last executing test programs:

12.948825863s ago: executing program 3 (id=8779):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r1, &(0x7f0000000340)="07000000010001", 0x7) (async)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'virt_wifi0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48080}, 0x54) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

12.757749685s ago: executing program 3 (id=8783):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005200010000000000000000000203000008000900"], 0x1c}}, 0x880)

12.595299149s ago: executing program 3 (id=8784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x6d, 0x4)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x34ba}, 0x8)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x4040000)

12.294640373s ago: executing program 3 (id=8788):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a78c043d000000000000000000000000000000000000000008000000000000000000000000f1ff00fbffffffffffffff000000000000000002000000000000000002000000000000030000000000000000000000b86b6e0000010001000000000c0015005d07350004100000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

11.975397759s ago: executing program 3 (id=8791):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@deltaction={0x1c8, 0x31, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x31ec}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.kill\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'ip6erspan0\x00', {0x2}, 0xfbe2})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054)
vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

11.027526945s ago: executing program 3 (id=8808):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24004081}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0x4}]}}}], 0x18}}], 0x1, 0x20000000)

3.98263014s ago: executing program 0 (id=8880):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080)
r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.369366434s ago: executing program 1 (id=8897):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}})
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000010c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x134, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99da}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4187cb1a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x215}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x91f7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x150}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1be}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x24, 0xff, 0x75}, 0x2c)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e0, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc67}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x918}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x245}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa5da}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x642}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x48010}, 0x40080)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r8, 0x29, 0x24, 0x0, &(0x7f000000bac0))
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r9, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYBLOB="010030bd700000000000010000000500040003000000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r0, &(0x7f0000000180), 0x100000000000003c)

2.230463303s ago: executing program 4 (id=8899):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaabbbbbbbbbbbb08004500000100000000000190e127e9c802ac1414aa04009078000000004500000000000100003200"/59], 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24)
listen(r3, 0x0)
listen(r3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r0, 0xa5aeb13205d37809, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x80)

2.092320627s ago: executing program 1 (id=8900):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x3a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'team0\x00', 'macvlan1\x00', {}, {}, 0x55, 0x7f, 0x7, 0x12}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x5, 0xc, 0x3, 0x0, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x43}, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 0x2900, 0x401}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x80, 0x6}}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff], 'veth0_macvtap\x00', 'gretap0\x00', {}, {}, 0x2c, 0x5, 0x312ecc4f11d5886f}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x4, 0x4, 0x0, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, @private2, [0x0, 0xff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0x0, 0xffff00], [0x0, 0xff, 0x0, 0xffffff00], 0x800, 0xa11}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8bdd8a0d2c2d0e966ec7a19698c5dfb9d9389545e2b744e5c31f9cadb646"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x17, 0x124, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x40800)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000600)={<r4=>0x0, 0x1, 0x0, 0x7d, 0x5}, &(0x7f0000000640)=0x18)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000680)={r4, 0xb6, "27fa11aa1465fa4f8cb9d76f7c06c6960794d6999a1eeddfa4d3fb3568521d8ed5a013eb2c004b4d4427e5e81ab678b02e2c170e5fa5abec379148a0e57e09cfb25570feeb5d262b6a24fb312d44bf792e53e00d8c8422234953d288d8a9c92939982aacddf7f2f3ffc35e4a39a18d4a7056ae4c92f69317c875101fa4bf4a2e5bc1ea8c010308e7dda98f8ff08f36ab4367790a6eabf32e1d2278d750f22217ea55ef2bb747365a5b113ab1ee7d16ade05074703f39"}, &(0x7f0000000740)=0xbe)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000e00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x594, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x563, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4f}, @device_a, @broadcast, @random="286410f51e6c", {0x7, 0x2}, @value=@ver_80211n={0x0, 0x57, 0x2, 0x2, 0x0, 0x2, 0x1}}, 0x1600, 0x68, @default, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x7, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x5, 0x6}}, [{0xdd, 0x13, "417d228b47d4d5525648f11dbffa6a92b1e5c2"}, {0xdd, 0x95, "b226167f648b23ee4a510e7cdc3fcf5b3107ae3d471650e66d29b06b92de1e533050b95da9aa75929465d90e4ffa577cf07e3970adcdbe0320fe28cec266ddc865d59028d890a23592b0e7514b4c264b4ef34ee386faac5e9f3783490a61ebbf10b62f3f52bc9fdf37817d7aa339903f2be3e2fc7020b088a14324f71cb6c7fa76e592688c2623543160837a391d5a9053c3612c7a"}, {0xdd, 0x19, "7f659baf9ca133694c81824fa64a24b7c34353b2f327fa68c1"}, {0xdd, 0xd3, "f85e86ea66ea89ca8798624d4e52efa632ad562a25bf712706e1eb7925f7e9504da95ed1d8210fd182b06300524dba4866c190ceba3eb903ea7687bb370ae16741f0450d93e648657853b98b934e81a929ffa9431d8ddc04b74ae237bbdc60aeaa10681be03e50d2da277971e97c7804ec94a9477a84f1257cb182de9e5fac7a4836ab799b7c42829edfeae7b39cc2a0e9b83c69f64e1b4a4799b6d0eb7cbfe6170447e96bec0bf98cfc3aa462fcd39e57f63ae58b09bb8917f059f32fdb4b78e60d556e46676216ff6e9416887b5c4efa32da"}, {0xdd, 0xc4, "25cec0e08719c90504d540ed4a94e21c66f6f76f97b626053ebcdc444f2025d871950ef3870bb27245d441f002d409042b428b7aa11859b039cedfc94715febdb8de29bb96efa9b3ff600bf7ce68cf5a651e0b30b39106528711b55d9e7d3e1002338156198550eed3b094dd6ce9440709c4443f42599419f196d9c65cdf0aa496714bbfdc7573a5aa956535368a1171998787dd524a4b6a161ee07b9d3ce68ada191c240116fe05cb2a3516a4fbc9ec26c8c7b9e0bd0db02f9ed4f8a26757ddfa640ee5"}, {0xdd, 0x40, "09e5b3bea9b2a6fca834dd53d58a69f701fb23723bf2923b7a68e8395c586cac10391bb5a8dda70e3c754e6836448943e939f4225ca0e9d32075b21156eb8595"}, {0xdd, 0xe2, "1cb835fa491d4fe7349da8ecee5a2edd65e222dc44ca6eb1421ebae6a974e8c5b788a3ef58a8217bf6fab397c2e2b19790e1d03a55877fcf7b1bbacdfb3caca9ee8f52e95923b5d595f0b50dd53c1b8b872e4b00c853d59e3b66c10754677e01edc7501ee2d9c09ed4b4bf6506d33d7afbb9952f2d98b9fdeb3ea704e194f7e9f45fb0c2ca936e1d09ad0d2ac7624bdc42bb605c4a82989f697357774234bb63c83f4d765ef55c5dca7f255464b94d32ebc5e55f3983ef103f4f7417c7ee17708e1906354d9f4373b8c771470fbbb30eb367eccf34d8acec28360c454557b0a533da"}, {0xdd, 0xae, "8c4d4310b2cd41e8241525b05eef582c0062f100ea14e2e9f064822bced63c6615a21491fc3e9e215862d5c259222c4965679681eb6e9468ae4145e1accc8dc850c3faae7dc21de27d1340bcf16d2ff91431396c50ede3730d5b98a5e64f16a1b79e7e3d10324349588aa6dbc8da47697ff175b51c0a7e12d9115b79d1c32e1c2f49cd0ed21ce70c93245b463de875f6536fcf925bc072d84ca77f6afd8d9f3459da44778d5701b51a62d6b33c75"}, {0xdd, 0x78, "7197d9a09db6dec6c256d311232fb6afa0a4d01d045dcac94671c067bd8b866028ddb3e30575423769e20f58af29664347335082a80831b884f036ebf910d9e4108e32943ce4ecb9511844e9f1fe40cd6034ca7b8057b05b769121d1173d5daba6696711c8cb47b44e4b3b5459b84452c92aaae0a8219218"}, {0xdd, 0x6d, "cd362d1a617ab0fa45bc78a7070c207e75001ed47e42bb6b0b54659664d2b381d43e08083139fd5707e96f2d1b98c8e99a997c6b6e62996fb0da30ccad027ef446cf22361769afd52995c8043563a75f11c32365b96725135e08f9d940b6763e9bad08f88be18cebc8b8c65bf5"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x594}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000e40))
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e80)={0x7, 'wlan0\x00', {0x2}, 0x5})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ec0)=<r6=>0x0, &(0x7f0000000f00)=0x4)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000f40)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4c, r6})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r7, 0xc0285840, &(0x7f0000001000)={0x9, 0xffff8000, 0xffffffff, 0x0, 0x9, 0x7, 0x0, &(0x7f0000000f80)=[{0x19, 0x101, 0x10000}, {0x9, 0xfe, 0x7}, {0x5, 0xfe, 0x2}, {0x10, 0xfe, 0x4}, {0x19, 0x101, 0xac}, {0x1b, 0xfe, 0x6}, {0x21, 0x1ff, 0x9}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}], 0x3c)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x80, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000011c0)={'macvtap0\x00', <r11=>0x0})
ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000001200)=r11)
getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000001240)={@empty, @loopback, @local}, &(0x7f0000001280)=0xc)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000012c0)=@fragment={0x84, 0x0, 0x1e, 0x0, 0x0, 0x3, 0x66}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001300)={r4, 0xd}, &(0x7f0000001340)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x2201, 0x0)

2.023457637s ago: executing program 2 (id=8901):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f00000002c0)=0x68)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x8c4)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', {}, 0x3}) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', {}, 0x3})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1b0, 0x4)
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80800) (async)
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80800)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) (async)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100)

1.913467519s ago: executing program 4 (id=8902):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ppoll(&(0x7f0000000300)=[{r0, 0x81}], 0x1, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
ppoll(&(0x7f0000000300)=[{r0, 0x81}], 0x1, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

1.815749002s ago: executing program 2 (id=8903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c15000010000104fcfffffffbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="05150000040000001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000506ad23bbdd85eed70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000104000001c0012800c0001006d6163766c616e000c0002800800070048670000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2004c890}, 0xc) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4)

1.634604012s ago: executing program 4 (id=8904):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0x6, 0x1, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x3ff, 0x5}})
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x9, &(0x7f00000009c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5f13}, @alu={0x7, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffffc, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @generic={0x37, 0xa, 0x3, 0x9, 0x10000}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0x5, 0x3, 0x9, 0x80, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r9, 0x2}, 0x20)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{<r11=>r0, &(0x7f0000000580)='GPL\x00', 0x0, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x6]}, {0x8, 0x1cb, 0x5, 0x400}}, 0xbd, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)}, 0x1, &(0x7f0000000740)=[{0x1, 0x8, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="7a6b52d30392d08b61f68d70c9556c7d051f99e75ffa4730db13a2c11edc5cd0d10c1b819565051a1c5a69a5b97b9fb84e4651cf432fa46ccd4b988aa6899416100eaa29e4f1d352e0530a0b6f6fc8f7439711b6e3db6f97823ad9b7921d591fed425029", 0x64, 0x2}]})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r12, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r12, 0xd1383000)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7263}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xfffffff8, 0x46, &(0x7f0000000240)=""/70, 0x40f00, 0x40, '\x00', r2, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x4, 0x1}, 0x10, r5, r0, 0x9, &(0x7f0000000800)=[r6, r7, r8, r10, r11, r12], &(0x7f0000000840)=[{0x5, 0x3, 0xf, 0x9}, {0x1, 0x3, 0x0, 0x3}, {0x2, 0x3, 0x5}, {0x4, 0x4, 0xb}, {0x2, 0x3, 0xc, 0xc}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x4, 0x8, 0x3}, {0x1, 0x4, 0xc}, {0x1, 0x5, 0xe, 0x3}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x3ff, 0x5}}) (async)
pipe(&(0x7f0000000380)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x9, &(0x7f00000009c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5f13}, @alu={0x7, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffffc, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @generic={0x37, 0xa, 0x3, 0x9, 0x10000}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0x5, 0x3, 0x9, 0x80, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r9, 0x2}, 0x20) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f0000000580)='GPL\x00', 0x0, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x6]}, {0x8, 0x1cb, 0x5, 0x400}}, 0xbd, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)}, 0x1, &(0x7f0000000740)=[{0x1, 0x8, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="7a6b52d30392d08b61f68d70c9556c7d051f99e75ffa4730db13a2c11edc5cd0d10c1b819565051a1c5a69a5b97b9fb84e4651cf432fa46ccd4b988aa6899416100eaa29e4f1d352e0530a0b6f6fc8f7439711b6e3db6f97823ad9b7921d591fed425029", 0x64, 0x2}]}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r12, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r12, 0xd1383000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7263}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xfffffff8, 0x46, &(0x7f0000000240)=""/70, 0x40f00, 0x40, '\x00', r2, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x4, 0x1}, 0x10, r5, r0, 0x9, &(0x7f0000000800)=[r6, r7, r8, r10, r11, r12], &(0x7f0000000840)=[{0x5, 0x3, 0xf, 0x9}, {0x1, 0x3, 0x0, 0x3}, {0x2, 0x3, 0x5}, {0x4, 0x4, 0xb}, {0x2, 0x3, 0xc, 0xc}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x4, 0x8, 0x3}, {0x1, 0x4, 0xc}, {0x1, 0x5, 0xe, 0x3}], 0x10, 0x8}, 0x94) (async)

1.564962517s ago: executing program 1 (id=8905):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c31503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a501bccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.526484119s ago: executing program 2 (id=8906):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x18, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
mmap(&(0x7f0000168000/0x2000)=nil, 0x2000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080))
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, r5, 0xee00}, 0xc)

1.318613645s ago: executing program 4 (id=8907):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="3eacb4271ef5e4ef90ab505e8a3a149962281c5678bf9d5fe6ac7a101a8124c368e47cf7a4a489066de768e7378544222df0f6dc42a61dc668d2949c45", 0x3d, 0x895, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) (async)
pipe(&(0x7f00000045c0)={<r6=>0xffffffffffffffff}) (async, rerun: 32)
r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async)
splice(r6, 0x0, r8, 0x0, 0x10000000000066, 0xa) (async, rerun: 32)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380)=<r9=>0x0, &(0x7f00000003c0)=0x4) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000680)={'sit0\x00', r9, 0x8000, 0x40, 0x2, 0x59a, {{0xb, 0x4, 0x3, 0x6, 0x2c, 0x68, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ssrr={0x89, 0xb, 0x35, [@local, @remote]}, @lsrr={0x83, 0x7, 0x97, [@rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
pipe(&(0x7f0000000080)={<r11=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
tee(r11, r12, 0x81, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', r10, r11, 0x1}, 0x50)

1.318390099s ago: executing program 1 (id=8908):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r1, &(0x7f0000002f00)=[{{&(0x7f00000017c0)={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, 0x0}}], 0x1, 0x64004000)
setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b00000005200010000000000feffffff0a0000000400010098001f805a33bb6c15990948008dfef6a88b25c16f5f19ed10dc4414e1e8db6c0fbe37a7e7b71a7ba22cc2f8222cb78e6050c022fb07a6de91036a2da7c0a92193e4a15219f625c7b8b83c906d1d8ab227edb95f8fab247df03007799714e2673762516a3aac27d246facf0ac56a86d2ffaaeb798fedaf53b70b00ce00ffff2d292a2c00001bab2254bfdb2fd5df3a8c1f7ed7c4cae0a8e3"], 0xb0}}, 0x0)

1.005740838s ago: executing program 0 (id=8909):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4)
clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000180)={{<r2=>r0, &(0x7f0000000000)='](&,&#\x00', 0x64c183, &(0x7f0000000080)={@align=0x28, {0xa, 0x10, 0x515, 0x5}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x10, 0x2, 0x80000000, 0x3]}, 0x2, 0x12, &(0x7f0000000140)=""/18})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
poll(&(0x7f00000030c0)=[{r3, 0x1000}], 0x1, 0x4)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000200)={0x77359400}, 0x10)

993.396347ms ago: executing program 1 (id=8910):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r5}, 0x10) (async)
connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r5}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0503feffffff000000000700000008000300", @ANYRES32=r6, @ANYBLOB="1f737cb068f78abd4cceb14c4ffabbb78baa3127ddeb514e87645caf8bc76f53242fef70e8e72c8a10824513a40b51b3c0243835efae9d43eee8d1210a72316d3627f50763dac282553ef9884069dfba93a87dddc91fd3c943b94d8da6345d994c7453bed8a7cc30df7150365cde9d2026fd7f8931c8e5ed8d74eb1e07c35a77420d90085b6969788ee57fa3473890d059c49178f6a26215e38c855066ab7c4703d38f66599c859ae7138b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x20044000)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x7}, @broadcast, @random="82b6497b39cc"}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000001000c0a9d36edcda9a1e84b08877ccf00630"], 0x6c}}, 0x0)

923.844344ms ago: executing program 4 (id=8911):
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@local, @multicast2, 0x1, 0x6}}) (async)
r1 = socket(0x23, 0x1, 0x7fffffff)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x40000a4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x80)

778.607541ms ago: executing program 0 (id=8912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000010000ea3a0e943", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0)

695.962234ms ago: executing program 0 (id=8913):
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="00020a010000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e)
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x20044000)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

675.542938ms ago: executing program 4 (id=8914):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)
close(0x4)
close(0x3)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0), 0x4)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4)
sendto$inet(r4, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10)
read(r0, &(0x7f0000001480)=""/4096, 0x38)

558.630367ms ago: executing program 0 (id=8915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

543.142814ms ago: executing program 2 (id=8916):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000061100000000000000008000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

448.330911ms ago: executing program 2 (id=8917):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x590)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7ddc8383af4485a0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

198.566671ms ago: executing program 1 (id=8918):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{<r2=>r1, &(0x7f0000000000)='\x00', 0x200, &(0x7f00000000c0)={@_ha_fsid={[0x7f, 0x8]}, {0x9, 0x2, 0xfffffff7, 0x2}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x8d}, {[0x81, 0x3, 0x2, 0x8000]}, 0x3, 0xe8, &(0x7f00000001c0)=""/232})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x58, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_MAX_P={0x8, 0x3, 0x80}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xfffeffff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}, @TCA_RED_MAX_P={0x8, 0x3, 0x6d}, @TCA_RED_PARMS={0x14, 0x1, {0x10000, 0x8001, 0x553, 0x1b, 0x18, 0xe, 0x6}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000)
pipe(&(0x7f0000000740))
r7 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x810)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r5], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0xd, r4, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="27030200dc0f14af52c9d3e7323d9c004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000002c0), &(0x7f00000004c0)='%-010d \x00'}, 0x20)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000007c0)={r0, &(0x7f00000006c0)='.@\x00', 0x80, &(0x7f0000000700)={@align=0x9, {0xd949, 0x3ff, 0x2, 0x7}}, 0x0, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x6})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r1, 0xfffffffffffffffc, 0x8, 0x7})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="fd1d9c03f57360f98a0ea35e01dbdce226fe2fd70147d10d37c015cab826bc96aafbff97154bfd0d38604316f0ce3d6103d8d8209bcf018a835f5a75a89ee492572c0176941be6a2504bc4b55fe659b9a064245fddca", @ANYBLOB="0000000004000000fb6800"/28], 0x50)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000000000b9990000000000000000001000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000002d8bbcc7e13bc26b008ab0000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000b59a0264000000000000000000000000000004000000feffffff00000000784a95febda4258d40a42d618c8f03370c4c33a6aab55a5be87929c5b9e2a224f2e19610618c02"]}, 0x13a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200)=0xffffffffffffffff, 0x12)

5.934162ms ago: executing program 2 (id=8919):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x24, 0x2, 0x1, 0x2, 0x200, 0x7ff}, {0x5, 0x0, 0xf, 0x7ff}, 0x6, 0x1aec, 0xf39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 0 (id=8920):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000004000"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

 netlink: 8 bytes leftover after parsing attributes in process `syz.1.6921'.
[  766.927329][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6922'.
[  767.559626][T31946] syz.3.6931: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  767.578502][T31946] CPU: 0 UID: 0 PID: 31946 Comm: syz.3.6931 Not tainted syzkaller #0 PREEMPT(full) 
[  767.578535][T31946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  767.578550][T31946] Call Trace:
[  767.578570][T31946]  <TASK>
[  767.578580][T31946]  dump_stack_lvl+0xe8/0x150
[  767.578621][T31946]  warn_alloc+0x249/0x340
[  767.578658][T31946]  ? stack_trace_save+0xa9/0x100
[  767.578687][T31946]  ? __pfx_warn_alloc+0x10/0x10
[  767.578728][T31946]  ? kasan_save_track+0x4f/0x80
[  767.578759][T31946]  ? kasan_save_track+0x3e/0x80
[  767.578789][T31946]  ? __kasan_kmalloc+0x93/0xb0
[  767.578808][T31946]  ? __kmalloc_cache_noprof+0x31c/0x660
[  767.578839][T31946]  ? xskq_create+0x56/0x170
[  767.578862][T31946]  ? xsk_setsockopt+0x54c/0x990
[  767.578882][T31946]  ? do_sock_setsockopt+0x17c/0x1b0
[  767.578912][T31946]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  767.578943][T31946]  ? do_syscall_64+0x15f/0xf80
[  767.578974][T31946]  __vmalloc_node_range_noprof+0x132/0x1730
[  767.579043][T31946]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  767.579088][T31946]  ? __kasan_kmalloc+0x93/0xb0
[  767.579115][T31946]  vmalloc_user_noprof+0xad/0xe0
[  767.579148][T31946]  ? xskq_create+0xbf/0x170
[  767.579172][T31946]  xskq_create+0xbf/0x170
[  767.579199][T31946]  xsk_init_queue+0x8a/0xe0
[  767.579224][T31946]  xsk_setsockopt+0x54c/0x990
[  767.579250][T31946]  ? __pfx_xsk_setsockopt+0x10/0x10
[  767.579272][T31946]  ? __pfx_aa_sk_perm+0x10/0x10
[  767.579305][T31946]  ? aa_sock_opt_perm+0xff/0x1a0
[  767.579339][T31946]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  767.579372][T31946]  ? __pfx_xsk_setsockopt+0x10/0x10
[  767.579396][T31946]  do_sock_setsockopt+0x17c/0x1b0
[  767.579434][T31946]  __x64_sys_setsockopt+0x13d/0x1b0
[  767.579470][T31946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.579494][T31946]  do_syscall_64+0x15f/0xf80
[  767.579520][T31946]  ? trace_irq_disable+0x3b/0x140
[  767.579543][T31946]  ? clear_bhb_loop+0x40/0x90
[  767.579578][T31946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.579600][T31946] RIP: 0033:0x7f6593f9c819
[  767.579623][T31946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.579643][T31946] RSP: 002b:00007f6594f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  767.579667][T31946] RAX: ffffffffffffffda RBX: 00007f6594215fa0 RCX: 00007f6593f9c819
[  767.579684][T31946] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  767.579698][T31946] RBP: 00007f6594032c91 R08: 0000000000000004 R09: 0000000000000000
[  767.579712][T31946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.579726][T31946] R13: 00007f6594216038 R14: 00007f6594215fa0 R15: 00007ffc6dc98078
[  767.579763][T31946]  </TASK>
[  767.581342][T31946] Mem-Info:
[  767.609199][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.712080][T31946] active_anon:5992 inactive_anon:0 isolated_anon:0
[  767.712080][T31946]  active_file:2571 inactive_file:40671 isolated_file:0
[  767.712080][T31946]  unevictable:768 dirty:113 writeback:3
[  767.712080][T31946]  slab_reclaimable:14419 slab_unreclaimable:136273
[  767.712080][T31946]  mapped:29379 shmem:1378 pagetables:3846
[  767.712080][T31946]  sec_pagetables:0 bounce:0
[  767.712080][T31946]  kernel_misc_reclaimable:0
[  767.712080][T31946]  free:1266534 free_pcp:20528 free_cma:0
[  767.943889][T31946] Node 0 active_anon:23908kB inactive_anon:0kB active_file:10284kB inactive_file:162472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15084kB dirty:508kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17748kB pagetables:15228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  767.988645][T31946] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  768.032180][T31946] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB
[  768.064488][T31946] lowmem_reserve[]: 0 2491 2492 2492 2492
[  768.071341][T31946] Node 0 DMA32 free:1374528kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23908kB inactive_anon:0kB active_file:10284kB inactive_file:162472kB unevictable:1536kB writepending:508kB zspages:0kB present:3129332kB managed:2551532kB mlocked:0kB bounce:0kB free_pcp:27828kB local_pcp:8504kB free_cma:0kB
[  768.153589][T31946] lowmem_reserve[]: 0 0 0 0 0
[  768.161640][T31960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'.
[  768.179047][T31946] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  768.230279][T31960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'.
[  768.230277][ T9499] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  768.255664][ T9475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  768.287072][ T9475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  768.310296][T31966] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6936'.
[  768.320424][T21442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.330342][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.339384][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.340365][T31946] lowmem_reserve[]: 0 0 0 0 0
[  768.369149][T31966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6936'.
[  768.390127][T31946] Node 1 Normal free:3680684kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54596kB local_pcp:26924kB free_cma:0kB
[  768.412848][T31966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6936'.
[  768.453153][T31968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6937'.
[  768.483104][T31946] lowmem_reserve[]: 0 0 0 0 0
[  768.498332][T31946] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB
[  768.538083][T31946] Node 0 DMA32: 13244*4kB (UM) 8066*8kB (UME) 4240*16kB (UME) 574*32kB (UME) 167*64kB (UME) 1228*128kB (UME) 774*256kB (UME) 533*512kB (UM) 315*1024kB (UME) 102*2048kB (UM) 0*4096kB = 1374080kB
[  768.561689][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6939'.
[  768.562738][T31946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  768.585765][T31946] Node 1 Normal: 8*4kB (U) 14*8kB (UM) 19*16kB (UM) 9*32kB (UM) 12*64kB (UM) 12*128kB (UM) 10*256kB (UM) 12*512kB (UM) 11*1024kB (UM) 10*2048kB (U) 888*4096kB (UM) = 3680736kB
[  768.605994][T31946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  768.617952][T31946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  768.629919][T31946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  768.641729][T31946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  768.652351][T31946] 44616 total pagecache pages
[  768.659655][T31946] 0 pages in swap cache
[  768.664105][T31946] Free swap  = 124996kB
[  768.669123][T31946] Total swap = 124996kB
[  768.673401][T31946] 2097051 pages RAM
[  768.677973][T31946] 0 pages HighMem/MovableOnly
[  768.682773][T31946] 427400 pages reserved
[  768.718993][T31946] 0 pages cma reserved
[  768.796050][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.960008][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.205548][T31991] syz.2.6943 (31991) used obsolete PPPIOCDETACH ioctl
[  769.464210][T32017] IPv6: sit1: Disabled Multicast RS
[  769.543890][T32022] netlink: 'syz.3.6951': attribute type 1 has an invalid length.
[  769.608169][T32022] 8021q: adding VLAN 0 to HW filter on device bond4
[  769.749204][T32037] 8021q: adding VLAN 0 to HW filter on device bond4
[  769.969755][T32051] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  770.603550][T32080] netlink: 'syz.1.6964': attribute type 10 has an invalid length.
[  770.616540][T32080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  770.633251][T32080] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  770.652274][T32080] ip6gretap0: entered promiscuous mode
[  770.660032][T32080] ip6gretap0: entered allmulticast mode
[  770.898428][T15086] net_ratelimit: 5 callbacks suppressed
[  770.898449][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.519836][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.529426][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.832841][T32146] tipc: Failed to remove unknown binding: 66,0,0/0:1064049149/1064049150
[  771.869249][T32146] tipc: Failed to remove unknown binding: 66,0,0/0:1064049149/1064049150
[  771.918046][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.153444][T32155] erspan0: entered promiscuous mode
[  772.173300][T32155] erspan0: entered allmulticast mode
[  772.183126][T32165] xt_TPROXY: Can be used only with -p tcp or -p udp
[  772.535299][T32180] __nla_validate_parse: 23 callbacks suppressed
[  772.535319][T32180] netlink: 408 bytes leftover after parsing attributes in process `syz.4.6997'.
[  772.568962][T32180] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.6997'.
[  772.781121][T32193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7000'.
[  772.808062][T32196] netlink: 'syz.4.7001': attribute type 32 has an invalid length.
[  772.829036][T32196] netlink: 776 bytes leftover after parsing attributes in process `syz.4.7001'.
[  772.874546][T32193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7000'.
[  772.889247][T32198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.918804][T32203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7003'.
[  772.939807][T32193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.952849][T32196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7001'.
[  772.963928][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.062309][T32209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7004'.
[  773.084482][T32209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7004'.
[  773.090692][T32199] bridge0: port 3(dummy0) entered disabled state
[  773.100229][T32199] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.106447][T32209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7004'.
[  773.276694][T32199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  773.310577][T32199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  773.453575][T32199] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  773.505629][T32196] geneve2: entered promiscuous mode
[  773.724021][T32234] netlink: 'syz.4.7012': attribute type 1 has an invalid length.
[  773.783950][T32234] 8021q: adding VLAN 0 to HW filter on device bond1
[  773.981244][T32234] 8021q: adding VLAN 0 to HW filter on device bond2
[  773.998203][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.021012][T32234] bond1: (slave bond2): Enslaving as an active interface with a down link
[  774.078487][T21443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.088671][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.434002][T32269] netlink: 'syz.4.7019': attribute type 1 has an invalid length.
[  774.443158][T32269] netlink: 'syz.4.7019': attribute type 1 has an invalid length.
[  774.685896][T32284] syzkaller1: entered promiscuous mode
[  774.692413][T32284] syzkaller1: entered allmulticast mode
[  774.716512][T32284] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  774.885832][ T5838] Bluetooth: hci0: command 0x0401 tx timeout
[  775.042549][T32301] syzkaller1: entered promiscuous mode
[  775.073068][T32313] netlink: 'syz.0.7030': attribute type 6 has an invalid length.
[  775.081781][T32313] netlink: 'syz.0.7030': attribute type 5 has an invalid length.
[  775.094317][T32301] syzkaller1: entered allmulticast mode
[  775.343679][T32316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.672921][T32316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.689644][T32340] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  775.942084][T32316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.078996][ T1210] net_ratelimit: 3 callbacks suppressed
[  776.079017][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.097740][T32316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.218195][T32368] xt_TCPMSS: Only works on TCP SYN packets
[  776.359245][T32373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  776.391578][T32377] pim6reg: entered allmulticast mode
[  776.516288][T32376] pim6reg: left allmulticast mode
[  776.560038][ T9475] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.591948][T32383] netlink: 'syz.4.7051': attribute type 1 has an invalid length.
[  776.637698][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.719110][T32387] bond3: (slave bridge5): Enslaving as a backup interface with an up link
[  776.744474][ T9475] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.788740][T32383] veth5: entered promiscuous mode
[  776.794170][T32383] veth5: entered allmulticast mode
[  776.808262][T32383] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  776.830743][ T9508] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.922537][ T9499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  777.118407][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.218994][T32413] netlink: 'syz.3.7059': attribute type 22 has an invalid length.
[  777.228905][T32413] netlink: 'syz.3.7059': attribute type 22 has an invalid length.
[  777.582877][T32436] netlink: 'syz.0.7065': attribute type 1 has an invalid length.
[  777.600011][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.698889][T32442] __nla_validate_parse: 25 callbacks suppressed
[  777.698910][T32442] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7066'.
[  777.760936][T32439] 8021q: adding VLAN 0 to HW filter on device bond5
[  777.854705][T32439] 8021q: adding VLAN 0 to HW filter on device bond6
[  777.891045][T32439] 8021q: adding VLAN 0 to HW filter on device bond7
[  777.931480][T32439] 8021q: adding VLAN 0 to HW filter on device bond8
[  778.024140][T32439] 8021q: adding VLAN 0 to HW filter on device bond9
[  778.141826][T32439] 8021q: adding VLAN 0 to HW filter on device bond10
[  778.161162][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.224292][T32439] 8021q: adding VLAN 0 to HW filter on device bond11
[  778.298104][T32439] 8021q: adding VLAN 0 to HW filter on device bond12
[  778.325783][T32476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7074'.
[  778.364385][T32479] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  778.414754][T32439] 8021q: adding VLAN 0 to HW filter on device bond13
[  778.454701][T32439] 8021q: adding VLAN 0 to HW filter on device bond14
[  778.502241][T32439] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  778.508103][T32482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7077'.
[  778.720548][T32497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  778.739897][T32497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7081'.
[  778.811738][T32505] netlink: 'syz.3.7083': attribute type 10 has an invalid length.
[  778.823751][T32505] bond0: (slave wlan1): Opening slave failed
[  779.200423][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.230805][T32519] netlink: 'syz.1.7088': attribute type 11 has an invalid length.
[  779.239681][T32519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7088'.
[  779.258522][T32519] netlink: 'syz.1.7088': attribute type 11 has an invalid length.
[  779.258534][ T9504] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  779.266643][T32519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7088'.
[  779.286237][ T9504] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  779.296526][ T9504] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  779.308794][ T9504] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  779.838861][ T9504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.280394][T15086] net_ratelimit: 4 callbacks suppressed
[  781.280416][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.459660][T32482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  781.692366][T32529] netlink: 'syz.3.7091': attribute type 7 has an invalid length.
[  781.758507][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.818641][T32536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.847996][T32536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.859654][T32536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.880664][T32536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.890938][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.901782][T32538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7095'.
[  782.318146][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.429010][T32572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.437547][T32572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.465548][T32568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7104'.
[  782.480285][T32576] netlink: 'syz.4.7107': attribute type 8 has an invalid length.
[  782.620562][T32586] x_tables: duplicate underflow at hook 3
[  782.674538][T32589] netlink: 'syz.0.7110': attribute type 1 has an invalid length.
[  783.997160][ T5830] Bluetooth: hci2: command tx timeout
[  785.694045][T32591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  785.935000][T32651] xt_TPROXY: Can be used only with -p tcp or -p udp
[  785.943508][T32642] netlink: 'syz.0.7122': attribute type 1 has an invalid length.
[  786.225386][T32669] veth0: entered promiscuous mode
[  786.241223][T32668] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7130'.
[  786.253178][T32667] veth0: left promiscuous mode
[  786.479094][T15086] net_ratelimit: 6 callbacks suppressed
[  786.479116][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.568764][T32680] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7134'.
[  786.698809][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.708910][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.717141][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.725337][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.733566][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.741767][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.749974][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.758240][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.766449][T32689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.908046][T32694] netlink: 'syz.0.7139': attribute type 10 has an invalid length.
[  786.931197][T32694] netlink: 396 bytes leftover after parsing attributes in process `syz.0.7139'.
[  787.135793][T32705] syzkaller1: entered allmulticast mode
[  787.439558][T32721] tipc: Enabled bearer <ib:gretap0>, priority 0
[  787.476672][T32720] tipc: Enabling of bearer <ib:gretap0> rejected, already enabled
[  787.551688][T32729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7145'.
[  787.822231][T32745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7151'.
[  787.867823][T32745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7151'.
[  787.895488][T32745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7151'.
[  787.925734][T32746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7151'.
[  787.942960][T32754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7153'.
[  787.965662][T32746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7151'.
[  787.968012][T32754] netlink: 'syz.1.7153': attribute type 7 has an invalid length.
[  787.989723][T32752] x_tables: duplicate underflow at hook 1
[  788.000561][T32759] netlink: 'syz.1.7153': attribute type 1 has an invalid length.
[  788.015947][T32754] netlink: 'syz.1.7153': attribute type 8 has an invalid length.
[  788.569361][T15078] tipc: Node number set to 2650156544
[  788.809381][  T339] netlink: 'syz.4.7162': attribute type 4 has an invalid length.
[  789.850253][  T374] vxcan1: entered allmulticast mode
[  789.859373][  T374] bridge0: port 3(gretap0) entered blocking state
[  789.866020][  T374] bridge0: port 3(gretap0) entered disabled state
[  789.873426][  T374] gretap0: entered allmulticast mode
[  789.881439][  T374] gretap0: entered promiscuous mode
[  790.244672][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[  791.553522][  T331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  791.680975][T15086] net_ratelimit: 44 callbacks suppressed
[  791.680997][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.910629][  T393] x_tables: duplicate underflow at hook 3
[  791.983368][  T393] ipvlan2: entered promiscuous mode
[  792.000442][  T397] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  792.359837][  T419] netlink: 'syz.1.7183': attribute type 4 has an invalid length.
[  792.375705][  T418] netlink: 'syz.0.7182': attribute type 12 has an invalid length.
[  792.382666][  T419] __nla_validate_parse: 10 callbacks suppressed
[  792.382761][  T419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7183'.
[  792.423964][  T424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.432430][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.454112][  T416] netlink: 'syz.3.7179': attribute type 1 has an invalid length.
[  792.471503][  T416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7179'.
[  792.511432][  T416] netlink: 'syz.3.7179': attribute type 1 has an invalid length.
[  792.532738][  T431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7186'.
[  792.547916][  T416] netlink: 'syz.3.7179': attribute type 8 has an invalid length.
[  792.567635][  T416] netlink: 606 bytes leftover after parsing attributes in process `syz.3.7179'.
[  792.588466][  T416] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7179'.
[  792.628221][  T437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7188'.
[  792.702278][  T437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7188'.
[  792.718261][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.900962][  T449] netlink: 'syz.2.7191': attribute type 2 has an invalid length.
[  792.918425][  T449] netlink: 'syz.2.7191': attribute type 2 has an invalid length.
[  793.233755][  T432] lec:lec_atm_close: lec0: Shut down!
[  793.324220][  T474] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7197'.
[  793.509545][  T477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7201'.
[  793.528692][  T480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7199'.
[  793.553132][  T477] pim6reg: entered allmulticast mode
[  793.668198][  T487] xt_hashlimit: size too large, truncated to 1048576
[  793.759115][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.929160][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.800853][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.006745][  T561] netlink: 'syz.1.7223': attribute type 1 has an invalid length.
[  795.119062][  T567] bond2: (slave bridge5): Enslaving as a backup interface with an up link
[  795.294883][  T561] veth9: entered promiscuous mode
[  795.321135][  T561] veth9: entered allmulticast mode
[  795.360528][  T561] bond2: (slave veth9): Enslaving as a backup interface with a down link
[  795.401171][  T580] ¾x9ÿ
€: renamed from bridge_slave_0
[  795.743497][  T605] netlink: 'syz.0.7233': attribute type 15 has an invalid length.
[  795.829375][  T607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.839932][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.853739][  T607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.871891][ T9499] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  795.881950][  T607] netlink: 'syz.2.7236': attribute type 2 has an invalid length.
[  795.891511][ T9499] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  795.913363][ T9499] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  795.948090][ T9499] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  796.882051][T15062] net_ratelimit: 4 callbacks suppressed
[  796.882073][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.962497][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.350046][  T674] IPv6: NLM_F_CREATE should be specified when creating new route
[  797.785412][  T717] __nla_validate_parse: 19 callbacks suppressed
[  797.785433][  T717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7265'.
[  797.858011][  T722] veth0: entered promiscuous mode
[  797.897995][  T719] veth0: left promiscuous mode
[  797.918164][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.018229][  T727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  798.025569][  T727] IPv6: NLM_F_CREATE should be set when creating new route
[  798.032939][  T727] IPv6: NLM_F_CREATE should be set when creating new route
[  798.040243][  T727] IPv6: NLM_F_CREATE should be set when creating new route
[  798.097979][  T727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  798.136337][  T734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7271'.
[  798.181400][  T740] syzkaller0: entered promiscuous mode
[  798.195779][  T740] syzkaller0: entered allmulticast mode
[  798.204235][  T742] xt_ecn: cannot match TCP bits for non-tcp packets
[  798.259230][  T740] validate_nla: 4 callbacks suppressed
[  798.259254][  T740] netlink: 'syz.4.7272': attribute type 10 has an invalid length.
[  798.315920][  T748] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  798.339927][  T748] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7274'.
[  798.503431][  T758] netlink: 'syz.0.7276': attribute type 83 has an invalid length.
[  798.540527][  T761] netlink: 'syz.3.7277': attribute type 1 has an invalid length.
[  798.797083][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms
[  798.805197][    C1] lec:lec_tx_timeout: lec0
[  798.944107][  T783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  798.961436][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.038123][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.229301][  T801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7288'.
[  799.325644][  T811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7293'.
[  799.461682][    T9] IPVS: starting estimator thread 0...
[  799.491489][  T822] netlink: 'syz.1.7295': attribute type 12 has an invalid length.
[  799.539621][  T825] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7298'.
[  799.567233][  T821] IPVS: using max 38 ests per chain, 91200 per kthread
[  799.611969][  T825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7298'.
[  799.624422][  T831] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7299'.
[  799.645545][  T830] netlink: 'syz.0.7300': attribute type 10 has an invalid length.
[  799.669289][  T831] syzkaller0: entered promiscuous mode
[  799.683812][  T830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7300'.
[  799.685302][  T831] syzkaller0: entered allmulticast mode
[  799.723142][  T830] dummy0: entered promiscuous mode
[  799.744851][  T830] bridge0: port 3(dummy0) entered blocking state
[  799.762096][  T830] bridge0: port 3(dummy0) entered disabled state
[  799.780377][  T830] dummy0: entered allmulticast mode
[  799.997910][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.006077][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.072330][  T859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7308'.
[  800.155749][  T864] openvswitch: netlink: Flow actions attr not present in new flow.
[  800.557267][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.943147][  T932] netlink: 'syz.0.7327': attribute type 1 has an invalid length.
[  801.082825][  T932] bond5: entered promiscuous mode
[  801.110768][  T932] 8021q: adding VLAN 0 to HW filter on device bond5
[  801.129649][  T935] syzkaller0: entered promiscuous mode
[  801.138848][  T935] syzkaller0: entered allmulticast mode
[  801.206114][  T945] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  801.252496][  T945] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  801.294086][  T945] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  801.492990][  T953] syzkaller0: entered allmulticast mode
[  801.602548][  T952] syzkaller0: left allmulticast mode
[  801.818576][  T976] syzkaller1: entered promiscuous mode
[  801.842464][  T976] syzkaller1: entered allmulticast mode
[  801.937895][  T989] sctp: [Deprecated]: syz.4.7344 (pid 989) Use of struct sctp_assoc_value in delayed_ack socket option.
[  801.937895][  T989] Use struct sctp_sack_info instead
[  802.079910][T15062] net_ratelimit: 1 callbacks suppressed
[  802.079931][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.488914][ T1026] syz_tun: entered allmulticast mode
[  802.525952][ T1037] netlink: 'syz.2.7353': attribute type 1 has an invalid length.
[  802.590686][ T1037] 8021q: adding VLAN 0 to HW filter on device bond4
[  802.644290][ T1049] netlink: 'syz.3.7352': attribute type 16 has an invalid length.
[  802.712455][ T1042] 8021q: adding VLAN 0 to HW filter on device bond4
[  802.720786][ T1042] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  802.733267][ T1042] bond4: (slave vcan1): Error -95 calling set_mac_address
[  803.037708][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.119999][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.212036][ T1071] __nla_validate_parse: 7 callbacks suppressed
[  803.212059][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7360'.
[  803.275004][ T1073] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7360'.
[  803.307751][ T1074] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7360'.
[  803.349710][ T1084] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7364'.
[  803.535894][ T1088] syzkaller1: entered promiscuous mode
[  803.550342][ T1088] syzkaller1: entered allmulticast mode
[  803.573813][ T1088] netlink: 'syz.0.7367': attribute type 8 has an invalid length.
[  803.593286][ T1098] netlink: 'syz.4.7368': attribute type 29 has an invalid length.
[  803.696264][ T1107] openvswitch: netlink: Key type 161 is out of range max 32
[  803.705768][ T1107] IPVS: length: 8 != 1152
[  803.726088][ T1098] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7368'.
[  803.747714][ T1101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  803.801699][ T1116] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7372'.
[  804.049478][ T1123] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7374'.
[  804.158717][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.327808][ T1137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7378'.
[  804.455831][ T1148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7382'.
[  804.541319][ T1153] netlink: 'syz.1.7381': attribute type 1 has an invalid length.
[  804.579720][ T1151] xt_policy: too many policy elements
[  804.663719][ T1158] mac80211_hwsim hwsim86 syzkaller0: entered promiscuous mode
[  804.673214][ T1158] mac80211_hwsim hwsim86 syzkaller0: entered allmulticast mode
[  804.735619][ T1163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7386'.
[  804.857373][ T1167] ip6tnl1: entered allmulticast mode
[  804.900729][ T1170] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  805.056580][ T1178] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  805.198791][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.240363][ T1187] netlink: 'syz.1.7394': attribute type 1 has an invalid length.
[  805.416038][ T1203] tipc: Started in network mode
[  805.430567][ T1203] tipc: Node identity , cluster identity 4711
[  805.764286][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.772904][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.793418][T15062] IPVS: starting estimator thread 0...
[  805.887742][ T1227] IPVS: using max 27 ests per chain, 64800 per kthread
[  806.077653][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.238557][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.474434][ T1268] netlink: 'syz.4.7417': attribute type 1 has an invalid length.
[  806.527862][ T1271] netlink: 'syz.1.7419': attribute type 1 has an invalid length.
[  806.621543][ T1271] 8021q: adding VLAN 0 to HW filter on device bond3
[  806.715569][ T1272] dummy0 (unregistering): left allmulticast mode
[  806.747487][ T1272] bridge0: port 3(dummy0) entered disabled state
[  806.953096][ T1295] netlink: 'syz.1.7424': attribute type 8 has an invalid length.
[  808.010188][ T1347] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  808.322313][T15062] net_ratelimit: 2 callbacks suppressed
[  808.322334][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.373414][ T1329] lo speed is unknown, defaulting to 1000
[  808.488450][ T1372] netlink: 'syz.4.7445': attribute type 1 has an invalid length.
[  808.507306][ T1372] __nla_validate_parse: 9 callbacks suppressed
[  808.507326][ T1372] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7445'.
[  808.526694][ T1371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7446'.
[  808.557882][ T1371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7446'.
[  808.582454][ T1371] netlink: 'syz.0.7446': attribute type 12 has an invalid length.
[  808.598713][ T1375] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7446'.
[  808.605966][ T1371] netlink: 'syz.0.7446': attribute type 11 has an invalid length.
[  808.638957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.651213][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.663618][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  808.775360][ T1380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7448'.
[  808.828723][ T1383] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7449'.
[  809.066210][ T1394] xt_limit: Overflow, try lower: 271964/0
[  809.117592][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.358999][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.531786][ T1425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7459'.
[  809.594226][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7463'.
[  809.614527][ T1431] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  809.642414][ T1431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7462'.
[  809.779471][ T1446] syzkaller0: entered promiscuous mode
[  809.785664][ T1446] syzkaller0: entered allmulticast mode
[  809.803226][ T1446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7467'.
[  809.949687][ T1452] syzkaller0: entered promiscuous mode
[  809.964830][ T1452] syzkaller0: entered allmulticast mode
[  810.005289][ T1455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  810.006415][ T1460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  810.353623][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  810.419605][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.441486][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.437992][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.157629][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.882788][ T1452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  813.377316][ T1523] netlink: 'syz.1.7486': attribute type 2 has an invalid length.
[  813.399100][ T1523] netlink: 'syz.1.7486': attribute type 1 has an invalid length.
[  813.519581][ T1210] net_ratelimit: 1 callbacks suppressed
[  813.519601][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.578624][ T1530] bond16: option miimon: invalid value (18446744073709551585)
[  813.587100][ T1530] bond16: option miimon: allowed values 0 - 2147483647
[  813.596428][ T1530] bond16 (unregistering): Released all slaves
[  813.608914][ T1535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  813.659642][ T1536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  813.722897][ T1542] __nla_validate_parse: 5 callbacks suppressed
[  813.722917][ T1542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7492'.
[  813.729248][ T1522] bond16: option miimon: invalid value (18446744073709551585)
[  813.729278][ T1522] bond16: option miimon: allowed values 0 - 2147483647
[  813.767454][ T1522] bond16 (unregistering): Released all slaves
[  813.816086][ T1545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7492'.
[  813.836943][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms
[  813.845046][    C1] lec:lec_tx_timeout: lec0
[  813.856389][ T1546] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7493'.
[  813.979155][ T1547] ip6tnl1: entered promiscuous mode
[  813.984580][ T1547] ip6tnl1: entered allmulticast mode
[  814.072020][ T1552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7495'.
[  814.098291][ T1555] netlink: 294 bytes leftover after parsing attributes in process `syz.3.7496'.
[  814.116560][ T1559] netlink: 'syz.0.7498': attribute type 1 has an invalid length.
[  814.125972][ T1555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  814.229118][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7499'.
[  814.254858][ T1563] netlink: 'syz.2.7499': attribute type 6 has an invalid length.
[  814.273089][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7499'.
[  814.336830][ T1570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7501'.
[  814.353632][ T1571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  814.412153][ T1566] netlink: 'syz.1.7500': attribute type 12 has an invalid length.
[  814.463111][ T1574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7503'.
[  814.562289][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.198259][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.599752][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.638024][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.924320][ T8781] lec:lec_start_xmit: lec0:No lecd attached
[  817.677966][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.706699][ T1590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  817.716182][ T1601] netlink: 'syz.2.7508': attribute type 1 has an invalid length.
[  817.725494][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7508'.
[  817.735672][ T1601] netlink: 'syz.2.7508': attribute type 2 has an invalid length.
[  817.744269][ T1601] netlink: 'syz.2.7508': attribute type 2 has an invalid length.
[  817.753380][ T1601] netlink: 'syz.2.7508': attribute type 2 has an invalid length.
[  817.921812][ T1619] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  818.114423][ T1633] netlink: 'syz.0.7518': attribute type 2 has an invalid length.
[  818.717938][ T5909] net_ratelimit: 3 callbacks suppressed
[  818.717961][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.966305][ T1682] __nla_validate_parse: 2 callbacks suppressed
[  818.966325][ T1682] netlink: 284 bytes leftover after parsing attributes in process `syz.2.7531'.
[  819.452071][ T1702] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7537'.
[  819.475800][ T1700] netlink: 'syz.3.7537': attribute type 2 has an invalid length.
[  819.764509][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.060611][ T1724] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  820.163924][ T1727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7545'.
[  820.432389][ T1735] : entered promiscuous mode
[  820.653241][ T1758] dummy0: mtu less than device minimum
[  820.659116][ T1760] No such timeout policy "syz1"
[  820.799668][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.081936][ T1782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'.
[  821.098098][ T1783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'.
[  821.139074][ T1786] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7560'.
[  821.287509][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.373901][ T1805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.383714][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.455288][ T1809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7563'.
[  821.512780][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7563'.
[  821.692703][ T1816] netlink: 'syz.1.7566': attribute type 1 has an invalid length.
[  821.809646][ T1821] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.7569'.
[  821.820906][ T1813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7566'.
[  821.843532][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.905939][ T1818] bond5: (slave geneve2): making interface the new active one
[  821.937997][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  821.946155][    C1] lec:lec_tx_timeout: lec0
[  821.964851][ T1818] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  821.978574][ T1813] 8021q: adding VLAN 0 to HW filter on device bond5
[  821.995970][ T9497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  822.019029][ T9497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  822.052783][ T9497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  822.065706][ T9497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  822.260494][ T1842] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  822.365537][ T1847] netem: invalid attributes len -24
[  822.379810][ T1847] netem: change failed
[  822.619213][ T1863] syzkaller0: entered promiscuous mode
[  822.631117][ T1863] syzkaller0: entered allmulticast mode
[  823.313435][ T1896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.401569][ T1896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.460701][ T1904] netlink: 'syz.4.7595': attribute type 3 has an invalid length.
[  823.470060][ T1903] netlink: 'syz.4.7595': attribute type 3 has an invalid length.
[  823.485374][ T1896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.675753][ T1910] 8021q: VLANs not supported on ip6tnl0
[  823.919569][T15062] net_ratelimit: 4 callbacks suppressed
[  823.919590][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.349911][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.960812][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.039381][ T1981] __nla_validate_parse: 33 callbacks suppressed
[  825.039405][ T1981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7616'.
[  825.115437][ T1988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7617'.
[  825.239709][ T1997] netlink: 'syz.3.7620': attribute type 1 has an invalid length.
[  825.252607][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7619'.
[  825.279055][ T1997] netlink: 'syz.3.7620': attribute type 2 has an invalid length.
[  825.299578][ T1998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7619'.
[  825.473736][ T2002] sctp: [Deprecated]: syz.0.7621 (pid 2002) Use of struct sctp_assoc_value in delayed_ack socket option.
[  825.473736][ T2002] Use struct sctp_sack_info instead
[  825.733108][ T2021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7627'.
[  825.745998][ T2024] xt_TCPMSS: Only works on TCP SYN packets
[  825.942733][ T2029] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  825.983951][ T2021] bond16: entered promiscuous mode
[  825.999805][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.021352][ T2021] 8021q: adding VLAN 0 to HW filter on device bond16
[  826.081681][ T1930] Bluetooth: hci4: command 0x0419 tx timeout
[  826.094441][ T1929] Bluetooth: hci1: command 0x0406 tx timeout
[  826.097061][ T1998] lo speed is unknown, defaulting to 1000
[  826.236709][ T2048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7632'.
[  826.338538][ T2057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'.
[  826.361599][ T2021] 8021q: adding VLAN 0 to HW filter on device bond16
[  826.387668][ T2021] bond16: (slave sit1): The slave device specified does not support setting the MAC address
[  826.420560][ T2021] bond16: (slave sit1): Error -95 calling set_mac_address
[  826.484720][ T2057] bridge_slave_1: left allmulticast mode
[  826.496401][ T2057] bridge_slave_1: left promiscuous mode
[  826.513087][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.540148][ T2057] ¾x9ÿ
€: left allmulticast mode
[  826.545576][ T2057] ¾x9ÿ
€: left promiscuous mode
[  826.552328][ T2057] bridge0: port 1(
1¾x9ÿ
€) entered disabled state
[  826.699279][ T2070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.712158][ T2070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.730247][ T2070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.743042][ T2069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  826.756486][ T2070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.951251][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7643'.
[  826.970231][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7643'.
[  826.997920][ T2082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7643'.
[  827.045698][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.170505][ T2058] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  827.180388][ T2058] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  827.226190][ T2058] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  827.242633][ T2058] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  827.358549][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.412296][ T2058] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  827.445287][ T2058] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  827.482503][ T2058] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  827.507445][ T2058] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  827.569794][ T2058] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  827.593900][ T2058] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  828.003974][ T2129] syzkaller0: tun_chr_ioctl cmd 1074025673
[  828.022675][ T2129] syzkaller0: tun_chr_ioctl cmd 1074025673
[  828.051653][ T2129] syzkaller0: tun_chr_ioctl cmd 1074025673
[  828.354126][ T2146] syzkaller1: entered promiscuous mode
[  828.378765][ T2146] syzkaller1: entered allmulticast mode
[  829.136088][T15062] net_ratelimit: 3 callbacks suppressed
[  829.136149][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.328119][ T2198] No such timeout policy "syz1"
[  829.394408][ T2203] syzkaller0: entered allmulticast mode
[  829.641082][ T2214] netlink: 'syz.2.7678': attribute type 1 has an invalid length.
[  830.060109][ T2236] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  830.103353][ T2236] __nla_validate_parse: 6 callbacks suppressed
[  830.103376][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7683'.
[  830.124087][ T2238] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7682'.
[  830.137155][ T2236] netlink: 'syz.2.7683': attribute type 18 has an invalid length.
[  830.158171][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.168526][ T2236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'.
[  830.185520][ T2238] openvswitch: netlink: Missing key (keys=40, expected=100)
[  830.225516][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7683'.
[  830.251931][ T2236] netlink: 'syz.2.7683': attribute type 18 has an invalid length.
[  830.263522][ T2236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'.
[  830.355742][ T2245] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7685'.
[  830.401377][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.542017][ T2255] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21
[  830.571693][ T2259] IPVS: ip_vs_add_dest(): server weight less than zero
[  831.198592][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.299389][ T2300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7701'.
[  831.555588][ T2256] lo speed is unknown, defaulting to 1000
[  831.564926][ T2306] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7703'.
[  831.901089][ T2321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7708'.
[  831.923684][ T2321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7708'.
[  832.238623][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.346771][ T2345] macvlan0: entered promiscuous mode
[  832.564554][ T2355] netlink: 'syz.3.7718': attribute type 7 has an invalid length.
[  832.631084][ T2357] syzkaller0: entered promiscuous mode
[  832.643908][ T2357] syzkaller0: entered allmulticast mode
[  833.212623][ T2396] syz_tun: refused to change device tx_queue_len
[  833.241799][ T2395] netlink: 'syz.3.7731': attribute type 1 has an invalid length.
[  833.279041][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.365199][ T2403] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  833.395932][ T2403] bond7 (unregistering): Released all slaves
[  833.437457][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.889632][ T2452] syzkaller0: entered promiscuous mode
[  833.902010][ T2452] syzkaller0: entered allmulticast mode
[  834.240831][ T2482] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20002
[  834.318297][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.491248][ T2492] sctp: [Deprecated]: syz.4.7752 (pid 2492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  834.491248][ T2492] Use struct sctp_sack_info instead
[  834.544926][ T2505] netlink: 'syz.1.7755': attribute type 1 has an invalid length.
[  834.633964][ T2507] openvswitch: netlink: Key type 343 is out of range max 32
[  834.928284][ T2536] bond0: entered allmulticast mode
[  834.933637][ T2536] bond_slave_0: entered allmulticast mode
[  834.941081][ T2536] bond_slave_1: entered allmulticast mode
[  834.947587][ T2536] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode
[  834.955144][ T2536] batadv0: entered allmulticast mode
[  834.965536][ T2534] netlink: 'syz.4.7764': attribute type 1 has an invalid length.
[  835.006572][ T2536] xt_connbytes: Forcing CT accounting to be enabled
[  835.125227][ T2547] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x53534d5043540028
[  835.182957][ T2555] __nla_validate_parse: 16 callbacks suppressed
[  835.182979][ T2555] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7770'.
[  835.210979][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'.
[  835.252982][ T2556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7769'.
[  835.359263][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.419631][ T2567] pimreg3: entered allmulticast mode
[  835.681014][ T2586] netlink: 'syz.3.7777': attribute type 32 has an invalid length.
[  835.695380][ T2581] netlink: 'syz.1.7776': attribute type 18 has an invalid length.
[  835.749193][ T2590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7778'.
[  835.768738][ T2583] netlink: 'syz.1.7776': attribute type 2 has an invalid length.
[  835.983606][ T2581] netlink: 'syz.1.7776': attribute type 18 has an invalid length.
[  835.993903][ T2605] netlink: 'syz.3.7780': attribute type 29 has an invalid length.
[  836.012705][ T2605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7780'.
[  836.245993][ T2614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7782'.
[  836.256192][ T2621] xfrm2: entered allmulticast mode
[  836.267125][ T2614] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  836.295033][ T2614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.303622][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.398061][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.467914][ T2635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7787'.
[  836.487970][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.645620][ T2650] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7793'.
[  836.657238][ T2647] netlink: 'syz.4.7791': attribute type 3 has an invalid length.
[  836.686748][ T2652] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  836.688505][ T2647] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7791'.
[  836.728994][ T2652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7792'.
[  837.136753][ T9499] tipc: Subscription rejected, illegal request
[  837.428388][ T2710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.436821][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.515272][ T2712] netlink: 'syz.0.7805': attribute type 5 has an invalid length.
[  837.746152][ T2738] macvlan0: entered promiscuous mode
[  838.595119][ T2802] 
s5ÿÿø: renamed from vlan1
[  839.167682][ T2859] Cannot find map_set index 24941 as target
[  839.364533][    T9] net_ratelimit: 5 callbacks suppressed
[  839.364575][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.379012][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.388645][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.518641][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.677316][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.687395][ T2893] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  839.710287][ T2891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  840.258460][ T2911] netlink: 'syz.0.7853': attribute type 1 has an invalid length.
[  840.278223][ T2911] netlink: 'syz.0.7853': attribute type 3 has an invalid length.
[  840.298561][ T2911] __nla_validate_parse: 9 callbacks suppressed
[  840.298582][ T2911] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7853'.
[  840.319956][ T2911] NCSI netlink: No device for ifindex 813332851
[  840.338609][ T2918] netlink: 'syz.0.7853': attribute type 1 has an invalid length.
[  840.356093][ T2918] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7853'.
[  840.445694][ T2925] netlink: 6056 bytes leftover after parsing attributes in process `syz.1.7858'.
[  840.492828][ T2925] openvswitch: netlink: Flow key attr not present in new flow.
[  840.549591][ T2918] 8021q: adding VLAN 0 to HW filter on device bond7
[  840.560739][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.679684][ T2935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.715118][ T2935] tipc: Resetting bearer <eth:syzkaller0>
[  840.745163][ T2939] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7860'.
[  840.755328][ T2937] validate_nla: 2 callbacks suppressed
[  840.755348][ T2937] netlink: 'syz.4.7861': attribute type 1 has an invalid length.
[  840.761085][ T2935] xt_cluster: node mask cannot exceed total number of nodes
[  840.863143][ T2937] 8021q: adding VLAN 0 to HW filter on device bond5
[  840.918036][ T2944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.986094][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7861'.
[  841.019784][ T2950] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode
[  841.032162][ T2950] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  841.234662][ T2964] netlink: 'syz.2.7867': attribute type 1 has an invalid length.
[  841.270952][ T2964] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7867'.
[  841.300876][ T2964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7867'.
[  841.598900][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.848434][ T2983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7872'.
[  842.120042][ T2999] netlink: 'syz.1.7874': attribute type 1 has an invalid length.
[  842.231946][ T3006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[  842.352910][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7876'.
[  843.279132][ T3051] netlink: 'syz.2.7884': attribute type 32 has an invalid length.
[  843.301665][ T3059] sch_fq: defrate 0 ignored.
[  843.876464][ T3088] netlink: 'syz.1.7890': attribute type 1 has an invalid length.
[  843.964825][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1
[  844.524630][ T3128] net_ratelimit: 5 callbacks suppressed
[  844.524650][ T3128] openvswitch: netlink: Multiple metadata blocks provided
[  844.561476][ T9497] batadv0: left allmulticast mode
[  844.583455][ T9497] batadv0: left promiscuous mode
[  844.606218][ T9497] bridge0: port 3(batadv0) entered disabled state
[  844.642682][ T9497] bridge_slave_1: left allmulticast mode
[  844.673968][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.718422][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.029679][ T3162] netlink: 'syz.1.7906': attribute type 10 has an invalid length.
[  845.250399][ T9497] bond3 (unregistering): (slave gretap1): Releasing backup interface
[  845.330957][ T9497] bond2 (unregistering): (slave geneve2): Releasing active interface
[  845.448059][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.527417][ T9497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.536702][ T9497] bond_slave_0: left promiscuous mode
[  845.544076][ T9497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.553555][ T9497] bond_slave_1: left promiscuous mode
[  845.562060][ T9497] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  845.571197][ T9497] mac80211_hwsim hwsim38 wlan1: left promiscuous mode
[  845.580538][ T9497] bond0 (unregistering): Released all slaves
[  845.592582][ T9497] bond1 (unregistering): Released all slaves
[  845.611611][ T9497] bond2 (unregistering): Released all slaves
[  845.635041][ T9497] bond3 (unregistering): (slave bond4): Releasing backup interface
[  845.644362][ T9497] bond3 (unregistering): Released all slaves
[  845.661073][ T9497] bond4 (unregistering): Released all slaves
[  845.681022][ T9497] bond5 (unregistering): Released all slaves
[  845.703394][ T9497] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  845.714509][ T9497] bond6 (unregistering): Released all slaves
[  845.733024][ T9497] bond7 (unregistering): Released all slaves
[  845.754538][ T9497] bond8 (unregistering): Released all slaves
[  845.761556][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.781743][ T9497] bond9 (unregistering): Released all slaves
[  845.798393][ T9497] bond10 (unregistering): Released all slaves
[  845.827067][ T9497] bond11 (unregistering): Released all slaves
[  845.843901][ T9497] bond12 (unregistering): Released all slaves
[  845.861280][ T9497] bond13 (unregistering): Released all slaves
[  845.889381][ T3168] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  846.295820][ T9497] : left promiscuous mode
[  846.590585][ T9497] �9: left promiscuous mode
[  846.706777][ T3209] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  846.741059][ T9497] tipc: Disabling bearer <udp:syz2>
[  846.777305][ T9497] tipc: Left network mode
[  846.793018][ T3215] __nla_validate_parse: 5 callbacks suppressed
[  846.793040][ T3215] netlink: 592 bytes leftover after parsing attributes in process `syz.0.7917'.
[  846.810607][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.811404][ T3207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7916'.
[  847.128750][ T3229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7921'.
[  847.305520][ T3239] netlink: 'syz.2.7924': attribute type 13 has an invalid length.
[  847.372038][ T3239] veth0_macvtap: left promiscuous mode
[  847.446646][ T3239] macvtap0: entered allmulticast mode
[  847.491872][ T3239] macvtap0: refused to change device tx_queue_len
[  847.837626][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.918609][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7934'.
[  848.007868][ T3282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7935'.
[  848.490744][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.595785][ T9497] hsr_slave_0: left promiscuous mode
[  848.604201][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.615785][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  848.627470][ T9497] vlan0: left allmulticast mode
[  848.632691][ T9497] veth0_vlan: left allmulticast mode
[  848.638987][ T9497] vlan0: left promiscuous mode
[  848.878013][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.972408][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.090681][ T9497] team0 (unregistering): Port device team_slave_1 removed
[  849.123511][ T9497] team0 (unregistering): Port device team_slave_0 removed
[  849.602801][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.611014][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.620936][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.656252][ T3349] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  849.680697][ T3341] syzkaller0: left promiscuous mode
[  849.698384][ T3341] syzkaller0: left allmulticast mode
[  849.829748][ T9497] IPVS: stop unused estimator thread 0...
[  849.891428][ T3360] Cannot find map_set index 65533 as target
[  849.917956][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.929161][ T3362] netlink: 'syz.2.7953': attribute type 21 has an invalid length.
[  849.996117][ T3362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7953'.
[  850.280541][ T3385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7963'.
[  850.299316][ T3383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7964'.
[  850.455660][ T3396] mac80211_hwsim hwsim86 syzkaller0: Caught tx_queue_len zero misconfig
[  850.664660][ T3413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7967'.
[  850.688649][ T3412] netlink: 'syz.0.7967': attribute type 1 has an invalid length.
[  850.734315][ T3412] 8021q: adding VLAN 0 to HW filter on device bond8
[  850.763773][ T3417] gtp0: entered promiscuous mode
[  850.770976][ T3417] gtp0: entered allmulticast mode
[  850.809199][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.818770][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.827438][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.835997][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.852288][ T3419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7970'.
[  850.933155][ T3377] lec:lec_atm_close: lec0: Shut down!
[  850.958304][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.081051][ T3424] dummy0 (unregistering): left allmulticast mode
[  851.092765][ T3424] dummy0 (unregistering): left promiscuous mode
[  851.100517][ T3424] bridge0: port 3(dummy0) entered disabled state
[  851.262889][ T3441] netlink: 'syz.0.7978': attribute type 4 has an invalid length.
[  851.298212][ T3444] netlink: 'syz.3.7977': attribute type 1 has an invalid length.
[  851.314852][ T3441] .`: renamed from bond0 (while UP)
[  851.348376][ T3444] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  851.379819][ T3445] bond3: (slave veth0_to_bond): Releasing active interface
[  851.417598][ T3445] veth0_to_bond: left promiscuous mode
[  851.431065][ T3445] veth0_to_bond: left allmulticast mode
[  851.944571][ T3490] __nla_validate_parse: 5 callbacks suppressed
[  851.944593][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7992'.
[  852.143925][ T3499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7994'.
[  852.214790][ T3505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7994'.
[  852.302333][ T3511] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7999'.
[  852.323029][ T3516] netlink: 'syz.3.8000': attribute type 4 has an invalid length.
[  852.912946][ T3552] netlink: 'syz.4.8015': attribute type 1 has an invalid length.
[  853.024932][ T3554] bond6: (slave geneve4): making interface the new active one
[  853.041872][ T3561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8016'.
[  853.054942][ T3554] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  853.067995][ T3561] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8016'.
[  853.079597][ T9507] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  853.090196][ T3564] netlink: 'syz.2.8018': attribute type 1 has an invalid length.
[  853.090550][ T9507] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  853.125516][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8016'.
[  853.137149][ T3564] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8018'.
[  853.164861][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8016'.
[  853.186233][ T3564] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8018'.
[  853.202247][ T9507] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  853.232749][ T9507] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  853.459899][ T3581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  853.645073][ T3595] netlink: 'syz.2.8025': attribute type 29 has an invalid length.
[  853.971836][ T3614] vlan1: entered promiscuous mode
[  853.996473][ T3614] bridge0: entered promiscuous mode
[  854.414697][ T3648] netlink: 'syz.4.8040': attribute type 10 has an invalid length.
[  854.689818][ T3661] sctp: [Deprecated]: syz.3.8046 (pid 3661) Use of int in max_burst socket option.
[  854.689818][ T3661] Use struct sctp_assoc_value instead
[  854.713776][ T3668] net_ratelimit: 11 callbacks suppressed
[  854.713800][ T3668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.731066][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.119349][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.227049][ T3684] bond0 (unregistering): Released all slaves
[  855.277239][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.348588][ T3689] erspan0: left promiscuous mode
[  855.353853][ T3689] erspan0: left allmulticast mode
[  855.359915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.609320][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.686095][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.730459][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  855.792707][ T3689] tipc: Resetting bearer <eth:macvlan1>
[  855.856506][ T3689] vlan2: left promiscuous mode
[  855.862510][ T3689] bond1: left promiscuous mode
[  855.868369][ T3689] batadv1: left promiscuous mode
[  855.874094][ T3689] vlan2: left allmulticast mode
[  855.880527][ T3689] bond1: left allmulticast mode
[  855.885640][ T3689] batadv1: left allmulticast mode
[  855.910443][ T3689] bond3: left promiscuous mode
[  855.915346][ T3689] bond3: left allmulticast mode
[  855.926323][ T3689] vlan4: left promiscuous mode
[  855.931914][ T3689] bridge0: left promiscuous mode
[  855.936998][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  855.937027][    C1] lec:lec_tx_timeout: lec0
[  855.998623][ T3689] tipc: Resetting bearer <eth:syzkaller0>
[  856.010123][ T3689] ip6tnl1: left allmulticast mode
[  856.016791][ T3689] gtp0: left promiscuous mode
[  856.022228][ T3689] gtp0: left allmulticast mode
[  856.065376][ T3708] erspan0: entered promiscuous mode
[  856.075498][ T3708] erspan0: entered allmulticast mode
[  856.104800][ T9500] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  856.129483][ T9500] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  856.153901][ T9500] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  856.163573][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.173601][ T9497] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  856.208031][ T3727] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  856.261072][ T3730] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  856.879698][ T3765] delete_channel: no stack
[  856.888352][ T3755] netlink: 'syz.0.8071': attribute type 1 has an invalid length.
[  857.203462][T26792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.322440][ T3788] __nla_validate_parse: 15 callbacks suppressed
[  857.322455][ T3788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8078'.
[  857.338408][ T3790] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.8079'.
[  857.590296][ T3805] netlink: 'syz.4.8084': attribute type 1 has an invalid length.
[  857.669566][ T3814] netlink: 'syz.2.8086': attribute type 8 has an invalid length.
[  857.681704][ T3805] 8021q: adding VLAN 0 to HW filter on device bond7
[  857.736043][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8087'.
[  858.124350][ T3842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8093'.
[  858.783117][ T3880] sctp: [Deprecated]: syz.2.8101 (pid 3880) Use of int in maxseg socket option.
[  858.783117][ T3880] Use struct sctp_assoc_value instead
[  859.053027][ T9500] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.083997][ T9500] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  859.099779][ T9500] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.113497][ T9500] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  859.146635][ T9500] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.162061][ T9500] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  859.173816][ T3888] netlink: 'syz.3.8103': attribute type 2 has an invalid length.
[  859.250969][ T9500] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.272792][ T9500] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  859.328125][ T3888] vþ: entered promiscuous mode
[  859.564917][ T3903] ip6erspan0: entered allmulticast mode
[  859.904485][ T3929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8116'.
[  860.326699][T15084] net_ratelimit: 5 callbacks suppressed
[  860.326718][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.539626][ T3970] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  860.564190][ T3971] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  860.589216][ T3970] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  860.648473][ T3946] nbd1: detected capacity change from 0 to 63
[  860.685010][ T5838] block nbd1: Receive control failed (result -32)
[  860.685010][ T5830] block nbd1: Receive control failed (result -32)
[  860.736420][ T3808] block nbd1: Dead connection, failed to find a fallback
[  860.789059][ T3808] block nbd1: shutting down sockets
[  860.808161][ T3808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  860.818915][ T3808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  860.880310][ T3808] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  860.906811][ T3808] Buffer I/O error on dev nbd1, logical block 1, async page read
[  860.930561][ T3808] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  860.959437][ T3808] Buffer I/O error on dev nbd1, logical block 2, async page read
[  860.980481][ T3808] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.011080][ T3808] Buffer I/O error on dev nbd1, logical block 3, async page read
[  861.034892][ T3808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.060212][ T3808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  861.071051][ T3808] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.080403][ T3808] Buffer I/O error on dev nbd1, logical block 1, async page read
[  861.089095][ T3808] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.121450][ T3808] Buffer I/O error on dev nbd1, logical block 2, async page read
[  861.150051][ T3808] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.170283][ T3808] Buffer I/O error on dev nbd1, logical block 3, async page read
[  861.184291][ T3994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8129'.
[  861.190339][ T3808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.234648][ T3808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  861.249684][ T3808] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  861.259187][ T3808] Buffer I/O error on dev nbd1, logical block 1, async page read
[  861.275809][ T3808] ldm_validate_partition_table(): Disk read failed.
[  861.332690][ T3808] Dev nbd1: unable to read RDB block 0
[  861.358826][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.372907][ T3808]  nbd1: unable to read partition table
[  861.448943][ T3808] ldm_validate_partition_table(): Disk read failed.
[  861.472377][ T3808] Dev nbd1: unable to read RDB block 0
[  861.481085][ T3808]  nbd1: unable to read partition table
[  861.602164][ T4020] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537
[  861.671804][ T4028] netlink: 'syz.3.8139': attribute type 1 has an invalid length.
[  861.742816][ T4023] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  861.772839][ T4023] bond5 (unregistering): Released all slaves
[  861.780651][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.827834][ T4028] bond17: entered promiscuous mode
[  861.833451][ T4028] 8021q: adding VLAN 0 to HW filter on device bond17
[  862.115192][ T4053] openvswitch: netlink: Tunnel attr 285 out of range max 16
[  862.203057][ T4058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8149'.
[  862.332544][ T4060] syzkaller0: Caught tx_queue_len zero misconfig
[  862.399158][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.524109][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8154'.
[  862.793599][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8158'.
[  862.859440][ T4092] netlink: 'syz.1.8159': attribute type 3 has an invalid length.
[  862.910482][ T4096] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8160'.
[  862.942243][ T4089] bond9: entered promiscuous mode
[  862.954072][ T4089] bond9: entered allmulticast mode
[  863.067426][ T4105] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8163'.
[  863.437676][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.569569][ T4135] bond0: entered promiscuous mode
[  863.586022][ T4135] bond_slave_0: entered promiscuous mode
[  863.610910][ T4135] bond_slave_1: entered promiscuous mode
[  863.789967][ T4148] netlink: 'syz.0.8173': attribute type 1 has an invalid length.
[  863.873628][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8174'.
[  863.912707][ T4151] 8021q: adding VLAN 0 to HW filter on device bond11
[  863.936536][ T4151] bond10: (slave bond11): making interface the new active one
[  863.963762][ T4151] bond10: (slave bond11): Enslaving as an active interface with an up link
[  863.983971][ T4160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8173'.
[  864.014145][ T4162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8174'.
[  864.023373][ T4148] bond10: (slave gretap1): Enslaving as a backup interface with an up link
[  864.058229][ T4160] 8021q: adding VLAN 0 to HW filter on device bond10
[  864.251368][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8178'.
[  864.265113][ T4178] netlink: 'syz.1.8177': attribute type 1 has an invalid length.
[  864.296404][ T4178] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8177'.
[  864.502473][ T4193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8181'.
[  865.044355][ T4220] netlink: 'syz.0.8191': attribute type 1 has an invalid length.
[  865.171261][ T4230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  865.522471][T15057] net_ratelimit: 3 callbacks suppressed
[  865.522491][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.563762][ T4257] gre2: entered promiscuous mode
[  865.823285][ T4277] tipc: Started in network mode
[  865.836674][ T4277] tipc: Node identity 080211000001, cluster identity 4711
[  865.882410][ T4277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.004352][ T4280] syzkaller0: entered promiscuous mode
[  866.017482][ T4280] syzkaller0: entered allmulticast mode
[  866.030595][ T4288] netlink: 'syz.0.8208': attribute type 1 has an invalid length.
[  866.060383][ T4280] netlink: zone id is out of range
[  866.079103][ T4280] netlink: zone id is out of range
[  866.086342][ T4280] netlink: zone id is out of range
[  866.108643][ T4280] netlink: zone id is out of range
[  866.114765][ T4280] netlink: zone id is out of range
[  866.120781][ T4280] netlink: zone id is out of range
[  866.126509][ T4280] netlink: zone id is out of range
[  866.150085][ T4280] netlink: zone id is out of range
[  866.160385][ T4280] netlink: zone id is out of range
[  866.714395][ T4330] lo: entered promiscuous mode
[  866.725482][ T4330] tunl0: entered promiscuous mode
[  866.732437][ T4330] gre0: entered promiscuous mode
[  866.740589][ T4330] erspan0: entered promiscuous mode
[  866.746535][ T4330] ip_vti0: entered promiscuous mode
[  866.987701][T15057] tipc: Node number set to 134418688
[  867.448500][ T4374] tipc: Started in network mode
[  867.453939][ T4374] tipc: Node identity 9eeddab910e8, cluster identity 4711
[  867.464887][ T4374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  867.483037][ T4374] syzkaller0: entered promiscuous mode
[  867.495791][ T4374] syzkaller0: entered allmulticast mode
[  867.729314][ T4394] tipc: Resetting bearer <eth:syzkaller0>
[  867.777162][ T4373] tipc: Resetting bearer <eth:syzkaller0>
[  867.864809][ T4373] tipc: Disabling bearer <eth:syzkaller0>
[  867.893039][ T4403] __nla_validate_parse: 6 callbacks suppressed
[  867.893060][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8243'.
[  867.935365][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8243'.
[  868.039614][ T4413] netlink: 'syz.3.8246': attribute type 2 has an invalid length.
[  868.752702][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8245'.
[  868.952971][ T4460] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8260'.
[  868.963076][ T4463] netlink: 'syz.1.8261': attribute type 1 has an invalid length.
[  868.986628][ T4463] netlink: 'syz.1.8261': attribute type 1 has an invalid length.
[  869.141166][ T4479] netlink: 'syz.0.8265': attribute type 2 has an invalid length.
[  869.168359][ T4481] sctp: [Deprecated]: syz.2.8263 (pid 4481) Use of struct sctp_assoc_value in delayed_ack socket option.
[  869.168359][ T4481] Use struct sctp_sack_info instead
[  869.312990][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8266'.
[  869.345044][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8266'.
[  869.561034][ T4501] netlink: 'syz.4.8271': attribute type 2 has an invalid length.
[  869.579285][ T4502] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8270'.
[  869.602547][ T4498] lo: entered promiscuous mode
[  869.621326][ T4498] netlink: 'syz.1.8269': attribute type 2 has an invalid length.
[  869.829565][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8277'.
[  869.955820][ T4523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8278'.
[  870.084258][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  870.360467][ T4548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8288'.
[  870.720011][T15057] net_ratelimit: 201 callbacks suppressed
[  870.720035][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.888248][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.976741][ T4576] syzkaller0: entered promiscuous mode
[  870.996193][ T4576] syzkaller0: entered allmulticast mode
[  871.388930][ T4604] netlink: 'syz.4.8299': attribute type 21 has an invalid length.
[  871.479624][ T4603] macvlan0: entered promiscuous mode
[  871.491509][ T4604] netlink: 'syz.4.8299': attribute type 6 has an invalid length.
[  871.673028][ T4616] netlink: 'syz.1.8303': attribute type 21 has an invalid length.
[  871.704280][ T4616] netlink: 'syz.1.8303': attribute type 6 has an invalid length.
[  871.759938][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.613932][ T4729] validate_nla: 4 callbacks suppressed
[  873.613954][ T4729] netlink: 'syz.1.8333': attribute type 13 has an invalid length.
[  873.643300][ T4733] __nla_validate_parse: 13 callbacks suppressed
[  873.643321][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8332'.
[  873.667635][ T4729] gretap0: refused to change device tx_queue_len
[  873.687177][ T4729] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  873.718167][ T4733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8332'.
[  873.776465][ T4733] geneve5: entered promiscuous mode
[  873.795362][ T4733] geneve5: entered allmulticast mode
[  873.813745][T20899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  873.840382][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.850529][T20899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  873.878451][T20899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  873.888005][T20899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  873.923346][ T3716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.000339][ T4750] netlink: 'syz.2.8339': attribute type 21 has an invalid length.
[  874.011835][ T4750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8339'.
[  874.576231][ T4755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8341'.
[  874.815899][ T4783] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  874.877920][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.889306][ T1986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.902060][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.952588][ T4790] SET target dimension over the limit!
[  875.052887][ T4796] xt_TPROXY: Can be used only with -p tcp or -p udp
[  875.075873][ T4800] xt_TPROXY: Can be used only with -p tcp or -p udp
[  875.113410][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8353'.
[  875.337958][ T4818] netlink: 45 bytes leftover after parsing attributes in process `syz.2.8360'.
[  875.383126][ T4819] netlink: 'syz.0.8356': attribute type 2 has an invalid length.
[  875.560863][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8366'.
[  875.836974][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  875.845057][    C1] lec:lec_tx_timeout: lec0
[  876.000260][T15084] net_ratelimit: 6 callbacks suppressed
[  876.000282][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.045544][ T4861] netlink: 'syz.1.8373': attribute type 3 has an invalid length.
[  876.061971][ T4861] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8373'.
[  876.096415][ T4861] netlink: 'syz.1.8373': attribute type 1 has an invalid length.
[  876.119210][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8373'.
[  876.236327][ T4871] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  876.272471][ T4871] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  876.316161][ T4876] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8379'.
[  876.453044][ T4887] tipc: Resetting bearer <eth:macvlan1>
[  876.500692][ T4887] tipc: Resetting bearer <eth:syzkaller0>
[  876.565589][T15084] syz1: Port: 1 Link DOWN
[  876.609879][ T4892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  876.908168][ T4915] netlink: 'syz.0.8390': attribute type 1 has an invalid length.
[  876.998687][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.041084][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.148793][ T4929] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  877.196551][ T4932] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  877.235352][ T4935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.375429][ T4944] netlink: 'syz.3.8399': attribute type 12 has an invalid length.
[  877.388444][ T4947] netlink: 'syz.2.8400': attribute type 1 has an invalid length.
[  877.773217][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.781848][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.820954][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.829798][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.419689][ T4990] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  878.788267][ T5013] erspan0: entered promiscuous mode
[  878.807857][ T5013] __nla_validate_parse: 11 callbacks suppressed
[  878.807877][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8423'.
[  879.531937][ T5059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8439'.
[  879.542988][ T5009] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  879.564837][ T5009] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  879.676312][ T5065] syzkaller1: entered promiscuous mode
[  879.707194][ T5065] syzkaller1: entered allmulticast mode
[  879.716483][ T5068] netlink: 'syz.3.8442': attribute type 4 has an invalid length.
[  879.733066][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8441'.
[  879.737708][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8442'.
[  879.810902][ T5068] x_tables: duplicate underflow at hook 1
[  879.852189][ T5076] vlan3: entered allmulticast mode
[  879.859046][ T5076] bond0: entered allmulticast mode
[  879.864313][ T5076] bond_slave_0: entered allmulticast mode
[  879.871130][ T5076] bond_slave_1: entered allmulticast mode
[  880.054814][ T5088] netlink: 'syz.4.8447': attribute type 12 has an invalid length.
[  880.075726][ T5088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8447'.
[  880.585059][ T5118] syzkaller0: entered promiscuous mode
[  880.605316][ T5118] syzkaller0: entered allmulticast mode
[  880.641566][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8456'.
[  880.664405][ T8781] lec:lec_start_xmit: lec0:No lecd attached
[  880.672357][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8463'.
[  880.781423][   T30] audit: type=1800 audit(1776669821.035:12): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  880.850520][   T30] audit: type=1800 audit(1776669821.035:13): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  880.888796][ T5147] netlink: 'syz.2.8465': attribute type 1 has an invalid length.
[  880.922552][   T30] audit: type=1800 audit(1776669821.035:14): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  880.992836][   T30] audit: type=1800 audit(1776669821.035:15): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  881.046658][   T30] audit: type=1800 audit(1776669821.035:16): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  881.100332][   T30] audit: type=1800 audit(1776669821.035:17): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  881.141066][   T30] audit: type=1800 audit(1776669821.035:18): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  881.206019][ T5169] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8471'.
[  881.216449][   T30] audit: type=1804 audit(1776669821.065:19): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8464" name="/newroot/497/memory.events" dev="tmpfs" ino=2556 res=1 errno=0
[  881.244653][ T5164] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8471'.
[  881.257861][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8470'.
[  881.285282][   T30] audit: type=1800 audit(1776669821.105:20): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8464" name="memory.events" dev="tmpfs" ino=2556 res=0 errno=0
[  881.308038][ T3715] net_ratelimit: 2060 callbacks suppressed
[  881.308057][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.362795][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.381118][ T5172] netlink: zone id is out of range
[  881.403819][ T5172] netlink: zone id is out of range
[  881.424411][ T5172] netlink: zone id is out of range
[  881.445438][ T5172] netlink: zone id is out of range
[  881.465321][ T5172] netlink: zone id is out of range
[  881.499198][ T5172] netlink: zone id is out of range
[  881.505331][ T5188] netlink: 'syz.3.8476': attribute type 1 has an invalid length.
[  881.511494][ T5172] netlink: zone id is out of range
[  881.546053][ T5172] netlink: zone id is out of range
[  881.691354][ T5191] bond18: (slave geneve4): making interface the new active one
[  881.700976][ T5191] bond18: (slave geneve4): Enslaving as an active interface with an up link
[  881.715810][T21441] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  881.760079][T21441] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  881.884490][T21441] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  881.896029][T21441] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  882.102673][ T5215] netlink: 'syz.0.8483': attribute type 1 has an invalid length.
[  882.128154][ T5217] xt_addrtype: ipv6 does not support BROADCAST matching
[  882.169232][ T5215] bond13: (slave bridge4): making interface the new active one
[  882.178232][ T5215] bond13: (slave bridge4): Enslaving as an active interface with an up link
[  882.684950][ T5248] netlink: 'syz.3.8492': attribute type 1 has an invalid length.
[  882.834838][ T5248] bond19: entered promiscuous mode
[  882.863149][ T5248] 8021q: adding VLAN 0 to HW filter on device bond19
[  882.914433][ T5266] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  882.977995][ T5259] bond19: (slave bridge9): making interface the new active one
[  882.998208][ T5259] bridge9: entered promiscuous mode
[  883.011472][ T5259] bridge9: left promiscuous mode
[  883.179579][ T5271] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  883.276055][ T5282] delete_channel: no stack
[  883.459999][ T5291] tap0: tun_chr_ioctl cmd 1074025678
[  883.478629][ T5291] tap0: group set to 0
[  883.484730][ T5291] tap0: tun_chr_ioctl cmd 2154846332
[  883.780859][ T5309] netlink: 'syz.2.8509': attribute type 11 has an invalid length.
[  883.817741][ T5309] bond5: entered promiscuous mode
[  883.823056][ T5309] bond5: entered allmulticast mode
[  883.829510][ T5309] 8021q: adding VLAN 0 to HW filter on device bond5
[  884.083999][ T5325] __nla_validate_parse: 4 callbacks suppressed
[  884.084022][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8513'.
[  884.249003][ T5329] veth0: entered promiscuous mode
[  884.439056][   T30] audit: type=1800 audit(1776669824.685:21): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8515" name="memory.events" dev="tmpfs" ino=2580 res=0 errno=0
[  884.489808][ T5320] veth0: left promiscuous mode
[  885.302153][ T5383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8525'.
[  885.811003][ T5411] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8533'.
[  885.837011][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms
[  885.845150][    C1] lec:lec_tx_timeout: lec0
[  885.923244][ T5414] Bluetooth: MGMT ver 1.23
[  885.988772][ T5417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8535'.
[  886.008411][ T5418] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8535'.
[  886.097240][ T5423] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  886.324136][ T5436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8539'.
[  886.341073][ T5436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8539'.
[  886.393938][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8540'.
[  886.559781][T15084] net_ratelimit: 60 callbacks suppressed
[  886.559800][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.675165][ T5453] netlink: 'syz.2.8543': attribute type 13 has an invalid length.
[  886.705117][ T5455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8542'.
[  886.716038][ T5455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8542'.
[  887.053878][ T5472] sctp: [Deprecated]: syz.4.8549 (pid 5472) Use of struct sctp_assoc_value in delayed_ack socket option.
[  887.053878][ T5472] Use struct sctp_sack_info instead
[  887.598781][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.007488][ T3715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.171978][ T5543] 8021q: VLANs not supported on ip_vti0
[  888.232469][ T5551] netlink: 'syz.2.8573': attribute type 1 has an invalid length.
[  888.259938][ T5551] netlink: 'syz.2.8573': attribute type 1 has an invalid length.
[  888.292649][ T5551] netlink: 'syz.2.8573': attribute type 8 has an invalid length.
[  888.419826][ T5551] netlink: 'syz.2.8573': attribute type 1 has an invalid length.
[  888.467605][ T5551] netlink: 'syz.2.8573': attribute type 1 has an invalid length.
[  888.511133][ T5551] netlink: 'syz.2.8573': attribute type 8 has an invalid length.
[  888.637998][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.226170][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.368412][ T5593] sctp: [Deprecated]: syz.4.8582 (pid 5593) Use of struct sctp_assoc_value in delayed_ack socket option.
[  889.368412][ T5593] Use struct sctp_sack_info instead
[  889.517686][ T5598] __nla_validate_parse: 14 callbacks suppressed
[  889.517708][ T5598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8586'.
[  889.615424][ T5610] x_tables: unsorted underflow at hook 2
[  889.677227][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.471616][ T5650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  890.523344][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8599'.
[  890.596203][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8599'.
[  890.719900][T15084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.755250][ T5659] netlink: 'syz.1.8601': attribute type 1 has an invalid length.
[  890.784329][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8601'.
[  890.947253][ T5666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8603'.
[  891.047102][ T5672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.092704][ T5671] netlink: 'syz.4.8605': attribute type 51 has an invalid length.
[  891.156609][ T5678] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8607'.
[  891.193327][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8607'.
[  891.232505][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8607'.
[  891.374927][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8611'.
[  891.701444][ T5699] mac80211_hwsim hwsim86 syzkaller0: Caught tx_queue_len zero misconfig
[  891.713103][ T5706] xt_connbytes: Forcing CT accounting to be enabled
[  891.738722][ T5706] netlink: 'syz.4.8619': attribute type 15 has an invalid length.
[  891.751603][ T5701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8617'.
[  891.758528][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.816501][ T9499] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  891.826072][ T5706] netlink: 'syz.4.8619': attribute type 15 has an invalid length.
[  891.846046][ T9499] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  891.868309][ T9499] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  891.886632][ T9499] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  892.077063][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.237969][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.645846][ T5709] lo speed is unknown, defaulting to 1000
[  892.799549][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.676468][ T5773] vlan1: entered promiscuous mode
[  893.682721][ T5773] geneve1: entered promiscuous mode
[  893.689094][ T5773] vlan1: entered allmulticast mode
[  893.694447][ T5773] geneve1: entered allmulticast mode
[  893.757238][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.839977][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.870887][ T5780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  893.878214][ T5780] IPv6: NLM_F_CREATE should be set when creating new route
[  894.156974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.237121][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.397113][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.405661][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.819554][ T5822] __nla_validate_parse: 6 callbacks suppressed
[  894.819578][ T5822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8653'.
[  895.434770][ T5861] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.8661'.
[  895.676401][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8664'.
[  895.992216][ T5903] tc_dump_action: action bad kind
[  896.045742][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8667'.
[  896.501661][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8676'.
[  896.538613][ T5941] netlink: 'syz.4.8678': attribute type 75 has an invalid length.
[  896.580574][ T5943] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8677'.
[  896.611779][ T5943] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8677'.
[  896.692714][ T5944] netlink: 'syz.1.8677': attribute type 2 has an invalid length.
[  896.714022][ T5948] netlink: 'syz.1.8677': attribute type 2 has an invalid length.
[  896.798017][ T5953] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8680'.
[  896.903328][ T5964] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8680'.
[  896.960470][T15057] net_ratelimit: 17 callbacks suppressed
[  896.960491][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.985030][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8685'.
[  897.037179][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.418239][ T5988] netlink: 'syz.4.8689': attribute type 15 has an invalid length.
[  897.609138][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.757279][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.993966][ T6006] netlink: 'syz.1.8696': attribute type 1 has an invalid length.
[  898.001958][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.031351][ T6006] netlink: 'syz.1.8696': attribute type 1 has an invalid length.
[  898.040984][ T6006] netlink: 'syz.1.8696': attribute type 8 has an invalid length.
[  898.094753][ T6008] netlink: 'syz.4.8697': attribute type 1 has an invalid length.
[  898.236981][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.318856][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.456356][ T6024] netlink: 'syz.2.8700': attribute type 4 has an invalid length.
[  898.636242][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  898.716173][ T1986] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  898.727769][ T1986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  898.776513][ T1986] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  898.818938][ T1986] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  898.850801][ T1986] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  898.882923][ T1986] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  898.922010][ T1986] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  898.949527][ T1986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  899.037548][T15057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.059592][ T6039] netlink: 'syz.1.8708': attribute type 11 has an invalid length.
[  899.310466][ T6054] xt_CT: You must specify a L4 protocol and not use inversions on it
[  899.549022][ T6060] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  899.744418][ T6076] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  899.801695][ T6077] xfrm2: entered allmulticast mode
[  899.903629][ T6078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  899.937845][ T6081] __nla_validate_parse: 12 callbacks suppressed
[  899.937866][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8719'.
[  899.969687][ T6078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  899.983717][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8719'.
[  900.004376][ T6078] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  900.034355][ T6078] bond0 (unregistering): Released all slaves
[  900.206129][ T6028] lo speed is unknown, defaulting to 1000
[  900.225860][ T6088] syzkaller1: entered promiscuous mode
[  900.237161][ T6088] syzkaller1: entered allmulticast mode
[  900.702086][ T6111] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8724'.
[  900.900112][ T6116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8725'.
[  901.069333][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  901.573665][ T6143] netlink: set zone limit has 4 unknown bytes
[  901.894539][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8736'.
[  902.461329][ T6189] netlink: 'syz.3.8741': attribute type 51 has an invalid length.
[  902.488102][ T6188] syzkaller1: entered promiscuous mode
[  902.528611][ T6188] syzkaller1: entered allmulticast mode
[  902.581887][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.980197][ T6210] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8746'.
[  903.417789][ T6234] vlan5: entered allmulticast mode
[  903.573130][ T6240] xt_CT: No such helper "pptp"
[  903.705847][ T6249] sctp: [Deprecated]: syz.0.8756 (pid 6249) Use of struct sctp_assoc_value in delayed_ack socket option.
[  903.705847][ T6249] Use struct sctp_sack_info instead
[  903.791805][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8757'.
[  903.818953][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8757'.
[  904.239259][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8764'.
[  904.276498][ T6277] netlink: 'syz.3.8764': attribute type 1 has an invalid length.
[  904.936412][ T6307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  905.432528][ T6264] lo speed is unknown, defaulting to 1000
[  905.556385][ T6333] xt_limit: Overflow, try lower: 271964/0
[  905.627202][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8780'.
[  905.690306][ T6338] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  905.734999][ T6339] netlink: 'syz.1.8781': attribute type 39 has an invalid length.
[  905.805647][ T6338] netlink: 'syz.0.8780': attribute type 2 has an invalid length.
[  905.825145][ T6345] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8782'.
[  905.839148][ T6338] netlink: 'syz.0.8780': attribute type 2 has an invalid length.
[  905.875827][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8784'.
[  905.885198][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8780'.
[  905.961297][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8784'.
[  906.020132][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8785'.
[  906.092597][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8785'.
[  906.201284][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8787'.
[  906.254138][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8788'.
[  906.338984][ T6360] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  906.398282][ T6366] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  906.541045][ T6360] bond15: Removing last ns target with arp_interval on
[  906.549081][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8791'.
[  907.545141][ T6422] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0
[  907.936737][ T6437] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  907.970742][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  907.985827][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  907.998424][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  908.013666][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  908.024275][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  908.208757][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  908.223096][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  908.239585][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  908.267147][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  908.279870][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  908.633061][ T6466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  908.674729][ T6460] bond6: option resend_igmp: invalid value (32767)
[  908.706030][ T6460] bond6: option resend_igmp: allowed values 0 - 255
[  908.746361][ T6460] bond6 (unregistering): Released all slaves
[  909.029531][ T6490] xt_socket: unknown flags 0x8
[  909.071905][ T6493] syzkaller0: entered promiscuous mode
[  909.078661][ T6493] syzkaller0: entered allmulticast mode
[  909.166795][ T6438] lo speed is unknown, defaulting to 1000
[  909.304608][ T6505] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  909.391551][ T6509] netlink: 'syz.1.8832': attribute type 1 has an invalid length.
[  909.510882][ T6438] chnl_net:caif_netlink_parms(): no params data found
[  909.584290][ T6520] netlink: 'syz.0.8833': attribute type 1 has an invalid length.
[  909.603451][ T6520] netlink: 'syz.0.8833': attribute type 1 has an invalid length.
[  909.615500][ T6520] netlink: 'syz.0.8833': attribute type 1 has an invalid length.
[  909.624089][ T6520] netlink: 'syz.0.8833': attribute type 2 has an invalid length.
[  909.674767][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.683115][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.690888][ T6438] bridge_slave_0: entered allmulticast mode
[  909.699537][ T6438] bridge_slave_0: entered promiscuous mode
[  909.708501][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.715728][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.724363][ T6438] bridge_slave_1: entered allmulticast mode
[  909.732373][ T6438] bridge_slave_1: entered promiscuous mode
[  909.777998][ T6523] 8021q: adding VLAN 0 to HW filter on device bond7
[  909.787190][ T6523] bond6: (slave bond7): Enslaving as an active interface with an up link
[  909.800323][ T6523] delete_channel: no stack
[  909.845014][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.864926][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  909.909570][ T6438] team0: Port device team_slave_0 added
[  909.919038][ T6438] team0: Port device team_slave_1 added
[  909.995715][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.017960][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.087619][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.126795][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.134096][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.163689][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  910.196290][ T6534] netlink: 'syz.2.8839': attribute type 25 has an invalid length.
[  910.212253][ T6534] netlink: 'syz.2.8839': attribute type 28 has an invalid length.
[  910.303513][ T6438] hsr_slave_0: entered promiscuous mode
[  910.320262][ T6438] hsr_slave_1: entered promiscuous mode
[  910.327056][ T5830] Bluetooth: hci3: command tx timeout
[  910.593734][ T6438] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  910.712848][ T6438] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  910.733501][ T6562] __nla_validate_parse: 8 callbacks suppressed
[  910.733518][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8849'.
[  910.783666][ T6565] tipc: Started in network mode
[  910.789443][ T6565] tipc: Node identity , cluster identity 4711
[  910.829302][ T6438] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  910.927633][ T6438] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  910.938128][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  911.015731][ T6571] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  911.031193][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8854'.
[  911.042804][ T6571] bond8 (unregistering): Released all slaves
[  911.063584][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8852'.
[  911.072917][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8852'.
[  911.094993][ T6576] vlan0: entered promiscuous mode
[  911.100432][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  911.430212][ T6438] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  911.445071][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  911.454810][ T6438] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  911.474966][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  911.484359][ T6438] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  911.498548][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  911.499454][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8858'.
[  911.511330][ T6438] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  911.530989][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  911.571933][ T6591] block nbd0: reconnected socket
[  911.579365][ T6591] block nbd0: Unsupported socket: should be TCP or UNIX.
[  911.596469][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8858'.
[  911.633339][ T5830] block nbd0: Receive control failed (result -32)
[  911.701336][ T4677] pimreg3: left allmulticast mode
[  912.408292][ T5830] Bluetooth: hci3: command tx timeout
[  912.570326][ T4677] bond2 (unregistering): (slave geneve2): Releasing active interface
[  912.968014][ T4677] bond12 (unregistering): (slave bridge8): Releasing backup interface
[  912.977506][ T4677] bridge8 (unregistering): left promiscuous mode
[  913.023969][ T4677] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  913.046670][ T4677] bond0 (unregistering): Released all slaves
[  913.072736][ T4677] bond1 (unregistering): Released all slaves
[  913.129855][ T4677] bond2 (unregistering): Released all slaves
[  913.162369][ T4677] bond3 (unregistering): Released all slaves
[  913.190102][ T4677] bond4 (unregistering): (slave vxcan5): Releasing backup interface
[  913.203557][ T4677] bond4 (unregistering): (slave vxcan7): Releasing backup interface
[  913.220361][ T4677] bond4 (unregistering): Released all slaves
[  913.244911][ T4677] bond5 (unregistering): Released all slaves
[  913.266685][ T4677] bond6 (unregistering): Released all slaves
[  913.300320][ T4677] bond7 (unregistering): Released all slaves
[  913.324234][ T4677] bond8 (unregistering): Released all slaves
[  913.354546][ T4677] bond9 (unregistering): Released all slaves
[  913.376780][ T4677] bond10 (unregistering): Released all slaves
[  913.400397][ T4677] bond11 (unregistering): Released all slaves
[  913.428588][ T4677] bond12 (unregistering): Released all slaves
[  913.445647][ T4677] bond13 (unregistering): Released all slaves
[  913.462861][ T4677] bond14 (unregistering): Released all slaves
[  913.819336][ T4677] tipc: Left network mode
[  913.955824][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0
[  914.050371][ T6438] 8021q: adding VLAN 0 to HW filter on device team0
[  914.128578][ T6674] ipt_REJECT: TCP_RESET invalid for non-tcp
[  914.312685][T21441] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.319942][T21441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  914.362348][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.369569][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.477850][ T5830] Bluetooth: hci3: command tx timeout
[  914.591480][ T6690] netlink: 'syz.2.8881': attribute type 29 has an invalid length.
[  914.600062][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8881'.
[  914.823692][ T6695] veth7: entered allmulticast mode
[  914.886633][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8884'.
[  914.945871][ T6702] netlink: 'syz.1.8885': attribute type 5 has an invalid length.
[  915.432440][ T6720] netlink: 'syz.4.8889': attribute type 1 has an invalid length.
[  915.442132][ T6717] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  915.455734][ T6720] netlink: 'syz.4.8889': attribute type 1 has an invalid length.
[  915.523905][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8888'.
[  915.533731][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8888'.
[  915.573001][ T6717] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  915.607722][ T6717] bond7 (unregistering): Released all slaves
[  915.714489][ T6688] lo speed is unknown, defaulting to 1000
[  915.871399][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  916.466648][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8901'.
[  916.476573][ T6438] veth0_vlan: entered promiscuous mode
[  916.550776][ T6438] veth1_vlan: entered promiscuous mode
[  916.560073][ T5830] Bluetooth: hci3: command tx timeout
[  916.652919][ T6438] veth0_macvtap: entered promiscuous mode
[  916.776260][ T6438] veth1_macvtap: entered promiscuous mode
[  916.900141][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8905'.
[  916.910036][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8905'.
[  916.926587][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8905'.
[  916.944160][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.972549][ T6790] netlink: 'syz.1.8905': attribute type 12 has an invalid length.
[  916.991926][ T6790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8905'.
[  917.021623][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  917.106032][T20899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.119764][T20899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.147371][T20899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.172896][T20899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.218829][ T6797] netlink: 'syz.4.8907': attribute type 1 has an invalid length.
[  917.289318][ T6797] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8907'.
[  917.347917][ T6797] netlink: 658 bytes leftover after parsing attributes in process `syz.4.8907'.
[  917.387936][ T6797] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8907'.
[  917.534621][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.554483][T21441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.572206][T21441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.720672][ T4677] hsr_slave_0: left promiscuous mode
[  917.736651][ T4677] hsr_slave_1: left promiscuous mode
[  917.893033][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8915'.
[  917.910687][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8915'.
[  918.119352][T20899] smc: removing ib device syz2
[  918.353679][ T9507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.397222][ T9507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.414176][T20899] 
[  918.416574][T20899] ======================================================
[  918.423617][T20899] WARNING: possible circular locking dependency detected
[  918.430670][T20899] syzkaller #0 Not tainted
[  918.435108][T20899] ------------------------------------------------------
[  918.442154][T20899] kworker/u8:0/20899 is trying to acquire lock:
[  918.448405][T20899] ffff88801be9daa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  918.458276][T20899] 
[  918.458276][T20899] but task is already holding lock:
[  918.465656][T20899] ffffffff8f37f9e0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  918.474387][T20899] 
[  918.474387][T20899] which lock already depends on the new lock.
[  918.474387][T20899] 
[  918.484798][T20899] 
[  918.484798][T20899] the existing dependency chain (in reverse order) is:
[  918.493826][T20899] 
[  918.493826][T20899] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  918.501062][T20899]        __mutex_lock+0x1a3/0x1550
[  918.506201][T20899]        get_device_parent+0x16f/0x3a0
[  918.511681][T20899]        device_add+0x2e1/0xb70
[  918.516552][T20899]        device_create+0x269/0x300
[  918.521864][T20899]        msr_device_create+0x33/0x50
[  918.527186][T20899]        cpuhp_invoke_callback+0x445/0x860
[  918.533030][T20899]        cpuhp_thread_fun+0x36b/0x780
[  918.538436][T20899]        smpboot_thread_fn+0x541/0xa50
[  918.543936][T20899]        kthread+0x388/0x470
[  918.548545][T20899]        ret_from_fork+0x514/0xb70
[  918.553690][T20899]        ret_from_fork_asm+0x1a/0x30
[  918.559014][T20899] 
[  918.559014][T20899] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  918.566605][T20899]        cpuhp_thread_fun+0x127/0x780
[  918.572041][T20899]        smpboot_thread_fn+0x541/0xa50
[  918.577535][T20899]        kthread+0x388/0x470
[  918.582139][T20899]        ret_from_fork+0x514/0xb70
[  918.587279][T20899]        ret_from_fork_asm+0x1a/0x30
[  918.592607][T20899] 
[  918.592607][T20899] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  918.600364][T20899]        cpus_read_lock+0x42/0x160
[  918.605516][T20899]        static_key_slow_inc+0x12/0x30
[  918.611006][T20899]        nbd_genl_reconfigure+0x132f/0x1ea0
[  918.616917][T20899]        genl_family_rcv_msg_doit+0x22a/0x330
[  918.623007][T20899]        genl_rcv_msg+0x61c/0x7a0
[  918.628048][T20899]        netlink_rcv_skb+0x232/0x4b0
[  918.633354][T20899]        genl_rcv+0x28/0x40
[  918.637874][T20899]        netlink_unicast+0x75c/0x8e0
[  918.643275][T20899]        netlink_sendmsg+0x813/0xb40
[  918.648595][T20899]        ____sys_sendmsg+0x972/0x9f0
[  918.653909][T20899]        ___sys_sendmsg+0x2a5/0x360
[  918.659133][T20899]        __x64_sys_sendmsg+0x1bd/0x2a0
[  918.664617][T20899]        do_syscall_64+0x15f/0xf80
[  918.669748][T20899]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.676180][T20899] 
[  918.676180][T20899] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  918.683854][T20899]        __mutex_lock+0x1a3/0x1550
[  918.688988][T20899]        nbd_queue_rq+0x37b/0x1100
[  918.694112][T20899]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  918.700193][T20899]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  918.707060][T20899]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  918.713577][T20899]        blk_mq_run_hw_queue+0x348/0x4f0
[  918.719232][T20899]        blk_mq_dispatch_list+0xd16/0xe10
[  918.724970][T20899]        blk_mq_flush_plug_list+0x48d/0x570
[  918.730883][T20899]        __blk_flush_plug+0x3ed/0x4d0
[  918.736274][T20899]        __submit_bio+0x28d/0x580
[  918.741314][T20899]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  918.747483][T20899]        block_read_full_folio+0x599/0x830
[  918.753313][T20899]        filemap_read_folio+0x137/0x3b0
[  918.758870][T20899]        do_read_cache_folio+0x358/0x590
[  918.764520][T20899]        read_part_sector+0xb6/0x2b0
[  918.769824][T20899]        adfspart_check_ICS+0xb1/0x960
[  918.775300][T20899]        bdev_disk_changed+0x817/0x1770
[  918.780861][T20899]        blkdev_get_whole+0x380/0x510
[  918.786248][T20899]        bdev_open+0x31e/0xd30
[  918.791028][T20899]        blkdev_open+0x470/0x610
[  918.796004][T20899]        do_dentry_open+0x785/0x14e0
[  918.801306][T20899]        vfs_open+0x3b/0x340
[  918.805919][T20899]        path_openat+0x2e08/0x3860
[  918.811058][T20899]        do_file_open+0x23e/0x4a0
[  918.816101][T20899]        do_sys_openat2+0x113/0x200
[  918.821423][T20899]        __x64_sys_openat+0x138/0x170
[  918.826820][T20899]        do_syscall_64+0x15f/0xf80
[  918.831961][T20899]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.838393][T20899] 
[  918.838393][T20899] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  918.845624][T20899]        __mutex_lock+0x1a3/0x1550
[  918.850750][T20899]        nbd_queue_rq+0xc6/0x1100
[  918.855794][T20899]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  918.861872][T20899]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  918.868738][T20899]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  918.875285][T20899]        blk_mq_run_hw_queue+0x348/0x4f0
[  918.880952][T20899]        blk_mq_dispatch_list+0xd16/0xe10
[  918.886703][T20899]        blk_mq_flush_plug_list+0x48d/0x570
[  918.892616][T20899]        __blk_flush_plug+0x3ed/0x4d0
[  918.898010][T20899]        __submit_bio+0x28d/0x580
[  918.903052][T20899]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  918.909258][T20899]        block_read_full_folio+0x599/0x830
[  918.915102][T20899]        filemap_read_folio+0x137/0x3b0
[  918.920690][T20899]        do_read_cache_folio+0x358/0x590
[  918.926348][T20899]        read_part_sector+0xb6/0x2b0
[  918.931648][T20899]        adfspart_check_ICS+0xb1/0x960
[  918.937130][T20899]        bdev_disk_changed+0x817/0x1770
[  918.942709][T20899]        blkdev_get_whole+0x380/0x510
[  918.948099][T20899]        bdev_open+0x31e/0xd30
[  918.952890][T20899]        blkdev_open+0x470/0x610
[  918.957860][T20899]        do_dentry_open+0x785/0x14e0
[  918.963169][T20899]        vfs_open+0x3b/0x340
[  918.967784][T20899]        path_openat+0x2e08/0x3860
[  918.972934][T20899]        do_file_open+0x23e/0x4a0
[  918.977987][T20899]        do_sys_openat2+0x113/0x200
[  918.983204][T20899]        __x64_sys_openat+0x138/0x170
[  918.988604][T20899]        do_syscall_64+0x15f/0xf80
[  918.993742][T20899]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.000174][T20899] 
[  919.000174][T20899] -> #5 (set->srcu){.+.+}-{0:0}:
[  919.007321][T20899]        __synchronize_srcu+0xca/0x300
[  919.012803][T20899]        elevator_switch+0x1e8/0x7a0
[  919.018107][T20899]        elevator_change+0x2cc/0x450
[  919.023412][T20899]        elevator_set_default+0x36c/0x430
[  919.029146][T20899]        blk_register_queue+0x3e9/0x4e0
[  919.034710][T20899]        __add_disk+0x677/0xd50
[  919.039609][T20899]        add_disk_fwnode+0xfb/0x480
[  919.044830][T20899]        nbd_dev_add+0x72c/0xb50
[  919.049784][T20899]        nbd_init+0x168/0x1f0
[  919.054492][T20899]        do_one_initcall+0x250/0x870
[  919.059806][T20899]        do_initcall_level+0x104/0x190
[  919.065291][T20899]        do_initcalls+0x59/0xa0
[  919.070165][T20899]        kernel_init_freeable+0x2a6/0x3e0
[  919.075938][T20899]        kernel_init+0x1d/0x1d0
[  919.080832][T20899]        ret_from_fork+0x514/0xb70
[  919.085998][T20899]        ret_from_fork_asm+0x1a/0x30
[  919.091312][T20899] 
[  919.091312][T20899] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  919.099154][T20899]        __mutex_lock+0x1a3/0x1550
[  919.104293][T20899]        elevator_change+0x1b3/0x450
[  919.109598][T20899]        elevator_set_none+0xb5/0x140
[  919.114985][T20899]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  919.121332][T20899]        nbd_start_device+0x17f/0xb10
[  919.126732][T20899]        nbd_genl_connect+0x165b/0x1cf0
[  919.132289][T20899]        genl_family_rcv_msg_doit+0x22a/0x330
[  919.138379][T20899]        genl_rcv_msg+0x61c/0x7a0
[  919.143422][T20899]        netlink_rcv_skb+0x232/0x4b0
[  919.148818][T20899]        genl_rcv+0x28/0x40
[  919.153334][T20899]        netlink_unicast+0x75c/0x8e0
[  919.158659][T20899]        netlink_sendmsg+0x813/0xb40
[  919.163970][T20899]        ____sys_sendmsg+0x972/0x9f0
[  919.169310][T20899]        ___sys_sendmsg+0x2a5/0x360
[  919.174536][T20899]        __x64_sys_sendmsg+0x1bd/0x2a0
[  919.180017][T20899]        do_syscall_64+0x15f/0xf80
[  919.185147][T20899]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.191584][T20899] 
[  919.191584][T20899] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  919.200212][T20899]        blk_alloc_queue+0x546/0x680
[  919.205519][T20899]        __blk_mq_alloc_disk+0x197/0x390
[  919.211167][T20899]        nbd_dev_add+0x499/0xb50
[  919.216120][T20899]        nbd_init+0x168/0x1f0
[  919.220822][T20899]        do_one_initcall+0x250/0x870
[  919.226138][T20899]        do_initcall_level+0x104/0x190
[  919.231620][T20899]        do_initcalls+0x59/0xa0
[  919.236497][T20899]        kernel_init_freeable+0x2a6/0x3e0
[  919.242237][T20899]        kernel_init+0x1d/0x1d0
[  919.247120][T20899]        ret_from_fork+0x514/0xb70
[  919.252257][T20899]        ret_from_fork_asm+0x1a/0x30
[  919.257579][T20899] 
[  919.257579][T20899] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  919.264832][T20899]        fs_reclaim_acquire+0x71/0x100
[  919.270310][T20899]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  919.276610][T20899]        alloc_inode+0xb8/0x1b0
[  919.281488][T20899]        iget_locked+0x131/0x6a0
[  919.286448][T20899]        kernfs_get_inode+0x4f/0x780
[  919.291755][T20899]        kernfs_get_tree+0x5cd/0x980
[  919.297062][T20899]        sysfs_get_tree+0x46/0x110
[  919.302191][T20899]        vfs_get_tree+0x92/0x2a0
[  919.307155][T20899]        do_new_mount+0x341/0xd30
[  919.312200][T20899]        __se_sys_mount+0x31d/0x420
[  919.317413][T20899]        do_syscall_64+0x15f/0xf80
[  919.322546][T20899]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.328976][T20899] 
[  919.328976][T20899] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  919.336993][T20899]        down_write+0x96/0x200
[  919.341780][T20899]        kernfs_remove_by_name_ns+0x4e/0x140
[  919.347773][T20899]        device_links_driver_bound+0x54f/0x14e0
[  919.354035][T20899]        driver_bound+0xd8/0x2e0
[  919.358992][T20899]        really_probe+0x789/0xaf0
[  919.364039][T20899]        __driver_probe_device+0x18c/0x320
[  919.369873][T20899]        driver_probe_device+0x4f/0x240
[  919.375446][T20899]        __device_attach_driver+0x279/0x430
[  919.381370][T20899]        bus_for_each_drv+0x258/0x2f0
[  919.386755][T20899]        __device_attach+0x2c5/0x450
[  919.392061][T20899]        device_initial_probe+0xa1/0xd0
[  919.397650][T20899]        bus_probe_device+0x12a/0x220
[  919.403048][T20899]        device_add+0x7b6/0xb70
[  919.407933][T20899]        faux_device_create_with_groups+0x189/0x290
[  919.414546][T20899]        regulator_dummy_init+0x19/0x40
[  919.420119][T20899]        regulator_init+0xca/0x110
[  919.425247][T20899]        do_one_initcall+0x250/0x870
[  919.430559][T20899]        do_initcall_level+0x104/0x190
[  919.436037][T20899]        do_initcalls+0x59/0xa0
[  919.440914][T20899]        kernel_init_freeable+0x2a6/0x3e0
[  919.446656][T20899]        kernel_init+0x1d/0x1d0
[  919.451526][T20899]        ret_from_fork+0x514/0xb70
[  919.456677][T20899]        ret_from_fork_asm+0x1a/0x30
[  919.462000][T20899] 
[  919.462000][T20899] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  919.470625][T20899]        __lock_acquire+0x15a5/0x2cf0
[  919.476024][T20899]        lock_acquire+0x106/0x350
[  919.481072][T20899]        down_read+0x47/0x2e0
[  919.485771][T20899]        kernfs_remove+0x35/0x80
[  919.490736][T20899]        __kobject_del+0xe1/0x330
[  919.495783][T20899]        kobject_del+0x45/0x60
[  919.500572][T20899]        cleanup_glue_dir+0x1a3/0x220
[  919.505962][T20899]        device_del+0x780/0x8f0
[  919.510833][T20899]        cdev_device_del+0x27/0xf0
[  919.515965][T20899]        ib_umad_kill_port+0xf9/0x320
[  919.521364][T20899]        ib_umad_remove_one+0x160/0x270
[  919.526949][T20899]        remove_client_context+0xb9/0x1e0
[  919.532690][T20899]        disable_device+0x137/0x330
[  919.537908][T20899]        __ib_unregister_device+0x2cb/0x3f0
[  919.543911][T20899]        ib_unregister_work+0x19/0x30
[  919.549299][T20899]        process_scheduled_works+0xb5d/0x1860
[  919.555387][T20899]        worker_thread+0xa53/0xfc0
[  919.560526][T20899]        kthread+0x388/0x470
[  919.565155][T20899]        ret_from_fork+0x514/0xb70
[  919.570298][T20899]        ret_from_fork_asm+0x1a/0x30
[  919.575648][T20899] 
[  919.575648][T20899] other info that might help us debug this:
[  919.575648][T20899] 
[  919.585898][T20899] Chain exists of:
[  919.585898][T20899]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  919.585898][T20899] 
[  919.599402][T20899]  Possible unsafe locking scenario:
[  919.599402][T20899] 
[  919.606890][T20899]        CPU0                    CPU1
[  919.612280][T20899]        ----                    ----
[  919.617669][T20899]   lock(gdp_mutex);
[  919.621583][T20899]                                lock(cpuhp_state-up);
[  919.628450][T20899]                                lock(gdp_mutex);
[  919.634887][T20899]   rlock(&root->kernfs_supers_rwsem);
[  919.640361][T20899] 
[  919.640361][T20899]  *** DEADLOCK ***
[  919.640361][T20899] 
[  919.648548][T20899] 4 locks held by kworker/u8:0/20899:
[  919.653930][T20899]  #0: ffff888022edf140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  919.665360][T20899]  #1: ffffc90006317c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  919.678611][T20899]  #2: ffff8880776e0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  919.690040][T20899]  #3: ffffffff8f37f9e0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  919.699207][T20899] 
[  919.699207][T20899] stack backtrace:
[  919.705114][T20899] CPU: 0 UID: 0 PID: 20899 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  919.705140][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  919.705156][T20899] Workqueue: ib-unreg-wq ib_unregister_work
[  919.705185][T20899] Call Trace:
[  919.705192][T20899]  <TASK>
[  919.705201][T20899]  dump_stack_lvl+0xe8/0x150
[  919.705228][T20899]  print_circular_bug+0x2e1/0x300
[  919.705259][T20899]  check_noncircular+0x12e/0x150
[  919.705290][T20899]  __lock_acquire+0x15a5/0x2cf0
[  919.705326][T20899]  ? kernfs_remove+0x35/0x80
[  919.705351][T20899]  lock_acquire+0x106/0x350
[  919.705373][T20899]  ? kernfs_remove+0x35/0x80
[  919.705405][T20899]  down_read+0x47/0x2e0
[  919.705435][T20899]  ? kernfs_remove+0x35/0x80
[  919.705462][T20899]  kernfs_remove+0x35/0x80
[  919.705488][T20899]  __kobject_del+0xe1/0x330
[  919.705514][T20899]  kobject_del+0x45/0x60
[  919.705537][T20899]  cleanup_glue_dir+0x1a3/0x220
[  919.705561][T20899]  device_del+0x780/0x8f0
[  919.705586][T20899]  ? __pfx_device_del+0x10/0x10
[  919.705609][T20899]  ? xa_load+0x60/0x210
[  919.705632][T20899]  cdev_device_del+0x27/0xf0
[  919.705652][T20899]  ib_umad_kill_port+0xf9/0x320
[  919.705681][T20899]  ? remove_client_context+0x79/0x1e0
[  919.705705][T20899]  ib_umad_remove_one+0x160/0x270
[  919.705734][T20899]  ? __pfx_ib_umad_remove_one+0x10/0x10
[  919.705761][T20899]  remove_client_context+0xb9/0x1e0
[  919.705785][T20899]  disable_device+0x137/0x330
[  919.705811][T20899]  ? __pfx_disable_device+0x10/0x10
[  919.705837][T20899]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  919.705857][T20899]  ? process_scheduled_works+0xa70/0x1860
[  919.705882][T20899]  __ib_unregister_device+0x2cb/0x3f0
[  919.705910][T20899]  ib_unregister_work+0x19/0x30
[  919.705930][T20899]  ? process_scheduled_works+0xa70/0x1860
[  919.705952][T20899]  process_scheduled_works+0xb5d/0x1860
[  919.705992][T20899]  ? __pfx_process_scheduled_works+0x10/0x10
[  919.706019][T20899]  ? assign_work+0x3d5/0x5e0
[  919.706044][T20899]  worker_thread+0xa53/0xfc0
[  919.706082][T20899]  kthread+0x388/0x470
[  919.706099][T20899]  ? __pfx_worker_thread+0x10/0x10
[  919.706123][T20899]  ? __pfx_kthread+0x10/0x10
[  919.706140][T20899]  ret_from_fork+0x514/0xb70
[  919.706167][T20899]  ? __pfx_ret_from_fork+0x10/0x10
[  919.706190][T20899]  ? __switch_to+0xc79/0x1410
[  919.706212][T20899]  ? __pfx_kthread+0x10/0x10
[  919.706229][T20899]  ret_from_fork_asm+0x1a/0x30
[  919.706265][T20899]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  920.364126][T29673] syz_tun (unregistering): left allmulticast mode
[  921.420706][ T4677] IPVS: stop unused estimator thread 0...
[  921.574417][ T4677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.624518][ T4677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.681625][ T4677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.722823][ T4677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.808685][ T4677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  921.819065][ T4677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.884057][ T4677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  921.894462][ T4677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.004702][ T4677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  922.015150][ T4677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.054923][ T4677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  922.066269][ T4677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.165930][ T4677] bridge_slave_1: left allmulticast mode
[  922.172722][ T4677] bridge_slave_1: left promiscuous mode
[  922.180312][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.190741][ T4677] bridge_slave_0: left allmulticast mode
[  922.196444][ T4677] bridge_slave_0: left promiscuous mode
[  922.202676][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.213821][ T4677] bridge_slave_1: left allmulticast mode
[  922.220873][ T4677] bridge_slave_1: left promiscuous mode
[  922.226614][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.235566][ T4677] bridge_slave_0: left allmulticast mode
[  922.244320][ T4677] bridge_slave_0: left promiscuous mode
[  922.250294][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.268187][ T4677] pimreg3: left allmulticast mode
[  922.391990][ T4677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  922.403162][ T4677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  922.413386][ T4677] bond0 (unregistering): Released all slaves
[  922.531444][ T4677] bond6 (unregistering): (slave geneve4): Releasing active interface
[  922.750042][ T4677] bond3 (unregistering): (slave bridge5): Releasing backup interface
[  922.758506][ T4677] bond3 (unregistering): (slave bridge5): the permanent HWaddr of slave - c6:3d:e6:b4:45:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  922.901341][ T4677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  922.911378][ T4677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  922.920949][ T4677] bond0 (unregistering): Released all slaves
[  922.930590][ T4677] bond1 (unregistering): (slave bond2): Releasing active interface
[  922.939654][ T4677] bond1 (unregistering): Released all slaves
[  922.951498][ T4677] bond2 (unregistering): Released all slaves
[  922.963638][ T4677] bond3 (unregistering): (slave veth5): Releasing backup interface
[  922.972497][ T4677] bond3 (unregistering): Released all slaves
[  922.982747][ T4677] bond4 (unregistering): Released all slaves
[  922.995221][ T4677] bond5 (unregistering): Released all slaves
[  923.009670][ T4677] bond6 (unregistering): Released all slaves
[  923.020563][ T4677] bond7 (unregistering): Released all slaves
[  923.031913][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1
[  923.103467][ T4677] tipc: Left network mode
[  923.431676][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2
[  923.581299][ T4677] hsr_slave_0: left promiscuous mode
[  923.587500][ T4677] hsr_slave_1: left promiscuous mode
[  923.593455][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  923.601054][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.614763][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  923.622303][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.633045][ T4677] hsr_slave_0: left promiscuous mode
[  923.639915][ T4677] hsr_slave_1: left promiscuous mode
[  923.645816][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.654047][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.667381][ T4677] veth1_macvtap: left promiscuous mode
[  923.672932][ T4677] veth0_macvtap: left promiscuous mode
[  923.679764][ T4677] veth1_vlan: left promiscuous mode
[  923.685069][ T4677] veth0_vlan: left promiscuous mode
[  923.865641][ T4677] team0 (unregistering): Port device team_slave_1 removed
[  923.881834][ T4677] team0 (unregistering): Port device team_slave_0 removed
[  924.049548][ T4677] team0 (unregistering): Port device team_slave_1 removed
[  924.061221][ T4677] team0 (unregistering): Port device team_slave_0 removed
[  924.125595][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3
[  924.550181][ T4677] IPVS: stop unused estimator thread 0...
[  924.589081][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4
[  924.867757][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5
[  925.145998][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6
[  925.426437][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7
[  925.691725][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8