last executing test programs:

27.880588688s ago: executing program 0 (id=2588):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
recvfrom$rxrpc(r4, 0x0, 0x0, 0x2, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)

27.879798608s ago: executing program 2 (id=2589):
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20208000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x687}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000002}, 0x4080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48885}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x56e9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x694d7293}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5d8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x17f4a817}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x25}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x198, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x5, 0x1, 0x8, 0x0, {0x4e24, 0x4e24, [0x1, 0x3, 0x9, 0x6], [0x3, 0x2, 0x995, 0x8], 0x0, [0x8a55, 0x1]}, 0x100, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xff, 0x1, "afff319df517e044ecf4ae0e6bb968dc7c33e3006ad17ad0caadbe320f8a1f7c704bb17e78d6250500c8c2e6791951d1846991cfb8d7ea068287d979fc63cb8098ccb86a1a00a3d931fb5fc9a92d46d045a1bfff8ef84137de47be5d0a29edc1325334f203baa1062db34e6e6c208488d3d25f4273f6570fdc78a8f06579ce73ca87e752f620b69fa48794145cefd57cbc75c1fe54c4a3a97d92aa7b82e9d22bb152602ab44d5a24d7eaa4a00c9fcac7e996771bcd28324867dbcaf7c69c594072740a5f26ca1dc7dc4a270a1e41a71d97e381a19482e637d0b3214940c2c28424744950b67319a3d2ab2a2ff44b68bbd26dded72a005d4d432d4c"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "e482cdb62a15e814754f60d116b4f35304c353a60b3aa12490e68d3296c169e3e1aaa8e4cf8bde1fbbfdd65e7acd007da4d7c959fee835a4cc9290bebbaa59618024dd0432"}]}, 0x198}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000640)={0x3})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000680)={<r3=>r2, 0x8, 0x9, 0x8})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf36, 0x1a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}}, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x44)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000c80), 0x4)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000cc0))
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000d00)={'ip6tnl0\x00', {0x2, 0x0, @local}})
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20802}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffeff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa0, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20048801}, 0x20000004)
socket$nl_netfilter(0x10, 0x3, 0xc)

27.819416934s ago: executing program 2 (id=2590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1d96}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x99, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x82)

27.818856599s ago: executing program 0 (id=2591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x20, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x50000000}, 0x28)
bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000040000000000085000000b2000009000000000000000048826653f5dd72d8688584f7933802dfdb41d20b0037352f7f47dbbdc4396f80eca8405f28ac559e193395e32fbcd5840d31d85d842b1b3a315f4e04000000000000008ca187687e1bd7fbaeddd49bf1c5a8d650999cbaf8a1baaed16421a3703bbe7534e24f075bc5f947f23f"], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
pselect6(0x40, &(0x7f0000000000)={0xffffffffffffffda, 0xb1, 0xb89, 0x2, 0x270, 0x7fffffffffffffff, 0x4, 0x8}, &(0x7f0000000100)={0x7fffffff, 0x8, 0xc7fa, 0xffffffffffffffff, 0x6, 0x6, 0x7, 0x100000001}, &(0x7f0000000140)={0x1bf3, 0x8, 0x5, 0x4, 0xb, 0x1, 0x6, 0x3}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f00000001c0)={[0x5]}, 0x8})

27.748429933s ago: executing program 0 (id=2592):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500000000000000040003000200000005000300800000000800020002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x8000)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xfffff066, 0xffffff07)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20090000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@loopback, 0x7f, r5})
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {}, [{0xf9, 0x1, [@m_xt={0x110, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xc4, 0x6, "286a94f4e14beb084c99dae709c351adc8cab22923a37861cfe86658f320ba887e5828b35bc61b6aed21ef47903c360113fff2ade33fa3ad6cbfe1fb0be30daad11c8591bb5facff1d522b2856c1cf72253512d1a2190ea9ac8a783ade006a341c87e6a5a4e0a2b6f5545d96e93a183befcdf3d7af624e0a00465227afef2f86519d0091ccc0ae34fc69bcd8a22cd2cf1af4644d1993bdc3eae657e01cc9264a53346454cc31b59f5e235a3010d59b03da66892760a28c7e0a839c8b85b1f59a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x0, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x59e}]}, {0x0, 0x6, "0d6884d9f22194477c7a1b7a4aee0a92ae59bf6b4da2a4ac0a4e077050ffbe64071924a078d4cd9537344ef681f944e7a6cb8c3b0d1d7ec9711a6dfca366394529610dee2bb14b056117"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}, @m_skbedit={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x5, 0xe58d}]}, {0x0, 0x6, "fe6a4b6835b449dc052637c753e1dda678c36f3005fa44d65d01afb09b5813c657672ee7c49f8c387fac770be3618c18f9fc9d7ef3612514ba78c352a34a7a4395cdc8922488d2bd2b4ad8982d40d08c8f4ced9d3177f3832c7b38798edc33b3eeddada71054392c05d8148a6dd26109344749df834ba36fad984752883c3b46646e0caa501a1ffd6f7b862b39f394140afdd160fa03155c4ee232dabd186974"}, {}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x158}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="49a91c4a7b9d4ba60a1e7f023cbee8c8caf2810b2839033285fdcbab1699d650121fb8c9c29f9f0d1dab088736832453630ddd884be78544acf03951cbfaf064975e4ae81e8faec343cc600ffb9bb5b2b144cfe23fcbcd074b8d14846d6cc86152d5a4c6355e24d506bda5dde8c79b42b553929e5c2682d53bbcd83c55938478155def70213553d4e5eaf1739c79095db0803f57431428d07e919e87e25a241eecff97e3137880d9d68affbd", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028008000500000000000800040081000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

27.680782459s ago: executing program 2 (id=2594):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r0, 0x4)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffd3e, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004e001fff000000000000000000060000537d0aaf2dcfa2fb86074e72f3177c926e1f4ad1b442746f8c3ceeeeb531e13fc1ba8caabc62ed735504ab454254290e2144f785aeb74c617dfca6fe31", @ANYBLOB="76665c070354a373ae7a37361ebb60a94ea55c90b45dd3fd2ad3e47b43031f739fcf040f318632cf8983e012a47c3846c75443d70b755e1d1bc91cc8fb5b573164727b86f128ca9ddf2b21f23c3c3e05274e6a18a165551e0a970d6f721a7488e01439e0446fd3fb7af6702affbe3b054dabfb3df86ab81a93e6162223175ab4b3c718534b9e9176a8efefeb1560df10f587779410277c3671a4b1a84a3b6842e513c5f6dd96d9116053facdd9867e", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)

27.679424382s ago: executing program 0 (id=2595):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffff80fe, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

27.630168222s ago: executing program 2 (id=2596):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000500)='%+9llu \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x4b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@delchain={0x4c, 0x65, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0x6}, {0xc, 0xffff}, {0x3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x35, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6a, 0xd}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40080)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000000000000020100000400000010000000efff003c73cac1d4368ce6baa7e82de556433d8b0c4b02001701000003001a00ea3208d455af7e183998aab5d7a0c87e5d78ff5cc6ccd7cae4c6eabc4fe432e895574c9c747b507cd0497ce8381724ded13503"], 0x20}, 0x81)
connect$bt_sco(r7, &(0x7f00000003c0)={0x1f, @none}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0xfffffffb}}, 0x6}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={r9, 0x5, 0xf6b, 0xa}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="200500000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}, 0x1, 0xf00, 0x0, 0x40091}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x40480d0)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000127bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

26.80980102s ago: executing program 0 (id=2598):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f0000001580)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000040)="24e09ead9b60d48802f9a41f62fdc9b79327529241e8f37917511c8a5aab0687dcef076afc37a7b9345bcac67cdb289c946ba9c56d44fe08ab3bcd441df1cbbfa4f3c5a6a4a70b39891ab76df6949b94b4b4ba63175ec19b2b4a0e7e56616d8ebf5b12429a1a2754057ad250b63b73dbd459b6c540ccbcff2fbe8c2313c271ff3646b55fd92270401d784f80c81ee925d206b4231bb85210b815adce1391b120b187f9baf8bcf50c24af47fd6beda88902f98488e4d3c3a1c568ca2ae0764b5772face7ea59e9918b877ed93991c3dfca5c24dae8a421043dc4984ed4be2de0009ad649cae3108fbd5", 0xe9}, {&(0x7f0000000140)="f647194bc2bc9a002646cb956e51be440369b087681ecfea909a2f65e9341d7dd6c52db226984f2a4351d55b78d42f88ddca1adb9d65927b900e7ee3", 0x3c}, {&(0x7f0000000180)="123714ff5d4b86b6e356a11c4a1101d4fa14e1da0ccc48762f2b3a5e186985b276812e2a7ebb6d78242e9ec0165daa5901ef92b1f9e2c2c744", 0x39}, {&(0x7f00000001c0)="b1fbf51c878da0304ed4ee23afc41e76c4e2b5a8d2b3024b957add7240f1161be3f8cc1de37363e8adb142b072f776e536a779486d97a07b2a17fe45ba63b485f2f6c15d9f8dc3c23f6775e80987a5c0e87f3b91ee07cb4f88d3a1d2fc58cc9631012cde0e12509d2702943c47a1182426d37cb31d6800f717b68a09e0c9e9d7c24904342f8c68d1ddb5f8232bc2452ac94b829498d798e912c9ea400adb9a53c9d624967cbf81658d520ad57f99726ad87abfeb2f6af1f6c6fb6cc53acb2db91641421ec878777d3f43db748b6a63485c08d3228c8aeb34fb29bad698b35b4c90", 0xe1}, {&(0x7f00000002c0)="95faeb46e14521876d4988b505046b2de401b5174f5e591a14840327c31001cabcfeb94a44203554092dd426f8031780763294280d3ddb5920e76bd7ab1fad7b24addc9fe00023a3e085f01ec61fc6113bd43e228da076e9551a02b06e505fe63f01323530ded1625c182450b13d0440b401fa51819a79b78324aff9c562528c47297aa624e28a6713c915ccc5f08d4ff1d18450d36db7f4156912", 0x9b}, {&(0x7f0000000380)="22fc7b3b5125ca1e6bae24981cfa90d8f6d247c03e898265afb21be8b7524e789280ff858021ec0b4e7324dd9e3b1831a04e76f30ad9d78821897b1d338b22506752844ba7ed9c88481b4f7ddb71965fc52f6aab577787eca77722bd725e1d51d61018d3a436f7b7c4bafddf7ff1bbe1db139ffeaa72af00150c170778ee9e3921e903aa2e673ee7ad835e665a5fa0983f89a7861994e7a9b3b0e418acb7118d3d2ab88b32f17393f4bfafc204b6e9acf4a7900588e86c287753cf1ae309884cd13c9269ffbcddfa199b17f4db190d19aa60d6d2b32c18f2a6154308f9d64ca75a8bcd5531492670be297ca19a73dc7a0a243f497510200154cb5829e5f8c4920d71c255b93102161e2aeb8c4e4801bce78f931cb77c3cc9632511d81e0ff0513696600b827df0f74eb939c0a8a0d18a098187cad509f58ede4bcbf073d03d4510ae61c79032db6cc4682a9442595e9e0384bb8443bfa4279129e439559eba9a94f4bcd37c342d7f10d33a68e73ba9a0e56ee8b1bdb600e2f7ce95973348c7df7858d3206338c5bad594a58a7150685d255053f4a1f463aaade84e8b1f71a0e3b608011e0458d8c21e3e1b476009c0e5afc9b5a3c02d1b2d6a8c730b0e95d3b84789a17b4c692d8eb0e49c58cfe90df379b63d48804e1b36152d201b1b9f290fe3675f901cf74c4d47af43172ef2da6327d0be627d3e8702cade11e779459389f62fd11ce9561044a535504947ab188aa34845007846d278ff7345ed3dbd9960a22691c552e85b0d2bc03d3629d04cf491ea975b5c041769afd1dde9ba6d03231651aa0270f9eb80f5f214e1bc39c0ca94017fe618649f9360dad23ced84f7809a7fc00da90ddd0fd5b5c20134e576b16cdbb5fb5cff99dc312bbbf2ba36b43c21e4f468d2a9c24e551bab34d34c79672eef4cddfa3bc0e64350b1d91593a1d0b0a99bfbe23d7cacc6fd662afcb5d1661321b359968c457f3a41fb8da67e5a96f5c89d59d9b7e5dfe8676bf2fcca76afcce7884beefc6a429ac7eb14466e232edd7d616bafbe36c8ba74937b7abc3768988bee782403a1fffe2cc7efcf407f178edf5cf153f1d27bc179a1159e62f2873086355a04567f879774503352d0f8e9c736b244bd5541eb14176721064bd743c179f844f16ada01236fc8370d7577a6805f40c9a48275d6932b73775c96e80d47569b201291fb404b4e1bf9da81cbce3c575739181a7abdbd4b672085ef40df102d9c7889e6d64135e78ee1102436ad47cde637784cf7e8956bec64928bc1bebda8afca72c838a199210c1f051091891590b7dd0fd5a8854e6de4f4327331a5556b2ddfba87650ed5ab36bbc9b74f655ad0f4308dc40b555374a9e3c9501e4005dd795b0fda9adcae7eff9f3ac3a9ef089f08ec84b3b63fd740525d65afcc487e307202601269e3b10900b2ec1a9fee719aaaf3d1fcc6bf3e197428f98f262fe144831c1f6f1f3c073585afaa721b3a11d20182c432e42f6c34cc201d60c372a0047e3393d88c5618343283c0305abbab2009143c3eb722b16786f729e7d99f773ec1bd072b853fb5a413ecbdf01fde3d1973847723d6a0769b9763a5f20c6f178157cf7fea937a300339a4de1e50e305a1f3ee60e4f40201721db7b15c19c798df28433b90b6a6b97354a7d295afd80f68ab20c45e482d93ad02c958c5db268b9576cf41af68096020aad2792af3cc241578d7ec98973ac497ac6aa03f68bc410fcb513027a13d810e66631a7e8c3f25fa464c05d228eff85ab3d2ebb42ad8de557d0228449afa90881967f1067f7df11a2b5440ddbe30e11733fd68bd81b20f25f3417f167c01013aa71aa653251cf87f9d5cd4044f08a47327817a2122e721991ef07e2e757ff75748138e408ea0ef02702df2caa147cbacafad3ff798f34699982d18dd3eb54e79575638a9ff687ed33014aedaa646b856b9b14fb0785064737378daf6aa6e15c6cfea339edcd3a5c9c61524c0d5a791982440efb661115cfee6e5583be61871caaa2b2d29039a26d8a8ccc6b16649d12ceab13ebaa3f72faa89bdb2bf9e937baea7dc4a2493177de2ce8feabc6d2654c7412fc1ba0904fac18e02bec3d9cc225279bc8fd6edb08a2747439e270f36a86e73f9efdb3c4ae8d4c4b9153d73c2110479b8e37c3e406896328dd8d0cae967757d4cdb22abd4e81ff9e6dca6eb94db17d2fcb4b823db82045581058b6ccf75aa1d716ac5942bfa72dbad376ee0fd86a312624523112a872986a2a3356e4cbf49b5aec25b880dd16105d0405bad5250cb5f9cc8dfe5098df18c692ade9d7ccfc2a150e55ed8e1ac01f04f84cd16ae7c3d0564236aea892266f537aabf2517a2e2e6ec4af7107cd823fc5aedb117eedcc41ce47049710c32661222240f5d9780f8c2d31206c87bd9e895b0f84bf01bede419a8a15e99e010a22f00e08860152f13124cce5793ab99d4b14d797d369e2a8e6c204d129d0ea5eeafeee7b2c5db3f400a2a19a99e858fb26b83d455cdc9a9fd15458e9fb34cb393f489175d6a066f13cdd27dbea2c9d5df65743d40d92a091247f676cfefd0ea61f6e67e73e1af2c8782723c1d7564eb4e5686a9a6c8eededc0e37eff705b92540bfe07f5f5ed8573a76fe1770fcf080052caee73d2ffed5d9b1a6b541d87a28fdb645adff8c8f6a83c8c75a4992f52e81320b80a7e09eb676dc47a40b7bd1604a5ec453d3d5ba22a3bf808645520c2340567466203e1d6febf5752cd998007e4851ee248ff8e29a8c715cdc093db8a6cb942bff62c5ab11d74efa7c126e474e09fd448a9e92a871a796685919aefd53841a0af78bf776dbfefd45ebab2a38745fead60e4e24c7364ece5cd6af23fa0c8bd30729cdcb37a5e96b37531d43c55d387e31343a9e9ff694ae53003196e2f73c51a648b6f1e6b417f018f611d61faca36e4f30aa672ef24b4209b07fd3e9917864b5a9583f0301a544124929cdff8c3391f4adb9dd715c52d5fe132c41ed8deaf9d41df2216fddd0f2597a55b06486b293047eb126977352258cc96116c19922e492eb999467a63c807d807d2515fa84033797ed765649d4e7460d383675433bf7963334d05c5e340604a39770da36a9e2faaad46cfe67249ab7d1b5e76a618319924ad2e148aef928393bc113cba93234be099ddf956db227345955f31a493f588112a14c0ee6770cbad343a3d16449bcc5ca1da29a58c2eb483dfb27025c71b9d788263c018b52333fa647bc55611faef81787644b2f67bc7e3d1b981cadf3e8767d24568c840f3d50b19912a785263d312fa9cb20f9c664bf6f89bd6ff45ef1e8cd664891bc5e6c901b4e8e79d741674b676e337e430ccf5ebbe8ae5db1f7b765497b83876f7297649dc778f4818273113288f89183aba370181d1f8644ec26d04558db30aabb489c5cb831002390086305cc48c0ef29afbc9af5e21063500badde5fdb5532580cd73e12f25bb5021c77f5910d2896d4321d75a088f0e06258ca37d9d342d818ca4ff9aa2f0f6718c9c792d6614ccc76c18283ceb7424cdb3eb565e93c960b4afacc3fd4265464a803ac54e85b6eb2a6f792ff2650c712babd22e5083a11854e381821d5fba64bad60dd668109d78dfdae0f48e3006321f54aae5add3275227e613990ac63e725aa3772150fcdc7341a78966a6097662c9f3134bd261fa71ff70c4f6a9ac231cfde350036f22d7ee08bbb423f3f489b05ab48911833a6d868af43237bfeae0c953029eba0e81b791c1dc6979634aa6f31d329bbc7236eada974c39982ee3dcb29b33c577aac87ce7cecc4f91b2fa2c3798745b1bb45d04a66333bf9e667f46e44f545b866bbd137a708571f037f008045afd7396a1701eaf9882dad7326050ea37366d77b5e714694fda593b00f6bc8314baab560263e07894cf34100a8e4b1c75013d5a2dc40866af391070575496a905c3e37e02544baa3b8ab9b2a70008670f5b467f75207a1351f060acd083f5d2a6440abaf48c9b7d0b537ead15caea99655b3544b3a72a0284ab2bb8f83c6ac267e2c4913621eb43f40d44cda0e31fbafe965fb515fc0786a0a3f494a929c1ea389b6bd2673f3b9d114ca618afc95aabab3a360187d7fd640252d813f131b5cff7da7a610f6759f89596e7731a8dc2f966e045865934368740d3433233f5e322a1b9b09bdc33e432de97ce047a9a97a04e1d2ad20eec413563691f6e295c4a666fb5b8e34e94340aa3f6df4e67c748202b8c009c263a885959cf945cb92ac49fbca43ac2f578f1b02dd99014ce2108f5839aeb082a8e72d3139098e36e2b94701d2fdf2357d3272de77cbcf1af7d1ff6dacd433c8ed4ddb8ed6d6203bb360e1e9c9bfec41ca94dfb9006fffb4fd17a775f42bd2811195962e9138bab8899efb85d40b193e87d07eeb2317f28fb6d72b542a2a81326fd1d05a36d3d4732ad543b66d0b4a048b7046c7a323611f4639e8cc03671d3e304a80b7802413448a5fb69f0561fe3d4bf3a254a25ebd2da2fa410736f0bdb6ddbea9ba02f0d9d8c80e08cfc7a2c17e853a635f805c9ecde5712e105f1bd2fbeb411fcfe82bbc1f9044ae264d72ebe0c7c72cc39a590df590a159d78fe7fc774f635f5e70d6032991eca5552b74882c301151f959357b34085ed6fd3721be58b6250c08c6d6b531efa58a169eeb6af552f34d616c32eff52b51fd3d468b64ae06b5da7b3597ce4f1a7717af44e53e4bcad84664bb84494640c2045450a03a4bb21129dd5f941f0f20c549f320a98cf8c0191ee222d238629d3a654b98aaaef67e0e3b717c2b1c68d920688893610aa6772a758905d2fe4573b146386bd4039c0b2da666cdadf1695fa4634c0cae176608e81b36ee6bf670f234f50c535aad39afec1ced075ded41f44e20c03380041fd492fdea8f4fcae70ac4bef134c3f3213ffea56e9fcaa7316a0414b8c71d4246efa513349a49b6b9b43aff62caad8b685f9d0751f01c982011eca0d77e36f7f2edefecb9cce808ac05c083145a84da1b7099855f2d8c58bb933a88f19841de8197fa52f585a61d5fdb69aa6be94b0c59ba664a83f2631484bad2b7f898d5bf4ef1466019e82a7e4bc39c7ad0704da8a2f44f6de25d014fdcf28abdce98fccf91dbce13077661e1011faf1e83a2d02b35dfed4a57ebb0091b1ce43c38498be02b28f1ecb33d4c451439d88d145cc72af8f452b84c5f250db1a6559a0ff85816cd31eae7a7d5cd62ee8106195778de3028fb9e16ad6ea8247f0eeeb9ca176c9934092ed73f04faeca3191fa34aeab4b374f1a4ec34be64c2f5bc4d7a2bfd7ec77f9286c5489100eaee6a52d1181fe45c72906f5c9458ae8d41196ad905c3c8ead75b01f1a9b0ae493b1a53f3d7c83becd5b197aaefa9a6c0d0ba0d8f4bb71b035f56d3f906bbcc5a3e2cc24be80d6b3dcac3b7ca3a2142c6ada4898ff7ded42cd321e629e5dcff59a52513a947df944d0fb250a5d0f0ec530f3769f1a645f87ad8b34549c618d936583ac987f5ef575586b7e8d7dadd2c93d0a7aac6bd6e0cc67e282d4eb78adaa6346c192282c3ae39e6e1036d224a0b9b5f8c5187d1fa9b12f4d03bb774d0a96c4e73aaa9ebaf32a4c9de5ac7463bf5dc83b4caf93a0104d7f1411981397fa70bc1b9743a5275c563184245a0546a2162c5c481a836acf55b2a9e662df106bda936a70386e6ff001bd2ac39ec92f682694992cd9fddc7364a655aaca64aff4e1e80750f762c6071019ac377eef9079ef03e8a3b132758cc5bc067af813a3e738eca9479ff", 0x1000}, {&(0x7f0000001380)="3d425dfb4198d163fdc443417a13064fb12c6fd7eb6483d8fb7ae8a4eb59a46a3c8b7028381a0175206b92c6eb287ed7873aff9f0972b9f89858cfba7e4b2a1f14ea7238a577537194c993c3ba2036ced8ed8109de5c81fb8b6e395115af087b6680e573b0411b9f5f60072412ba5883fd2a2d421c554dc8565ffb0721f71fa23e06443e1e157520855fd8317842e77fc48097f2613ea71df6fc33d34d9c0a2d39b7de8b706dea89c227a5", 0xab}, {&(0x7f0000001440)="dd55f18c092ff8dda0af369c9e529505fed6ee507d56b28d17146f4f8b42127e3f16cd4cbd93e0c2605971eb4fac2518bcf85f4504715915f323cd2d6e2fda8e99f9a50bc99bb7f3f3f341095e2d86fddb0b404c6554e3409e00694a180fa4fc43d52acfc82344d398bb526717145a99f763c1429ccb6b4412111a15e5c1a9af228f41", 0x83}], 0x8}, 0x41)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000015c0), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x81, 0x0)
syz_extract_tcp_res(&(0x7f0000001640)={0x41424344, <r3=>0x41424344}, 0x5, 0x89)
syz_extract_tcp_res(&(0x7f0000001680)={0x41424344, <r4=>0x41424344}, 0xf, 0x5ff)
write$tun(r2, &(0x7f00000016c0)={@val={0x0, 0xf9}, @val={0x1, 0x80, 0x0, 0x1, 0x67, 0x7}, @ipv6=@tcp={0x8, 0x6, "ad66f0", 0x146, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x18}, {[@dstopts={0x1d, 0xa, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xc8, 0x800, [0x7, 0x1, 0x3ff, 0x3ff, 0x4, 0x4]}}, @ra, @pad1, @ra={0x5, 0x2, 0xdff}, @jumbo={0xc2, 0x4, 0xf}, @jumbo={0xc2, 0x4, 0xb}]}, @routing={0x1d, 0xc, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty, @loopback, @remote, @loopback]}], {{0x4e24, 0x4e23, r3, r4, 0x1, 0x0, 0x12, 0x40, 0x280, 0x0, 0x16, {[@mptcp=@syn={0x1e, 0xc, 0xd, 0x1, 0x4, 0x5, 0x7}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x40, @local, 0x3, "295a0361dfd64b5f"}, @mss={0x2, 0x4, 0xc81}, @fastopen={0x22, 0x9, "f9a7484739d885"}, @generic={0x5, 0x8, "83750c83e381"}]}}, {"722a878546cb4d3af5a827efbca899380e5190d5956f5e99a7f1c5535482d0f430406a15accc9f0a3f9b0ac90f1e4332df160efda94a"}}}}}, 0x17c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x84, 0x9, 0x6, 0x301, 0x0, 0x0, {0xd, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x14c8ddf2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1ff}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001a00)={@local, @loopback, <r7=>0x0}, &(0x7f0000001a40)=0xc)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x16c, 0x12, 0x100, 0x70bd27, 0x25dfdbfd, {0x22, 0x1, 0x2, 0x1, {0x4e24, 0x4e23, [0x401, 0xad17, 0x5, 0x34], [0x0, 0x7, 0x8, 0xffffffec], r7, [0x7fff, 0x5]}, 0x1, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "f67f21cf19997752ea45052f5270eda49d7880ec4304d1e7533721140972e8ffaa404e3e8415af815d8fe984a687cf4eeecd2ec2bf389fbf22aeb691cc03a03ffc63155fc591e27deeb5e52a9fd0fbde41fb7e702cdef56e80ea4a67f36c82d4034187b46aa7a568cb7f5c10ab2fee136e09e092fc7f8bf80521aa5e048a2df8c62b625c4676e1d5425c7a168b794c4707dd"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "5f82921e045776f88413250feb8e474558c9882512b2b477c44ea910aa571a2f4181f4bfe73a8917ab324ffb13609afb53a15b88bc6229feee1e9811847ccd7713b1b98223654e3b9cb122f89c138f8fc565ce64e216e601bcd4c6b38fb54b2ec55e0a966f66ebd7ef9cbfe38c89e19dbc32418c11c59e64056e9462447d10165aadc6"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001cc0), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@flushsa={0x38, 0x1c, 0x100, 0x70bd27, 0x25dfdbff, {0x2b}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e21, @in=@multicast2}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x38}}, 0x44014)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001f00)={'wpan3\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001f40)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}}, 0x8)
write(r5, &(0x7f0000002080)="887d13b30e79b6d8e3c5bb0d61bcc78419cbe258e550dfbd76db2c486bf2105d76ddb916ab23d4781fa6dd418b51975cc97fc77824f8460e2953f78640ab6a135294569eb30a4b3e5384025476159e61befc2b59401ffb24278fd18cbf5938f2036376ad5da73a25fee9", 0x6a)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r1)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x5c, r12, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040811}, 0x0)
r13 = bpf$ITER_CREATE(0x21, &(0x7f00000024c0), 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002500)={&(0x7f0000002280)="a3ab3a0b0d5b324106b474e7d9a308e81836679b0d9daeab2ce986cd681f93ba9ee9f462409f1fbee60b5d0528f3e6ba5a85a3d397af17efb7c3898c48eff2d8571784e1e10b93496c3fdd2a7485e70457cb60fd363ba9226b8c8866811c6903cea6ff96911a6882b37245433784f251dcabefcc6479703ac069dc119d17f13743569c613c3c2dded8c77affc1c59573ae2635ea4e8292263e71df6e6d89f1734ea8f97ee9f3db9ffc0d9e4776cdfdf696e74ab8568cb6", &(0x7f0000002340)=""/154, &(0x7f0000002400)="59fdbc0654ea582b4681cec6f48acf16dc", &(0x7f0000002440)="1e2127737bdf70f7a3300273927c4310fdfd3fb15ac0aaf3d190a9570e9054f613a8f1360c195a3f3ae23c14be26d20e2caee08b79bdfd257ba21b1c5ba8b2b4706f8460ba041c67f81bd2af9c62222983bfe5afc0ab286204cd4b8976804f822202c04498856f9ea3823931705fd8cbb7fb808dad5a3ac42fe32f6a89", 0x7, r13, 0x4}, 0x38)
syz_extract_tcp_res$synack(&(0x7f0000002540), 0x1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r13, &(0x7f0000002580)="dbc4c8c0", &(0x7f00000025c0)=""/191}, 0x20)
r14 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
accept$ax25(r14, &(0x7f00000026c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @null, @netrom, @default]}, &(0x7f0000002740)=0x48)

26.791264792s ago: executing program 2 (id=2599):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13080000000000000000110000001c000380080003007d0e000008000300050000000800010009000000340009"], 0x64}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'})

26.689607212s ago: executing program 2 (id=2601):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r0=>0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x5, 0x6, 0x8, 0x14008, 0xffffffffffffffff, 0x7, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) (async, rerun: 64)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x7, 0xc, 0x0, 0x2004, r1, 0x7ff, '\x00', r0, r2, 0x3, 0x1, 0x3}, 0x50) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x924}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xd8, &(0x7f0000000380)=""/216, 0x1d369bd6163b6610, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0xfb, 0x8000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x0, 0x3, 0xd, 0xb}, {0x2, 0x3, 0xa, 0x3}, {0x5, 0x1, 0x2, 0x5}], 0x10, 0x7ff}, 0x94) (rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x8, 0xe805, 0x8000, 0xa080, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r5=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, <r8=>0xffffffffffffffff}, 0x4) (rerun: 32)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x1c8d, 0x2, 0x7f0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async)
write$tun(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc0)
readv(r9, 0x0, 0x0) (async)
write$tun(r9, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x16, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x47b, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x1, 0xb, 0x9, 0x5, 0x4}, @generic={0xd3, 0x5, 0x2, 0x7fff, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2, 0x2}, 0x10, 0x28054, r3, 0x0, &(0x7f0000000340)=[r4, r5, r5, r4, r5, r9, r6], 0x0, 0x10, 0x2009}, 0x94)

26.688311292s ago: executing program 0 (id=2602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00090000000400000000000000000000ed400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10)
write(r1, &(0x7f00000000c0)="1800000016005f0214ffffffffffff", 0xf)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31840000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000068000380"], 0x118}}, 0x4000040)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xf0, 0xa, 0x6, 0xa957deaef98c8e2c, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x640e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x59}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb00}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x140}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_ADT={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4010804}, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {0x0}], 0x2)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100", @ANYRESDEC=r3], 0x1c}}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x607ff17fdfb75fe0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800)

15.720306914s ago: executing program 1 (id=2647):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x9, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x0, 0xfffffffffffffffe, 0x40000000, 0x10000000000, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7c, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x4000080)
socket(0x2, 0x80805, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="f9", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x9}, 0x1c)

15.701060532s ago: executing program 1 (id=2648):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
recvmsg(r0, 0x0, 0x10001)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x34, r6, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806)

15.620310634s ago: executing program 1 (id=2649):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000004000020000052c00048028000180080001006f7366001c0002800800014000000009080003400000040105000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0xfffffcf5, 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001050015001600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)

15.619921426s ago: executing program 1 (id=2650):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0b00ff00000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x935d, 0x10}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000009c0)) (async, rerun: 64)
r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) (async)
sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="4ec4c8f9e02b3de3fa83da74be3fe20cf79ad49f35bf571abb8a5371918514e3ea0874bf881a84a4afac00525a6327", 0x2f}, {&(0x7f00000000c0)="3fec6c1505dced2c3b41162071993160b9687c3e6982e13103fa66fe698e8e132aa272d751def571a318977744f1e264ab214eb75ebaa15d10cf03024812213547faf6e4c33323fb7bcc83c3fd7a8655e009d2016f3e86479aa7bed71ede18cd55a2220cbbd5b6361a24431666c1d347ad2c1fede6a59c2ebac15e1cdc54f5afc32c3099d6e193c1b8c36d0adfebe46bb2b69561db2a49d6cbeda93a3ecc1ebd50e279814ad1e5581dfd4e8ab8afa2a011e1cd2a7c80c6ec2cc5cd15bb952594", 0xc0}, {&(0x7f0000000180)="d4bf82990c41f3f0449670cbd7afc977bc98418dddb18a0fae8c2ab1e1506f86553fc51e43346fa4ff9257064bdd6083b7608093990abe3a4e6adb22ac80cd9222235b599ae4ea070fb82248d001e7caf85b195377a2377a980056654ebc4913f6033813e6f8e8aee2ae0d1fac0eb88af4a2a6cc658d9fbe4c80efea476898b8dbce40405977fb84ef7d760dcb3dc4fd1e52326347a955d2efe5cc3c4d4f7da8149bdf2f0aeb57ef170806940f8944282408064089eeea2e806ced537ef9b3fde060a3dcc6c61d6cfd2cfab6eeb1142d", 0xd0}, {&(0x7f0000000280)="b87b116e152099aecdf8994f62fa44353746e51aa0f3cbfc546fe860da3131950197f584cc647f6765a7e473d351", 0x2e}], 0x4)

15.528751352s ago: executing program 1 (id=2651):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10)
connect$phonet_pipe(r0, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x44, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2}, 0x94)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x81, 0x0, 0x5, 0x41, @mcast1, @local, 0x8000, 0x10, 0x80000000, 0xfffffffb}}) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x95, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x4a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="c5450de577cda44cca5c57f1dc7d5be18dc34895eeb2c43a99ce10adba7ffac07310f7269f032a13cff62d502da11cb82d063efe197b28512e773eb3b35acaca23d467c236ed3384b708079e7dcb4a5ce43e9f60e3e69c5c498a0a2990825dfb345265d200"/111], 0x44}, 0x1, 0xba01}, 0x810) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r12, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', <r13=>0x0, 0x700, 0x8, 0x1, 0x7b4b, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x67, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, {[@noop]}}}}}) (async, rerun: 32)
r14 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r15=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}}, 0x800) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1b4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xcc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, @in6={0xa, 0x4e23, 0x1000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x1ff, @mcast2, 0x6ef3}], 0xac)

15.457984422s ago: executing program 1 (id=2652):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

11.010771406s ago: executing program 32 (id=2602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00090000000400000000000000000000ed400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10)
write(r1, &(0x7f00000000c0)="1800000016005f0214ffffffffffff", 0xf)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31840000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000068000380"], 0x118}}, 0x4000040)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xf0, 0xa, 0x6, 0xa957deaef98c8e2c, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x640e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x59}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb00}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x140}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_ADT={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4010804}, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {0x0}], 0x2)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100", @ANYRESDEC=r3], 0x1c}}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x607ff17fdfb75fe0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800)

10.961603306s ago: executing program 33 (id=2601):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r0=>0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x5, 0x6, 0x8, 0x14008, 0xffffffffffffffff, 0x7, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) (async, rerun: 64)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x7, 0xc, 0x0, 0x2004, r1, 0x7ff, '\x00', r0, r2, 0x3, 0x1, 0x3}, 0x50) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x924}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xd8, &(0x7f0000000380)=""/216, 0x1d369bd6163b6610, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0xfb, 0x8000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x0, 0x3, 0xd, 0xb}, {0x2, 0x3, 0xa, 0x3}, {0x5, 0x1, 0x2, 0x5}], 0x10, 0x7ff}, 0x94) (rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x8, 0xe805, 0x8000, 0xa080, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r5=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, <r8=>0xffffffffffffffff}, 0x4) (rerun: 32)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x1c8d, 0x2, 0x7f0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async)
write$tun(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc0)
readv(r9, 0x0, 0x0) (async)
write$tun(r9, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x16, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x47b, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x1, 0xb, 0x9, 0x5, 0x4}, @generic={0xd3, 0x5, 0x2, 0x7fff, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2, 0x2}, 0x10, 0x28054, r3, 0x0, &(0x7f0000000340)=[r4, r5, r5, r4, r5, r9, r6], 0x0, 0x10, 0x2009}, 0x94)

0s ago: executing program 34 (id=2652):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

7900][ T6192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.051047][ T5850] Bluetooth: hci0: command tx timeout
[   64.051112][ T5236] Bluetooth: hci2: command tx timeout
[   64.054017][ T5853] Bluetooth: hci1: command tx timeout
[   64.297344][ T6221] __nla_validate_parse: 8 callbacks suppressed
[   64.297356][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'.
[   64.361749][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   64.374118][ T6227] netlink: 620 bytes leftover after parsing attributes in process `syz.2.96'.
[   64.377738][ T6227] netlink: 68 bytes leftover after parsing attributes in process `syz.2.96'.
[   64.401162][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.533270][    C1] Illegal XDP return value 16128 on prog  (id 26) dev lo, expect packet loss!
[   64.538913][ T6233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.681091][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'.
[   64.743833][ T6255] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   64.818660][ T6262] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.105'.
[   64.824891][ T6261] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.105'.
[   64.969831][ T6275] netlink: 176 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.974560][ T6275] ip6gretap0: entered promiscuous mode
[   64.976908][ T6275] netlink: 176 bytes leftover after parsing attributes in process `syz.2.110'.
[   65.101911][ T6290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.969334][ T6317] macvlan1: entered allmulticast mode
[   65.971677][ T6317] veth1_vlan: entered allmulticast mode
[   66.053769][ T6319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.135142][ T6319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.186120][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810e849000: rx timeout, send abort
[   66.201969][ T6319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.267392][ T6319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.338314][ T5889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.356552][ T5889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.373099][ T5857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.386539][ T5857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.566466][ T6335] team0 (unregistering): Port device team_slave_0 removed
[   66.570942][ T6335] team0 (unregistering): Port device team_slave_1 removed
[   66.690318][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810e849000: abort rx timeout. Force session deactivation
[   67.180359][ T6375] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   68.328949][ T1224] IPVS: starting estimator thread 0...
[   68.412515][ T6486] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.619282][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.851988][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   68.857975][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   68.910425][  T792] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   69.993989][ T6556] __nla_validate_parse: 12 callbacks suppressed
[   69.994001][ T6556] netlink: 416 bytes leftover after parsing attributes in process `syz.2.195'.
[   70.250270][ T6581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.201'.
[   70.366733][ T6589] netlink: 'syz.0.204': attribute type 15 has an invalid length.
[   70.369353][ T6589] netlink: 602 bytes leftover after parsing attributes in process `syz.0.204'.
[   70.487086][ T6596] tipc: Started in network mode
[   70.489494][ T6596] tipc: Node identity 1e988b2c9586, cluster identity 4711
[   70.495986][ T6596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.502982][ T6596] syzkaller0: entered promiscuous mode
[   70.505521][ T6596] syzkaller0: entered allmulticast mode
[   70.528177][ T6596] tipc: Resetting bearer <eth:syzkaller0>
[   70.534604][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   70.558709][ T6595] tipc: Disabling bearer <eth:syzkaller0>
[   70.564955][ T6598] 8021q: VLANs not supported on lo
[   70.679125][ T6607] netlink: 76 bytes leftover after parsing attributes in process `syz.1.211'.
[   70.684092][ T6607] nbd: illegal input index 65508
[   70.951219][ T6629] netlink: 'syz.2.221': attribute type 7 has an invalid length.
[   70.956566][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   70.960089][ T6630] netlink: 'syz.2.221': attribute type 7 has an invalid length.
[   70.966299][ T6631] syz.1.218 uses old SIOCAX25GETINFO
[   70.973606][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   70.995800][ T6636] ipvlan2: entered allmulticast mode
[   70.998049][ T6636] bond0: entered allmulticast mode
[   70.999769][ T6636] bond_slave_0: entered allmulticast mode
[   71.001682][ T6636] bond_slave_1: entered allmulticast mode
[   71.005809][ T6636] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   71.008331][ T6636] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   71.066605][ T6643] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   71.089083][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.091312][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.347709][ T6668] bridge0: port 3(batadv1) entered blocking state
[   71.350306][ T6668] bridge0: port 3(batadv1) entered disabled state
[   71.353689][ T6668] batadv1: entered allmulticast mode
[   71.357433][ T6668] batadv1: entered promiscuous mode
[   71.843464][ T5889] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   71.846858][ T5889] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   81.327234][   T10] cfg80211: failed to load regulatory.db
[   98.022935][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   98.287967][ T6741] netlink: 92 bytes leftover after parsing attributes in process `syz.2.248'.
[   98.297480][ T6741] netem: unknown loss type 0
[   98.300458][ T6741] netem: change failed
[   98.864643][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'.
[   99.668042][ T6831] tipc: Started in network mode
[   99.670068][ T6831] tipc: Node identity 6e0c360955c3, cluster identity 4711
[   99.675870][ T6831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.697551][ T6831] syzkaller0: entered promiscuous mode
[   99.699395][ T6831] syzkaller0: entered allmulticast mode
[   99.726611][ T6831] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   99.759613][ T6831] tipc: Resetting bearer <eth:syzkaller0>
[   99.782311][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[   99.802591][ T6830] tipc: Disabling bearer <eth:syzkaller0>
[   99.899342][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   99.965895][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'.
[  100.085762][ T6863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  100.096106][ T6863] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[  100.131689][ T6866] Bluetooth: MGMT ver 1.23
[  100.358398][ T6888] vlan2: entered allmulticast mode
[  100.360383][ T6888] batadv0: entered allmulticast mode
[  100.364673][ T6888] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.287'.
[  100.458168][ T6892] netlink: 'syz.2.288': attribute type 5 has an invalid length.
[  100.465084][ T6892] netlink: 'syz.2.288': attribute type 7 has an invalid length.
[  100.475380][ T6892] : entered promiscuous mode
[  100.515811][ T6900] netlink: 256 bytes leftover after parsing attributes in process `syz.0.289'.
[  100.682450][ T5236] Bluetooth: hci2: command tx timeout
[  100.690831][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'.
[  101.120000][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  101.129245][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  101.535055][ T6978] lo: entered allmulticast mode
[  101.539457][ T6978] lo: left allmulticast mode
[  101.724308][ T6991] syzkaller1: tun_chr_ioctl cmd 1074025677
[  101.730943][ T6991] syzkaller1: linktype set to 778
[  101.743734][ T6991] syzkaller1: tun_chr_ioctl cmd 1074025673
[  101.938278][ T7007] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[  102.845491][ T7037] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[  102.917972][ T7041] syzkaller1: entered promiscuous mode
[  102.920395][ T7041] syzkaller1: entered allmulticast mode
[  103.340386][ T7075] __nla_validate_parse: 2 callbacks suppressed
[  103.340406][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'.
[  103.398941][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[  103.515876][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[  103.518860][ T7088] netlink: 620 bytes leftover after parsing attributes in process `syz.1.343'.
[  103.522009][ T7088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.343'.
[  103.632058][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'.
[  103.665387][ T7106] macsec1: entered promiscuous mode
[  103.667613][ T7106] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  103.670780][ T7106] macsec1: entered allmulticast mode
[  103.673313][ T7106] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  103.683548][ T7105] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  103.688449][ T7105] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  103.766934][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  103.770938][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  103.775879][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  103.779803][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  104.053093][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  104.105474][ T7139] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  104.308928][ T7147] netlink: 'syz.2.361': attribute type 5 has an invalid length.
[  104.386300][ T7151] netlink: 'syz.2.362': attribute type 21 has an invalid length.
[  104.546318][ T7157] netlink: 'syz.1.365': attribute type 10 has an invalid length.
[  104.554251][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.559165][ T7157] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  104.586432][ T7157] syz.1.365 (7157) used greatest stack depth: 19896 bytes left
[  104.719871][ T7168] raw_sendmsg: syz.2.370 forgot to set AF_INET. Fix it!
[  104.838543][ T7174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.241725][ T7204] veth5: entered promiscuous mode
[  105.397209][ T7208] netlink: 'syz.1.388': attribute type 27 has an invalid length.
[  105.397541][ T7209] netlink: 'syz.1.388': attribute type 27 has an invalid length.
[  105.399906][ T7208] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  105.409043][ T7209] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  105.908597][ T7233] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[  105.908597][ T7234] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[  105.947443][ T7234] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.146962][ T7252] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  106.917273][ T7266] sctp: [Deprecated]: syz.1.408 (pid 7266) Use of int in maxseg socket option.
[  106.917273][ T7266] Use struct sctp_assoc_value instead
[  107.611719][ T7285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.618864][ T7285] syzkaller0: entered promiscuous mode
[  107.622983][ T7285] syzkaller0: entered allmulticast mode
[  107.666530][ T7285] tipc: Resetting bearer <eth:syzkaller0>
[  107.671366][ T7284] tipc: Resetting bearer <eth:syzkaller0>
[  107.690738][ T7284] tipc: Disabling bearer <eth:syzkaller0>
[  108.859059][ T7341] __nla_validate_parse: 76 callbacks suppressed
[  108.859071][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.867526][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.872404][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.875431][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.881600][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.891421][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.894923][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  108.898043][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[  109.231947][ T7360] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_tx_wq": -EINTR
[  109.477602][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'.
[  109.684273][ T7401] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  110.096517][ T7416] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[  110.127943][ T7416] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.148675][ T7416] bond1: (slave ip6erspan0): making interface the new active one
[  110.156708][ T7416] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  110.187536][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[  110.415594][ T7438] tipc: Started in network mode
[  110.417735][ T7438] tipc: Node identity 76d57a5a509f, cluster identity 4711
[  110.420937][ T7438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.424786][ T7438] syzkaller0: entered promiscuous mode
[  110.427188][ T7438] syzkaller0: entered allmulticast mode
[  110.440476][ T7438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  110.456752][ T7438] tipc: Resetting bearer <eth:syzkaller0>
[  110.468072][ T7437] tipc: Resetting bearer <eth:syzkaller0>
[  110.481048][ T7437] tipc: Disabling bearer <eth:syzkaller0>
[  110.518716][ T7444] netlink: 'syz.0.459': attribute type 4 has an invalid length.
[  110.616040][ T7448] netlink: 'syz.0.461': attribute type 4 has an invalid length.
[  110.622308][ T7448] netlink: 'syz.0.461': attribute type 4 has an invalid length.
[  110.743646][ T7465] netlink: 'syz.1.467': attribute type 10 has an invalid length.
[  110.805932][ T7467] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.117650][  T670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.121781][  T670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.156973][ T7481] netlink: 'syz.1.473': attribute type 10 has an invalid length.
[  111.168496][ T7481] 8021q: adding VLAN 0 to HW filter on device team0
[  111.175197][ T7481] bond0: (slave team0): Enslaving as an active interface with an up link
[  111.402022][ T7494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.416765][ T7494] syzkaller0: entered promiscuous mode
[  111.425607][ T7494] syzkaller0: entered allmulticast mode
[  111.489457][ T7494] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.499063][ T7494] tipc: Resetting bearer <eth:syzkaller0>
[  111.503306][ T7493] tipc: Resetting bearer <eth:syzkaller0>
[  111.514165][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[  112.479136][ T7581] netlink: 'syz.2.509': attribute type 4 has an invalid length.
[  112.821382][ T7621] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  112.833297][ T7621] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  112.838879][ T7621] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  112.846522][ T7621] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  113.567007][ T7664] ..0: renamed from hsr0 (while UP)
[  113.609624][ T7664] ..0: entered allmulticast mode
[  113.611543][ T7664] hsr_slave_0: entered allmulticast mode
[  113.634036][ T7697] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  113.636816][ T7664] hsr_slave_1: entered allmulticast mode
[  113.639155][ T7664] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  114.166431][ T7664] syz.0.524 (7664) used greatest stack depth: 18584 bytes left
[  114.469637][ T7740] 8021q: adding VLAN 0 to HW filter on device team0
[  114.475642][ T7740] bond0: (slave team0): Enslaving as an active interface with an up link
[  114.597287][ T7744] __nla_validate_parse: 44 callbacks suppressed
[  114.597297][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'.
[  114.773127][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  114.776603][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'.
[  114.789581][ T7766] geneve3: entered promiscuous mode
[  114.791767][ T7766] geneve3: entered allmulticast mode
[  114.985120][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'.
[  115.046219][ T7780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.556'.
[  115.050319][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.556'.
[  115.218282][ T7793] bridge0: port 1(erspan0) entered blocking state
[  115.221340][ T7793] bridge0: port 1(erspan0) entered disabled state
[  115.229450][ T7793] erspan0: entered allmulticast mode
[  115.238346][ T7793] erspan0: entered promiscuous mode
[  115.244874][ T7793] bridge0: port 1(erspan0) entered blocking state
[  115.247857][ T7793] bridge0: port 1(erspan0) entered forwarding state
[  115.256037][ T7793] erspan0: left allmulticast mode
[  115.258449][ T7793] erspan0: left promiscuous mode
[  115.261985][ T7793] bridge0: port 1(erspan0) entered disabled state
[  115.271082][ T7793] netlink: 76 bytes leftover after parsing attributes in process `syz.2.562'.
[  115.357689][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'.
[  115.361758][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'.
[  115.771265][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'.
[  115.845698][ T7873] validate_nla: 34 callbacks suppressed
[  115.845708][ T7873] netlink: 'syz.0.577': attribute type 1 has an invalid length.
[  115.850627][ T7874] netlink: 'syz.0.577': attribute type 1 has an invalid length.
[  115.879335][ T7873] gretap1: entered allmulticast mode
[  115.901193][ T7874] gretap1: entered allmulticast mode
[  117.445047][ T7976] netlink: 'syz.2.614': attribute type 3 has an invalid length.
[  117.476361][ T7983] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.608814][   T33] audit: type=1800 audit(1758107834.523:2): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.618" name=3030303030306230303030303030303030303030303030303030303031335FF7E1D1AC528659A3E76713EE99683485BAB948AD1E8268F48356B6CD8F dev="tmpfs" ino=1024 res=0 errno=0
[  117.632847][   T33] audit: type=1804 audit(1758107834.533:3): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.618" name=3030303030306230303030303030303030303030303030303030303031335FF7E1D1AC528659A3E76713EE99683485BAB948AD1E8268F48356B6CD8F dev="tmpfs" ino=1024 res=1 errno=0
[  118.202875][ T8017] ieee802154 phy0 wpan0: encryption failed: -22
[  118.775162][ T8051] dvmrp1: tun_chr_ioctl cmd 1074025677
[  118.777106][ T8051] dvmrp1: linktype set to 768
[  119.779193][ T8127] __nla_validate_parse: 22 callbacks suppressed
[  119.779354][ T8127] netlink: 277 bytes leftover after parsing attributes in process `syz.0.665'.
[  119.839622][ T8128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.665'.
[  119.847631][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.851703][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.999947][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'.
[  120.478218][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'.
[  120.504318][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'.
[  120.527401][ T8163] netlink: 'syz.2.677': attribute type 32 has an invalid length.
[  120.530797][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  120.535486][ T8163] (unnamed net_device) (uninitialized): option coupled_control: invalid value (240)
[  120.557933][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'.
[  120.752407][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'.
[  120.790151][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'.
[  120.826129][ T8181] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.683'.
[  120.888845][ T8183] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[  122.621098][ T8243] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  122.784563][ T8255] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  122.816810][ T8255] bond3: (slave bridge3): making interface the new active one
[  122.821222][ T8255] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  132.536473][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.539170][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  144.638371][ T8323] __nla_validate_parse: 10 callbacks suppressed
[  144.638386][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  144.695935][ T8327] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  144.717432][ T8328] veth9: entered promiscuous mode
[  144.761038][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'.
[  145.249758][ T8366] macvlan0: entered promiscuous mode
[  145.257053][ T8366] batadv0: entered promiscuous mode
[  145.266582][ T8366] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  145.270137][ T8366] hsr1: entered allmulticast mode
[  145.271820][ T8366] macvlan0: entered allmulticast mode
[  145.287948][ T8366] batadv0: entered allmulticast mode
[  145.311745][ T8366] macvlan0: left promiscuous mode
[  145.319791][ T8366] batadv0: left promiscuous mode
[  145.347536][ T8377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.350793][ T8377] syzkaller0: entered promiscuous mode
[  145.352984][ T8377] syzkaller0: entered allmulticast mode
[  145.366005][ T8377] tipc: Resetting bearer <eth:syzkaller0>
[  145.369567][ T8376] tipc: Resetting bearer <eth:syzkaller0>
[  145.376833][ T8376] tipc: Disabling bearer <eth:syzkaller0>
[  145.420455][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'.
[  145.468425][ T8385] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  145.565991][ T8389] netlink: 8168 bytes leftover after parsing attributes in process `syz.1.747'.
[  145.604078][ T8391] netlink: 248 bytes leftover after parsing attributes in process `syz.0.748'.
[  145.749936][ T8408] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  146.478739][ T8481] netlink: 'syz.1.776': attribute type 21 has an invalid length.
[  146.482049][ T8481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.776'.
[  146.661181][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.780'.
[  147.261823][ T8509] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  147.304907][ T8511] netlink: 'syz.0.785': attribute type 30 has an invalid length.
[  147.544165][ T8521] vxcan1: entered allmulticast mode
[  147.653648][ T8528] bond4: entered promiscuous mode
[  147.671802][ T8533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.676689][ T8534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.873529][ T8559] netlink: 96 bytes leftover after parsing attributes in process `syz.1.800'.
[  147.948144][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'.
[  147.963997][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'.
[  148.034955][ T5889] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  148.037182][ T8567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.186754][ T8593] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  148.327865][ T8599] net veth1_virt_wifi : renamed from virt_wifi0
[  148.593055][ T8616] xt_bpf: check failed: parse error
[  148.902262][   T57] block nbd0: Receive control failed (result -32)
[  148.963502][ T8658] gretap1: entered promiscuous mode
[  148.972221][ T8658] gretap1: entered allmulticast mode
[  149.060961][ T8667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.089823][ T8670] pim6reg1: entered allmulticast mode
[  149.116650][ T8667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.197550][ T8667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.240543][ T8667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.357122][ T5857] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.360171][ T5857] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.403721][ T5857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.406819][ T5857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.701552][ T8704] __nla_validate_parse: 5 callbacks suppressed
[  149.701564][ T8704] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.837'.
[  149.784103][ T8706] macsec1: entered promiscuous mode
[  149.785974][ T8706] macsec1: entered allmulticast mode
[  149.787754][ T8706] ip6gretap0: entered allmulticast mode
[  150.012093][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  150.046877][ T8712] xfrm1: entered promiscuous mode
[  150.048954][ T8712] xfrm1: entered allmulticast mode
[  150.051333][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  150.257554][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.842'.
[  150.261404][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.842'.
[  150.308588][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  150.314642][ T8720] netlink: 136 bytes leftover after parsing attributes in process `syz.0.843'.
[  150.727054][ T8743] bond0: Unable to set up delay as MII monitoring is disabled
[  151.020806][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  151.026908][ T8768] openvswitch: netlink: Unknown nsh attribute 0
[  151.029609][ T8768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.036269][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'.
[  151.049649][  T792] IPVS: starting estimator thread 0...
[  151.056162][ T8770] Bluetooth: MGMT ver 1.23
[  151.065964][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.860'.
[  151.094729][ T8766] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  151.097480][ T8772] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  151.136836][ T8771] IPVS: using max 81 ests per chain, 194400 per kthread
[  151.250311][ T8792] netlink: 'syz.1.869': attribute type 3 has an invalid length.
[  151.427852][ T8806] nbd: must specify at least one socket
[  151.877192][ T8825] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  151.901251][ T8825] bond3: (slave gretap1): making interface the new active one
[  151.904893][ T8825] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  151.914405][ T8825] vlan2: entered allmulticast mode
[  151.916218][ T8825] bond3: entered allmulticast mode
[  151.918031][ T8825] gretap1: entered allmulticast mode
[  151.920678][ T8825] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  152.284665][ T8839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.288217][ T8839] syzkaller0: entered promiscuous mode
[  152.290485][ T8839] syzkaller0: entered allmulticast mode
[  152.304339][ T8839] tipc: Resetting bearer <eth:syzkaller0>
[  152.309203][ T8838] tipc: Resetting bearer <eth:syzkaller0>
[  152.319549][ T8838] tipc: Disabling bearer <eth:syzkaller0>
[  152.389983][ T8841] netlink: 'syz.1.889': attribute type 5 has an invalid length.
[  152.510145][ T8848] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  152.760824][ T8868] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  153.114601][ T8883] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  153.145650][ T8886] hsr_slave_0: left promiscuous mode
[  153.148168][ T8886] hsr_slave_1: left promiscuous mode
[  153.329010][ T8893] netlink: 'syz.0.907': attribute type 7 has an invalid length.
[  153.331532][ T8893] netlink: 'syz.0.907': attribute type 8 has an invalid length.
[  153.341230][ T8893] bridge0: entered promiscuous mode
[  153.346193][ T8893] ip6gretap0: entered promiscuous mode
[  153.350155][ T8893] bridge0: left promiscuous mode
[  153.354821][ T8893] ip6gretap0: left promiscuous mode
[  153.384788][ T8894] batadv0: entered promiscuous mode
[  153.386748][ T8894] macsec1: entered promiscuous mode
[  153.391347][ T8894] batadv0: left promiscuous mode
[  153.666022][ T8910] hsr_slave_1 (unregistering): left promiscuous mode
[  154.111226][ T8932] ieee802154 phy0 wpan0: encryption failed: -22
[  154.411897][ T8950] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.418671][ T8950] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  154.424316][ T8950] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  154.506473][ T8954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.655684][ T8967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.658705][ T8967] syzkaller0: entered promiscuous mode
[  154.660812][ T8967] syzkaller0: entered allmulticast mode
[  154.676170][ T8967] tipc: Resetting bearer <eth:syzkaller0>
[  154.683576][ T8966] tipc: Resetting bearer <eth:syzkaller0>
[  154.695568][ T8966] tipc: Disabling bearer <eth:syzkaller0>
[  154.869098][ T8984] openvswitch: netlink: Flow actions attr not present in new flow.
[  154.967420][ T8996] __nla_validate_parse: 19 callbacks suppressed
[  154.967434][ T8996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'.
[  154.974018][ T8996] netlink: 19 bytes leftover after parsing attributes in process `syz.1.942'.
[  154.979702][ T8996] netlink: 'syz.1.942': attribute type 6 has an invalid length.
[  154.985930][ T8996] netlink: 'syz.1.942': attribute type 4 has an invalid length.
[  154.989859][ T8996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'.
[  154.994887][ T8996] netlink: 19 bytes leftover after parsing attributes in process `syz.1.942'.
[  155.001983][ T8996] netlink: 'syz.1.942': attribute type 6 has an invalid length.
[  155.011388][ T8996] netlink: 'syz.1.942': attribute type 4 has an invalid length.
[  155.066598][ T9000] syzkaller0: entered promiscuous mode
[  155.068998][ T9000] syzkaller0: entered allmulticast mode
[  155.174752][ T9009] syzkaller0: tun_chr_ioctl cmd 1074812118
[  155.177175][ T9010] syzkaller0: tun_chr_ioctl cmd 1074812118
[  155.261983][ T9013] netlink: 119 bytes leftover after parsing attributes in process `syz.0.946'.
[  155.359366][ T9016] vxcan1: left allmulticast mode
[  155.361608][ T9015] netlink: 68 bytes leftover after parsing attributes in process `syz.0.947'.
[  155.448629][ T9021] openvswitch: netlink: IPv6 tunnel dst address is zero
[  155.604482][ T9029] netlink: 200 bytes leftover after parsing attributes in process `syz.0.951'.
[  155.694077][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  156.016691][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  156.020404][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  156.120639][ T9052] syzkaller0: entered promiscuous mode
[  156.123188][ T9052] syzkaller0: entered allmulticast mode
[  156.198664][ T9054] syzkaller1: entered promiscuous mode
[  156.201114][ T9054] syzkaller1: entered allmulticast mode
[  156.271372][ T9054] bond2: (slave bridge4): making interface the new active one
[  156.275402][ T9054] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  156.316393][ T9061] sctp: [Deprecated]: syz.1.963 (pid 9061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.316393][ T9061] Use struct sctp_sack_info instead
[  156.325574][ T9061] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  156.353815][ T9063] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  156.869076][ T9095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.872070][ T9095] syzkaller0: entered promiscuous mode
[  156.875731][ T9095] syzkaller0: entered allmulticast mode
[  156.886251][ T9095] tipc: Resetting bearer <eth:syzkaller0>
[  156.891161][ T9095] tipc: Resetting bearer <eth:syzkaller0>
[  156.900424][ T9095] tipc: Disabling bearer <eth:syzkaller0>
[  157.181266][ T9104] validate_nla: 3 callbacks suppressed
[  157.181300][ T9104] netlink: 'syz.1.977': attribute type 14 has an invalid length.
[  157.205527][ T9104] netlink: 'syz.1.977': attribute type 14 has an invalid length.
[  157.303938][ T9112] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  157.509075][ T9117] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  157.520573][ T9117] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  157.985914][ T9155] ieee802154 phy0 wpan0: encryption failed: -22
[  158.043404][ T9158] netlink: 'syz.2.987': attribute type 4 has an invalid length.
[  158.436222][ T9188] openvswitch: netlink: Message has 8 unknown bytes.
[  158.595689][ T9196] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[  158.631655][ T9196] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  158.638198][ T9196] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  158.690764][ T9196] bond5: (slave bridge5): Enslaving as an active interface with a down link
[  158.707094][ T9196] macvlan2: entered promiscuous mode
[  158.709043][ T9196] macvlan2: entered allmulticast mode
[  158.711303][ T9196] bond5: entered promiscuous mode
[  158.714533][ T9196] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  158.718120][ T9196] bond5: left promiscuous mode
[  159.036637][ T9233] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  159.046577][ T9235] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  159.052706][ T9234] netlink: 'syz.0.1012': attribute type 1 has an invalid length.
[  159.185528][ T9243] macvlan0: entered promiscuous mode
[  159.188393][ T9243] batadv0: entered promiscuous mode
[  159.190766][ T9243] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  159.194705][ T9243] hsr1: entered allmulticast mode
[  159.197312][ T9243] macvlan0: left promiscuous mode
[  159.199586][ T9243] batadv0: left promiscuous mode
[  159.266132][ T9250] syzkaller0: entered promiscuous mode
[  159.268064][ T9250] syzkaller0: entered allmulticast mode
[  159.986623][ T9263] __nla_validate_parse: 12 callbacks suppressed
[  159.986760][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[  160.149621][ T9281] netlink: 'syz.1.1022': attribute type 21 has an invalid length.
[  160.153353][ T9281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1022'.
[  160.230784][ T9283] bond0: (slave team0): Releasing backup interface
[  160.251979][ T9283] bond0: (slave batadv0): Releasing backup interface
[  160.269387][ T9283] bridge_slave_0: left allmulticast mode
[  160.271868][ T9283] bridge_slave_0: left promiscuous mode
[  160.275643][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.284016][ T9283] bridge_slave_1: left allmulticast mode
[  160.286382][ T9283] bridge_slave_1: left promiscuous mode
[  160.289515][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.296855][ T9283] bond0: (slave bond_slave_0): Releasing backup interface
[  160.302627][ T9283] bond0: (slave bond_slave_1): Releasing backup interface
[  160.308893][ T9283] team0: Port device team_slave_0 removed
[  160.316801][ T9283] team0: Port device team_slave_1 removed
[  160.319337][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.323227][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.327089][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.330112][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.334425][ T9283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  160.345089][ T9283] netlink: 'syz.1.1023': attribute type 10 has an invalid length.
[  160.385601][ T9283] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.391537][ T9283] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.430046][ T9292] netlink: 'syz.2.1025': attribute type 9 has an invalid length.
[  160.510554][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'.
[  160.513437][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  160.775135][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  160.781508][ T9313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.786591][ T9313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.167072][ T9348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.178225][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'.
[  161.293714][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'.
[  161.305505][ T9348] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  161.517354][ T9370] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  162.192595][ T9421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.200260][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  162.217164][ T9420] tipc: Disabling bearer <eth:syzkaller0>
[  162.236715][ T9423] vlan3: entered promiscuous mode
[  162.238550][ T9423] hsr_slave_1: entered promiscuous mode
[  162.240628][ T9423] vlan3: entered allmulticast mode
[  162.251255][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  162.475251][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  162.900804][ T9446] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1079'.
[  164.695892][ T9524] bridge2: entered allmulticast mode
[  164.718956][ T9524] macvlan1: left allmulticast mode
[  164.721226][ T9524] veth1_vlan: left allmulticast mode
[  166.804589][ T9576] __nla_validate_parse: 5 callbacks suppressed
[  166.804606][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'.
[  166.888159][ T9583] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.893561][ T9585] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1121'.
[  167.165834][ T9609] bond6 (unregistering): Released all slaves
[  167.239814][ T9613] syzkaller1: entered promiscuous mode
[  167.249738][ T9613] syzkaller1: entered allmulticast mode
[  167.328007][ T9618] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1127'.
[  167.860768][ T9629] pim6reg1: entered promiscuous mode
[  167.863991][ T9629] pim6reg1: entered allmulticast mode
[  180.683505][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  180.684828][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  192.583153][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  192.587719][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  192.665730][ T9655] : renamed from vlan1 (while UP)
[  192.737736][ T9658] validate_nla: 4 callbacks suppressed
[  192.737748][ T9658] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  192.765876][ T9658] bond3: (slave veth3): Enslaving as an active interface with a down link
[  192.770699][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'.
[  192.779603][ T9658] 8021q: adding VLAN 0 to HW filter on device bond3
[  193.455629][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'.
[  193.459029][ T9671] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  193.464300][ T9671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.468409][ T9671] netlink: 'syz.2.1147': attribute type 1 has an invalid length.
[  193.524644][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'.
[  193.529797][ T9676] netlink: 'syz.1.1150': attribute type 4 has an invalid length.
[  193.541999][ T9676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.556084][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'.
[  193.561173][ T9675] tipc: Disabling bearer <eth:syzkaller0>
[  193.567146][ T9678] netlink: 'syz.2.1151': attribute type 5 has an invalid length.
[  193.570461][ T9678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1151'.
[  193.581161][ T9678] geneve3: entered promiscuous mode
[  193.583657][ T9678] geneve3: entered allmulticast mode
[  193.587366][ T5889] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  193.590295][ T5889] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  193.594182][ T5889] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  193.597125][ T5889] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  193.641798][ T9682] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  193.771380][ T9699] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1156'.
[  193.866423][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  193.960207][ T9716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1161'.
[  193.971960][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.974582][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.781163][ T9725] pimreg: entered allmulticast mode
[  194.788155][ T9725] pimreg: left allmulticast mode
[  194.948038][ T9734] 8021q: VLANs not supported on ipvlan1
[  195.056696][ T9742] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  195.061991][ T9742] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  195.070971][ T9742] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  195.075002][ T9744] netlink: 'syz.1.1171': attribute type 10 has an invalid length.
[  195.078590][ T9742] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  195.085466][ T9742] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  195.107422][ T9744] macvlan0: entered allmulticast mode
[  195.544585][ T9786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.548240][ T9786] syzkaller0: entered promiscuous mode
[  195.550398][ T9786] syzkaller0: entered allmulticast mode
[  195.562603][ T9786] tipc: Resetting bearer <eth:syzkaller0>
[  195.567234][ T9785] tipc: Resetting bearer <eth:syzkaller0>
[  195.582054][ T9785] tipc: Disabling bearer <eth:syzkaller0>
[  195.654635][ T9789] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  195.670733][ T9789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.676210][ T9789] syzkaller0: entered promiscuous mode
[  195.678435][ T9789] syzkaller0: entered allmulticast mode
[  195.686810][ T9788] tipc: Resetting bearer <eth:syzkaller0>
[  195.699573][ T9788] tipc: Disabling bearer <eth:syzkaller0>
[  195.759521][ T9791] batadv_slave_1: entered promiscuous mode
[  195.826077][ T9790] batadv_slave_1: left promiscuous mode
[  196.027374][ T9798] sock: sock_timestamping_bind_phc: sock not bind to device
[  196.198012][ T9804] vlan2: entered allmulticast mode
[  197.469757][   T33] audit: type=1800 audit(1758107914.383:4): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=2054 res=0 errno=0
[  197.476025][ T9869] ipvlan2: entered promiscuous mode
[  197.486590][ T9869] bridge0: port 1(ipvlan2) entered blocking state
[  197.489719][ T9869] bridge0: port 1(ipvlan2) entered disabled state
[  197.492985][ T9869] ipvlan2: entered allmulticast mode
[  197.495565][ T9869] bond_slave_1: entered allmulticast mode
[  197.508536][ T9869] ipvlan2: left allmulticast mode
[  197.516657][ T9869] bond_slave_1: left allmulticast mode
[  197.568680][ T9868] ipvlan2: entered promiscuous mode
[  197.575833][ T9868] bridge0: port 1(ipvlan2) entered blocking state
[  197.588301][ T9868] bridge0: port 1(ipvlan2) entered disabled state
[  197.595389][ T9868] ipvlan2: entered allmulticast mode
[  197.597760][ T9868] bond_slave_1: entered allmulticast mode
[  197.609293][ T9868] ipvlan2: left allmulticast mode
[  197.611484][ T9868] bond_slave_1: left allmulticast mode
[  197.737687][ T9887] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  197.745041][ T9887] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  197.795026][ T9893] __nla_validate_parse: 89 callbacks suppressed
[  197.795038][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.801774][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.808258][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.813028][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.817020][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.820549][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.824960][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.829935][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.835090][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'.
[  197.850579][ T9893] validate_nla: 80 callbacks suppressed
[  197.850589][ T9893] netlink: 'syz.0.1214': attribute type 5 has an invalid length.
[  197.941388][ T9902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1215'.
[  198.167044][ T9912] bond4: entered promiscuous mode
[  198.168795][ T9912] bond4: entered allmulticast mode
[  198.170733][ T9912] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.421420][ T9932] Unsupported ieee802154 address type: 0
[  198.424947][ T9932] Unsupported ieee802154 address type: 0
[  199.077416][ T9961] openvswitch: netlink: Key type 251 is out of range max 32
[  199.329179][ T9980] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  199.342007][ T9980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  199.521531][T10000] openvswitch: netlink: Message has 1 unknown bytes.
[  199.525146][T10000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.801282][T10027] netlink: 'syz.0.1248': attribute type 2 has an invalid length.
[  200.562058][T10035] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  200.957487][T10062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.973704][T10062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.081413][ T5889] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.087199][ T5889] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.091221][ T5889] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.098269][ T5889] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.739404][T10093] openvswitch: netlink: Duplicate or invalid key (type 0).
[  201.742531][T10093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.800463][T10102] syzkaller0: entered promiscuous mode
[  201.811294][T10102] syzkaller0: entered allmulticast mode
[  202.004808][T10109] batman_adv: batadv0: Adding interface: ipvlan2
[  202.007719][T10109] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.019571][T10109] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  202.206955][T10116] dvmrp0: entered allmulticast mode
[  202.285224][T10123] syzkaller1: entered promiscuous mode
[  202.287928][T10123] syzkaller1: entered allmulticast mode
[  202.395628][T10142] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  202.607032][T10154] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.615512][T10154] bond0: (slave rose0): Enslaving as an active interface with an up link
[  202.828142][T10177] netlink: 'syz.0.1293': attribute type 29 has an invalid length.
[  202.834773][T10177] netlink: 'syz.0.1293': attribute type 29 has an invalid length.
[  202.909360][T10185] netlink: 'syz.2.1292': attribute type 12 has an invalid length.
[  203.168763][T10201] __nla_validate_parse: 21 callbacks suppressed
[  203.168775][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'.
[  203.225158][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'.
[  203.329832][T10222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.338275][T10221] tipc: Disabling bearer <eth:syzkaller0>
[  203.361510][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'.
[  203.486303][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'.
[  203.502425][T10229] sctp: [Deprecated]: syz.1.1303 (pid 10229) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.502425][T10229] Use struct sctp_sack_info instead
[  203.588162][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'.
[  203.652018][T10252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1309'.
[  203.662557][T10252] netlink: 'syz.1.1309': attribute type 29 has an invalid length.
[  203.753721][T10268] trusted_key: syz.1.1313 sent an empty control message without MSG_MORE.
[  203.830821][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'.
[  203.834375][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'.
[  203.840799][T10284] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1318'.
[  203.844364][T10285] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1318'.
[  204.836960][T10326] netlink: 'syz.2.1329': attribute type 1 has an invalid length.
[  205.046033][T10343] netlink: 'syz.1.1335': attribute type 1 has an invalid length.
[  205.291627][T10366] netlink: 'syz.0.1343': attribute type 3 has an invalid length.
[  205.688558][T10386] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  206.058837][T10408] batadv_slave_0: entered promiscuous mode
[  206.306578][T10433] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  206.492311][T10437] block nbd1: server does not support multiple connections per device.
[  206.497637][T10437] block nbd1: shutting down sockets
[  206.555843][T10449] netlink: 'syz.0.1367': attribute type 4 has an invalid length.
[  207.130588][T10473] netlink: 'syz.2.1373': attribute type 1 has an invalid length.
[  207.275981][T10476] gretap3: entered promiscuous mode
[  207.278469][T10476] gretap3: entered allmulticast mode
[  207.865994][T10534] netlink: 'syz.2.1392': attribute type 10 has an invalid length.
[  208.060475][T10553] bridge0: port 1(netdevsim2) entered blocking state
[  208.065745][T10551] netlink: 'syz.2.1397': attribute type 15 has an invalid length.
[  208.071033][T10553] bridge0: port 1(netdevsim2) entered disabled state
[  208.076152][T10553] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  208.084993][T10553] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  208.089216][T10553] bridge0: port 1(netdevsim2) entered blocking state
[  208.093047][T10553] bridge0: port 1(netdevsim2) entered forwarding state
[  208.177015][T10556] __nla_validate_parse: 30 callbacks suppressed
[  208.177028][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  208.182529][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  208.225176][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  208.228635][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  208.387716][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'.
[  208.633485][T10613] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1413'.
[  208.639607][T10613] netlink: 'syz.1.1413': attribute type 5 has an invalid length.
[  208.650014][T10613] netlink: 'syz.1.1413': attribute type 10 has an invalid length.
[  208.745753][T10619] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1414'.
[  208.917529][T10628] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  208.945565][T10628] 8021q: adding VLAN 0 to HW filter on device bond7
[  209.051431][T10634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.066236][T10634] vlan3: entered allmulticast mode
[  209.068700][T10634] bridge_slave_0: entered allmulticast mode
[  209.235084][T10643] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1423'.
[  209.332610][T10646] netlink: 'syz.2.1424': attribute type 142 has an invalid length.
[  209.368012][T10653] tun0: tun_chr_ioctl cmd 1074025673
[  209.370542][T10651] tun0: tun_chr_ioctl cmd 1074025675
[  209.380735][T10651] tun0: persist disabled
[  209.724665][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  210.549570][T10705] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  210.553672][T10705] syzkaller0: create flow: hash 2775934738 index 1
[  210.669718][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.674771][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.677409][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  210.678145][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.690755][T10699] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  210.707266][T10699] syzkaller0: delete flow: hash 2775934738 index 1
[  210.812549][T10723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1443'.
[  210.947328][T10728] netlink: 'syz.2.1442': attribute type 13 has an invalid length.
[  210.950293][T10728] netlink: 'syz.2.1442': attribute type 17 has an invalid length.
[  211.712040][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.715259][T10719] macvlan1: entered allmulticast mode
[  211.717097][T10719] veth1_vlan: entered allmulticast mode
[  213.013898][T10781] netlink: 'syz.0.1461': attribute type 5 has an invalid length.
[  213.091606][T10779] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.101334][T10779] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.144032][T10779] veth1_vlan: left allmulticast mode
[  213.160859][T10779] ip6gretap0: left allmulticast mode
[  213.181742][ T9962] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.189942][ T9962] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.196973][ T9962] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  213.200025][ T9962] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.204587][ T9962] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.208386][ T9962] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  213.212439][ T9962] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.215680][ T9962] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.218651][ T9962] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  213.221722][ T9962] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.226893][ T9962] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.230709][ T9962] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  213.271181][T10794] hsr0: entered promiscuous mode
[  213.273877][T10794] macvlan3: entered allmulticast mode
[  213.276123][T10794] hsr0: entered allmulticast mode
[  213.282264][T10794] hsr_slave_0: entered allmulticast mode
[  213.286665][T10794] hsr0: left allmulticast mode
[  213.288763][T10794] hsr_slave_0: left allmulticast mode
[  213.340764][T10798] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  213.405256][T10808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.433208][T10811] __nla_validate_parse: 2 callbacks suppressed
[  213.433218][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'.
[  213.448746][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'.
[  213.576276][T10820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1475'.
[  213.583594][T10820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1475'.
[  213.714434][T10835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'.
[  214.642581][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'.
[  214.660431][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'.
[  214.665322][T10855] openvswitch: netlink: Flow key attr not present in new flow.
[  214.668534][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'.
[  214.712322][T10859] netlink: 'syz.2.1486': attribute type 1 has an invalid length.
[  214.715042][T10859] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1486'.
[  214.780614][T10863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1488'.
[  215.901968][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881108e3000: rx timeout, send abort
[  215.928919][T10880] geneve4: entered promiscuous mode
[  215.930842][T10880] geneve4: entered allmulticast mode
[  215.934307][ T5889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  215.937186][ T5889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  215.940327][ T5889] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  215.944090][ T5889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  215.981870][T10885] netlink: 'syz.2.1495': attribute type 4 has an invalid length.
[  216.151829][T10891] netlink: 'syz.2.1497': attribute type 30 has an invalid length.
[  216.168580][T10891] netlink: 'syz.2.1497': attribute type 30 has an invalid length.
[  216.177877][ T5889] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.181637][ T5889] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.185446][ T5889] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.189258][ T5889] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.405122][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881108e3000: abort rx timeout. Force session deactivation
[  216.458257][T10901] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  216.938746][T10924] netlink: 'syz.2.1509': attribute type 20 has an invalid length.
[  217.381159][T10963] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  217.581393][ T9962] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.587905][ T9962] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  217.594792][ T9962] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.597711][ T9962] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  217.600856][ T9962] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.605750][ T9962] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  217.608808][ T9962] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.614485][ T9962] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  217.866341][T10996] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  218.003300][T11010] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  218.019098][T11010] 8021q: adding VLAN 0 to HW filter on device bond6
[  218.037013][T11012] nicvf0: entered promiscuous mode
[  218.040387][ T9962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  218.044792][ T9962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  218.057204][ T9962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  218.066025][ T9962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  218.751625][T11002] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  218.978804][T11048] __nla_validate_parse: 75 callbacks suppressed
[  218.978820][T11048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1545'.
[  219.006621][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  219.458504][T11074] wg0: Master is either lo or non-ether device
[  219.678133][T11080] sctp: [Deprecated]: syz.2.1555 (pid 11080) Use of int in maxseg socket option.
[  219.678133][T11080] Use struct sctp_assoc_value instead
[  219.752295][T11087] netlink: 'syz.2.1557': attribute type 1 has an invalid length.
[  219.770087][T11087] 8021q: adding VLAN 0 to HW filter on device bond7
[  219.779133][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'.
[  219.800947][T11087] bond7: (slave gretap4): making interface the new active one
[  219.806011][T11087] bond7: (slave gretap4): Enslaving as an active interface with an up link
[  219.854439][T11094] netlink: 'syz.2.1559': attribute type 3 has an invalid length.
[  219.860675][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'.
[  219.868724][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'.
[  219.872554][T11094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1559'.
[  219.879763][T11094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1559'.
[  220.052338][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  220.293218][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1566'.
[  220.383227][T11121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1568'.
[  220.556260][T11134] openvswitch: netlink: IP tunnel dst address not specified
[  220.563881][T11136] openvswitch: netlink: IP tunnel dst address not specified
[  220.607828][T11140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1574'.
[  220.616251][T11142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1573'.
[  220.650716][T11140] team0: Port device team_slave_0 removed
[  220.917165][T11161] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  220.920695][T11161] netlink: 'syz.2.1582': attribute type 1 has an invalid length.
[  220.971312][T11167] netlink: 'syz.2.1584': attribute type 4 has an invalid length.
[  221.136671][T11181] xfrm1: entered allmulticast mode
[  221.488087][T11211] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  221.550817][T11211] netlink: 'syz.1.1596': attribute type 1 has an invalid length.
[  221.618657][T11212] bond9: (slave bridge9): making interface the new active one
[  221.625969][T11212] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  221.829004][T11235] netlink: 'syz.1.1605': attribute type 5 has an invalid length.
[  221.834810][T11235] netlink: 'syz.1.1605': attribute type 5 has an invalid length.
[  222.114692][T11257] netlink: 'syz.0.1613': attribute type 29 has an invalid length.
[  222.253489][T11272] netlink: 'syz.2.1620': attribute type 1 has an invalid length.
[  222.271139][T11272] 8021q: adding VLAN 0 to HW filter on device bond10
[  222.294334][T11272] bond10: (slave veth13): Enslaving as an active interface with a down link
[  222.312413][T11272] macvlan2: entered promiscuous mode
[  222.314600][T11272] macvlan2: entered allmulticast mode
[  222.317417][T11272] bond10: entered promiscuous mode
[  222.319979][T11272] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  222.323704][T11272] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  222.330570][T11272] bond10: left promiscuous mode
[  222.423874][T11285] bond0: (slave wlan1): Opening slave failed
[  222.429947][T11285] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.434988][T11285] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.543792][T11291] ave_0: entered promiscuous mode
[  222.934949][T11312] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.949397][T11312] bond5: (slave geneve2): making interface the new active one
[  222.955283][T11312] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  222.959105][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  222.963835][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  222.970603][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  222.974897][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  223.345955][T11340] pimreg: entered allmulticast mode
[  223.357511][T11340] dvmrp0: left allmulticast mode
[  223.360091][T11340] pimreg: left allmulticast mode
[  223.868526][T11385] tipc: Can't bind to reserved service type 0
[  224.159386][T11400] __nla_validate_parse: 15 callbacks suppressed
[  224.159396][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  224.554612][T11410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'.
[  224.865384][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  224.867260][T11420] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1669'.
[  224.953978][T11429] tipc: Trying to set illegal importance in message
[  224.956649][T11430] tipc: Trying to set illegal importance in message
[  224.971523][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'.
[  224.987732][T11433] validate_nla: 4 callbacks suppressed
[  224.987745][T11433] netlink: 'syz.1.1672': attribute type 3 has an invalid length.
[  225.970126][T11502] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  225.977936][T11502] netlink: 'syz.0.1679': attribute type 2 has an invalid length.
[  225.981530][T11502] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  225.987418][T11502] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1679'.
[  226.081701][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'.
[  226.094654][T11514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1683'.
[  226.101199][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'.
[  226.170026][T11521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1684'.
[  226.683577][T11589] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  226.851351][T11615] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  226.894017][T11626] syz_tun: entered allmulticast mode
[  226.898987][T11624] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  226.901959][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.921260][T11626] syz_tun: left allmulticast mode
[  227.070309][T11640] netlink: 'syz.2.1718': attribute type 12 has an invalid length.
[  227.075474][T11640] netlink: 'syz.2.1718': attribute type 11 has an invalid length.
[  228.190638][T11694] netlink: 'syz.0.1733': attribute type 13 has an invalid length.
[  228.193798][T11694] netlink: 'syz.0.1733': attribute type 17 has an invalid length.
[  228.267495][T11694] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.275087][T11694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.495608][T11718] bridge0: port 3(erspan0) entered blocking state
[  228.497979][T11718] bridge0: port 3(erspan0) entered disabled state
[  228.500527][T11718] erspan0: entered allmulticast mode
[  228.503779][T11718] erspan0: entered promiscuous mode
[  228.505831][T11718] bridge0: port 3(erspan0) entered blocking state
[  228.508794][T11718] bridge0: port 3(erspan0) entered listening state
[  231.539564][T11730] __nla_validate_parse: 22 callbacks suppressed
[  231.539575][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'.
[  231.544170][T11735] netlink: 'syz.2.1746': attribute type 30 has an invalid length.
[  231.549642][T11733] openvswitch: netlink: Multiple metadata blocks provided
[  231.680133][T11741] macvlan0: left allmulticast mode
[  231.713507][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'.
[  231.838788][T11758] xt_l2tp: invalid flags combination: 0
[  231.898068][T11762] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  231.901611][T11763] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  231.937923][T11766] veth9: left promiscuous mode
[  231.940808][T11766] macsec1: left promiscuous mode
[  231.943838][T11766] macsec1: left allmulticast mode
[  231.946102][T11766] xfrm1: left promiscuous mode
[  231.948123][T11766] xfrm1: left allmulticast mode
[  231.950588][T11766] bridge2: left allmulticast mode
[  231.953548][T11766] geneve3: left promiscuous mode
[  231.955843][T11766] geneve3: left allmulticast mode
[  231.958170][T11766] vlan2: left allmulticast mode
[  231.960685][T11766] gretap3: left promiscuous mode
[  231.965999][T11766] gretap3: left allmulticast mode
[  231.968264][T11766] geneve4: left promiscuous mode
[  231.970251][T11766] geneve4: left allmulticast mode
[  232.148883][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.279689][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'.
[  232.288866][T11792] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  232.292275][T11792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.383278][T11796] syzkaller1: entered promiscuous mode
[  232.385798][T11796] syzkaller1: entered allmulticast mode
[  232.391081][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'.
[  232.533233][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.539277][T11800] bridge0: failed insert local address into bridge forwarding table
[  232.544492][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'.
[  232.723887][T11806] vlan4: entered promiscuous mode
[  232.726346][T11806] vlan4: entered allmulticast mode
[  232.728450][T11806] hsr_slave_1: entered allmulticast mode
[  232.878412][T11819] dvmrp1: entered allmulticast mode
[  232.881825][T11819] macvlan1: left allmulticast mode
[  232.886999][T11819] dvmrp1: left allmulticast mode
[  233.188671][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  233.196036][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  233.200854][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  233.211930][T11827] netlink: 'syz.2.1777': attribute type 21 has an invalid length.
[  233.216452][T11827] netlink: 'syz.2.1777': attribute type 22 has an invalid length.
[  233.220663][T11827] netlink: 'syz.2.1777': attribute type 23 has an invalid length.
[  233.224756][T11827] netlink: 'syz.2.1777': attribute type 25 has an invalid length.
[  233.228560][T11827] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1777'.
[  233.318265][T11832] can: request_module (can-proto-4) failed.
[  233.399812][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'.
[  233.591501][T11856] netlink: 'syz.2.1787': attribute type 5 has an invalid length.
[  233.722916][T11863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  234.511650][T11891] pim6reg1: entered promiscuous mode
[  234.514343][T11891] pim6reg1: entered allmulticast mode
[  234.775248][T11916] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  236.355088][T11946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.358121][T11946] syzkaller0: entered promiscuous mode
[  236.360394][T11946] syzkaller0: entered allmulticast mode
[  236.393896][T11946] tipc: Resetting bearer <eth:syzkaller0>
[  236.407671][T11945] tipc: Resetting bearer <eth:syzkaller0>
[  236.421341][T11945] tipc: Disabling bearer <eth:syzkaller0>
[  236.428838][T11950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.643434][T11975] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  236.650863][T11975] __nla_validate_parse: 5 callbacks suppressed
[  236.650877][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'.
[  236.664686][T11971] IPv6: sit1: Disabled Multicast RS
[  236.671712][T11975] netlink: 'syz.1.1826': attribute type 15 has an invalid length.
[  236.686729][T11980] netlink: 'syz.2.1828': attribute type 10 has an invalid length.
[  236.774632][T11991] netlink: 'syz.1.1833': attribute type 11 has an invalid length.
[  236.781972][T11991] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.788559][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1833'.
[  236.833337][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'.
[  236.882670][T12005] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  237.798023][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'.
[  237.808227][T12027] netlink: 'syz.1.1840': attribute type 4 has an invalid length.
[  237.859352][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'.
[  238.055331][   T10] IPVS: starting estimator thread 0...
[  238.147649][T12039] IPVS: using max 48 ests per chain, 115200 per kthread
[  238.642943][T12055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1852'.
[  238.646941][T12055] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1852'.
[  238.650638][T12055] netlink: 'syz.2.1852': attribute type 5 has an invalid length.
[  238.655243][T12055] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1852'.
[  238.844344][T12073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'.
[  238.923720][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'.
[  239.082337][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  240.071614][   T57] block nbd1: Receive control failed (result -32)
[  240.335992][T12141] batadv2: entered promiscuous mode
[  240.338483][T12141] batadv2: entered allmulticast mode
[  240.404566][T12142] netlink: 'syz.0.1877': attribute type 10 has an invalid length.
[  240.407455][T12142] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  240.414292][T12142] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  240.418545][T12142] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  240.495357][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.785248][T12175] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  240.798211][T12175] 8021q: adding VLAN 0 to HW filter on device bond6
[  240.984587][T12181] syzkaller0: entered allmulticast mode
[  241.065906][T12179] syzkaller0: left allmulticast mode
[  241.074133][T12185] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  241.170278][T12195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.296542][T12207] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  241.879199][T12215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.885549][T12213] syzkaller0: entered promiscuous mode
[  241.888095][T12213] syzkaller0: entered allmulticast mode
[  241.925636][T12215] tipc: Resetting bearer <eth:syzkaller0>
[  241.937689][T12215] tipc: Disabling bearer <eth:syzkaller0>
[  242.151607][T12234] 8021q: VLANs not supported on vcan0
[  242.226643][T12242] IPVS: set_ctl: invalid protocol: 166 255.255.255.255:0
[  242.434294][T12262] __nla_validate_parse: 11 callbacks suppressed
[  242.434306][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'.
[  242.535547][T12272] syzkaller1: entered promiscuous mode
[  242.537585][T12272] syzkaller1: entered allmulticast mode
[  242.951354][T12288] team0: Device ipip0 is of different type
[  242.999520][T12289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.005697][T12289] syzkaller0: entered promiscuous mode
[  243.008185][T12289] syzkaller0: entered allmulticast mode
[  243.021502][T12288] tipc: Resetting bearer <eth:syzkaller0>
[  243.027840][T12287] tipc: Resetting bearer <eth:syzkaller0>
[  243.038421][T12287] tipc: Disabling bearer <eth:syzkaller0>
[  243.179073][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'.
[  243.280839][T12300] netlink: 'syz.0.1930': attribute type 29 has an invalid length.
[  243.285540][T12300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.290810][T12300] netlink: 'syz.0.1930': attribute type 29 has an invalid length.
[  243.295208][T12300] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1930'.
[  243.355817][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'.
[  243.411928][T12311] vxcan1: entered allmulticast mode
[  243.418117][T12311] vxcan1: left allmulticast mode
[  243.566432][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1936'.
[  243.580435][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'.
[  243.621652][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1937'.
[  243.680454][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'.
[  243.685178][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'.
[  243.717035][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'.
[  243.883310][    C0] bridge0: port 3(erspan0) entered learning state
[  244.027553][T12367] netlink: 'syz.0.1949': attribute type 4 has an invalid length.
[  244.051759][T12367] bridge0: port 3(erspan0) entered disabled state
[  244.085940][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.126490][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  244.131650][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  244.148422][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  244.159070][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  244.190217][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  244.197702][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  244.201757][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  244.211073][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  244.550518][T12394] netlink: 'syz.2.1957': attribute type 12 has an invalid length.
[  244.947371][T12429] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  244.987626][T12432] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  245.000476][T12432] ip6gretap1: entered promiscuous mode
[  245.031274][T12437] netlink: 'syz.0.1971': attribute type 1 has an invalid length.
[  245.038235][T12437] netlink: 'syz.0.1971': attribute type 2 has an invalid length.
[  245.041559][T12437] netlink: 'syz.0.1971': attribute type 1 has an invalid length.
[  245.070329][T12439] netlink: 'syz.2.1972': attribute type 29 has an invalid length.
[  245.109515][T12439] syzkaller0: entered promiscuous mode
[  245.111980][T12439] syzkaller0: entered allmulticast mode
[  246.509220][T12461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.511847][T12461] syzkaller0: entered promiscuous mode
[  246.515508][T12461] syzkaller0: entered allmulticast mode
[  246.519979][T12461] netlink: 'syz.1.1980': attribute type 8 has an invalid length.
[  246.536016][T12461] tipc: Resetting bearer <eth:syzkaller0>
[  246.540027][T12460] tipc: Resetting bearer <eth:syzkaller0>
[  246.548450][T12460] tipc: Disabling bearer <eth:syzkaller0>
[  246.607852][T12476] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  246.915035][T12509] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  246.970430][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.980750][T12516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.987618][T12516] syzkaller0: entered promiscuous mode
[  246.989934][T12516] syzkaller0: entered allmulticast mode
[  247.006561][T12515] tipc: Resetting bearer <eth:syzkaller0>
[  247.021154][T12515] tipc: Disabling bearer <eth:syzkaller0>
[  247.615417][T12559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.618935][T12559] syzkaller0: entered promiscuous mode
[  247.621353][T12559] syzkaller0: entered allmulticast mode
[  247.643292][T12559] __nla_validate_parse: 16 callbacks suppressed
[  247.643311][T12559] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2010'.
[  247.664224][T12559] tipc: Resetting bearer <eth:syzkaller0>
[  247.671930][T12558] tipc: Resetting bearer <eth:syzkaller0>
[  247.687322][T12558] tipc: Disabling bearer <eth:syzkaller0>
[  247.851270][T12579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.860758][T12579] syzkaller0: entered promiscuous mode
[  247.864963][T12579] syzkaller0: entered allmulticast mode
[  247.878044][T12579] tipc: Resetting bearer <eth:syzkaller0>
[  247.882194][T12578] tipc: Resetting bearer <eth:syzkaller0>
[  247.895791][T12578] tipc: Disabling bearer <eth:syzkaller0>
[  248.007733][T12592] bond0: entered promiscuous mode
[  248.010130][T12592] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  248.039265][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'.
[  248.061792][T12593] veth15: entered promiscuous mode
[  248.540690][T12601] netlink: 'syz.0.2025': attribute type 1 has an invalid length.
[  248.693855][T12616] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  248.715835][T12616] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  248.719983][T12616] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  248.771783][T12616] bond7: (slave bridge8): Enslaving as an active interface with a down link
[  248.831117][T12618] macvlan2: entered promiscuous mode
[  248.833537][T12618] macvlan2: entered allmulticast mode
[  248.835965][T12618] bond7: entered promiscuous mode
[  248.838564][T12618] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  248.843766][T12618] bond7: left promiscuous mode
[  249.271598][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  249.348658][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'.
[  249.572461][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'.
[  249.635171][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2039'.
[  249.648756][T12647] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2039'.
[  249.926892][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'.
[  249.930192][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'.
[  249.936758][T12658] delete_channel: no stack
[  249.948860][T12657] delete_channel: no stack
[  250.014725][T12662] netlink: 'syz.2.2044': attribute type 3 has an invalid length.
[  250.017726][T12662] netlink: 'syz.2.2044': attribute type 1 has an invalid length.
[  250.020273][T12662] netlink: 'syz.2.2044': attribute type 8 has an invalid length.
[  250.034787][T12662] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2044'.
[  250.038882][T12662] NCSI netlink: No device for ifindex 2779281160
[  250.046555][T12664] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004
[  250.055360][T12663] netlink: 'syz.0.2045': attribute type 2 has an invalid length.
[  250.150460][T12667] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  250.168574][T12667] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  250.265565][T12675] netlink: 'syz.0.2049': attribute type 2 has an invalid length.
[  250.293028][T12679] netlink: 'syz.0.2051': attribute type 21 has an invalid length.
[  250.296676][T12679] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  250.381302][T12688] netlink: 'syz.0.2053': attribute type 1 has an invalid length.
[  250.489516][T12694] gretap0: entered allmulticast mode
[  250.506292][T12694] bond0: (slave bond_slave_1): Releasing backup interface
[  250.509231][T12694] bond_slave_1 (unregistering): left allmulticast mode
[  250.567595][T12693] gretap0: left allmulticast mode
[  250.591860][T12697] netlink: 'syz.0.2056': attribute type 11 has an invalid length.
[  250.782343][T12703] nbd2: detected capacity change from 0 to 127
[  250.797468][   T56] block nbd2: Receive control failed (result -104)
[  251.020050][T12715] netlink: 'syz.0.2062': attribute type 4 has an invalid length.
[  251.348012][T12730] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  251.422963][T12734] geneve5: entered promiscuous mode
[  251.424931][T12734] geneve5: entered allmulticast mode
[  251.427590][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.430373][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.433544][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.436813][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.171069][T12739] pimreg: entered allmulticast mode
[  252.220985][T12742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  252.376512][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.379838][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.382753][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.385456][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.388096][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.390841][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.393619][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.396317][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.399420][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.403248][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  252.530035][T12765] erspan0: left allmulticast mode
[  252.532016][T12765] erspan0: left promiscuous mode
[  252.534634][T12765] bridge0: port 3(erspan0) entered disabled state
[  252.539333][T12765] bridge_slave_1: left allmulticast mode
[  252.541274][T12765] bridge_slave_1: left promiscuous mode
[  252.549914][T12765] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.556726][T12765] bridge_slave_0: left allmulticast mode
[  252.558974][T12765] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.984651][T12782] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.998574][T12781] xfrm0: entered promiscuous mode
[  253.000828][T12781] xfrm0: entered allmulticast mode
[  253.044712][ T5857] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  253.048484][ T5857] bond0: (slave netdevsim0): link status definitely down, disabling slave
[  253.052309][ T5857] bond0: now running without any active interface!
[  253.056942][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.115029][T12781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.354498][T12790] __nla_validate_parse: 16 callbacks suppressed
[  253.354510][T12790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2089'.
[  253.554882][T12800] validate_nla: 8 callbacks suppressed
[  253.554898][T12800] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  253.586011][T12800] bond10: entered promiscuous mode
[  253.588738][T12800] 8021q: adding VLAN 0 to HW filter on device bond10
[  253.655048][T12798] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  253.669016][T12803] 8021q: adding VLAN 0 to HW filter on device bond11
[  253.673515][T12803] bond10: (slave bond11): making interface the new active one
[  253.676320][T12803] bond11: entered promiscuous mode
[  253.683167][T12803] bond10: (slave bond11): Enslaving as an active interface with an up link
[  253.713558][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  253.717434][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  253.728033][T12807] ip6tnl1: entered promiscuous mode
[  253.730061][T12807] ip6tnl1: entered allmulticast mode
[  254.013116][T12811] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2095'.
[  254.171790][T12818] IPVS: persistence engine module ip_vs_pe_ not found
[  254.645291][T12847] netlink: 'syz.1.2107': attribute type 4 has an invalid length.
[  254.653697][T12847] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2107'.
[  254.665009][T12847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'.
[  254.822807][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2111'.
[  254.847358][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2112'.
[  254.857248][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'.
[  254.861073][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'.
[  254.985454][T12874] netlink: 'syz.1.2115': attribute type 4 has an invalid length.
[  255.001645][T12874] v: renamed from ipvlan0
[  255.404600][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.406813][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  258.085496][T12933] net_ratelimit: 1883 callbacks suppressed
[  258.085507][T12933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.117295][T12942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.121287][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.148464][T12944] netlink: 'syz.2.2140': attribute type 4 has an invalid length.
[  258.466961][T12978] __nla_validate_parse: 6 callbacks suppressed
[  258.466972][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  258.529616][T12983] netlink: 'syz.2.2155': attribute type 1 has an invalid length.
[  258.536673][T12984] netlink: 'syz.2.2155': attribute type 1 has an invalid length.
[  258.567543][T12983] 8021q: adding VLAN 0 to HW filter on device bond12
[  258.575472][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  259.345793][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  259.349637][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  259.355481][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  259.358572][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  259.649751][T13015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2164'.
[  259.703388][T13021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.771276][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'.
[  259.809859][T13033] netlink: 'syz.0.2169': attribute type 6 has an invalid length.
[  259.844741][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'.
[  259.850460][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'.
[  259.888139][T13037] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  260.249804][T13073] batadv2: entered allmulticast mode
[  260.255374][T13073] 8021q: adding VLAN 0 to HW filter on device batadv2
[  260.307922][T13080] netlink: 'syz.1.2183': attribute type 10 has an invalid length.
[  261.046545][T13094] xt_bpf: check failed: parse error
[  261.246798][T13110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.265376][T13110] tipc: Disabling bearer <eth:syzkaller0>
[  261.331377][T13125] syzkaller1: entered promiscuous mode
[  261.333537][T13125] syzkaller1: entered allmulticast mode
[  261.338490][T13125] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  261.474298][T13134] openvswitch: netlink: Missing key (keys=40, expected=80)
[  261.585679][T13144] netlink: 'syz.0.2203': attribute type 13 has an invalid length.
[  261.870418][T13162] netlink: 'syz.2.2209': attribute type 8 has an invalid length.
[  262.319182][T13197] netlink: 'syz.2.2219': attribute type 2 has an invalid length.
[  262.366283][T13199] syzkaller1: entered promiscuous mode
[  262.368683][T13199] syzkaller1: entered allmulticast mode
[  262.610703][T13219] netlink: 'syz.2.2226': attribute type 1 has an invalid length.
[  262.640005][T13222] netlink: 'syz.0.2227': attribute type 4 has an invalid length.
[  262.740953][T13222] netlink: 'syz.0.2227': attribute type 1 has an invalid length.
[  262.748091][T13222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.753699][T13222] syzkaller0: entered promiscuous mode
[  262.755847][T13222] syzkaller0: entered allmulticast mode
[  262.911136][T13249] geneve0: entered promiscuous mode
[  262.917851][T13252] bridge0: port 2(erspan0) entered blocking state
[  262.923371][T13252] bridge0: port 2(erspan0) entered disabled state
[  262.925825][T13252] erspan0: entered allmulticast mode
[  262.928489][T13252] erspan0: entered promiscuous mode
[  262.930527][T13252] bridge0: port 2(erspan0) entered blocking state
[  262.932814][T13252] bridge0: port 2(erspan0) entered forwarding state
[  262.943971][T13252] erspan0: left allmulticast mode
[  262.945741][T13252] erspan0: left promiscuous mode
[  262.947606][T13252] bridge0: port 2(erspan0) entered disabled state
[  263.035451][T13264] vcan0: tx drop: invalid sa for name 0x0000000000000004
[  263.349192][T13282] netlink: 'syz.1.2247': attribute type 2 has an invalid length.
[  263.374485][T13282] 8021q: VLANs not supported on nlmon0
[  263.408541][T13286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.439131][T13287] bond0: (slave bond_slave_0): Releasing backup interface
[  263.444090][T13287] bond_slave_0: left allmulticast mode
[  263.446831][T13287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.449638][T13287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.454359][T13287] bond0: (slave netdevsim0): Releasing backup interface
[  263.458360][T13287] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  263.467314][T13287] bond2: (slave bridge4): Releasing active interface
[  263.473604][T13287] bond3: (slave veth3): Releasing active interface
[  263.478267][T13287] bond5: (slave geneve2): Releasing active interface
[  263.487011][T13288] syz.0.2248: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  263.494213][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.0.2248 Not tainted syzkaller #0 PREEMPT(full) 
[  263.494232][T13288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.494240][T13288] Call Trace:
[  263.494246][T13288]  <TASK>
[  263.494252][T13288]  dump_stack_lvl+0x189/0x250
[  263.494277][T13288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.494293][T13288]  ? __pfx__printk+0x10/0x10
[  263.494314][T13288]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.494328][T13288]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.494342][T13288]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  263.494358][T13288]  warn_alloc+0x214/0x310
[  263.494378][T13288]  ? stack_depot_save_flags+0x40/0x860
[  263.494423][T13288]  ? __pfx_warn_alloc+0x10/0x10
[  263.494446][T13288]  ? kasan_save_track+0x4f/0x80
[  263.494463][T13288]  ? xskq_create+0x56/0x170
[  263.494475][T13288]  ? xsk_init_queue+0xb0/0x110
[  263.494485][T13288]  ? xsk_setsockopt+0x4dc/0x8d0
[  263.494496][T13288]  ? do_sock_setsockopt+0x17c/0x1b0
[  263.494512][T13288]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  263.494516][T13287] bond7: (slave bridge8): Releasing active interface
[  263.494525][T13288]  ? do_syscall_64+0xfa/0x3b0
[  263.494539][T13288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.494558][T13288]  __vmalloc_node_range_noprof+0x125/0x12f0
[  263.494597][T13288]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  263.494620][T13288]  ? __kasan_kmalloc+0x93/0xb0
[  263.494639][T13288]  vmalloc_user_noprof+0xad/0xf0
[  263.494657][T13288]  ? xskq_create+0xbf/0x170
[  263.494671][T13288]  xskq_create+0xbf/0x170
[  263.494686][T13288]  xsk_init_queue+0xb0/0x110
[  263.494701][T13288]  xsk_setsockopt+0x4dc/0x8d0
[  263.494716][T13288]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.494728][T13288]  ? __pfx_aa_sk_perm+0x10/0x10
[  263.494750][T13288]  ? aa_sock_opt_perm+0xff/0x1b0
[  263.494766][T13288]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  263.494780][T13288]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.494794][T13288]  do_sock_setsockopt+0x17c/0x1b0
[  263.494813][T13288]  __x64_sys_setsockopt+0x13f/0x1b0
[  263.494834][T13288]  do_syscall_64+0xfa/0x3b0
[  263.494848][T13288]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.494863][T13288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.494875][T13288]  ? exc_page_fault+0x9f/0xf0
[  263.494888][T13288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.494900][T13288] RIP: 0033:0x7fa127d8eba9
[  263.494913][T13288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.494922][T13288] RSP: 002b:00007fa128b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  263.494937][T13288] RAX: ffffffffffffffda RBX: 00007fa127fd6180 RCX: 00007fa127d8eba9
[  263.494946][T13288] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  263.494953][T13288] RBP: 00007fa127e11e19 R08: 0000000000000004 R09: 0000000000000000
[  263.494979][T13288] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.494986][T13288] R13: 00007fa127fd6218 R14: 00007fa127fd6180 R15: 00007ffd6fea3428
[  263.495004][T13288]  </TASK>
[  263.495088][T13288] Mem-Info:
[  263.625166][T13288] active_anon:5564 inactive_anon:0 isolated_anon:0
[  263.625166][T13288]  active_file:1547 inactive_file:38314 isolated_file:0
[  263.625166][T13288]  unevictable:1768 dirty:70 writeback:0
[  263.625166][T13288]  slab_reclaimable:10836 slab_unreclaimable:72860
[  263.625166][T13288]  mapped:19602 shmem:2443 pagetables:1164
[  263.625166][T13288]  sec_pagetables:0 bounce:0
[  263.625166][T13288]  kernel_misc_reclaimable:0
[  263.625166][T13288]  free:270006 free_pcp:18045 free_cma:0
[  263.643680][T13288] Node 0 active_anon:12656kB inactive_anon:0kB active_file:5084kB inactive_file:135668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36524kB dirty:264kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8208kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.656682][T13288] Node 1 active_anon:9600kB inactive_anon:0kB active_file:1104kB inactive_file:17588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41884kB dirty:16kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5360kB pagetables:2492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.678345][T13288] Node 0 DMA free:14696kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:628kB local_pcp:312kB free_cma:0kB
[  263.689978][T13291] __nla_validate_parse: 18 callbacks suppressed
[  263.689989][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'.
[  263.694204][T13288] lowmem_reserve[]: 0 811 811 811 811
[  263.697757][T13288] Node 0 DMA32 free:223992kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12724kB inactive_anon:0kB active_file:5084kB inactive_file:135668kB unevictable:3536kB writepending:264kB present:1556484kB managed:830856kB mlocked:0kB bounce:0kB free_pcp:25248kB local_pcp:16396kB free_cma:0kB
[  263.712349][T13288] lowmem_reserve[]: 0 0 0 0 0
[  263.721857][T13288] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  263.739989][T13288] lowmem_reserve[]: 0 0 854 854 854
[  263.742916][T13288] Node 1 Normal free:382720kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9600kB inactive_anon:0kB active_file:1104kB inactive_file:17588kB unevictable:3536kB writepending:16kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46568kB local_pcp:31320kB free_cma:0kB
[  263.755707][T13288] lowmem_reserve[]: 0 0 0 0 0
[  263.757697][T13288] Node 0 DMA: 2*4kB (U) 4*8kB (U) 4*16kB (U) 4*32kB (U) 4*64kB (U) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 14696kB
[  263.764912][T13288] Node 0 DMA32: 420*4kB (UE) 589*8kB (UME) 244*16kB (UME) 403*32kB (UM) 277*64kB (UM) 124*128kB (UME) 67*256kB (UM) 47*512kB (UME) 25*1024kB (UM) 17*2048kB (UME) 16*4096kB (UM) = 223960kB
[  263.773121][T13288] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  263.780071][T13288] Node 1 Normal: 356*4kB (UE) 392*8kB (U) 169*16kB (UME) 465*32kB (UE) 88*64kB (UME) 69*128kB (UME) 26*256kB (U) 11*512kB (UE) 18*1024kB (UME) 10*2048kB (UM) 72*4096kB (UM) = 382720kB
[  263.789900][T13288] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.795145][T13288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.799274][T13288] 42306 total pagecache pages
[  263.801693][T13288] 0 pages in swap cache
[  263.807657][T13288] Free swap  = 124996kB
[  263.810358][T13288] Total swap = 124996kB
[  263.812944][T13288] 786301 pages RAM
[  263.814547][T13288] 0 pages HighMem/MovableOnly
[  263.819842][T13288] 241355 pages reserved
[  263.821616][T13288] 0 pages cma reserved
[  263.873781][   T24] tipc: Node number set to 1003435529
[  263.952879][T13304] syzkaller1: entered promiscuous mode
[  263.954886][T13304] syzkaller1: entered allmulticast mode
[  264.098973][T13320] openvswitch: netlink: nsh attr 7 is out of range max 3
[  264.103826][T13320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.438923][T13343] veth0_to_bond: entered promiscuous mode
[  264.599837][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[  264.987098][T13362] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2272'.
[  264.991003][T13362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2272'.
[  265.179377][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'.
[  265.225868][T13385] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2280'.
[  265.321299][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'.
[  265.428057][T13395] netlink: 'syz.0.2285': attribute type 2 has an invalid length.
[  265.430822][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'.
[  265.811020][T13436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2298'.
[  265.980302][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2299'.
[  266.516139][T13478] syz.0.2309 (13478) used obsolete PPPIOCDETACH ioctl
[  266.569787][T13484] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002
[  266.584532][T13484] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.777003][T13498] netlink: 'syz.1.2315': attribute type 12 has an invalid length.
[  266.959308][T13509] netlink: 'syz.0.2321': attribute type 1 has an invalid length.
[  267.119042][T13516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.123344][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.871812][T13556] __nla_validate_parse: 2 callbacks suppressed
[  268.871822][T13556] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2337'.
[  269.048451][T13570] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2343'.
[  269.154611][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'.
[  269.205832][T13577] netlink: 3552 bytes leftover after parsing attributes in process `syz.0.2345'.
[  269.209929][T13582] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2346'.
[  269.218186][T13577] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2345'.
[  269.222273][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'.
[  269.226458][T13582] chnl_net:caif_netlink_parms(): no params data found
[  269.388227][T13595] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2351'.
[  269.391400][T13595] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  269.440778][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'.
[  269.497054][T13610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2356'.
[  269.563911][T13615] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.571723][T13615] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  269.958534][T13633] netlink: 'syz.1.2363': attribute type 3 has an invalid length.
[  270.290829][T13655] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  270.294734][T13655] netlink: 'syz.0.2372': attribute type 2 has an invalid length.
[  270.331186][T13657] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.349028][T13657] tipc: Resetting bearer <eth:syzkaller0>
[  270.392447][T13659] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  270.477534][T13666] netlink: 'syz.0.2377': attribute type 1 has an invalid length.
[  270.502811][T13666] gretap2: entered allmulticast mode
[  270.508517][T13666] bond8: (slave gretap2): making interface the new active one
[  270.515953][T13666] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  270.639045][T13674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  270.644812][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.848150][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.851716][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.857336][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.860895][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.864751][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.969584][T13686] netlink: 'syz.1.2383': attribute type 5 has an invalid length.
[  271.299255][T13702] bridge0: port 1(batadv1) entered blocking state
[  271.303634][T13702] bridge0: port 1(batadv1) entered disabled state
[  271.306608][T13702] batadv1: entered allmulticast mode
[  271.309500][T13702] batadv1: entered promiscuous mode
[  271.568372][T13719] netlink: 'syz.2.2395': attribute type 1 has an invalid length.
[  271.587923][T13722] netlink: 'syz.1.2397': attribute type 30 has an invalid length.
[  271.600180][T13719] 8021q: adding VLAN 0 to HW filter on device bond13
[  271.624884][T13678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.802518][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  271.806268][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  271.878483][T13752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  272.005012][T13766] Unknown options in mask b7f2
[  272.200345][T13785] netlink: 'syz.1.2415': attribute type 11 has an invalid length.
[  272.556157][T13806] netlink: 'syz.2.2424': attribute type 1 has an invalid length.
[  272.648317][T13821] pimreg3: entered allmulticast mode
[  272.747705][T13825] IPVS: Scheduler module ip_vs_sip not found
[  272.750535][T13825] IPVS: length: 141 != 8
[  272.859792][T13828] netlink: 'syz.1.2431': attribute type 16 has an invalid length.
[  272.866077][T13829] netlink: 'syz.1.2431': attribute type 16 has an invalid length.
[  272.868740][T13829] netlink: 'syz.1.2431': attribute type 17 has an invalid length.
[  272.889679][T13828] netlink: 'syz.1.2431': attribute type 17 has an invalid length.
[  272.905662][T13829] bond0: left promiscuous mode
[  272.907550][T13829] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  272.911775][T13829] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.916116][T13829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.928390][T13828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.178334][T13865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.181209][T13865] syzkaller0: entered promiscuous mode
[  273.183963][T13865] syzkaller0: entered allmulticast mode
[  273.192056][T13865] tipc: Resetting bearer <eth:syzkaller0>
[  273.198325][T13863] tipc: Resetting bearer <eth:syzkaller0>
[  273.208902][T13863] tipc: Disabling bearer <eth:syzkaller0>
[  273.285376][T13870] syzkaller1: entered promiscuous mode
[  273.287465][T13870] syzkaller1: entered allmulticast mode
[  273.291231][T13871] syzkaller1: left promiscuous mode
[  273.294378][T13871] syzkaller1: left allmulticast mode
[  273.299619][T13870] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  273.306387][T13870] batman_adv: batadv0: Adding interface: gretap5
[  273.308621][T13870] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.318600][T13870] batman_adv: batadv0: Interface activated: gretap5
[  274.084245][T13897] bridge_slave_0: left promiscuous mode
[  274.094810][T13897] veth0_to_bond: left promiscuous mode
[  274.098028][T13897] xfrm0: left promiscuous mode
[  274.100056][T13897] xfrm0: left allmulticast mode
[  274.115121][T13897] vlan2: left allmulticast mode
[  274.117327][T13897] batadv0: left allmulticast mode
[  274.120539][T13897] bond4: left promiscuous mode
[  274.156640][T13897] bond4: left allmulticast mode
[  274.159075][T13897] nicvf0: left promiscuous mode
[  274.162082][T13897] tipc: Resetting bearer <eth:syzkaller0>
[  274.177808][T13897] syzkaller0: left promiscuous mode
[  274.177866][T13907] netlink: 'syz.2.2453': attribute type 1 has an invalid length.
[  274.180017][T13897] syzkaller0: left allmulticast mode
[  274.183323][T13907] __nla_validate_parse: 26 callbacks suppressed
[  274.183337][T13907] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2453'.
[  274.226239][T13897] ip6gretap1: left promiscuous mode
[  274.234149][T13909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'.
[  274.242611][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'.
[  274.250945][T13897] ip6tnl1: left promiscuous mode
[  274.256923][T13897] ip6tnl1: left allmulticast mode
[  274.298713][T13897] gretap2: left allmulticast mode
[  274.303792][T13909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2454'.
[  274.306625][T13909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2454'.
[  274.309512][T13909] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2454'.
[  275.019190][T13935] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2460'.
[  275.091083][T13939] syz_tun: entered allmulticast mode
[  275.107939][T13939] dvmrp8: entered allmulticast mode
[  275.183262][T13938] syz_tun: left allmulticast mode
[  275.184981][T13938] dvmrp8: left allmulticast mode
[  275.270191][T13951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2467'.
[  275.285280][T13956] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2468'.
[  275.375079][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'.
[  275.458843][T13971] net_ratelimit: 3 callbacks suppressed
[  275.458853][T13971] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  275.569146][T13983] tc_dump_action: action bad kind
[  275.571733][T13973] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[  275.576519][T13973] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  275.579166][T13973] bridge0: port 1(netdevsim2) entered disabled state
[  275.587052][T13973] batadv1: left allmulticast mode
[  275.588923][T13973] batadv1: left promiscuous mode
[  275.590816][T13973] bridge0: port 3(batadv1) entered disabled state
[  276.206886][T14040] validate_nla: 3 callbacks suppressed
[  276.206900][T14040] netlink: 'syz.1.2490': attribute type 1 has an invalid length.
[  276.464236][T14060] netlink: 'syz.0.2499': attribute type 8 has an invalid length.
[  276.525200][T14068] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  276.528575][T14068] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  276.832450][T14085] netlink: 'syz.2.2506': attribute type 13 has an invalid length.
[  276.888844][T14090] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  277.031290][T14102] bond8: (slave gretap2): Releasing active interface
[  277.093472][T14106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.114290][T14106] syzkaller0: entered promiscuous mode
[  277.116401][T14106] syzkaller0: entered allmulticast mode
[  277.130149][T14105] tipc: Resetting bearer <eth:syzkaller0>
[  277.141730][T14105] tipc: Disabling bearer <eth:syzkaller0>
[  277.385710][ T5857] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  277.404722][T14126] netlink: 'syz.2.2518': attribute type 4 has an invalid length.
[  277.586306][T14139] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  277.613375][T14139] 8021q: adding VLAN 0 to HW filter on device bond9
[  277.745865][T14154] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  277.749046][T14154] netlink: 'syz.0.2526': attribute type 2 has an invalid length.
[  277.753919][T14154] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  277.757119][T14154] netlink: 'syz.0.2526': attribute type 2 has an invalid length.
[  277.795564][T14157] netlink: 'syz.2.2529': attribute type 1 has an invalid length.
[  278.715597][T14216] netem: change failed
[  278.862199][T14222] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  278.925336][T14220] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  279.153360][T14240] team0: entered promiscuous mode
[  279.155595][T14240] team0: entered allmulticast mode
[  279.158241][T14240] 8021q: adding VLAN 0 to HW filter on device team0
[  279.632071][T14262] __nla_validate_parse: 33 callbacks suppressed
[  279.632086][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'.
[  279.735145][T14266] @0: renamed from bond_slave_1
[  279.901287][T14282] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2566'.
[  279.906694][T14282] NCSI netlink: No device for ifindex 3321692160
[  279.910676][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2566'.
[  279.921214][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'.
[  280.130891][T14299] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2571'.
[  280.345782][T14304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2573'.
[  280.505100][T14317] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2575'.
[  280.531934][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'.
[  280.862981][T14338] syzkaller1: entered promiscuous mode
[  280.864897][T14338] syzkaller1: entered allmulticast mode
[  280.913474][T14345] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2583'.
[  281.023257][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 30 seconds
[  281.029494][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 30 seconds
[  281.034557][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 30 seconds
[  281.038881][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 30 seconds
[  281.115806][T14362] bond0: entered promiscuous mode
[  281.118572][T14362] batadv0: entered promiscuous mode
[  281.121363][T14362] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  281.129671][T14362] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  281.137468][T14362] 8021q: adding VLAN 0 to HW filter on device hsr0
[  281.145897][T14362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.189397][T14368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.194454][T14368] syzkaller0: entered promiscuous mode
[  281.197021][T14368] syzkaller0: entered allmulticast mode
[  281.213271][T14368] tipc: Resetting bearer <eth:syzkaller0>
[  281.218633][T14365] tipc: Resetting bearer <eth:syzkaller0>
[  281.232939][T14365] tipc: Disabling bearer <eth:syzkaller0>
[  281.251002][T14370] validate_nla: 7 callbacks suppressed
[  281.251014][T14370] netlink: 'syz.0.2592': attribute type 3 has an invalid length.
[  281.426358][T14385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2597'.
[  282.532604][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  283.156505][T14400] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  283.158583][T14400] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  283.165229][T14400] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  283.168639][T14400] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  283.262336][T14409] nbd: socks must be embedded in a SOCK_ITEM attr
[  283.268310][T14409] block nbd3: shutting down sockets
[  284.193516][T14417] netlink: 'syz.1.2606': attribute type 8 has an invalid length.
[  284.584354][T14432] IPVS: Unknown mcast interface: veth0_virt_wifi
[  288.708287][T14452] block nbd1: NBD_DISCONNECT
[  288.710458][T14452] block nbd1: Send disconnect failed -32
[  288.716660][T14452] block nbd1: shutting down sockets
[  288.723506][T14452] netlink: 'syz.1.2615': attribute type 3 has an invalid length.
[  288.764891][T14454] __nla_validate_parse: 2 callbacks suppressed
[  288.764906][T14454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2616'.
[  289.244141][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  289.248117][T14468] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  289.251699][T14468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.423372][T14499] netlink: 'syz.1.2631': attribute type 21 has an invalid length.
[  290.525089][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.528867][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.536340][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.543072][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.546833][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.550583][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  290.687093][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'.
[  290.727610][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2636'.
[  311.086184][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 60 seconds
[  311.090104][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 60 seconds
[  311.094184][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 60 seconds
[  311.098049][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 60 seconds
[  313.928346][ T5295] udevd[5295]: worker [12123] /devices/virtual/block/nbd2 is taking a long time
[  316.846256][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  341.162771][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 90 seconds
[  341.167298][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 90 seconds
[  341.171841][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 90 seconds
[  341.176392][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 90 seconds
[  371.242467][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 120 seconds
[  371.246878][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 120 seconds
[  371.251180][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 120 seconds
[  371.255923][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 120 seconds
[  378.286247][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  401.322711][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 150 seconds
[  401.327202][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 150 seconds
[  401.331888][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 150 seconds
[  401.337767][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 150 seconds
[  431.416343][   T61] block nbd2: Possible stuck request ffff888021b00000: control (read@0,1024B). Runtime 180 seconds
[  431.420873][   T61] block nbd2: Possible stuck request ffff888021b00200: control (read@1024,1024B). Runtime 180 seconds
[  431.425291][   T61] block nbd2: Possible stuck request ffff888021b00400: control (read@2048,1024B). Runtime 180 seconds
[  431.429261][   T61] block nbd2: Possible stuck request ffff888021b00600: control (read@3072,1024B). Runtime 180 seconds
[  433.202667][ T5295] udevd[5295]: worker [12123] /devices/virtual/block/nbd2 timeout; kill it
[  433.207730][ T5295] udevd[5295]: seq 16087 '/devices/virtual/block/nbd2' killed
[  438.442318][   T34] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  438.444882][   T34]       Not tainted syzkaller #0
[  438.447108][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  438.451253][   T34] task:kworker/0:1     state:D stack:23992 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  438.456585][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  438.458889][   T34] Call Trace:
[  438.460054][   T34]  <TASK>
[  438.461103][   T34]  __schedule+0x1798/0x4cc0
[  438.463043][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  438.465079][   T34]  ? __pfx___schedule+0x10/0x10
[  438.467174][   T34]  ? schedule+0x91/0x360
[  438.468963][   T34]  schedule+0x165/0x360
[  438.470774][   T34]  schedule_preempt_disabled+0x13/0x30
[  438.473390][   T34]  __mutex_lock+0x7e6/0x1350
[  438.475382][   T34]  ? __mutex_lock+0x5bb/0x1350
[  438.482268][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  438.484978][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  438.487103][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  438.489207][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  438.491567][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  438.507054][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  438.508986][   T34]  process_scheduled_works+0xae1/0x17b0
[  438.510862][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  438.513295][   T34]  worker_thread+0x8a0/0xda0
[  438.515789][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  438.518468][   T34]  ? __kthread_parkme+0x7b/0x200
[  438.520563][   T34]  kthread+0x711/0x8a0
[  438.522743][   T34]  ? __pfx_worker_thread+0x10/0x10
[  438.524900][   T34]  ? __pfx_kthread+0x10/0x10
[  438.526882][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.529123][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.531358][   T34]  ? __pfx_kthread+0x10/0x10
[  438.537332][   T34]  ret_from_fork+0x439/0x7d0
[  438.539336][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  438.541580][   T34]  ? __switch_to_asm+0x39/0x70
[  438.543896][   T34]  ? __switch_to_asm+0x33/0x70
[  438.545956][   T34]  ? __pfx_kthread+0x10/0x10
[  438.547928][   T34]  ret_from_fork_asm+0x1a/0x30
[  438.549983][   T34]  </TASK>
[  438.551430][   T34] INFO: task syz.2.2601:14400 blocked for more than 143 seconds.
[  438.555067][   T34]       Not tainted syzkaller #0
[  438.557127][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.560733][   T34] task:syz.2.2601      state:D stack:24808 pid:14400 tgid:14397 ppid:5844   task_flags:0x400140 flags:0x00004006
[  438.566371][   T34] Call Trace:
[  438.567493][   T34]  <TASK>
[  438.568471][   T34]  __schedule+0x1798/0x4cc0
[  438.570014][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.571567][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.575268][   T34]  ? __pfx___schedule+0x10/0x10
[  438.576900][   T34]  ? schedule+0x91/0x360
[  438.578311][   T34]  schedule+0x165/0x360
[  438.579683][   T34]  schedule_preempt_disabled+0x13/0x30
[  438.581396][   T34]  __mutex_lock+0x7e6/0x1350
[  438.583318][   T34]  ? __mutex_lock+0x5bb/0x1350
[  438.584897][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  438.586663][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  438.588315][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.590019][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  438.591952][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  438.594406][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  438.596301][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  438.598019][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  438.599884][   T34]  rfkill_set_block+0x1d2/0x440
[  438.601514][   T34]  rfkill_fop_write+0x44b/0x570
[  438.603501][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  438.605278][   T34]  ? security_kernfs_init_security+0x290/0x290
[  438.607274][   T34]  ? rw_verify_area+0x255/0x4d0
[  438.608857][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.610462][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  438.613136][   T34]  vfs_write+0x27e/0xb30
[  438.614620][   T34]  ? __pfx_vfs_write+0x10/0x10
[  438.616313][   T34]  ? __fget_files+0x2a/0x420
[  438.617880][   T34]  ? __fget_files+0x2a/0x420
[  438.619502][   T34]  ? __fget_files+0x3a0/0x420
[  438.621044][   T34]  ? __fget_files+0x2a/0x420
[  438.622872][   T34]  ksys_write+0x145/0x250
[  438.624368][   T34]  ? __pfx_ksys_write+0x10/0x10
[  438.626083][   T34]  ? rcu_is_watching+0x15/0xb0
[  438.628089][   T34]  ? do_syscall_64+0xbe/0x3b0
[  438.629852][   T34]  do_syscall_64+0xfa/0x3b0
[  438.631350][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.633308][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.635280][   T34]  ? exc_page_fault+0x9f/0xf0
[  438.636800][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.638706][   T34] RIP: 0033:0x7fc3ab38eba9
[  438.640161][   T34] RSP: 002b:00007fc3ac2b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  438.643421][   T34] RAX: ffffffffffffffda RBX: 00007fc3ab5d5fa0 RCX: 00007fc3ab38eba9
[  438.646113][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  438.648807][   T34] RBP: 00007fc3ab411e19 R08: 0000000000000000 R09: 0000000000000000
[  438.651571][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.654442][   T34] R13: 00007fc3ab5d6038 R14: 00007fc3ab5d5fa0 R15: 00007fff76e900f8
[  438.656930][   T34]  </TASK>
[  438.657962][   T34] INFO: task syz.0.2602:14398 blocked for more than 143 seconds.
[  438.660862][   T34]       Not tainted syzkaller #0
[  438.664438][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.667867][   T34] task:syz.0.2602      state:D stack:26344 pid:14398 tgid:14398 ppid:5843   task_flags:0x400040 flags:0x00004004
[  438.672446][   T34] Call Trace:
[  438.673869][   T34]  <TASK>
[  438.675137][   T34]  __schedule+0x1798/0x4cc0
[  438.677075][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.679111][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.681148][   T34]  ? __pfx___schedule+0x10/0x10
[  438.684007][   T34]  ? schedule+0x91/0x360
[  438.685402][   T34]  schedule+0x165/0x360
[  438.686858][   T34]  schedule_preempt_disabled+0x13/0x30
[  438.688657][   T34]  __mutex_lock+0x7e6/0x1350
[  438.690385][   T34]  ? __mutex_lock+0x5bb/0x1350
[  438.693216][   T34]  ? rfkill_unregister+0xc8/0x220
[  438.695321][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  438.697337][   T34]  ? __pfx_device_del+0x10/0x10
[  438.699313][   T34]  rfkill_unregister+0xc8/0x220
[  438.701289][   T34]  nfc_unregister_device+0x96/0x2a0
[  438.703856][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  438.706054][   T34]  virtual_ncidev_close+0x56/0x90
[  438.708100][   T34]  __fput+0x44c/0xa70
[  438.709810][   T34]  task_work_run+0x1d4/0x260
[  438.711768][   T34]  ? __pfx_task_work_run+0x10/0x10
[  438.714261][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  438.716539][   T34]  exit_to_user_mode_loop+0xec/0x110
[  438.718840][   T34]  do_syscall_64+0x2bd/0x3b0
[  438.720770][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.723583][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  438.726096][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.728573][   T34] RIP: 0033:0x7fa127d8eba9
[  438.730519][   T34] RSP: 002b:00007ffd6fea3588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  438.734473][   T34] RAX: 0000000000000000 RBX: 0000000000044e58 RCX: 00007fa127d8eba9
[  438.737835][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  438.740616][   T34] RBP: 00007fa127fd7da0 R08: 0000000000000001 R09: 000000196fea387f
[  438.743821][   T34] R10: 0000001b31020000 R11: 0000000000000246 R12: 00007fa127fd5fac
[  438.746609][   T34] R13: 00007fa127fd5fa0 R14: ffffffffffffffff R15: 00007ffd6fea36a0
[  438.749432][   T34]  </TASK>
[  438.750674][   T34] INFO: task syz.1.2652:14571 blocked for more than 143 seconds.
[  438.753698][   T34]       Not tainted syzkaller #0
[  438.755319][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.758559][   T34] task:syz.1.2652      state:D stack:24712 pid:14571 tgid:14570 ppid:5852   task_flags:0x400140 flags:0x00004004
[  438.763797][   T34] Call Trace:
[  438.765241][   T34]  <TASK>
[  438.766495][   T34]  __schedule+0x1798/0x4cc0
[  438.768361][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.770238][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.771915][   T34]  ? __pfx___schedule+0x10/0x10
[  438.773884][   T34]  ? schedule+0x91/0x360
[  438.775328][   T34]  schedule+0x165/0x360
[  438.776847][   T34]  schedule_preempt_disabled+0x13/0x30
[  438.778740][   T34]  __mutex_lock+0x7e6/0x1350
[  438.780625][   T34]  ? rcu_is_watching+0x15/0xb0
[  438.783035][   T34]  ? __mutex_lock+0x5bb/0x1350
[  438.784955][   T34]  ? rfkill_register+0x37/0x8e0
[  438.786974][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  438.788909][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  438.790829][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.792977][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  438.794915][   T34]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  438.797007][   T34]  rfkill_register+0x37/0x8e0
[  438.798825][   T34]  wiphy_register+0x2231/0x2aa0
[  438.800559][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  438.803181][   T34]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  438.804896][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  438.807147][   T34]  ieee80211_register_hw+0x3442/0x40a0
[  438.809089][   T34]  ? ieee80211_register_hw+0x1471/0x40a0
[  438.811155][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  438.813555][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  438.815573][   T34]  ? __hrtimer_setup+0x187/0x210
[  438.817159][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  438.819461][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  438.821882][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  438.824456][   T34]  ? __nla_validate_parse+0x251c/0x2d40
[  438.826290][   T34]  ? __sock_sendmsg+0x21c/0x270
[  438.827888][   T34]  ? ____sys_sendmsg+0x505/0x830
[  438.829653][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  438.831772][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  438.834627][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  438.836962][   T34]  ? __nla_parse+0x40/0x60
[  438.838890][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  438.841535][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  438.844220][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  438.846853][   T34]  ? bpf_lsm_capable+0x9/0x20
[  438.848883][   T34]  ? security_capable+0x7e/0x2e0
[  438.850994][   T34]  genl_rcv_msg+0x60e/0x790
[  438.853352][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.855047][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  438.856973][   T34]  netlink_rcv_skb+0x208/0x470
[  438.858636][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.860257][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.861938][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  438.864051][   T34]  ? down_read+0x1ad/0x2e0
[  438.865467][   T34]  genl_rcv+0x28/0x40
[  438.866934][   T34]  netlink_unicast+0x82f/0x9e0
[  438.868660][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  438.870492][   T34]  ? netlink_sendmsg+0x642/0xb30
[  438.872084][   T34]  ? skb_put+0x11b/0x210
[  438.873584][   T34]  netlink_sendmsg+0x805/0xb30
[  438.875200][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.876854][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  438.878621][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  438.880663][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.882876][   T34]  __sock_sendmsg+0x21c/0x270
[  438.884562][   T34]  ____sys_sendmsg+0x505/0x830
[  438.886622][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  438.888803][   T34]  ? import_iovec+0x74/0xa0
[  438.890858][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  438.893112][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.895376][   T34]  ? __fget_files+0x2a/0x420
[  438.897294][   T34]  ? __fget_files+0x3a0/0x420
[  438.899314][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  438.901402][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.903957][   T34]  ? do_syscall_64+0xbe/0x3b0
[  438.905992][   T34]  do_syscall_64+0xfa/0x3b0
[  438.907856][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.909801][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.912507][   T34]  ? exc_page_fault+0x9f/0xf0
[  438.914483][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.916882][   T34] RIP: 0033:0x7f56e498eba9
[  438.918750][   T34] RSP: 002b:00007f56e5891038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.922320][   T34] RAX: ffffffffffffffda RBX: 00007f56e4bd5fa0 RCX: 00007f56e498eba9
[  438.925395][   T34] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  438.928262][   T34] RBP: 00007f56e4a11e19 R08: 0000000000000000 R09: 0000000000000000
[  438.931430][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.934788][   T34] R13: 00007f56e4bd6038 R14: 00007f56e4bd5fa0 R15: 00007ffed380fdc8
[  438.937766][   T34]  </TASK>
[  438.938903][   T34] 
[  438.938903][   T34] Showing all locks held in the system:
[  438.941875][   T34] 3 locks held by kworker/0:1/10:
[  438.944789][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.948991][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.954267][   T34]  #2: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  438.957980][   T34] 1 lock held by khungtaskd/34:
[  438.959777][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  438.963950][   T34] 2 locks held by getty/5672:
[  438.965977][   T34]  #0: ffff8880214300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  438.969941][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  438.974372][   T34] 1 lock held by udevd/12123:
[  438.976306][   T34]  #0: ffff88802195f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  438.980030][   T34] 2 locks held by syz.2.2601/14400:
[  438.982338][   T34]  #0: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  438.986526][   T34]  #1: ffff88804082e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  438.990431][   T34] 2 locks held by syz.0.2602/14398:
[  438.992724][   T34]  #0: ffff88804082e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  438.996803][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  439.000958][   T34] 3 locks held by syz.1.2652/14571:
[  439.003259][   T34]  #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  439.006149][   T34]  #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  439.009000][   T34]  #2: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.012626][   T34] 2 locks held by syz-executor/14574:
[  439.014446][   T34]  #0: ffff88803ca53118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.018148][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.022460][   T34] 2 locks held by syz-executor/14575:
[  439.024689][   T34]  #0: ffff888110e6f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.028337][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.032632][   T34] 2 locks held by syz-executor/14577:
[  439.034998][   T34]  #0: ffff88802aab1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.039302][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.043645][   T34] 2 locks held by syz-executor/14587:
[  439.045941][   T34]  #0: ffff88803cca0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.050195][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.054458][   T34] 2 locks held by syz-executor/14589:
[  439.056730][   T34]  #0: ffff88811433a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.060925][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.065390][   T34] 2 locks held by syz-executor/14591:
[  439.067678][   T34]  #0: ffff888114357918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.071874][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.075966][   T34] 2 locks held by syz-executor/14593:
[  439.077733][   T34]  #0: ffff888109aac118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.081402][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.085069][   T34] 2 locks held by syz-executor/14595:
[  439.087307][   T34]  #0: ffff8881060db118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.091646][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.095757][   T34] 2 locks held by syz-executor/14597:
[  439.097480][   T34]  #0: ffff888118e0e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  439.101137][   T34]  #1: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  439.105556][   T34] 
[  439.106655][   T34] =============================================
[  439.106655][   T34] 
[  439.110183][   T34] NMI backtrace for cpu 1
[  439.110197][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  439.110211][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.110218][   T34] Call Trace:
[  439.110225][   T34]  <TASK>
[  439.110231][   T34]  dump_stack_lvl+0x189/0x250
[  439.110252][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.110265][   T34]  ? __pfx__printk+0x10/0x10
[  439.110287][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  439.110306][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  439.110325][   T34]  ? __pfx__printk+0x10/0x10
[  439.110343][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  439.110363][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  439.110383][   T34]  watchdog+0xf93/0xfe0
[  439.110402][   T34]  ? watchdog+0x1de/0xfe0
[  439.110421][   T34]  kthread+0x711/0x8a0
[  439.110438][   T34]  ? __pfx_watchdog+0x10/0x10
[  439.110453][   T34]  ? __pfx_kthread+0x10/0x10
[  439.110468][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.110481][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.110493][   T34]  ? __pfx_kthread+0x10/0x10
[  439.110507][   T34]  ret_from_fork+0x439/0x7d0
[  439.110522][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  439.110537][   T34]  ? __switch_to_asm+0x39/0x70
[  439.110549][   T34]  ? __switch_to_asm+0x33/0x70
[  439.110562][   T34]  ? __pfx_kthread+0x10/0x10
[  439.110577][   T34]  ret_from_fork_asm+0x1a/0x30
[  439.110630][   T34]  </TASK>
[  439.110636][   T34] Sending NMI from CPU 1 to CPUs 0:
[  439.171057][    C0] NMI backtrace for cpu 0
[  439.171073][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  439.171083][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.171089][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  439.171105][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 39 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  439.171112][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  439.171122][    C0] RAX: e8b98e139e8a8100 RBX: ffffffff819693f8 RCX: e8b98e139e8a8100
[  439.171130][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba61b RDI: ffffffff8be33c00
[  439.171136][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  439.171142][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38d30
[  439.171149][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  439.171155][    C0] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  439.171163][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.171169][    C0] CR2: 00007ffced391b38 CR3: 000000000df36000 CR4: 00000000000006f0
[  439.171204][    C0] Call Trace:
[  439.171210][    C0]  <TASK>
[  439.171214][    C0]  default_idle+0x13/0x20
[  439.171226][    C0]  default_idle_call+0x74/0xb0
[  439.171239][    C0]  do_idle+0x1e8/0x510
[  439.171250][    C0]  ? __pfx_do_idle+0x10/0x10
[  439.171262][    C0]  cpu_startup_entry+0x44/0x60
[  439.171270][    C0]  rest_init+0x2de/0x300
[  439.171283][    C0]  start_kernel+0x3a9/0x410
[  439.171297][    C0]  x86_64_start_reservations+0x24/0x30
[  439.171311][    C0]  x86_64_start_kernel+0x143/0x1c0
[  439.171325][    C0]  common_startup_64+0x13e/0x147
[  439.171342][    C0]  </TASK>
[  439.172054][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  439.238629][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  439.241762][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.245310][   T34] Call Trace:
[  439.246455][   T34]  <TASK>
[  439.247449][   T34]  dump_stack_lvl+0x99/0x250
[  439.248973][   T34]  ? __asan_memcpy+0x40/0x70
[  439.250474][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.252206][   T34]  ? __pfx__printk+0x10/0x10
[  439.253754][   T34]  vpanic+0x281/0x750
[  439.255113][   T34]  ? __pfx_vpanic+0x10/0x10
[  439.256660][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  439.258465][   T34]  ? preempt_schedule+0xae/0xc0
[  439.260088][   T34]  ? preempt_schedule_common+0x83/0xd0
[  439.261890][   T34]  panic+0xb9/0xc0
[  439.263180][   T34]  ? __pfx_panic+0x10/0x10
[  439.264634][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  439.266392][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  439.268680][   T34]  watchdog+0xfd2/0xfe0
[  439.270064][   T34]  ? watchdog+0x1de/0xfe0
[  439.271480][   T34]  kthread+0x711/0x8a0
[  439.272887][   T34]  ? __pfx_watchdog+0x10/0x10
[  439.274460][   T34]  ? __pfx_kthread+0x10/0x10
[  439.275964][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.277700][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.279438][   T34]  ? __pfx_kthread+0x10/0x10
[  439.280982][   T34]  ret_from_fork+0x439/0x7d0
[  439.282543][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  439.284306][   T34]  ? __switch_to_asm+0x39/0x70
[  439.285881][   T34]  ? __switch_to_asm+0x33/0x70
[  439.287522][   T34]  ? __pfx_kthread+0x10/0x10
[  439.289541][   T34]  ret_from_fork_asm+0x1a/0x30
[  439.291412][   T34]  </TASK>
[  439.293221][   T34] Kernel Offset: disabled
[  439.294642][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:22:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881068b0237 R9 =1ffff11020d16046 R10=dffffc0000000000 R11=ffffffff854f95c0
R12=dffffc0000000000 R13=ffffffff99b028c9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f963c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffced391b38 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000071 0000000030323000
XMM06=ff000000ff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff000000ff XMM09=00316e6100313379 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81fa953c RBX=ffffea00044f9fc0 RCX=ffff888022bc5640 RDX=0000000000000000
RSI=0000000000000200 RDI=0000000000000000 RBP=ffffc9000323f5d0 RSP=ffffc9000323f500
R8 =ffffea00044f9fc7 R9 =1ffffd400089f3f8 R10=dffffc0000000000 R11=fffff9400089f3f9
R12=0000000000000000 R13=dffffc0000000000 R14=057ff9800000422c R15=1ffff92000647ea4
RIP=ffffffff81fa953c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe23fb07d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe23efa76c3 00007fe23efa76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000000406058803 0000002000000037 XMM07=0305800400000000 80044da003000800
XMM08=4d90030fffffffff ffff044d00000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
