last executing test programs:

1.672828851s ago: executing program 1 (id=6665):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r3, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)={0x30, r7, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x88, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000600), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)

1.658879344s ago: executing program 4 (id=6666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000080)={0x0, 0x2b, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000080)={0x0, 0x2b, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0xd0, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xad, 0xa8, @random="7b782af8684b1b321b3496016a2eece9e76c65205b89608fbc6e4e451f4297b471444f48f28bf47a65e72ec7a20d32355e8495a0589a5d526e6ff33f01f9ebb04a73abf05db9ff2210cdfb73cedf05d977901639984328ffead4e000b8a866738f06faf1dae61801cbe63ee5c17673e8f3d24bafe2d292bcd1ccc2ed561209e4bb44d98449c85f433125f9467ca1be3fb12b4e667a1767b9263dbcd20e2746bf3bd57ec533f8a31d72"}]}, 0xd0}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r4, 0x0)
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
close(0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', 0x200}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', 0x200})

1.513718202s ago: executing program 1 (id=6669):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000004c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000500)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$nl_generic(0x11, 0x3, 0x10)
getpeername(r2, &(0x7f0000000540)=@alg, &(0x7f00000005c0)=0x80)
sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x7, "2710f0023971884fb5fc063173d02c05"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="4b99c6e5ea2c66a5660200d69700000000000000", 0x14}], 0x1, 0x0, 0x0, 0x11000000}, 0x40)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000040)=0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000480)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.49741747s ago: executing program 4 (id=6670):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000140)={0x0, 0x0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003300000018000180140002007665746830"], 0x2c}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000180)="0b0000000980ffff", 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="0018603008b339120000b150f9af7df047a7", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000008c000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.444879126s ago: executing program 2 (id=6671):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
epoll_create(0x6)
openat$cgroup_freezer_state(r0, &(0x7f0000000840), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100140000fbffffffff000000003500018408000300ac1e0001060004d5b70a6f505df7020001000000d013aeee57678d18a8f9f96a6f0a98b1e5ef9ac9b7336f3c730d13d9c0b35af984aceaff05c86324ab816ca0a24136632747bb0081070d77b97fcae52736023c730568fbc73d1056d78e08583dac259c915db726e93bc0c9f44fd3c87cae6110e0aa3f99e5404408b5f59c32ab35ccfa1b0c547840133b1bac8d7916a6eff9a1159e6d7352b1acbadffae22afbc30954148ad83ad40699450c537218773bcc5791c0ef7cd8c6750ab9124c7bb9e12654"], 0x30}}, 0x0)
close(0xffffffffffffffff)

1.403922076s ago: executing program 3 (id=6672):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000200000720134000000000095000000000000007751099d5a6ff9afde4b9201345165796361fed9a84326bfbf5f55d977eec00f49c25be44f6ac1bfbdf54f8cc2f076c7bd94415c3fab20e48ae38c8ab2435677db79b0a0c3aced3869407353b8184f015dd9f1a00764b6f2232ac91c4eff3d27a907e746d1b4bbaf52cbb2b7d212667360e39f890a39781d1b024d2be8698923dafd84"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94)

1.373286558s ago: executing program 4 (id=6673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})

1.288981692s ago: executing program 0 (id=6674):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000000c0)="3300000008000601010000000200", 0xe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000140)="190000000800aaaaaaaaaa11e002", 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.288560261s ago: executing program 2 (id=6675):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)

1.283484993s ago: executing program 3 (id=6676):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in6=@private0}, @in=@empty, {@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@multicast2, @in6=@loopback={0x700}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x640100ff, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8}]}]}, 0x16c}}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0)
r3 = socket(0x10, 0x4, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.freeze\x00', 0x275a, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20042000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x4, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x10, 0x0, 0x10, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000055)
write$cgroup_int(r7, &(0x7f0000000380)=0x1, 0x12)
getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)

1.211823451s ago: executing program 1 (id=6677):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
r3 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000200)={&(0x7f0000000240)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000300)=0x3, 0x4)
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2020)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.210944392s ago: executing program 2 (id=6678):
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800450200140065000402087864010100ffffffff"], 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)) (async)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fedbdf250305008e47000800a81e000114000900fe88000000000000000000000000010104000500"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00001a008188e6b614a73f72cc9f0ba1f848180000005e140602bde200030e000a00100000000ac0000000", 0x29}], 0x1}, 0x40044)

1.13650581s ago: executing program 4 (id=6679):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000300010000000400120006000e00000000008b500b6cba085834586a1a7e90fdd9efe0a83455b00351541fc3690ec55cd662f2deb82365bc6b47dd37e8c6bef302f0285cd2b42d5e9b7dcae2c6e0afff3ab9a12857f982d61e3787b27235aaeea9b189bb20bca5fbd057726dd0b3e5887c1a7d6f16178d331313ae961c952ecbf48e2fc2add02f5298e1bf6d9ba54b8cca848d81069fc5a893c31e91708a7047e348956c9ad2c768f21c8fbf34339736ed574606185eec5c"], 0x44}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x1, 0x100000, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x66, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010103, @broadcast, {[@generic={0x86, 0x7, "85d2670692"}, @cipso={0x86, 0x1a, 0x2, [{0x3, 0x4, "9c67"}, {0x1, 0x3, '~'}, {0x0, 0x4, "2dbe"}, {0x2, 0x7, "9087202c2a"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x45, 0x3, 0x9, [{@multicast2, 0xfffff81f}, {@local, 0x5}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@local, 0x6}, {@rand_addr=0x64010101, 0x9}, {@local, 0x997}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}})
r7 = socket(0x10, 0x803, 0x0) (async)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000a40)={&(0x7f0000000840)=0x7, 0xd, &(0x7f0000000a40)}) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}, {0x9}}}, 0x24}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4840000010000104000000000100000000000000", @ANYRES32=r6, @ANYRESDEC=r9], 0x48}}, 0x48000) (async)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r9, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x8, 0x4, 0x10, @mcast1, @empty, 0x80, 0x7800, 0x4, 0x6}}) (rerun: 64)
r10 = socket$kcm(0x11, 0x3, 0x0) (async)
r11 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xf, 0xf}, {0xfff8, 0x1}, {0xa, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300c1840}, 0x4880) (async)
sendmsg$kcm(r10, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="f9", 0x1}], 0x1}, 0x20004014)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x14, 0x31, 0x1, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044)
socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000009c0)={'nr0\x00'})

1.135928758s ago: executing program 3 (id=6680):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0x400, 0x74bd2b, 0x1, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004874}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000380)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0)
socketpair$unix(0x1, 0x47075ecf25751f29, 0x0, &(0x7f0000000480))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

1.107679064s ago: executing program 0 (id=6681):
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0x22, 0x6, 0xd, 0xff, 0x0, 0xf0, 0x0, 0x5}, 0xe)
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e1d, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf2509000200ff7f000000000000080041007369770014003300766972745f7769666930000000"], 0x82}}, 0x0)

1.019678526s ago: executing program 2 (id=6682):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r1, 0x6a, 0x4, 0x0, 0x200000af)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040), 0x4)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={<r6=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r6, 0x14, 0x98, 0x8, 0x7fff, 0x5}, 0x14)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa)
writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0)

900.422269ms ago: executing program 3 (id=6683):
syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000002ff02"], 0x0) (async)
r0 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000080)=0x78) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000f80)={&(0x7f00000000c0), 0xc, &(0x7f0000000f40)={&(0x7f0000000340)={0xbf8, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x8, 0x6, 0x1, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x6, 0x5, 0x6, 0x1, 0xfffa, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x7, 0x800, 0x7, 0xc60c, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xe, 0x6, 0xfffc, 0x40, 0x5ee, 0x2c38, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a1, 0x3, 0x5, 0x9, 0x4, 0x6, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x5, 0x5}, {0x6}, {0x1, 0x4}, {0x6, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x7}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0x9}, {0x3, 0xa}, {0x5, 0x7}, {0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x6}, {0x4, 0x3}, {0x0, 0x7}, {}, {0x0, 0x9}, {0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x3}, {0x3}, {0x2, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x6}, {}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0xc, 0x1f, 0x9, 0x9, 0x0, 0x5, 0x36, 0x1, 0x30, 0x30, 0xb, 0x5e, 0x24, 0x5, 0x1b, 0x2aee53174d7d4f57, 0x1b, 0xc, 0x3, 0x12, 0x2, 0xb, 0x4f, 0xb, 0x6, 0x2e, 0x3, 0x1b, 0x36, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x91, 0xd3e5, 0x4, 0x2, 0xa, 0x5, 0x7ff, 0x8]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x7f, 0x800, 0x1, 0x7f, 0x9ef, 0x93c5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1ff, 0x0, 0x89, 0x6, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x36, 0x6f, 0x48, 0x48, 0x9, 0x9, 0x12, 0x0, 0x48, 0x1b, 0x5, 0x3, 0x9, 0x6, 0x30, 0x1b, 0x5]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x41cbde6c6d775103, 0x48, 0x3, 0x18]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x5, 0x5, 0x24, 0xb, 0x1b, 0x6c, 0x4, 0x4, 0x1, 0xc, 0x12, 0x4, 0x60, 0x5, 0x6c, 0x4, 0x53, 0x3c, 0x12, 0xb, 0x36, 0x16, 0x9, 0x6, 0xa, 0x24, 0x1b, 0x5, 0x1, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e47, 0x99, 0x8, 0x9, 0x1, 0x2, 0x101, 0xf48b]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x1}, {0x7, 0xa}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x4, 0x9}, {}, {0x3, 0x3}, {0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x3, 0xa}, {0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x2, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x8}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa, 0xfc7c, 0x7f, 0x1ff, 0x68f, 0x1, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcf50, 0x6ff7, 0x40, 0x3, 0x2, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x4e, 0x3, 0x401, 0x0, 0x4, 0x4, 0x1ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x6, 0x1000, 0x6, 0x3, 0x50, 0x241]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xfff, 0x5, 0xffff, 0xe08f, 0x6, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x6, 0x7, 0xcfb, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x6, 0xcf, 0x4, 0x2, 0x1f9, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x8, 0x3ff, 0xb, 0x1ff, 0x401, 0x4010]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x5}, {0x6}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x2}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x9, 0x5, 0xda, 0x0, 0x1, 0x9c9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x3}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x5, 0x5}, {0x1}, {0x2, 0x4}, {0x1}, {0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3, 0x5, 0xfffb, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2a, 0x100, 0x5, 0x1000, 0x7, 0x8]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x10, 0x6c, 0x5, 0x24, 0x30, 0x4, 0x36, 0xb, 0x4, 0x6, 0x5, 0x48]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf2ea, 0x4, 0x5, 0xde, 0xf9, 0xfff7, 0x8c8f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x1, 0x7, 0x2, 0x4, 0x10, 0x8, 0x180]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x3, 0x4]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x60, 0x1, 0xb, 0x1, 0x6c, 0x6, 0x2, 0x24]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x10, 0x8, 0x4f2, 0x2, 0x6, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x5}, {0x2, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0x5}, {0x3}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x2}, {0x1}, {0x7, 0x8}, {0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x6}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x50, 0x7, 0x74, 0x200, 0x1, 0xfffa, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x6}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x257, 0x10, 0x1, 0x8, 0x3, 0xf]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x90, 0x6, 0x3ff, 0x7, 0x101, 0xd2ff, 0x1, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x17}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x218, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x30}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x15}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x7}, {0x5}, {0x1}, {0x5, 0x5}, {0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x6}, {0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x5}, {0x0, 0x8}, {0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x3, 0x8}, {}, {0x4, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x6, 0x3}, {0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7f, 0x3, 0x8, 0x2, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x5}, {0x5, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x5, 0x4}, {0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x6b7, 0x7, 0x4, 0x1ff, 0x0, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}]}]}, @NL80211_ATTR_TID_CONFIG={0x324, 0x11d, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x12, 0x2, 0x24]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x5}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x5, 0x24, 0x3, 0x6c, 0xc, 0x4, 0x60, 0x12, 0x6c, 0x30, 0x8, 0x6, 0xf, 0x48, 0x9, 0x48, 0x9, 0x48, 0x5, 0x9, 0x1b, 0x6, 0xb, 0x18, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa8f, 0x1, 0x9, 0x0, 0x4, 0x0, 0x617]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x2, 0x9, 0xff, 0x2, 0x85d2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x12, 0x16, 0x18, 0x48, 0x5, 0x18, 0x36, 0x6, 0x4, 0x6c, 0x1b, 0x60, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x5}, {0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x2}, {0x7, 0xa}, {0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x100, 0x3, 0x101, 0x5, 0xfe00, 0xd7c]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0xb, 0x16, 0x3, 0x6, 0x30, 0x5, 0x60, 0x5, 0x5, 0xb, 0x30, 0x1b, 0x30, 0x12, 0x16, 0x2, 0x36, 0x9, 0x2, 0x4, 0x16, 0x3, 0xb, 0x48, 0x1b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x7, 0x8}, {0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x4}, {0x4}, {0x3}, {0x4}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x7}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff, 0x24, 0x1eb8, 0x3, 0x6a0a, 0x3, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x16, 0x1, 0x18, 0x2, 0x2, 0x9, 0x60, 0x5, 0x60, 0xb, 0x2, 0x18, 0x30, 0x48, 0xc, 0x6c, 0x0, 0x60, 0x0, 0x1c, 0x2, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1737, 0x3, 0x2, 0x5, 0x7, 0x40, 0x80, 0x8]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x7fff, 0xfff, 0x8, 0xa0, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x100, 0x5, 0x1, 0x80, 0xfff7, 0xeee]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x6, 0x2, 0x13, 0x6, 0x16, 0xb, 0x42, 0x1, 0x60, 0x4, 0x30, 0x1, 0x5, 0x60, 0xc, 0x1, 0x1, 0x9, 0x1b, 0x1b, 0x6, 0xb, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x3, 0x9, 0x9, 0x200, 0x8000, 0x40]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4, 0x5, 0xff24, 0x7fff, 0x81, 0x0, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c46, 0x8, 0x7ff, 0x1000, 0x0, 0x8, 0x8000, 0xa5a]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x11c11113}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}]}]}, 0xbf8}}, 0x4044)

894.529567ms ago: executing program 0 (id=6684):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x20e, 0x118, 0x0, &(0x7f0000003a00)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000003b80), 0x3}, 0x50)

886.280144ms ago: executing program 1 (id=6685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) (async)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104014000c9947b33c50700000500ebff010000005dd074d4d2375c18cb1700"/46], 0x24}}, 0x0)

684.659459ms ago: executing program 0 (id=6686):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x9}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe2, 0x3, 0xff, 0x2800, 0x0, 0x600, 0x44, 0x3}}, {0xa, 0x2, [0x7, 0xfffe, 0xffff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x58}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x9}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe2, 0x3, 0xff, 0x2800, 0x0, 0x600, 0x44, 0x3}}, {0xa, 0x2, [0x7, 0xfffe, 0xffff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x58}}, 0x0) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)

683.523221ms ago: executing program 3 (id=6687):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
socket$kcm(0xa, 0x2, 0x73) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xd}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

677.823844ms ago: executing program 2 (id=6688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000", 0x60}], 0x1}, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z%G}', 0x4}], 0x1, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x10448)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0)

587.473085ms ago: executing program 1 (id=6689):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000af8000000050a0108000000000000000005000006280004"], 0x120}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20040040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001"], 0xc8}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c)
ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000480)="6d3b96b49164e9f44954436d775d053c4a9c5ea737f93a0ed4315bd61324c89ae46c4385021aa2338f18762f3c0fabe134715a901a6912f8c761a3d85fbfb040d44ebe99800d88a3a2d387db1ed8c665485f7c38835d66bc9b92c845755ea00b27fff3c5b6b2770f977a53a7f53e21ac91eb3051006292ba1e274190bb2e8854d2c33ad020d5f12042f072a135194c6719cc77960aa21a9e4e784fed860bd5799f6883246d0aecd8ed7138276bc117e7e6a959621847eeb21f4d20cecd6d80ebd7")

505.458831ms ago: executing program 0 (id=6690):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0x9, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0x9, 0x1}, 0xe) (async)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)

494.738536ms ago: executing program 4 (id=6691):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140)=0xce, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000bc0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000c00)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000c40))
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000840))
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r8, 0x11d, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x38, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x12}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r10, 0x8915, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f00000001c0))
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000980)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r12}, @generic={0x25, 0x0, 0x0, 0x0, 0x200}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @exit, @alu={0x7, 0x0, 0x3, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
writev(r11, &(0x7f0000000340)=[{&(0x7f0000000040)="46412d2c3c050ab8dc70c2365a95dd850caca388ef3b4ead901697bb6f486cc9241cfc50eece1f419b4f80c001012034ce3f64d7d27f98891da89d7ba3aff833575b644950a641af27d0ea6bde4397a7244a23a19d4e0eb40b21a3060d21bc9782fb943535e6972577802e20d0b0041eb64cc66922b2c1978f7f1abc4664ad7fb918f2077eeceac05bdbd16a626d77e37f600c80c7cf822a1d0d938499aa26b8a321803fff54e0de2c3157d9f2e6d7318c4aa5f052fcb9b7b8a248770b4a008ab3a9e4e933bdc0d4a9f287f44341fe0a1c28694037ba98c5a8149f3e681e0b1cd0468d036a71f2950851637f7fca2332859c2c94da3abbe8", 0xf8}, {&(0x7f0000000480)="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", 0x1b9}], 0x2)
ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f0000000200))

428.6404ms ago: executing program 0 (id=6692):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000001b00)=0x7, 0x4) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000001b40)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001a00)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r3, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000004540)={<r4=>r1, &(0x7f0000004440)='devlink\x00', 0x40000, &(0x7f0000004480)={@_ha_fsid={[0x80000001, 0x8]}, {0x268, 0x8, 0x7, 0x7f}}, 0x7fffffff, &(0x7f00000044c0), &(0x7f0000004500)=0x2})
r5 = openat$cgroup_ro(r4, &(0x7f0000004580)='cpuacct.usage_all\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x20})
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) (async)
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000004840)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004800)={&(0x7f0000004680)={0x148, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40080c4}, 0x24000081) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000048c0), r9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004900)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)={0x3c, r10, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) (async, rerun: 64)
sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000004ac0)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x44, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7b}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f0000004600)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f0000001840)=""/136, 0x88}, 0x1}, {{&(0x7f0000000380)=@nl, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001c40)=""/143, 0x8f}], 0x1, &(0x7f0000000600)=""/69, 0x45}, 0xd2f2}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000000780)=""/4085, 0xff5}], 0x3, &(0x7f00000017c0)=""/100, 0x64}, 0x4}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/10, 0xa}], 0x4}, 0x2}, {{&(0x7f0000002d80)=@caif=@rfm, 0x80, &(0x7f0000003280)=[{&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/215, 0xd7}, {&(0x7f0000003000)=""/224, 0xe0}, {&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/183, 0xb7}], 0x5, &(0x7f0000003300)=""/4096, 0x1000}, 0xf8}], 0x5, 0x10120, &(0x7f0000001900)={0x0, 0x989680})

236.898998ms ago: executing program 3 (id=6693):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES64=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "05000000b00066c2", "c5998c867c22b4013b6a89606ffcf92e", "7f00", "a0ca05c0707e52f4"}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14)
sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
recvfrom$inet6(r2, &(0x7f0000000340)=""/3, 0x3, 0x300, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300f84cef97301cbf116b71b000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000a40)=0x5, 0x4)
bind$nfc_llcp(r7, &(0x7f0000000a80)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r1, 0x118, 0x2f, 0x0, &(0x7f00000000c0))
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000400), 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bridge0\x00', <r10=>0x0})
sendmsg$can_bcm(r8, &(0x7f0000000500)={&(0x7f0000000540)={0x1d, r10}, 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="07000000100000000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="01000080010000000400004000e9f666b70aba"], 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x48080)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)

220.393374ms ago: executing program 1 (id=6694):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x9201})
write$tun(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="01154e0001000011221e4455892fca0100012d8c170f83f76970", 0x1a, 0x0, &(0x7f00000001c0)={0x11, 0x16, r3, 0x1, 0x3}, 0x14)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @local}, 0x2, 0x2, 0x4, 0x4}}, 0x26)

218.510633ms ago: executing program 2 (id=6695):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe66}, 0x22) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4a020, 0x8d85}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x34}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040014}, 0x22048040)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000780)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0xf, 0x0, &(0x7f0000001380)="c600001e0000000000000000f4ff00", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg1\x00', 0x4)

0s ago: executing program 4 (id=6696):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d}, 0x160)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008894)
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000001440)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1908fd3d0e8d00", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "e3943f6892078bb961854743fe4dddd2e7c0ce70a4ac7d00", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

 parsing attributes in process `syz.0.5414'.
[  682.941318][T27552] ip_tables: iptables: counters copy to user failed while replacing table
[  683.828120][T27602] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  684.572969][T27640] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  684.591265][T27640] bond10 (unregistering): Released all slaves
[  684.728962][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  684.930096][T27652] syzkaller1: entered promiscuous mode
[  684.930122][T27652] syzkaller1: entered allmulticast mode
[  685.000586][T27665] veth0: mtu less than device minimum
[  685.241217][T27682] netlink: 'syz.4.5453': attribute type 5 has an invalid length.
[  685.490212][T27701] x_tables: duplicate underflow at hook 2
[  685.937754][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  686.265279][T27742] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  686.447952][T27753] netlink: 'syz.3.5474': attribute type 1 has an invalid length.
[  686.447975][T27753] netlink: 'syz.3.5474': attribute type 3 has an invalid length.
[  686.676115][T27772] netlink: 'syz.4.5481': attribute type 8 has an invalid length.
[  686.982186][T27792] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  687.153796][T27805] __nla_validate_parse: 143 callbacks suppressed
[  687.153816][T27805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5491'.
[  687.181534][T27799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5490'.
[  687.199158][T27805] ip6gre4: entered promiscuous mode
[  687.199173][T27805] ip6gre4: entered allmulticast mode
[  687.270633][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5490'.
[  687.403765][T27814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5493'.
[  687.430043][T27814] 8021q: adding VLAN 0 to HW filter on device bond7
[  687.449833][T27817] ip_tables: iptables: counters copy to user failed while replacing table
[  714.491611][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5496'.
[  714.609701][T27839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5497'.
[  714.834026][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5502'.
[  715.307384][T27879] tipc: New replicast peer: 172.20.20.187
[  715.308338][T27879] tipc: Enabled bearer <udp:syz0>, priority 10
[  715.327817][T27879] syzkaller1: entered promiscuous mode
[  715.327837][T27879] syzkaller1: entered allmulticast mode
[  715.329604][T27879] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116
[  715.460229][T27884] syzkaller1: entered promiscuous mode
[  715.460250][T27884] syzkaller1: entered allmulticast mode
[  715.528269][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'.
[  715.737894][T27908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5514'.
[  715.819448][T27913] openvswitch: netlink: IPv4 tunnel dst address is zero
[  715.885653][T27907] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5513'.
[  715.891513][T27907] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5513'.
[  716.140463][T27931] netlink: 'syz.3.5518': attribute type 18 has an invalid length.
[  716.237422][T27942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5522'.
[  716.326747][T27946] netlink: 'syz.4.5524': attribute type 29 has an invalid length.
[  716.326770][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'.
[  716.349699][T27946] netlink: 'syz.4.5524': attribute type 29 has an invalid length.
[  716.349719][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'.
[  716.856692][T27985] netlink: 'syz.0.5536': attribute type 2 has an invalid length.
[  716.982657][  T383] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  716.982691][  T383] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  716.999925][T27990] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes
[  717.119579][T28001] syzkaller1: entered promiscuous mode
[  717.119600][T28001] syzkaller1: entered allmulticast mode
[  717.156103][T28009] netlink: 'syz.2.5544': attribute type 10 has an invalid length.
[  717.180727][T28007] bridge7: entered allmulticast mode
[  717.302656][T28009] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  717.317984][T28009] bridge0: port 5(netdevsim1) entered blocking state
[  717.318116][T28009] bridge0: port 5(netdevsim1) entered disabled state
[  717.330248][T28009] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  717.393191][T28007] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.393324][T28007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.393660][T28007] bridge0: port 1(
1¾x9ÿ) entered blocking state
[  717.393797][T28007] bridge0: port 1(
1¾x9ÿ) entered forwarding state
[  717.474128][T28007] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  717.545357][T28017] tipc: Can't bind to reserved service type 1
[  717.557480][T28017] x_tables: duplicate underflow at hook 2
[  717.979456][T28061] netlink: 'syz.2.5557': attribute type 14 has an invalid length.
[  718.216235][T28072] team0: Device is already in use.
[  718.446395][T28087] block nbd2: not configured, cannot reconfigure
[  718.638454][T28102] nbd: illegal input index -8454144
[  718.651357][T28102] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1991432206/1991432208
[  718.651387][T28102] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1991432206/1991432207
[  718.651577][T28102] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1991432206/1991432208
[  718.651600][T28102] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1991432206/1991432207
[  718.710908][   T30] audit: type=1800 audit(1794207480.189:10): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5569" name="memory.events" dev="tmpfs" ino=2849 res=0 errno=-22
[  718.719607][   T30] audit: type=1804 audit(1794207480.199:11): pid=28110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5569" name="/newroot/555/memory.events" dev="tmpfs" ino=2849 res=1 errno=0
[  719.027099][T28130] syzkaller0: entered promiscuous mode
[  719.027123][T28130] syzkaller0: entered allmulticast mode
[  719.053130][T28130] sctp: [Deprecated]: syz.3.5577 (pid 28130) Use of int in max_burst socket option deprecated.
[  719.053130][T28130] Use struct sctp_assoc_value instead
[  721.395178][T28171] __nla_validate_parse: 14 callbacks suppressed
[  721.395206][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'.
[  721.395865][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'.
[  721.397396][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'.
[  721.640173][T28189] netlink: 'syz.3.5593': attribute type 2 has an invalid length.
[  721.643151][T28189] ip6t_srh: unknown srh match flags  5F28
[  721.797524][T28199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5596'.
[  722.045116][T28210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5603'.
[  722.115218][T28214] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  722.179409][T28214] syzkaller0: left promiscuous mode
[  722.179433][T28214] syzkaller0: left allmulticast mode
[  722.316241][T28228] xt_l2tp: unknown flags: 43
[  722.806526][T28264] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5613'.
[  722.908681][T28267] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  723.051374][T28278] netlink: 'syz.3.5617': attribute type 4 has an invalid length.
[  723.084142][T28280] netlink: 'syz.2.5618': attribute type 1 has an invalid length.
[  723.088100][T28282] xt_socket: unknown flags 0xc
[  723.124469][T28280] bond4: entered promiscuous mode
[  723.124880][T28280] 8021q: adding VLAN 0 to HW filter on device bond4
[  723.286466][T28294] x_tables: duplicate underflow at hook 2
[  723.300247][T28294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5619'.
[  723.300463][T28294] bridge_slave_0: default FDB implementation only supports local addresses
[  723.319937][T28294] openvswitch: netlink: Multiple metadata blocks provided
[  723.514878][T28300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5621'.
[  723.534249][T28300] sctp: [Deprecated]: syz.4.5621 (pid 28300) Use of struct sctp_assoc_value in delayed_ack socket option.
[  723.534249][T28300] Use struct sctp_sack_info instead
[  723.657972][T28305] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  723.661683][T28305] bond8 (unregistering): Released all slaves
[  723.823693][T28316] netlink: del zone limit has 8 unknown bytes
[  723.823906][T28316] netlink: del zone limit has 8 unknown bytes
[  723.824124][T28316] netlink: del zone limit has 8 unknown bytes
[  723.827929][T28316] netlink: del zone limit has 8 unknown bytes
[  723.828168][T28316] netlink: del zone limit has 8 unknown bytes
[  723.828345][T28316] netlink: del zone limit has 8 unknown bytes
[  723.828541][T28316] netlink: del zone limit has 8 unknown bytes
[  723.828784][T28316] netlink: del zone limit has 8 unknown bytes
[  723.930332][T28321] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5627'.
[  724.009960][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5629'.
[  724.102515][T28332] Bluetooth: hci0: unsupported parameter 5161
[  724.102536][T28332] Bluetooth: hci0: unsupported parameter 8192
[  724.102547][T28332] Bluetooth: hci0: unsupported parameter 5161
[  724.102559][T28332] Bluetooth: hci0: unsupported parameter 8192
[  724.527943][T28367] xt_hashlimit: size too large, truncated to 1048576
[  724.598455][T28371] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.617049][T28371] bridge_slave_0 (unregistering): left allmulticast mode
[  724.617100][T28371] bridge_slave_0 (unregistering): left promiscuous mode
[  724.617175][T28371] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.089442][T28379] netlink: 'syz.0.5644': attribute type 1 has an invalid length.
[  725.136338][T28379] 8021q: adding VLAN 0 to HW filter on device bond8
[  725.162829][T28379] bond8: (slave veth11): Enslaving as an active interface with a down link
[  725.166111][T28379] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[  725.166614][T28379] bond8: (slave wlan1): Opening slave failed
[  725.208592][T28384] block nbd0: reconnected socket
[  725.208613][T28384] block nbd0: Unsupported socket: should be TCP or UNIX.
[  725.212647][ T5641] block nbd0: Receive control failed (result -32)
[  725.485024][T28407] veth1_to_bond: entered allmulticast mode
[  725.642466][T28398] veth1_to_bond: left allmulticast mode
[  725.898751][T28433] netlink: 'syz.0.5662': attribute type 2 has an invalid length.
[  725.898778][T28433] netlink: 'syz.0.5662': attribute type 2 has an invalid length.
[  726.030341][T28436] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  726.148974][T28440] 8021q: adding VLAN 0 to HW filter on device bond11
[  726.548869][T28471] gtp0: entered promiscuous mode
[  726.548893][T28471] gtp0: entered allmulticast mode
[  726.554262][T28466] lo speed is unknown, defaulting to 1000
[  726.554353][T28466] lo speed is unknown, defaulting to 1000
[  726.555202][T28466] lo speed is unknown, defaulting to 1000
[  726.556487][T28466] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  726.556518][T28466] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  726.556555][T28466] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  726.580832][T28466] lo speed is unknown, defaulting to 1000
[  726.587372][T28466] lo speed is unknown, defaulting to 1000
[  726.591076][T28466] lo speed is unknown, defaulting to 1000
[  726.611842][T28466] lo speed is unknown, defaulting to 1000
[  726.649298][T28466] lo speed is unknown, defaulting to 1000
[  726.677000][T28466] lo speed is unknown, defaulting to 1000
[  726.981582][T28488] __nla_validate_parse: 9 callbacks suppressed
[  726.981658][T28488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5676'.
[  727.139252][T28502] bond10: entered allmulticast mode
[  727.139627][T28502] 8021q: adding VLAN 0 to HW filter on device bond10
[  727.288959][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.288985][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.293720][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.293745][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.295282][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.295301][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.295883][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.295901][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.298973][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.298993][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.303298][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.303318][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.304292][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.304311][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.304778][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.304795][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.308155][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[  727.308194][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.313231][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.316448][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.318330][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.323160][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.325742][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.326403][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.326920][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.333833][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.334537][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.335559][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.336092][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.339823][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.341144][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.345371][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.345893][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.347899][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.349029][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.352436][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.363024][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.363735][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.369206][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.380712][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.385543][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.386221][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.388948][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.392556][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.393133][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.396136][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.397455][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.411355][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.411792][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.412474][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.417966][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.418412][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.419017][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.422322][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.422928][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.424871][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.426128][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.427955][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.431512][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.434896][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.436105][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.438977][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.439866][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.441510][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.443666][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.445406][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.445911][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.446827][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.449532][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.450441][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.453877][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.454374][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.457448][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.459004][T28511] block nbd1: Unsupported socket: should be TCP or UNIX.
[  727.797962][T28523] bridge6: entered promiscuous mode
[  727.798021][T28523] bridge6: entered allmulticast mode
[  728.027221][T28543] syzkaller0: entered promiscuous mode
[  728.027243][T28543] syzkaller0: entered allmulticast mode
[  728.074396][T28549] syzkaller1: entered promiscuous mode
[  728.074420][T28549] syzkaller1: entered allmulticast mode
[  728.142609][    C0] net_ratelimit: 59 callbacks suppressed
[  728.142631][    C0] TC_ACT_REPEAT abuse ?
[  728.145330][    C0] TC_ACT_REPEAT abuse ?
[  728.283980][T28554] netlink: 'syz.2.5691': attribute type 1 has an invalid length.
[  728.302778][T28554] bond5: entered promiscuous mode
[  728.303269][T28554] 8021q: adding VLAN 0 to HW filter on device bond5
[  728.307136][T28554] bond5: entered allmulticast mode
[  728.310044][T28554] openvswitch: netlink: Tunnel attr 229 out of range max 16
[  728.328652][T28555] bond5: (slave bridge7): making interface the new active one
[  728.328671][T28555] bridge7: entered promiscuous mode
[  728.328853][T28555] bridge7: entered allmulticast mode
[  728.337092][T28555] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  728.430174][T28470] NFSD: Failed to start, no listeners configured.
[  728.589884][    C0] TC_ACT_REPEAT abuse ?
[  728.592409][    C0] TC_ACT_REPEAT abuse ?
[  728.670212][T28569] netlink: 'syz.2.5694': attribute type 12 has an invalid length.
[  728.670227][T28569] netlink: 'syz.2.5694': attribute type 11 has an invalid length.
[  728.755394][    C0] TC_ACT_REPEAT abuse ?
[  728.759098][    C0] TC_ACT_REPEAT abuse ?
[  728.827194][    C1] TC_ACT_REPEAT abuse ?
[  728.829303][    C1] TC_ACT_REPEAT abuse ?
[  728.898268][    C1] TC_ACT_REPEAT abuse ?
[  730.289609][T28660] netlink: 'syz.1.5716': attribute type 83 has an invalid length.
[  730.537225][T28668] netlink: 'syz.4.5724': attribute type 1 has an invalid length.
[  730.555648][ T5849] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  730.556495][T28670] macsec1: entered promiscuous mode
[  730.556731][T28670] macsec1: entered allmulticast mode
[  730.556750][T28670] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  730.558592][T28670] 8021q: adding VLAN 0 to HW filter on device macsec1
[  733.123887][T28670] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  733.169110][ T5849] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  733.215825][    C1] net_ratelimit: 22 callbacks suppressed
[  733.215851][    C1] TC_ACT_REPEAT abuse ?
[  733.217383][    C1] TC_ACT_REPEAT abuse ?
[  733.300160][T28682] __nla_validate_parse: 73 callbacks suppressed
[  733.300181][T28682] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5726'.
[  733.300768][T28684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5728'.
[  733.352354][T28686] xt_l2tp: unknown flags: 43
[  733.352786][T28687] xt_l2tp: unknown flags: 43
[  733.419327][T28694] netlink: 'syz.2.5732': attribute type 1 has an invalid length.
[  733.567354][T28700] 8021q: adding VLAN 0 to HW filter on device bond7
[  733.578702][T28700] bond6: (slave bond7): making interface the new active one
[  733.589954][T28700] bond6: (slave bond7): Enslaving as an active interface with an up link
[  733.648404][T28694] bond6: (slave gretap0): Enslaving as a backup interface with an up link
[  733.774508][    C1] TC_ACT_REPEAT abuse ?
[  733.776886][    C1] TC_ACT_REPEAT abuse ?
[  733.850765][T28722] netlink: set zone limit has 4 unknown bytes
[  734.015701][    C1] TC_ACT_REPEAT abuse ?
[  734.018563][    C1] TC_ACT_REPEAT abuse ?
[  734.105344][T28724] syzkaller1: entered promiscuous mode
[  734.105369][T28724] syzkaller1: entered allmulticast mode
[  734.193312][T28745] x_tables: duplicate underflow at hook 2
[  734.230451][T28749] netlink: 'syz.0.5744': attribute type 10 has an invalid length.
[  734.230935][T28749] netlink: 'syz.0.5744': attribute type 28 has an invalid length.
[  734.230951][T28749] netlink: 'syz.0.5744': attribute type 3 has an invalid length.
[  734.230987][T28749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5744'.
[  734.424969][T28762] ip_tables: iptables: counters copy to user failed while replacing table
[  734.435596][T28761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5747'.
[  734.588634][T28769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5749'.
[  734.668470][T28774] netlink: 'syz.2.5750': attribute type 1 has an invalid length.
[  734.704222][T28774] 8021q: adding VLAN 0 to HW filter on device bond8
[  734.707255][T28773] syzkaller0: entered promiscuous mode
[  734.707276][T28773] syzkaller0: entered allmulticast mode
[  734.817448][    C1] TC_ACT_REPEAT abuse ?
[  734.820181][    C1] TC_ACT_REPEAT abuse ?
[  734.842364][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'.
[  734.842399][T28774] netlink: 'syz.2.5750': attribute type 5 has an invalid length.
[  734.842413][T28774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5750'.
[  734.880316][T28774] geneve3: entered promiscuous mode
[  734.880338][T28774] geneve3: entered allmulticast mode
[  734.892941][T19489] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  734.902464][  T237] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  734.903612][  T237] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  735.113623][T28799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5756'.
[  735.389532][T28807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5758'.
[  736.260794][T28842] netlink: 'syz.4.5769': attribute type 3 has an invalid length.
[  736.385150][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5772'.
[  737.051273][T20123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  737.070733][T20123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  737.072343][T20123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  737.087463][T20123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  737.088142][T20123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  737.149998][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  737.152656][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  737.167857][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  737.177103][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  737.178781][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  737.554374][T28902] 8021q: adding VLAN 0 to HW filter on device bond9
[  737.781585][T28914] netlink: 'syz.3.5785': attribute type 3 has an invalid length.
[  737.788819][T28914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  737.788836][T28914] IPv6: NLM_F_CREATE should be set when creating new route
[  737.788878][T28914] IPv6: NLM_F_CREATE should be set when creating new route
[  737.788900][T28914] IPv6: NLM_F_CREATE should be set when creating new route
[  737.804574][T28914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  737.906865][T28919] veth0_to_bond: default FDB implementation only supports local addresses
[  738.134063][T28930] netlink: 'syz.3.5788': attribute type 11 has an invalid length.
[  738.270255][T28886] rxe_eth0 speed is unknown, defaulting to 1000
[  738.436666][T28942] __nla_validate_parse: 6 callbacks suppressed
[  738.436687][T28942] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5791'.
[  738.547009][T28886] lo speed is unknown, defaulting to 1000
[  738.703386][T28948] net_ratelimit: 18 callbacks suppressed
[  738.703416][T28948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  738.757501][T28948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.939762][T28952] netlink: 'syz.1.5795': attribute type 28 has an invalid length.
[  738.939784][T28952] netlink: 'syz.1.5795': attribute type 3 has an invalid length.
[  738.939795][T28952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5795'.
[  738.975145][    C1] TC_ACT_REPEAT abuse ?
[  738.977653][    C1] TC_ACT_REPEAT abuse ?
[  739.129380][T28966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5798'.
[  739.167415][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.167653][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.167866][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.168092][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.168291][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.168484][T28972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.220092][T20123] Bluetooth: hci4: command tx timeout
[  739.350867][T28979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5801'.
[  739.447472][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.515513][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.517169][T28886] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.519034][T28886] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.519189][T28886] bridge_slave_0: entered allmulticast mode
[  739.524432][T28886] bridge_slave_0: entered promiscuous mode
[  739.530602][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.530796][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.530972][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.531204][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'.
[  739.534624][T28886] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.534724][T28886] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.534849][T28886] bridge_slave_1: entered allmulticast mode
[  739.539491][T28886] bridge_slave_1: entered promiscuous mode
[  739.680419][T28886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  739.709403][T28886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  739.767679][T28886] team0: Port device team_slave_0 added
[  739.774541][T28886] team0: Port device team_slave_1 added
[  739.860481][T28886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  739.860500][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  739.860530][T28886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.865805][T28886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.865822][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  739.865847][T28886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.001394][T28886] hsr_slave_0: entered promiscuous mode
[  740.008270][T28886] hsr_slave_1: entered promiscuous mode
[  740.241803][T28886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  740.241839][T28886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.243141][T28886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  740.378029][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880543b6400: rx timeout, send abort
[  740.378338][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880543b6400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  740.437075][T28886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  740.437108][T28886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.437132][T28886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  740.585210][T28886] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  740.586560][T28886] bridge0: port 5(netdevsim1) entered disabled state
[  740.622521][T28886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  740.622556][T28886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.622580][T28886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  741.292746][T20123] Bluetooth: hci4: command tx timeout
[  741.405713][T28886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  741.425286][T28886] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  741.428215][T28886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  741.454990][T28886] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  741.461795][T28886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  741.486650][T28886] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  741.487632][T28886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  741.510105][T28886] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  742.246855][T28886] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.280111][T28886] 8021q: adding VLAN 0 to HW filter on device team0
[  742.288662][T19499] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.288765][T19499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.298026][T19498] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.298161][T19498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.279322][T29131] xt_REDIRECT: bad rangesize 26624.
[  743.372457][T20123] Bluetooth: hci4: command tx timeout
[  743.395452][T28886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  743.499558][T28886] veth0_vlan: entered promiscuous mode
[  743.522560][T28886] veth1_vlan: entered promiscuous mode
[  743.638356][T28886] veth0_macvtap: entered promiscuous mode
[  743.669797][T28886] veth1_macvtap: entered promiscuous mode
[  743.737905][T28886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  743.763779][T28886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  743.872712][ T1128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.874896][T19492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.875193][T19492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.875414][T19492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  744.044473][ T6532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.044494][ T6532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.049644][T29160] net_ratelimit: 1040 callbacks suppressed
[  744.049662][T29160] ip_tables: iptables: counters copy to user failed while replacing table
[  744.175447][    C1] TC_ACT_REPEAT abuse ?
[  744.178379][    C1] TC_ACT_REPEAT abuse ?
[  744.204559][T29157] bond9: entered promiscuous mode
[  744.204581][T29157] bond9: entered allmulticast mode
[  744.269962][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.269983][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.418945][    C1] TC_ACT_REPEAT abuse ?
[  744.422120][    C1] TC_ACT_REPEAT abuse ?
[  744.541001][T29179] geneve2: entered promiscuous mode
[  744.572722][T19499] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 57140 - 0
[  744.574256][T19499] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 57140 - 0
[  744.575416][T19498] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 57140 - 0
[  744.575454][T19498] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 57140 - 0
[  744.625527][T29179] syzkaller1: entered promiscuous mode
[  744.625551][T29179] syzkaller1: entered allmulticast mode
[  744.714290][T29186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.714405][T29186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.714476][T29186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.714547][T29186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.714612][T29186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.766529][T29185] __nla_validate_parse: 69 callbacks suppressed
[  744.766542][T29185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5853'.
[  744.771172][T29189] mac80211_hwsim hwsim25 wlan0: left promiscuous mode
[  745.236398][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  745.239216][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  745.246799][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  745.257372][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  745.271600][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  745.457729][T20123] Bluetooth: hci4: command tx timeout
[  745.477386][T29208] veth0_to_bond: entered allmulticast mode
[  745.745123][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5861'.
[  745.910944][T29229] pimreg: entered allmulticast mode
[  745.925595][T29199] rxe_eth0 speed is unknown, defaulting to 1000
[  746.029400][T29237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'.
[  746.117221][T29241] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003
[  746.118880][T29239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5868'.
[  746.191254][T29199] lo speed is unknown, defaulting to 1000
[  746.277811][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5866'.
[  746.723947][T29199] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.724144][T29199] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.724272][T29199] bridge_slave_0: entered allmulticast mode
[  746.725937][T29199] bridge_slave_0: entered promiscuous mode
[  746.729961][T29199] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.730146][T29199] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.730270][T29199] bridge_slave_1: entered allmulticast mode
[  746.734943][T29199] bridge_slave_1: entered promiscuous mode
[  746.857914][T29199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.869430][T29199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.968718][T29199] team0: Port device team_slave_0 added
[  746.984393][T29199] team0: Port device team_slave_1 added
[  747.076157][T29199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.076175][T29199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.076208][T29199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.078408][T29199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.078422][T29199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.078446][T29199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.225650][T29294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5885'.
[  747.269613][T29297] pimreg: left allmulticast mode
[  747.336557][T29300] x_tables: unsorted entry at hook 4
[  747.336635][T29300] x_tables: unsorted entry at hook 4
[  747.336710][T29300] x_tables: unsorted entry at hook 4
[  747.336778][T29300] x_tables: unsorted entry at hook 4
[  747.336843][T29300] x_tables: unsorted entry at hook 4
[  747.336910][T29300] x_tables: unsorted entry at hook 4
[  747.336976][T29300] x_tables: unsorted entry at hook 4
[  747.337068][T29300] x_tables: unsorted entry at hook 4
[  747.337134][T29300] x_tables: unsorted entry at hook 4
[  747.337199][T29300] x_tables: unsorted entry at hook 4
[  747.372437][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  747.378748][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  747.380477][T20123] Bluetooth: hci3: command tx timeout
[  747.386182][T29199] hsr_slave_0: entered promiscuous mode
[  747.392441][T29199] hsr_slave_1: entered promiscuous mode
[  747.393135][T29199] debugfs: 'hsr0' already exists in 'hsr'
[  747.397695][T29199] Cannot create hsr debugfs directory
[  747.460120][T29309] netlink: 872 bytes leftover after parsing attributes in process `syz.2.5886'.
[  747.461167][T29299] syzkaller0: left promiscuous mode
[  747.461185][T29299] syzkaller0: left allmulticast mode
[  747.518169][T29310] netlink: 872 bytes leftover after parsing attributes in process `syz.2.5886'.
[  747.788223][T29199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  747.788263][T29199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  747.788287][T29199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.924488][T29199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  747.924510][T29199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  747.924523][T29199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.984530][T29317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5888'.
[  747.989120][T29317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5888'.
[  748.154463][T29199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  748.154497][T29199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  748.154519][T29199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.410227][T29199] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  748.425482][T29199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  748.425515][T29199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  748.425540][T29199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.786988][T29340] netlink: 'syz.4.5893': attribute type 1 has an invalid length.
[  748.809865][T29358] netlink: 'syz.3.5899': attribute type 1 has an invalid length.
[  748.840127][T29340] 8021q: adding VLAN 0 to HW filter on device bond10
[  748.871751][T29354] bond10: (slave gretap2): making interface the new active one
[  748.880549][T29354] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  748.929131][T29358] bond12: (slave bridge5): making interface the new active one
[  748.929752][T29358] bond12: (slave bridge5): Enslaving as an active interface with an up link
[  748.988110][T29199] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  749.008441][T29199] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  749.009938][T29199] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  749.030676][T29199] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  749.040308][T29199] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  749.052786][T29199] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  749.053689][T29199] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  749.058517][T29199] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  749.152868][T29379] syzkaller0: entered promiscuous mode
[  749.152891][T29379] syzkaller0: entered allmulticast mode
[  749.374720][    C0] net_ratelimit: 23 callbacks suppressed
[  749.374741][    C0] TC_ACT_REPEAT abuse ?
[  749.377396][    C0] TC_ACT_REPEAT abuse ?
[  749.458945][ T5641] Bluetooth: hci3: command tx timeout
[  749.486846][T29199] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.488705][T29393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  749.567879][T29394] 8021q: adding VLAN 0 to HW filter on device bond13
[  749.592694][T29391] netlink: 'syz.4.5904': attribute type 1 has an invalid length.
[  749.592716][T29391] netlink: 'syz.4.5904': attribute type 2 has an invalid length.
[  749.596097][T29394] 8021q: adding VLAN 0 to HW filter on device bond14
[  749.698855][    C0] TC_ACT_REPEAT abuse ?
[  749.701629][    C0] TC_ACT_REPEAT abuse ?
[  749.709033][T29394] 8021q: adding VLAN 0 to HW filter on device bond15
[  749.740545][T29406] xt_cgroup: invalid path, errno=-2
[  749.756946][T29406] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  749.787284][T29394] 8021q: adding VLAN 0 to HW filter on device bond16
[  749.792835][T29408] __nla_validate_parse: 4 callbacks suppressed
[  749.792852][T29408] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5910'.
[  749.916717][T29394] 8021q: adding VLAN 0 to HW filter on device bond17
[  749.967264][T29421] set_target_v1_checkentry: 1 callbacks suppressed
[  749.967283][T29421] Cannot find del_set index 3 as target
[  749.972922][T29423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.986767][T29394] 8021q: adding VLAN 0 to HW filter on device bond18
[  750.044103][T29429] Cannot find del_set index 3 as target
[  750.078805][T29394] 8021q: adding VLAN 0 to HW filter on device bond19
[  750.081386][T29199] 8021q: adding VLAN 0 to HW filter on device team0
[  750.136086][T29394] 8021q: adding VLAN 0 to HW filter on device bond20
[  750.185474][T29394] 8021q: adding VLAN 0 to HW filter on device bond21
[  750.286430][T29446] ip_tables: iptables: counters copy to user failed while replacing table
[  750.298385][T29394] 8021q: adding VLAN 0 to HW filter on device bond22
[  750.336162][T29394] 8021q: adding VLAN 0 to HW filter on device bond23
[  750.367458][  T237] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.367567][  T237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.406469][T19492] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.406575][T19492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  750.415312][    C0] TC_ACT_REPEAT abuse ?
[  750.418059][    C0] TC_ACT_REPEAT abuse ?
[  750.680283][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'.
[  750.739073][    C0] TC_ACT_REPEAT abuse ?
[  750.950869][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  750.950940][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  750.951648][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  750.979030][T29479] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  750.979096][T29479] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  750.979136][T29479] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  751.050009][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.051780][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.068983][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.083918][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.086874][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.088843][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.090614][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.099234][T29479] virt_wifi0 speed is unknown, defaulting to 1000
[  751.143551][T29482] bridge0: port 3(syz_tun) entered blocking state
[  751.143775][T29482] bridge0: port 3(syz_tun) entered disabled state
[  751.143927][T29482] syz_tun: entered allmulticast mode
[  751.145791][T29482] syz_tun: entered promiscuous mode
[  751.146457][T29482] bridge0: port 3(syz_tun) entered blocking state
[  751.146573][T29482] bridge0: port 3(syz_tun) entered listening state
[  751.158468][    C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost
[  751.159537][    C1] bridge0: topology change detected, propagating
[  751.399732][T29497] veth0_to_bridge: entered promiscuous mode
[  751.400876][T29495] veth0_to_bridge: left promiscuous mode
[  751.489749][T29199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  751.532575][ T5641] Bluetooth: hci3: command tx timeout
[  751.736718][T29199] veth0_vlan: entered promiscuous mode
[  751.764901][T29199] veth1_vlan: entered promiscuous mode
[  751.879352][T29520] syzkaller0: entered promiscuous mode
[  751.879373][T29520] syzkaller0: entered allmulticast mode
[  751.905540][T29199] veth0_macvtap: entered promiscuous mode
[  751.935484][T29199] veth1_macvtap: entered promiscuous mode
[  752.167313][T29199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.206175][T29199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.286423][T19499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.286526][T19499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.286559][T19499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.286590][T19499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.627909][ T6532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.627930][ T6532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.656881][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5940'.
[  752.691287][T29553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5940'.
[  752.764661][T19492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.764683][T19492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.321379][T29585] sock: sock_timestamping_bind_phc: sock not bind to device
[  753.614415][ T5641] Bluetooth: hci3: command tx timeout
[  753.850770][T20123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  753.874271][T20123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  753.878935][T20123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  753.900192][T20123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  753.919209][T20123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  754.471912][    C1] net_ratelimit: 13 callbacks suppressed
[  754.471932][    C1] TC_ACT_REPEAT abuse ?
[  754.474524][    C1] TC_ACT_REPEAT abuse ?
[  754.574481][    C1] TC_ACT_REPEAT abuse ?
[  754.577209][    C1] TC_ACT_REPEAT abuse ?
[  754.743584][T29656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5963'.
[  754.835002][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5964'.
[  754.856762][T29660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5964'.
[  754.857378][T29660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5964'.
[  754.860670][T29664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5966'.
[  754.860727][T29664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5966'.
[  754.898640][    C0] TC_ACT_REPEAT abuse ?
[  754.901288][    C0] TC_ACT_REPEAT abuse ?
[  754.993951][T29609] rxe_eth0 speed is unknown, defaulting to 1000
[  755.219370][T29675] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5969'.
[  755.281250][T29678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5970'.
[  755.293240][T29678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5970'.
[  755.329536][T29609] lo speed is unknown, defaulting to 1000
[  755.339212][T29609] virt_wifi0 speed is unknown, defaulting to 1000
[  755.458859][T29691] netlink: 'syz.1.5974': attribute type 2 has an invalid length.
[  755.576023][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5976'.
[  755.616146][    C1] TC_ACT_REPEAT abuse ?
[  755.617245][T29703] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5977'.
[  755.618795][    C1] TC_ACT_REPEAT abuse ?
[  755.938352][    C0] TC_ACT_REPEAT abuse ?
[  755.941091][    C0] TC_ACT_REPEAT abuse ?
[  756.012813][ T5641] Bluetooth: hci5: command tx timeout
[  756.171549][T29609] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.177904][T29609] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.178096][T29609] bridge_slave_0: entered allmulticast mode
[  756.202821][T29609] bridge_slave_0: entered promiscuous mode
[  756.264793][T29733] team0 (unregistering): Port device team_slave_0 removed
[  756.269377][T29733] team0 (unregistering): Port device team_slave_1 removed
[  756.369825][T29609] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.369938][T29609] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.370125][T29609] bridge_slave_1: entered allmulticast mode
[  756.375540][T29609] bridge_slave_1: entered promiscuous mode
[  756.481389][T29609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  756.498212][T29609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  756.540478][T29609] team0: Port device team_slave_0 added
[  756.549951][T29609] team0: Port device team_slave_1 added
[  756.586526][T29609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.586543][T29609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.586567][T29609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  756.588737][T29609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  756.588754][T29609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.588775][T29609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  756.736080][T29609] hsr_slave_0: entered promiscuous mode
[  756.737154][T29609] hsr_slave_1: entered promiscuous mode
[  756.737871][T29609] debugfs: 'hsr0' already exists in 'hsr'
[  756.737888][T29609] Cannot create hsr debugfs directory
[  757.507793][T29805] netlink: 'syz.1.5999': attribute type 21 has an invalid length.
[  757.592137][T29805] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  757.595072][T29805] bond1 (unregistering): Released all slaves
[  758.028317][T29814] netlink: 'syz.3.6002': attribute type 4 has an invalid length.
[  758.093169][ T5641] Bluetooth: hci5: command tx timeout
[  758.195446][T29827] xt_hashlimit: size too large, truncated to 1048576
[  758.319357][T29830] netlink: 'syz.1.6005': attribute type 1 has an invalid length.
[  758.419081][T29836] netlink: 'syz.3.6007': attribute type 1 has an invalid length.
[  758.604875][T29841] netlink: 'syz.2.6008': attribute type 8 has an invalid length.
[  759.025475][T29609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  759.044880][T29609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  759.045283][T29858] Bluetooth: hci0: unsupported parameter 5135
[  759.045301][T29858] Bluetooth: hci0: unsupported parameter 8192
[  759.045312][T29858] Bluetooth: hci0: unsupported parameter 5135
[  759.045323][T29858] Bluetooth: hci0: unsupported parameter 8192
[  759.048169][T29609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  759.050901][T29860] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  759.108148][T29609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  759.109027][T29609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  759.128364][T29609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  759.129370][T29609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  759.154530][T29609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  759.325210][T29609] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.346074][T29609] 8021q: adding VLAN 0 to HW filter on device team0
[  759.369492][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.369598][ T6532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  759.401885][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.402000][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  759.408874][T29881] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  759.416440][T29881] 0ªî{X¹¦: entered allmulticast mode
[  759.421149][T29880] 0ªî{X¹¦: entered promiscuous mode
[  759.421169][T29880] 0ªî{X¹¦: left allmulticast mode
[  759.456431][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  759.459322][T29881] 1ªî{X¹¦: left promiscuous mode
[  759.459342][T29881] 1ªî{X¹¦: entered allmulticast mode
[  759.482668][T29883] net_ratelimit: 14 callbacks suppressed
[  759.482710][T29883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  759.489301][T29881] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.489628][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  759.507918][T29881] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.509878][T29880] 0ªî{X¹¦: entered promiscuous mode
[  759.509897][T29880] 0ªî{X¹¦: left allmulticast mode
[  759.527397][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  759.540062][T29881] 1ªî{X¹¦: left promiscuous mode
[  759.549121][T29881] 1ªî{X¹¦: entered allmulticast mode
[  759.557832][T29881] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.559722][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  759.569389][T29881] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.578475][T29880] 0ªî{X¹¦: entered promiscuous mode
[  759.578493][T29880] 0ªî{X¹¦: left allmulticast mode
[  759.608210][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  759.625525][T29881] 1ªî{X¹¦: left promiscuous mode
[  759.625545][T29881] 1ªî{X¹¦: entered allmulticast mode
[  759.637459][T29881] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.641020][T29880] 1ªî{X¹¦: entered promiscuous mode
[  759.641066][T29880] 1ªî{X¹¦: left allmulticast mode
[  759.662147][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[  759.665874][T29881] 0ªî{X¹¦: left promiscuous mode
[  759.667182][T29881] 0ªî{X¹¦: entered allmulticast mode
[  759.675595][T29881] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.675914][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  759.686990][T29881] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.690218][T29880] 1ªî{X¹¦: entered promiscuous mode
[  759.690237][T29880] 1ªî{X¹¦: left allmulticast mode
[  759.711114][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[  759.716337][T29881] 0ªî{X¹¦: left promiscuous mode
[  759.716357][T29881] 0ªî{X¹¦: entered allmulticast mode
[  759.720858][T29881] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  759.729397][T29880] 0ªî{X¹¦: entered promiscuous mode
[  759.729416][T29880] 0ªî{X¹¦: left allmulticast mode
[  759.774207][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  759.777473][    C1] TC_ACT_REPEAT abuse ?
[  759.804547][T29881] 1ªî{X¹¦: left promiscuous mode
[  759.804570][T29881] 1ªî{X¹¦: entered allmulticast mode
[  759.806537][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  759.828561][T29880] 0ªî{X¹¦: entered promiscuous mode
[  759.828583][T29880] 0ªî{X¹¦: left allmulticast mode
[  759.843292][T29880] __nla_validate_parse: 36 callbacks suppressed
[  759.843312][T29880] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6015'.
[  759.847393][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  759.851636][T29881] 1ªî{X¹¦: left promiscuous mode
[  759.851655][T29881] 1ªî{X¹¦: entered allmulticast mode
[  759.875577][T29885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6018'.
[  759.898858][T29881] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6015'.
[  759.911556][T29880] 1ªî{X¹¦: entered promiscuous mode
[  759.911577][T29880] 1ªî{X¹¦: left allmulticast mode
[  759.924292][T29880] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6015'.
[  759.979992][T29885] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  759.994938][T29885] bond11 (unregistering): Released all slaves
[  760.059374][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[  760.066303][T29881] 0ªî{X¹¦: left promiscuous mode
[  760.066324][T29881] 0ªî{X¹¦: entered allmulticast mode
[  760.072564][T29881] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6015'.
[  760.072702][T29881] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  760.098590][T29881] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6015'.
[  760.121379][T29880] 1ªî{X¹¦: entered promiscuous mode
[  760.121402][T29880] 1ªî{X¹¦: left allmulticast mode
[  760.140352][T29880] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6015'.
[  760.161343][T29881] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[  760.175005][ T5641] Bluetooth: hci5: command tx timeout
[  760.195061][T29881] 0ªî{X¹¦: left promiscuous mode
[  760.195083][T29881] 0ªî{X¹¦: entered allmulticast mode
[  760.217916][T29880] 0ªî{X¹¦: entered promiscuous mode
[  760.217930][T29880] 0ªî{X¹¦: left allmulticast mode
[  760.367294][T29913] rxe_eth0 speed is unknown, defaulting to 1000
[  760.395873][T29915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'.
[  760.630338][T29913] lo speed is unknown, defaulting to 1000
[  760.638913][T29913] virt_wifi0 speed is unknown, defaulting to 1000
[  760.798632][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6027'.
[  760.892964][T29936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6028'.
[  761.047754][T29929] 8021q: adding VLAN 0 to HW filter on device bond11
[  761.181540][T29609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  761.321467][T29609] veth0_vlan: entered promiscuous mode
[  761.343668][T29609] veth1_vlan: entered promiscuous mode
[  761.497788][T29609] veth0_macvtap: entered promiscuous mode
[  761.511278][T29609] veth1_macvtap: entered promiscuous mode
[  761.550496][T29954] netlink: 'syz.4.6031': attribute type 1 has an invalid length.
[  761.560239][T29609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  761.595780][   T30] audit: type=1804 audit(1794207523.079:12): pid=29954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6031" name="/newroot/545/cgroup.controllers" dev="tmpfs" ino=2790 res=1 errno=0
[  761.595897][   T30] audit: type=1800 audit(1794207523.079:13): pid=29954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6031" name="cgroup.controllers" dev="tmpfs" ino=2790 res=0 errno=-22
[  761.600201][T29609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  761.644755][  T237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  761.644807][  T237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  761.644838][  T237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  761.644868][  T237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  762.253511][ T5641] Bluetooth: hci5: command tx timeout
[  763.097652][T29901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  763.259242][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.259275][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.329868][T29966] sch_tbf: burst 0 is lower than device gre0 mtu (1500) !
[  763.400090][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.400113][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.643078][T29979] netlink: 'syz.2.6038': attribute type 1 has an invalid length.
[  763.706298][T29987] netlink: 'syz.4.6039': attribute type 21 has an invalid length.
[  763.755983][T29992] netlink: 'syz.4.6039': attribute type 21 has an invalid length.
[  763.809334][T29982] bond1: (slave geneve3): making interface the new active one
[  763.810433][T29982] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  763.811221][T29987] netlink: 'syz.4.6039': attribute type 4 has an invalid length.
[  763.811245][T29987] netlink: 'syz.4.6039': attribute type 5 has an invalid length.
[  763.820920][T29981] 8021q: adding VLAN 0 to HW filter on device bond1
[  763.824760][T29992] netlink: 'syz.4.6039': attribute type 4 has an invalid length.
[  763.824779][T29992] netlink: 'syz.4.6039': attribute type 5 has an invalid length.
[  763.831440][T29994] mac80211_hwsim hwsim49 ÿ
: renamed from wlan1 (while UP)
[  763.884461][T19489] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  763.884505][T19489] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  763.884538][T19489] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  763.884569][T19489] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  763.966934][  T992] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  763.968994][T29994] 8021q: adding VLAN 0 to HW filter on device macsec1
[  764.213684][T30005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.497870][T30005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.574068][T30005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.663063][    C0] net_ratelimit: 25 callbacks suppressed
[  764.663084][    C0] TC_ACT_REPEAT abuse ?
[  764.665607][    C0] TC_ACT_REPEAT abuse ?
[  764.718344][T30005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.804959][T30039] syzkaller1: entered promiscuous mode
[  764.804982][T30039] syzkaller1: entered allmulticast mode
[  764.975309][    C0] TC_ACT_REPEAT abuse ?
[  764.976876][    C0] TC_ACT_REPEAT abuse ?
[  765.117479][T30044] xt_check_table_hooks: 55 callbacks suppressed
[  765.117498][T30044] x_tables: duplicate underflow at hook 1
[  765.139730][T30050] __nla_validate_parse: 13 callbacks suppressed
[  765.139746][T30050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6053'.
[  765.250364][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.254917][T19489] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  765.256095][  T237] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  765.256137][  T237] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.273230][T19492] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  765.331209][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6052'.
[  765.358334][  T237] IPVS: starting estimator thread 0...
[  765.473491][T30068] IPVS: using max 52 ests per chain, 124800 per kthread
[  765.487197][T30077] netlink: 'syz.1.6059': attribute type 1 has an invalid length.
[  765.523929][T30067] ip_tables: iptables: counters copy to user failed while replacing table
[  765.559111][T30083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6059'.
[  765.640858][T30077] bond1: entered promiscuous mode
[  765.653735][T30077] 8021q: adding VLAN 0 to HW filter on device bond1
[  765.695487][    C0] TC_ACT_REPEAT abuse ?
[  765.698072][    C0] TC_ACT_REPEAT abuse ?
[  765.795779][T30087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6060'.
[  765.915067][T30090] dvmrp1: entered allmulticast mode
[  766.016096][    C0] TC_ACT_REPEAT abuse ?
[  766.018765][    C0] TC_ACT_REPEAT abuse ?
[  766.161462][T30115] IPVS: Unknown mcast interface: macvlan0
[  766.483511][T30136] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.574345][    C1] bridge0: port 3(syz_tun) entered learning state
[  766.607355][T20123] block nbd1: Receive control failed (result -32)
[  766.607409][ T5641] block nbd1: Receive control failed (result -32)
[  767.025841][ T5641] Bluetooth: hci3: connection err: -111
[  767.038482][T30152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6072'.
[  767.039749][T30158] xt_l2tp: v2 doesn't support IP mode
[  767.148103][T30167] netlink: 'syz.1.6076': attribute type 3 has an invalid length.
[  767.148125][T30167] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6076'.
[  767.171025][T30167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6076'.
[  767.196338][T30159] veth3: entered allmulticast mode
[  767.247639][T30168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6077'.
[  767.264846][T30173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6077'.
[  767.400001][T30186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6081'.
[  767.429504][T30187] pimreg: entered allmulticast mode
[  767.430795][T30187] tipc: Started in network mode
[  767.430814][T30187] tipc: Node identity 3, cluster identity 4711
[  767.430826][T30187] tipc: Node number set to 3
[  767.522554][T30195] netlink: 'syz.1.6083': attribute type 1 has an invalid length.
[  767.574387][T30195] bond2: entered promiscuous mode
[  767.578601][T30195] 8021q: adding VLAN 0 to HW filter on device bond2
[  767.713874][T30202] netlink: 'syz.1.6083': attribute type 12 has an invalid length.
[  767.784316][T30202] bond3: option primary_reselect: invalid value (255)
[  767.786191][T30202] bond3 (unregistering): Released all slaves
[  768.219502][T30214] block nbd2: server does not support multiple connections per device.
[  768.221184][T30214] block nbd2: shutting down sockets
[  768.381800][T30224] bridge2: entered allmulticast mode
[  768.441134][ T6532] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  769.225674][T30264] netlink: 'syz.0.6098': attribute type 1 has an invalid length.
[  769.611740][T30271] sit1: entered promiscuous mode
[  769.611763][T30271] sit1: entered allmulticast mode
[  769.710752][T30284] netlink: 'syz.3.6100': attribute type 1 has an invalid length.
[  770.017562][    C0] net_ratelimit: 15 callbacks suppressed
[  770.017584][    C0] TC_ACT_REPEAT abuse ?
[  770.020273][    C0] TC_ACT_REPEAT abuse ?
[  770.098492][T30298] SET target dimension over the limit!
[  770.138452][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  770.138649][ T5299] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  770.142651][T30302] __nla_validate_parse: 7 callbacks suppressed
[  770.142670][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6106'.
[  770.142761][T30302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  770.152229][T30298] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6104'.
[  770.179615][    C0] TC_ACT_REPEAT abuse ?
[  770.182092][    C0] TC_ACT_REPEAT abuse ?
[  770.209350][T30302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.665934][T30331] netlink: 'syz.1.6114': attribute type 11 has an invalid length.
[  770.666268][T30332] netlink: 'syz.1.6114': attribute type 11 has an invalid length.
[  770.804338][T30334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6115'.
[  770.913162][T30337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6116'.
[  770.934289][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6116'.
[  771.076213][    C0] TC_ACT_REPEAT abuse ?
[  771.078871][    C0] TC_ACT_REPEAT abuse ?
[  771.215291][    C0] TC_ACT_REPEAT abuse ?
[  771.218024][    C0] TC_ACT_REPEAT abuse ?
[  771.354642][T30354] vlan2: entered allmulticast mode
[  771.354665][T30354] bond0: entered allmulticast mode
[  771.354678][T30354] bond_slave_0: entered allmulticast mode
[  771.354694][T30354] bond_slave_1: entered allmulticast mode
[  771.587570][T30361] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6125'.
[  771.624826][T30361] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  771.633969][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6125'.
[  771.637766][T30365] xt_IDLETIMER: label is empty or not nul-terminated
[  771.717568][T30361] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  771.731903][T30361] bond2 (unregistering): Released all slaves
[  771.753973][T30382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6129'.
[  771.757113][T30383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'.
[  772.095342][    C1] TC_ACT_REPEAT abuse ?
[  772.771200][T30384] workqueue: Failed to create a rescuer kthread for wq "nfc45_nci_tx_wq": -EINTR
[  774.572982][T30365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  774.574782][T30382] netlink: 'syz.3.6129': attribute type 2 has an invalid length.
[  774.976881][T30575] netlink: 'syz.4.6140': attribute type 1 has an invalid length.
[  774.991493][T30577] netlink: 'syz.1.6139': attribute type 1 has an invalid length.
[  775.029064][T30581] netlink: 4337 bytes leftover after parsing attributes in process `syz.0.6141'.
[  775.029102][T30581] net_ratelimit: 11 callbacks suppressed
[  775.029113][T30581] openvswitch: netlink: Actions may not be safe on all matching packets
[  775.054231][T30575] 8021q: adding VLAN 0 to HW filter on device bond12
[  775.130413][T30577] bond3: entered promiscuous mode
[  775.130767][T30577] 8021q: adding VLAN 0 to HW filter on device bond3
[  775.226083][    C0] TC_ACT_REPEAT abuse ?
[  775.228895][    C0] TC_ACT_REPEAT abuse ?
[  775.288703][T30577] bond3: (slave bridge3): making interface the new active one
[  775.288777][T30577] bridge3: entered promiscuous mode
[  775.313698][T30577] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  775.380738][    C0] TC_ACT_REPEAT abuse ?
[  775.383390][    C0] TC_ACT_REPEAT abuse ?
[  775.483617][T30593] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6144'.
[  775.483640][T30593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6144'.
[  776.110570][T30619] netlink: 'syz.3.6151': attribute type 1 has an invalid length.
[  776.183377][T30619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6151'.
[  776.266806][    C1] TC_ACT_REPEAT abuse ?
[  776.269699][    C1] TC_ACT_REPEAT abuse ?
[  776.417134][    C1] TC_ACT_REPEAT abuse ?
[  776.419790][    C1] TC_ACT_REPEAT abuse ?
[  776.580376][T30636] erspan0: entered promiscuous mode
[  776.979487][T30658] netlink: 'syz.3.6163': attribute type 4 has an invalid length.
[  776.980413][T30658] netlink: 'syz.3.6163': attribute type 4 has an invalid length.
[  777.053204][T29153] lo speed is unknown, defaulting to 1000
[  777.053245][T29153] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  777.144483][T30661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6163'.
[  777.298632][    C0] TC_ACT_REPEAT abuse ?
[  777.507603][T30687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6171'.
[  777.976923][T30703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'.
[  777.976950][T30703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'.
[  778.106544][T30705] sctp: [Deprecated]: syz.3.6176 (pid 30705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  778.106544][T30705] Use struct sctp_sack_info instead
[  778.266700][T30714] netlink: 'syz.4.6179': attribute type 11 has an invalid length.
[  778.397204][T30720] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6179'.
[  778.821295][T30739] --map-set only usable from mangle table
[  778.845975][T30749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6187'.
[  778.859774][T30753] --map-set only usable from mangle table
[  779.178323][T30765] vcan0: tx drop: invalid sa for name 0x0102030405060708
[  779.218948][T30771] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.6193'.
[  779.254283][T30771] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  779.256674][T30771] 0ªX¹¦Dö»: entered allmulticast mode
[  779.311787][T30773] sctp: [Deprecated]: syz.3.6194 (pid 30773) Use of int in maxseg socket option.
[  779.311787][T30773] Use struct sctp_assoc_value instead
[  779.816530][T30810] netlink: 'syz.2.6205': attribute type 17 has an invalid length.
[  779.878919][T30812] netlink: 'syz.2.6205': attribute type 17 has an invalid length.
[  779.961063][T30818] netlink: 'syz.0.6207': attribute type 29 has an invalid length.
[  779.961517][T30818] netlink: 'syz.0.6207': attribute type 29 has an invalid length.
[  780.107232][T19489] IPVS: starting estimator thread 0...
[  780.123710][T30827] rxe_eth0 speed is unknown, defaulting to 1000
[  780.192020][T30832] IPVS: using max 29 ests per chain, 69600 per kthread
[  780.414418][    C0] net_ratelimit: 15 callbacks suppressed
[  780.414447][    C0] TC_ACT_REPEAT abuse ?
[  780.416758][    C0] TC_ACT_REPEAT abuse ?
[  780.574802][    C0] TC_ACT_REPEAT abuse ?
[  780.577236][    C0] TC_ACT_REPEAT abuse ?
[  780.625861][T30859] __nla_validate_parse: 66 callbacks suppressed
[  780.625882][T30859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6218'.
[  781.164365][T20123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  781.171671][T20123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  781.186719][T20123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  781.195567][T20123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  781.198228][T20123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  781.456141][    C1] TC_ACT_REPEAT abuse ?
[  781.458711][    C1] TC_ACT_REPEAT abuse ?
[  781.503707][   T30] audit: type=1804 audit(1794207542.979:14): pid=30893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6226" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=511 res=1 errno=0
[  781.503773][   T30] audit: type=1800 audit(1794207542.989:15): pid=30893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6226" name="cgroup.controllers" dev="tmpfs" ino=511 res=0 errno=-22
[  781.585308][T30895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  781.617640][    C0] TC_ACT_REPEAT abuse ?
[  781.620328][    C0] TC_ACT_REPEAT abuse ?
[  781.887457][T30879] rxe_eth0 speed is unknown, defaulting to 1000
[  781.915108][T30916] netlink: 'syz.0.6229': attribute type 1 has an invalid length.
[  781.932014][    C1] bridge0: port 3(syz_tun) entered forwarding state
[  781.932056][    C1] bridge0: topology change detected, propagating
[  782.005959][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6229'.
[  782.040415][T30916] bond1: (slave bridge1): making interface the new active one
[  782.053226][T30916] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  782.280999][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6233'.
[  782.451116][T30937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6235'.
[  782.495390][    C0] TC_ACT_REPEAT abuse ?
[  782.498355][T30937] bond2: option fail_over_mac: invalid value (16)
[  782.501587][T30937] bond2 (unregistering): Released all slaves
[  782.535083][T30879] lo speed is unknown, defaulting to 1000
[  782.536853][T30879] virt_wifi0 speed is unknown, defaulting to 1000
[  782.537066][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'.
[  782.567438][T30946] 8021q: adding VLAN 0 to HW filter on device bond2
[  782.613410][T30950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6236'.
[  782.666067][T30950] macvlan2: entered promiscuous mode
[  782.666090][T30950] macvlan2: entered allmulticast mode
[  782.785668][T30957] netlink: 'syz.1.6239': attribute type 4 has an invalid length.
[  782.789364][T30958] netlink: 'syz.1.6239': attribute type 4 has an invalid length.
[  783.031006][T30976] netlink: 'syz.1.6244': attribute type 83 has an invalid length.
[  783.058490][T30976] netlink: 'syz.1.6244': attribute type 83 has an invalid length.
[  783.278667][T30992] xt_IDLETIMER: label is empty or not nul-terminated
[  783.292271][ T5641] Bluetooth: hci1: command tx timeout
[  783.667930][T30879] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.669812][T30879] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.669944][T30879] bridge_slave_0: entered allmulticast mode
[  783.694565][T30879] bridge_slave_0: entered promiscuous mode
[  783.704693][T30879] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.704805][T30879] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.704928][T30879] bridge_slave_1: entered allmulticast mode
[  783.706668][T30879] bridge_slave_1: entered promiscuous mode
[  783.711199][T30972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6242'.
[  783.888697][T30879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.894418][T30879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.952825][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'.
[  783.952858][T31021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6253'.
[  783.952997][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'.
[  784.019653][T31021] geneve2: entered promiscuous mode
[  784.019676][T31021] geneve2: entered allmulticast mode
[  784.034752][T30879] team0: Port device team_slave_0 added
[  784.047200][T30879] team0: Port device team_slave_1 added
[  784.208999][T30879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.209017][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  784.209070][T30879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  784.258675][T30879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  784.258692][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  784.258720][T30879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  784.352838][T30879] hsr_slave_0: entered promiscuous mode
[  784.354678][T30879] hsr_slave_1: entered promiscuous mode
[  784.355444][T30879] debugfs: 'hsr0' already exists in 'hsr'
[  784.355461][T30879] Cannot create hsr debugfs directory
[  784.700270][T30879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  784.700305][T30879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.700332][T30879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46480 - 0
[  784.700357][T30879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  784.867622][T31045] netlink: 'syz.2.6259': attribute type 1 has an invalid length.
[  784.970318][T30879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  784.970353][T30879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.970379][T30879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46480 - 0
[  784.970404][T30879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  785.173667][T30879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.173702][T30879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.173727][T30879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46480 - 0
[  785.173751][T30879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  785.269091][T19711] IPVS: starting estimator thread 0...
[  785.330254][T30879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.330289][T30879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.330313][T30879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46480 - 0
[  785.330337][T30879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  785.378364][ T5641] Bluetooth: hci1: command tx timeout
[  785.378665][T31074] IPVS: using max 35 ests per chain, 84000 per kthread
[  785.619870][    C0] net_ratelimit: 12 callbacks suppressed
[  785.619892][    C0] TC_ACT_REPEAT abuse ?
[  785.622712][    C0] TC_ACT_REPEAT abuse ?
[  785.641488][T31098] __nla_validate_parse: 1 callbacks suppressed
[  785.641504][T31098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'.
[  785.743887][T30879] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  785.761196][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  785.770414][T30879] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  785.776632][    C1] TC_ACT_REPEAT abuse ?
[  785.779299][    C1] TC_ACT_REPEAT abuse ?
[  785.797784][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  785.798563][T30879] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  785.810165][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  785.816972][T30879] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  785.843308][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  785.844583][T31104] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  786.207288][T30879] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.226175][T30879] 8021q: adding VLAN 0 to HW filter on device team0
[  786.232961][T19489] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.233086][T19489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.244572][T19489] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.244697][T19489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.454436][T31126] netlink: 'syz.1.6272': attribute type 3 has an invalid length.
[  786.654566][    C0] TC_ACT_REPEAT abuse ?
[  786.657175][    C0] TC_ACT_REPEAT abuse ?
[  786.692454][T31135] netlink: 'syz.1.6274': attribute type 1 has an invalid length.
[  786.692478][T31135] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6274'.
[  786.816078][    C1] TC_ACT_REPEAT abuse ?
[  786.819094][    C1] TC_ACT_REPEAT abuse ?
[  787.066308][T31157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6281'.
[  787.066335][T31157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6281'.
[  787.089410][T31157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6281'.
[  787.175954][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'.
[  787.182413][T31157] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.317172][T30879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.371544][T30879] veth0_vlan: entered promiscuous mode
[  787.383016][T30879] veth1_vlan: entered promiscuous mode
[  787.408470][T30879] veth0_macvtap: entered promiscuous mode
[  787.415551][T30879] veth1_macvtap: entered promiscuous mode
[  787.430918][T30879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  787.448007][T30879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  787.452321][T20123] Bluetooth: hci1: command tx timeout
[  787.502681][ T1119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  787.502744][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  787.502777][ T1119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  787.502807][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  787.699525][    C1] TC_ACT_REPEAT abuse ?
[  787.701387][    C1] TC_ACT_REPEAT abuse ?
[  787.932930][T31161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  788.076901][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  788.076923][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  788.198742][T19712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  788.198772][T19712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  788.314652][T31200] bond0: entered promiscuous mode
[  788.314675][T31200] bond_slave_0: entered promiscuous mode
[  788.314876][T31200] bond_slave_1: entered promiscuous mode
[  788.316381][T31200] batadv0: entered promiscuous mode
[  788.317345][T31200] debugfs: 'hsr1' already exists in 'hsr'
[  788.317360][T31200] Cannot create hsr debugfs directory
[  788.321590][T31200] 8021q: adding VLAN 0 to HW filter on device hsr1
[  788.376349][T31200] bond0: left promiscuous mode
[  788.376372][T31200] bond_slave_0: left promiscuous mode
[  788.376595][T31200] bond_slave_1: left promiscuous mode
[  788.380906][T31200] batadv0: left promiscuous mode
[  788.433955][T31206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6291'.
[  788.475000][T31212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6292'.
[  788.712114][T31220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6221'.
[  788.958649][T31227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6299'.
[  789.027728][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  789.028932][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  789.029785][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  789.031624][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  789.080684][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  789.318617][T31244] xt_hashlimit: size too large, truncated to 1048576
[  789.460492][T31258] x_tables: duplicate underflow at hook 2
[  789.534320][T20123] Bluetooth: hci1: command 0x0419 tx timeout
[  789.731101][T31268] Bluetooth: MGMT ver 1.23
[  789.731137][T31268] Bluetooth: hci0: unsupported parameter 5135
[  789.731152][T31268] Bluetooth: hci0: unsupported parameter 8192
[  789.731165][T31268] Bluetooth: hci0: unsupported parameter 5135
[  789.731176][T31268] Bluetooth: hci0: unsupported parameter 8192
[  789.949998][T31230] rxe_eth0 speed is unknown, defaulting to 1000
[  789.997010][T31279] tipc: Started in network mode
[  789.997070][T31279] tipc: Node identity 3a29ca5aafb1, cluster identity 4711
[  789.997310][T31279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  790.005682][T31279] syzkaller0: entered promiscuous mode
[  790.005703][T31279] syzkaller0: entered allmulticast mode
[  790.019132][T31279] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  790.088844][T31279] tipc: Resetting bearer <eth:syzkaller0>
[  790.102757][T31278] tipc: Resetting bearer <eth:syzkaller0>
[  790.152874][T31278] tipc: Disabling bearer <eth:syzkaller0>
[  790.388213][T31290] bond1: entered promiscuous mode
[  790.394322][T31295] netlink: 'syz.0.6315': attribute type 34 has an invalid length.
[  790.433752][T31230] lo speed is unknown, defaulting to 1000
[  790.436657][T31295] macvtap0: entered allmulticast mode
[  790.436676][T31295] veth0_macvtap: entered allmulticast mode
[  790.437357][T31230] virt_wifi0 speed is unknown, defaulting to 1000
[  790.452660][T31295] netlink: 'syz.0.6315': attribute type 34 has an invalid length.
[  790.481158][T31302] netlink: 'syz.0.6315': attribute type 34 has an invalid length.
[  790.484618][T31299] netlink: 'syz.1.6316': attribute type 21 has an invalid length.
[  790.488341][T31303] netlink: 'syz.0.6315': attribute type 34 has an invalid length.
[  790.792531][T31322] __nla_validate_parse: 18 callbacks suppressed
[  790.792550][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6318'.
[  790.817970][    C1] net_ratelimit: 11 callbacks suppressed
[  790.817991][    C1] TC_ACT_REPEAT abuse ?
[  790.820775][    C1] TC_ACT_REPEAT abuse ?
[  790.857863][T31322] bridge_slave_1: left allmulticast mode
[  790.857921][T31322] bridge_slave_1: left promiscuous mode
[  790.858157][T31322] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.884948][T31322] bridge_slave_0: left allmulticast mode
[  790.884974][T31322] bridge_slave_0: left promiscuous mode
[  790.885224][T31322] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.953487][T31320] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6318'.
[  790.976437][    C1] TC_ACT_REPEAT abuse ?
[  790.978101][    C1] TC_ACT_REPEAT abuse ?
[  791.132404][T20123] Bluetooth: hci0: command tx timeout
[  791.269188][T31328] syzkaller0: entered promiscuous mode
[  791.269211][T31328] syzkaller0: entered allmulticast mode
[  791.613659][T20123] Bluetooth: hci1: command 0x0419 tx timeout
[  791.626410][T31364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.629100][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.629121][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.688296][T31366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.708508][T31369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.708534][T31369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'.
[  791.867360][    C1] TC_ACT_REPEAT abuse ?
[  791.869919][    C1] TC_ACT_REPEAT abuse ?
[  791.903590][T31380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  791.923071][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6328'.
[  792.015799][    C1] TC_ACT_REPEAT abuse ?
[  792.018487][    C1] TC_ACT_REPEAT abuse ?
[  792.190408][T31389] vlan2: entered promiscuous mode
[  792.190457][T31389] hsr0: entered promiscuous mode
[  792.225654][T31230] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.225829][T31230] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.225981][T31230] bridge_slave_0: entered allmulticast mode
[  792.229597][T31230] bridge_slave_0: entered promiscuous mode
[  792.271391][T31389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6331'.
[  792.322362][T31230] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.322472][T31230] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.322607][T31230] bridge_slave_1: entered allmulticast mode
[  792.329411][T31230] bridge_slave_1: entered promiscuous mode
[  792.396956][T31389] hsr_slave_0: left promiscuous mode
[  792.409670][T31389] hsr_slave_1: left promiscuous mode
[  792.471327][T31408] Bluetooth: MGMT ver 1.23
[  792.641069][T31230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  792.659945][T31230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  792.808698][T31418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  792.828319][T31230] team0: Port device team_slave_0 added
[  792.846110][T31230] team0: Port device team_slave_1 added
[  792.939168][T31230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.939185][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.939208][T31230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.965916][T31230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.965935][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.965961][T31230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  793.135923][T31230] hsr_slave_0: entered promiscuous mode
[  793.136980][T31230] hsr_slave_1: entered promiscuous mode
[  793.213970][T20123] Bluetooth: hci0: command tx timeout
[  793.665892][T31230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  793.665939][T31230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.875718][T31467] netlink: 'syz.1.6347': attribute type 4 has an invalid length.
[  794.000434][T31230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.000470][T31230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.197267][T31230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.197301][T31230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.251797][T31482] Cannot find del_set index 4 as target
[  794.280749][T31487] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  794.389930][T31492] netlink: 'syz.1.6354': attribute type 1 has an invalid length.
[  794.497767][T31497] netlink: 'syz.3.6355': attribute type 4 has an invalid length.
[  794.665463][T31230] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  794.679760][T31230] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  794.680783][T31230] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  794.707448][T31230] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  794.714472][T31230] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  794.754188][T31230] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  794.820170][T31510] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  794.828389][T31510] bond3 (unregistering): Released all slaves
[  794.897719][T31230] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  794.911214][T31230] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  795.000625][T31532] Bluetooth: MGMT ver 1.23
[  795.216505][T31230] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.265557][T31230] 8021q: adding VLAN 0 to HW filter on device team0
[  795.293697][T20123] Bluetooth: hci0: command tx timeout
[  795.296666][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.296801][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.331100][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.331297][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.560722][T31551] rxe_eth0 speed is unknown, defaulting to 1000
[  796.015379][    C1] net_ratelimit: 77 callbacks suppressed
[  796.015400][    C1] TC_ACT_REPEAT abuse ?
[  796.017149][    C1] TC_ACT_REPEAT abuse ?
[  796.097365][    C1] TC_ACT_REPEAT abuse ?
[  796.100315][    C1] TC_ACT_REPEAT abuse ?
[  796.176297][    C1] TC_ACT_REPEAT abuse ?
[  796.179200][    C1] TC_ACT_REPEAT abuse ?
[  796.235625][T31551] lo speed is unknown, defaulting to 1000
[  796.239700][T31551] virt_wifi0 speed is unknown, defaulting to 1000
[  796.466721][T31230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.628120][T31607] __nla_validate_parse: 16 callbacks suppressed
[  796.628139][T31607] netlink: 23 bytes leftover after parsing attributes in process `syz.1.6380'.
[  796.660774][T31609] netlink: 'syz.0.6379': attribute type 1 has an invalid length.
[  796.725002][T31609] 8021q: adding VLAN 0 to HW filter on device bond6
[  796.747537][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'.
[  796.920239][T31620] netlink: 'syz.1.6383': attribute type 4 has an invalid length.
[  796.988443][T31616] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6382'.
[  797.139419][    C1] TC_ACT_REPEAT abuse ?
[  797.142113][    C1] TC_ACT_REPEAT abuse ?
[  797.206963][T31230] veth0_vlan: entered promiscuous mode
[  797.217847][    C1] TC_ACT_REPEAT abuse ?
[  797.220645][    C1] TC_ACT_REPEAT abuse ?
[  797.240589][T31230] veth1_vlan: entered promiscuous mode
[  797.311672][T31230] veth0_macvtap: entered promiscuous mode
[  797.357785][T31230] veth1_macvtap: entered promiscuous mode
[  797.374199][T20123] Bluetooth: hci0: command tx timeout
[  797.411626][T31230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  797.429713][T31230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  797.473153][ T6537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  797.473201][ T6537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  797.473234][ T6537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  797.473266][ T6537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  797.758310][T19491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  797.758332][T19491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.796601][T31649] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode
[  797.844663][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6392'.
[  797.974306][ T6531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  797.974327][ T6531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.016846][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.043185][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.043510][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.043720][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.043958][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.047774][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.049549][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.049908][T31672] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  798.385468][T31689] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  798.484171][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6396'.
[  798.647646][T31707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6400'.
[  798.984733][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'.
[  799.005061][T31726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6407'.
[  799.176195][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6411'.
[  799.290845][T31754] veth1_macvtap: left promiscuous mode
[  799.290875][T31754] macsec0: entered promiscuous mode
[  799.457392][T20123] Bluetooth: hci0: command tx timeout
[  799.574754][T31769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6418'.
[  799.846437][T31784] dvmrp1: entered allmulticast mode
[  800.673173][T19491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.673395][T19491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.702699][T29153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.762807][T29153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  800.765412][T31790] infiniband syz2: set active
[  800.765430][T31790] infiniband syz2: added team_slave_1
[  800.833878][T31840] syzkaller0: entered promiscuous mode
[  800.833899][T31840] syzkaller0: entered allmulticast mode
[  800.838353][T31839] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  800.853637][T31790] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  800.853674][T31790] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  800.853708][T31790] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  800.921527][T31839] tipc: Started in network mode
[  800.921547][T31839] tipc: Node identity 5e143d8f9857, cluster identity 4711
[  800.921641][T31839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  800.950704][T31790] RDS/IB: syz2: added
[  800.950754][T31790] smc: adding ib device syz2 with port count 1
[  800.958640][T31790] smc:    ib device syz2 port 1 has pnetid SYZ2 (user defined)
[  800.977444][T31838] tipc: Resetting bearer <eth:syzkaller0>
[  801.098804][T31838] tipc: Disabling bearer <eth:syzkaller0>
[  801.306553][T31866] erspan0: entered promiscuous mode
[  801.376734][    C0] net_ratelimit: 15 callbacks suppressed
[  801.376756][    C0] TC_ACT_REPEAT abuse ?
[  801.379227][    C0] TC_ACT_REPEAT abuse ?
[  801.455943][    C0] TC_ACT_REPEAT abuse ?
[  801.458555][    C0] TC_ACT_REPEAT abuse ?
[  801.481749][T31870] 0: reclassify loop, rule prio 0, protocol 03
[  801.612750][T29153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.818499][T31892] __nla_validate_parse: 75 callbacks suppressed
[  801.818518][T31892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6453'.
[  801.870731][T31892] bond0: (slave bond_slave_0): Releasing backup interface
[  801.916282][T31892] bond_slave_0: entered promiscuous mode
[  801.916304][T31892] bond_slave_0: entered allmulticast mode
[  802.138804][T31901] team0 (unregistering): Port device team_slave_0 removed
[  802.157625][T31901] team0 (unregistering): Port device team_slave_1 removed
[  802.304173][T31916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6460'.
[  802.306110][T31916] validate_nla: 26 callbacks suppressed
[  802.306127][T31916] netlink: 'syz.1.6460': attribute type 2 has an invalid length.
[  802.433041][    C0] TC_ACT_REPEAT abuse ?
[  802.435474][    C0] TC_ACT_REPEAT abuse ?
[  802.494622][    C0] TC_ACT_REPEAT abuse ?
[  802.496966][    C0] TC_ACT_REPEAT abuse ?
[  802.767321][T31939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6465'.
[  802.769323][T31936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6465'.
[  803.086941][T31949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  803.086959][T31949] IPv6: NLM_F_CREATE should be set when creating new route
[  803.087002][T31949] IPv6: NLM_F_CREATE should be set when creating new route
[  803.087048][T31949] IPv6: NLM_F_CREATE should be set when creating new route
[  803.193160][T31949] sit2: entered promiscuous mode
[  803.193184][T31949] sit2: entered allmulticast mode
[  803.456647][    C0] TC_ACT_REPEAT abuse ?
[  803.460637][T31965] syzkaller0: entered promiscuous mode
[  803.460657][T31965] syzkaller0: entered allmulticast mode
[  803.566959][T31970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6474'.
[  803.566984][T31970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6474'.
[  803.679525][T31970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6474'.
[  803.803902][T31976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6476'.
[  803.869376][T31983] sctp: [Deprecated]: syz.4.6476 (pid 31983) Use of int in maxseg socket option.
[  803.869376][T31983] Use struct sctp_assoc_value instead
[  803.929173][T31982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6478'.
[  804.035403][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6479'.
[  804.416107][T32003] x_tables: duplicate underflow at hook 4
[  804.673901][T32016] netlink: 'syz.3.6488': attribute type 1 has an invalid length.
[  804.714564][T32016] 8021q: adding VLAN 0 to HW filter on device bond2
[  804.894577][T32023] bond2: (slave geneve3): making interface the new active one
[  804.899877][T32023] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  805.052345][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.272106][T32042] netlink: 'syz.1.6496': attribute type 6 has an invalid length.
[  805.272129][T32042] netlink: 'syz.1.6496': attribute type 5 has an invalid length.
[  805.755627][T19493] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  805.780419][T32073] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  805.832493][T32083] IPVS: length: 100 != 24
[  805.845040][T32085] IPVS: length: 100 != 24
[  806.493269][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  806.493391][T20123] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  806.575161][    C0] net_ratelimit: 18 callbacks suppressed
[  806.575182][    C0] TC_ACT_REPEAT abuse ?
[  806.577754][    C0] TC_ACT_REPEAT abuse ?
[  806.645909][T32126] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  806.645909][T32126] Please contact the netfilter-devel mailing list or update your nftables rules.
[  806.676408][    C0] TC_ACT_REPEAT abuse ?
[  806.679379][    C0] TC_ACT_REPEAT abuse ?
[  806.696131][T32126] erspan0: entered promiscuous mode
[  806.696152][T32126] erspan0: entered allmulticast mode
[  807.006261][   T30] audit: type=1800 audit(1794207568.489:16): pid=32144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6521" name="memory.events" dev="tmpfs" ino=177 res=0 errno=-22
[  807.006697][   T30] audit: type=1804 audit(1794207568.489:17): pid=32144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6521" name="/newroot/31/memory.events" dev="tmpfs" ino=177 res=1 errno=0
[  807.007087][T32144] __nla_validate_parse: 9 callbacks suppressed
[  807.007175][T32144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6521'.
[  807.328118][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6525'.
[  807.504931][T32167] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.550765][T32167] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.627228][    C0] TC_ACT_REPEAT abuse ?
[  807.629947][    C0] TC_ACT_REPEAT abuse ?
[  807.725228][T32176] x_tables: duplicate underflow at hook 1
[  807.775939][    C0] TC_ACT_REPEAT abuse ?
[  807.778380][    C0] TC_ACT_REPEAT abuse ?
[  807.780385][T32180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6533'.
[  807.863619][T32180] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  807.896220][T32184] sctp: [Deprecated]: syz.3.6536 (pid 32184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  807.896220][T32184] Use struct sctp_sack_info instead
[  808.027106][T32194] netlink: 'syz.1.6537': attribute type 1 has an invalid length.
[  808.027131][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6537'.
[  808.028204][T32197] netlink: 'syz.1.6537': attribute type 1 has an invalid length.
[  808.028220][T32197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6537'.
[  808.056042][T32196] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  808.064185][T32199] netlink: 'syz.0.6538': attribute type 2 has an invalid length.
[  808.106252][T32197] team0: Device gtp1 is up. Set it down before adding it as a team port
[  808.185242][T32201] team0: Device gtp1 is up. Set it down before adding it as a team port
[  808.453662][T32218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6543'.
[  808.470940][T32222] netlink: 'syz.0.6546': attribute type 20 has an invalid length.
[  808.470960][T32222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6546'.
[  808.495540][T32222] netlink: 'syz.0.6546': attribute type 20 has an invalid length.
[  808.495561][T32222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6546'.
[  808.519303][T19489] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  808.519347][T19489] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  808.519380][T19489] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  808.519410][T19489] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  808.613077][T32225] netlink: 'syz.1.6548': attribute type 1 has an invalid length.
[  808.613100][T32225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6548'.
[  808.613132][T32225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6548'.
[  808.735569][    C0] TC_ACT_REPEAT abuse ?
[  809.020116][T32237] gretap0: entered promiscuous mode
[  809.064207][T32236] block nbd0: reconnected socket
[  809.064231][T32236] block nbd0: Unsupported socket: should be TCP or UNIX.
[  809.087622][ T1119] bond3: left allmulticast mode
[  809.087709][ T1119] bond3: left promiscuous mode
[  809.087955][ T1119] bridge0: port 4(bond3) entered disabled state
[  809.114597][ T1119] bond1: left allmulticast mode
[  809.116814][ T1119] bond1: left promiscuous mode
[  809.117135][ T1119] bridge0: port 3(bond1) entered disabled state
[  809.128317][ T1119] bridge_slave_1: left allmulticast mode
[  809.128504][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.214819][ T1119] pimreg: left allmulticast mode
[  809.221125][T20123] block nbd0: Receive control failed (result -32)
[  809.226699][ T1119] tipc: Resetting bearer <eth:syzkaller0>
[  809.509391][ T1119] bond2 (unregistering): (slave ip6gre3): Releasing backup interface
[  809.510821][ T1119] ip6gre3 (unregistering): left promiscuous mode
[  809.737206][ T1119] bond6 (unregistering): (slave gretap0): Releasing backup interface
[  809.870458][ T1119] tipc: Disabling bearer <eth:syzkaller0>
[  810.012875][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  810.041770][ T1119] bond5 (unregistering): (slave bridge7): Releasing backup interface
[  810.041797][ T1119] bridge7 (unregistering): left promiscuous mode
[  810.043895][ T1119] bridge7 (unregistering): left allmulticast mode
[  810.069871][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.082338][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.083508][ T1119] bond0 (unregistering): Released all slaves
[  810.088431][ T1119] bond1 (unregistering): Released all slaves
[  810.113000][ T1119] bond2 (unregistering): Released all slaves
[  810.132514][ T1119] bond3 (unregistering): Released all slaves
[  810.146605][ T1119] bond4 (unregistering): Released all slaves
[  810.159309][ T1119] bond5 (unregistering): Released all slaves
[  810.171212][ T1119] bond6 (unregistering): (slave bond7): Releasing backup interface
[  810.173966][ T1119] bond6 (unregistering): Released all slaves
[  810.208642][ T1119] bond7 (unregistering): Released all slaves
[  810.227353][ T1119] bond8 (unregistering): Released all slaves
[  810.357822][T32280] bond4: Removing last ns target with arp_interval on
[  810.429465][T32281] bond5: Removing last ns target with arp_interval on
[  810.460281][ T1119] tipc: Disabling bearer <udp:syz0>
[  810.460753][ T1119] tipc: Left network mode
[  810.986441][ T1110] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  810.988346][ T1110] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  810.988390][ T1110] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  810.988423][ T1110] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  810.988476][T32314] dvmrp1: left allmulticast mode
[  811.301192][T32338] netlink: 'syz.1.6570': attribute type 2 has an invalid length.
[  811.856173][    C1] net_ratelimit: 13 callbacks suppressed
[  811.856196][    C1] TC_ACT_REPEAT abuse ?
[  811.858802][    C1] TC_ACT_REPEAT abuse ?
[  811.937276][    C0] TC_ACT_REPEAT abuse ?
[  811.939696][    C0] TC_ACT_REPEAT abuse ?
[  812.096536][T32376] __nla_validate_parse: 72 callbacks suppressed
[  812.096556][T32376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6577'.
[  812.199631][T32362] bridge0: entered promiscuous mode
[  812.480427][T32381] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6579'.
[  812.590888][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  812.590912][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  812.650277][ T1119] veth1_macvtap: left promiscuous mode
[  812.650318][ T1119] veth0_macvtap: left promiscuous mode
[  812.650420][ T1119] veth1_vlan: left promiscuous mode
[  812.839478][T32405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6585'.
[  812.894583][    C1] TC_ACT_REPEAT abuse ?
[  812.897239][    C1] TC_ACT_REPEAT abuse ?
[  812.961676][T32416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6585'.
[  812.989791][    C1] TC_ACT_REPEAT abuse ?
[  812.992286][    C1] TC_ACT_REPEAT abuse ?
[  813.143209][T32424] IPv6: Can't replace route, no match found
[  813.143489][T32424] IPv6: Can't replace route, no match found
[  813.267275][ T1119] team0 (unregistering): Port device team_slave_1 removed
[  813.307107][ T1119] team0 (unregistering): Port device team_slave_0 removed
[  813.479525][T32398] bond5: Removing last ns target with arp_interval on
[  813.508180][T32410] ¬: renamed from gre0 (while UP)
[  813.608637][T32417] bond6: Removing last ns target with arp_interval on
[  813.622668][T19489] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  813.624573][T19489] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  813.624616][T19489] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  813.894512][ T1119] IPVS: stop unused estimator thread 0...
[  813.932825][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  813.938019][    C0] TC_ACT_REPEAT abuse ?
[  813.940446][    C0] TC_ACT_REPEAT abuse ?
[  814.249826][T32462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6597'.
[  814.293761][T32464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6597'.
[  814.379521][T32465] Unknown options in mask 4
[  814.437054][T32465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6598'.
[  814.595557][T32476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6600'.
[  814.600525][T32465] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.613400][T32477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6600'.
[  814.756327][T32483] netlink: 'syz.3.6601': attribute type 21 has an invalid length.
[  814.756404][T32483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6601'.
[  814.850208][T32494] sctp: [Deprecated]: syz.0.6604 (pid 32494) Use of int in maxseg socket option.
[  814.850208][T32494] Use struct sctp_assoc_value instead
[  814.850705][T32483] tipc: Cannot configure node identity twice
[  815.196192][T32505] xt_hashlimit: size too large, truncated to 1048576
[  815.424108][T32519] 8021q: adding VLAN 0 to HW filter on device bond6
[  815.634460][T32521] bond7: option primary: mode dependency failed, not supported in mode balance-xor(2)
[  815.654324][T32521] bond7 (unregistering): Released all slaves
[  815.809741][T32523] bond7: option primary: mode dependency failed, not supported in mode balance-xor(2)
[  815.827713][T32523] bond7 (unregistering): Released all slaves
[  816.176436][T32569] netlink: 'syz.3.6620': attribute type 1 has an invalid length.
[  816.315566][T32569] bond3: entered promiscuous mode
[  816.317264][T32569] 8021q: adding VLAN 0 to HW filter on device bond3
[  816.319354][T32580] bond3: entered allmulticast mode
[  816.398221][T32569] bond3: (slave bridge0): making interface the new active one
[  816.398246][T32569] bridge0: entered promiscuous mode
[  816.398434][T32569] bridge0: entered allmulticast mode
[  816.399733][T32569] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  816.751071][T32605] netlink: 'syz.1.6626': attribute type 5 has an invalid length.
[  816.801323][T32605] geneve2: entered promiscuous mode
[  816.801355][T32605] geneve2: entered allmulticast mode
[  816.833271][ T6533] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  816.835827][T19500] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  816.835881][T19500] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  816.841253][T32604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  816.874662][T32604] batadv_slave_0: entered promiscuous mode
[  817.065641][    C1] net_ratelimit: 10 callbacks suppressed
[  817.065663][    C1] TC_ACT_REPEAT abuse ?
[  817.068251][    C1] TC_ACT_REPEAT abuse ?
[  817.101476][T32621] netlink: 'syz.3.6627': attribute type 9 has an invalid length.
[  817.147049][    C1] TC_ACT_REPEAT abuse ?
[  817.149730][    C1] TC_ACT_REPEAT abuse ?
[  817.298076][T32625] __nla_validate_parse: 16 callbacks suppressed
[  817.298098][T32625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6629'.
[  817.454757][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6625'.
[  817.454785][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6625'.
[  817.455067][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6625'.
[  817.455085][T32603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6625'.
[  817.706516][ T5641] block nbd2: Receive control failed (result -104)
[  817.707401][T20123] block nbd2: Receive control failed (result -32)
[  817.755170][T32646] sctp: [Deprecated]: syz.3.6634 (pid 32646) Use of struct sctp_assoc_value in delayed_ack socket option.
[  817.755170][T32646] Use struct sctp_sack_info instead
[  818.031033][T32652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  818.095405][    C1] TC_ACT_REPEAT abuse ?
[  818.097979][    C1] TC_ACT_REPEAT abuse ?
[  818.149967][T32652] veth1_macvtap: entered promiscuous mode
[  818.174573][T32652] 8021q: adding VLAN 0 to HW filter on device eth0
[  818.199535][T32652] 8021q: adding VLAN 0 to HW filter on device eth1
[  818.215389][T32652] 8021q: adding VLAN 0 to HW filter on device eth2
[  818.231577][T32652] 8021q: adding VLAN 0 to HW filter on device eth3
[  818.251552][T32652] 8021q: adding VLAN 0 to HW filter on device bond1
[  818.255566][    C1] TC_ACT_REPEAT abuse ?
[  818.258232][    C1] TC_ACT_REPEAT abuse ?
[  818.322926][T32652] 8021q: adding VLAN 0 to HW filter on device bond2
[  818.356909][T32652] 8021q: adding VLAN 0 to HW filter on device bond3
[  818.375172][T32652] 8021q: adding VLAN 0 to HW filter on device bond4
[  818.396668][T32652] 8021q: adding VLAN 0 to HW filter on device bond5
[  819.052162][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  819.052604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.055511][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.166981][T32704] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  819.261236][T32724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6648'.
[  819.261269][T32724] netlink: 54 bytes leftover after parsing attributes in process `syz.0.6648'.
[  819.261288][T32724] netlink: 54 bytes leftover after parsing attributes in process `syz.0.6648'.
[  819.785007][T32741] gre1: entered promiscuous mode
[  819.857286][T32747] lo: Caught tx_queue_len zero misconfig
[  819.877873][T32747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6651'.
[  819.897159][T32747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6651'.
[  820.068359][T32757] netlink: 'syz.1.6654': attribute type 1 has an invalid length.
[  820.110218][T32762] netlink: 'syz.3.6656': attribute type 30 has an invalid length.
[  820.128456][T32757] bond7: entered promiscuous mode
[  820.128962][T32757] 8021q: adding VLAN 0 to HW filter on device bond7
[  820.166559][T32764] netlink: 'syz.3.6656': attribute type 30 has an invalid length.
[  820.193949][T32763] bond7: (slave bridge4): making interface the new active one
[  820.193972][T32763] bridge4: entered promiscuous mode
[  820.194657][T32763] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  820.195703][ T6537] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  820.436250][  T313] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  820.524458][  T310] bond8: option resend_igmp: invalid value (32767)
[  820.524474][  T310] bond8: option resend_igmp: allowed values 0 - 255
[  820.545415][  T310] bond8 (unregistering): Released all slaves
[  820.680921][  T383] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  820.682467][  T383] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  820.684997][  T383] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  820.987856][  T325] team_slave_1: entered allmulticast mode
[  821.298647][  T348] xt_IDLETIMER: timeout value is zero
[  821.531704][  T365] siw: device registration error -23
[  821.709324][  T375] tap0: tun_chr_ioctl cmd 1074025676
[  821.709346][  T375] tap0: owner set to 0
[  821.710903][  T377] tap0: tun_chr_ioctl cmd 1074025676
[  821.710921][  T377] tap0: owner set to 0
[  821.735651][  T370] netlink: 'syz.2.6682': attribute type 4 has an invalid length.
[  822.122742][  T409] netlink: 'syz.1.6689': attribute type 1 has an invalid length.
[  822.170134][  T413] IPv6: NLM_F_CREATE should be specified when creating new route
[  822.274570][    C1] net_ratelimit: 12 callbacks suppressed
[  822.274592][    C1] TC_ACT_REPEAT abuse ?
[  822.277687][    C1] TC_ACT_REPEAT abuse ?
[  822.294691][  T413] nbd3: detected capacity change from 0 to 274877906944
[  822.322793][  T416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  822.366438][  T413] nbd4: detected capacity change from 0 to 274877906944
[  822.368479][  T413] nbd5: detected capacity change from 0 to 274877906944
[  822.369501][  T413] nbd6: detected capacity change from 0 to 274877906944
[  822.370543][  T413] nbd7: detected capacity change from 0 to 274877906944
[  822.371545][  T413] nbd8: detected capacity change from 0 to 274877906944
[  822.416448][    C1] TC_ACT_REPEAT abuse ?
[  822.418968][    C1] TC_ACT_REPEAT abuse ?
[  822.441381][  T413] nbd9: detected capacity change from 0 to 274877906944
[  822.456423][  T413] nbd10: detected capacity change from 0 to 274877906944
[  822.457317][  T413] nbd11: detected capacity change from 0 to 274877906944
[  822.484358][  T413] nbd12: detected capacity change from 0 to 274877906944
[  822.537198][  T434] __nla_validate_parse: 73 callbacks suppressed
[  822.537218][  T434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6693'.
[  822.597791][  T455] ip_tables: iptables: counters copy to user failed while replacing table
[  822.601227][  T456] ip_tables: iptables: counters copy to user failed while replacing table
[  822.651244][  T413] 
[  822.653625][  T413] ======================================================
[  822.660645][  T413] WARNING: possible circular locking dependency detected
[  822.667669][  T413] syzkaller #0 Not tainted
[  822.672075][  T413] ------------------------------------------------------
[  822.679080][  T413] syz.0.6692/413 is trying to acquire lock:
[  822.684958][  T413] ffff888055652698 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0
[  822.693869][  T413] 
[  822.693869][  T413] but task is already holding lock:
[  822.701217][  T413] ffff88802b65ebf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  822.710638][  T413] 
[  822.710638][  T413] which lock already depends on the new lock.
[  822.710638][  T413] 
[  822.721035][  T413] 
[  822.721035][  T413] the existing dependency chain (in reverse order) is:
[  822.730039][  T413] 
[  822.730039][  T413] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  822.737853][  T413]        __mutex_lock+0x197/0x15a0
[  822.743035][  T413]        elevator_change+0x1af/0x480
[  822.748318][  T413]        elevator_set_none+0xb5/0x140
[  822.753686][  T413]        blk_mq_update_nr_hw_queues+0x60b/0x1b70
[  822.760067][  T413]        nbd_start_device+0x189/0xb30
[  822.765483][  T413]        nbd_genl_connect+0x167d/0x1cd0
[  822.771016][  T413]        genl_family_rcv_msg_doit+0x233/0x340
[  822.777155][  T413]        genl_rcv_msg+0x614/0x7a0
[  822.782173][  T413]        netlink_rcv_skb+0x226/0x4a0
[  822.787454][  T413]        genl_rcv+0x28/0x40
[  822.791944][  T413]        netlink_unicast+0x8ef/0xa80
[  822.797221][  T413]        netlink_sendmsg+0x7f0/0xb20
[  822.802498][  T413]        sock_sendmsg_nosec+0x14e/0x190
[  822.808037][  T413]        ____sys_sendmsg+0x54e/0x850
[  822.813318][  T413]        ___sys_sendmsg+0x2a5/0x360
[  822.818512][  T413]        __x64_sys_sendmsg+0x1b1/0x290
[  822.823962][  T413]        do_syscall_64+0x166/0x520
[  822.829066][  T413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.835471][  T413] 
[  822.835471][  T413] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  822.844068][  T413]        blk_alloc_queue+0x544/0x690
[  822.849414][  T413]        __blk_mq_alloc_disk+0x194/0x390
[  822.855037][  T413]        nbd_dev_add+0x494/0xb60
[  822.859963][  T413]        nbd_init+0x168/0x1f0
[  822.864687][  T413]        do_one_initcall+0x250/0x870
[  822.869960][  T413]        do_initcall_level+0x10a/0x1a0
[  822.875449][  T413]        do_initcalls+0x59/0xa0
[  822.880308][  T413]        kernel_init_freeable+0x29d/0x3e0
[  822.886017][  T413]        kernel_init+0x22/0x1d0
[  822.890858][  T413]        ret_from_fork+0x514/0xb70
[  822.895992][  T413]        ret_from_fork_asm+0x1a/0x30
[  822.901275][  T413] 
[  822.901275][  T413] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  822.908471][  T413]        fs_reclaim_acquire+0x71/0x100
[  822.913947][  T413]        __kmalloc_cache_node_noprof+0x66/0x620
[  822.920180][  T413]        create_worker+0x112/0x7c0
[  822.925287][  T413]        workqueue_prepare_cpu+0xe4/0x170
[  822.930993][  T413]        cpuhp_invoke_callback+0x434/0x810
[  822.936796][  T413]        _cpu_up+0x2ce/0x5b0
[  822.941385][  T413]        cpu_up+0x1d2/0x220
[  822.945890][  T413]        cpuhp_bringup_mask+0xb2/0x1a0
[  822.951414][  T413]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  822.957734][  T413]        bringup_nonboot_cpus+0x17/0x30
[  822.963271][  T413]        smp_init+0x32/0x110
[  822.967932][  T413]        kernel_init_freeable+0x27f/0x3e0
[  822.973637][  T413]        kernel_init+0x22/0x1d0
[  822.978475][  T413]        ret_from_fork+0x514/0xb70
[  822.983578][  T413]        ret_from_fork_asm+0x1a/0x30
[  822.988848][  T413] 
[  822.988848][  T413] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  822.996568][  T413]        cpus_read_lock+0x3d/0x160
[  823.001678][  T413]        static_key_slow_inc+0x12/0x30
[  823.007153][  T413]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  823.013389][  T413]        nbd_genl_foreach_sock+0x265/0x450
[  823.019185][  T413]        nbd_genl_reconfigure+0xbbb/0x1040
[  823.024983][  T413]        genl_family_rcv_msg_doit+0x233/0x340
[  823.031049][  T413]        genl_rcv_msg+0x614/0x7a0
[  823.036062][  T413]        netlink_rcv_skb+0x226/0x4a0
[  823.041340][  T413]        genl_rcv+0x28/0x40
[  823.045831][  T413]        netlink_unicast+0x8ef/0xa80
[  823.051112][  T413]        netlink_sendmsg+0x7f0/0xb20
[  823.056390][  T413]        sock_sendmsg_nosec+0x14e/0x190
[  823.061933][  T413]        ____sys_sendmsg+0x54e/0x850
[  823.067210][  T413]        ___sys_sendmsg+0x2a5/0x360
[  823.072396][  T413]        __x64_sys_sendmsg+0x1b1/0x290
[  823.077843][  T413]        do_syscall_64+0x166/0x520
[  823.082945][  T413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.089345][  T413] 
[  823.089345][  T413] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  823.096977][  T413]        __mutex_lock+0x197/0x15a0
[  823.102082][  T413]        nbd_queue_rq+0x373/0xff0
[  823.107180][  T413]        blk_mq_dispatch_rq_list+0x499/0x1990
[  823.113310][  T413]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  823.120185][  T413]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  823.126675][  T413]        blk_mq_run_work_fn+0x167/0x2f0
[  823.132217][  T413]        process_scheduled_works+0xc3d/0x1630
[  823.138275][  T413]        worker_thread+0xa47/0xfb0
[  823.143383][  T413]        kthread+0x38b/0x480
[  823.147968][  T413]        ret_from_fork+0x514/0xb70
[  823.153100][  T413]        ret_from_fork_asm+0x1a/0x30
[  823.158377][  T413] 
[  823.158377][  T413] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  823.165577][  T413]        __mutex_lock+0x197/0x15a0
[  823.170685][  T413]        nbd_queue_rq+0xc1/0xff0
[  823.175613][  T413]        blk_mq_dispatch_rq_list+0x499/0x1990
[  823.181682][  T413]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  823.188533][  T413]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  823.195036][  T413]        blk_mq_run_work_fn+0x167/0x2f0
[  823.200575][  T413]        process_scheduled_works+0xc3d/0x1630
[  823.206642][  T413]        worker_thread+0xa47/0xfb0
[  823.211748][  T413]        kthread+0x38b/0x480
[  823.216331][  T413]        ret_from_fork+0x514/0xb70
[  823.221432][  T413]        ret_from_fork_asm+0x1a/0x30
[  823.226707][  T413] 
[  823.226707][  T413] -> #0 (set->srcu){.+.+}-{0:0}:
[  823.233825][  T413]        __lock_acquire+0x164c/0x2de0
[  823.239331][  T413]        lock_sync+0xb3/0x130
[  823.244013][  T413]        __synchronize_srcu+0xca/0x2f0
[  823.249475][  T413]        elevator_switch+0x1e8/0x7b0
[  823.254760][  T413]        elevator_change+0x2fa/0x480
[  823.260048][  T413]        elevator_set_default+0x375/0x440
[  823.265763][  T413]        blk_register_queue+0x404/0x4f0
[  823.271299][  T413]        __add_disk+0x6b8/0xdb0
[  823.276139][  T413]        add_disk_fwnode+0x100/0x3a0
[  823.281412][  T413]        nbd_dev_add+0x733/0xb60
[  823.286335][  T413]        nbd_genl_connect+0x96c/0x1cd0
[  823.291895][  T413]        genl_family_rcv_msg_doit+0x233/0x340
[  823.297958][  T413]        genl_rcv_msg+0x614/0x7a0
[  823.302973][  T413]        netlink_rcv_skb+0x226/0x4a0
[  823.308254][  T413]        genl_rcv+0x28/0x40
[  823.312753][  T413]        netlink_unicast+0x8ef/0xa80
[  823.318050][  T413]        netlink_sendmsg+0x7f0/0xb20
[  823.323332][  T413]        sock_sendmsg_nosec+0x14e/0x190
[  823.328874][  T413]        ____sys_sendmsg+0x54e/0x850
[  823.334155][  T413]        ___sys_sendmsg+0x2a5/0x360
[  823.339348][  T413]        __x64_sys_sendmsg+0x1b1/0x290
[  823.344798][  T413]        do_syscall_64+0x166/0x520
[  823.349902][  T413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.356303][  T413] 
[  823.356303][  T413] other info that might help us debug this:
[  823.356303][  T413] 
[  823.366516][  T413] Chain exists of:
[  823.366516][  T413]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  823.366516][  T413] 
[  823.380148][  T413]  Possible unsafe locking scenario:
[  823.380148][  T413] 
[  823.387582][  T413]        CPU0                    CPU1
[  823.392929][  T413]        ----                    ----
[  823.398277][  T413]   lock(&q->elevator_lock);
[  823.402856][  T413]                                lock(&q->q_usage_counter(io)#49);
[  823.410736][  T413]                                lock(&q->elevator_lock);
[  823.417838][  T413]   sync(set->srcu);
[  823.421718][  T413] 
[  823.421718][  T413]  *** DEADLOCK ***
[  823.421718][  T413] 
[  823.429842][  T413] locks held by syz.0.6692/413: 6, last CPU#0:
[  823.435981][  T413]  #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  823.444173][  T413]  #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  823.453127][  T413]  #2: ffff88807fae11c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[  823.463478][  T413]  #3: ffff88802b65ec80 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0
[  823.473299][  T413]  #4: ffff88802b65e708 (&q->q_usage_counter(queue)#56){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  823.484175][  T413]  #5: ffff88802b65ebf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  823.494002][  T413] 
[  823.494002][  T413] stack backtrace:
[  823.499882][  T413] CPU: 0 UID: 0 PID: 413 Comm: syz.0.6692 Not tainted syzkaller #0 PREEMPT(full) 
[  823.509061][  T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  823.519101][  T413] Call Trace:
[  823.522375][  T413]  <TASK>
[  823.525295][  T413]  dump_stack_lvl+0xe8/0x150
[  823.529891][  T413]  print_circular_bug+0x2e2/0x300
[  823.534918][  T413]  check_noncircular+0x12f/0x150
[  823.539859][  T413]  __lock_acquire+0x164c/0x2de0
[  823.544708][  T413]  ? lockdep_unlock+0x5c/0xd0
[  823.549375][  T413]  ? __lock_acquire+0x1511/0x2de0
[  823.554403][  T413]  lock_sync+0xb3/0x130
[  823.558547][  T413]  ? __synchronize_srcu+0xb6/0x2f0
[  823.563652][  T413]  ? __synchronize_srcu+0xb6/0x2f0
[  823.568758][  T413]  __synchronize_srcu+0xca/0x2f0
[  823.573692][  T413]  ? __pfx___synchronize_srcu+0x10/0x10
[  823.579227][  T413]  ? do_raw_spin_lock+0x12b/0x2f0
[  823.584245][  T413]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  823.590108][  T413]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  823.595650][  T413]  ? synchronize_srcu+0x20c/0x270
[  823.600668][  T413]  elevator_switch+0x1e8/0x7b0
[  823.605427][  T413]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  823.610877][  T413]  elevator_change+0x2fa/0x480
[  823.615635][  T413]  ? do_raw_spin_unlock+0xf5/0x200
[  823.620740][  T413]  elevator_set_default+0x375/0x440
[  823.625936][  T413]  ? __pfx_elevator_set_default+0x10/0x10
[  823.631653][  T413]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  823.638737][  T413]  ? blk_crypto_sysfs_register+0x11c/0x170
[  823.644632][  T413]  blk_register_queue+0x404/0x4f0
[  823.649654][  T413]  __add_disk+0x6b8/0xdb0
[  823.653977][  T413]  add_disk_fwnode+0x100/0x3a0
[  823.658735][  T413]  nbd_dev_add+0x733/0xb60
[  823.663145][  T413]  ? __pfx_nbd_dev_add+0x10/0x10
[  823.668075][  T413]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[  823.673867][  T413]  ? security_capable+0x7e/0x2c0
[  823.678804][  T413]  nbd_genl_connect+0x96c/0x1cd0
[  823.683732][  T413]  ? __pfx_nbd_genl_connect+0x10/0x10
[  823.689098][  T413]  ? rcu_is_watching+0x16/0xb0
[  823.693856][  T413]  ? trace_kmalloc+0x2a/0xf0
[  823.698440][  T413]  ? __kmalloc_noprof+0x387/0x710
[  823.703465][  T413]  ? __nla_parse+0x40/0x60
[  823.707890][  T413]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  823.714225][  T413]  genl_family_rcv_msg_doit+0x233/0x340
[  823.719772][  T413]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  823.725837][  T413]  ? __lock_acquire+0x747/0x2de0
[  823.730774][  T413]  genl_rcv_msg+0x614/0x7a0
[  823.735275][  T413]  ? __pfx_genl_rcv_msg+0x10/0x10
[  823.740293][  T413]  ? __pfx_nbd_genl_connect+0x10/0x10
[  823.745664][  T413]  netlink_rcv_skb+0x226/0x4a0
[  823.750426][  T413]  ? __pfx_genl_rcv_msg+0x10/0x10
[  823.755440][  T413]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  823.760725][  T413]  ? down_read+0x2b9/0x320
[  823.765141][  T413]  genl_rcv+0x28/0x40
[  823.769111][  T413]  netlink_unicast+0x8ef/0xa80
[  823.773873][  T413]  netlink_sendmsg+0x7f0/0xb20
[  823.778636][  T413]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.783917][  T413]  ? aa_sock_msg_perm+0x144/0x210
[  823.789056][  T413]  ? apparmor_socket_sendmsg+0x18b/0x360
[  823.794685][  T413]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.799971][  T413]  sock_sendmsg_nosec+0x14e/0x190
[  823.804992][  T413]  ____sys_sendmsg+0x54e/0x850
[  823.809750][  T413]  ? __pfx_____sys_sendmsg+0x10/0x10
[  823.815027][  T413]  ? import_iovec+0x73/0xa0
[  823.819524][  T413]  ___sys_sendmsg+0x2a5/0x360
[  823.824190][  T413]  ? __lock_acquire+0x747/0x2de0
[  823.829121][  T413]  ? __pfx____sys_sendmsg+0x10/0x10
[  823.834308][  T413]  ? futex_wait+0x2a2/0x390
[  823.838844][  T413]  ? __fget_files+0x3a2/0x420
[  823.843516][  T413]  ? __fget_files+0x2a/0x420
[  823.848113][  T413]  __x64_sys_sendmsg+0x1b1/0x290
[  823.853049][  T413]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  823.858515][  T413]  do_syscall_64+0x166/0x520
[  823.863101][  T413]  ? trace_irq_disable+0x3b/0x140
[  823.868119][  T413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.874173][  T413]  ? clear_bhb_loop+0x70/0xc0
[  823.878839][  T413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.884719][  T413] RIP: 0033:0x7f5378b9fb19
[  823.889139][  T413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.908751][  T413] RSP: 002b:00007f5379a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.917164][  T413] RAX: ffffffffffffffda RBX: 00007f5378e25fa0 RCX: 00007f5378b9fb19
[  823.925128][  T413] RDX: 0000000020000010 RSI: 0000200000004940 RDI: 0000000000000009
[  823.933090][  T413] RBP: 00007f5378c37b70 R08: 0000000000000000 R09: 0000000000000000
[  823.941046][  T413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  823.949010][  T413] R13: 00007f5378e26038 R14: 00007f5378e25fa0 R15: 00007fffdfdd7848
[  823.956986][  T413]  </TASK>
[  823.970790][ T2420] block nbd12: Send control failed (result -32)
[  823.970813][ T2420] block nbd12: Request send failed, requeueing
[  823.970886][ T2420] block nbd12: Dead connection, failed to find a fallback
[  823.970901][ T2420] block nbd12: shutting down sockets
[  823.970914][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.970939][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.978369][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.978401][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979063][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979089][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979186][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979209][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979294][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979316][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979459][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979479][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979566][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979588][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979663][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979685][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979730][  T461] ldm_validate_partition_table(): Disk read failed.
[  823.979791][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979813][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.979888][ T2420] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  823.979909][ T2420] Buffer I/O error on dev nbd12, logical block 0, async page read
[  823.980087][  T461] Dev nbd12: unable to read RDB block 0
[  823.980426][  T461]  nbd12: unable to read partition table
[  823.987146][ T2420] block nbd13: Send control failed (result -32)
[  823.987167][ T2420] block nbd13: Request send failed, requeueing
[  823.987245][ T2420] block nbd13: Dead connection, failed to find a fallback
[  823.987260][ T2420] block nbd13: shutting down sockets
[  823.988787][  T463] ldm_validate_partition_table(): Disk read failed.
[  823.989077][  T463] Dev nbd13: unable to read RDB block 0
[  823.989442][  T463]  nbd13: unable to read partition table
[  823.994371][  T439] block nbd597: Receive control failed (result -104)
[  823.994457][  T443] block nbd15: Receive control failed (result -32)
[  823.994531][  T427] block nbd10: Receive control failed (result -32)
[  823.994580][  T425] block nbd9: Receive control failed (result -32)
[  823.994629][  T422] block nbd7: Receive control failed (result -32)
[  823.994677][ T5644] block nbd5: Receive control failed (result -32)
[  823.994857][T31232] block nbd6: Receive control failed (result -32)
[  823.994909][  T423] block nbd8: Receive control failed (result -32)
[  823.994957][  T446] block nbd1909: Receive control failed (result -32)
[  823.995028][T20123] block nbd3: Receive control failed (result -32)
[  823.995077][ T5641] block nbd4: Receive control failed (result -32)
[  823.995125][  T430] block nbd11: Receive control failed (result -32)
[  823.995191][  T441] block nbd14: Receive control failed (result -32)
[  824.001637][  T444] block nbd1412: Receive control failed (result -32)
[  824.011085][    C1] TC_ACT_REPEAT abuse ?
[  824.013269][    C1] TC_ACT_REPEAT abuse ?
[  824.017145][    C1] TC_ACT_REPEAT abuse ?
[  824.028181][ T2420] block nbd14: Dead connection, failed to find a fallback
[  824.028201][ T2420] block nbd14: shutting down sockets
[  824.031527][  T464] ldm_validate_partition_table(): Disk read failed.
[  824.032673][  T464] Dev nbd14: unable to read RDB block 0
[  824.032992][  T464]  nbd14: unable to read partition table
[  824.104771][  T461] ldm_validate_partition_table(): Disk read failed.
[  824.104833][  T463] ldm_validate_partition_table(): Disk read failed.
[  824.105063][  T464] ldm_validate_partition_table(): Disk read failed.
[  824.105489][  T461] Dev nbd12: unable to read RDB block 0
[  824.105543][  T463] Dev nbd13: unable to read RDB block 0
[  824.105835][  T464] Dev nbd14: unable to read RDB block 0
[  824.106341][  T461]  nbd12: unable to read partition table
[  824.108007][  T463]  nbd13: unable to read partition table
[  824.110584][  T464]  nbd14: unable to read partition table
[  824.127438][ T2420] block nbd15: Dead connection, failed to find a fallback
[  824.127461][ T2420] block nbd15: shutting down sockets
[  824.127499][ T2420] block nbd597: Dead connection, failed to find a fallback
[  824.127513][ T2420] block nbd597: shutting down sockets
[  824.130222][  T461] ldm_validate_partition_table(): Disk read failed.
[  824.130338][  T463] ldm_validate_partition_table(): Disk read failed.
[  824.130779][  T463] Dev nbd597: unable to read RDB block 0
[  824.130855][  T461] Dev nbd15: unable to read RDB block 0
[  824.135690][ T2420] block nbd1412: Dead connection, failed to find a fallback
[  824.135710][ T2420] block nbd1412: shutting down sockets
[  824.135982][  T461]  nbd15: unable to read partition table
[  824.137540][  T463]  nbd597: unable to read partition table
[  824.144241][  T464] ldm_validate_partition_table(): Disk read failed.
[  824.144960][  T464] Dev nbd1412: unable to read RDB block 0
[  824.145188][  T463] ldm_validate_partition_table(): Disk read failed.
[  824.145325][  T461] ldm_validate_partition_table(): Disk read failed.
[  824.145659][  T464]  nbd1412: unable to read partition table
[  824.147902][  T463] Dev nbd597: unable to read RDB block 0
[  824.148062][  T461] Dev nbd15: unable to read RDB block 0
[  824.148507][  T463]  nbd597: unable to read partition table
[  824.150184][  T461]  nbd15: unable to read partition table
[  824.171032][  T464] ldm_validate_partition_table(): Disk read failed.
[  824.171284][  T464] Dev nbd1412: unable to read RDB block 0
[  824.171642][  T464]  nbd1412: unable to read partition table
[  824.199560][ T2420] block nbd1909: Dead connection, failed to find a fallback
[  824.199583][ T2420] block nbd1909: shutting down sockets
[  824.200079][  T461] ldm_validate_partition_table(): Disk read failed.
[  824.200553][  T461] Dev nbd1909: unable to read RDB block 0
[  824.206190][  T461]  nbd1909: unable to read partition table
[  824.229181][  T461] ldm_validate_partition_table(): Disk read failed.
[  824.229463][  T461] Dev nbd1909: unable to read RDB block 0
[  824.231342][  T461]  nbd1909: unable to read partition table
[  828.184044][    C1] net_ratelimit: 13 callbacks suppressed
[  828.184060][    C1] TC_ACT_REPEAT abuse ?
[  828.185405][    C1] TC_ACT_REPEAT abuse ?
[  828.186836][    C1] TC_ACT_REPEAT abuse ?
[  828.187840][    C1] TC_ACT_REPEAT abuse ?
[  829.216467][    C1] TC_ACT_REPEAT abuse ?
[  829.218020][    C1] TC_ACT_REPEAT abuse ?
[  829.219958][    C1] TC_ACT_REPEAT abuse ?
[  829.221162][    C1] TC_ACT_REPEAT abuse ?
[  830.253929][    C0] TC_ACT_REPEAT abuse ?
[  830.255443][    C0] TC_ACT_REPEAT abuse ?
[  830.572061][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!