  482.737701][ T5642] Bluetooth: hci3: command tx timeout
[  482.754998][   T49] geneve0: left allmulticast mode
[  482.770512][   T49] vlan5: left promiscuous mode
[  482.775624][   T49] geneve0: left promiscuous mode
[  482.783731][   T49] bridge0: port 1(vlan5) entered disabled state
[  482.801037][   T49] pim6reg: left allmulticast mode
[  482.817893][   T49] pimreg9: left allmulticast mode
[  483.309390][T18820] netlink: 'syz.4.3198': attribute type 1 has an invalid length.
[  483.323352][T18820] __nla_validate_parse: 15 callbacks suppressed
[  483.323373][T18820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3198'.
[  483.759261][   T49] bond7 (unregistering): (slave geneve4): Releasing active interface
[  483.780064][   T49] bond1 (unregistering): (slave geneve3): Releasing active interface
[  483.834053][   T49] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  483.882037][   T49] bond0 (unregistering): Released all slaves
[  483.902752][   T49] bond1 (unregistering): Released all slaves
[  483.917628][   T49] bond2 (unregistering): Released all slaves
[  483.932189][   T49] bond3 (unregistering): Released all slaves
[  483.960004][   T49] bond4 (unregistering): Released all slaves
[  483.978901][   T49] bond5 (unregistering): Released all slaves
[  483.993238][   T49] bond6 (unregistering): Released all slaves
[  484.018163][   T49] bond7 (unregistering): Released all slaves
[  484.032285][   T49] bond8 (unregistering): Released all slaves
[  484.054410][   T49] bond9 (unregistering): Released all slaves
[  484.070128][   T49] bond10 (unregistering): Released all slaves
[  484.088203][   T49] bond11 (unregistering): Released all slaves
[  484.104143][   T49] bond12 (unregistering): Released all slaves
[  484.119722][   T49] bond13 (unregistering): (slave veth3): Releasing active interface
[  484.128629][   T49] bond13 (unregistering): Released all slaves
[  484.144416][   T49] bond14 (unregistering): Released all slaves
[  484.162284][   T49] bond15 (unregistering): Released all slaves
[  484.189481][   T49] bond16 (unregistering): (slave veth5): Releasing active interface
[  484.198993][   T49] bond16 (unregistering): (slave veth7): Releasing active interface
[  484.209652][   T49] bond16 (unregistering): Released all slaves
[  484.226881][   T49] bond17 (unregistering): Released all slaves
[  484.282220][T18648] team0: Port device team_slave_1 added
[  484.384735][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  484.419356][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  484.581347][T18837] netlink: 'syz.2.3201': attribute type 9 has an invalid length.
[  484.592318][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.617531][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.646319][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.689415][   T49] : left promiscuous mode
[  484.832068][ T5642] Bluetooth: hci3: command tx timeout
[  484.899722][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.914916][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.950208][T18847] netlink: 'syz.4.3204': attribute type 10 has an invalid length.
[  484.959585][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.965702][T18837] netlink: 'syz.2.3201': attribute type 9 has an invalid length.
[  484.990290][   T49] tipc: Left network mode
[  485.107998][T18847] team0: Device vxcan1 is of different type
[  485.113944][T18837] netlink: 'syz.2.3201': attribute type 9 has an invalid length.
[  485.346292][T18837] netlink: 'syz.2.3201': attribute type 9 has an invalid length.
[  485.391194][   T49] IPVS: stopping master sync thread 17182 ...
[  485.431864][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3206'.
[  485.565530][T18648] hsr_slave_0: entered promiscuous mode
[  485.610632][T18648] hsr_slave_1: entered promiscuous mode
[  485.920089][T18881] netlink: 'syz.3.3209': attribute type 27 has an invalid length.
[  486.069366][T18878] bond2 (unregistering): Released all slaves
[  486.544951][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2
[  486.575501][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3218'.
[  486.895438][ T5642] Bluetooth: hci3: command tx timeout
[  486.928725][T18919] tun0: tun_chr_ioctl cmd 1074025675
[  486.946179][T18919] tun0: persist enabled
[  486.996300][T18922] tun0: tun_chr_ioctl cmd 1074025675
[  487.011976][T18922] tun0: persist disabled
[  487.034563][T18919] tun0: tun_chr_ioctl cmd 1074025673
[  487.535864][   T49] hsr_slave_0: left promiscuous mode
[  487.556618][   T49] hsr_slave_1: left promiscuous mode
[  487.682884][   T49] team0 (unregistering): Port device batadv0 removed
[  488.529656][T18960] netlink: 'syz.4.3226': attribute type 12 has an invalid length.
[  488.541239][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3
[  488.765552][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  488.821193][T18974] bridge0: left allmulticast mode
[  489.141730][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'.
[  490.020418][T19010] team0: Device vlan0 failed to change mtu
[  490.044158][ T6453] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  490.086445][T19013] netlink: 'syz.2.3236': attribute type 1 has an invalid length.
[  490.124866][T19013] netlink: 'syz.2.3236': attribute type 2 has an invalid length.
[  490.217038][   T49] IPVS: stop unused estimator thread 0...
[  490.336973][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  490.471350][T19043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3243'.
[  490.745642][T19042] ipip0: entered promiscuous mode
[  490.761495][T19042] ipip0: entered allmulticast mode
[  490.922127][ T6435] bridge0: entered promiscuous mode
[  491.098678][T18648] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  491.140089][T18648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.237998][T18648] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  491.281873][T18648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.299947][T18648] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  491.335917][T18648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  491.360568][T19084] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3251'.
[  491.386331][T18648] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  491.431837][T18648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  491.450745][T19087] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3253'.
[  491.495507][T19087] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3253'.
[  491.765138][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3258'.
[  491.849306][T18648] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.946465][T18648] 8021q: adding VLAN 0 to HW filter on device team0
[  492.021938][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.029213][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.077916][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.085193][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.557608][T19154] tap0: tun_chr_ioctl cmd 1074025677
[  492.574747][T19154] tap0: linktype set to 780
[  492.662095][T19149] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3266'.
[  492.740803][T19158] batman_adv: batadv0: Adding interface: macvtap1
[  492.766689][T19158] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.800145][T19158] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  493.031895][T19168] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  493.052144][T19168] bond14 (unregistering): Released all slaves
[  493.162341][T19173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3273'.
[  493.407830][T19188] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3275'.
[  493.448571][T19188] gretap0: entered promiscuous mode
[  494.157072][T19224] gretap0: entered promiscuous mode
[  494.352224][T19224] __nla_validate_parse: 1 callbacks suppressed
[  494.352245][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'.
[  494.389724][T18648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.889874][T19246] syzkaller0: entered promiscuous mode
[  494.911450][T19246] syzkaller0: entered allmulticast mode
[  494.968957][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'.
[  494.997316][T19253] netlink: 'syz.4.3287': attribute type 27 has an invalid length.
[  497.600082][T18648] veth0_vlan: entered promiscuous mode
[  497.772271][T18648] veth1_vlan: entered promiscuous mode
[  497.791304][T19266] netlink: 'syz.2.3290': attribute type 13 has an invalid length.
[  497.858339][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  497.860290][T19270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3290'.
[  497.924617][ T1235] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  498.094262][ T6437] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  498.287240][ T6435] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  498.316780][T19270] bond0: (slave bond_slave_0): Releasing backup interface
[  498.449957][T19270] bond_slave_0: entered promiscuous mode
[  498.470735][T19270] bond_slave_0: entered allmulticast mode
[  498.524714][ T6435] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  498.552745][T19283] tipc: Started in network mode
[  498.576319][T19283] tipc: Node identity 1aa618e75889, cluster identity 4711
[  498.597040][T19283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.621294][T19285] syzkaller0: entered promiscuous mode
[  498.655319][T19285] syzkaller0: entered allmulticast mode
[  498.736358][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  498.749664][T19280] tipc: Resetting bearer <eth:syzkaller0>
[  498.809718][T19313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3295'.
[  498.810959][T19273] tipc: Resetting bearer <eth:syzkaller0>
[  498.910519][ T6435] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  498.985211][T19273] tipc: Disabling bearer <eth:syzkaller0>
[  498.998687][T19322] netlink: 'syz.1.3296': attribute type 1 has an invalid length.
[  499.024816][T19322] netlink: 'syz.1.3296': attribute type 2 has an invalid length.
[  499.042952][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3296'.
[  499.133914][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  499.161981][T18648] veth0_macvtap: entered promiscuous mode
[  499.198336][T18648] veth1_macvtap: entered promiscuous mode
[  499.279562][T18648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.346051][T18648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.405950][ T8862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.434811][ T9572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.491930][ T9572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.531672][ T9572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.605936][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3300'.
[  499.673820][T19333] IPVS: nq: FWM 3 0x00000003 - no destination available
[  500.293928][T19344] netlink: 'syz.2.3300': attribute type 1 has an invalid length.
[  500.305672][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'.
[  500.527906][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.566572][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.686456][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.725918][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.479113][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  501.492173][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  501.504899][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  501.515422][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  501.527018][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  501.698528][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  501.952336][T19414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'.
[  502.177383][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'.
[  503.030504][ T8862] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.080777][ T8862] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.150870][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'.
[  503.179804][T19454] netlink: 'syz.4.3323': attribute type 11 has an invalid length.
[  503.222861][T19454] netlink: 'syz.4.3323': attribute type 3 has an invalid length.
[  503.330483][T19457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3324'.
[  503.363995][T19399] lo speed is unknown, defaulting to 1000
[  503.463692][T19457] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  503.485045][ T6437] IPVS: starting estimator thread 0...
[  503.521074][ T8862] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.562383][ T8862] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.614335][T19460] IPVS: using max 26 ests per chain, 62400 per kthread
[  503.614442][ T5642] Bluetooth: hci2: command tx timeout
[  503.770606][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3327'.
[  503.882651][ T8862] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.913185][ T8862] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.164105][ T8862] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.201830][ T8862] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.218858][T19489] netlink: 'syz.0.3331': attribute type 1 has an invalid length.
[  504.518151][T19487] syzkaller0: entered promiscuous mode
[  504.533282][T19487] syzkaller0: entered allmulticast mode
[  504.660607][T19487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.748460][T19508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'.
[  504.821768][T19487] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  504.888915][T19492] tipc: Resetting bearer <eth:syzkaller0>
[  505.075481][T19486] tipc: Resetting bearer <eth:syzkaller0>
[  505.157625][T19486] tipc: Disabling bearer <eth:syzkaller0>
[  505.619112][ T8862] pimreg: left allmulticast mode
[  505.696658][ T5642] Bluetooth: hci2: command tx timeout
[  506.111994][ T8862] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  506.139717][T19542] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3341'.
[  506.149918][ T8862] bond13 (unregistering): (slave gretap2): Releasing active interface
[  506.211403][ T8862] team0: Port device bridge3 removed
[  506.272979][ T8862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.291385][ T8862] bond0 (unregistering): (slave team0): Releasing backup interface
[  506.301281][ T8862] bond0 (unregistering): Released all slaves
[  506.312273][ T8862] bond1 (unregistering): Released all slaves
[  506.331352][ T8862] bond2 (unregistering): Released all slaves
[  506.351289][ T8862] bond3 (unregistering): Released all slaves
[  506.366555][ T8862] bond4 (unregistering): Released all slaves
[  506.385619][ T8862] bond5 (unregistering): (slave dummy0): Releasing active interface
[  506.408838][ T8862] bond5 (unregistering): Released all slaves
[  506.427835][ T8862] bond6 (unregistering): Released all slaves
[  506.442668][ T8862] bond7 (unregistering): Released all slaves
[  506.458351][ T8862] bond8 (unregistering): Released all slaves
[  506.481102][ T8862] bond9 (unregistering): Released all slaves
[  506.500025][ T8862] bond10 (unregistering): Released all slaves
[  506.521244][ T8862] bond11 (unregistering): Released all slaves
[  506.538388][ T8862] bond12 (unregistering): (slave veth7): Releasing active interface
[  506.554226][ T8862] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface
[  506.564545][ T8862] bond12 (unregistering): Released all slaves
[  506.581335][ T8862] bond13 (unregistering): Released all slaves
[  506.784774][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'.
[  506.813318][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'.
[  506.856992][T19544] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3342'.
[  506.902906][ T8862] tipc: Left network mode
[  506.944773][T19550] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  507.325252][T19565] netlink: 'syz.1.3347': attribute type 21 has an invalid length.
[  507.340762][T19565] IPv6: NLM_F_CREATE should be specified when creating new route
[  507.364604][T19399] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.373026][T19399] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.381057][T19399] bridge_slave_0: entered allmulticast mode
[  507.390085][T19399] bridge_slave_0: entered promiscuous mode
[  507.399766][T19399] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.408595][T19399] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.418186][T19399] bridge_slave_1: entered allmulticast mode
[  507.429112][T19399] bridge_slave_1: entered promiscuous mode
[  507.436962][T19565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3347'.
[  507.460096][T19565] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3347'.
[  507.584447][ T8862] hsr_slave_0: left promiscuous mode
[  507.591458][ T8862] hsr_slave_1: left promiscuous mode
[  507.602224][ T8862] veth0_to_team: left promiscuous mode
[  507.610665][ T8862] veth1_vlan: left promiscuous mode
[  507.616419][ T8862] veth0_vlan: left promiscuous mode
[  507.773693][ T5642] Bluetooth: hci2: command tx timeout
[  507.922572][ T8862] team0 (unregistering): Port device vlan0 removed
[  508.053952][ T8862] team0 (unregistering): Port device team_slave_1 removed
[  508.070901][ T8862] team0 (unregistering): Port device team_slave_0 removed
[  508.098979][T19524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  508.414994][T19399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.430263][T19399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.453984][T19571] syzkaller1: entered promiscuous mode
[  508.472971][T19571] syzkaller1: entered allmulticast mode
[  508.503635][ T9572] smbdirect: ib_dev[syz2] removed
[  508.531320][ T1235] lo speed is unknown, defaulting to 1000
[  508.540276][ T1235] syz2: Port: 1 Link DOWN
[  508.725381][T19399] team0: Port device team_slave_0 added
[  508.770855][T19399] team0: Port device team_slave_1 added
[  508.976817][T19399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.013651][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.083309][T19399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.112523][T19399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.140913][T19614] netlink: 'syz.1.3359': attribute type 58 has an invalid length.
[  509.146974][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.161191][T19616] netlink: 'syz.0.3358': attribute type 9 has an invalid length.
[  509.183824][T19399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.194313][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3359'.
[  509.412567][T19625] syzkaller0: entered promiscuous mode
[  509.422022][T19625] syzkaller0: entered allmulticast mode
[  509.496190][T19399] hsr_slave_0: entered promiscuous mode
[  509.503942][T19399] hsr_slave_1: entered promiscuous mode
[  509.518481][T19399] debugfs: 'hsr0' already exists in 'hsr'
[  509.535630][T19399] Cannot create hsr debugfs directory
[  509.847955][T19631] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3362'.
[  509.858486][ T5642] Bluetooth: hci2: command tx timeout
[  509.960011][ T8862] IPVS: stop unused estimator thread 0...
[  510.060083][T19635] syzkaller0: entered promiscuous mode
[  510.076482][T19635] syzkaller0: entered allmulticast mode
[  510.601869][T19660] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20002
[  510.807011][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3369'.
[  511.069605][T19665] bond1: entered promiscuous mode
[  511.089286][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  511.418063][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'.
[  511.427579][T19692] netlink: 'syz.3.3375': attribute type 10 has an invalid length.
[  511.465769][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3375'.
[  511.886463][T19711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3376'.
[  512.618650][T19731] SET target dimension over the limit!
[  512.922136][T19399] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  512.971408][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  513.011587][T19742] hsr0: entered allmulticast mode
[  513.032909][T19742] hsr_slave_0: entered allmulticast mode
[  513.053062][T19742] hsr_slave_1: entered allmulticast mode
[  513.107736][T19399] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  513.168424][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  513.179780][T19399] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  513.202203][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  513.242096][T19737] hsr0: left allmulticast mode
[  513.249463][T19737] hsr_slave_0: left allmulticast mode
[  513.256911][T19737] hsr_slave_1: left allmulticast mode
[  513.264023][T19399] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  513.298501][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  513.769906][T19776] syzkaller0: entered promiscuous mode
[  513.777595][T19776] syzkaller0: entered allmulticast mode
[  513.837665][T19399] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.988457][T19399] 8021q: adding VLAN 0 to HW filter on device team0
[  514.075175][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.082533][ T8857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.192480][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.199804][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.407882][T19399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.309872][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3390'.
[  515.343465][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3390'.
[  515.350650][T19823] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  515.449056][T19826] batman_adv: batadv0: Adding interface: macsec1
[  515.464204][T19826] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  515.528590][T19826] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  515.903728][T19399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.908803][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'.
[  515.932990][T19844] xt_hashlimit: size too large, truncated to 1048576
[  515.949057][T19842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3393'.
[  516.259131][T19399] veth0_vlan: entered promiscuous mode
[  516.297668][T19851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3395'.
[  516.302412][T19399] veth1_vlan: entered promiscuous mode
[  516.440094][T19399] veth0_macvtap: entered promiscuous mode
[  516.461445][T19399] veth1_macvtap: entered promiscuous mode
[  516.498553][T19861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'.
[  516.511510][T19858] IPv6: sit2: Disabled Multicast RS
[  516.519088][T19861] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3398'.
[  516.531537][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'.
[  516.616636][T19399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.672166][T19399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.715661][ T9577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.752921][ T9577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.776196][ T9577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.816483][ T9577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.872793][T19871] bridge_slave_1: left allmulticast mode
[  516.881162][T19871] bridge_slave_1: left promiscuous mode
[  516.890478][T19871] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.895686][T19876] netlink: 'syz.1.3401': attribute type 1 has an invalid length.
[  516.912232][T19871] bridge_slave_0: left allmulticast mode
[  516.930091][T19871] bridge_slave_0: left promiscuous mode
[  516.945981][T19871] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.955218][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'.
[  517.042902][T19876] bond2: entered promiscuous mode
[  517.048606][T19876] 8021q: adding VLAN 0 to HW filter on device bond2
[  517.316444][ T8857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.349663][ T8857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.496109][T19889] netlink: 'syz.1.3405': attribute type 11 has an invalid length.
[  517.515692][ T9575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.548801][ T9575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.585927][T19894] syzkaller0: entered promiscuous mode
[  517.593005][T19895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3407'.
[  517.621645][T19894] syzkaller0: entered allmulticast mode
[  518.148060][T19910] syzkaller0: entered promiscuous mode
[  518.179265][T19910] syzkaller0: entered allmulticast mode
[  518.599508][T19943] netlink: 'syz.0.3417': attribute type 1 has an invalid length.
[  518.751499][T19952] IPVS: length: 242 != 8
[  518.757705][T19950] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  519.167428][T19966] openvswitch: netlink: Actions may not be safe on all matching packets
[  519.825533][T20001] netlink: 'syz.3.3434': attribute type 2 has an invalid length.
[  520.122803][T20003] erspan0: entered promiscuous mode
[  520.129334][T20003] erspan0: entered allmulticast mode
[  520.632782][T20035] __nla_validate_parse: 6 callbacks suppressed
[  520.632805][T20035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3441'.
[  520.689037][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3441'.
[  521.099566][T20041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  521.150209][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'.
[  521.199707][T20055] openvswitch: netlink: IP tunnel dst address not specified
[  521.221606][T20055] syzkaller1: entered promiscuous mode
[  521.230940][T20055] syzkaller1: entered allmulticast mode
[  521.635726][T20075] netlink: ct family unspecified
[  521.644001][T20075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.755051][T20080] netlink: 'syz.1.3454': attribute type 1 has an invalid length.
[  521.905885][T20080] bond3: option mode: invalid value (7)
[  521.965678][T20094] netlink: 'syz.1.3454': attribute type 10 has an invalid length.
[  521.980140][T20094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3454'.
[  521.991418][T20080] bond3 (unregistering): Released all slaves
[  522.046203][T20094] dummy0: entered promiscuous mode
[  522.798314][T20137] syzkaller0: entered promiscuous mode
[  522.804423][T20137] syzkaller0: entered allmulticast mode
[  523.142900][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'.
[  523.161302][T20153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3474'.
[  523.175912][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3472'.
[  523.188598][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'.
[  523.970502][T20177] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3481'.
[  524.048851][T20181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3483'.
[  525.067409][T20220] 8021q: adding VLAN 0 to HW filter on device bond1
[  525.496371][T20207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  525.904882][T20258] __nla_validate_parse: 7 callbacks suppressed
[  525.904903][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3505'.
[  525.979923][T20258] IPv6: NLM_F_REPLACE set, but no existing node found!
[  526.194009][T20273] xt_hashlimit: size too large, truncated to 1048576
[  526.449259][T20284] netlink: 'syz.1.3512': attribute type 21 has an invalid length.
[  526.466443][T20284] netlink: 'syz.1.3512': attribute type 22 has an invalid length.
[  526.475083][T20284] netlink: 'syz.1.3512': attribute type 23 has an invalid length.
[  526.484300][T20284] netlink: 'syz.1.3512': attribute type 25 has an invalid length.
[  526.492796][T20284] netlink: 'syz.1.3512': attribute type 26 has an invalid length.
[  526.502918][T20284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'.
[  526.945866][T20291] syzkaller1: tun_chr_ioctl cmd 1074025677
[  526.966517][T20291] syzkaller1: linktype set to 272
[  527.222565][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3517'.
[  527.883866][T20329] netlink: 'syz.1.3524': attribute type 1 has an invalid length.
[  527.900916][T20325] xt_CT: No such helper "netbios-ns"
[  527.956802][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'.
[  527.958589][T20329] 8021q: adding VLAN 0 to HW filter on device bond3
[  527.991373][T20332] bond3: (slave geneve2): making interface the new active one
[  528.002827][T20332] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  528.102097][T20334] Cannot find add_set index 2 as target
[  528.630526][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3529'.
[  528.676656][T20351] batman_adv: batadv0: Removing interface: macsec1
[  528.739510][T20351] team0: Port device team_slave_0 removed
[  529.058682][T20366] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3532'.
[  529.382082][T20373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3534'.
[  529.407408][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'.
[  529.726033][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'.
[  529.850033][T20398] sctp: [Deprecated]: syz.0.3541 (pid 20398) Use of int in max_burst socket option.
[  529.850033][T20398] Use struct sctp_assoc_value instead
[  529.893033][T20399] gretap0: entered promiscuous mode
[  529.918573][T20399] vlan2: entered promiscuous mode
[  530.010811][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'.
[  530.330129][T20419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.428175][T20421] nbd5: detected capacity change from 0 to 63
[  530.469870][ T5642] block nbd5: Receive control failed (result -32)
[  530.471804][T20430] xt_l2tp: v2 sid > 0xffff: 4294967294
[  530.481212][   T11] block nbd5: Send control failed (result -32)
[  530.503457][   T11] block nbd5: Request send failed, requeueing
[  530.528968][   T11] block nbd5: Dead connection, failed to find a fallback
[  530.539829][   T11] block nbd5: shutting down sockets
[  530.549678][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  530.560415][   T11] Buffer I/O error on dev nbd5, logical block 0, async page read
[  530.570099][ T4953] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  530.590165][ T4953] Buffer I/O error on dev nbd5, logical block 1, async page read
[  530.607311][ T4953] Buffer I/O error on dev nbd5, logical block 2, async page read
[  530.622090][ T4953] Buffer I/O error on dev nbd5, logical block 3, async page read
[  530.635790][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.645002][   T11] Buffer I/O error on dev nbd5, logical block 0, async page read
[  530.652993][   T11] Buffer I/O error on dev nbd5, logical block 1, async page read
[  530.661505][   T11] Buffer I/O error on dev nbd5, logical block 2, async page read
[  530.670585][   T11] Buffer I/O error on dev nbd5, logical block 3, async page read
[  530.681400][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.690958][   T11] Buffer I/O error on dev nbd5, logical block 0, async page read
[  530.699471][   T11] Buffer I/O error on dev nbd5, logical block 1, async page read
[  530.712605][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.722418][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.732558][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.742932][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.754030][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  530.764922][T19274] ldm_validate_partition_table(): Disk read failed.
[  530.767020][T20435] xt_hashlimit: size too large, truncated to 1048576
[  530.772691][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  530.791469][T19274] Dev nbd5: unable to read RDB block 0
[  530.806387][T19274]  nbd5: unable to read partition table
[  530.829657][T19274] ldm_validate_partition_table(): Disk read failed.
[  530.840344][T19274] Dev nbd5: unable to read RDB block 0
[  530.852291][T19274]  nbd5: unable to read partition table
[  530.922448][T20438] __nla_validate_parse: 2 callbacks suppressed
[  530.922469][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'.
[  531.042329][T20445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.132383][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'.
[  531.142872][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'.
[  533.912892][T20438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  533.938656][T20463] netlink: 'syz.4.3554': attribute type 1 has an invalid length.
[  533.974567][T20463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3554'.
[  534.021577][T20463] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  534.241908][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'.
[  534.268485][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'.
[  534.339206][T20500] tipc: Started in network mode
[  534.374565][T20500] tipc: Node identity f6b2e1885952, cluster identity 4711
[  534.393529][T20500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.450946][T20509] syzkaller0: entered promiscuous mode
[  534.463182][T20509] syzkaller0: entered allmulticast mode
[  534.486247][T20500] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  534.550831][T20500] tipc: Resetting bearer <eth:syzkaller0>
[  534.570267][T20495] tipc: Resetting bearer <eth:syzkaller0>
[  534.617448][T20495] tipc: Disabling bearer <eth:syzkaller0>
[  534.643718][T20515] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3563'.
[  534.668731][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  534.672920][T20519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  534.686767][T20519] IPv6: NLM_F_CREATE should be set when creating new route
[  534.692477][T20515] openvswitch: netlink: Flow key attribute not present in set flow.
[  534.694240][T20519] IPv6: NLM_F_CREATE should be set when creating new route
[  534.714401][T20517] netlink: 'syz.4.3565': attribute type 13 has an invalid length.
[  535.284512][T20517] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.292348][T20517] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.591083][T20517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.609916][T20517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.167141][T20527] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  536.226505][ T1032] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.250583][ T1032] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.331314][ T1032] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.366173][ T1032] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.581986][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'.
[  536.665199][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'.
[  536.687401][T20603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3577'.
[  537.118120][T20626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3586'.
[  537.331428][T20637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3590'.
[  537.566595][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'.
[  537.571208][T20656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.864039][T20665] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3595'.
[  537.915628][T20670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3595'.
[  538.164373][T20643] syzkaller1: entered promiscuous mode
[  538.185684][T20643] syzkaller1: entered allmulticast mode
[  538.702603][T20708] gretap0: left promiscuous mode
[  539.106252][T20710] dvmrp0: entered allmulticast mode
[  539.333531][T20727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3611'.
[  539.379939][T20725] geneve2: entered promiscuous mode
[  539.393389][T20703] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  539.420323][T20703] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  539.488791][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'.
[  539.786649][T20752] 
[  539.789142][T20752] ======================================================
[  539.796463][T20752] WARNING: possible circular locking dependency detected
[  539.803507][T20752] syzkaller #0 Not tainted
[  539.808052][T20752] ------------------------------------------------------
[  539.815189][T20752] syz.4.3616/20752 is trying to acquire lock:
[  539.821807][T20752] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650
[  539.831055][T20752] 
[  539.831055][T20752] but task is already holding lock:
[  539.838460][T20752] ffff888035b75038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  539.848096][T20752] 
[  539.848096][T20752] which lock already depends on the new lock.
[  539.848096][T20752] 
[  539.858619][T20752] 
[  539.858619][T20752] the existing dependency chain (in reverse order) is:
[  539.867661][T20752] 
[  539.867661][T20752] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  539.875442][T20752]        __might_fault+0xcb/0x130
[  539.880521][T20752]        _copy_from_user+0x28/0xb0
[  539.885769][T20752]        csum_and_copy_from_iter_full+0x210/0x1fb0
[  539.892428][T20752]        ip_generic_getfrag+0x149/0x2d0
[  539.898144][T20752]        __ip6_append_data+0x3b26/0x40c0
[  539.903925][T20752]        ip6_append_data+0x108/0x270
[  539.909315][T20752]        rawv6_sendmsg+0x1298/0x18c0
[  539.914873][T20752]        sock_sendmsg_nosec+0x10e/0x180
[  539.920487][T20752]        ____sys_sendmsg+0x54e/0x850
[  539.925805][T20752]        ___sys_sendmsg+0x2a5/0x360
[  539.931006][T20752]        __x64_sys_sendmsg+0x1b1/0x290
[  539.936464][T20752]        do_syscall_64+0x174/0x580
[  539.941593][T20752]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.948014][T20752] 
[  539.948014][T20752] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  539.955760][T20752]        lock_sock_nested+0x41/0x100
[  539.961115][T20752]        inet_shutdown+0x6a/0x390
[  539.966373][T20752]        nbd_mark_nsock_dead+0x2cb/0x550
[  539.972077][T20752]        recv_work+0x1cee/0x1e10
[  539.977190][T20752]        process_scheduled_works+0xa8e/0x14e0
[  539.983288][T20752]        worker_thread+0xa47/0xfb0
[  539.988400][T20752]        kthread+0x388/0x470
[  539.992993][T20752]        ret_from_fork+0x514/0xb70
[  539.998127][T20752]        ret_from_fork_asm+0x1a/0x30
[  540.003413][T20752] 
[  540.003413][T20752] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  540.011252][T20752]        __mutex_lock+0x19d/0x1550
[  540.016453][T20752]        nbd_queue_rq+0x373/0x1150
[  540.021795][T20752]        blk_mq_dispatch_rq_list+0x499/0x1990
[  540.028013][T20752]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  540.035166][T20752]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  540.042024][T20752]        blk_mq_run_work_fn+0x16c/0x300
[  540.047831][T20752]        process_scheduled_works+0xa8e/0x14e0
[  540.053904][T20752]        worker_thread+0xa47/0xfb0
[  540.059033][T20752]        kthread+0x388/0x470
[  540.063629][T20752]        ret_from_fork+0x514/0xb70
[  540.068836][T20752]        ret_from_fork_asm+0x1a/0x30
[  540.074318][T20752] 
[  540.074318][T20752] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  540.081630][T20752]        __mutex_lock+0x19d/0x1550
[  540.086748][T20752]        nbd_queue_rq+0xc1/0x1150
[  540.091791][T20752]        blk_mq_dispatch_rq_list+0x499/0x1990
[  540.097894][T20752]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  540.104854][T20752]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  540.111899][T20752]        blk_mq_run_work_fn+0x16c/0x300
[  540.117539][T20752]        process_scheduled_works+0xa8e/0x14e0
[  540.123611][T20752]        worker_thread+0xa47/0xfb0
[  540.128726][T20752]        kthread+0x388/0x470
[  540.133342][T20752]        ret_from_fork+0x514/0xb70
[  540.138487][T20752]        ret_from_fork_asm+0x1a/0x30
[  540.143874][T20752] 
[  540.143874][T20752] -> #3 (set->srcu){.+.+}-{0:0}:
[  540.151203][T20752]        __synchronize_srcu+0xc9/0x2f0
[  540.156789][T20752]        elevator_switch+0x1e8/0x7b0
[  540.162169][T20752]        elevator_change+0x2fa/0x480
[  540.167462][T20752]        elevator_set_default+0x375/0x440
[  540.173190][T20752]        blk_register_queue+0x3f3/0x4e0
[  540.178884][T20752]        __add_disk+0x6cb/0xe30
[  540.183769][T20752]        add_disk_fwnode+0x100/0x3a0
[  540.189258][T20752]        nbd_dev_add+0x733/0xb60
[  540.194207][T20752]        nbd_init+0x15f/0x1e0
[  540.199104][T20752]        do_one_initcall+0x250/0x870
[  540.204409][T20752]        do_initcall_level+0x10a/0x1a0
[  540.209975][T20752]        do_initcalls+0x59/0xa0
[  540.214834][T20752]        kernel_init_freeable+0x29d/0x3e0
[  540.220558][T20752]        kernel_init+0x1d/0x1d0
[  540.225417][T20752]        ret_from_fork+0x514/0xb70
[  540.230542][T20752]        ret_from_fork_asm+0x1a/0x30
[  540.235834][T20752] 
[  540.235834][T20752] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  540.243839][T20752]        __mutex_lock+0x19d/0x1550
[  540.249049][T20752]        elevator_change+0x1af/0x480
[  540.254440][T20752]        elevator_set_none+0xb5/0x140
[  540.259825][T20752]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  540.266165][T20752]        nbd_start_device+0x189/0xb30
[  540.271551][T20752]        nbd_genl_connect+0x1597/0x1c10
[  540.277140][T20752]        genl_family_rcv_msg_doit+0x233/0x340
[  540.283842][T20752]        genl_rcv_msg+0x614/0x7a0
[  540.288871][T20752]        netlink_rcv_skb+0x226/0x4a0
[  540.294171][T20752]        genl_rcv+0x28/0x40
[  540.298687][T20752]        netlink_unicast+0x7bb/0x940
[  540.304046][T20752]        netlink_sendmsg+0x813/0xb40
[  540.309330][T20752]        sock_sendmsg_nosec+0x13a/0x180
[  540.314890][T20752]        ____sys_sendmsg+0x54e/0x850
[  540.320178][T20752]        ___sys_sendmsg+0x2a5/0x360
[  540.325555][T20752]        __x64_sys_sendmsg+0x1b1/0x290
[  540.331105][T20752]        do_syscall_64+0x174/0x580
[  540.336398][T20752]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.342850][T20752] 
[  540.342850][T20752] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  540.351473][T20752]        blk_alloc_queue+0x544/0x690
[  540.356775][T20752]        __blk_mq_alloc_disk+0x194/0x390
[  540.362976][T20752]        nbd_dev_add+0x494/0xb60
[  540.367921][T20752]        nbd_init+0x15f/0x1e0
[  540.372603][T20752]        do_one_initcall+0x250/0x870
[  540.377895][T20752]        do_initcall_level+0x10a/0x1a0
[  540.383354][T20752]        do_initcalls+0x59/0xa0
[  540.388225][T20752]        kernel_init_freeable+0x29d/0x3e0
[  540.393944][T20752]        kernel_init+0x1d/0x1d0
[  540.399181][T20752]        ret_from_fork+0x514/0xb70
[  540.404384][T20752]        ret_from_fork_asm+0x1a/0x30
[  540.409676][T20752] 
[  540.409676][T20752] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  540.416982][T20752]        __lock_acquire+0x1520/0x2cf0
[  540.422561][T20752]        lock_acquire+0x106/0x350
[  540.427592][T20752]        fs_reclaim_acquire+0x71/0x100
[  540.433150][T20752]        prepare_alloc_pages+0x15b/0x650
[  540.438788][T20752]        __alloc_frozen_pages_noprof+0x12f/0x380
[  540.445120][T20752]        alloc_pages_mpol+0x212/0x380
[  540.450511][T20752]        folio_alloc_mpol_noprof+0x39/0x160
[  540.456418][T20752]        vma_alloc_folio_noprof+0xe1/0x1e0
[  540.462342][T20752]        do_pte_missing+0x173a/0x34b0
[  540.467820][T20752]        handle_mm_fault+0x1b36/0x3080
[  540.473316][T20752]        do_user_addr_fault+0x744/0x1340
[  540.478998][T20752]        exc_page_fault+0x6a/0xc0
[  540.484040][T20752]        asm_exc_page_fault+0x26/0x30
[  540.489434][T20752]        rep_movs_alternative+0x11/0xa0
[  540.495623][T20752]        _copy_to_user+0x8a/0xb0
[  540.500621][T20752]        virtual_ncidev_read+0x2c8/0x440
[  540.506322][T20752]        vfs_read+0x213/0xa80
[  540.511013][T20752]        ksys_read+0x150/0x270
[  540.515898][T20752]        do_syscall_64+0x174/0x580
[  540.521047][T20752]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.527497][T20752] 
[  540.527497][T20752] other info that might help us debug this:
[  540.527497][T20752] 
[  540.537731][T20752] Chain exists of:
[  540.537731][T20752]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  540.537731][T20752] 
[  540.550430][T20752]  Possible unsafe locking scenario:
[  540.550430][T20752] 
[  540.557881][T20752]        CPU0                    CPU1
[  540.563425][T20752]        ----                    ----
[  540.568914][T20752]   rlock(&mm->mmap_lock);
[  540.573422][T20752]                                lock(sk_lock-AF_INET6);
[  540.580445][T20752]                                lock(&mm->mmap_lock);
[  540.587384][T20752]   lock(fs_reclaim);
[  540.591631][T20752] 
[  540.591631][T20752]  *** DEADLOCK ***
[  540.591631][T20752] 
[  540.599862][T20752] 2 locks held by syz.4.3616/20752:
[  540.605061][T20752]  #0: ffff88807e4a6268 (&vdev->mtx){+.+.}-{4:4}, at: virtual_ncidev_read+0xb9/0x440
[  540.614561][T20752]  #1: ffff888035b75038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  540.624595][T20752] 
[  540.624595][T20752] stack backtrace:
[  540.630500][T20752] CPU: 1 UID: 0 PID: 20752 Comm: syz.4.3616 Not tainted syzkaller #0 PREEMPT(full) 
[  540.630519][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  540.630530][T20752] Call Trace:
[  540.630536][T20752]  <TASK>
[  540.630544][T20752]  dump_stack_lvl+0xe8/0x150
[  540.630568][T20752]  print_circular_bug+0x2e1/0x300
[  540.630585][T20752]  check_noncircular+0x12e/0x150
[  540.630612][T20752]  __lock_acquire+0x1520/0x2cf0
[  540.630634][T20752]  ? is_bpf_text_address+0x26/0x2b0
[  540.630660][T20752]  ? is_bpf_text_address+0x26/0x2b0
[  540.630683][T20752]  ? prepare_alloc_pages+0x15b/0x650
[  540.630703][T20752]  lock_acquire+0x106/0x350
[  540.630722][T20752]  ? prepare_alloc_pages+0x15b/0x650
[  540.630744][T20752]  ? __lock_acquire+0x683/0x2cf0
[  540.630765][T20752]  fs_reclaim_acquire+0x71/0x100
[  540.630783][T20752]  ? prepare_alloc_pages+0x15b/0x650
[  540.630802][T20752]  prepare_alloc_pages+0x15b/0x650
[  540.630824][T20752]  __alloc_frozen_pages_noprof+0x12f/0x380
[  540.630846][T20752]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  540.630869][T20752]  ? __pfx_policy_nodemask+0x10/0x10
[  540.630890][T20752]  ? check_path+0x21/0x40
[  540.630913][T20752]  ? __lock_acquire+0x683/0x2cf0
[  540.630934][T20752]  alloc_pages_mpol+0x212/0x380
[  540.630958][T20752]  folio_alloc_mpol_noprof+0x39/0x160
[  540.630981][T20752]  vma_alloc_folio_noprof+0xe1/0x1e0
[  540.631005][T20752]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  540.631034][T20752]  ? __pte_offset_map+0x29/0x240
[  540.631051][T20752]  ? __pte_offset_map+0x29/0x240
[  540.631068][T20752]  do_pte_missing+0x173a/0x34b0
[  540.631094][T20752]  handle_mm_fault+0x1b36/0x3080
[  540.631114][T20752]  ? handle_mm_fault+0xec/0x3080
[  540.631132][T20752]  ? __pfx_handle_mm_fault+0x10/0x10
[  540.631153][T20752]  ? lock_mm_and_find_vma+0xa7/0x340
[  540.631173][T20752]  do_user_addr_fault+0x744/0x1340
[  540.631201][T20752]  exc_page_fault+0x6a/0xc0
[  540.631216][T20752]  asm_exc_page_fault+0x26/0x30
[  540.631232][T20752] RIP: 0010:rep_movs_alternative+0x11/0xa0
[  540.631254][T20752] Code: e9 04 62 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 61 04 00 66 2e 0f 1f
[  540.631268][T20752] RSP: 0018:ffffc9000515fb68 EFLAGS: 00050202
[  540.631282][T20752] RAX: ffffffff84d32020 RBX: 0000000000000004 RCX: 0000000000000004
[  540.631292][T20752] RDX: 0000000000000000 RSI: ffff88807e7e8d00 RDI: 00002000000015c0
[  540.631303][T20752] RBP: ffffc9000515fc90 R08: ffff88807e7e8d03 R09: 1ffff1100fcfd1a0
[  540.631315][T20752] R10: dffffc0000000000 R11: ffffed100fcfd1a1 R12: 00002000000015c4
[  540.631326][T20752] R13: 00007ffffffff000 R14: ffff88807e7e8d00 R15: 00002000000015c0
[  540.631340][T20752]  ? _copy_to_user+0x10/0xb0
[  540.631365][T20752]  _copy_to_user+0x8a/0xb0
[  540.631388][T20752]  virtual_ncidev_read+0x2c8/0x440
[  540.631407][T20752]  ? __pfx_virtual_ncidev_read+0x10/0x10
[  540.631423][T20752]  ? __pfx_virtual_ncidev_read+0x10/0x10
[  540.631439][T20752]  ? __pfx_virtual_ncidev_read+0x10/0x10
[  540.631455][T20752]  ? aa_file_perm+0x18b/0x15f0
[  540.631474][T20752]  ? vfs_read+0x1f8/0xa80
[  540.631498][T20752]  ? __pfx_virtual_ncidev_read+0x10/0x10
[  540.631516][T20752]  vfs_read+0x213/0xa80
[  540.631546][T20752]  ? __pfx_vfs_read+0x10/0x10
[  540.631569][T20752]  ? __fget_files+0x2a/0x420
[  540.631592][T20752]  ? __fget_files+0x2a/0x420
[  540.631611][T20752]  ? __fget_files+0x3a2/0x420
[  540.631630][T20752]  ? __fget_files+0x2a/0x420
[  540.631652][T20752]  ksys_read+0x150/0x270
[  540.631676][T20752]  ? __pfx_ksys_read+0x10/0x10
[  540.631698][T20752]  ? __pfx_kcov_ioctl+0x10/0x10
[  540.631747][T20752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.631763][T20752]  do_syscall_64+0x174/0x580
[  540.631778][T20752]  ? trace_irq_disable+0x3b/0x140
[  540.631798][T20752]  ? clear_bhb_loop+0x40/0x90
[  540.631816][T20752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.631831][T20752] RIP: 0033:0x7fa07d59de99
[  540.631846][T20752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.631860][T20752] RSP: 002b:00007fa07e46d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  540.631876][T20752] RAX: ffffffffffffffda RBX: 00007fa07d826090 RCX: 00007fa07d59de99
[  540.631888][T20752] RDX: 0000000000000073 RSI: 00002000000015c0 RDI: 0000000000000004
[  540.631899][T20752] RBP: 00007fa07d633eaf R08: 0000000000000000 R09: 0000000000000000
[  540.631909][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.631918][T20752] R13: 00007fa07d826128 R14: 00007fa07d826090 R15: 00007fff0084b998
[  540.631936][T20752]  </TASK>
[  541.449590][ T6437] IPVS: starting estimator thread 0...
[  541.543311][T20775] IPVS: using max 47 ests per chain, 112800 per kthread
[  541.693411][ T6437] page_pool_release_retry() stalled pool shutdown: id 142, 1 inflight 60 sec
[  542.667418][T20744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512