last executing test programs:

2m31.418236455s ago: executing program 0 (id=27966):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r3, 0x0, 0x0, 0x404c854, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback, 0x7fffffff}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000540)}, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141400000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r4, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000200)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)="465a3e0ac0923540c5243e9c2e4e141832ac92e17725871e65b906885b4f2dd92d70aa5de5797ef9e18986755a9b96158466b7fd61090283fc5a168f333aa6d32b94d2ee461524432b43d9e6bf09de9b43300603a17d8bb5cebd83a727bc2576cb5422329b590f745270dabfff5c190d8314ff20a10b7d64169d81ace6089a52d3ae7dc3c4d4b6866c3b49b17dc68a53fd2105167cd7265b3dd2b5b46c33da10a82454e0af7b5c04a45924390d974f85cce8b06070259cba9cb7081188619a2df0f910cab125f70dcde2dea83a13184f11ae3ad069397827a85f7625376dec3a78f92690cff2e0218ad8fb1c7a53a81f", 0xf0}, {&(0x7f0000000540)="6e206539fa6c6f7cb9c9f737fd09d8b829fa2f069a0da5803509d5cb78040941c6b4f253d7aa3d74d60e24f65312d7f1234404911fd1aee5a6f833417cd8b0e799ceb8f0f3930f5b", 0x48}, {&(0x7f0000001680)="077d2c419836f54a5185b1cbc13fac33f279abae3a326185df9a6d1154827bc6049fe11c5be772430f15706b30009a159bee4236c5c964109e4ae8ded2b67b7b576bf342ddc2c41e03b24e7202f1a6c4b2a03f595accaa49256d2df8198d0bc444be688821b52fe6515e67c2c3f7a6f8b0431b0aa5dce3153cdd42f12e0bbc2595ebafddf76101d4eb3d31dace74765672ecf89cd27079045389381149fee131c38f3a588e35e6ec95d223593d968eed95699797e704f9063af1a869b96826", 0xbf}], 0x3}, 0x24000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="450a00000000000061119400000000005800001d00000000000000000000000095000000000000001d5ac098953d7f782a0938b4dbcdd1703f4e491c3123c00cd1ac90a6f98e77932208da34513bea98a524c870c7fa7ee7e97844fb2c8d997de5a34e532b52c1b92439d4e9b9fbc596c6a5bfacae82d08fdf374c74fed30cf96174ce77f48c4fc8eec95eec94ab42e30a7fd46e542d51"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

2m31.313499584s ago: executing program 0 (id=27970):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448c9, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x4, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x10001, 0xfffffffa, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0x10002}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0x1000, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0x9, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0xf, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0x0, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0x9, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x7}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x2, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0x6}, {0x4, 0x5}, {0xb, 0x4}}, [{0x8, 0xb, 0x401}, {0x8}, {0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) (async)
r12 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r13, 0x40000) (async)
ioctl$SIOCX25SCUDMATCHLEN(r13, 0x89e7, 0x0) (async)
getsockopt(r12, 0x0, 0xc, 0x0, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000002060101000000000000000000000000090002007310000000000000000001000700000013000300686173683a6e65742c69666163650000"], 0x3c}}, 0x0)

2m31.106510102s ago: executing program 0 (id=27973):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)

2m31.105514197s ago: executing program 0 (id=27975):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c00048008"], 0x70}}, 0x4008000)
r3 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2, 0x0, 0xffc9}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/212, 0xe3}, {&(0x7f00000004c0)=""/185}, {&(0x7f0000000600)=""/249}, {&(0x7f0000000c40)=""/209}, {&(0x7f0000000400)=""/64}], 0x35}, 0x7fffffff}], 0x40000f0, 0x142, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x4000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r5, 0x5452, 0x0)
sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}], 0x3, 0x1c000)
sendto$inet(r4, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r4, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001a40)}, 0xa2}], 0x1, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000030801020000000000000000020000000500030084000000140004800800034000007fff0800044000000065add0aa2d4e0a102889f7cb6a13942821905eb8d0a3bd52a8a9c4c099df8f79d1c614621751a72ba3407a9646e506ff664fa102d09bb81b3c32e91230a09231d365f521e4006cd10d19a337fea6f396f71b0f7cb44ca4eca3cdf81e53a7bfd18c26d097429f4c3404dde480a3c33de04e716c062f2f71e50f40"], 0x30}}, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
ioctl$sock_ifreq(r5, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', @ifru_map={0x9, 0x1000, 0x6, 0x87, 0x8, 0x5}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000084000000", @ANYRES32=0x1, @ANYBLOB="00d30bc341822d7e7db8a4000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8}, 0x94)
shutdown(r6, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

2m30.200278943s ago: executing program 0 (id=27992):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4005}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x2b4, r10, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6a1d0bd7}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc84, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x29}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00', 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0xf95}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x77}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72570b65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x437c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x8804)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x7, 0x5, 0x9, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r12, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
accept4$bt_l2cap(r12, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = getpid()
sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r15 = epoll_create1(0x0)
r16 = socket$unix(0x1, 0x1, 0x0)
close(r16)
setsockopt$sock_int(r16, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, &(0x7f00000000c0)={0xa0028000})

2m30.125904186s ago: executing program 0 (id=27993):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0xa, 0x800, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc) (async)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b7b38000e78e593d7302676966c314adfa007a063ec094420795d61fab7e9e6a4539ce8aa8642c18a4a85e79d048e4c750b5564e9a726b5f8cd7ecc7e7dc587d6e9e144c79a40410945e4261cb933b700598a98ceb8981df95c05d38c8f409619e03ea9c5a813e105e36476132bc798bdae7eaa7a2beed2bd62f50891f8c93716f34da717f43bf77a37ee6c7f9844c", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x8010}}], 0x1, 0x4000) (async)
sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x8010}}], 0x1, 0x4000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100010000000000c700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000aa43a072352243dbb9168caba34bc2a03187637f2cb1c5344439076dfbf138121bd24f7c20e5c47fd09683616cd2bd28ef2c5389b45abda83ae2d14bb06567376a75b83c3caf90c634ac0e35094edbf69bb28e", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000006d8010001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xfe9, &(0x7f0000002e00)=""/4073}, 0x94)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) (async)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="0700000000f9ffffff00020000e907cbd800"], 0x18}}, 0x400c000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

2m15.141088311s ago: executing program 32 (id=27993):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0xa, 0x800, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc) (async)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b7b38000e78e593d7302676966c314adfa007a063ec094420795d61fab7e9e6a4539ce8aa8642c18a4a85e79d048e4c750b5564e9a726b5f8cd7ecc7e7dc587d6e9e144c79a40410945e4261cb933b700598a98ceb8981df95c05d38c8f409619e03ea9c5a813e105e36476132bc798bdae7eaa7a2beed2bd62f50891f8c93716f34da717f43bf77a37ee6c7f9844c", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x8010}}], 0x1, 0x4000) (async)
sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x8010}}], 0x1, 0x4000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100010000000000c700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000aa43a072352243dbb9168caba34bc2a03187637f2cb1c5344439076dfbf138121bd24f7c20e5c47fd09683616cd2bd28ef2c5389b45abda83ae2d14bb06567376a75b83c3caf90c634ac0e35094edbf69bb28e", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000006d8010001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xfe9, &(0x7f0000002e00)=""/4073}, 0x94)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) (async)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="0700000000f9ffffff00020000e907cbd800"], 0x18}}, 0x400c000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

1.426820685s ago: executing program 1 (id=29920):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
write$cgroup_type(r1, &(0x7f00000000c0), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0xb1000000}, {0x44}, {0x3, 0x0, 0x80}, {}, {}, {0x0, 0x10}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x200000c0)
write$cgroup_pid(r2, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRES8], 0x94}, 0x1, 0x0, 0x0, 0x4f4301c6cc22bc46}, 0x2000c855)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r6, 0xf5f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000da0000000000950000000000000018a0000000000000", @ANYBLOB="ac61a32dbdc9f871928d626c66d8fc88645b73ffe2c1bb0cc36d193f84cccac51029eb61472586de860be53ac3a6fa12a93e65766f9e7050bcb27dd25ffb1e7f6c4edb30abc396a2812d4990f10f49689d7a6a1e8437d09dc9739e6ce2c78da86905ad85bfcf49b20886bae4d21c949ee0446712fdb191eda69b4891ed0fa0873a5cb3b9277188689a5ec38ed231ffd7b12f45598bec67dd1996ed8246f3c26c30ab4dc94032f24b23286d7edddc178cb21d41415b27f54972036c921bdec6633b5b5bbe3493e4dea81a79d78b402ec163bcf25a1a6adc1ec4fd9d000e216a88bc00cba9a2"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffff27, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc9f62a87646a439, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x40000051)
socket$phonet_pipe(0x23, 0x5, 0x2)
r8 = socket$phonet(0x23, 0x2, 0x1)
recvfrom$phonet(r8, &(0x7f0000000300)=""/186, 0xba, 0x73edeccdd1c41de2, 0x0, 0x0)
accept(r6, 0x0, 0x0)
close(r8)
r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@empty, 0x3f})
sendmsg$ETHTOOL_MSG_EEE_GET(r9, 0x0, 0x8004)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
socket(0x9, 0x4, 0x5)

1.423678884s ago: executing program 2 (id=29922):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0)
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8})
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000640)={0x0, 0x81, 0x2, 0xffffff01, 0x4, 0x0, [{0x5, 0xffffffffffffffff, 0x5, '\x00', 0x481}, {0x6, 0x2, 0xf, '\x00', 0x3b08}, {0x7, 0x8, 0x7}, {0x80000, 0x7fffffff, 0x506, '\x00', 0x2102}]})
writev(r8, 0x0, 0x0)
epoll_create1(0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)

1.37109754s ago: executing program 3 (id=29923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x2}, 0x70003}], 0x1, 0x102, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003380)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0xfff}}, 0x7, 0x5, 0x4, 0x3, 0x4}, &(0x7f0000003440)=0x98)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000035c0)=@assoc_id=r3, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000003480)={r3, @in={{0x2, 0x4e23, @multicast1}}, [0x7fffffffffffffff, 0x0, 0xf7, 0x2, 0x6, 0x9, 0x0, 0x9, 0x1, 0x1, 0x7ff, 0x8000000000000001, 0x3, 0xfffffffffffffff9, 0x9]}, &(0x7f0000003580)=0x100)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000020c0)={{<r6=>0x0, 0x4, 0xfffffffffffffff6, 0x5, 0x8, 0x5, 0x7f, 0x8, 0x4, 0x8001, 0x9, 0x6, 0xff, 0x3, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002180)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000002380)={0x3, [{r7, r9}, {r8}, {r6, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {0x0, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7}, {r6, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6}, {r6, r9}, {r8, r9}, {r6, r9}, {<r10=>r8, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {}, {r7, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r8}, {r7, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r6}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {0x0, r9}, {}, {0x0, r9}, {r6, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r6}, {r7, r9}, {r6, r9}, {r8}, {r8, r9}, {r8, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r6, r9}, {r6}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r6, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r6, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r6, r9}], 0x9, "339595a74019d6"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000000c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x10, "e4439d46248ac1"})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000010c0)={r11, 0x1})

1.32040017s ago: executing program 3 (id=29924):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000d00001c0000005f00"], 0x0, 0x34}, 0x20)

1.319836847s ago: executing program 3 (id=29925):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, 0x0, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054)

1.230032182s ago: executing program 3 (id=29926):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000000)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8036fa9615d6e218879f7bc52a66e1e11d51c8e23cc3596ddff9f221f41", 0x33}, {&(0x7f0000003f80)="1ace408fc35010adf8aa7e7bae3c1aa04575cf01086d5b7b764d79c1577550093e00382fb42c8e07dbd36dcb03b7c01027ba7266bbc6c9d35a23c0a86282ed123f53bef94db6cb9955e796f9b8c419a5c7ac226b50c33530dcc8491a6664478256c8eccb6c44e98bd106fbb8c542c4a95e6d9271723dd48114dbc3e73b5de8bc83c14cef214a981f7a0961d681b20e27e53cdc43b63e003cd924b3163236deae9c0c4ce27f5415dcd161bb24512ed382537bc167f3098b27bf49b94dadf7f85ea6eee20e5c86a13759400a6591a4c33f049b8e45474e9f6d2949728c", 0xdc}], 0x3, 0x0, 0x0, 0x20040003}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2, 0x0, 0xffc9}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/212, 0xe3}, {&(0x7f00000004c0)=""/185}, {&(0x7f0000000600)=""/249}, {&(0x7f0000000c40)=""/209}, {&(0x7f0000000400)=""/64}], 0x35}, 0x7fffffff}], 0x40000f0, 0x142, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x4000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
sendto$inet(r3, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001a40)}, 0xa2}], 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000030801020000000000000000020000000500030084000000140004800800034000007fff0800044000000065add0aa2d4e0a102889f7cb6a13942821905eb8d0a3bd52a8a9c4c099df8f79d1c614621751a72ba3407a9646e506ff664fa102d09bb81b3c32e91230a09231d365f521e4006cd10d19a337fea6f396f71b0f7cb44ca4eca3cdf81e53a7bfd18c26d097429f4c3404dde480a3c33de04e716c062f2f71e50f40"], 0x30}}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffffffffffa8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0)
shutdown(r5, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.111329197s ago: executing program 2 (id=29927):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000780)={'veth0_macvtap\x00', @remote})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6(0xa, 0x4, 0x800000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x80000000000008}}}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0xf, 0xe5, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @local, [0xff, 0xffffffff, 0x0, 0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1301, 0x100}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0xff, 0xb9c, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r2, 0x372)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000dc00000000ad9e00"/24], 0x18}, 0x404f444)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000001c0)={{0x0, 0xcfb}, 0x2}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="0380c2000600000003000000000000ac1414bbbbbbb87b9701839545c37ac2d31503bbbbc1532738d60e67c3c76f541fa71bcf55fb4e90d51220bacdccfad0d82890e3fdf141aab69cb52e603b1ecd6ef82456c2582f41e63e0495b5f3a894a5f1cf5a24c992a4bcab7b1549e5469bf2aaa3f74fe3caf9ed412d84b1b0764d942e80277efae85feb5727648fa220"], 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r8 = socket$kcm(0x21, 0x2, 0xa)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000100100000100000000000002000000001000000000000000100100000b000000f7eb84f30fc73918e47dd544d27667ed70aa4e2ee3b7d9e6968afe566b7d68f14dfaeaf64d7552e3d45deded94cef432558699cbd50381011948c74696f42ea1ea71fae5dacadb79bc551abfaf723f6bcb18b601af99a2624d0fdcf9692f0a537d3d2df78e79314660f177885c3cef03a3380620127968038deabc15cec7ed5d8bfed2a28166e298a2d5627a6e410b7c9ec692d27918423e"], 0x28}, 0xfc40)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x10001}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1, 0x1, 0x4, &(0x7f0000000280)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000380)="d78917c5816341e2a4eacbb7efa0655a2a4ff3b351fc386a33717d9c9e64a0892ed8157cd1cba97157ac3d8b1a3f30cf7de2a5be4651f907518d03ce0ae826329e17334455253982bbcc8b90cfff833c68f510cfab70004a96b8f4087f39e2c58ea77371", 0x64)
sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/283, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

571.076842ms ago: executing program 1 (id=29928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0})
syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0x84, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={@local, @private0, @mcast2, 0x9, 0x9, 0xf08, 0x500, 0x9, 0x100006, r1})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4101, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xfc}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r12, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000002084"], 0x2c}}, 0x24000806)
bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

461.569959ms ago: executing program 1 (id=29929):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000000)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8036fa9615d6e218879f7bc52a66e1e11d51c8e23cc3596ddff9f221f41", 0x33}, {&(0x7f0000003f80)="1ace408fc35010adf8aa7e7bae3c1aa04575cf01086d5b7b764d79c1577550093e00382fb42c8e07dbd36dcb03b7c01027ba7266bbc6c9d35a23c0a86282ed123f53bef94db6cb9955e796f9b8c419a5c7ac226b50c33530dcc8491a6664478256c8eccb6c44e98bd106fbb8c542c4a95e6d9271723dd48114dbc3e73b5de8bc83c14cef214a981f7a0961d681b20e27e53cdc43b63e003cd924b3163236deae9c0c4ce27f5415dcd161bb24512ed382537bc167f3098b27bf49b94dadf7f85ea6eee20e5c86a13759400a6591a4c33f049b8e45474e9f6d2949728c", 0xdc}], 0x3, 0x0, 0x0, 0x20040003}], 0x1, 0x0) (async)
sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000000)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8036fa9615d6e218879f7bc52a66e1e11d51c8e23cc3596ddff9f221f41", 0x33}, {&(0x7f0000003f80)="1ace408fc35010adf8aa7e7bae3c1aa04575cf01086d5b7b764d79c1577550093e00382fb42c8e07dbd36dcb03b7c01027ba7266bbc6c9d35a23c0a86282ed123f53bef94db6cb9955e796f9b8c419a5c7ac226b50c33530dcc8491a6664478256c8eccb6c44e98bd106fbb8c542c4a95e6d9271723dd48114dbc3e73b5de8bc83c14cef214a981f7a0961d681b20e27e53cdc43b63e003cd924b3163236deae9c0c4ce27f5415dcd161bb24512ed382537bc167f3098b27bf49b94dadf7f85ea6eee20e5c86a13759400a6591a4c33f049b8e45474e9f6d2949728c", 0xdc}], 0x3, 0x0, 0x0, 0x20040003}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2, 0x0, 0xffc9}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/212, 0xe3}, {&(0x7f00000004c0)=""/185}, {&(0x7f0000000600)=""/249}, {&(0x7f0000000c40)=""/209}, {&(0x7f0000000400)=""/64}], 0x35}, 0x7fffffff}], 0x40000f0, 0x142, 0x0) (async)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2, 0x0, 0xffc9}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/212, 0xe3}, {&(0x7f00000004c0)=""/185}, {&(0x7f0000000600)=""/249}, {&(0x7f0000000c40)=""/209}, {&(0x7f0000000400)=""/64}], 0x35}, 0x7fffffff}], 0x40000f0, 0x142, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x4000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
sendto$inet(r3, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async)
sendto$inet(r3, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001a40)}, 0xa2}], 0x1, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001a40)}, 0xa2}], 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000030801020000000000000000020000000500030084000000140004800800034000007fff0800044000000065add0aa2d4e0a102889f7cb6a13942821905eb8d0a3bd52a8a9c4c099df8f79d1c614621751a72ba3407a9646e506ff664fa102d09bb81b3c32e91230a09231d365f521e4006cd10d19a337fea6f396f71b0f7cb44ca4eca3cdf81e53a7bfd18c26d097429f4c3404dde480a3c33de04e716c062f2f71e50f40"], 0x30}}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) (async)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
shutdown(r5, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

461.100731ms ago: executing program 1 (id=29930):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6001000010001385c17a484e0400000000fadbdf250000000000000000000000000000000000000000000000000000ffff000000a7dcc2400a7c310000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x8000)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x30)

360.804121ms ago: executing program 1 (id=29931):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32], 0x0, 0x53}, 0x28) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32], 0x0, 0x53}, 0x28)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xe27d, @remote, 0x1}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)="eb3051a0b459b084a67a78b371c36a076ebb1d1f9438dd0fffcda2df92de14f5878d14ec4c73b36c50780d6d6db97e2d3461bfe92ddf8cc1b6b2516c03613dc92006ec7837d9ef271616fda196cc00723e6a41ab047dbaedb88e3d38d1c206227cd43734", &(0x7f0000000740), 0x20075, r3}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)="eb3051a0b459b084a67a78b371c36a076ebb1d1f9438dd0fffcda2df92de14f5878d14ec4c73b36c50780d6d6db97e2d3461bfe92ddf8cc1b6b2516c03613dc92006ec7837d9ef271616fda196cc00723e6a41ab047dbaedb88e3d38d1c206227cd43734", &(0x7f0000000740), 0x20075, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r2, @ANYBLOB="af8dc508212c42190f7baee16372216a12bdb55ace431c6660123d8c7188a122e3b6cdd42a9a91019f73542061186656de67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r9, 0x5421, &(0x7f0000000440)=0x6)
socket$pptp(0x18, 0x1, 0x2) (async)
socket$pptp(0x18, 0x1, 0x2)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x9, &(0x7f0000000500)="7c71fc9bd611642189e9ec5f19b53a424a0d1211765997817355459d23e354474191cf8939af5cf0f44df5474e4f36f69ad977e896c53fc846df71d07e2cda058911321fee8bb5a3ca5153c53554be306f69589c87e7610d3dfde2e72f770af1115d4c1363731495e13754b76a8a36f993d2955de51d143c23331ced0c3dc426d85cfef5bca92a66ef7796e01a85b5a51487da7d224db07d9a113f9d014ee9e2ada3341efcb154913b6f58103f4429d7627fba94914dd17237b41c263d8f232430078476ce6f6a4dee8221eccf169df88b5938dc62", 0xd5)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
socket$packet(0x11, 0x3, 0x300) (async)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'rose0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r13, @ANYRES8=r5, @ANYRES64, @ANYRESHEX, @ANYRESDEC=r4], 0x20}}, 0x4000)
connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none, 0x40}, 0xa)
close(r9)

359.559078ms ago: executing program 3 (id=29932):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, 0x0, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054)

290.192413ms ago: executing program 3 (id=29933):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000002e80)={@loopback}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "418b133f5cf464cf1357b6dc5c391340"}) (async)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={<r9=>r8, @in6={{0xa, 0x4e21, 0x1002, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffe}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={r9, 0x2, 0x30}, &(0x7f00000000c0)=0xc) (async)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe)
listen(r4, 0xa1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r11=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000280), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x649}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2b5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c001}, 0xc090) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r3, 0x0, 0xab, 0x99, &(0x7f0000000640)="4a84aff5f7dba35bc9a1277a92b42a18531182ca164a2f22dddad8d92545855a1eb46c014146e3b4b5eeb068739bc1a5945609bfc4b5fb2dcd5aa514e3fc9c2157e22f9e1d9b55a1d054fdf6c77ccc7527f1f800f180feaa6ef671bf71103949a77ddb6f838df8b0d19a7a8bd5a01e983e7810531f71ff3b952f5c75c892f39a61b4bbc52a1bbe97566a91f69e1c18325eb316b7ee3deb82378597901459e8ae47ee56f7ba4a8d6ec6cce8", &(0x7f00000017c0)=""/153, 0x2, 0x0, 0x79, 0x94, &(0x7f0000001880)="f0a31639e9b3370a0d0cf666e3b67a2abd0ed86a8c920a6649fe755d9145c8c254598a6b9b1734ab4075a53795e082f68437e73e88592dbe5eaaaa2d71b7d262d29b36086056b707e572e150c7668dd065df99714d0ab76c96055469c5bab10455c70407871f0d1a907782faf752abc97d6ad4bad86c34b0b0", &(0x7f0000001900)="1a84dab99968874defad59183aee87459cf7fbcbee567b3fba6c34e8760028fd1e1214b2fb28c438c740be05faf6e8b9f29b1cc81d1c44e46e97e4c3c5ed9ee7b7c1eb090fdce731c8453cb2437061d8e911100b0db228771e674e01efc18ec8daf69e1f6394192b3ead0c82d4f6b64a9b28e056a175c98e3da6b83086c370d7381bb6831ee307da1fa2b48a5ad04f7bf9d80992", 0x0, 0x0, 0x5}, 0x50) (async)
accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001780)={0x2, 0x7ba4, 0x1000, &(0x7f0000000780)=""/4096}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

289.530148ms ago: executing program 1 (id=29934):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
shutdown(r0, 0x1)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000006053000000000000000000000000000000000000002a318d4f7224f82e104cb6e9def89f7f997afa890b4336d353426b74b30c236af06338e64c5f3657f85db80939c78de95a9495072e326585070ca99c2ad6a70c0fe05542254158e4b8dd7725904bfab63ce3b68843a4ae028c1daf321f6612e3ec267e6400"/142], 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, 0x0, &(0x7f0000000140)={0x3ff, 0x0, 0x0, 0x8, 0x3f5, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000040)="d6"}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0x10, 0x2, 0x4)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000001300)=ANY=[@ANYBLOB="1514020600000000ff02000000000000000000000000000100000000000000000000fffffffffffffc01000000000000d596ee472e3d502c00000000000000000000ffffe000000120010000000000000000000000000002fe880000000000000000000000000001fe800000000000000000000000000010fe8000000000000000000000000000aafe88000000000000000000000000000100000000000000000000ffff0a010101"], 0xa8)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

151.918271ms ago: executing program 2 (id=29935):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x56}, @TCA_U32_ACT={0x31, 0x7, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x8, 0x15, 0x3, 0x4b0, 0x8, 0xb, 0x40, 0x4}}]}}]}, 0x84}}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)

51.757362ms ago: executing program 2 (id=29936):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141400000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x0, {0x0, 0x0, 0x0, r5, 0x53c03}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061119400000000001800000000000000000000002dd687000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061119400000000001800000000000000000000002dd687000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ppoll(&(0x7f0000000280)=[{r8, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) (async)
ppoll(&(0x7f0000000280)=[{r8, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r11=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000440)={'pim6reg1\x00', {0x2, 0x4e20, @multicast2}})
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0200ca9200bda8f6a8467e00", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800060002000000"], 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="db7926bd7000ffdbdf2509000000080006000600000018000180090006006e6f6e6580000000080005000000000008000400ff7fffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x100000c0) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="db7926bd7000ffdbdf2509000000080006000600000018000180090006006e6f6e6580000000080005000000000008000400ff7fffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x100000c0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r7, @ANYRESDEC=r4, @ANYBLOB="00012dbd7000fcdbdf250e0000000c0003800800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000)
bind$bt_sco(r7, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @none}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.783671ms ago: executing program 2 (id=29937):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
r2 = socket$inet(0x2, 0xa, 0xcaa)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000040)=0xfb4, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e22, @loopback}}) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRESDEC=r0], 0x3c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r9], 0x3c}}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)

0s ago: executing program 2 (id=29938):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000001000000000002000200000018000000090000000000000009000000850000000e0000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0})
syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0x84, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={@local, @private0, @mcast2, 0x9, 0x9, 0xf08, 0x500, 0x9, 0x100006, r1})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4101, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xfc}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r12, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000002084"], 0x2c}}, 0x24000806)
bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

kernel console output (not intermixed with test programs):

ry.events" dev="tmpfs" ino=47758 res=0 errno=0
[ 2283.586685][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27763'.
[ 2283.632016][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27764'.
[ 2283.683360][ T6086] Bluetooth: hci0: Opcode 0x0401 failed: -4
[ 2283.717789][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27766'.
[ 2283.722111][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27766'.
[ 2283.791144][ T6147] netlink: 'syz.0.27769': attribute type 4 has an invalid length.
[ 2283.920869][ T6158] lo speed is unknown, defaulting to 1000
[ 2284.039291][ T6165] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2284.059264][ T5669] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2284.061791][ T6158] vlan0 speed is unknown, defaulting to 1000
[ 2284.064002][ T5669] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2284.064027][ T5669] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2284.064043][ T5669] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2284.122134][ T6171] netlink: 'syz.1.27775': attribute type 13 has an invalid length.
[ 2284.166492][ T6171] syzkaller0: Caught tx_queue_len zero misconfig
[ 2284.322798][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27778'.
[ 2284.328744][ T6182] netlink: 'syz.1.27778': attribute type 1 has an invalid length.
[ 2284.341274][ T6182] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2284.439899][ T6188] bond65: option all_slaves_active: invalid value (9)
[ 2284.443055][ T6188] bond65 (unregistering): Released all slaves
[ 2284.569512][ T6193] netlink: 277 bytes leftover after parsing attributes in process `syz.1.27782'.
[ 2284.799731][ T6212] Cannot find del_set index 3 as target
[ 2284.812112][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27788'.
[ 2285.197444][ T6227] vlan0: entered promiscuous mode
[ 2285.391723][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27794'.
[ 2285.976970][ T6239] bond54: left promiscuous mode
[ 2285.979446][ T6239] bridge46: left promiscuous mode
[ 2286.000211][ T6239] bond56: left promiscuous mode
[ 2286.002864][ T6239] bridge48: left promiscuous mode
[ 2286.024219][ T6239] ip6gretap3: left promiscuous mode
[ 2286.027889][ T6239] ip6gretap3: left allmulticast mode
[ 2286.035374][ T6239] bond58: left promiscuous mode
[ 2286.044421][ T6239] bond59: left promiscuous mode
[ 2286.049314][ T6239] bridge50: left promiscuous mode
[ 2286.079292][T18595] lo speed is unknown, defaulting to 1000
[ 2286.082635][T18595] sqz0: Port: 1 Link DOWN
[ 2286.094356][ T6418] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2286.100193][T18595] lo speed is unknown, defaulting to 1000
[ 2286.100234][ T6418] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2286.105910][ T6418] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2286.110918][ T6418] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2286.193330][ T6267] IPVS: length: 35 != 24
[ 2286.222907][ T6267] x_tables: unsorted underflow at hook 4
[ 2286.311631][ T6274] lo speed is unknown, defaulting to 1000
[ 2286.344830][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27801'.
[ 2286.425618][ T6274] vlan0 speed is unknown, defaulting to 1000
[ 2287.259390][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2287.511107][ T6300] netlink: 'syz.1.27809': attribute type 5 has an invalid length.
[ 2287.781678][ T6317] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[ 2288.569352][ T6371] __nla_validate_parse: 11 callbacks suppressed
[ 2288.569363][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27828'.
[ 2288.618979][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27831'.
[ 2288.621608][ T6375] openvswitch: netlink: Invalid VLAN frame
[ 2288.691539][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27832'.
[ 2288.694809][ T6379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.27832'.
[ 2288.786262][ T6385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2288.914286][ T6387] lo speed is unknown, defaulting to 1000
[ 2289.002728][ T6387] vlan0 speed is unknown, defaulting to 1000
[ 2289.269981][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27835'.
[ 2289.400962][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27837'.
[ 2289.487615][ T6398] lo speed is unknown, defaulting to 1000
[ 2289.608258][ T6405] netlink: 'syz.0.27839': attribute type 4 has an invalid length.
[ 2289.689073][ T6407] bond66: option all_slaves_active: invalid value (9)
[ 2289.692935][ T6407] bond66 (unregistering): Released all slaves
[ 2289.772426][ T6398] vlan0 speed is unknown, defaulting to 1000
[ 2289.872589][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27843'.
[ 2290.146891][ T6439] rdma_rxe: rxe_newlink: failed to add lo
[ 2290.149348][ T6439] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 2290.328695][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2290.335229][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2290.376802][ T6444] veth0_macvtap: left promiscuous mode
[ 2290.380043][ T6444] veth0_macvtap: entered promiscuous mode
[ 2290.388466][ T6444] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2290.394601][T18595] lo speed is unknown, defaulting to 1000
[ 2290.398501][T18595] sqz0: Port: 1 Link ACTIVE
[ 2290.426489][ T6418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2290.429639][ T6418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2290.436036][T18595] lo speed is unknown, defaulting to 1000
[ 2290.443937][ T6448] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2290.449127][ T6418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2290.453148][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2290.466450][T19392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2290.506685][ T6454] sctp: [Deprecated]: syz.2.27852 (pid 6454) Use of int in max_burst socket option.
[ 2290.506685][ T6454] Use struct sctp_assoc_value instead
[ 2290.780484][ T6469] netlink: 444 bytes leftover after parsing attributes in process `syz.1.27857'.
[ 2290.802643][ T6469] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2290.944606][T19392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2291.015124][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27862'.
[ 2291.152980][ T6480] xt_hashlimit: size too large, truncated to 1048576
[ 2291.182956][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27863'.
[ 2291.341090][ T6503] vlan0: entered promiscuous mode
[ 2291.392890][ T6504] netlink: 'syz.2.27865': attribute type 4 has an invalid length.
[ 2291.510460][ T6510] netlink: 'syz.2.27867': attribute type 4 has an invalid length.
[ 2291.954541][ T6539] netlink: 'syz.0.27876': attribute type 4 has an invalid length.
[ 2292.665002][   T34] audit: type=1804 audit(1778613416.285:225): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.27878" name="/newroot/9348/cgroup.controllers" dev="tmpfs" ino=47750 res=1 errno=0
[ 2292.680751][   T34] audit: type=1800 audit(1778613416.285:226): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27878" name="cgroup.controllers" dev="tmpfs" ino=47750 res=0 errno=0
[ 2292.934173][ T6563] bond61: option all_slaves_active: invalid value (9)
[ 2292.937343][ T6563] bond61 (unregistering): Released all slaves
[ 2293.681754][ T6584] __nla_validate_parse: 17 callbacks suppressed
[ 2293.681765][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27890'.
[ 2293.832430][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27895'.
[ 2293.869249][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27898'.
[ 2293.872726][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27898'.
[ 2293.882851][ T6606] netlink: 'syz.0.27898': attribute type 1 has an invalid length.
[ 2293.887644][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27895'.
[ 2294.123206][ T6624] netlink: 'syz.2.27903': attribute type 4 has an invalid length.
[ 2294.127959][ T6624] netlink: 17 bytes leftover after parsing attributes in process `syz.2.27903'.
[ 2294.778093][ T6643] lo speed is unknown, defaulting to 1000
[ 2294.869962][ T6643] vlan0 speed is unknown, defaulting to 1000
[ 2294.970037][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27909'.
[ 2295.021967][ T6654] 8021q: VLANs not supported on gre0
[ 2295.142402][ T6664] netlink: 277 bytes leftover after parsing attributes in process `syz.0.27912'.
[ 2295.341353][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27913'.
[ 2295.637466][ T6670] tipc: Resetting bearer <eth:xfrm0>
[ 2295.695954][ T6670] ipvlan0: left allmulticast mode
[ 2295.701231][ T6670] veth0_vlan: left allmulticast mode
[ 2295.704429][ T6670] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode
[ 2295.707410][ T6670] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode
[ 2295.711713][ T6670] bond63: left promiscuous mode
[ 2295.723854][ T6670] bond64: left promiscuous mode
[ 2295.727561][ T6670] bridge54: left promiscuous mode
[ 2295.741994][ T6670] bond65: left promiscuous mode
[ 2295.744173][ T6670] bridge55: left promiscuous mode
[ 2295.977414][ T6684] netlink: 277 bytes leftover after parsing attributes in process `syz.1.27917'.
[ 2296.305032][ T6713] wg2: Caught tx_queue_len zero misconfig
[ 2296.340798][ T6716] netlink: 'syz.1.27922': attribute type 4 has an invalid length.
[ 2296.928246][ T6779] tipc: Enabling of bearer <eth:ipvlan0> rejected, max 3 bearers permitted
[ 2296.962123][ T6779] netlink: 'syz.1.27941': attribute type 1 has an invalid length.
[ 2296.964832][ T6779] netlink: 'syz.1.27941': attribute type 2 has an invalid length.
[ 2297.327554][ T6802] syzkaller1: entered promiscuous mode
[ 2297.329342][ T6802] syzkaller1: entered allmulticast mode
[ 2297.505812][ T6808] vlan0: entered promiscuous mode
[ 2297.557310][ T6808] netlink: 'syz.2.27949': attribute type 4 has an invalid length.
[ 2297.839414][ T6832] vlan0: entered promiscuous mode
[ 2297.944270][ T6837] nbd1: detected capacity change from 0 to 127
[ 2297.952100][   T56] block nbd1: Receive control failed (result -32)
[ 2297.955916][ T6762] block nbd1: Send control failed (result -32)
[ 2297.959261][ T6762] block nbd1: Request send failed, requeueing
[ 2297.980080][ T1061] block nbd1: Dead connection, failed to find a fallback
[ 2297.984650][ T1061] block nbd1: shutting down sockets
[ 2297.987330][ T1061] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2297.991036][ T1061] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 2298.002406][ T6762] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.009610][ T6762] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 2298.015028][ T6762] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.018429][ T6762] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 2298.021590][ T6762] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.025764][ T6762] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 2298.030580][ T6762] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.035470][ T6762] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 2298.037912][ T6762] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.040736][ T6762] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 2298.043166][ T6762] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.046314][ T6762] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 2298.049152][ T6762] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.053357][ T6762] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 2298.057127][ T6762] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.060841][ T6762] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 2298.064216][ T6762] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2298.067253][ T6762] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 2298.079879][ T6762] ldm_validate_partition_table(): Disk read failed.
[ 2298.086183][ T6762] Dev nbd1: unable to read RDB block 0
[ 2298.090158][ T6762]  nbd1: unable to read partition table
[ 2298.108062][ T6762] ldm_validate_partition_table(): Disk read failed.
[ 2298.117148][ T6762] Dev nbd1: unable to read RDB block 0
[ 2298.121762][ T6762]  nbd1: unable to read partition table
[ 2301.021852][ T6864] __nla_validate_parse: 14 callbacks suppressed
[ 2301.021863][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27964'.
[ 2301.059819][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27966'.
[ 2301.373025][ T6899] netlink: 'syz.0.27975': attribute type 2 has an invalid length.
[ 2301.381510][ T6899] netlink: 'syz.0.27975': attribute type 1 has an invalid length.
[ 2301.390238][ T6901] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27976'.
[ 2301.393306][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27976'.
[ 2301.961149][ T6939] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.27986'.
[ 2302.310810][ T6954] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 2302.361185][ T6964] netlink: 68 bytes leftover after parsing attributes in process `syz.2.27994'.
[ 2302.370564][ T6964] netlink: 'syz.2.27994': attribute type 4 has an invalid length.
[ 2302.425346][ T6968] lo speed is unknown, defaulting to 1000
[ 2302.519744][ T6968] vlan0 speed is unknown, defaulting to 1000
[ 2302.714744][ T6974] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2302.946900][ T6991] lo speed is unknown, defaulting to 1000
[ 2303.023450][ T6999] bond65: option all_slaves_active: invalid value (9)
[ 2303.027331][ T6999] bond65 (unregistering): Released all slaves
[ 2303.062337][ T6991] vlan0 speed is unknown, defaulting to 1000
[ 2303.284518][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28007'.
[ 2303.357867][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28009'.
[ 2303.529034][ T7028] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 2303.783821][ T7038] syzkaller1: entered promiscuous mode
[ 2303.785660][ T7038] syzkaller1: entered allmulticast mode
[ 2303.951963][ T7039] netlink: 'syz.1.28013': attribute type 11 has an invalid length.
[ 2304.339142][ T7057] netlink: 228 bytes leftover after parsing attributes in process `syz.1.28017'.
[ 2304.672359][ T7060] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2304.692394][ T7060] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2304.790160][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28019'.
[ 2305.242000][ T7074] pimreg: left allmulticast mode
[ 2306.256738][ T7095] __nla_validate_parse: 1 callbacks suppressed
[ 2306.256749][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28029'.
[ 2306.309660][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28030'.
[ 2306.312434][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28030'.
[ 2306.376548][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28031'.
[ 2306.450621][ T7103] netlink: 'syz.1.28032': attribute type 4 has an invalid length.
[ 2306.614271][ T7116] netlink: 'syz.1.28036': attribute type 13 has an invalid length.
[ 2306.976784][ T7128] bridge42: entered promiscuous mode
[ 2306.978834][ T7128] bridge42: entered allmulticast mode
[ 2306.991267][ T7128] openvswitch: netlink: IP tunnel dst address not specified
[ 2308.032572][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28045'.
[ 2308.070014][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28047'.
[ 2308.125501][ T7160] vlan0: entered promiscuous mode
[ 2308.131343][ T7155] netlink: 'syz.1.28046': attribute type 4 has an invalid length.
[ 2308.140635][ T7160] netlink: 'syz.2.28048': attribute type 4 has an invalid length.
[ 2308.276779][ T7170] vlan0: entered promiscuous mode
[ 2308.329910][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28053'.
[ 2309.086227][ T7185] 8021q: VLANs not supported on ip6_vti0
[ 2309.117716][ T7185] netlink: 'syz.1.28056': attribute type 4 has an invalid length.
[ 2309.187740][ T7194] netlink: 'syz.1.28058': attribute type 1 has an invalid length.
[ 2309.220459][ T7194] bond65: entered promiscuous mode
[ 2309.222868][ T7194] 8021q: adding VLAN 0 to HW filter on device bond65
[ 2309.265461][ T7199] netlink: 'syz.2.28060': attribute type 4 has an invalid length.
[ 2309.276054][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28061'.
[ 2309.303477][ T7205] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[ 2309.352840][ T7210] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28064'.
[ 2309.408099][ T7215] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28066'.
[ 2309.699654][   T56] block nbd2: Receive control failed (result -32)
[ 2309.710493][ T7239] : renamed from veth0_to_bond (while UP)
[ 2309.792530][ T7243] netlink: 'syz.2.28073': attribute type 4 has an invalid length.
[ 2309.802685][T18595] lo speed is unknown, defaulting to 1000
[ 2309.805624][T18595] sqz0: Port: 1 Link DOWN
[ 2309.807944][ T7243] netlink: 'syz.2.28073': attribute type 4 has an invalid length.
[ 2309.812462][T18595] lo speed is unknown, defaulting to 1000
[ 2309.818121][ T4648] lo speed is unknown, defaulting to 1000
[ 2309.822076][ T4648] sqz0: Port: 1 Link ACTIVE
[ 2309.828146][ T4648] lo speed is unknown, defaulting to 1000
[ 2310.029248][ T7251] vlan0: entered promiscuous mode
[ 2310.069283][ T7251] netlink: 'syz.2.28077': attribute type 4 has an invalid length.
[ 2310.332108][ T7268] vlan0: entered promiscuous mode
[ 2310.438424][ T7271] sctp: [Deprecated]: syz.2.28084 (pid 7271) Use of int in max_burst socket option.
[ 2310.438424][ T7271] Use struct sctp_assoc_value instead
[ 2310.548144][ T7277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2310.551191][ T7277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2311.413034][ T7287] bond61: option all_slaves_active: invalid value (9)
[ 2311.420798][ T7287] bond61 (unregistering): Released all slaves
[ 2311.438341][ T7290] __nla_validate_parse: 8 callbacks suppressed
[ 2311.438351][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28090'.
[ 2311.500233][   T34] audit: type=1800 audit(1778613435.115:227): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28090" name="memory.events" dev="tmpfs" ino=48476 res=0 errno=0
[ 2311.523052][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28091'.
[ 2311.564868][ T7298] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 2311.570469][ T7298] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 2311.576741][ T7298] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 2311.585736][ T7298] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 2311.638875][ T7304] syzkaller0: Caught tx_queue_len zero misconfig
[ 2311.660270][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28095'.
[ 2311.699837][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28097'.
[ 2311.739102][ T7314] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28098'.
[ 2311.743423][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28097'.
[ 2311.751507][ T7311] nbd: device at index 64 is going down
[ 2311.757273][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28097'.
[ 2311.760630][ T7310] nbd: device at index 64 is going down
[ 2311.762384][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28097'.
[ 2311.773727][ T7315] nbd: device at index 64 is going down
[ 2312.127334][ T7350] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[ 2312.128639][ T7352] netlink: 'syz.1.28109': attribute type 1 has an invalid length.
[ 2312.146587][ T7352] bond66: entered promiscuous mode
[ 2312.149427][ T7352] 8021q: adding VLAN 0 to HW filter on device bond66
[ 2312.154153][ T7350] netlink: 'syz.2.28108': attribute type 1 has an invalid length.
[ 2312.198914][ T7350] bond61: (slave vxcan5): The slave device specified does not support setting the MAC address
[ 2312.204470][ T7350] bond61: (slave vxcan5): Error -95 calling set_mac_address
[ 2312.423248][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28112'.
[ 2312.459862][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28112'.
[ 2313.350264][ T7389] nbd: must specify a device to reconfigure
[ 2313.604859][ T7404] netlink: 'syz.2.28122': attribute type 1 has an invalid length.
[ 2313.607887][ T7404] netlink: 'syz.2.28122': attribute type 2 has an invalid length.
[ 2313.787435][ T7422] lo speed is unknown, defaulting to 1000
[ 2313.902793][ T7422] vlan0 speed is unknown, defaulting to 1000
[ 2314.403103][ T7432] netlink: 'syz.1.28129': attribute type 4 has an invalid length.
[ 2314.598086][ T7422] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 2315.929974][ T7477] netlink: 'syz.2.28140': attribute type 1 has an invalid length.
[ 2316.528028][ T7508] __nla_validate_parse: 18 callbacks suppressed
[ 2316.528043][ T7508] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28148'.
[ 2316.643377][ T7513] netlink: 'syz.1.28149': attribute type 4 has an invalid length.
[ 2316.686139][ T7517] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28150'.
[ 2316.761829][ T7522] netlink: 'syz.1.28151': attribute type 1 has an invalid length.
[ 2316.777080][ T7522] bond67: entered promiscuous mode
[ 2316.779009][ T7522] 8021q: adding VLAN 0 to HW filter on device bond67
[ 2317.332958][ T7541] netlink: 'syz.2.28157': attribute type 4 has an invalid length.
[ 2317.338671][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28157'.
[ 2317.373397][ T7543] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28158'.
[ 2317.410775][T26993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2317.420292][T26993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2317.427264][T26993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2317.430217][T26993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2317.432871][T26993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2317.466357][ T5001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2317.477362][ T5001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2317.481448][ T5001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2317.484629][ T5001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2317.495812][ T5001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2317.620366][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28159'.
[ 2317.626994][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28159'.
[ 2317.738655][ T7544] lo speed is unknown, defaulting to 1000
[ 2317.847217][ T7544] vlan0 speed is unknown, defaulting to 1000
[ 2318.002937][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2318.005442][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2318.007834][ T7544] bridge_slave_0: entered allmulticast mode
[ 2318.010897][ T7544] bridge_slave_0: entered promiscuous mode
[ 2318.014781][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2318.016992][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2318.019586][ T7544] bridge_slave_1: entered allmulticast mode
[ 2318.022640][ T7544] bridge_slave_1: entered promiscuous mode
[ 2318.044585][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2318.049965][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2318.071174][ T7544] team0: Port device team_slave_0 added
[ 2318.075109][ T7544] team0: Port device team_slave_1 added
[ 2318.093207][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2318.095760][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2318.103209][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2318.108188][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2318.110426][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2318.120858][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2318.153392][ T7544] hsr_slave_0: entered promiscuous mode
[ 2318.156246][ T7544] hsr_slave_1: entered promiscuous mode
[ 2318.356647][ T7544] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2318.365188][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2318.368850][ T7544] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2318.375465][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2318.379305][ T7544] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2318.388183][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2318.395603][ T7544] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2318.412187][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2318.447647][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2318.449822][ T7544] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2318.451978][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2318.454267][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2318.496463][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2318.505690][T25183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2318.508781][T25183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2318.519021][ T7544] 8021q: adding VLAN 0 to HW filter on device team0
[ 2318.532087][T25183] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2318.534331][T25183] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2318.542211][T17231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2318.544556][T17231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2318.710412][ T7611] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 2318.718547][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28165'.
[ 2318.782436][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2318.820214][ T7544] veth0_vlan: entered promiscuous mode
[ 2318.827119][ T7544] veth1_vlan: entered promiscuous mode
[ 2318.853399][ T7544] veth0_macvtap: entered promiscuous mode
[ 2318.860359][ T7544] veth1_macvtap: entered promiscuous mode
[ 2318.877479][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2318.885397][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2318.891962][ T5669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2318.896027][ T5669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2318.899496][ T5669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2318.902358][ T5669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2319.024080][T17231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2319.026587][T17231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2319.060681][T25785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2319.063394][T25785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2319.115728][ T7617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[ 2319.203353][ T7620] netlink: 'syz.3.28166': attribute type 1 has an invalid length.
[ 2319.240400][ T7622] netlink: 'syz.3.28167': attribute type 4 has an invalid length.
[ 2319.310161][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28169'.
[ 2319.367002][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28170'.
[ 2319.370642][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28170'.
[ 2319.554331][ T5001] Bluetooth: hci3: command tx timeout
[ 2319.772752][ T7660] Unsupported ieee802154 address type: 0
[ 2319.920774][ T7671] lo speed is unknown, defaulting to 1000
[ 2319.962762][ T7672] Unsupported ieee802154 address type: 0
[ 2320.045969][ T7671] vlan0 speed is unknown, defaulting to 1000
[ 2320.296638][ T7683] bond1: option all_slaves_active: invalid value (9)
[ 2320.300187][ T7683] bond1 (unregistering): Released all slaves
[ 2320.541363][ T7692] netlink: 'syz.1.28189': attribute type 1 has an invalid length.
[ 2320.725628][ T7703] bond68: option all_slaves_active: invalid value (9)
[ 2320.740581][ T7703] bond68 (unregistering): Released all slaves
[ 2321.131393][ T7727] can: request_module (can-proto-0) failed.
[ 2321.168961][ T7727] can: request_module (can-proto-0) failed.
[ 2321.202924][ T7727] can: request_module (can-proto-0) failed.
[ 2321.237352][ T7727] can: request_module (can-proto-0) failed.
[ 2321.259078][ T7727] can: request_module (can-proto-0) failed.
[ 2321.278174][ T7727] can: request_module (can-proto-0) failed.
[ 2321.305306][ T7727] can: request_module (can-proto-0) failed.
[ 2321.325796][ T7727] can: request_module (can-proto-0) failed.
[ 2321.347059][ T7727] can: request_module (can-proto-0) failed.
[ 2321.366399][ T7727] can: request_module (can-proto-0) failed.
[ 2321.634282][ T5001] Bluetooth: hci3: command tx timeout
[ 2322.018795][ T7800] netlink: 'syz.2.28210': attribute type 1 has an invalid length.
[ 2322.047950][ T7800] bond62: entered promiscuous mode
[ 2322.049836][ T7800] 8021q: adding VLAN 0 to HW filter on device bond62
[ 2322.115507][ T7809] __nla_validate_parse: 63 callbacks suppressed
[ 2322.115519][ T7809] netlink: 140 bytes leftover after parsing attributes in process `syz.3.28214'.
[ 2322.120123][ T7809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28214'.
[ 2322.876351][ T7821] netlink: 'syz.1.28216': attribute type 3 has an invalid length.
[ 2322.879010][ T7821] netlink: 'syz.1.28216': attribute type 3 has an invalid length.
[ 2322.882209][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28216'.
[ 2323.038283][ T7837] netlink: 'syz.3.28220': attribute type 1 has an invalid length.
[ 2323.109904][ T7842] vlan2: entered promiscuous mode
[ 2323.111499][ T7842] bridge0: entered promiscuous mode
[ 2323.129537][ T7844] lo speed is unknown, defaulting to 1000
[ 2323.152768][ T7842] netlink: 'syz.3.28221': attribute type 4 has an invalid length.
[ 2323.158531][ T7848] xt_TCPMSS: Only works on TCP SYN packets
[ 2323.303836][ T7856] netlink: 'syz.2.28227': attribute type 1 has an invalid length.
[ 2323.310838][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28226'.
[ 2323.335239][ T7856] bond63: entered promiscuous mode
[ 2323.337136][ T7856] 8021q: adding VLAN 0 to HW filter on device bond63
[ 2323.348330][ T7855] netlink: 'syz.3.28226': attribute type 5 has an invalid length.
[ 2323.366614][ T7844] vlan0 speed is unknown, defaulting to 1000
[ 2323.462028][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28230'.
[ 2323.541412][ T7874] tipc: Invalid UDP bearer configuration
[ 2323.541440][ T7874] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2323.607790][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28233'.
[ 2323.655092][ T7876] syzkaller1: entered promiscuous mode
[ 2323.656778][ T7876] syzkaller1: entered allmulticast mode
[ 2323.713917][ T5001] Bluetooth: hci3: command tx timeout
[ 2323.751679][ T7878] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28234'.
[ 2324.087865][ T7902] netlink: 'syz.1.28240': attribute type 1 has an invalid length.
[ 2324.104589][ T7902] bond68: entered promiscuous mode
[ 2324.106561][ T7902] 8021q: adding VLAN 0 to HW filter on device bond68
[ 2324.135072][ T7905] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.28241'.
[ 2324.186843][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28244'.
[ 2324.205805][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28244'.
[ 2324.306146][ T7922] sctp: [Deprecated]: syz.1.28249 (pid 7922) Use of int in max_burst socket option.
[ 2324.306146][ T7922] Use struct sctp_assoc_value instead
[ 2324.368537][ T7927] netlink: 'syz.2.28247': attribute type 1 has an invalid length.
[ 2324.769169][ T7959] lo speed is unknown, defaulting to 1000
[ 2324.863149][ T7959] vlan0 speed is unknown, defaulting to 1000
[ 2325.481365][ T7991] lo speed is unknown, defaulting to 1000
[ 2325.694683][ T7991] vlan0 speed is unknown, defaulting to 1000
[ 2325.764179][ T8003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2325.794659][ T5001] Bluetooth: hci3: command tx timeout
[ 2325.908905][ T8007] netlink: 'syz.1.28270': attribute type 1 has an invalid length.
[ 2325.935434][ T8007] bond69: entered promiscuous mode
[ 2325.937389][ T8007] 8021q: adding VLAN 0 to HW filter on device bond69
[ 2326.219845][ T8027] vlan0: entered promiscuous mode
[ 2326.334454][ T8037] syzkaller1: tun_chr_ioctl cmd 2147767520
[ 2326.578442][ T8048] IPv6: Can't replace route, no match found
[ 2327.162335][ T8098] __nla_validate_parse: 17 callbacks suppressed
[ 2327.162348][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28295'.
[ 2327.517408][ T8115] netlink: 'syz.3.28300': attribute type 4 has an invalid length.
[ 2328.095682][ T8137] netlink: 'syz.2.28305': attribute type 1 has an invalid length.
[ 2328.101801][ T8137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.28305'.
[ 2328.524047][T26993] Bluetooth: hci3: command 0x0405 tx timeout
[ 2328.770312][ T8163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2328.870870][ T8174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2328.874663][ T8174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2328.930797][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28315'.
[ 2328.934670][ T8179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.28315'.
[ 2329.035397][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28316'.
[ 2329.196223][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28316'.
[ 2329.199221][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28316'.
[ 2329.205806][ T8185] ip6gretap0: entered promiscuous mode
[ 2329.208839][ T8185] syz_tun: entered promiscuous mode
[ 2329.211126][ T8185] debugfs: 'hsr1' already exists in 'hsr'
[ 2329.212798][ T8185] Cannot create hsr debugfs directory
[ 2329.402776][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28318'.
[ 2329.469790][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28319'.
[ 2329.480901][ T8191] netlink: 'syz.1.28319': attribute type 7 has an invalid length.
[ 2329.550960][ T8172] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 2330.132262][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28330'.
[ 2330.249086][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2330.251615][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2330.317540][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2330.325905][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2330.392095][ T8230] netlink: 'syz.1.28331': attribute type 1 has an invalid length.
[ 2330.400945][ T8230] nbd: illegal input index 871591272
[ 2330.420250][ T8227] vlan2: left promiscuous mode
[ 2330.421795][ T8227] bridge0: left promiscuous mode
[ 2330.443513][T25309] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2330.446553][T25309] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2330.449387][T25309] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2330.451891][T25309] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2331.101496][ T8260] vlan3: entered allmulticast mode
[ 2331.105316][ T8260] macvtap0: entered allmulticast mode
[ 2331.261596][   T34] audit: type=1800 audit(1778613454.875:228): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28345" name="memory.events" dev="tmpfs" ino=48960 res=0 errno=0
[ 2331.437762][ T8298] lo: Caught tx_queue_len zero misconfig
[ 2331.637969][ T8313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2331.714272][T26993] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2331.722887][ T8322] netlink: 'syz.1.28359': attribute type 16 has an invalid length.
[ 2332.547034][ T8361] netlink: 'syz.3.28369': attribute type 4 has an invalid length.
[ 2332.552411][ T8361] __nla_validate_parse: 20 callbacks suppressed
[ 2332.552422][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28369'.
[ 2332.991027][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28374'.
[ 2333.051487][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28376'.
[ 2333.261968][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28380'.
[ 2333.329613][ T8401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28381'.
[ 2333.615626][ T8417] bond1: option all_slaves_active: invalid value (9)
[ 2333.618779][ T8417] bond1 (unregistering): Released all slaves
[ 2333.685338][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28386'.
[ 2333.738904][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28387'.
[ 2333.742534][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28387'.
[ 2333.745653][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28387'.
[ 2333.905508][ T8426] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28388'.
[ 2334.441876][ T8453] sctp: [Deprecated]: syz.3.28396 (pid 8453) Use of int in max_burst socket option.
[ 2334.441876][ T8453] Use struct sctp_assoc_value instead
[ 2334.756473][ T8474] block nbd3: server does not support multiple connections per device.
[ 2334.763371][ T8474] block nbd3: shutting down sockets
[ 2334.854140][ T8473] block nbd4: server does not support multiple connections per device.
[ 2334.857209][ T8473] block nbd4: shutting down sockets
[ 2335.026758][ T8490] --map-set only usable from mangle table
[ 2335.055284][ T8487] lo speed is unknown, defaulting to 1000
[ 2335.146473][ T8497] vlan0: entered promiscuous mode
[ 2335.205696][ T8487] vlan0 speed is unknown, defaulting to 1000
[ 2335.245790][ T8502] netlink: 'syz.2.28410': attribute type 13 has an invalid length.
[ 2335.462160][ T8507] netlink: 'syz.1.28412': attribute type 4 has an invalid length.
[ 2336.000864][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2336.146068][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2336.284839][ T8563] lo speed is unknown, defaulting to 1000
[ 2336.538258][ T8563] vlan0 speed is unknown, defaulting to 1000
[ 2337.439525][ T8611] netlink: 'syz.3.28438': attribute type 2 has an invalid length.
[ 2337.644430][ T8623] __nla_validate_parse: 18 callbacks suppressed
[ 2337.644443][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28435'.
[ 2340.429596][ T8611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2340.518714][ T8629] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28441'.
[ 2340.600010][ T8640] bond1: option all_slaves_active: invalid value (9)
[ 2340.602829][ T8640] bond1 (unregistering): Released all slaves
[ 2340.617737][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28441'.
[ 2340.621942][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28441'.
[ 2340.687919][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28446'.
[ 2340.721010][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28447'.
[ 2340.852531][ T8664] netlink: 'syz.1.28451': attribute type 1 has an invalid length.
[ 2340.869587][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28452'.
[ 2340.885736][ T8664] bond70: entered promiscuous mode
[ 2340.887939][ T8664] 8021q: adding VLAN 0 to HW filter on device bond70
[ 2341.015664][ T8672] netlink: 'syz.1.28454': attribute type 21 has an invalid length.
[ 2341.018228][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2341.020260][ T8672] IPv6: NLM_F_CREATE should be set when creating new route
[ 2341.022326][ T8672] IPv6: NLM_F_CREATE should be set when creating new route
[ 2341.024350][ T8672] IPv6: NLM_F_CREATE should be set when creating new route
[ 2341.028081][ T8672] netlink: 'syz.1.28454': attribute type 21 has an invalid length.
[ 2341.033695][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2341.066451][ T8672] lo speed is unknown, defaulting to 1000
[ 2341.179673][ T8672] vlan0 speed is unknown, defaulting to 1000
[ 2341.463502][ T8688] tipc: Trying to set illegal importance in message
[ 2341.552700][ T8690] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 2341.624789][ T8692] syzkaller0: entered promiscuous mode
[ 2341.626647][ T8692] syzkaller0: entered allmulticast mode
[ 2342.301790][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28465'.
[ 2342.370559][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28466'.
[ 2342.374980][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28467'.
[ 2342.436271][ T8721] lo speed is unknown, defaulting to 1000
[ 2342.539013][ T8728] netlink: 'syz.2.28469': attribute type 4 has an invalid length.
[ 2342.622501][ T8721] vlan0 speed is unknown, defaulting to 1000
[ 2342.690634][ T8737] bond64: option all_slaves_active: invalid value (9)
[ 2342.694936][ T8737] bond64 (unregistering): Released all slaves
[ 2342.789508][ T8743] netlink: 'syz.3.28474': attribute type 39 has an invalid length.
[ 2342.801400][ T8745] __nla_validate_parse: 1 callbacks suppressed
[ 2342.801413][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28475'.
[ 2342.860868][ T8748] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28476'.
[ 2343.006004][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2343.128690][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28479'.
[ 2343.185211][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28480'.
[ 2343.451900][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28482'.
[ 2343.656117][ T8780] macvtap1: entered promiscuous mode
[ 2343.658144][ T8780] team0: entered promiscuous mode
[ 2343.659935][ T8780] team_slave_0: entered promiscuous mode
[ 2343.662195][ T8780] team_slave_1: entered promiscuous mode
[ 2343.665646][ T8780] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 2343.667986][ T8780] team0: Device macvtap1 is already an upper device of the team interface
[ 2343.671690][ T8780] team0: left promiscuous mode
[ 2343.675798][ T8780] team_slave_0: left promiscuous mode
[ 2343.679964][ T8780] team_slave_1: left promiscuous mode
[ 2343.719839][ T8781] lo speed is unknown, defaulting to 1000
[ 2343.755615][ T8786] bond64: option all_slaves_active: invalid value (9)
[ 2343.758988][ T8786] bond64 (unregistering): Released all slaves
[ 2343.866628][ T8789] vlan0: entered promiscuous mode
[ 2343.876910][ T8781] vlan0 speed is unknown, defaulting to 1000
[ 2343.914614][ T8789] netlink: 'syz.2.28489': attribute type 4 has an invalid length.
[ 2344.911956][ T8839] bond71 (unregistering): Released all slaves
[ 2344.933974][ T8846] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28505'.
[ 2344.942309][ T8842] tunl0: Caught tx_queue_len zero misconfig
[ 2344.963186][ T8842] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2345.101866][ T8863] vlan0: entered promiscuous mode
[ 2345.161075][ T8863] netlink: 'syz.2.28508': attribute type 4 has an invalid length.
[ 2345.232728][ T8873] sctp: [Deprecated]: syz.2.28509 (pid 8873) Use of int in max_burst socket option.
[ 2345.232728][ T8873] Use struct sctp_assoc_value instead
[ 2345.282605][ T8879] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28510'.
[ 2345.451138][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28512'.
[ 2345.710473][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28516'.
[ 2345.887070][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28522'.
[ 2346.044388][ T8942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2346.047278][ T8942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2346.653151][ T8951] vlan0: entered promiscuous mode
[ 2346.971324][ T8977] syzkaller1: entered allmulticast mode
[ 2347.061890][ T8980] netlink: 'syz.1.28535': attribute type 4 has an invalid length.
[ 2347.185219][ T8993] bond1: option all_slaves_active: invalid value (9)
[ 2347.189520][ T8993] bond1 (unregistering): Released all slaves
[ 2347.304653][ T9001] sctp: [Deprecated]: syz.3.28541 (pid 9001) Use of int in max_burst socket option.
[ 2347.304653][ T9001] Use struct sctp_assoc_value instead
[ 2347.332577][ T8997] netlink: 'syz.1.28540': attribute type 4 has an invalid length.
[ 2347.406137][ T9006] lo speed is unknown, defaulting to 1000
[ 2347.531907][ T9006] vlan0 speed is unknown, defaulting to 1000
[ 2348.188065][ T9033] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 2348.193493][ T9033] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 2348.202131][ T9033] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 2348.215774][ T9033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 2348.262727][T31361] smbdirect: ib_dev[syz2] removed
[ 2348.374428][ T9040] netlink: 'syz.1.28548': attribute type 5 has an invalid length.
[ 2348.759687][ T9060] __nla_validate_parse: 3 callbacks suppressed
[ 2348.759699][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28555'.
[ 2349.470038][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2349.473331][ T9087] 8021q: adding VLAN 0 to HW filter on device team0
[ 2349.482389][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2349.524334][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2349.528693][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2349.536025][ T9087] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2349.546862][T20812] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2349.548992][T20812] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2349.552723][T20812] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2349.554852][T20812] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2349.616917][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28563'.
[ 2349.664993][ T9096] netlink: 'syz.3.28564': attribute type 4 has an invalid length.
[ 2349.716386][ T9099] netlink: 'syz.3.28565': attribute type 4 has an invalid length.
[ 2350.058496][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28570'.
[ 2350.067221][ T9116] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 2350.388688][ T9123] netlink: 292 bytes leftover after parsing attributes in process `syz.1.28571'.
[ 2350.395337][ T9123] tunl0: Caught tx_queue_len zero misconfig
[ 2350.758055][ T9128] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28573'.
[ 2351.113415][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28577'.
[ 2351.143119][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28578'.
[ 2351.212267][   T34] audit: type=1800 audit(1778613474.825:229): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28578" name="memory.events" dev="tmpfs" ino=49350 res=0 errno=0
[ 2351.321122][ T9149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28579'.
[ 2351.606302][ T9167] bond71: option all_slaves_active: invalid value (9)
[ 2351.615751][ T9167] bond71 (unregistering): Released all slaves
[ 2351.985330][ T9196] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28591'.
[ 2352.045817][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28592'.
[ 2352.107666][ T9202] bond1: option all_slaves_active: invalid value (9)
[ 2352.112321][ T9202] bond1 (unregistering): Released all slaves
[ 2352.266381][ T9220] netlink: 'syz.1.28596': attribute type 1 has an invalid length.
[ 2352.292795][ T9220] 8021q: adding VLAN 0 to HW filter on device bond71
[ 2352.330875][ T9225] nbd: must specify a size in bytes for the device
[ 2352.332950][ T9225] block nbd2: NBD_DISCONNECT
[ 2352.334574][ T9225] block nbd2: Send disconnect failed -32
[ 2352.336300][ T9225] block nbd2: shutting down sockets
[ 2355.245122][ T9230] syzkaller0: left promiscuous mode
[ 2355.252373][ T9230] syzkaller0: left allmulticast mode
[ 2355.349306][ T9248] __nla_validate_parse: 3 callbacks suppressed
[ 2355.349318][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28605'.
[ 2355.572509][ T9273] lo: Caught tx_queue_len zero misconfig
[ 2355.601772][ T9273] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2355.640276][ T9282] netlink: 'syz.3.28616': attribute type 4 has an invalid length.
[ 2355.671693][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28617'.
[ 2355.780509][ T9303] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 2355.840941][ T9309] netlink: 'syz.1.28624': attribute type 1 has an invalid length.
[ 2355.881621][ T9309] 8021q: adding VLAN 0 to HW filter on device bond72
[ 2355.890924][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28624'.
[ 2355.916449][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28625'.
[ 2355.933908][ T9316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28625'.
[ 2356.023272][ T9326] netlink: 277 bytes leftover after parsing attributes in process `syz.3.28629'.
[ 2356.057430][ T9322] syzkaller0: entered promiscuous mode
[ 2356.059758][ T9322] syzkaller0: entered allmulticast mode
[ 2356.062509][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28630'.
[ 2356.064254][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28630'.
[ 2357.014815][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28632'.
[ 2357.018735][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28632'.
[ 2358.910619][ T9348] bond1 (unregistering): Released all slaves
[ 2358.958329][ T9353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2360.238985][ T9405] netlink: 'syz.3.28648': attribute type 4 has an invalid length.
[ 2360.313245][ T9414] netlink: 'syz.3.28651': attribute type 4 has an invalid length.
[ 2360.339314][ T9416] netlink: 'syz.1.28652': attribute type 1 has an invalid length.
[ 2360.382295][ T9424] __nla_validate_parse: 5 callbacks suppressed
[ 2360.382305][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28654'.
[ 2360.899455][ T9449] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28661'.
[ 2360.907352][ T9448] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28661'.
[ 2361.213926][ T9460] xt_hashlimit: size too large, truncated to 1048576
[ 2361.264640][ T9465] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2361.268000][ T9465] syzkaller0: entered promiscuous mode
[ 2361.269930][ T9465] syzkaller0: entered allmulticast mode
[ 2361.446780][ T9475] sctp: [Deprecated]: syz.1.28668 (pid 9475) Use of int in max_burst socket option.
[ 2361.446780][ T9475] Use struct sctp_assoc_value instead
[ 2361.534861][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28669'.
[ 2361.547241][ T9479] netlink: 52 bytes leftover after parsing attributes in process `syz.1.28669'.
[ 2362.102576][ T9490] netlink: zone id is out of range
[ 2362.138579][ T9494] netlink: 'syz.3.28673': attribute type 1 has an invalid length.
[ 2362.154144][ T9494] bond1: entered promiscuous mode
[ 2362.155989][ T9494] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2362.230947][ T9499] netlink: 'syz.1.28675': attribute type 4 has an invalid length.
[ 2362.344172][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28677'.
[ 2362.389630][ T9516] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 2362.442640][ T9519] netlink: 'syz.1.28680': attribute type 4 has an invalid length.
[ 2362.515220][ T9531] netlink: 'syz.2.28679': attribute type 11 has an invalid length.
[ 2362.677029][ T9539] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[ 2362.677652][T26993] Bluetooth: hci3: link tx timeout
[ 2362.686052][T26993] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2362.695283][ T5001] Bluetooth: hci3: link tx timeout
[ 2362.697049][ T5001] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2362.699542][ T5001] Bluetooth: hci3: link tx timeout
[ 2362.701063][ T5001] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2362.755594][ T9542] lo speed is unknown, defaulting to 1000
[ 2362.774959][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28687'.
[ 2362.804088][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28688'.
[ 2362.964277][ T9559] : entered promiscuous mode
[ 2362.978596][ T9542] vlan0 speed is unknown, defaulting to 1000
[ 2363.074347][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28692'.
[ 2363.108277][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28691'.
[ 2363.290014][ T6418] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[ 2363.901997][ T9567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2364.120908][ T9605] netlink: 'syz.3.28698': attribute type 1 has an invalid length.
[ 2364.153395][ T9605] bond2: entered promiscuous mode
[ 2364.155645][ T9605] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2364.175472][ T9609] netlink: 'syz.1.28697': attribute type 1 has an invalid length.
[ 2364.477638][ T9630] netlink: 'syz.3.28706': attribute type 1 has an invalid length.
[ 2364.496444][ T9630] bond3: entered promiscuous mode
[ 2364.498324][ T9630] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2364.753843][ T5001] Bluetooth: hci3: command 0x0405 tx timeout
[ 2364.877819][ T9597] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2364.880421][ T9597] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 2365.046583][ T9641] pimreg: entered allmulticast mode
[ 2365.089510][ T9640] pimreg: left allmulticast mode
[ 2365.205373][ T9644] xt_hashlimit: size too large, truncated to 1048576
[ 2365.547747][ T9687] __nla_validate_parse: 11 callbacks suppressed
[ 2365.547759][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28721'.
[ 2365.637633][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28722'.
[ 2365.699053][   T34] audit: type=1800 audit(1778613489.315:230): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28722" name="memory.events" dev="tmpfs" ino=49639 res=0 errno=0
[ 2366.042688][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28730'.
[ 2366.144211][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28733'.
[ 2366.188331][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28735'.
[ 2366.194387][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2366.310294][ T9747] veth1_to_hsr: Caught tx_queue_len zero misconfig
[ 2366.454360][ T9755] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2366.561877][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28743'.
[ 2366.565566][ T9771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28743'.
[ 2366.571453][ T9771] netlink: 'syz.2.28743': attribute type 4 has an invalid length.
[ 2366.617350][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28744'.
[ 2366.756168][ T9782] bond64: option all_slaves_active: invalid value (9)
[ 2366.759471][ T9782] bond64 (unregistering): Released all slaves
[ 2366.841009][ T9785] netlink: 'syz.2.28747': attribute type 1 has an invalid length.
[ 2366.843891][ T9785] netlink: 'syz.2.28747': attribute type 1 has an invalid length.
[ 2366.882791][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28748'.
[ 2367.221824][ T9792] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28750'.
[ 2367.462737][ T9806] lo speed is unknown, defaulting to 1000
[ 2367.630999][ T9806] vlan0 speed is unknown, defaulting to 1000
[ 2368.547537][ T9831] lo speed is unknown, defaulting to 1000
[ 2368.550534][ T9836] netlink: 'syz.3.28764': attribute type 1 has an invalid length.
[ 2368.571630][ T9836] bond4: entered promiscuous mode
[ 2368.573454][ T9836] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2368.593033][ T9836] bond4: (slave bridge1): making interface the new active one
[ 2368.598551][ T9836] bridge1: entered promiscuous mode
[ 2368.601745][ T9836] bond4: (slave bridge1): Enslaving as an active interface with an up link
[ 2368.685980][ T9841] lo speed is unknown, defaulting to 1000
[ 2368.687803][ T9831] vlan0 speed is unknown, defaulting to 1000
[ 2368.876276][ T9841] vlan0 speed is unknown, defaulting to 1000
[ 2369.253944][ T9862] lo speed is unknown, defaulting to 1000
[ 2369.349557][ T9862] vlan0 speed is unknown, defaulting to 1000
[ 2369.615183][ T9882] netlink: 'syz.3.28774': attribute type 10 has an invalid length.
[ 2369.617885][ T9882] netlink: 'syz.3.28774': attribute type 10 has an invalid length.
[ 2369.620999][ T9882] netlink: 'syz.3.28774': attribute type 10 has an invalid length.
[ 2370.163921][ T9925] bond5: option all_slaves_active: invalid value (9)
[ 2370.168071][ T9925] bond5 (unregistering): Released all slaves
[ 2370.839172][ T9953] bond73: option all_slaves_active: invalid value (9)
[ 2370.842314][ T9953] bond73 (unregistering): Released all slaves
[ 2370.930382][ T9956] lo speed is unknown, defaulting to 1000
[ 2371.070435][ T9956] vlan0 speed is unknown, defaulting to 1000
[ 2371.207227][ T9977] netlink: 'syz.1.28795': attribute type 4 has an invalid length.
[ 2371.311270][ T9984] lo speed is unknown, defaulting to 1000
[ 2371.388146][ T9990] bond73: option all_slaves_active: invalid value (9)
[ 2371.391441][ T9990] bond73 (unregistering): Released all slaves
[ 2371.455720][ T9984] vlan0 speed is unknown, defaulting to 1000
[ 2371.488414][ T9993] __nla_validate_parse: 14 callbacks suppressed
[ 2371.488428][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28799'.
[ 2371.496863][ T9993] IPVS: set_ctl: invalid protocol: 196 172.30.0.2:20002
[ 2371.572577][ T9996] netlink: 'syz.1.28800': attribute type 4 has an invalid length.
[ 2371.625060][T10000] netlink: 460 bytes leftover after parsing attributes in process `syz.1.28801'.
[ 2371.633408][T10000] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[ 2371.855571][T10012] bond64: option all_slaves_active: invalid value (9)
[ 2371.911801][T10017] netlink: 'syz.1.28806': attribute type 21 has an invalid length.
[ 2371.932919][T10012] bond64 (unregistering): Released all slaves
[ 2372.502632][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28813'.
[ 2373.216881][T10103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28824'.
[ 2373.234256][T10111] lo speed is unknown, defaulting to 1000
[ 2373.381610][T10111] vlan0 speed is unknown, defaulting to 1000
[ 2373.690188][T10128] lo speed is unknown, defaulting to 1000
[ 2373.730121][T10130] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28830'.
[ 2373.797167][T10128] vlan0 speed is unknown, defaulting to 1000
[ 2373.984710][T10135] netlink: 'syz.1.28832': attribute type 4 has an invalid length.
[ 2374.025917][T10144] ref_ctr_offset mismatch. inode: 0x15e offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[ 2374.279109][T10164] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[ 2374.814738][T10186] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28845'.
[ 2374.824028][T10185] netlink: 277 bytes leftover after parsing attributes in process `syz.2.28845'.
[ 2374.977446][T10202] bond64: option all_slaves_active: invalid value (9)
[ 2374.981991][T10202] bond64 (unregistering): Released all slaves
[ 2376.293210][T10268] lo speed is unknown, defaulting to 1000
[ 2376.361930][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28866'.
[ 2376.367437][T10276] netlink: 'syz.3.28866': attribute type 4 has an invalid length.
[ 2376.492863][T10268] vlan0 speed is unknown, defaulting to 1000
[ 2376.690569][T10305] bond5: entered allmulticast mode
[ 2376.817384][T10310] TCP: TCP_TX_DELAY enabled
[ 2377.138214][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28879'.
[ 2377.141271][T10324] openvswitch: netlink: Invalid VLAN frame
[ 2377.488074][T10326] netlink: 'syz.1.28880': attribute type 4 has an invalid length.
[ 2377.604539][T10330] bond73: option all_slaves_active: invalid value (9)
[ 2377.609984][T10330] bond73 (unregistering): Released all slaves
[ 2377.919131][T10342] netlink: 'syz.1.28886': attribute type 4 has an invalid length.
[ 2378.198382][T10357] netlink: 'syz.2.28892': attribute type 4 has an invalid length.
[ 2378.341902][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28894'.
[ 2378.416538][T10373] bond64: option all_slaves_active: invalid value (9)
[ 2378.420006][T10373] bond64 (unregistering): Released all slaves
[ 2378.525521][T10376] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 2378.531334][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28895'.
[ 2378.619805][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28899'.
[ 2379.096841][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28904'.
[ 2379.252922][T10406] netlink: 'syz.3.28906': attribute type 4 has an invalid length.
[ 2379.509461][T10413] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[ 2379.589059][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28911'.
[ 2379.604705][T10428] netlink: 'syz.3.28912': attribute type 1 has an invalid length.
[ 2379.677240][T10433] netlink: 'syz.2.28915': attribute type 1 has an invalid length.
[ 2379.698396][T10433] bond64: entered promiscuous mode
[ 2379.700962][T10433] 8021q: adding VLAN 0 to HW filter on device bond64
[ 2379.725057][T10433] bond64: (slave bridge53): making interface the new active one
[ 2379.728231][T10433] bridge53: entered promiscuous mode
[ 2379.730885][T10433] bond64: (slave bridge53): Enslaving as an active interface with an up link
[ 2379.825918][T10452] netlink: 80 bytes leftover after parsing attributes in process `syz.3.28918'.
[ 2379.829351][T10453] netlink: 80 bytes leftover after parsing attributes in process `syz.3.28918'.
[ 2379.841287][T10452] netlink: 112 bytes leftover after parsing attributes in process `syz.3.28918'.
[ 2379.987906][T10470] netlink: 'syz.2.28923': attribute type 1 has an invalid length.
[ 2380.009346][T10470] bond65: entered promiscuous mode
[ 2380.011668][T10470] 8021q: adding VLAN 0 to HW filter on device bond65
[ 2380.035727][T10470] bond65: (slave bridge54): making interface the new active one
[ 2380.038150][T10470] bridge54: entered promiscuous mode
[ 2380.041102][T10470] bond65: (slave bridge54): Enslaving as an active interface with an up link
[ 2380.153383][T10477] vlan7: entered promiscuous mode
[ 2380.155856][T10477] team_slave_1: entered promiscuous mode
[ 2380.235187][T10488] netlink: 'syz.3.28928': attribute type 4 has an invalid length.
[ 2380.312077][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28930'.
[ 2380.597240][T10507] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2380.601694][T10514] netlink: 'syz.3.28933': attribute type 1 has an invalid length.
[ 2380.622252][T10514] bond6: entered promiscuous mode
[ 2380.626466][T10514] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2380.635143][T10507] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2380.655607][T10514] bond6: (slave bridge2): making interface the new active one
[ 2380.658010][T10514] bridge2: entered promiscuous mode
[ 2380.660718][T10514] bond6: (slave bridge2): Enslaving as an active interface with an up link
[ 2380.692727][T10507] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2380.733261][T10507] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2380.742941][T10520] netlink: 'syz.3.28935': attribute type 13 has an invalid length.
[ 2380.836073][ T6418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2380.842994][ T6418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2380.860405][ T6418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2380.894385][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2381.545830][T10552] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2382.326081][T10573] bond7: entered promiscuous mode
[ 2382.328137][T10573] 8021q: adding VLAN 0 to HW filter on device bond7
[ 2382.364494][T10573] bond7: (slave bridge3): making interface the new active one
[ 2382.367727][T10573] bridge3: entered promiscuous mode
[ 2382.370633][T10573] bond7: (slave bridge3): Enslaving as an active interface with an up link
[ 2382.416774][T10576] __nla_validate_parse: 4 callbacks suppressed
[ 2382.416785][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28950'.
[ 2382.420448][T10579] mac80211_hwsim hwsim158 syzkaller0: Caught tx_queue_len zero misconfig
[ 2382.543262][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28954'.
[ 2382.606950][   T34] audit: type=1800 audit(1778613506.225:231): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28954" name="memory.events" dev="tmpfs" ino=50019 res=0 errno=0
[ 2382.623383][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28954'.
[ 2382.631623][T10597] bridge4: entered promiscuous mode
[ 2382.710307][T10606] x_tables: duplicate underflow at hook 2
[ 2382.721821][T10606] Bluetooth: hci3: Opcode 0x0401 failed: -22
[ 2382.890120][T10608] macvtap0: entered promiscuous mode
[ 2382.894293][T10612] lo speed is unknown, defaulting to 1000
[ 2383.026978][T10622] xt_hashlimit: size too large, truncated to 1048576
[ 2383.131944][T10612] vlan0 speed is unknown, defaulting to 1000
[ 2383.140770][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28964'.
[ 2383.211677][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28964'.
[ 2383.226631][T10628] bond73: entered promiscuous mode
[ 2383.229290][T10628] 8021q: adding VLAN 0 to HW filter on device bond73
[ 2383.423277][T10638] bond74: option all_slaves_active: invalid value (9)
[ 2383.430895][T10638] bond74 (unregistering): Released all slaves
[ 2383.677069][T10646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.28970'.
[ 2383.825018][T10656] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28972'.
[ 2383.843053][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28973'.
[ 2384.345848][T10678] xt_hashlimit: size too large, truncated to 1048576
[ 2384.508107][T10687] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 2384.542558][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28980'.
[ 2384.571400][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28981'.
[ 2384.960977][T10706] x_tables: duplicate underflow at hook 2
[ 2385.030455][T10707] Bluetooth: hci3: Opcode 0x0401 failed: -22
[ 2385.717102][T10711] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2385.850809][T10729] validate_nla: 3 callbacks suppressed
[ 2385.850820][T10729] netlink: 'syz.3.28993': attribute type 1 has an invalid length.
[ 2385.871131][T10729] bond8: entered promiscuous mode
[ 2385.874635][T10729] 8021q: adding VLAN 0 to HW filter on device bond8
[ 2385.906182][T10729] bond8: (slave bridge5): making interface the new active one
[ 2385.911806][T10729] bridge5: entered promiscuous mode
[ 2385.920808][T10729] bond8: (slave bridge5): Enslaving as an active interface with an up link
[ 2386.000730][T10739] netlink: 'syz.3.28996': attribute type 4 has an invalid length.
[ 2386.608653][T10763] Bluetooth: MGMT ver 1.23
[ 2386.929369][T10774] netlink: 'syz.3.29006': attribute type 1 has an invalid length.
[ 2386.959159][T10774] bond9: entered promiscuous mode
[ 2386.962204][T10774] 8021q: adding VLAN 0 to HW filter on device bond9
[ 2386.995459][T10774] bond9: (slave bridge6): making interface the new active one
[ 2386.997909][T10774] bridge6: entered promiscuous mode
[ 2387.000874][T10774] bond9: (slave bridge6): Enslaving as an active interface with an up link
[ 2387.239599][T10799] vlan0: entered promiscuous mode
[ 2387.291883][T10800] netlink: 'syz.2.29013': attribute type 4 has an invalid length.
[ 2387.460017][T10810] __nla_validate_parse: 14 callbacks suppressed
[ 2387.460144][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29018'.
[ 2387.578469][T10809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2387.638110][T10823] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29022'.
[ 2387.781974][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29025'.
[ 2387.870841][T10836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29026'.
[ 2387.936052][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29029'.
[ 2388.101519][T10851] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 2388.108181][T10851] bond10 (unregistering): Released all slaves
[ 2388.160395][T10855] can_create: 26 callbacks suppressed
[ 2388.160413][T10855] can: request_module (can-proto-3) failed.
[ 2388.189141][T10859] netlink: 'syz.2.29031': attribute type 1 has an invalid length.
[ 2388.215258][T10859] bond66: entered promiscuous mode
[ 2388.217772][T10859] 8021q: adding VLAN 0 to HW filter on device bond66
[ 2388.244428][T10859] bond66: (slave bridge55): making interface the new active one
[ 2388.247524][T10859] bridge55: entered promiscuous mode
[ 2388.253031][T10859] bond66: (slave bridge55): Enslaving as an active interface with an up link
[ 2388.297121][T10862] netlink: 72 bytes leftover after parsing attributes in process `syz.3.29032'.
[ 2388.327149][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29033'.
[ 2388.346165][T10866] netlink: 'syz.3.29034': attribute type 1 has an invalid length.
[ 2388.375128][T10866] 8021q: adding VLAN 0 to HW filter on device bond10
[ 2388.469842][T10864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2388.681284][T10886] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29037'.
[ 2388.707525][T10888] sctp: [Deprecated]: syz.1.29039 (pid 10888) Use of int in max_burst socket option.
[ 2388.707525][T10888] Use struct sctp_assoc_value instead
[ 2388.732548][T10890] netlink: 'syz.2.29040': attribute type 1 has an invalid length.
[ 2388.777428][T10890] bond67: entered promiscuous mode
[ 2388.782687][T10890] 8021q: adding VLAN 0 to HW filter on device bond67
[ 2388.800402][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29041'.
[ 2388.841175][T10890] bond67: (slave bridge56): making interface the new active one
[ 2388.845040][T10890] bridge56: entered promiscuous mode
[ 2388.848253][T10890] bond67: (slave bridge56): Enslaving as an active interface with an up link
[ 2388.926403][T10905] netlink: 'syz.2.29044': attribute type 10 has an invalid length.
[ 2388.954465][T10910] netlink: 34 bytes leftover after parsing attributes in process `syz.1.29046'.
[ 2389.458086][T10931] xt_hashlimit: size too large, truncated to 1048576
[ 2389.867727][T10947] netlink: 'syz.3.29056': attribute type 13 has an invalid length.
[ 2389.904318][T10947] mac80211_hwsim hwsim158 syzkaller0: Caught tx_queue_len zero misconfig
[ 2390.205520][T10980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2390.208525][T10980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2390.220292][T10981] lo speed is unknown, defaulting to 1000
[ 2390.327586][T10981] vlan0 speed is unknown, defaulting to 1000
[ 2390.808939][T10988] bridge45: the hash_elasticity option has been deprecated and is always 16
[ 2390.812411][T10988] bridge45: entered allmulticast mode
[ 2390.960429][T10992] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2391.099563][T11006] netlink: 'syz.2.29074': attribute type 4 has an invalid length.
[ 2391.243409][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2391.831118][T11033] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2391.835138][T11033] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2392.179503][T11043] netlink: 'syz.1.29084': attribute type 3 has an invalid length.
[ 2393.068573][T11079] __nla_validate_parse: 12 callbacks suppressed
[ 2393.068589][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29088'.
[ 2393.138616][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29090'.
[ 2393.148189][   T34] audit: type=1800 audit(1778613516.765:232): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29088" name="memory.events" dev="tmpfs" ino=49832 res=0 errno=0
[ 2393.243068][T11089] netlink: 'syz.1.29091': attribute type 4 has an invalid length.
[ 2393.256095][T11098] x_tables: duplicate underflow at hook 2
[ 2393.264817][T11100] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 2393.270700][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29094'.
[ 2393.277542][T11098] Bluetooth: hci3: Opcode 0x0401 failed: -22
[ 2393.341968][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29095'.
[ 2393.474096][T11121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2393.486692][T11120] lo speed is unknown, defaulting to 1000
[ 2393.518991][T11125] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.29098'.
[ 2393.671005][T11132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2393.755265][T11132] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2393.765023][T11120] vlan0 speed is unknown, defaulting to 1000
[ 2393.939191][T11143] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2394.004174][T11149] lo speed is unknown, defaulting to 1000
[ 2394.006670][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29106'.
[ 2394.112927][T11149] vlan0 speed is unknown, defaulting to 1000
[ 2394.304655][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29108'.
[ 2394.471434][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29108'.
[ 2394.492709][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29108'.
[ 2394.497441][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29108'.
[ 2394.956499][T11167] lo speed is unknown, defaulting to 1000
[ 2395.082866][T11167] vlan0 speed is unknown, defaulting to 1000
[ 2395.403445][T11184] x_tables: duplicate underflow at hook 2
[ 2395.473164][T11191] Bluetooth: hci3: Opcode 0x0401 failed: -22
[ 2395.544494][T11194] netlink: 'syz.2.29118': attribute type 1 has an invalid length.
[ 2395.553059][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2396.009450][T11237] netlink: 'syz.1.29123': attribute type 4 has an invalid length.
[ 2396.317867][T11257] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2396.448404][T11272] lo speed is unknown, defaulting to 1000
[ 2396.561659][T11272] vlan0 speed is unknown, defaulting to 1000
[ 2396.969744][T11295] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2397.242794][T11310] netlink: 'syz.3.29143': attribute type 1 has an invalid length.
[ 2397.350664][   T34] audit: type=1800 audit(1778613520.965:233): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.29145" name="memory.events" dev="tmpfs" ino=50364 res=0 errno=0
[ 2397.392245][T11317] syzkaller0: mtu less than device minimum
[ 2397.403419][T11317] mac80211_hwsim hwsim158 syzkaller0: entered promiscuous mode
[ 2397.415937][T11317] mac80211_hwsim hwsim158 syzkaller0: entered allmulticast mode
[ 2398.500098][T11387] sctp: [Deprecated]: syz.3.29165 (pid 11387) Use of int in max_burst socket option.
[ 2398.500098][T11387] Use struct sctp_assoc_value instead
[ 2398.533808][T11389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2398.589459][T11389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2398.730052][T11401] __nla_validate_parse: 17 callbacks suppressed
[ 2398.730066][T11401] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29169'.
[ 2398.868982][   T34] audit: type=1800 audit(1778613522.485:234): pid=11406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29170" name="memory.events" dev="tmpfs" ino=49994 res=0 errno=0
[ 2398.918513][T11411] netlink: 'syz.2.29172': attribute type 1 has an invalid length.
[ 2398.936684][T11411] bond68: entered promiscuous mode
[ 2398.938515][T11411] 8021q: adding VLAN 0 to HW filter on device bond68
[ 2398.952796][T11411] bond68: (slave bridge57): making interface the new active one
[ 2398.955812][T11411] bridge57: entered promiscuous mode
[ 2398.958685][T11411] bond68: (slave bridge57): Enslaving as an active interface with an up link
[ 2398.999149][T11414] netlink: 'syz.1.29173': attribute type 4 has an invalid length.
[ 2399.028382][T11422] ip6gre0: entered allmulticast mode
[ 2399.154977][T11434] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29178'.
[ 2399.165910][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29179'.
[ 2399.198157][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29180'.
[ 2399.285648][T11443] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29181'.
[ 2399.430159][T11440] ip6gre0: left allmulticast mode
[ 2399.781835][T11440] macvtap0: left promiscuous mode
[ 2399.834926][T11440] bond62: left promiscuous mode
[ 2399.922808][T11440] bond63: left promiscuous mode
[ 2399.938551][T11440] bond64: left promiscuous mode
[ 2399.943781][T11440] bridge53: left promiscuous mode
[ 2399.960688][T11440] bond65: left promiscuous mode
[ 2399.963334][T11440] bridge54: left promiscuous mode
[ 2400.016448][T11440] bond66: left promiscuous mode
[ 2400.019971][T11440] bridge55: left promiscuous mode
[ 2400.101253][T11440] bond67: left promiscuous mode
[ 2400.103692][T11440] bridge56: left promiscuous mode
[ 2400.123745][T11440] bond68: left promiscuous mode
[ 2400.126811][T11440] bridge57: left promiscuous mode
[ 2400.147110][ T4648] lo speed is unknown, defaulting to 1000
[ 2400.152149][ T4648] sqz0: Port: 1 Link DOWN
[ 2400.197631][T31000] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2400.204101][T31000] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2400.211974][ T4648] lo speed is unknown, defaulting to 1000
[ 2400.214243][T31000] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2400.218592][T31000] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2400.307349][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29186'.
[ 2400.348752][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29186'.
[ 2400.351799][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29186'.
[ 2400.395977][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29186'.
[ 2400.780062][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29197'.
[ 2400.847907][   T34] audit: type=1800 audit(1778613524.465:235): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29197" name="memory.events" dev="tmpfs" ino=1808 res=0 errno=0
[ 2401.002236][T11508] netlink: 'syz.3.29199': attribute type 1 has an invalid length.
[ 2401.020719][T11508] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2401.175521][T11518] netlink: 'syz.1.29202': attribute type 4 has an invalid length.
[ 2401.276604][T25754] IPVS: starting estimator thread 0...
[ 2401.364717][T11530] IPVS: using max 64 ests per chain, 153600 per kthread
[ 2401.445262][T11545] netlink: 'syz.2.29209': attribute type 1 has an invalid length.
[ 2401.679392][T11567] netlink: 'syz.2.29214': attribute type 13 has an invalid length.
[ 2401.865101][T11583] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2401.870392][T11587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2402.042272][T11597] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2402.440399][T11628] netlink: 'syz.3.29233': attribute type 19 has an invalid length.
[ 2403.369840][T11673] hm3): entered promiscuous mode
[ 2403.632861][T11693] netlink: 'syz.1.29251': attribute type 1 has an invalid length.
[ 2403.661547][T11693] bond74: entered promiscuous mode
[ 2403.665059][T11693] 8021q: adding VLAN 0 to HW filter on device bond74
[ 2403.668193][T11696] netlink: 'syz.3.29252': attribute type 4 has an invalid length.
[ 2403.702158][T11693] bond74: (slave bridge47): making interface the new active one
[ 2403.707379][T11693] bridge47: entered promiscuous mode
[ 2403.711134][T11693] bond74: (slave bridge47): Enslaving as an active interface with an up link
[ 2403.741386][T11698] bond69: entered promiscuous mode
[ 2403.752738][T11698] vcan1: entered promiscuous mode
[ 2403.756658][T11698] vcan1: entered allmulticast mode
[ 2403.759484][T11698] bond69: (slave vcan1): The slave device specified does not support setting the MAC address
[ 2403.764705][T11698] bond69: (slave vcan1): Error -95 calling set_mac_address
[ 2403.871584][T11714] __nla_validate_parse: 19 callbacks suppressed
[ 2403.871596][T11714] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29257'.
[ 2403.881419][T11715] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29257'.
[ 2403.918177][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29259'.
[ 2403.957046][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29260'.
[ 2404.125186][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29266'.
[ 2404.129641][T11738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29266'.
[ 2404.129791][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29266'.
[ 2404.136877][T11739] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29266'.
[ 2404.139858][T11738] vti1: entered promiscuous mode
[ 2404.147581][T11738] netlink: 'syz.3.29266': attribute type 4 has an invalid length.
[ 2404.167456][T11740] syzkaller0: left promiscuous mode
[ 2404.170690][T11740] syzkaller0: left allmulticast mode
[ 2404.454605][T11753] netlink: 'syz.3.29267': attribute type 1 has an invalid length.
[ 2404.582418][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29269'.
[ 2404.723252][T11760] netlink: 'syz.2.29271': attribute type 1 has an invalid length.
[ 2404.740642][T11760] bond70: entered promiscuous mode
[ 2404.743074][T11760] 8021q: adding VLAN 0 to HW filter on device bond70
[ 2404.773886][T11760] bond70: (slave bridge59): making interface the new active one
[ 2404.776742][T11760] bridge59: entered promiscuous mode
[ 2404.780113][T11760] bond70: (slave bridge59): Enslaving as an active interface with an up link
[ 2405.043277][T11768] syzkaller0: entered promiscuous mode
[ 2405.047321][T11768] syzkaller0: entered allmulticast mode
[ 2405.232146][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29274'.
[ 2405.392774][T11796] tipc: Resetting bearer <eth:syzkaller0>
[ 2405.399183][T11796] syzkaller0: entered promiscuous mode
[ 2405.714684][T11822] 8021q: VLANs not supported on ip6tnl0
[ 2405.781776][T11827] netlink: 'syz.3.29289': attribute type 4 has an invalid length.
[ 2405.892295][T11833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2406.384701][T11853] vlan0: entered promiscuous mode
[ 2406.456931][T11853] netlink: 'syz.2.29295': attribute type 4 has an invalid length.
[ 2406.592266][T11862] netlink: 'syz.1.29297': attribute type 4 has an invalid length.
[ 2406.681088][T11871] syzkaller0: entered allmulticast mode
[ 2407.155089][T11905] xt_socket: unknown flags 0x50
[ 2407.317867][T11914] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2407.478221][T11932] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[ 2407.620446][T11942] lo speed is unknown, defaulting to 1000
[ 2407.735291][T11942] vlan0 speed is unknown, defaulting to 1000
[ 2408.509142][T11960] Bluetooth: hci1: Opcode 0x0c1a failed: -22
[ 2408.778982][T11955] vlan0: entered promiscuous mode
[ 2409.271749][T11965] netlink: 'syz.2.29319': attribute type 4 has an invalid length.
[ 2409.371514][T11983] netlink: 'syz.3.29325': attribute type 1 has an invalid length.
[ 2409.372733][T11984] __nla_validate_parse: 11 callbacks suppressed
[ 2409.372743][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29326'.
[ 2409.397964][T11983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2409.597336][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29326'.
[ 2409.598877][T12000] netlink: 'syz.3.29330': attribute type 4 has an invalid length.
[ 2409.637860][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29326'.
[ 2409.642415][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29326'.
[ 2409.871462][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2410.198921][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29338'.
[ 2410.273262][T12041] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29339'.
[ 2410.409564][T12045] syz.1.29340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2410.414959][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.1.29340 Not tainted syzkaller #0 PREEMPT(full) 
[ 2410.414979][T12045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2410.414987][T12045] Call Trace:
[ 2410.414992][T12045]  <TASK>
[ 2410.414996][T12045]  dump_stack_lvl+0xe8/0x150
[ 2410.415013][T12045]  warn_alloc+0x249/0x340
[ 2410.415027][T12045]  ? stack_trace_save+0xa9/0x100
[ 2410.415042][T12045]  ? __pfx_warn_alloc+0x10/0x10
[ 2410.415057][T12045]  ? kasan_save_track+0x4f/0x80
[ 2410.415067][T12045]  ? kasan_save_track+0x3e/0x80
[ 2410.415077][T12045]  ? __kasan_kmalloc+0x93/0xb0
[ 2410.415088][T12045]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 2410.415100][T12045]  ? xskq_create+0x56/0x170
[ 2410.415111][T12045]  ? xsk_setsockopt+0x54c/0x990
[ 2410.415121][T12045]  ? do_sock_setsockopt+0x17c/0x1b0
[ 2410.415133][T12045]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 2410.415145][T12045]  ? do_syscall_64+0x15f/0xf80
[ 2410.415155][T12045]  __vmalloc_node_range_noprof+0x132/0x1750
[ 2410.415180][T12045]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 2410.415195][T12045]  ? __kasan_kmalloc+0x93/0xb0
[ 2410.415208][T12045]  vmalloc_user_noprof+0xad/0xe0
[ 2410.415220][T12045]  ? xskq_create+0xbf/0x170
[ 2410.415231][T12045]  xskq_create+0xbf/0x170
[ 2410.415243][T12045]  xsk_init_queue+0x8a/0xe0
[ 2410.415255][T12045]  xsk_setsockopt+0x54c/0x990
[ 2410.415266][T12045]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2410.415277][T12045]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2410.415289][T12045]  ? aa_sock_opt_perm+0xff/0x1a0
[ 2410.415302][T12045]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 2410.415313][T12045]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2410.415324][T12045]  do_sock_setsockopt+0x17c/0x1b0
[ 2410.415339][T12045]  __x64_sys_setsockopt+0x13d/0x1b0
[ 2410.415352][T12045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2410.415361][T12045]  do_syscall_64+0x15f/0xf80
[ 2410.415369][T12045]  ? trace_irq_disable+0x3b/0x140
[ 2410.415384][T12045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2410.415392][T12045] RIP: 0033:0x7f270499cdd9
[ 2410.415401][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2410.415408][T12045] RSP: 002b:00007f27057ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2410.415418][T12045] RAX: ffffffffffffffda RBX: 00007f2704c15fa0 RCX: 00007f270499cdd9
[ 2410.415424][T12045] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 2410.415429][T12045] RBP: 00007f2704a32d69 R08: 0000000000000004 R09: 0000000000000000
[ 2410.415434][T12045] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2410.415440][T12045] R13: 00007f2704c16038 R14: 00007f2704c15fa0 R15: 00007ffc4a8713e8
[ 2410.415487][T12045]  </TASK>
[ 2410.415492][T12045] Mem-Info:
[ 2410.507007][T12045] active_anon:21685 inactive_anon:3 isolated_anon:0
[ 2410.507007][T12045]  active_file:13313 inactive_file:40888 isolated_file:0
[ 2410.507007][T12045]  unevictable:1768 dirty:73 writeback:0
[ 2410.507007][T12045]  slab_reclaimable:16862 slab_unreclaimable:148182
[ 2410.507007][T12045]  mapped:23485 shmem:2357 pagetables:3324
[ 2410.507007][T12045]  sec_pagetables:0 bounce:0
[ 2410.507007][T12045]  kernel_misc_reclaimable:0
[ 2410.507007][T12045]  free:1010887 free_pcp:21916 free_cma:0
[ 2410.520614][T12045] Node 0 active_anon:34992kB inactive_anon:0kB active_file:24828kB inactive_file:134712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52580kB dirty:120kB writeback:0kB shmem:4572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:10624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2410.530866][T12045] Node 1 active_anon:51748kB inactive_anon:12kB active_file:28424kB inactive_file:28840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41360kB dirty:172kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2410.541269][T12045] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2410.550026][T12045] lowmem_reserve[]: 0 1587 2117 2117 2117
[ 2410.551793][T12045] Node 0 DMA32 free:1276808kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26548kB inactive_anon:0kB active_file:18384kB inactive_file:888kB unevictable:0kB writepending:24kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:32728kB local_pcp:17612kB free_cma:0kB
[ 2410.561656][T12045] lowmem_reserve[]: 0 0 530 530 530
[ 2410.563375][T12045] Node 0 Normal free:10504kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8444kB inactive_anon:0kB active_file:6444kB inactive_file:133824kB unevictable:3536kB writepending:96kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:3884kB local_pcp:2456kB free_cma:0kB
[ 2410.573715][T12045] lowmem_reserve[]: 0 0 0 0 0
[ 2410.575650][T12045] Node 1 Normal free:2740876kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51748kB inactive_anon:12kB active_file:28424kB inactive_file:28840kB unevictable:3536kB writepending:172kB zspages:8kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:51052kB local_pcp:34792kB free_cma:0kB
[ 2410.586839][T12045] lowmem_reserve[]: 0 0 0 0 0
[ 2410.588269][T12045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2410.592002][T12045] Node 0 DMA32: 1014*4kB (UME) 584*8kB (U) 1015*16kB (UM) 446*32kB (UME) 779*64kB (UME) 615*128kB (UME) 388*256kB (UM) 290*512kB (UME) 237*1024kB (UME) 106*2048kB (UME) 98*4096kB (UM) = 1276808kB
[ 2410.598046][T12045] Node 0 Normal: 110*4kB (UME) 262*8kB (UM) 310*16kB (UM) 38*32kB (M) 10*64kB (M) 7*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10504kB
[ 2410.602631][T12045] Node 1 Normal: 897*4kB (U) 3279*8kB (UME) 4145*16kB (U) 1934*32kB (UE) 2357*64kB (UME) 1612*128kB (UM) 894*256kB (UM) 502*512kB (UM) 345*1024kB (UME) 129*2048kB (UM) 274*4096kB (UM) = 2740876kB
[ 2410.608325][T12045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2410.611193][T12045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2410.614023][T12045] 56561 total pagecache pages
[ 2410.615377][T12045] 1 pages in swap cache
[ 2410.616588][T12045] Free swap  = 124976kB
[ 2410.617802][T12045] Total swap = 124996kB
[ 2410.619002][T12045] 1834877 pages RAM
[ 2410.620142][T12045] 0 pages HighMem/MovableOnly
[ 2410.621549][T12045] 390269 pages reserved
[ 2410.622759][T12045] 0 pages cma reserved
[ 2410.839494][T12052] netlink: 'syz.2.29343': attribute type 1 has an invalid length.
[ 2410.864525][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29344'.
[ 2410.868173][T12052] bond71: entered promiscuous mode
[ 2410.870379][T12052] 8021q: adding VLAN 0 to HW filter on device bond71
[ 2410.886256][T12052] ipvlan1: entered allmulticast mode
[ 2410.887914][T12052] bond71: entered allmulticast mode
[ 2410.896009][T12053] ipvlan2: entered allmulticast mode
[ 2410.919042][T12052] bond71: (slave bridge60): making interface the new active one
[ 2410.921820][T12052] bridge60: entered promiscuous mode
[ 2410.923899][T12052] bridge60: entered allmulticast mode
[ 2410.927290][T12052] bond71: (slave bridge60): Enslaving as an active interface with an up link
[ 2411.817295][T12086] netlink: 'syz.2.29351': attribute type 3 has an invalid length.
[ 2412.260534][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29353'.
[ 2412.554835][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29356'.
[ 2412.558518][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29356'.
[ 2412.768212][T12096] tipc: Resetting bearer <eth:syzkaller0>
[ 2412.774816][T12096] syzkaller0: left promiscuous mode
[ 2412.777501][T12096] syzkaller0: left allmulticast mode
[ 2412.788288][T12096] bond60: left promiscuous mode
[ 2412.791503][T12096] bridge38: left promiscuous mode
[ 2412.809309][T12096] bond61: left promiscuous mode
[ 2412.816078][T12096] bond62: left promiscuous mode
[ 2412.819206][T12096] bridge39: left promiscuous mode
[ 2412.834031][T12096] bond63: left promiscuous mode
[ 2412.837462][T12096] bridge40: left promiscuous mode
[ 2412.880318][T12096] bridge42: left promiscuous mode
[ 2412.884725][T12096] bridge42: left allmulticast mode
[ 2412.889577][T12096] bond65: left promiscuous mode
[ 2412.899542][T12096] bond66: left promiscuous mode
[ 2412.910579][T12096] bond67: left promiscuous mode
[ 2412.914832][T12096] bond68: left promiscuous mode
[ 2412.918149][T12096] bond69: left promiscuous mode
[ 2412.922626][T12096] bond70: left promiscuous mode
[ 2412.949472][T12096] vlan7: left promiscuous mode
[ 2412.954123][T12096] team_slave_1: left promiscuous mode
[ 2412.959817][T12096] bond73: left promiscuous mode
[ 2412.970792][T12096] bridge45: left allmulticast mode
[ 2412.972961][T12096] bond74: left promiscuous mode
[ 2412.977720][T12096] bridge47: left promiscuous mode
[ 2413.035998][T12098] 8021q: VLANs not supported on vcan0
[ 2413.056423][T31000] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2413.063901][T31000] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2413.066771][T31000] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2413.071595][T31000] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2413.087579][T12116] netlink: 'syz.2.29359': attribute type 1 has an invalid length.
[ 2413.436450][T12144] bridge0: port 3(veth0_virt_wifi) entered blocking state
[ 2413.438681][T12144] bridge0: port 3(veth0_virt_wifi) entered disabled state
[ 2413.441084][T12144] veth0_virt_wifi: entered allmulticast mode
[ 2413.444227][T12144] veth0_virt_wifi: entered promiscuous mode
[ 2413.446343][T12144] bridge0: port 3(veth0_virt_wifi) entered blocking state
[ 2413.449045][T12144] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[ 2413.516061][T12154] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2413.741092][T12174] lo speed is unknown, defaulting to 1000
[ 2413.902731][T12174] vlan0 speed is unknown, defaulting to 1000
[ 2413.941071][T12186] sctp: [Deprecated]: syz.1.29376 (pid 12186) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2413.941071][T12186] Use struct sctp_sack_info instead
[ 2414.606781][T12213] __nla_validate_parse: 4 callbacks suppressed
[ 2414.606800][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29384'.
[ 2414.852096][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29387'.
[ 2414.920986][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29390'.
[ 2414.956644][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29391'.
[ 2415.035119][T12234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2415.042950][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29389'.
[ 2415.185308][T12249] netlink: 'syz.3.29394': attribute type 4 has an invalid length.
[ 2415.229403][T12251] netlink: 'syz.3.29395': attribute type 1 has an invalid length.
[ 2415.243354][T12251] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2415.281171][T12254] netlink: 'syz.3.29396': attribute type 1 has an invalid length.
[ 2415.296626][T12254] bond13: entered promiscuous mode
[ 2415.300178][T12254] 8021q: adding VLAN 0 to HW filter on device bond13
[ 2415.318662][T12254] bond13: (slave bridge7): making interface the new active one
[ 2415.321926][T12254] bridge7: entered promiscuous mode
[ 2415.324719][T12254] bond13: (slave bridge7): Enslaving as an active interface with an up link
[ 2415.499417][T12261] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 2415.533305][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29400'.
[ 2415.580922][T12266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29401'.
[ 2415.806619][T12274] netlink: 460 bytes leftover after parsing attributes in process `syz.3.29404'.
[ 2415.823420][T12278] netlink: 'syz.1.29405': attribute type 1 has an invalid length.
[ 2415.832828][T12278] netlink: 228 bytes leftover after parsing attributes in process `syz.1.29405'.
[ 2415.866805][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29407'.
[ 2415.973251][T12295] netlink: 'syz.1.29411': attribute type 4 has an invalid length.
[ 2416.171394][T12310] netlink: 'syz.3.29415': attribute type 4 has an invalid length.
[ 2416.207574][T12315] "syz.2.29418" (12315) uses obsolete ecb(arc4) skcipher
[ 2416.414950][T12323] veth1_to_bond: entered allmulticast mode
[ 2417.185545][T12321] veth1_to_bond: left allmulticast mode
[ 2417.362838][T12344] vlan0: entered promiscuous mode
[ 2417.444197][T12344] netlink: 'syz.2.29427': attribute type 4 has an invalid length.
[ 2417.447637][T12353] syzkaller0: entered promiscuous mode
[ 2417.449688][T12353] syzkaller0: entered allmulticast mode
[ 2417.833468][T12378] syz_tun: entered allmulticast mode
[ 2417.848641][T12377] syz_tun: left allmulticast mode
[ 2418.021671][T12400] syzkaller0: entered promiscuous mode
[ 2418.024444][T12400] syzkaller0: entered allmulticast mode
[ 2418.414828][T12426] netlink: 'syz.1.29448': attribute type 2 has an invalid length.
[ 2418.429742][T12426] netlink: 'syz.1.29448': attribute type 2 has an invalid length.
[ 2418.442544][T12427] bond14: entered promiscuous mode
[ 2418.445122][T12427] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2418.477257][T12427] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2418.479746][T12427] bond14: (slave sit2): The slave device specified does not support setting the MAC address
[ 2418.483325][T12427] bond14: (slave sit2): Error -95 calling set_mac_address
[ 2418.571792][T12435] netlink: 'syz.1.29451': attribute type 21 has an invalid length.
[ 2418.744466][T12440] lo speed is unknown, defaulting to 1000
[ 2418.847195][T12440] vlan0 speed is unknown, defaulting to 1000
[ 2419.752601][T12482] __nla_validate_parse: 149 callbacks suppressed
[ 2419.752615][T12482] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.29463'.
[ 2419.758670][T12476] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2419.764337][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2419.805471][T12476] veth0_macvtap: left promiscuous mode
[ 2419.810490][T12476] veth0_macvtap: entered promiscuous mode
[ 2419.821809][T12476] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2419.827724][T18596] lo speed is unknown, defaulting to 1000
[ 2419.832675][T18596] sqz0: Port: 1 Link ACTIVE
[ 2419.848222][ T6418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.854360][ T6418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.864032][T18596] lo speed is unknown, defaulting to 1000
[ 2419.869878][ T6418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.876800][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.941240][T12492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2419.945045][T12492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2419.995315][T12494] tipc: Resetting bearer <eth:vlan0>
[ 2420.002491][T12494] tipc: Resetting bearer <eth:syzkaller0>
[ 2420.048263][T18596] vlan0 speed is unknown, defaulting to 1000
[ 2420.199317][T12499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29470'.
[ 2420.251233][T12499] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:0
[ 2420.254523][T12499] IPVS: set_ctl: invalid protocol: 127 172.20.20.170:0
[ 2420.530380][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29472'.
[ 2420.539294][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29472'.
[ 2420.601015][   T34] audit: type=1800 audit(1778613544.215:236): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29472" name="memory.events" dev="tmpfs" ino=50465 res=0 errno=0
[ 2420.607414][T12509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29472'.
[ 2420.700228][T12513] netlink: 52 bytes leftover after parsing attributes in process `syz.2.29473'.
[ 2420.935344][T12524] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 2420.938831][T12524] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 2420.941766][T12524] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 2420.945677][T12524] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 2420.948650][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29476'.
[ 2421.000536][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29477'.
[ 2421.119499][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29478'.
[ 2421.125131][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29478'.
[ 2421.713493][T12544] lo speed is unknown, defaulting to 1000
[ 2421.864919][T12544] vlan0 speed is unknown, defaulting to 1000
[ 2422.256519][   T34] audit: type=1800 audit(1778613545.875:237): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29483" name="memory.events" dev="tmpfs" ino=2344 res=0 errno=0
[ 2422.562112][T12569] syzkaller0: entered promiscuous mode
[ 2422.600654][T12569] syzkaller0: entered allmulticast mode
[ 2423.657637][T12605] Cannot find del_set index 4 as target
[ 2424.359629][T12619] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2424.480862][T12630] validate_nla: 194 callbacks suppressed
[ 2424.480877][T12630] netlink: 'syz.1.29506': attribute type 4 has an invalid length.
[ 2424.832194][T12653] vlan0: entered promiscuous mode
[ 2424.861419][T12655] netlink: 'syz.1.29515': attribute type 21 has an invalid length.
[ 2424.890267][T12653] netlink: 'syz.2.29514': attribute type 4 has an invalid length.
[ 2424.947935][T12660] __nla_validate_parse: 11 callbacks suppressed
[ 2424.947947][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29517'.
[ 2425.165588][T12671] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 2425.223112][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29522'.
[ 2425.271835][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29524'.
[ 2425.281661][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29524'.
[ 2425.493289][T12703] lo speed is unknown, defaulting to 1000
[ 2425.566507][T12712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2425.656445][T12703] vlan0 speed is unknown, defaulting to 1000
[ 2425.663026][T12718] sctp: [Deprecated]: syz.1.29533 (pid 12718) Use of int in max_burst socket option.
[ 2425.663026][T12718] Use struct sctp_assoc_value instead
[ 2425.861302][T12730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29537'.
[ 2425.975754][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29540'.
[ 2426.153214][T12751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29543'.
[ 2426.500901][T12774] netlink: 'syz.1.29550': attribute type 4 has an invalid length.
[ 2427.080708][T12786] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2427.176378][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29556'.
[ 2427.178468][T12792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29555'.
[ 2427.492831][T12812] vlan0: entered promiscuous mode
[ 2427.586267][T12812] netlink: 'syz.2.29565': attribute type 4 has an invalid length.
[ 2427.596023][T12819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2427.637055][T12827] netlink: 'syz.2.29569': attribute type 4 has an invalid length.
[ 2427.637724][T12828] netlink: 'syz.2.29569': attribute type 4 has an invalid length.
[ 2427.649945][T12827] netlink: 'syz.2.29569': attribute type 4 has an invalid length.
[ 2427.652835][T25754] lo speed is unknown, defaulting to 1000
[ 2427.654801][T12828] netlink: 'syz.2.29569': attribute type 4 has an invalid length.
[ 2427.661438][T12827] netlink: 'syz.2.29569': attribute type 4 has an invalid length.
[ 2427.662878][T25754] lo speed is unknown, defaulting to 1000
[ 2427.683173][T18596] lo speed is unknown, defaulting to 1000
[ 2427.685448][T18596] sqz0: Port: 1 Link DOWN
[ 2427.685482][ T4651] lo speed is unknown, defaulting to 1000
[ 2427.690404][ T4651] sqz0: Port: 1 Link ACTIVE
[ 2427.693397][T25754] lo speed is unknown, defaulting to 1000
[ 2427.697193][ T4642] lo speed is unknown, defaulting to 1000
[ 2427.700834][ T4651] lo speed is unknown, defaulting to 1000
[ 2427.708430][ T4662] lo speed is unknown, defaulting to 1000
[ 2427.710451][T12838] sctp: [Deprecated]: syz.1.29571 (pid 12838) Use of int in max_burst socket option.
[ 2427.710451][T12838] Use struct sctp_assoc_value instead
[ 2427.769434][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29573'.
[ 2428.368954][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.380736][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.392422][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.404059][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.415574][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.427195][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.438819][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.450406][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[ 2428.889809][T12900] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma?
[ 2429.195182][T12910] can: request_module (can-proto-4) failed.
[ 2429.799493][T12931] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 2429.843418][T12933] validate_nla: 35 callbacks suppressed
[ 2429.843433][T12933] netlink: 'syz.1.29598': attribute type 13 has an invalid length.
[ 2430.051149][T12953] bond76: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 2430.055271][T12953] bond76 (unregistering): Released all slaves
[ 2430.211144][T12969] __nla_validate_parse: 4 callbacks suppressed
[ 2430.211156][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29605'.
[ 2430.216544][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29605'.
[ 2430.221299][T12970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29605'.
[ 2430.257237][T12972] netlink: 80 bytes leftover after parsing attributes in process `syz.3.29606'.
[ 2430.920133][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29609'.
[ 2431.395943][T13034] net_ratelimit: 104 callbacks suppressed
[ 2431.395954][T13034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2432.481688][T13081] netlink: 71 bytes leftover after parsing attributes in process `syz.2.29631'.
[ 2432.670254][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29632'.
[ 2432.706964][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29633'.
[ 2432.886510][T13097] ip6t_srh: unknown srh match flags  4000
[ 2433.126584][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29641'.
[ 2433.147138][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29641'.
[ 2433.587092][T13133] tipc: Started in network mode
[ 2433.588618][T13133] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[ 2433.590756][T13133] tipc: Enabled bearer <eth:vlan0>, priority 0
[ 2433.596098][T13133] xt_hashlimit: size too large, truncated to 1048576
[ 2433.865800][T13174] syzkaller1: entered promiscuous mode
[ 2433.868096][T13174] syzkaller1: entered allmulticast mode
[ 2434.130469][T13187] wg1: Caught tx_queue_len zero misconfig
[ 2434.470326][T13216] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000
[ 2434.613673][T25754] tipc: Node number set to 10005162
[ 2434.987522][T13242] bridge0: port 1(veth0_virt_wifi) entered blocking state
[ 2434.990306][T13242] bridge0: port 1(veth0_virt_wifi) entered disabled state
[ 2434.992546][T13242] veth0_virt_wifi: entered allmulticast mode
[ 2434.996315][T13242] veth0_virt_wifi: entered promiscuous mode
[ 2435.098407][   T34] audit: type=1800 audit(1778613558.715:238): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29676" name="memory.events" dev="tmpfs" ino=50839 res=0 errno=0
[ 2435.145910][T13249] netlink: 'syz.2.29678': attribute type 29 has an invalid length.
[ 2435.158485][T13249] netlink: 'syz.2.29678': attribute type 29 has an invalid length.
[ 2435.256143][T13258] netlink: 'syz.3.29682': attribute type 4 has an invalid length.
[ 2435.395978][T13273] __nla_validate_parse: 10 callbacks suppressed
[ 2435.396024][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29685'.
[ 2435.405815][T13275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29686'.
[ 2435.422660][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29686'.
[ 2435.435145][T13275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29686'.
[ 2435.479460][T13277] gre16: entered promiscuous mode
[ 2435.486910][T13280] netlink: 'syz.1.29687': attribute type 4 has an invalid length.
[ 2435.489872][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29688'.
[ 2435.536810][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29689'.
[ 2435.606078][T13293] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29692'.
[ 2435.929675][T13330] netlink: 277 bytes leftover after parsing attributes in process `syz.2.29698'.
[ 2436.027867][T13332] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 2436.080557][T13339] nbd: must specify at least one socket
[ 2436.158624][T13344] netlink: 277 bytes leftover after parsing attributes in process `syz.2.29701'.
[ 2436.247327][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29702'.
[ 2436.250892][T13348] netlink: 'syz.1.29702': attribute type 1 has an invalid length.
[ 2436.487408][T13354] vlan0: entered promiscuous mode
[ 2436.579809][T13362] netlink: 'syz.2.29704': attribute type 4 has an invalid length.
[ 2436.702504][T13374] vlan0: entered promiscuous mode
[ 2436.799822][T13374] netlink: 'syz.2.29708': attribute type 4 has an invalid length.
[ 2436.980326][T13397] x_tables: duplicate underflow at hook 1
[ 2437.036520][T13403] sctp: [Deprecated]: syz.3.29716 (pid 13403) Use of int in max_burst socket option.
[ 2437.036520][T13403] Use struct sctp_assoc_value instead
[ 2437.070166][T13407] sctp: [Deprecated]: syz.2.29718 (pid 13407) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2437.070166][T13407] Use struct sctp_sack_info instead
[ 2437.167025][T13420] netlink: 'syz.3.29722': attribute type 1 has an invalid length.
[ 2437.189808][T13420] bond15: entered promiscuous mode
[ 2437.192360][T13420] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2437.217589][T13420] bond15: (slave bridge9): making interface the new active one
[ 2437.220423][T13420] bridge9: entered promiscuous mode
[ 2437.225746][T13420] bond15: (slave bridge9): Enslaving as an active interface with an up link
[ 2437.556634][T13436] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2437.892785][T13469] lo speed is unknown, defaulting to 1000
[ 2438.038632][T13469] vlan0 speed is unknown, defaulting to 1000
[ 2438.040892][T13473] sctp: [Deprecated]: syz.1.29734 (pid 13473) Use of int in max_burst socket option.
[ 2438.040892][T13473] Use struct sctp_assoc_value instead
[ 2438.412061][T13498] xfrm1: entered promiscuous mode
[ 2438.413734][T13498] xfrm1: entered allmulticast mode
[ 2438.514923][T13505] netlink: 'syz.1.29744': attribute type 4 has an invalid length.
[ 2438.948972][T13534] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2439.070313][T13546] netlink: 'syz.3.29756': attribute type 4 has an invalid length.
[ 2439.151906][T13553] vlan0: entered promiscuous mode
[ 2439.372010][T13566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2439.449589][T13570] syzkaller0: entered promiscuous mode
[ 2439.451857][T13570] syzkaller0: entered allmulticast mode
[ 2439.672153][T13578] syzkaller0: left promiscuous mode
[ 2439.674881][T13578] syzkaller0: left allmulticast mode
[ 2439.761833][T13582] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2439.891012][T13593] lo speed is unknown, defaulting to 1000
[ 2440.037760][T13593] vlan0 speed is unknown, defaulting to 1000
[ 2440.848102][T13610] syzkaller0: entered promiscuous mode
[ 2440.850115][T13610] syzkaller0: entered allmulticast mode
[ 2441.087663][T13627] __nla_validate_parse: 20 callbacks suppressed
[ 2441.087679][T13627] netlink: 277 bytes leftover after parsing attributes in process `syz.2.29779'.
[ 2441.240635][T13633] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.29781'.
[ 2441.322926][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29779'.
[ 2442.107904][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29785'.
[ 2442.479188][T13680] syzkaller0: entered promiscuous mode
[ 2442.483387][T13680] syzkaller0: entered allmulticast mode
[ 2442.497282][T13674] lo speed is unknown, defaulting to 1000
[ 2442.562519][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29792'.
[ 2442.616859][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29789'.
[ 2442.619815][T13699] validate_nla: 2 callbacks suppressed
[ 2442.619826][T13699] netlink: 'syz.2.29789': attribute type 29 has an invalid length.
[ 2442.625393][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29789'.
[ 2442.635836][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29789'.
[ 2442.641816][T13699] netlink: 'syz.2.29789': attribute type 29 has an invalid length.
[ 2442.655784][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29789'.
[ 2442.671564][T13706] netlink: 'syz.3.29795': attribute type 1 has an invalid length.
[ 2442.733083][T13706] bond16: entered promiscuous mode
[ 2442.736389][T13706] 8021q: adding VLAN 0 to HW filter on device bond16
[ 2442.759499][T13706] bond16: (slave bridge10): making interface the new active one
[ 2442.764928][T13706] bridge10: entered promiscuous mode
[ 2442.770514][T13706] bond16: (slave bridge10): Enslaving as an active interface with an up link
[ 2442.782646][T13674] vlan0 speed is unknown, defaulting to 1000
[ 2443.036933][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2443.302692][T13758] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2
[ 2443.471787][T13764] netlink: 'syz.1.29811': attribute type 1 has an invalid length.
[ 2443.481407][T13764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2443.625959][T13768] syzkaller0: entered promiscuous mode
[ 2443.627842][T13768] syzkaller0: entered allmulticast mode
[ 2443.746166][T13770] vlan0: entered promiscuous mode
[ 2443.978365][T13775] netlink: 'syz.2.29815': attribute type 4 has an invalid length.
[ 2444.170389][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29820'.
[ 2444.350520][T13802] lo speed is unknown, defaulting to 1000
[ 2444.357251][T13806] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 2444.505552][T13802] vlan0 speed is unknown, defaulting to 1000
[ 2445.349683][T13833] syzkaller1: entered promiscuous mode
[ 2445.351984][T13833] syzkaller1: entered allmulticast mode
[ 2445.516147][T13853] netlink: 'syz.1.29834': attribute type 4 has an invalid length.
[ 2446.138610][T13890] __nla_validate_parse: 7 callbacks suppressed
[ 2446.138627][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29842'.
[ 2446.161714][T13890] veth57: entered promiscuous mode
[ 2446.167020][T13890] xt_TCPMSS: Only works on TCP SYN packets
[ 2446.547981][T13899] netlink: 277 bytes leftover after parsing attributes in process `syz.1.29845'.
[ 2446.608959][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29847'.
[ 2446.751235][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29849'.
[ 2446.754737][T13913] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2446.799965][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29852'.
[ 2446.819116][T13922] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 2446.868192][T13925] mac80211_hwsim hwsim158 syzkaller0: left promiscuous mode
[ 2446.871112][T13925] mac80211_hwsim hwsim158 syzkaller0: left allmulticast mode
[ 2447.127171][T13942] netlink: 'syz.3.29858': attribute type 4 has an invalid length.
[ 2447.576952][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29863'.
[ 2447.733000][T13964] vlan8: entered allmulticast mode
[ 2447.736916][T13964] bond_slave_0: entered allmulticast mode
[ 2447.968190][T13981] netlink: 'syz.2.29867': attribute type 1 has an invalid length.
[ 2447.988361][T13981] bond72: entered promiscuous mode
[ 2447.990216][T13981] 8021q: adding VLAN 0 to HW filter on device bond72
[ 2448.010399][T13981] bond72: (slave bridge63): making interface the new active one
[ 2448.013286][T13981] bridge63: entered promiscuous mode
[ 2448.018936][T13981] bond72: (slave bridge63): Enslaving as an active interface with an up link
[ 2448.221101][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29871'.
[ 2448.331494][T14006] netlink: 'syz.2.29874': attribute type 1 has an invalid length.
[ 2448.346299][T14006] bond73: entered promiscuous mode
[ 2448.348189][T14006] 8021q: adding VLAN 0 to HW filter on device bond73
[ 2448.373040][T14006] bond73: (slave bridge64): making interface the new active one
[ 2448.376334][T14006] bridge64: entered promiscuous mode
[ 2448.378989][T14006] bond73: (slave bridge64): Enslaving as an active interface with an up link
[ 2448.690005][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29880'.
[ 2448.853945][T14028] netlink: 676 bytes leftover after parsing attributes in process `syz.3.29882'.
[ 2448.860170][T14028] netlink: 676 bytes leftover after parsing attributes in process `syz.3.29882'.
[ 2448.931328][T14036] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2449.099482][T14057] vlan0: entered promiscuous mode
[ 2449.182485][T14057] netlink: 'syz.2.29891': attribute type 4 has an invalid length.
[ 2449.436438][T14090] lo speed is unknown, defaulting to 1000
[ 2449.560586][T14090] vlan0 speed is unknown, defaulting to 1000
[ 2449.721670][T14117] sctp: [Deprecated]: syz.3.29906 (pid 14117) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2449.721670][T14117] Use struct sctp_sack_info instead
[ 2449.780703][T14118] 8021q: VLANs not supported on xfrm0
[ 2450.566998][T14136] xt_hashlimit: size too large, truncated to 1048576
[ 2451.072407][T14173] sctp: [Deprecated]: syz.3.29923 (pid 14173) Use of int in maxseg socket option.
[ 2451.072407][T14173] Use struct sctp_assoc_value instead
[ 2451.262894][   T34] audit: type=1800 audit(1778613574.875:239): pid=14174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29922" name="memory.events" dev="tmpfs" ino=51272 res=0 errno=0
[ 2451.476672][T14189] __nla_validate_parse: 73 callbacks suppressed
[ 2451.476720][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29927'.
[ 2451.923396][T14194] netlink: 'syz.1.29928': attribute type 4 has an invalid length.
[ 2451.975481][T14196] Cannot find map_set index 17 as target
[ 2452.009604][T14199] netlink: 'syz.1.29930': attribute type 1 has an invalid length.
[ 2452.025874][T14199] 8021q: adding VLAN 0 to HW filter on device bond76
[ 2452.161787][T14212] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.29934'.
[ 2452.288229][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29935'.
[ 2452.358040][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29936'.
[ 2452.464708][T14229] vlan0: entered promiscuous mode
[ 2452.564521][T14229] netlink: 'syz.2.29938': attribute type 4 has an invalid length.
[ 2452.595065][   T35] INFO: task syz.0.27993:6960 blocked for more than 143 seconds.
[ 2452.603820][   T35]       Not tainted syzkaller #0
[ 2452.606530][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2452.612199][   T35] task:syz.0.27993     state:D stack:26768 pid:6960  tgid:6958  ppid:5620   task_flags:0x400140 flags:0x00080002
[ 2452.616655][   T35] Call Trace:
[ 2452.617753][   T35]  <TASK>
[ 2452.618674][   T35]  __schedule+0x17b4/0x5680
[ 2452.620105][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 2452.621618][   T35]  ? __pfx___schedule+0x10/0x10
[ 2452.623128][   T35]  ? schedule+0x90/0x360
[ 2452.624819][   T35]  schedule+0x164/0x360
[ 2452.626067][   T35]  schedule_preempt_disabled+0x13/0x30
[ 2452.627702][   T35]  __mutex_lock+0x7f7/0x1550
[ 2452.629113][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[ 2452.630709][   T35]  ? __mutex_lock+0x608/0x1550
[ 2452.632136][   T35]  ? nfsd_nl_listener_set_doit+0x141/0x1670
[ 2452.634261][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 2452.635883][   T35]  ? __asan_memset+0x22/0x50
[ 2452.637237][   T35]  ? __nla_validate_parse+0x2480/0x2dc0
[ 2452.638876][   T35]  nfsd_nl_listener_set_doit+0x141/0x1670
[ 2452.640528][   T35]  ? __pfx___nla_validate_parse+0x10/0x10
[ 2452.642259][   T35]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 2452.644479][   T35]  ? __nla_parse+0x40/0x60
[ 2452.645854][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 2452.647850][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 2452.650283][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2452.652480][   T35]  ? __asan_memcpy+0x40/0x70
[ 2452.654700][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2452.657124][   T35]  ? bpf_lsm_capable+0x9/0x20
[ 2452.659020][   T35]  ? security_capable+0x7e/0x2c0
[ 2452.661034][   T35]  genl_rcv_msg+0x61c/0x7a0
[ 2452.662895][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2452.665272][   T35]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 2452.667598][   T35]  netlink_rcv_skb+0x232/0x4b0
[ 2452.669451][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2452.671418][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2452.674054][   T35]  ? down_read+0x270/0x2e0
[ 2452.675881][   T35]  ? genl_rcv+0xd/0x40
[ 2452.677479][   T35]  genl_rcv+0x28/0x40
[ 2452.679060][   T35]  netlink_unicast+0x75c/0x8e0
[ 2452.680894][   T35]  netlink_sendmsg+0x813/0xb40
[ 2452.682712][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2452.685201][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2452.687125][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2452.689126][   T35]  ____sys_sendmsg+0x972/0x9f0
[ 2452.690945][   T35]  ? __might_fault+0xaf/0x130
[ 2452.692711][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2452.695091][   T35]  ? import_iovec+0x73/0xa0
[ 2452.696528][   T35]  ___sys_sendmsg+0x2a5/0x360
[ 2452.698054][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 2452.699620][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2452.701216][   T35]  ? futex_wait+0x2a2/0x390
[ 2452.702644][   T35]  ? __fget_files+0x2a/0x420
[ 2452.704664][   T35]  ? __fget_files+0x3a0/0x420
[ 2452.706382][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2452.707951][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2452.709583][   T35]  ? rcu_is_watching+0x15/0xb0
[ 2452.710992][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2452.712716][   T35]  do_syscall_64+0x15f/0xf80
[ 2452.714581][   T35]  ? trace_irq_disable+0x3b/0x140
[ 2452.716163][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2452.717971][   T35] RIP: 0033:0x7ff6e079cdd9
[ 2452.719325][   T35] RSP: 002b:00007ff6e1658028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2452.721755][   T35] RAX: ffffffffffffffda RBX: 00007ff6e0a16090 RCX: 00007ff6e079cdd9
[ 2452.724442][   T35] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007
[ 2452.726812][   T35] RBP: 00007ff6e0832d69 R08: 0000000000000000 R09: 0000000000000000
[ 2452.729080][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2452.731430][   T35] R13: 00007ff6e0a16128 R14: 00007ff6e0a16090 R15: 00007ffc1b154cb8
[ 2452.734016][   T35]  </TASK>
[ 2452.734998][   T35] 
[ 2452.734998][   T35] Showing all locks held in the system:
[ 2452.737220][   T35] 1 lock held by khungtaskd/35:
[ 2452.738607][   T35]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2452.741454][   T35] 2 locks held by getty/5441:
[ 2452.742823][   T35]  #0: ffff8881752e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2452.747543][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[ 2452.750493][   T35] 2 locks held by syz.0.27993/6959:
[ 2452.752066][   T35]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2452.754991][   T35]  #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[ 2452.758004][   T35] 2 locks held by syz.0.27993/6960:
[ 2452.759475][   T35]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2452.761749][   T35]  #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[ 2452.765611][   T35] 
[ 2452.766347][   T35] =============================================
[ 2452.766347][   T35] 
[ 2452.768695][   T35] NMI backtrace for cpu 1
[ 2452.768704][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2452.768713][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2452.768719][   T35] Call Trace:
[ 2452.768724][   T35]  <TASK>
[ 2452.768728][   T35]  dump_stack_lvl+0xe8/0x150
[ 2452.768741][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 2452.768752][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2452.768762][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2452.768773][   T35]  sys_info+0x135/0x170
[ 2452.768782][   T35]  watchdog+0xfd3/0x1030
[ 2452.768798][   T35]  ? watchdog+0x1c9/0x1030
[ 2452.768811][   T35]  kthread+0x388/0x470
[ 2452.768822][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2452.768832][   T35]  ? __pfx_kthread+0x10/0x10
[ 2452.768842][   T35]  ret_from_fork+0x514/0xb70
[ 2452.768852][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2452.768861][   T35]  ? __switch_to+0xc79/0x1410
[ 2452.768874][   T35]  ? __pfx_kthread+0x10/0x10
[ 2452.768884][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2452.768900][   T35]  </TASK>
[ 2452.768903][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 2452.801369][    C0] NMI backtrace for cpu 0
[ 2452.801381][    C0] CPU: 0 UID: 0 PID: 14211 Comm: syz.1.29934 Not tainted syzkaller #0 PREEMPT(full) 
[ 2452.801391][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2452.801397][    C0] RIP: 0010:lock_is_held_type+0xec/0x150
[ 2452.801414][    C0] Code: 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 f1 f6 21 8e e8 31 19 00 00 b8 ff ff ff ff 65 0f c1 05 74 1d 90 07 <83> f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74
[ 2452.801421][    C0] RSP: 0018:ffffc90009187748 EFLAGS: 00000057
[ 2452.801430][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000002
[ 2452.801436][    C0] RDX: 0000000000000000 RSI: ffffffff8e21f6f1 RDI: ffffffff8c28ade0
[ 2452.801441][    C0] RBP: 00000000ffffffff R08: ffffffff9030df0f R09: 1ffffffff2061be1
[ 2452.801447][    C0] R10: dffffc0000000000 R11: fffffbfff2061be2 R12: 0000000000000046
[ 2452.801452][    C0] R13: ffff8881ed95bb00 R14: ffffffff8e95cdc0 R15: 0000000000000001
[ 2452.801458][    C0] FS:  00005555860b6500(0000) GS:ffff88818dc87000(0000) knlGS:0000000000000000
[ 2452.801464][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2452.801470][    C0] CR2: 000055f75ef4f000 CR3: 000000016d736000 CR4: 00000000000006f0
[ 2452.801494][    C0] Call Trace:
[ 2452.801500][    C0]  <TASK>
[ 2452.801506][    C0]  rcu_read_lock_any_held+0x48/0x90
[ 2452.801518][    C0]  pick_next_task_fair+0x407/0x1ab0
[ 2452.801538][    C0]  __pick_next_task+0xe6/0x480
[ 2452.801553][    C0]  __schedule+0x974/0x5680
[ 2452.801570][    C0]  ? __pfx___schedule+0x10/0x10
[ 2452.801582][    C0]  ? schedule+0x90/0x360
[ 2452.801592][    C0]  schedule+0x164/0x360
[ 2452.801602][    C0]  do_nanosleep+0x1c2/0x620
[ 2452.801612][    C0]  ? do_nanosleep+0x80/0x620
[ 2452.801621][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[ 2452.801630][    C0]  ? __asan_memset+0x22/0x50
[ 2452.801640][    C0]  ? __hrtimer_setup+0x1b7/0x260
[ 2452.801649][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 2452.801660][    C0]  hrtimer_nanosleep+0x18f/0x3a0
[ 2452.801670][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 2452.801680][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 2452.801693][    C0]  __se_sys_clock_nanosleep+0x35b/0x3b0
[ 2452.801704][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[ 2452.801716][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2452.801725][    C0]  do_syscall_64+0x15f/0xf80
[ 2452.801732][    C0]  ? trace_irq_disable+0x3b/0x140
[ 2452.801744][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2452.801752][    C0] RIP: 0033:0x7f270495d60e
[ 2452.801759][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2452.801766][    C0] RSP: 002b:00007ffc4a8714c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 2452.801774][    C0] RAX: ffffffffffffffda RBX: 00005555860b6500 RCX: 00007f270495d60e
[ 2452.801779][    C0] RDX: 00007ffc4a871520 RSI: 0000000000000000 RDI: 0000000000000000
[ 2452.801785][    C0] RBP: 00007f2704c17da0 R08: 0000000000000000 R09: 0000000000000000
[ 2452.801795][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000256d90
[ 2452.801800][    C0] R13: 00007f2704c1618c R14: 0000000000256af7 R15: 00007f2704c16180
[ 2452.801810][    C0]  </TASK>
[ 2452.898559][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 2452.900934][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2452.903691][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2452.907039][   T35] Call Trace:
[ 2452.908065][   T35]  <TASK>
[ 2452.908973][   T35]  vpanic+0x56c/0xa60
[ 2452.910226][   T35]  ? __pfx___schedule+0x10/0x10
[ 2452.911771][   T35]  ? __pfx_vpanic+0x10/0x10
[ 2452.913140][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[ 2452.914988][   T35]  panic+0xc5/0xd0
[ 2452.916244][   T35]  ? __pfx_panic+0x10/0x10
[ 2452.917819][   T35]  ? preempt_schedule_thunk+0x16/0x30
[ 2452.919847][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2452.921639][   T35]  watchdog+0x102c/0x1030
[ 2452.922898][   T35]  ? watchdog+0x1c9/0x1030
[ 2452.924188][   T35]  kthread+0x388/0x470
[ 2452.925585][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2452.927209][   T35]  ? __pfx_kthread+0x10/0x10
[ 2452.928580][   T35]  ret_from_fork+0x514/0xb70
[ 2452.929919][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2452.931399][   T35]  ? __switch_to+0xc79/0x1410
[ 2452.932819][   T35]  ? __pfx_kthread+0x10/0x10
[ 2452.934430][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2452.936239][   T35]  </TASK>
[ 2452.937948][   T35] Kernel Offset: disabled
[ 2452.939218][   T35] Rebooting in 86400 seconds..
