last executing test programs:

9.262986211s ago: executing program 4 (id=1959):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000280)="34000000070000000000000006", 0xd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r3, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa00000000000000000000000000000080000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000100000000000e0000000000000000000000000000000000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001a80)="b9ff0300600d698cff9e13f00800003a00135433f6e31e17128c0000000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r8 = socket$kcm(0x21, 0x2, 0xa)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="aced0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf25660000000c009900dc7e0000550000000400b800"], 0x24}}, 0x1)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x108, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xf7, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r6}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed7"]}]}, 0x108}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)
bind$inet(r9, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x26, 0x0, 0x8d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)

9.009949971s ago: executing program 3 (id=1961):
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delrng={0x10, 0x14, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004850}, 0x80)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffff, 0x8, 0x6, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x24040008)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000087}, 0x40000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r5)
r8 = accept$phonet_pipe(r0, &(0x7f0000000540), &(0x7f0000000580)=0x10)
connect$phonet_pipe(r8, &(0x7f00000005c0)={0x23, 0xc, 0x80, 0x86}, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r5)
sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x114, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x100, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x6, 0x1, '%!'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, '/}]*'}, {0xa, 0x1, 'wpan3\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '%[,+'}, {0x9, 0x1, 'TIPC\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '\xe5,#/'}]}, {0x40, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, 'wpan3\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, '+/'}, {0x9, 0x1, 'TIPC\x00'}]}, {0x4c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'wpan0\x00'}, {0x5, 0x1, '\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x8, 0x1, ')+!\''}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x44040)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'tunl0\x00', <r11=>0x0, 0x1, 0x7, 0x8, 0x6, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x67, 0x0, 0x7, 0x29, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x14, 0x9f, 0x0, 0x0, [0x1525d136, 0x8, 0x7f5, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', <r12=>0x0, 0x4, 0x1, 0x9, 0x5, 0xd, @private1, @mcast2, 0x80, 0x700, 0xe, 0x401}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a40)={'syztnl0\x00', <r13=>0x0, 0x10, 0x0, 0x2, 0xdf3, {{0x8, 0x4, 0x1, 0xc, 0x20, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1, {[@noop, @timestamp={0x44, 0x8, 0x3c, 0x0, 0xd, [0x43]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe0, r10, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000d80)={'geneve1\x00', &(0x7f0000000c80)=@ethtool_drvinfo={0x3, "ac6768afe7fea53f8d79dc66d9860d8ec759be16021a9cf511ce7957d478ebd8", "c9f5c91f14d03ac955a74b8fa169b81324c781be20970e7f3f05d94fb002cd5c", "1e1c7882682a10047be5652adb956498161999ab4734279d261a0a7b37f3e266", "ce9a6f21fc27214e2772b3de37421c1af98e62d9b13ecef8c298428d6455460c", "5a745601cc8790a57c1e6de4faf56a5d00c86d4bafd93658f3a1355780a455c6", "9882492f856822b1be1208d6", 0x5, 0xfffffffc, 0x0, 0x81, 0x800000}})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r15, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe4, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0xd}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0xc041)
r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f80)='cpuset.effective_cpus\x00', 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r16, 0x65, 0x1, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001040)=0x48)
sendmsg(r3, &(0x7f0000001400)={&(0x7f0000001080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)="56bf7e82b18882c3e3f999ad99b463a89103022040031eedfd4161022747941930a9188b761eb7a38d473a5c4d76b218ed84a9a3fb523349e227e63914cb026824fb0da7ab058c8323bc30a5180fc6ae87a1668a17dc9aa8cd88ae4161b93b7ebe50b6ecc485b244c3f883094e8bc25f1826e6a48b4cfe61342fbee87418eb854d17dad57f9cc76553a69056325289eaeff7dfa823a7c55b832b5af219416a78a46af17b7376e98f0a47bee291743fe850d4e8c7d21a4f596578067641b7cdd98f2975d4a13c9a362865b1b5ab37a6a7a1f5b725dcdbd0fa33412cdeb15ebef6d5538667fe623fa71ee552318b4546fc805e", 0xf2}, {&(0x7f0000001200)="bec78901659e9a6bf962342bed0bc7702353b01079f568720314b5c3c204294dade773dc7f0eb7e8874743b453d759ed838e9e7b1091def5cf027ef767f93cca1b3d984f5b10680ee9d6be5330aac84f0f568980a1b70c0fbd1967b951757608f92e4a66c03e70ee9586bcb6fef9343175148dc223478c2693eb3f57bc4df83d8e8debf058ec3aa4635ea913ab53be8100b5396ff01da921e773c67e2489160d5b74f4f38f068bf81a586c2fe2003c03c59bfe59c2bfb79473769c1217ac0e03a735662cad6b6e0f8cf550b55bb4ec910cb158fd4371e76ee49e24fb56da762be59319a53070918bb7ef5b6a2f1fd0895f", 0xf1}, {&(0x7f0000001300)="2d99d5069b9ed4a0451e99c733f9306534ef36ccf877ae004e3b1877495bd244c8cc1e1051e757527feaf39bacc5fac942dbfd8ab18257afd6960940f7d7d8b6f436d1ae7830dcb454449cd8f5dfabc85f27798575b07491383f0f43ff5e5e5a78fd869eaaf344d667d1d5ffe4d429bcb65fda61c1b06f2737d426fe8bbc1243ff6dd725513d", 0x86}], 0x3}, 0x4c801)

6.704620185s ago: executing program 3 (id=1965):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a"], 0xe0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x200000000013)

6.573525167s ago: executing program 4 (id=1967):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x18, 0x2, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FILTER={0x4}]}, 0x18}}, 0xc090)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000740)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x4}}, 0xe8)
connect$inet(r7, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10)
writev(r7, &(0x7f00000008c0)=[{&(0x7f0000000f80)="0755fe40562e7b85a47c51b34e4915372959c1a9f717f06fee80bde358ee3bdf1b0e81cb69cbf815b2ee947c2e6291d3574dbc06b014c07529da84c4d406cf55c135ddaa91f1dddf2781fce0565965962e6cdd373c6e257b6d53cbbbe6f8b4", 0x5f}, {&(0x7f0000001000)="8ff0824507bc28815eeab1ba9383e8c1eb66bd2fde4f5b6778", 0x19}, {&(0x7f0000001040)="cb1fe10bbf9cf65b0c6a9624da7cd91b0f212385b912b868df950c40f4eae52a2e5cf6a9310e910db330724631a344f0ba7c597f68022e7d0acfa5e547e3c818b46bea61c41f3d3c94e4fe8bce6f1b32c30612be", 0x54}, {&(0x7f00000010c0)="f5efb193bdf56cce7656d145dbca735a812ddd96a6ec659def17c444297c", 0x1e}, {&(0x7f0000001100)="9d2e5d58e01cf60c19e447bca57cf505174a6adc3775f2ee91afb29617efb5b58b8fcc53c74dbe328cc3871b56636a6e08a823e6383ef9351db0a69d3e844b5ebd927c6fed8e8fd03897e78eff8effb05cf8ad099da2e8c6dd955e373d8a45ac449f4409bc8f02b804caa8b3920d71d5438cb5c65e222b289d2eb9524d673304e579ce0fcab53c3e02baa94f20db973fbb633451b09fc3f45ab62719d111f29f", 0xa0}, {&(0x7f00000011c0)="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", 0x354}], 0x6)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x78, 0x2, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x1a4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', <r11=>0x0, 0x8, 0x40, 0x5, 0x800, {{0x37, 0x4, 0x2, 0x5, 0xdc, 0x67, 0x0, 0x7b, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}, @ssrr={0x89, 0x23, 0x48, [@dev={0xac, 0x14, 0x14, 0x24}, @loopback, @loopback, @broadcast, @loopback, @private=0xa010102, @local, @empty]}, @cipso={0x86, 0x3a, 0x0, [{0x2, 0x4, "9aac"}, {0xc5a3006e62421b05, 0x7, "e4cd53212f"}, {0xdc2122c88887dc00, 0xd, "2385be06256b571876fb2f"}, {0x1, 0x5, "078391"}, {0x3, 0x12, "924aee4b959eb5bfd6a04380ac223d88"}, {0x7, 0x5, "3580e0"}]}, @cipso={0x86, 0x4a, 0x0, [{0x7, 0x3, 'r'}, {0x6, 0xc, "ac2bfe8e66bd30bcd39d"}, {0x2, 0xe, "100ce53413f894751e96abd0"}, {0x7, 0xe, "42554b7f3ce4b24ec638e9f0"}, {0x48bc4d7dd5a4020e, 0x3, 'V'}, {0x6, 0xb, "95b7dcbf9c1b62b1ff"}, {0x7, 0xb, "bfbf7b3603e21eeea6"}]}, @end, @lsrr={0x83, 0x17, 0xf8, [@remote, @rand_addr=0x64010102, @broadcast, @private=0xa010100, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000f40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a00)={0x4c8, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x354, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-$/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.&\\+)&.%:-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a00000}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%*)/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.@\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5981}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/ $\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(#\x9d/*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "95b73474676672566dc975d9d5adc4cfde5551a20eec"}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "39dbace3e7dcb80d106c15b1dcc91e1962358ae522979b02b6c7a83789e7010449ca704fd514d0ee980efe20c2015dbdb8e7115fb92b6c664e13e71707845632fe6185e079d4081e91e8a0e3d9e8ac0c28069d36c79b0404412e880fba4afe084009f91ab113726656882482acd1982c24cb38b40c04d682be87a0a46f7a19b6d21eade5c272cb1f38de726f0a8fcc9d258bd95bd5694169a65019391a32299db2f2a7a5839cce786a64241bf4aacff7e10a6c2f375ce67960fa14ba7fc83d4bda8b5a3fb41e281e240c94c666dcc4cf"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc935}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa46}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'!-@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5ea00000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '(-$-@)\')%/@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x54c1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
unshare(0x22020400)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0)

6.244873145s ago: executing program 3 (id=1970):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='!\x00', 0x402001, &(0x7f0000000040)={@align=0x80000001, {0x1, 0x5, 0x8, 0x68dc7ae8}}, 0x7ff, &(0x7f0000000080), &(0x7f00000000c0)=0x9})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r1=>0x0, @local, @local}, &(0x7f0000000180)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>r1, 0x29, 0x4, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x7800, 0xff, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', <r3=>r2, 0x10, 0x80, 0x3, 0x63, {{0x27, 0x4, 0x3, 0x21, 0x9c, 0x64, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x64, 0x1, [{0x5, 0x8, "d44f66375b9e"}, {0x5, 0xd, "311a38b37570351bd42ce5"}, {0x1, 0x3, "f2"}, {0x1, 0x11, "254d82f92e2a75ede5cefdce4ecb83"}, {0x2, 0xa, "e95423975e132fd7"}, {0x2, 0xc, "9d3106a44ba7e9b9d3a0"}, {0x2, 0x2}, {0x5, 0x10, "c49bbe53a48913a81af62d911251"}, {0x6, 0xd, "d21c61fed40114816d90ed"}]}, @ssrr={0x89, 0x23, 0xfb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @rand_addr=0x64010100, @loopback, @private=0xa010101]}]}}}}})
recvfrom$packet(r0, &(0x7f0000000280)=""/85, 0x55, 0x10000, &(0x7f0000000400)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440), &(0x7f0000000480)=0x4)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000004c0))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000500)={{0x16, @remote, 0x4e23, 0x2, 'lblcr\x00', 0x0, 0xb02, 0x56}, {@remote, 0x4e21, 0x3, 0x9, 0x1, 0x56e5bfcb}}, 0x44)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000006c0)={0x4, 0x6}, 0x4)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r7)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3f5, 0x100, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40805}, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
getpeername$netlink(r8, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x12}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00'})
syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000ac0)={{r9}, "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"})
r10 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r10, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @local}, &(0x7f0000001b00)=0x20)
shutdown(r6, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r0, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000001b80)=[0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x6a, &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x39, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001e40)={0xffffffffffffffff, r0, 0x3, 0x0, @val=@target_btf_id=r11}, 0x14)

5.917200581s ago: executing program 2 (id=1971):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)=ANY=[@ANYBLOB='..'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xfd94, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x2e]}}, 0x0, 0x3a}, 0x28)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x8, 0x100000000, 0xca8, 0x400000000}, {0x0, 0x0, 0x0, 0x9}, 0xfffffffd, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0xfe, 0x4}]}]}, 0xfc}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94)
mkdirat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x1ff)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80a4)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)=ANY=[@ANYBLOB='..']) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xfd94, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x2e]}}, 0x0, 0x3a}, 0x28) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x8, 0x100000000, 0xca8, 0x400000000}, {0x0, 0x0, 0x0, 0x9}, 0xfffffffd, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0xfe, 0x4}]}]}, 0xfc}}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) (async)
mkdirat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x1ff) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80a4) (async)

5.883526433s ago: executing program 0 (id=1972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0x0, 0x10, &(0x7f0000000ac0), 0xfffffffffffffe19}, 0x42)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000000bc0)="280baeaa331490e42743a84473fe57f3cfc991852d87050edf07629c88e428b0de23317af72d88ec7880d5ba7ce89be84f12133347ec38f26be93bcbdec4f76239343aa73526aada8930854c0c91568720bb8e2e6d972529a0791a313a2d41554c097795d9ca62e1165777c0968903219952697a4d67b2220e1471f10ca1b3420cb8c718500931d85f19336160f661c2b59b3f8fecd8c2096c0265c505d71714c6556e6ffa3fb8ec50a141f8395f4ca7850fee7cdbd85a7e17d87c3c1dd060970a9bf6724d7298f8a6aaf990695b", 0xce) (async)
setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000000bc0)="280baeaa331490e42743a84473fe57f3cfc991852d87050edf07629c88e428b0de23317af72d88ec7880d5ba7ce89be84f12133347ec38f26be93bcbdec4f76239343aa73526aada8930854c0c91568720bb8e2e6d972529a0791a313a2d41554c097795d9ca62e1165777c0968903219952697a4d67b2220e1471f10ca1b3420cb8c718500931d85f19336160f661c2b59b3f8fecd8c2096c0265c505d71714c6556e6ffa3fb8ec50a141f8395f4ca7850fee7cdbd85a7e17d87c3c1dd060970a9bf6724d7298f8a6aaf990695b", 0xce)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000000fc0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001000)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x1f2, 0x10, &(0x7f0000001140), 0xfffffe51}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b80)="e0b9547ed387dbe9abc89b6f5b69", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000d80)={<r3=>r1, &(0x7f0000000200)='syzkaller\x00', 0x200480, &(0x7f0000000cc0)={@align=0x2, {0x3, 0x5, 0x7, 0x5}}, 0xff, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0x401})
bind$l2tp(r3, &(0x7f0000000dc0)={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005200bf952cbd0a000000e46d7b3e79608df263836fd9807e10aa7e95de6317413b14392599ca99919ba7a9279e1b44be3c377ec3f802c29e4621324f53444eea4cea31a68a557eeb75399f9de35bb533ec53ba9108ca2c3b5d93f4e786c7a72fb5186ec2ea62cd3c7516fa42d72920a635648a0c182a13e2938f161b9770837359bd09511402f3e00ebd72384ab226be34fe5143461d2469240bf20e4f89ecda8a3ea5ac8e7c75210031d560c456980c1257b53ff1b429a7489e070ff13077bb786cfa6ee856d3b8217e250665cadaf72febdc147201a323bec6d84cc07ab2539b66"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2102, &(0x7f00000000c0)) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2102, &(0x7f00000000c0))
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x500, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x500, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="c957cdf7ff7585315e62972ceb2809223568dc69e653a9b4219355aada94a3e350be9b70fd2e759caa3d350000000000003cf3860e0ef559ab9bbb34b9d078501557db0c5fac35dad7d7c4175abeec3413df0259cb35b38c36cadeebc1cfb1c9dbef4f520aaf6d77b04a"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000640)=<r7=>0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r8) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000001280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0xd, @v={0xfe, 0x6, 0x6, 0x9, {0x9, 0x81, "43cb83190867fac8"}}}, 0x12)
sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) (async)
sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1)
syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa88a81b0081000a00000d020000a015030000771897593650c46ae65bb27d859e2ee7f92f435b1aa0dee6513f82a57d2e0ca5af505131cdf68754076d67d557249e8484a614fdd90dad219f60cf4292a43fa9ffc0c9028640cf24e15913cdad2a1043c3c4e27ccf3dd7ce283f26607c1916f4f5c1910b99bfa7f56637dff207a766975a4226d32736d053eb66bba9828d5cf7848b94f84cc2b37ffc956138d1406a319d5af35924394f609f6f12fd055ca3e6af9003d8f70e"], &(0x7f0000000100)={0x0, 0x4, [0xe80, 0x208, 0x130, 0x20e]})

5.64877124s ago: executing program 4 (id=1973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000008c0)='0', 0x1, 0x40000, &(0x7f0000000900)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0)
bind$can_raw(r1, &(0x7f0000000280)={0x1d, r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x2e, 0x1, 0x401, 0x160, r9, 0x9, '\x00', 0x0, r10, 0x4, 0x0, 0x1}, 0x50)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8)
r11 = socket(0x10, 0x803, 0x0)
r12 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
ioctl$SIOCX25GDTEFACILITIES(r12, 0x89ea, &(0x7f0000000500))
r13 = socket(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_BSS(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040000)
getsockopt(r13, 0x200000000114, 0x2721, 0x0, &(0x7f00000005c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

4.9027606s ago: executing program 0 (id=1974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={0x0, 0x0, 0x8, r1}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000060000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c032e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb477ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad750f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c262fb637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf96283447366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce56902007f5d6a6270ff0f0f4c371029ca8489571b55841b06de003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0d0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a574"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001880)=r4, 0x4)
syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x8000}, @window={0x3, 0x3, 0x3}]}}}}}}}}, 0x0)
sendmsg$inet(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001940)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000001a00)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0)
recvmsg(r0, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x40010000)

4.84728967s ago: executing program 3 (id=1975):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006000600800a00000c000280040003"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={<r2=>0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}, 0x121, 0x5, 0x0, 0x800, 0x2b, 0x2, 0x1b}, 0x9c)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x8, 0x4)
bind$inet(r4, &(0x7f0000000640)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r3, &(0x7f00000006c0), &(0x7f0000000700)=@udp=r4}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000780)=0x800001, 0x4)
listen(r5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r3, &(0x7f0000000800), &(0x7f0000000840)=@tcp6=r5, 0x2}, 0x20)
shutdown(r5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r7, 0x325}, 0x14}}, 0x0)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r9=>0x0})
bind(r8, &(0x7f0000000300)=@can={0x1d, r9, 0x1, 0x2}, 0x10)
read(r8, &(0x7f0000000480)=""/100, 0x64)
getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000000180)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000740)={r2, 0x8}, 0x8)

4.751241444s ago: executing program 2 (id=1977):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1413, 0xe21, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c000}, 0x448d0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000600)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfe}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe8ff}, @generic={0x66, 0x8, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0x3000000}}]}, &(0x7f00000006c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000700)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10)

4.562289138s ago: executing program 4 (id=1978):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000007a000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xffffffffffffffaf, 0xcd654c4c2c1ddb39, &(0x7f0000000300)="6a76b6b2aa437631874aa9eb99fa4765bef94006552f08cb399f5ba91d54b89a7a8bc29d83b68519cb4dc396e921f61979245b235c9cf14544d5178db3990041b42fe50c75fe61490473cfcb997bb462cd00bc0cd0da654d74994c7b4fa222b8e60f0c95ab62e048253d82d5a0991cea9060ce4424d419a983630c38edfc1e2c40f7addf0e5dd1e26ff1c26f6dd79fe59c1f942a8b0486450b8aea91042e569a29a6ae503d53fd7b28c4d8388cbbdff45439f216b04341caf54c1d4cac66576d595ff978f83aef29b852c1eea5dfca442e", &(0x7f0000000000)=""/10, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.388907756s ago: executing program 1 (id=1979):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004850)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/171, 0xab}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="040100000b06030000000000000000000100000305000100070000000900020073797a310000000005000100070000006800078020001a00626c6b696f2e6266712e736563746f72ff5f726522b8a995c37dc568"], 0x104}, 0x1, 0x0, 0x0, 0x20044081}, 0x4)

4.319256725s ago: executing program 0 (id=1980):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x40}, 0xfc40) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000d40))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000d80)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000dc0)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e00))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000e40)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ec0)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f00))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f80)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000fc0)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001000)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001080)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000010c0)) (async, rerun: 64)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r4, &(0x7f0000001100)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000d00)={0x1}, 0x8)
close(r5) (async, rerun: 64)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x881) (rerun: 64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'ip6erspan0\x00', 0xc201})

4.318860374s ago: executing program 4 (id=1981):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000f7000000000000000400000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00', 0x9, 0x7d, &(0x7f0000001300)=""/125, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x0, 0xb, 0x75, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000001780)=[{0x5, 0x1, 0x3, 0x7}, {0x2, 0x2, 0x9, 0xb}], 0x10, 0x1ff}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x8)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x20e, 0x126, 0x0, &(0x7f0000000680)="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", 0x0, 0xd8cc, 0x6000000000000000, 0x0, 0x0, &(0x7f00000007c0), 0x0}, 0x50)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@getchain={0x24, 0x66, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfffd, 0xa}, {0xa, 0xc}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000100)=0x6, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a0001002abd7000ffdbdf250a"], 0x30}}, 0x48000)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c0001000700000f0100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800900010001006e6400000000140002800600980007000000050016001d000200"], 0x44}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0xc4c5}, 0x2000c815)
getsockname$packet(r8, &(0x7f0000000cc0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d00)=0x28a)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="480000001000390400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414bb050013000100000005000a0001000000"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="30000000100039040200"/20, @ANYRES32=r9, @ANYBLOB="40f3ff000041040010001215080001006772650004000280"], 0x30}}, 0x4040000)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000f40)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=r11, @ANYBLOB="10002bbd7000fedbdf2511000000600001801400020070696db56a1f2c726567310000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000300020000000800030002000000140002006e696376663000"/44], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x44015)
sendmsg$nl_generic(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
close(r0)
socket(0x2, 0x80805, 0x0)
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

4.31481921s ago: executing program 2 (id=1982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)='O', 0x1, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000200)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40)

4.050768782s ago: executing program 1 (id=1983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f0000000500)=@unspec, 0xc)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000808}, 0x40d4)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x8, [0x81, 0xa1e2, 0x7, 0x8000000000000001, 0x6, 0xf, 0x7, 0x5]}})
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/90, 0x5a, 0x0, &(0x7f0000000440)=""/31, 0x1f}, &(0x7f00000004c0)=0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4914}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x40efb, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

3.742072128s ago: executing program 3 (id=1984):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r2, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xf0, 0x9, 0x4c, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000)

3.651086551s ago: executing program 4 (id=1985):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000200)="22000000070007ffffffbfffff", 0xd)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000120001000000000000000000ac141400000000000000000000009b0e000000000000000014000d00200100000000000000000000f3ffffff9bc20eb2297d360c766da9d3d6ae368db7601c98d2af666513139fd2964a7736b94fb3bc6ccf9baa54295d68ac02da94e038c88780592500d87ec36fbfc756c7e44aadfaea59349b211e"], 0x3c}}, 0x4840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f8004170000080003004700000008003e0067"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r4 = socket(0x2b, 0x80000, 0x0)
r5 = gettid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711229000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff)
r11 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x3c, r10, 0x1, 0x470bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000840)=0xc)
sendmsg$netlink(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f0000000900)=[{&(0x7f0000000940)={0x2b0, 0x13, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0x29f, 0x8a, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x36}, @generic="d5b1793a3fdd7559ac9b080a0812314b4800e46225f0c744eee2b2fcb285423f70412d07eff4533f352f5d14d783e748b0f682ae6e546ed20a2aa7b7e9c85bd2207857478a77d14023c9f03dbd78317e24826ed817742ba1c71480ce5bda1ae1db818ec1d5bc8c985846e463305e030921cce66bece6799a1950cb1f0fd6342db8ec4009750cb1d25bda133d393396f1429cdd64f697d80c21009dc7bae49bb5cda6bc2bbc6231a990e69decc1bc697126790320a6efea8f4057aade1eb92166a53759a3b4a5d6", @generic="196b1f207d3aac436ae7db1102266dc9d6d9a2635888582dc5cf5715f6108a4f2ee0b7a1f3a6fffa3dbf33ab8a2278a478170672fa6bd8fef761507a112efec2", @nested={0x4, 0x1a}, @nested={0x4, 0xb0}, @nested={0x4, 0x15c}, @generic="55e8f699bec9fa7177d0d36032b227b5b4c430ef92e8cc618e3d444f3d01263c040fbbc2708c3560bd610d29f2c86d13dab899e1d69c36f7db4ab2944e8283ebeccbb5baef1d4a893a33277e5836c792bb8ef5bb746efe137395500bb894de23d644d46ced7f6dc33c7d53da48c4eeaf65e8625c4e7fa84af4d9bc10923ea03d5b60d29a03d36572c8bbdd77d8d55da0bbb884e80a1415737cf2ff3ff159213d65b8a6918cb614093ca11645a724b12f9ab799af8294a9ad71d7f6e685ea1fb0c2927d8237d9c958e5cfe2a33e7a541b941c5d333ac7da1e580d3e72c6e9436847aba1bb9fc56e408bfe16e50aa8e2c0", @generic="d737f412ba7778711cb0c0fc965f13e73b1f8aa05f2c381750ea0b3796078393fb2d0004dcca921014a21327b155f0bd7368298a0e11dcf694ccba3eed12b689f5024e018e0c5969183205fab85cdb9dfc06c7637be5bdfcaf47d4c4c25b2df9bca9e3708abf69913b55db1e0f42b210a429c8dcd01d9e3c08f480f0b0444f9b1bf76551aee6066d9197c0f6"]}]}, 0x2b0}, {&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x184}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x40}, 0x8080)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f00)={0x1144, 0x4f, 0x1, 0x2, 0x0, {0x1c}, [@nested={0x4, 0x2}, @nested={0x34, 0x114, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xc9, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x5}, @nested={0x18, 0x5e, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x7254}, @nested={0x4, 0xef}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x3}]}]}, @nested={0x10f8, 0x99, 0x0, 0x1, [@typed={0x8, 0x10f, 0x0, 0x0, @pid=r5}, @generic="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", @nested={0x4, 0x15d}, @nested={0xe6, 0x139, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @pid=r11}, @generic="ef75ee9050c74a2a1dce11c077bf3c64774802162351310917d88342201b56af74edf7acf8c09ea7d42adf58753fc7c5f1c1896b55405c17f0796c4a195229d2e40e3d1139902d0c8d498c3555968c6d0c7163c5d9f3a11494706da1b9c17ab60075440afe0f988ccde7584f25b74d50c18d1348f9a43c26ff9490d7c451", @nested={0x4, 0x13d}, @generic="bf40b9e2206c9b21e64ec251578aca59353d72d8b332574ed7501e24709387e56ba43cb1e957a26744e3b7a93e3be72c07af11712aa87f18e8a5cc8da6ce3ff5e90498faba5585c4d85b9029e0f29743", @nested={0x4, 0xa9}, @nested={0x4, 0x12a}]}]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
getpeername$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x20)

3.641535231s ago: executing program 2 (id=1986):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000600)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000640)={0x1, [0x1]}, 0x6) (async, rerun: 32)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00Kg', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf25010000000800030007000000080004000400000005000500030000000500060001000000"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) (async, rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (rerun: 32)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f00000006c0)=0x100) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000840)={0xc0000008}) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961610000000000150101000000000085000000c400000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 32)
r11 = accept(r8, 0x0, &(0x7f0000000000)) (rerun: 32)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r11, 0x28, 0x0, &(0x7f0000000040)=0x3, 0xfffffffffffffe32)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', r5, r12, 0x4, 0x4, 0x4}, 0x50) (async)
getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc00000019000100000000000001ff02000035b6181d1879f7d55fe04a6229000000f7000000000000000100000000000000000a00"/77, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000006000000000004003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000801000000000000000100000000000000440005000000000000000000000000000000000100000000320000000a0000000000000000000000000000000000000006000000040200"/180], 0xfc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.926356173s ago: executing program 1 (id=1987):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x4e21, @private=0xa010101}, 0x10) (async)
listen(r1, 0x8) (async, rerun: 64)
r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 64)
r3 = socket$alg(0x26, 0x5, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r2, 0x100000000) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
recvmmsg$unix(r4, &(0x7f0000000680)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async, rerun: 64)
sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x20000801) (async, rerun: 64)
write(r2, &(0x7f0000000740)="04", 0x1) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000005400068014000300706565725f6e6f0000000000000200003c00040067636d28616573290000000000000000000000000000000000000000000000001400000058bef40934353637383930313233343536373839382512fb64fd51b353f6909b22e66dcaaeca1ee30d9c844d33"], 0x68}}, 0x0) (async, rerun: 64)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x70fd}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}]}, 0x54}}, 0x4) (async, rerun: 32)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x101000000, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pim6reg\x00', {}, {}, 0x0, 0x81}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000009000000630123040000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2.406607757s ago: executing program 0 (id=1988):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4)
sendmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0e", 0x1}], 0x1}}], 0x1, 0x0)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x2, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf0e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x397}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb91f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xd4}}, 0x81)

1.808271327s ago: executing program 3 (id=1989):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xa, 0xffffffff, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x1}, 0x50)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x9f, 0x0, 0x12, @remote, @private2, 0x1, 0x8000, 0x0, 0x2}})

1.112330135s ago: executing program 0 (id=1990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000400007012abd700000000000017c0000040042801400018008000a00", @ANYRES32=r0, @ANYBLOB="06000600800a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r3, @ANYBLOB="18000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040)

898.762412ms ago: executing program 1 (id=1991):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x5, 0x8, 0x0, 0x0, 0x8, 0x2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000600"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0x1005, &(0x7f0000002400)=""/4101, 0x0, 0xc}, 0x94)

630.036319ms ago: executing program 2 (id=1992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x1, 0x84, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(r2, 0x0, 0x6)
write(r2, &(0x7f00000003c0)="5b0dd80495a51cef8f2cf9", 0xb)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000400000018010000646c6c3300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

377.377288ms ago: executing program 1 (id=1993):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

287.158765ms ago: executing program 0 (id=1994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x3b}, 0x8)
sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0xff00)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0xc15, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x3b}, 0x8) (async)
sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0xff00) (async)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0xc15, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async)

38.805302ms ago: executing program 2 (id=1995):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@alg={0xe8, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {{'ctr-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x2, @empty}, {0x0, @link_local}, 0x0, {0x440, 0x0, @local}, 'netpci0\x00'})

0s ago: executing program 1 (id=1996):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000300)=""/156, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d000100000008000600", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xdcc, 0x4)

kernel console output (not intermixed with test programs):

[  156.906361][ T8129] syzkaller0: entered allmulticast mode
[  156.928293][ T8129] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress)
[  157.119002][ T8132] rxe_eth0 speed is unknown, defaulting to 1000
[  157.454314][    C0] net_ratelimit: 37 callbacks suppressed
[  157.454339][    C0] Dead loop on virtual device lo (net 38), fix it urgently!
[  157.556860][ T8162] validate_nla: 1 callbacks suppressed
[  157.556884][ T8162] netlink: 'syz.0.531': attribute type 15 has an invalid length.
[  157.591713][ T8162] __nla_validate_parse: 10 callbacks suppressed
[  157.591736][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'.
[  157.875735][ T8168] tipc: Started in network mode
[  157.875771][ T8168] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  157.875828][ T8168] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  158.040272][ T8179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'.
[  158.125152][ T8175] bond4 (unregistering): Released all slaves
[  158.175233][ T8184] xt_time: invalid argument - start or stop time greater than 23:59:59
[  158.241680][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'.
[  158.242791][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'.
[  158.351666][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.585631][   T31] IPVS: starting estimator thread 0...
[  158.673382][ T8205] IPVS: using max 25 ests per chain, 60000 per kthread
[  158.840035][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[  158.875560][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[  159.027675][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'.
[  159.027703][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'.
[  159.082223][ T8218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.546'.
[  159.082253][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'.
[  159.171384][ T8219] netlink: 'syz.2.549': attribute type 28 has an invalid length.
[  159.171416][ T8219] netlink: 'syz.2.549': attribute type 3 has an invalid length.
[  159.354580][ T1106] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.354646][ T1106] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.354684][ T1106] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.364878][ T7803] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.531453][ T8232] syzkaller0: entered promiscuous mode
[  159.531479][ T8232] syzkaller0: entered allmulticast mode
[  159.780580][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 30 seconds
[  159.781019][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 30 seconds
[  159.782511][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 30 seconds
[  159.782546][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 30 seconds
[  160.180635][ T8255] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  160.504129][ T8270] xt_hashlimit: size too large, truncated to 1048576
[  160.629602][ T8281] tc_dump_action: action bad kind
[  160.755601][ T8283] Bluetooth: MGMT ver 1.23
[  161.600203][   T30] audit: type=1804 audit(1793163472.137:2): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.573" name="/newroot/122/cgroup.controllers" dev="tmpfs" ino=643 res=1 errno=0
[  161.618241][ T8304] syzkaller0: entered promiscuous mode
[  161.618299][ T8304] syzkaller0: entered allmulticast mode
[  161.626262][   T30] audit: type=1800 audit(1793163472.137:3): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.573" name="cgroup.controllers" dev="tmpfs" ino=643 res=0 errno=-22
[  161.690159][ T8304] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) !
[  161.733485][ T8314] x_tables: duplicate underflow at hook 1
[  161.759613][ T8312] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  161.761190][ T8310] gretap0: entered promiscuous mode
[  161.761737][ T8310] vlan2: entered promiscuous mode
[  161.782260][ T8306] netlink: 'syz.4.573': attribute type 10 has an invalid length.
[  162.174459][ T8333] 8021q: VLANs not supported on wg2
[  162.695129][ T8359] bond3: Unable to set up delay as MII monitoring is disabled
[  162.697658][ T8363] __nla_validate_parse: 9 callbacks suppressed
[  162.697682][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'.
[  162.699057][ T8359] bond3 (unregistering): Released all slaves
[  162.827750][ T8360] bond3: entered promiscuous mode
[  162.828291][ T8360] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.847742][ T8361] netlink: 266 bytes leftover after parsing attributes in process `syz.2.583'.
[  162.865957][ T8372] x_tables: duplicate underflow at hook 1
[  162.996169][ T8365] netlink: 65 bytes leftover after parsing attributes in process `syz.2.583'.
[  163.599923][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'.
[  163.600315][ T8405] tipc: Started in network mode
[  163.600345][ T8405] tipc: Node identity ac141441, cluster identity 4711
[  163.606281][ T8405] tipc: Enabled bearer <udp:syz2>, priority 10
[  163.606479][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.606726][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.607321][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.607561][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.607787][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.608013][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.611244][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.612856][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.621996][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.622239][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.622466][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.637464][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.638205][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.638777][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.639073][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.646908][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.651332][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.652221][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.652818][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.664788][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.667468][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.669617][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.670048][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.694686][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.700946][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.701379][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.708238][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.719981][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.731360][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.732532][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.733200][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.862406][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.869254][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.869847][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.870473][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.894546][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.939915][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.940289][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.940669][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.940919][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.941231][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.941458][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.989272][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.990081][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.990653][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.000259][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.000496][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.000810][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.001588][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.041574][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.042174][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.042740][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.078363][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.078633][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.078862][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.079121][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.079376][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.081835][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.082074][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.082324][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.082553][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.082774][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.107793][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.108020][ T8405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  164.726187][   T10] tipc: Node number set to 2886997057
[  164.772478][ T8472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.595'.
[  164.772747][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.595'.
[  164.834265][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[  164.835647][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[  165.340752][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  165.534013][    C0] Dead loop on virtual device lo (net 38), fix it urgently!
[  167.527675][ T8439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.758904][ T8549] netlink: 104 bytes leftover after parsing attributes in process `syz.1.608'.
[  167.762776][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'.
[  168.227397][ T8573] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  168.325961][ T8579] hsr0: entered allmulticast mode
[  168.325986][ T8579] hsr_slave_0: entered allmulticast mode
[  168.326006][ T8579] hsr_slave_1: entered allmulticast mode
[  168.438772][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'.
[  168.491391][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'.
[  168.570579][ T8590] netlink: 'syz.0.619': attribute type 11 has an invalid length.
[  168.632928][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  168.665060][ T8597] gretap0: entered allmulticast mode
[  168.678769][ T8596] ip_tables: iptables: counters copy to user failed while replacing table
[  168.701135][ T8587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.578239][ T8578] hsr0: left allmulticast mode
[  169.578265][ T8578] hsr_slave_0: left allmulticast mode
[  169.578301][ T8578] hsr_slave_1: left allmulticast mode
[  169.956456][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'.
[  169.956480][ T8613] netlink: 72 bytes leftover after parsing attributes in process `syz.3.625'.
[  170.162131][ T7809] IPVS: starting estimator thread 0...
[  170.249744][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  170.336354][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'.
[  170.565376][ T8641] IPVS: using max 26 ests per chain, 62400 per kthread
[  171.908316][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.629'.
[  171.911150][ T8646] syzkaller1: entered promiscuous mode
[  171.911182][ T8646] syzkaller1: entered allmulticast mode
[  172.840642][ T8630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.980583][ T8686] Bluetooth: MGMT ver 1.23
[  173.062394][ T8689] __nla_validate_parse: 1 callbacks suppressed
[  173.062417][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'.
[  173.103436][ T8694] sch_fq: defrate 8 ignored.
[  173.257303][ T8700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'.
[  173.363523][ T8702] netlink: 'syz.2.643': attribute type 3 has an invalid length.
[  173.635335][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'.
[  173.936825][ T8712] netlink: 'syz.3.647': attribute type 10 has an invalid length.
[  173.937189][ T8712] batman_adv: batadv0: Interface deactivated: dummy0
[  173.939941][ T8712] batman_adv: batadv0: Removing interface: dummy0
[  173.987951][ T8712] dummy0: entered promiscuous mode
[  174.015880][ T8712] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  174.416721][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  174.501423][ T8724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.651'.
[  174.521849][ T8726] bond3: entered promiscuous mode
[  174.522299][ T8726] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.536874][ T8724] netlink: 15 bytes leftover after parsing attributes in process `syz.2.651'.
[  174.685461][ T8720] syzkaller1: entered promiscuous mode
[  174.685488][ T8720] syzkaller1: entered allmulticast mode
[  175.070581][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  175.311077][ T8748] bridge_slave_0: left allmulticast mode
[  175.311105][ T8748] bridge_slave_0: left promiscuous mode
[  175.311550][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.350986][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'.
[  175.371187][ T8756] ieee802154 phy0 wpan0: encryption failed: -22
[  175.382553][ T8748] bridge_slave_1: left allmulticast mode
[  175.388909][ T8748] bridge_slave_1: left promiscuous mode
[  175.389574][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.465198][ T8748] bond0: (slave bond_slave_0): Releasing backup interface
[  175.516994][ T8748] bond0: (slave bond_slave_1): Releasing backup interface
[  175.600917][ T8748] team0: Port device team_slave_0 removed
[  175.601983][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.602007][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.640826][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.640853][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.661550][ T8748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.770593][ T8768] bond0: (slave batadv0): Releasing backup interface
[  175.800664][ T8768] bridge_slave_0: left allmulticast mode
[  175.800692][ T8768] bridge_slave_0: left promiscuous mode
[  175.800921][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.837423][ T8768] bridge_slave_1: left allmulticast mode
[  175.837463][ T8768] bridge_slave_1: left promiscuous mode
[  175.839087][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.889087][ T8768] bond0: (slave bond_slave_0): Releasing backup interface
[  175.909161][ T8768] bond0: (slave bond_slave_1): Releasing backup interface
[  175.928497][ T8768] team0: Port device team_slave_0 removed
[  175.946611][ T8768] team0: Port device team_slave_1 removed
[  175.947708][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.947730][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.950195][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.950218][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.952694][ T8768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  176.168952][ T8780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.665'.
[  176.378489][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'.
[  176.661482][ T8807] netlink: 'syz.3.674': attribute type 15 has an invalid length.
[  176.687164][   T30] audit: type=1804 audit(1793163487.227:4): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.674" name="/newroot/131/memory.events" dev="tmpfs" ino=692 res=1 errno=0
[  176.687327][   T30] audit: type=1800 audit(1793163487.227:5): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.674" name="memory.events" dev="tmpfs" ino=692 res=0 errno=-22
[  176.693113][   T30] audit: type=1804 audit(1793163487.227:6): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.674" name="/newroot/131/memory.events" dev="tmpfs" ino=692 res=1 errno=0
[  177.069747][ T8827] sctp: [Deprecated]: syz.2.679 (pid 8827) Use of int in max_burst socket option.
[  177.069747][ T8827] Use struct sctp_assoc_value instead
[  177.231989][ T8835] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  177.251408][ T8832] can: request_module (can-proto-5) failed.
[  177.373238][ T8839] syzkaller0: entered promiscuous mode
[  177.373265][ T8839] syzkaller0: entered allmulticast mode
[  179.100576][ T8862] netlink: 'syz.3.690': attribute type 1 has an invalid length.
[  179.133203][ T8862] bond0: (slave dummy0): Releasing backup interface
[  179.145908][ T8862] dummy0: left promiscuous mode
[  179.202698][ T8862] netlink: 'syz.3.690': attribute type 10 has an invalid length.
[  179.202725][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'.
[  179.202754][ T8862] batadv0: entered allmulticast mode
[  179.230357][ T8862] bridge0: port 3(batadv0) entered blocking state
[  179.230601][ T8862] bridge0: port 3(batadv0) entered disabled state
[  179.251589][ T8862] bridge0: port 3(batadv0) entered blocking state
[  179.251715][ T8862] bridge0: port 3(batadv0) entered forwarding state
[  179.289473][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[  179.309954][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.309973][ T8862] IPv6: NLM_F_CREATE should be set when creating new route
[  179.310039][ T8862] IPv6: NLM_F_CREATE should be set when creating new route
[  179.380120][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'.
[  179.416997][ T7809] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  179.417018][ T7809] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  179.531004][ T8873] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  179.565537][ T8880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.695'.
[  179.754554][ T8873] bond4 (unregistering): Released all slaves
[  179.957001][ T8887] syzkaller1: entered promiscuous mode
[  179.957026][ T8887] syzkaller1: entered allmulticast mode
[  180.735336][ T8918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.737992][ T8918] syzkaller0: entered promiscuous mode
[  180.738017][ T8918] syzkaller0: entered allmulticast mode
[  180.799375][ T8918] tipc: Resetting bearer <eth:syzkaller0>
[  180.876220][ T8917] tipc: Resetting bearer <eth:syzkaller0>
[  181.022570][ T8917] tipc: Disabling bearer <eth:syzkaller0>
[  181.376483][ T8949] netlink: 508 bytes leftover after parsing attributes in process `syz.4.713'.
[  181.431152][ T8951] netlink: 'syz.2.714': attribute type 10 has an invalid length.
[  181.472115][ T8952] syzkaller0: entered promiscuous mode
[  181.472140][ T8952] syzkaller0: entered allmulticast mode
[  182.006026][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.722'.
[  182.006181][ T8974] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  182.010036][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'.
[  182.086662][ T8972] ip6erspan0: entered promiscuous mode
[  182.115937][ T8979] ip6gre2: entered allmulticast mode
[  182.118312][ T8972] netlink: 'syz.3.721': attribute type 14 has an invalid length.
[  182.142136][ T8979] batadv_slave_1: entered promiscuous mode
[  182.230861][ T8983] netlink: 'syz.2.724': attribute type 3 has an invalid length.
[  182.230887][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'.
[  182.362906][ T8987] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received
[  182.602049][ T8992] syzkaller1: entered allmulticast mode
[  182.660742][ T6614] block nbd0: NBD_DISCONNECT
[  182.686299][ T5635] block nbd0: Wrong magic (0x25609513)
[  182.701169][ T6614] block nbd0: Send disconnect failed -32
[  182.701196][ T6614] block nbd0: Send disconnect failed -32
[  182.701242][ T6614] block nbd0: Send disconnect failed -32
[  182.701306][ T6614] block nbd0: Send disconnect failed -32
[  182.701364][ T6614] block nbd0: Send disconnect failed -32
[  182.701408][ T6614] block nbd0: Send disconnect failed -32
[  182.701459][ T6614] block nbd0: Send disconnect failed -32
[  182.701521][ T6614] block nbd0: Disconnected due to user request.
[  182.701584][ T6614] block nbd0: shutting down sockets
[  182.707281][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  182.960478][ T9015] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.730'.
[  183.369621][ T9040] netlink: 'syz.1.734': attribute type 21 has an invalid length.
[  183.870373][ T9056] bond4 (unregistering): Released all slaves
[  184.212458][ T9073] __nla_validate_parse: 5 callbacks suppressed
[  184.212481][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[  184.663433][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'.
[  184.837059][ T9085] rxe_eth0 speed is unknown, defaulting to 1000
[  184.999721][ T9096] syzkaller0: entered promiscuous mode
[  184.999747][ T9096] syzkaller0: entered allmulticast mode
[  185.295858][ T9114] nbd0: detected capacity change from 0 to 63
[  185.296995][ T9116] block nbd0: NBD_DISCONNECT
[  185.302859][ T9116] block nbd0: Disconnected due to user request.
[  185.322669][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  185.323228][ T1703] Buffer I/O error on dev nbd0, logical block 0, async page read
[  185.323913][ T1703] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  185.323987][ T1703] Buffer I/O error on dev nbd0, logical block 1, async page read
[  185.324037][ T1703] Buffer I/O error on dev nbd0, logical block 2, async page read
[  185.324080][ T1703] Buffer I/O error on dev nbd0, logical block 3, async page read
[  185.327043][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  185.327115][ T1703] Buffer I/O error on dev nbd0, logical block 0, async page read
[  185.327181][ T1703] Buffer I/O error on dev nbd0, logical block 1, async page read
[  185.327223][ T1703] Buffer I/O error on dev nbd0, logical block 2, async page read
[  185.327265][ T1703] Buffer I/O error on dev nbd0, logical block 3, async page read
[  185.329360][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  185.329434][ T1703] Buffer I/O error on dev nbd0, logical block 0, async page read
[  185.329479][ T1703] Buffer I/O error on dev nbd0, logical block 1, async page read
[  185.330060][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  185.330763][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  185.331216][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  185.331569][ T1703] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  185.333139][ T1703] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  185.339674][ T1703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  185.363666][ T9013] ldm_validate_partition_table(): Disk read failed.
[  185.365336][ T9013] Dev nbd0: unable to read RDB block 0
[  185.366767][ T9013]  nbd0: unable to read partition table
[  185.431264][ T9116] block nbd0: shutting down sockets
[  185.518142][ T9013] ldm_validate_partition_table(): Disk read failed.
[  185.521399][ T9013] Dev nbd0: unable to read RDB block 0
[  185.530646][ T9013]  nbd0: unable to read partition table
[  188.150134][ T9140] bond_slave_0: entered allmulticast mode
[  188.169059][ T9140] bond0: (slave bond_slave_0): Releasing backup interface
[  188.308817][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'.
[  188.397231][ T9159] netlink: 9 bytes leftover after parsing attributes in process `syz.3.761'.
[  188.417258][ T9158] netlink: 9 bytes leftover after parsing attributes in process `syz.3.761'.
[  188.438075][ T9159] netlink: 9 bytes leftover after parsing attributes in process `syz.3.761'.
[  188.448669][ T9158] netlink: 9 bytes leftover after parsing attributes in process `syz.3.761'.
[  188.569596][ T9165] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  188.708113][ T9162] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.762'.
[  189.060668][ T9182] netlink: 112 bytes leftover after parsing attributes in process `syz.2.766'.
[  189.064477][ T9183] netlink: 112 bytes leftover after parsing attributes in process `syz.2.766'.
[  189.217375][ T9191] netlink: 560 bytes leftover after parsing attributes in process `syz.2.770'.
[  189.295899][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'.
[  189.296274][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'.
[  189.337254][ T9193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.769'.
[  189.552487][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'.
[  189.754428][ T9217] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.794552][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'.
[  189.794610][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'.
[  189.828520][ T9189] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  189.855998][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 60 seconds
[  189.856043][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 60 seconds
[  189.856073][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 60 seconds
[  189.856102][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 60 seconds
[  190.425131][   T30] audit: type=1804 audit(1793163500.967:7): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.789" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=825 res=1 errno=0
[  190.425196][   T30] audit: type=1800 audit(1793163500.967:8): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.789" name="cgroup.controllers" dev="tmpfs" ino=825 res=0 errno=-22
[  190.427910][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'.
[  190.538375][ T9251] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.599488][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'.
[  190.738340][ T9253] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  190.870219][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'.
[  191.217200][ T9274] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  191.291376][ T9274] bond4 (unregistering): Released all slaves
[  191.306875][ T9286] netlink: 'syz.4.797': attribute type 6 has an invalid length.
[  191.824715][ T9298] netlink: 'syz.4.798': attribute type 1 has an invalid length.
[  192.169054][ T9332] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.222270][ T9331] ip6gre2: entered allmulticast mode
[  192.427240][ T9342] ip_tables: iptables: counters copy to user failed while replacing table
[  192.602301][ T9333] netlink: 'syz.1.804': attribute type 3 has an invalid length.
[  193.880898][ T9432] batman_adv: batadv0: Adding interface: syzkaller0
[  193.880922][ T9432] batman_adv: batadv0: Interface activated: syzkaller0
[  193.893223][ T9444] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  193.893382][ T9444] nbd: must specify at least one socket
[  193.932799][ T9432] netlink: 'syz.1.822': attribute type 10 has an invalid length.
[  193.976460][ T9432] geneve3: entered promiscuous mode
[  193.976485][ T9432] geneve3: entered allmulticast mode
[  193.997392][ T9429] batman_adv: batadv0: Interface deactivated: syzkaller0
[  194.019112][ T9429] batman_adv: batadv0: Removing interface: syzkaller0
[  194.035562][ T9444] syzkaller0: entered promiscuous mode
[  194.035588][ T9444] syzkaller0: entered allmulticast mode
[  194.038924][ T9443] syzkaller0: entered promiscuous mode
[  194.038945][ T9443] syzkaller0: entered allmulticast mode
[  194.336652][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  194.373210][ T9459] syzkaller0: Caught tx_queue_len zero misconfig
[  194.507563][ T9470] __nla_validate_parse: 51 callbacks suppressed
[  194.507588][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'.
[  194.705747][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'.
[  194.985836][ T9478] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  195.180639][ T9484] ip6t_rpfilter: unknown options
[  195.262771][ T9481] x_tables: unsorted underflow at hook 3
[  195.424660][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'.
[  195.426439][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  195.897300][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  196.038824][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'.
[  196.097766][ T9531] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  196.101989][ T9531] bond4 (unregistering): Released all slaves
[  196.211132][ T9532] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  196.454318][ T9548] netlink: 'syz.1.853': attribute type 12 has an invalid length.
[  196.455834][ T9548] netlink: 'syz.1.853': attribute type 1 has an invalid length.
[  196.455854][ T9548] netlink: 'syz.1.853': attribute type 12 has an invalid length.
[  196.455868][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.853'.
[  196.716659][ T9562] xt_CT: You must specify a L4 protocol and not use inversions on it
[  196.942170][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  197.263043][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'.
[  197.263072][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'.
[  197.416562][ T9588] bond1: option fail_over_mac: invalid value (127)
[  197.441651][ T9588] bond1 (unregistering): Released all slaves
[  197.574508][ T9485] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.574547][ T9485] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.782672][ T9610] xt_CT: You must specify a L4 protocol and not use inversions on it
[  197.980154][ T9615] bond_slave_1: entered allmulticast mode
[  198.002786][ T9615] x_tables: duplicate underflow at hook 1
[  198.346906][ T4998] udevd[4998]: worker [6634] /devices/virtual/block/nbd2 is taking a long time
[  199.006355][ T9665] IPVS: length: 155 != 8
[  199.127348][ T9687] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  199.158423][ T9675] bridge2: entered promiscuous mode
[  199.160861][ T9675] bridge2: entered allmulticast mode
[  199.188267][ T9675] team0: Port device bridge2 added
[  199.267998][ T9694] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  199.406171][ T9687] 8021q: adding VLAN 0 to HW filter on device bond5
[  199.424165][ T9676] bridge0: port 1(team0) entered blocking state
[  199.424341][ T9676] bridge0: port 1(team0) entered disabled state
[  199.424501][ T9676] team0: entered allmulticast mode
[  199.470891][ T9676] team0: entered promiscuous mode
[  199.515612][ T9691] bond5: (slave geneve3): making interface the new active one
[  199.522769][ T9691] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  199.584464][ T9418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.624930][ T9418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.624991][ T9418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.625029][ T9418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.862960][ T9721] ip_tables: iptables: counters copy to user failed while replacing table
[  200.087747][ T9727] __nla_validate_parse: 14 callbacks suppressed
[  200.087770][ T9727] netlink: 260 bytes leftover after parsing attributes in process `syz.3.892'.
[  200.488299][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  200.489722][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'.
[  200.557920][ T9746] gretap0: left allmulticast mode
[  200.572896][ T9746] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  200.642882][ T9748] rxe_eth0 speed is unknown, defaulting to 1000
[  200.779551][ T9762] syzkaller1: entered promiscuous mode
[  200.779577][ T9762] syzkaller1: entered allmulticast mode
[  201.047169][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'.
[  201.096818][ T9768] bond6: Invalid ad_actor_system MAC address.
[  201.096842][ T9768] bond6: option ad_actor_system: invalid value (7)
[  201.099005][ T9768] bond6 (unregistering): Released all slaves
[  201.202037][ T9771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.903'.
[  201.202065][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  201.202081][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  201.422461][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'.
[  201.442982][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  201.522795][ T9776] batman_adv: batadv0: Interface deactivated: ipvlan2
[  201.558216][ T9776] batman_adv: batadv0: Removing interface: ipvlan2
[  201.751357][ T9783] ip_tables: iptables: counters copy to user failed while replacing table
[  201.832520][ T9791] netlink: 'syz.3.909': attribute type 4 has an invalid length.
[  202.027869][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'.
[  202.413180][ T9807] sctp: [Deprecated]: syz.2.913 (pid 9807) Use of int in maxseg socket option.
[  202.413180][ T9807] Use struct sctp_assoc_value instead
[  202.710856][ T9826] netlink: 'syz.1.920': attribute type 10 has an invalid length.
[  202.742631][ T9826] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  202.846248][ T9835] netlink: ct family unspecified
[  204.266389][ T9903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.638672][ T9934] __nla_validate_parse: 3 callbacks suppressed
[  206.638696][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.946'.
[  207.078009][ T9944] netlink: 104 bytes leftover after parsing attributes in process `syz.3.949'.
[  207.402601][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[  207.402626][ T9967] openvswitch: netlink: Flow actions attr not present in new flow.
[  207.450138][ T9965] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  207.646948][ T9971] netlink: 88 bytes leftover after parsing attributes in process `syz.2.958'.
[  207.772163][ T9983] netlink: 'syz.4.963': attribute type 1 has an invalid length.
[  207.772206][ T9983] netlink: 'syz.4.963': attribute type 1 has an invalid length.
[  207.824756][ T9985] netlink: 'syz.0.959': attribute type 1 has an invalid length.
[  208.186892][ T9985] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.254318][ T9998] batadv_slave_1: entered promiscuous mode
[  208.290411][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'.
[  208.336617][ T9997] batadv_slave_1: left promiscuous mode
[  208.340827][T10000] syzkaller0: entered promiscuous mode
[  208.340860][T10000] syzkaller0: entered allmulticast mode
[  208.842947][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'.
[  208.977895][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.970'.
[  209.132741][T10014] bridge1: left promiscuous mode
[  209.139199][T10014] ip6gre1: left promiscuous mode
[  209.141089][T10014] bond1: left promiscuous mode
[  209.141106][T10014] bridge2: left promiscuous mode
[  209.162163][T10014] macvtap1: left promiscuous mode
[  209.175899][T10014] bridge0: left promiscuous mode
[  209.182174][T10014] bond3: left promiscuous mode
[  209.317166][T10028] team0: No ports can be present during mode change
[  209.317919][T10031] tipc: Enabled bearer <eth:team0>, priority 0
[  209.320650][T10030] vlan0: entered promiscuous mode
[  209.368035][T10030] vlan0: entered allmulticast mode
[  209.368059][T10030] veth0_vlan: entered allmulticast mode
[  209.376821][T10030] team0: Port device vlan0 added
[  209.460656][ T9438] bridge0: port 1(team0) entered blocking state
[  209.460772][ T9438] bridge0: port 1(team0) entered forwarding state
[  209.486664][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  209.486689][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  209.486705][T10036] tc_dump_action: action bad kind
[  209.804112][T10043] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20003
[  210.102592][T10052] netlink: 'syz.1.978': attribute type 10 has an invalid length.
[  210.119918][T10052] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  210.151679][T10052] ip_tables: iptables: counters copy to user failed while replacing table
[  210.260266][T10061] block nbd0: server does not support multiple connections per device.
[  210.260629][T10061] block nbd0: shutting down sockets
[  210.382661][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'.
[  210.434187][  T995] tipc: Node number set to 4278255617
[  210.537944][T10064] vlan2: entered promiscuous mode
[  210.537969][T10064] bridge0: entered promiscuous mode
[  212.051272][T10106] syzkaller1: entered promiscuous mode
[  212.051299][T10106] syzkaller1: entered allmulticast mode
[  212.140308][T10106] hsr0: entered promiscuous mode
[  212.991481][T10135] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  213.048693][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048718][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048733][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048746][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048759][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048773][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048786][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048800][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048813][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048827][T10137] tc action pedit unable to extract header offset for header type (0x5)
[  213.048854][T10137] 0: reclassify loop, rule prio 0, protocol 800
[  214.052130][T10166] __nla_validate_parse: 3 callbacks suppressed
[  214.052151][T10166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.998'.
[  214.172564][T10157] netlink: 'syz.4.1001': attribute type 1 has an invalid length.
[  214.397919][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  214.630772][T10178] bridge4: entered promiscuous mode
[  214.632677][T10178] bridge4: entered allmulticast mode
[  214.677287][T10178] team0: Port device bridge4 added
[  214.677884][T10179] bridge0: port 1(team0) entered blocking state
[  214.678329][T10179] bridge0: port 1(team0) entered disabled state
[  214.678676][T10179] team0: entered allmulticast mode
[  214.686969][T10179] team0: entered promiscuous mode
[  214.924715][T10190] lo: Caught tx_queue_len zero misconfig
[  214.971599][T10191] netlink: zone id is out of range
[  214.971641][T10191] netlink: zone id is out of range
[  214.971651][T10191] netlink: zone id is out of range
[  214.971660][T10191] netlink: zone id is out of range
[  214.971669][T10191] netlink: zone id is out of range
[  214.971696][T10191] netlink: zone id is out of range
[  216.717882][T10202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1012'.
[  216.717927][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'.
[  216.722624][T10202] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1012'.
[  216.989466][T10164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.128321][   T30] audit: type=1804 audit(1793163527.667:9): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1014" name="/newroot/198/cgroup.controllers" dev="tmpfs" ino=1041 res=1 errno=0
[  217.128649][   T30] audit: type=1800 audit(1793163527.667:10): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1014" name="cgroup.controllers" dev="tmpfs" ino=1041 res=0 errno=-22
[  217.241847][T10208] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  217.565945][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'.
[  217.652378][ T9418] IPVS: starting estimator thread 0...
[  217.662006][T10219] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  217.734613][T10223] IPVS: using max 26 ests per chain, 62400 per kthread
[  218.012429][T10238] netlink: 'syz.2.1024': attribute type 16 has an invalid length.
[  218.012455][T10238] netlink: 'syz.2.1024': attribute type 17 has an invalid length.
[  218.122232][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'.
[  218.202562][T10246] netlink: 'syz.3.1026': attribute type 1 has an invalid length.
[  218.408915][T10251] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1026'.
[  218.438976][T10238] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  218.487182][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'.
[  218.576995][T10246] bond6: entered promiscuous mode
[  218.580534][T10246] 8021q: adding VLAN 0 to HW filter on device bond6
[  218.697545][T10245] bond6: entered allmulticast mode
[  218.784936][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  219.336477][T10280] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  219.484589][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  219.948198][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 90 seconds
[  219.948252][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 90 seconds
[  219.948286][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 90 seconds
[  219.948318][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 90 seconds
[  220.096925][T10305] ip_tables: iptables: counters copy to user failed while replacing table
[  220.140500][T10305] ip_tables: iptables: counters copy to user failed while replacing table
[  221.135371][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  221.842715][T10368] bridge0: left allmulticast mode
[  221.861418][T10371] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.861605][T10371] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.861769][T10371] bridge_slave_0: entered allmulticast mode
[  221.872977][T10371] bridge_slave_0: entered promiscuous mode
[  221.877700][T10371] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.877838][T10371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.117733][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'.
[  222.379487][T10375] bridge_slave_0: left allmulticast mode
[  222.379520][T10375] bridge_slave_0: left promiscuous mode
[  222.379780][T10375] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.490012][T10379] bond2: (slave bridge0): Releasing backup interface
[  223.165174][T10395] syzkaller0: entered promiscuous mode
[  223.165387][T10395] syzkaller0: entered allmulticast mode
[  223.166919][T10397] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1059'.
[  223.239386][T10397] vlan2: entered promiscuous mode
[  223.239659][T10397] vlan2: entered allmulticast mode
[  223.239676][T10397] hsr0: entered allmulticast mode
[  223.239691][T10397] hsr_slave_0: entered allmulticast mode
[  223.239709][T10397] hsr_slave_1: entered allmulticast mode
[  223.370541][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'.
[  223.480174][T10400] hsr_slave_0: left promiscuous mode
[  223.504861][T10400] hsr_slave_1: left promiscuous mode
[  223.672212][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'.
[  224.202276][T10418] netlink: 'syz.1.1064': attribute type 2 has an invalid length.
[  224.202303][T10418] netlink: 'syz.1.1064': attribute type 8 has an invalid length.
[  224.202319][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1064'.
[  224.389616][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'.
[  224.389644][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'.
[  224.389661][T10419] tc_dump_action: action bad kind
[  224.817046][T10429] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  224.817092][T10429] netlink: 'syz.2.1068': attribute type 8 has an invalid length.
[  224.820341][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  224.820368][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'.
[  224.851753][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'.
[  224.913445][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1067'.
[  224.982651][T10433] netlink: 'syz.4.1067': attribute type 1 has an invalid length.
[  225.426101][T10449] openvswitch: netlink: Missing key (keys=40, expected=100)
[  226.210385][T10467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  226.269121][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  226.480398][T10469] FAULT_INJECTION: forcing a failure.
[  226.480398][T10469] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  226.480458][T10469] CPU: 1 UID: 0 PID: 10469 Comm: syz.2.1076 Not tainted syzkaller #0 PREEMPT(full) 
[  226.480485][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  226.480508][T10469] Call Trace:
[  226.480518][T10469]  <TASK>
[  226.480528][T10469]  dump_stack_lvl+0xe8/0x150
[  226.480570][T10469]  should_fail_ex+0x410/0x560
[  226.480622][T10469]  _copy_from_user+0x2d/0xb0
[  226.480658][T10469]  ___sys_recvmsg+0x173/0x5a0
[  226.480690][T10469]  ? __pfx____sys_recvmsg+0x10/0x10
[  226.480720][T10469]  ? lock_acquire+0x115/0x350
[  226.480763][T10469]  ? __fget_files+0x2a/0x420
[  226.480788][T10469]  ? __fget_files+0x3a2/0x420
[  226.480811][T10469]  ? __fget_files+0x2a/0x420
[  226.480848][T10469]  __x64_sys_recvmsg+0x1ae/0x290
[  226.480876][T10469]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  226.480925][T10469]  do_syscall_64+0x166/0x520
[  226.480947][T10469]  ? trace_irq_disable+0x3b/0x140
[  226.480975][T10469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.480999][T10469]  ? clear_bhb_loop+0x70/0xc0
[  226.481028][T10469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.481051][T10469] RIP: 0033:0x7f971339f559
[  226.481072][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.481092][T10469] RSP: 002b:00007f97141cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  226.481122][T10469] RAX: ffffffffffffffda RBX: 00007f9713625fa0 RCX: 00007f971339f559
[  226.481139][T10469] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004
[  226.481154][T10469] RBP: 00007f97141cc090 R08: 0000000000000000 R09: 0000000000000000
[  226.481168][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.481181][T10469] R13: 00007f9713626038 R14: 00007f9713625fa0 R15: 00007fffd876d668
[  226.481226][T10469]  </TASK>
[  227.042567][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'.
[  227.650803][T10497] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  227.992724][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'.
[  227.992786][T10504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'.
[  229.050137][T10536] bond4: entered allmulticast mode
[  229.050700][T10536] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.619207][T10557] netlink: 'syz.1.1095': attribute type 10 has an invalid length.
[  229.619232][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1095'.
[  229.619361][T10557] batadv0: entered promiscuous mode
[  229.619381][T10557] batadv0: entered allmulticast mode
[  229.641023][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.648878][T10557] bridge0: port 3(batadv0) entered blocking state
[  229.649163][T10557] bridge0: port 3(batadv0) entered disabled state
[  229.683126][T10557] bridge0: port 3(batadv0) entered blocking state
[  229.683309][T10557] bridge0: port 3(batadv0) entered forwarding state
[  229.924338][ T9420] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  229.924361][ T9420] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  230.287204][T10572] netlink: 'syz.2.1100': attribute type 1 has an invalid length.
[  230.289192][T10566] netlink: 'syz.0.1099': attribute type 4 has an invalid length.
[  230.661696][T10576] netlink: 'syz.3.1101': attribute type 1 has an invalid length.
[  230.741709][T10576] 8021q: adding VLAN 0 to HW filter on device bond7
[  230.832361][T10577] bond7: entered promiscuous mode
[  230.832529][T10577] bond7: entered allmulticast mode
[  231.155162][T10592] syzkaller0: entered promiscuous mode
[  231.155187][T10592] syzkaller0: entered allmulticast mode
[  231.199146][T10592] 0: reclassify loop, rule prio 0, protocol 800
[  231.635910][T10606] netlink: 'syz.2.1110': attribute type 8 has an invalid length.
[  232.405973][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.406284][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.406546][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.426389][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.427085][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.449049][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.449739][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.487613][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.487891][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  232.488142][T10640] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1117'.
[  233.449976][T10677] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  233.502165][T10677] 0ªX¹¦Dö»: entered allmulticast mode
[  234.208473][T10695] unsupported nlmsg_type 40
[  234.580505][T10709] macsec2: entered promiscuous mode
[  234.767878][T10721] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  238.184199][T10752] syzkaller0: left promiscuous mode
[  238.184408][T10752] syzkaller0: left allmulticast mode
[  238.438032][   T30] audit: type=1800 audit(1793163548.977:11): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1147" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1208 res=0 errno=-22
[  238.976417][T10797] ip_tables: iptables: counters copy to user failed while replacing table
[  239.734264][T10808] gre1: entered promiscuous mode
[  239.734290][T10808] gre1: entered allmulticast mode
[  240.044429][T10823] __nla_validate_parse: 95 callbacks suppressed
[  240.044523][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  240.092270][T10821] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  240.199229][T10827] netlink: 'syz.4.1161': attribute type 4 has an invalid length.
[  240.639899][T10829] xt_CT: You must specify a L4 protocol and not use inversions on it
[  240.821088][T10839] netlink: 'syz.3.1165': attribute type 12 has an invalid length.
[  240.842718][T10839] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1165'.
[  240.887187][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'.
[  240.893947][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'.
[  240.893989][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'.
[  241.333877][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  241.333932][T10850] netlink: 'syz.2.1167': attribute type 30 has an invalid length.
[  241.392881][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  241.392918][T10856] netlink: 'syz.2.1167': attribute type 30 has an invalid length.
[  241.425622][T10850] vxlan0: entered promiscuous mode
[  241.425663][T10850] vxlan0: entered allmulticast mode
[  241.520626][T10855] sock: sock_timestamping_bind_phc: sock not bind to device
[  241.536765][T10851] can: request_module (can-proto-0) failed.
[  242.637773][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'.
[  243.850137][T10856] vxlan0: entered promiscuous mode
[  243.850164][T10856] vxlan0: entered allmulticast mode
[  243.875952][T10866] syzkaller0: entered promiscuous mode
[  243.875976][T10866] syzkaller0: entered allmulticast mode
[  243.877737][T10865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.907206][T10867] tipc: Resetting bearer <eth:syzkaller0>
[  244.301938][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.393890][T10890] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1176'.
[  244.534950][T10894] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  244.534990][T10894] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  244.535223][T10894] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  244.827976][T10909] bridge0: port 4(bond0) entered blocking state
[  244.829462][T10909] bridge0: port 4(bond0) entered disabled state
[  244.829645][T10909] bond0: entered allmulticast mode
[  244.829664][T10909] bond_slave_0: entered allmulticast mode
[  244.829691][T10909] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  244.877549][T10909] dummy0: entered allmulticast mode
[  244.907278][T10909] bond0: entered promiscuous mode
[  244.907303][T10909] bond_slave_0: entered promiscuous mode
[  244.907525][T10909] bond_slave_1: entered promiscuous mode
[  244.907707][T10909] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  244.907886][T10909] dummy0: entered promiscuous mode
[  244.908571][T10909] bridge0: port 4(bond0) entered blocking state
[  244.908669][T10909] bridge0: port 4(bond0) entered forwarding state
[  244.976393][T10914] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.547431][T10931] __nla_validate_parse: 1 callbacks suppressed
[  245.547457][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'.
[  246.118367][T10938] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  246.198083][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'.
[  246.441631][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  246.598940][T10954] Bluetooth: MGMT ver 1.23
[  246.764196][T10963] netlink: 'syz.4.1193': attribute type 3 has an invalid length.
[  248.042048][T10990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1201'.
[  249.484434][T10954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  249.642487][T10998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  249.816908][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  249.824461][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  249.861469][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  249.861502][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  249.878390][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  249.916791][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'.
[  249.993052][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.059420][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.099815][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.112739][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 120 seconds
[  250.112785][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 120 seconds
[  250.112816][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 120 seconds
[  250.112846][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 120 seconds
[  250.175473][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.226229][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.248985][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  250.273181][T11008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  251.268698][T11052] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.652040][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'.
[  251.652080][T11063] netlink: 'syz.4.1219': attribute type 15 has an invalid length.
[  251.652096][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'.
[  251.750916][T11069] ip_tables: iptables: counters copy to user failed while replacing table
[  251.991557][T11074] xt_ecn: cannot match TCP bits for non-tcp packets
[  252.226349][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'.
[  252.226403][T11063] netlink: 'syz.4.1219': attribute type 15 has an invalid length.
[  252.226420][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'.
[  252.347918][ T1124] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2048 - 0
[  252.347986][ T1124] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2048 - 0
[  252.348028][ T1124] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2048 - 0
[  252.348068][ T1124] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2048 - 0
[  252.576752][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'.
[  252.758221][T11092] netlink: 'syz.0.1223': attribute type 1 has an invalid length.
[  252.758245][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'.
[  252.962482][T11098] vlan3: entered allmulticast mode
[  252.962979][T11098] bridge_slave_0: entered allmulticast mode
[  252.978637][T11098] bridge0: port 2(vlan3) entered blocking state
[  252.979349][T11098] bridge0: port 2(vlan3) entered disabled state
[  252.996901][T11098] vlan3: entered promiscuous mode
[  252.996926][T11098] bridge_slave_0: entered promiscuous mode
[  253.435394][T11108] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.521499][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1229'.
[  253.743000][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'.
[  253.743031][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'.
[  253.798416][ T9411] IPVS: starting estimator thread 0...
[  253.884513][T11121] IPVS: using max 25 ests per chain, 60000 per kthread
[  254.364234][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1234'.
[  254.747136][ T9013] udevd[9013]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  255.094187][T11158] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20002
[  255.502362][T11165] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  255.776507][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  256.551813][T11203] tbf_change: 34 callbacks suppressed
[  256.551839][T11203] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  256.731179][T11212] __nla_validate_parse: 5 callbacks suppressed
[  256.731203][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'.
[  257.150123][T11234] netlink: 'syz.0.1257': attribute type 11 has an invalid length.
[  257.164965][T11229] netlink: 'syz.4.1256': attribute type 1 has an invalid length.
[  257.313730][T11243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1255'.
[  257.469227][T11229] 8021q: adding VLAN 0 to HW filter on device bond3
[  257.532312][T11243] macsec1: entered allmulticast mode
[  257.532337][T11243] vlan1: entered allmulticast mode
[  257.532352][T11243] veth0_vlan: entered allmulticast mode
[  257.538684][T11256] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1260'.
[  258.039821][T11271] ip6gre1: entered promiscuous mode
[  258.040037][T11271] ip6gre1: entered allmulticast mode
[  258.075246][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'.
[  258.252006][T11284] netlink: 'syz.0.1264': attribute type 1 has an invalid length.
[  258.339072][T11280] netlink: 'syz.0.1264': attribute type 10 has an invalid length.
[  258.339097][T11280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'.
[  258.362079][T11290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  258.362096][T11290] IPv6: NLM_F_CREATE should be set when creating new route
[  258.362142][T11290] IPv6: NLM_F_CREATE should be set when creating new route
[  258.420173][T11280] batadv0: entered promiscuous mode
[  258.420200][T11280] batadv0: entered allmulticast mode
[  258.421069][T11280] bridge0: port 2(batadv0) entered blocking state
[  258.430360][T11280] bridge0: port 2(batadv0) entered disabled state
[  258.506397][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'.
[  258.739808][ T9420] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  258.739831][ T9420] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  258.882983][T11301] sctp: [Deprecated]: syz.3.1267 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.882983][T11301] Use struct sctp_sack_info instead
[  258.962328][T11307] openvswitch: netlink: Duplicate or invalid key (type 0).
[  258.962370][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.180937][T11313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1270'.
[  259.378829][T11316] batman_adv: batadv0: Adding interface: veth0
[  259.378860][T11316] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.378893][T11316] batman_adv: batadv0: Interface activated: veth0
[  259.516978][T11318] syzkaller1: entered promiscuous mode
[  259.517005][T11318] syzkaller1: entered allmulticast mode
[  259.588756][T11328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1273'.
[  259.790655][T11339] sch_tbf: peakrate 8 is lower than or equals to rate 1025 !
[  259.843725][T11341] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1276'.
[  259.997746][T11346] netlink: 'syz.3.1278': attribute type 39 has an invalid length.
[  260.102894][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'.
[  260.131085][T11346] sit0: left promiscuous mode
[  260.249199][T11349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  260.249217][T11349] IPv6: NLM_F_CREATE should be set when creating new route
[  260.249246][T11349] IPv6: NLM_F_CREATE should be set when creating new route
[  260.407025][ T9487] bond0: (slave bond_slave_0): interface is now down
[  260.407060][ T9487] bond0: (slave bond_slave_1): interface is now down
[  260.556384][ T1124] bond0: (slave bond_slave_0): interface is now down
[  260.556412][ T1124] bond0: (slave bond_slave_1): interface is now down
[  260.628214][ T1124] bond0: now running without any active interface!
[  261.508744][T11400] xt_connbytes: Forcing CT accounting to be enabled
[  261.862026][T11406] team0: No ports can be present during mode change
[  261.868621][T11406] netlink: 'syz.2.1295': attribute type 1 has an invalid length.
[  261.923097][T11406] __nla_validate_parse: 9 callbacks suppressed
[  261.923134][T11406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1295'.
[  262.227960][T11427] netlink: 'syz.2.1301': attribute type 5 has an invalid length.
[  262.227986][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'.
[  262.232907][T11427] openvswitch: netlink: Message has 4 unknown bytes.
[  262.232978][T11427] openvswitch: netlink: Actions may not be safe on all matching packets
[  262.307620][T11426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1300'.
[  262.721360][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.919832][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'.
[  262.934657][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'.
[  263.127095][T11454] netlink: 'syz.3.1307': attribute type 1 has an invalid length.
[  263.127120][T11454] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1307'.
[  263.127986][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'.
[  263.128936][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'.
[  263.129774][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'.
[  263.130591][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'.
[  263.327571][T11465] sctp: [Deprecated]: syz.1.1309 (pid 11465) Use of int in max_burst socket option.
[  263.327571][T11465] Use struct sctp_assoc_value instead
[  263.360785][T11469] sctp: [Deprecated]: syz.1.1309 (pid 11469) Use of int in max_burst socket option.
[  263.360785][T11469] Use struct sctp_assoc_value instead
[  264.230156][T11497] bridge0: port 2(batadv0) entered blocking state
[  264.230332][T11497] bridge0: port 2(batadv0) entered forwarding state
[  264.284470][T11497] bridge0: port 2(batadv0) entered disabled state
[  264.292234][T11497] team0: left allmulticast mode
[  264.308490][T11497] team0: left promiscuous mode
[  264.309051][T11497] bridge0: port 1(team0) entered disabled state
[  264.501220][T11515] syzkaller0: entered promiscuous mode
[  264.501438][T11515] syzkaller0: entered allmulticast mode
[  265.465662][T11538] netlink: 'syz.1.1323': attribute type 30 has an invalid length.
[  265.506049][T11538] vxlan0: entered promiscuous mode
[  265.506076][T11538] vxlan0: entered allmulticast mode
[  265.586071][T11538] netlink: 'syz.1.1323': attribute type 30 has an invalid length.
[  265.858255][T11538] vxlan1: entered promiscuous mode
[  265.858279][T11538] vxlan1: entered allmulticast mode
[  265.864720][ T9487] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.864838][ T9487] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.864947][ T9487] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.885472][ T9487] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.324609][T11564] Bluetooth: hci0: unsupported parameter 5135
[  266.324635][T11564] Bluetooth: hci0: unsupported parameter 65
[  266.324650][T11564] Bluetooth: hci0: unsupported parameter 5135
[  266.324663][T11564] Bluetooth: hci0: unsupported parameter 65
[  266.614700][T11561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.614744][T11561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.037493][T11561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.037537][T11561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.144645][T11561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.144688][T11561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.197828][T11610] __nla_validate_parse: 39 callbacks suppressed
[  268.197852][T11610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1342'.
[  268.751487][T11627] openvswitch: netlink: Multiple metadata blocks provided
[  269.396114][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'.
[  269.396447][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'.
[  269.749919][T11654] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  270.016320][T11661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.025379][T11661] tipc: Resetting bearer <eth:syzkaller0>
[  270.091238][T11660] tipc: Disabling bearer <eth:syzkaller0>
[  270.460780][T11674] x_tables: duplicate entry at hook 1
[  270.569785][T11674] netlink: 'syz.4.1357': attribute type 1 has an invalid length.
[  270.630208][T11677] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  270.895295][T11681] netlink: 'syz.4.1359': attribute type 1 has an invalid length.
[  270.980033][T11681] 8021q: adding VLAN 0 to HW filter on device bond4
[  271.065805][T11684] bond4: (slave erspan1): making interface the new active one
[  271.090890][T11684] bond4: (slave erspan1): Enslaving as an active interface with an up link
[  271.198953][T11689] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1361'.
[  271.198989][T11689] netlink: 'syz.1.1361': attribute type 3 has an invalid length.
[  271.414864][T11692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1362'.
[  272.317681][T11721] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1367'.
[  272.711877][T11731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1370'.
[  272.758908][T11729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1371'.
[  272.758942][T11729] netlink: 'syz.0.1371': attribute type 1 has an invalid length.
[  273.046730][T11741] netlink: 'syz.0.1375': attribute type 10 has an invalid length.
[  273.092650][T11741] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  273.142701][T11743] netlink: 'syz.1.1373': attribute type 3 has an invalid length.
[  273.142731][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'.
[  273.172508][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'.
[  273.372076][ T9438] bond0: (slave dummy0): link status definitely up, 0 Mbps full duplex
[  273.403381][ T9438] bond0: active interface up!
[  273.419740][T11747] tipc: Can't bind to reserved service type 2
[  273.621642][T11757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1378'.
[  273.759265][T11760] syzkaller0: entered promiscuous mode
[  273.759292][T11760] syzkaller0: entered allmulticast mode
[  274.155724][T11764] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  274.341560][T11779] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  274.644606][T11784] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  274.948600][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'.
[  274.969417][T11789] trusted_key: syz.2.1387 sent an empty control message without MSG_MORE.
[  275.017654][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1387'.
[  275.040882][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  275.040910][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'.
[  275.164861][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'.
[  275.589515][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'.
[  275.657507][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'.
[  275.657533][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  275.657578][T11810] netlink: 'syz.1.1393': attribute type 11 has an invalid length.
[  276.182227][T11818] bond0: (slave dummy0): Releasing backup interface
[  276.197941][T11818] dummy0: left promiscuous mode
[  276.201473][T11818] dummy0: left allmulticast mode
[  276.290271][T11818] batman_adv: batadv0: Adding interface: dummy0
[  276.290292][T11818] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  276.550938][T11822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1396'.
[  276.916958][T11827] x_tables: duplicate entry at hook 1
[  277.558906][T11842] netlink: 'syz.2.1401': attribute type 1 has an invalid length.
[  277.660386][T11844] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  278.478399][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  278.478494][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  278.479298][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  278.531889][T11842] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  278.531972][T11842] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  278.532020][T11842] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  278.720958][T11853] ip6t_hbh: too many supported opts specified
[  278.741889][T11853] ip6t_hbh: too many supported opts specified
[  278.889373][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  278.988801][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  279.005431][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  279.044070][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  279.046215][T11842] virt_wifi0 speed is unknown, defaulting to 1000
[  279.826977][T11889] netlink: 'syz.2.1411': attribute type 25 has an invalid length.
[  279.828807][T11889] __nla_validate_parse: 2 callbacks suppressed
[  279.828822][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'.
[  279.860813][T11886] vlan1: Caught tx_queue_len zero misconfig
[  280.132776][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'.
[  280.404935][T11889] netlink: 'syz.2.1411': attribute type 25 has an invalid length.
[  280.404959][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'.
[  280.522556][T11905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.736451][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 150 seconds
[  280.736498][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 150 seconds
[  280.736529][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 150 seconds
[  280.736560][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 150 seconds
[  280.883629][T11913] tipc: Resetting bearer <eth:syzkaller0>
[  280.901123][T11902] syzkaller0: entered promiscuous mode
[  280.901326][T11902] syzkaller0: entered allmulticast mode
[  280.924331][T11892] tipc: Resetting bearer <eth:syzkaller0>
[  281.036904][T11892] tipc: Disabling bearer <eth:syzkaller0>
[  281.245482][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'.
[  281.245550][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1417'.
[  281.460329][T11949] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003
[  281.664344][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.742082][T11943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  281.962473][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'.
[  281.988279][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'.
[  282.066845][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  282.295755][T11969] macsec2: entered allmulticast mode
[  282.295782][T11969] veth0_to_bridge: entered allmulticast mode
[  282.346321][T11969] veth0_to_bridge: left allmulticast mode
[  282.595180][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'.
[  282.754248][T11995] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  282.778501][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'.
[  283.020714][T11995] bond2: entered promiscuous mode
[  283.021107][T11995] 8021q: adding VLAN 0 to HW filter on device bond2
[  283.908995][ T4949] block nbd0: Receive control failed (result -32)
[  284.731317][T12060] ip_tables: iptables: counters copy to user failed while replacing table
[  286.864630][T12140] sctp: [Deprecated]: syz.1.1460 (pid 12140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.864630][T12140] Use struct sctp_sack_info instead
[  286.871582][T12141] __nla_validate_parse: 3 callbacks suppressed
[  286.871604][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1459'.
[  286.871643][T12141] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  287.079397][T12149] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  287.121462][T12149] !: entered promiscuous mode
[  287.197511][T12156] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  287.834217][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.834436][T12163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.924326][T12163] bridge0: port 3(batadv0) entered disabled state
[  287.944986][T12163] bridge0: port 3(batadv0) entered disabled state
[  289.047813][T12221] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  289.154727][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'.
[  289.154770][T12222] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1475'.
[  289.284632][T12229] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  289.373887][T12233] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  289.410594][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'.
[  289.410643][T12223] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1475'.
[  289.582656][T12241] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1478'.
[  290.244501][T12246] ip6gre1: entered promiscuous mode
[  290.244528][T12246] ip6gre1: entered allmulticast mode
[  290.978459][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'.
[  290.982582][ T4949] block nbd1: Receive control failed (result -107)
[  291.919812][T12287] x_tables: duplicate underflow at hook 1
[  291.952803][T12287] netlink: 'syz.0.1494': attribute type 1 has an invalid length.
[  292.046105][T12292] xt_l2tp: invalid flags combination: 8
[  292.085239][T12289] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  292.161330][T12289] bond5 (unregistering): Released all slaves
[  292.188199][T12297] xt_hashlimit: size too large, truncated to 1048576
[  292.619666][T12287] 8021q: adding VLAN 0 to HW filter on device bond3
[  292.665617][T12294] bond3: (slave gretap0): making interface the new active one
[  292.668070][T12294] bond3: (slave gretap0): Enslaving as an active interface with an up link
[  292.776296][T12294] syz.0.1494 (12294) used greatest stack depth: 19104 bytes left
[  293.083198][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'.
[  293.131753][T12312] netlink: 'syz.4.1498': attribute type 1 has an invalid length.
[  293.131779][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'.
[  293.206688][T12312] netlink: 'syz.4.1498': attribute type 11 has an invalid length.
[  293.366345][T12316] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  293.883073][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'.
[  293.968413][T12333] 8021q: adding VLAN 0 to HW filter on device bond8
[  294.232579][T12338] vlan0 (unregistering): left allmulticast mode
[  294.232606][T12338] veth0_vlan (unregistering): left allmulticast mode
[  294.262056][T12338] team0: Port device vlan0 removed
[  294.338114][ T9411] bridge0: port 1(team0) entered disabled state
[  294.338740][ T9411] tipc: Resetting bearer <eth:team0>
[  294.626500][T12345] syzkaller0: entered promiscuous mode
[  294.626743][T12345] syzkaller0: entered allmulticast mode
[  294.918699][T12364] pim6reg1: entered promiscuous mode
[  294.918900][T12364] pim6reg1: entered allmulticast mode
[  296.570769][T12320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  296.817255][T12379] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.890762][T12382] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1516'.
[  296.940861][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  297.025711][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'.
[  297.070202][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'.
[  297.070294][T12393] vlan3: left promiscuous mode
[  297.070313][T12393] bridge_slave_0: left promiscuous mode
[  297.070772][T12393] bridge0: port 2(vlan3) entered disabled state
[  297.127852][T12393] team0: left allmulticast mode
[  297.131470][T12393] team0: left promiscuous mode
[  297.131950][T12393] bridge0: port 1(team0) entered disabled state
[  297.470722][T12408] netlink: 'syz.0.1525': attribute type 16 has an invalid length.
[  297.470745][T12408] netlink: 'syz.0.1525': attribute type 17 has an invalid length.
[  297.636175][T12411] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1524'.
[  297.701478][T12408] 0ªX¹¦Dö»: left allmulticast mode
[  298.156743][T12408] batadv0: left promiscuous mode
[  298.156771][T12408] batadv0: left allmulticast mode
[  299.440057][T12408] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  299.582838][T12408] geneve2: left promiscuous mode
[  299.582867][T12408] geneve2: left allmulticast mode
[  299.583085][T12408] gretap1: left promiscuous mode
[  299.610639][T12408] bridge4: left promiscuous mode
[  299.610742][T12408] bridge4: left allmulticast mode
[  299.650152][T12408] bond2: left promiscuous mode
[  299.720361][T12421] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1527'.
[  299.720391][T12421] tc_dump_action: action bad kind
[  299.733915][ T7803] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.733966][ T7803] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.734006][ T7803] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.734045][ T7803] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.152736][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1528'.
[  300.511046][T12448] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1533'.
[  300.743084][T12442] syzkaller0: entered promiscuous mode
[  300.743290][T12442] syzkaller0: entered allmulticast mode
[  300.837897][T12460] 8021q: adding VLAN 0 to HW filter on device bond5
[  301.085379][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1535'.
[  301.147808][T12455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.809620][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'.
[  302.003355][T12510] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  302.004870][T12509] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  302.049748][T12513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.087973][T12498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.101210][T12498] bond0 (unregistering): Released all slaves
[  302.500138][T12527] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.379369][T12547] netlink: zone id is out of range
[  303.379388][T12547] netlink: zone id is out of range
[  303.379398][T12547] netlink: zone id is out of range
[  303.379407][T12547] netlink: zone id is out of range
[  303.379418][T12547] netlink: zone id is out of range
[  303.379427][T12547] netlink: zone id is out of range
[  303.610213][T12558] netlink: 'syz.1.1552': attribute type 11 has an invalid length.
[  303.726594][T12559] sctp: [Deprecated]: syz.4.1553 (pid 12559) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.726594][T12559] Use struct sctp_sack_info instead
[  303.728590][T12561] sctp: [Deprecated]: syz.4.1553 (pid 12561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.728590][T12561] Use struct sctp_sack_info instead
[  304.108600][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1557'.
[  304.119713][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'.
[  305.097828][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'.
[  305.097855][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'.
[  305.097885][T12621] netlink: 'syz.0.1564': attribute type 12 has an invalid length.
[  305.097901][T12621] netlink: 'syz.0.1564': attribute type 11 has an invalid length.
[  305.202074][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'.
[  305.926472][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  306.109369][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1571'.
[  306.247503][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'.
[  306.288137][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'.
[  306.466152][T12654] syz.4.1573 (12654) used greatest stack depth: 18056 bytes left
[  306.813485][T12692] syzkaller0: entered promiscuous mode
[  306.813512][T12692] syzkaller0: entered allmulticast mode
[  307.036093][T12701] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1584'.
[  307.250681][T12712] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1586'.
[  307.284958][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1585'.
[  307.285171][T12712] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  307.347630][T12712] 0ªX¹¦Dö»: left promiscuous mode
[  307.347845][T12712] 0ªX¹¦Dö»: entered allmulticast mode
[  307.528436][T12718] 8021q: adding VLAN 0 to HW filter on device bond5
[  308.071174][T12746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.111026][T12736] batadv0: entered promiscuous mode
[  308.129812][T12736] macsec1: entered promiscuous mode
[  308.139111][T12736] macsec1: entered allmulticast mode
[  308.139133][T12736] batadv0: entered allmulticast mode
[  308.188234][T12736] 8021q: adding VLAN 0 to HW filter on device macsec1
[  308.236928][T12736] batadv0: left allmulticast mode
[  308.237192][T12736] batadv0: left promiscuous mode
[  308.475113][T12736] batadv0: entered promiscuous mode
[  308.475424][T12736] macsec1: entered promiscuous mode
[  308.477028][T12736] macsec1: entered allmulticast mode
[  308.477049][T12736] batadv0: entered allmulticast mode
[  308.480606][T12736] 8021q: adding VLAN 0 to HW filter on device macsec1
[  308.525695][T12736] batadv0: left allmulticast mode
[  308.525927][T12736] batadv0: left promiscuous mode
[  309.172961][T12787] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  309.181494][T12787] team0: Device ipvlan2 is already an upper device of the team interface
[  309.411626][T12794] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  309.411656][T12794] netlink: 'syz.0.1601': attribute type 2 has an invalid length.
[  310.279796][T12826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.354697][ T4998] udevd[4998]: worker [6634] /devices/virtual/block/nbd2 timeout; kill it
[  310.356070][ T4998] udevd[4998]: seq 11471 '/devices/virtual/block/nbd2' killed
[  310.685012][T12828] batman_adv: batadv0: Adding interface: veth0
[  310.685035][T12828] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active
[  310.692147][T12839] net_ratelimit: 5 callbacks suppressed
[  310.692168][T12839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.692796][T12828] __nla_validate_parse: 10 callbacks suppressed
[  310.692814][T12828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'.
[  310.814044][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 180 seconds
[  310.814309][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 180 seconds
[  310.814342][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 180 seconds
[  310.814372][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 180 seconds
[  310.966781][T12845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1616'.
[  311.619966][T12874] ksmbd: Unknown IPC event: 8, ignore.
[  311.760953][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'.
[  311.856075][T12875] netlink: 'syz.0.1623': attribute type 3 has an invalid length.
[  311.856099][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'.
[  312.407408][T12903] batman_adv: batadv0: Interface activated: veth0
[  312.441584][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.441789][T12903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.468374][T12903] batman_adv: batadv0: Removing interface: dummy0
[  312.471549][T12903] batman_adv: batadv0: Interface deactivated: veth0
[  312.471778][T12903] batman_adv: batadv0: Removing interface: veth0
[  312.592893][T12903] bridge0: port 3(batadv0) entered disabled state
[  312.646332][T12903] bridge0: port 3(batadv0) entered disabled state
[  312.713744][ T5293] veth0_macvtap: left promiscuous mode
[  313.051864][T12925] pimreg0: tun_chr_ioctl cmd 1074025677
[  313.053301][T12925] pimreg0: linktype set to 776
[  313.071326][T12925] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1631'.
[  313.176528][T12930] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11
[  313.636468][T12940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.637391][T12941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.757179][T12940] syzkaller0: entered promiscuous mode
[  313.757206][T12940] syzkaller0: entered allmulticast mode
[  313.757948][T12940] tipc: Resetting bearer <eth:syzkaller0>
[  314.207632][ T9420] tipc: Resetting bearer <eth:syzkaller0>
[  314.265301][T12939] tipc: Resetting bearer <eth:syzkaller0>
[  317.335335][T12939] tipc: Disabling bearer <eth:syzkaller0>
[  317.663238][    C0] sched: DL replenish lagged too much
[  317.898384][T12984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1645'.
[  318.015425][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'.
[  318.032310][T12986] sctp: [Deprecated]: syz.2.1644 (pid 12986) Use of int in max_burst socket option.
[  318.032310][T12986] Use struct sctp_assoc_value instead
[  318.530292][T13005] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  319.579817][T13028] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  319.580015][T13028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  320.350912][T13046] xt_l2tp: missing protocol rule (udp|l2tpip)
[  320.377094][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'.
[  320.388544][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'.
[  320.664369][T13062] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  320.880440][T13060] syzkaller0: entered promiscuous mode
[  320.880467][T13060] syzkaller0: entered allmulticast mode
[  321.514247][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'.
[  321.752696][T13100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'.
[  322.471500][   T24] bridge0: entered promiscuous mode
[  322.670101][T13114] netlink: 'syz.4.1680': attribute type 1 has an invalid length.
[  323.282676][T13150] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  323.386573][T13146] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  323.386612][T13146] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  323.386654][T13146] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  323.792161][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1687'.
[  323.816988][T13169] ipvlan1: entered promiscuous mode
[  323.818297][T13169] ipvlan1: left promiscuous mode
[  323.924011][T13168] hsr0: left promiscuous mode
[  324.658904][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1696'.
[  324.772538][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1696'.
[  325.341598][T13230] hsr0: entered allmulticast mode
[  325.341625][T13230] hsr_slave_0: entered allmulticast mode
[  325.341646][T13230] hsr_slave_1: entered allmulticast mode
[  328.187235][T13225] hsr0: left allmulticast mode
[  328.187263][T13225] hsr_slave_0: left allmulticast mode
[  328.187283][T13225] hsr_slave_1: left allmulticast mode
[  328.511676][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'.
[  328.511722][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'.
[  328.990948][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'.
[  329.060360][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1714'.
[  329.197364][T13281] netlink: 'syz.1.1716': attribute type 1 has an invalid length.
[  329.292850][T13288] syzkaller1: entered promiscuous mode
[  329.292877][T13288] syzkaller1: entered allmulticast mode
[  329.838975][T13322] netlink: 'syz.3.1725': attribute type 11 has an invalid length.
[  329.862651][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'.
[  330.494611][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1726'.
[  331.059074][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'.
[  331.232869][T13370] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1732'.
[  331.352426][T13374] syzkaller1: entered promiscuous mode
[  331.352453][T13374] syzkaller1: entered allmulticast mode
[  331.439965][T13380] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1732'.
[  332.234239][T13413] netlink: del zone limit has 4 unknown bytes
[  332.238424][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  332.238447][T13420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1741'.
[  332.651804][T13430] TC_ACT_REPEAT abuse ?
[  333.631096][T13453] bond0: (slave bond_slave_0): Releasing backup interface
[  333.682451][T13453] bond0: (slave bond_slave_1): Releasing backup interface
[  333.746270][T13453] team0: Port device team_slave_0 removed
[  333.848330][T13453] team0: Port device team_slave_1 removed
[  333.909250][T13453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  334.065391][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'.
[  334.265975][T13468] netlink: 'syz.3.1751': attribute type 16 has an invalid length.
[  334.266003][T13468] netlink: 'syz.3.1751': attribute type 17 has an invalid length.
[  334.299187][T13468] lo: left promiscuous mode
[  334.327134][T13468] tunl0: left promiscuous mode
[  334.335086][T13468] gre0: left promiscuous mode
[  334.465237][T13468] 0ªX¹¦Dö»: left allmulticast mode
[  334.542819][T13468] erspan0: left promiscuous mode
[  334.560986][T13468] ip_vti0: left promiscuous mode
[  334.562294][T13468] ip6_vti0: left promiscuous mode
[  334.600152][T13468] ip6tnl0: left promiscuous mode
[  334.602438][T13468] ip6gre0: left promiscuous mode
[  334.634485][T13468] ip6gretap0: left promiscuous mode
[  334.637197][T13468] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.637695][T13468] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.638709][T13468] bridge0: left promiscuous mode
[  334.641756][T13468] vcan0: left promiscuous mode
[  334.678476][T13468] team0: left promiscuous mode
[  334.691514][T13468] nlmon0: left promiscuous mode
[  334.693025][T13468] veth0: left promiscuous mode
[  334.709100][T13468] veth1: left promiscuous mode
[  334.729938][T13468] wg0: left promiscuous mode
[  334.744062][T13468] wg1: left promiscuous mode
[  334.751420][T13468] wg2: left promiscuous mode
[  334.769953][T13468] veth0_to_bridge: left promiscuous mode
[  334.886228][T13468] veth1_to_bridge: left promiscuous mode
[  334.940115][T13468] veth0_to_bond: left promiscuous mode
[  334.952550][T13468] bond_slave_0: left promiscuous mode
[  334.952574][T13468] bond_slave_0: left allmulticast mode
[  334.952976][T13468] veth1_to_bond: left promiscuous mode
[  334.976703][T13468] bond_slave_1: left promiscuous mode
[  334.977082][T13468] veth1_to_team: left promiscuous mode
[  334.998727][T13468] team_slave_1: left promiscuous mode
[  335.011140][T13468] veth1_to_batadv: left promiscuous mode
[  335.027831][T13468] batadv_slave_1: left promiscuous mode
[  335.055207][T13468] xfrm0: left promiscuous mode
[  335.057699][T13468] veth0_to_hsr: left promiscuous mode
[  335.060374][T13468] hsr_slave_0: left promiscuous mode
[  335.063004][T13468] veth1_to_hsr: left promiscuous mode
[  335.089890][T13468] hsr_slave_1: left promiscuous mode
[  335.092418][T13468] veth1_virt_wifi: left promiscuous mode
[  335.110819][T13468] veth0_virt_wifi: left promiscuous mode
[  335.120799][T13468] vlan0: left promiscuous mode
[  335.121239][T13468] vlan1: left promiscuous mode
[  335.121578][T13468] macvlan0: left promiscuous mode
[  335.121769][T13468] macvlan1: left promiscuous mode
[  335.121932][T13468] ipvlan0: left promiscuous mode
[  335.122088][T13468] ipvlan1: left promiscuous mode
[  335.122697][T13468] macvtap0: left promiscuous mode
[  335.122865][T13468] macsec0: left promiscuous mode
[  335.123021][T13468] geneve0: left promiscuous mode
[  335.123179][T13468] geneve1: left promiscuous mode
[  335.167126][T13468] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  335.169585][T13468] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  335.171627][T13468] netdevsim netdevsim3 netdevsim2: left promiscuous mode
[  335.179846][T13468] netdevsim netdevsim3 netdevsim3: left promiscuous mode
[  335.185425][T13468] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  335.187647][T13468] mac80211_hwsim hwsim12 wlan2: left promiscuous mode
[  335.426121][T13468] bond3: left promiscuous mode
[  335.471270][T13468] ip6erspan0: left promiscuous mode
[  335.491524][T13468] bond6: left promiscuous mode
[  335.491549][T13468] bond6: left allmulticast mode
[  335.509198][T13468] bond7: left promiscuous mode
[  335.509224][T13468] bond7: left allmulticast mode
[  335.512668][T13468] vlan1: left allmulticast mode
[  335.512690][T13468] veth0_vlan: left allmulticast mode
[  335.512717][T13468] macsec1: left allmulticast mode
[  335.546426][T13468] ip6gre1: left promiscuous mode
[  335.546450][T13468] ip6gre1: left allmulticast mode
[  335.624829][ T7807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.624882][ T7807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.624921][ T7807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.624959][ T7807] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.895039][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'.
[  335.939994][T13515] bond6: entered promiscuous mode
[  335.940571][T13515] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.668659][T13547] netlink: 'syz.3.1767': attribute type 1 has an invalid length.
[  337.165278][T13559] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1771'.
[  337.165309][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'.
[  337.165337][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'.
[  337.240279][T13567] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1772'.
[  337.321686][T13569] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1773'.
[  337.322617][T13569] tipc: Trying to set illegal importance in message
[  337.471222][T13573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1774'.
[  337.835664][T13580] xt_CT: You must specify a L4 protocol and not use inversions on it
[  337.872426][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1778'.
[  337.872470][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1778'.
[  337.936858][T13583] syzkaller1: entered promiscuous mode
[  337.937058][T13583] syzkaller1: entered allmulticast mode
[  338.253296][T13586] netlink: 'syz.0.1779': attribute type 3 has an invalid length.
[  338.767878][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.770107][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.770520][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.832357][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.832801][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.859631][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.860030][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.860464][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.860828][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.906488][T13612] bridge0: entered allmulticast mode
[  338.908366][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  339.000936][T13620] bridge4: entered allmulticast mode
[  339.152522][T13628] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  339.164496][T13628] bond6 (unregistering): Released all slaves
[  339.207168][T13621] can: request_module (can-proto-0) failed.
[  339.602953][T13648] __nla_validate_parse: 5 callbacks suppressed
[  339.602977][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'.
[  340.220364][T13670] tc_dump_action: action bad kind
[  340.831302][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1801'.
[  340.997765][T13698] syzkaller1: entered promiscuous mode
[  340.997791][T13698] syzkaller1: entered allmulticast mode
[  341.239712][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 210 seconds
[  341.239761][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 210 seconds
[  341.239793][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 210 seconds
[  341.239822][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 210 seconds
[  341.911860][T13709] xt_CT: You must specify a L4 protocol and not use inversions on it
[  342.249052][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1806'.
[  342.281703][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1805'.
[  342.356466][T13725] netlink: 'syz.4.1805': attribute type 21 has an invalid length.
[  342.356493][T13725] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1805'.
[  342.415236][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  342.415506][T13724] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  343.080883][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'.
[  343.498194][T13762] xt_CT: You must specify a L4 protocol and not use inversions on it
[  344.060307][ T4949] block nbd3: Receive control failed (result -32)
[  344.187941][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'.
[  344.579630][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.580133][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.603251][T13794] __nla_validate_parse: 5 callbacks suppressed
[  344.603269][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.604611][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.610247][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.616079][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.626979][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.627347][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.627643][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.628008][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.657078][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.657257][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  344.761064][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.761364][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.761512][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.761654][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.761814][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.761960][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.767608][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.777382][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  344.777778][T13793] netlink: 'syz.0.1824': attribute type 4 has an invalid length.
[  345.526475][T13811] ip6gretap0: entered promiscuous mode
[  345.533033][T13811] ip6gretap0 (unregistering): left promiscuous mode
[  345.840708][T13824] sctp: [Deprecated]: syz.1.1833 (pid 13824) Use of int in max_burst socket option deprecated.
[  345.840708][T13824] Use struct sctp_assoc_value instead
[  345.992297][T13828] syzkaller0: left promiscuous mode
[  345.992325][T13828] syzkaller0: left allmulticast mode
[  346.517902][T13846] xt_CT: You must specify a L4 protocol and not use inversions on it
[  348.354346][T13893] veth1_macvtap: entered promiscuous mode
[  348.356377][T13893] macsec2: entered promiscuous mode
[  348.969966][T13902] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  349.012709][T13902] ip6tnl4: entered allmulticast mode
[  349.083357][ T7809] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.090103][   T24] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.111670][ T7809] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.455760][ T5760] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.549967][T13910] pim6reg: entered allmulticast mode
[  349.676130][ T5760] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.795278][T13908] validate_nla: 26 callbacks suppressed
[  349.795300][T13908] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  349.795316][T13908] __nla_validate_parse: 26 callbacks suppressed
[  349.795351][T13908] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1851'.
[  349.845967][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'.
[  350.447809][T13932] netlink: 'syz.3.1855': attribute type 12 has an invalid length.
[  350.503154][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'.
[  350.688904][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1858'.
[  351.631564][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'.
[  352.273726][T13957] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  353.152108][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'.
[  353.293410][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  353.340418][T13988] ip6tnl0: Caught tx_queue_len zero misconfig
[  353.340448][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'.
[  353.340470][T13988] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1282) !
[  353.620822][T13986] macvlan2: entered promiscuous mode
[  353.621036][T13986] macvlan2: entered allmulticast mode
[  353.638443][T13986] bond4: (slave macvlan2): Opening slave failed
[  353.652905][T14007] netlink: 'syz.4.1871': attribute type 1 has an invalid length.
[  353.701524][T14007] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1871'.
[  354.571170][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  354.880409][ T5760] infiniband syz1: ib_query_port failed (-19)
[  355.015351][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'.
[  355.015378][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'.
[  355.015406][T14033] netlink: 'syz.3.1877': attribute type 15 has an invalid length.
[  355.093257][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'.
[  355.093282][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'.
[  355.093309][T14033] netlink: 'syz.3.1877': attribute type 15 has an invalid length.
[  355.149644][   T12] smbdirect: ib_dev[syz1] removed
[  355.244137][ T9411] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  355.247401][ T9411] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  355.247453][ T9411] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  355.255119][ T7809] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  355.474386][ T7809] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0
[  355.474439][ T7809] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0
[  355.474479][ T7809] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0
[  355.474517][ T7809] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0
[  356.358177][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'.
[  356.438639][T14061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  356.559469][T14047] net_ratelimit: 56 callbacks suppressed
[  356.559572][T14047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.213353][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.456445][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.253281][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.501664][ T9415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.851774][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'.
[  358.971646][T14127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1891'.
[  359.290611][T14130] netlink: 'syz.0.1894': attribute type 6 has an invalid length.
[  359.293322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.603912][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'.
[  359.605347][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'.
[  359.949505][ T9415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.980209][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'.
[  360.271283][T14139] Bluetooth: hci0: unsupported parameter 5135
[  360.271310][T14139] Bluetooth: hci0: unsupported parameter 8192
[  360.271325][T14139] Bluetooth: hci0: unsupported parameter 5135
[  360.271338][T14139] Bluetooth: hci0: unsupported parameter 8192
[  360.325003][T14144] pim6reg: entered allmulticast mode
[  360.328297][T14149] pim6reg: left allmulticast mode
[  360.333285][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.659784][T14141] syzkaller1: entered promiscuous mode
[  360.659990][T14141] syzkaller1: entered allmulticast mode
[  360.696984][ T5739] rxe_eth0 speed is unknown, defaulting to 1000
[  360.811019][T14155] syzkaller1: entered promiscuous mode
[  360.811235][T14155] syzkaller1: entered allmulticast mode
[  360.981060][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.255247][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'.
[  361.283829][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'.
[  361.374057][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  361.625061][T14169] syzkaller0: entered promiscuous mode
[  361.625331][T14169] syzkaller0: entered allmulticast mode
[  363.219883][T14214] netlink: 'syz.4.1909': attribute type 61 has an invalid length.
[  363.293257][T14216] Unsupported ieee802154 address type: 0
[  364.340192][T14239] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.1914'.
[  364.527719][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1915'.
[  364.667638][T14249] netlink: 'syz.2.1916': attribute type 1 has an invalid length.
[  364.931736][T14249] 8021q: adding VLAN 0 to HW filter on device bond7
[  364.946805][T14252] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  365.088914][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  365.144206][T14262] netlink: 'syz.4.1917': attribute type 13 has an invalid length.
[  365.144245][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  365.168126][T14252] 8021q: adding VLAN 0 to HW filter on device bond7
[  365.269292][T14252] bond7: (slave wlan1): Opening slave failed
[  365.496905][T14255] macsec3: entered promiscuous mode
[  365.630802][T14262] netlink: 'syz.4.1917': attribute type 13 has an invalid length.
[  365.630830][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  365.961659][T14276] syzkaller0: entered promiscuous mode
[  365.961878][T14276] syzkaller0: entered allmulticast mode
[  367.653679][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'.
[  367.985687][T14330] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  367.985711][T14330] netlink: 'syz.1.1931': attribute type 268 has an invalid length.
[  367.985727][T14330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1931'.
[  369.608019][T14348] siw: device registration error -23
[  369.665975][T14355] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1939'.
[  369.776738][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'.
[  369.776817][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'.
[  370.507163][ T7809] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.507221][ T7809] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.507275][ T7809] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.507312][ T7809] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.507349][ T7809] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.507378][ T7809] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.813848][ T7809] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.814117][ T7809] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.231191][T14381] netlink: 'syz.0.1945': attribute type 16 has an invalid length.
[  371.231224][T14381] netlink: 'syz.0.1945': attribute type 17 has an invalid length.
[  371.446242][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'.
[  371.527925][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'.
[  371.543148][T14381] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.561409][T14381] 8021q: adding VLAN 0 to HW filter on device team0
[  371.615473][ T1734] block nbd2: Possible stuck request ffff888028127000: control (read@0,1024B). Runtime 240 seconds
[  371.615525][ T1734] block nbd2: Possible stuck request ffff8880281271c0: control (read@1024,1024B). Runtime 240 seconds
[  371.615559][ T1734] block nbd2: Possible stuck request ffff888028127380: control (read@2048,1024B). Runtime 240 seconds
[  371.615592][ T1734] block nbd2: Possible stuck request ffff888028127540: control (read@3072,1024B). Runtime 240 seconds
[  371.693295][T14381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.173098][T14400] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1951'.
[  372.340162][T14381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.340198][T14381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.367514][T14381] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  372.651066][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'.
[  373.055616][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'.
[  375.674345][T14428] syzkaller0: renamed from gre1
[  376.930573][T14496] syzkaller0: left promiscuous mode
[  376.930799][T14496] syzkaller0: left allmulticast mode
[  376.969620][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  377.301343][T14503] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003
[  377.847228][T14516] syzkaller0: entered promiscuous mode
[  377.847442][T14516] syzkaller0: entered allmulticast mode
[  377.909166][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'.
[  378.013371][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  378.613054][T14530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.996618][T14539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1979'.
[  379.041298][T14539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1979'.
[  379.059069][T14542] openvswitch: netlink: Key 10 has unexpected len 0 expected 4
[  379.122978][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1981'.
[  379.277085][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'.
[  379.475273][T14556] bridge0: port 4(bond0) entered disabled state
[  379.475585][T14556] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.476767][T14556] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.757339][T14565] netlink: 'syz.4.1985': attribute type 62 has an invalid length.
[  380.142130][T14560] tipc: Started in network mode
[  380.142157][T14560] tipc: Node identity 4, cluster identity 4711
[  380.142171][T14560] tipc: Node number set to 4
[  380.234998][T14566] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  380.403738][T14563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1986'.
[  380.421020][T14576] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  380.982162][T14565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.982206][T14565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0
[  380.982238][T14565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.175393][T14576] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  381.609503][T14590] bond5: option ad_select: invalid value (34)
[  381.789073][T14590] bond5 (unregistering): Released all slaves
[  382.283141][T14565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.285103][T14565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0
[  382.285141][T14565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.390934][T14605] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  382.587958][T14605] block nbd0: reconnected socket
[  382.587986][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'.
[  382.596097][ T4949] block nbd0: Receive control failed (result -32)
[  382.920204][T14565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.920250][T14565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0
[  382.920280][T14565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.355764][T14565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.355806][T14565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0
[  383.355838][T14565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.401508][T14565] 
[  383.414188][T14565] ======================================================
[  383.421277][T14565] WARNING: possible circular locking dependency detected
[  383.428461][T14565] syzkaller #0 Not tainted
[  383.432899][T14565] ------------------------------------------------------
[  383.439985][T14565] syz.4.1985/14565 is trying to acquire lock:
[  383.446133][T14565] ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  383.456294][T14565] 
[  383.456294][T14565] but task is already holding lock:
[  383.463724][T14565] ffffffff9080a100 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  383.472625][T14565] 
[  383.472625][T14565] which lock already depends on the new lock.
[  383.472625][T14565] 
[  383.483054][T14565] 
[  383.483054][T14565] the existing dependency chain (in reverse order) is:
[  383.492098][T14565] 
[  383.492098][T14565] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  383.499447][T14565]        __mutex_lock+0x197/0x15a0
[  383.504718][T14565]        get_device_parent+0x16f/0x3a0
[  383.510227][T14565]        device_add+0x2d4/0xb80
[  383.515128][T14565]        device_create+0x269/0x300
[  383.520276][T14565]        msr_device_create+0x33/0x50
[  383.525660][T14565]        cpuhp_invoke_callback+0x434/0x810
[  383.531533][T14565]        cpuhp_thread_fun+0x362/0x780
[  383.537033][T14565]        smpboot_thread_fn+0x5f8/0xb30
[  383.542538][T14565]        kthread+0x38b/0x480
[  383.547158][T14565]        ret_from_fork+0x514/0xb70
[  383.552341][T14565]        ret_from_fork_asm+0x1a/0x30
[  383.557700][T14565] 
[  383.557700][T14565] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  383.565304][T14565]        cpuhp_thread_fun+0x127/0x780
[  383.570727][T14565]        smpboot_thread_fn+0x5f8/0xb30
[  383.576233][T14565]        kthread+0x38b/0x480
[  383.580851][T14565]        ret_from_fork+0x514/0xb70
[  383.586021][T14565]        ret_from_fork_asm+0x1a/0x30
[  383.591378][T14565] 
[  383.591378][T14565] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  383.599155][T14565]        cpus_read_lock+0x3d/0x160
[  383.604309][T14565]        static_key_slow_inc+0x12/0x30
[  383.609858][T14565]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  383.616223][T14565]        nbd_genl_foreach_sock+0x265/0x450
[  383.622138][T14565]        nbd_genl_reconfigure+0xbbb/0x1040
[  383.628019][T14565]        genl_family_rcv_msg_doit+0x233/0x340
[  383.634287][T14565]        genl_rcv_msg+0x614/0x7a0
[  383.639387][T14565]        netlink_rcv_skb+0x226/0x4a0
[  383.644711][T14565]        genl_rcv+0x28/0x40
[  383.649255][T14565]        netlink_unicast+0x8ef/0xa80
[  383.654573][T14565]        netlink_sendmsg+0x7f0/0xb20
[  383.659902][T14565]        sock_sendmsg_nosec+0x14e/0x190
[  383.665613][T14565]        ____sys_sendmsg+0x54e/0x850
[  383.670986][T14565]        ___sys_sendmsg+0x2a5/0x360
[  383.676257][T14565]        __x64_sys_sendmsg+0x1b1/0x290
[  383.681748][T14565]        do_syscall_64+0x166/0x520
[  383.686956][T14565]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.693447][T14565] 
[  383.693447][T14565] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  383.701129][T14565]        __mutex_lock+0x197/0x15a0
[  383.706283][T14565]        nbd_queue_rq+0x373/0xff0
[  383.711440][T14565]        blk_mq_dispatch_rq_list+0x499/0x1990
[  383.717669][T14565]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  383.724633][T14565]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  383.731292][T14565]        blk_mq_run_work_fn+0x167/0x2f0
[  383.736887][T14565]        process_scheduled_works+0xc3d/0x1630
[  383.742999][T14565]        worker_thread+0xa47/0xfb0
[  383.748154][T14565]        kthread+0x38b/0x480
[  383.752783][T14565]        ret_from_fork+0x514/0xb70
[  383.758804][T14565]        ret_from_fork_asm+0x1a/0x30
[  383.764138][T14565] 
[  383.764138][T14565] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  383.771392][T14565]        __mutex_lock+0x197/0x15a0
[  383.776544][T14565]        nbd_queue_rq+0xc1/0xff0
[  383.781643][T14565]        blk_mq_dispatch_rq_list+0x499/0x1990
[  383.787750][T14565]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  383.794642][T14565]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  383.801187][T14565]        blk_mq_run_work_fn+0x167/0x2f0
[  383.806802][T14565]        process_scheduled_works+0xc3d/0x1630
[  383.812933][T14565]        worker_thread+0xa47/0xfb0
[  383.818083][T14565]        kthread+0x38b/0x480
[  383.822703][T14565]        ret_from_fork+0x514/0xb70
[  383.827843][T14565]        ret_from_fork_asm+0x1a/0x30
[  383.833169][T14565] 
[  383.833169][T14565] -> #5 (set->srcu){.+.+}-{0:0}:
[  383.840329][T14565]        __synchronize_srcu+0xca/0x2f0
[  383.845888][T14565]        elevator_switch+0x1e8/0x7b0
[  383.851273][T14565]        elevator_change+0x2fa/0x480
[  383.856593][T14565]        elevator_set_default+0x375/0x440
[  383.862375][T14565]        blk_register_queue+0x404/0x4f0
[  383.868040][T14565]        __add_disk+0x6b8/0xdb0
[  383.872941][T14565]        add_disk_fwnode+0x100/0x3a0
[  383.878268][T14565]        nbd_dev_add+0x733/0xb60
[  383.883248][T14565]        nbd_init+0x168/0x1f0
[  383.888067][T14565]        do_one_initcall+0x250/0x870
[  383.893394][T14565]        do_initcall_level+0x10a/0x1a0
[  383.898989][T14565]        do_initcalls+0x59/0xa0
[  383.903878][T14565]        kernel_init_freeable+0x29d/0x3e0
[  383.909633][T14565]        kernel_init+0x22/0x1d0
[  383.914564][T14565]        ret_from_fork+0x514/0xb70
[  383.919792][T14565]        ret_from_fork_asm+0x1a/0x30
[  383.925111][T14565] 
[  383.925111][T14565] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  383.932978][T14565]        __mutex_lock+0x197/0x15a0
[  383.938139][T14565]        elevator_change+0x1af/0x480
[  383.943465][T14565]        elevator_set_none+0xb5/0x140
[  383.948910][T14565]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  383.955288][T14565]        nbd_start_device+0x189/0xb30
[  383.960721][T14565]        nbd_genl_connect+0x167d/0x1cd0
[  383.966318][T14565]        genl_family_rcv_msg_doit+0x233/0x340
[  383.972430][T14565]        genl_rcv_msg+0x614/0x7a0
[  383.977513][T14565]        netlink_rcv_skb+0x226/0x4a0
[  383.982857][T14565]        genl_rcv+0x28/0x40
[  383.987418][T14565]        netlink_unicast+0x8ef/0xa80
[  383.992738][T14565]        netlink_sendmsg+0x7f0/0xb20
[  383.998088][T14565]        sock_sendmsg_nosec+0x14e/0x190
[  384.003667][T14565]        ____sys_sendmsg+0x54e/0x850
[  384.008993][T14565]        ___sys_sendmsg+0x2a5/0x360
[  384.014242][T14565]        __x64_sys_sendmsg+0x1b1/0x290
[  384.019741][T14565]        do_syscall_64+0x166/0x520
[  384.024925][T14565]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.031455][T14565] 
[  384.031455][T14565] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  384.040210][T14565]        blk_alloc_queue+0x544/0x690
[  384.045532][T14565]        __blk_mq_alloc_disk+0x194/0x390
[  384.051210][T14565]        nbd_dev_add+0x494/0xb60
[  384.056220][T14565]        nbd_init+0x168/0x1f0
[  384.060925][T14565]        do_one_initcall+0x250/0x870
[  384.066250][T14565]        do_initcall_level+0x10a/0x1a0
[  384.071749][T14565]        do_initcalls+0x59/0xa0
[  384.076673][T14565]        kernel_init_freeable+0x29d/0x3e0
[  384.082445][T14565]        kernel_init+0x22/0x1d0
[  384.087363][T14565]        ret_from_fork+0x514/0xb70
[  384.092503][T14565]        ret_from_fork_asm+0x1a/0x30
[  384.097818][T14565] 
[  384.097818][T14565] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  384.105066][T14565]        fs_reclaim_acquire+0x71/0x100
[  384.110611][T14565]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  384.116999][T14565]        alloc_inode+0xb8/0x1b0
[  384.121914][T14565]        iget_locked+0x12c/0x690
[  384.126880][T14565]        kernfs_get_inode+0x4f/0x770
[  384.132220][T14565]        kernfs_get_tree+0x5cd/0x980
[  384.137548][T14565]        vfs_get_tree+0x92/0x2a0
[  384.142551][T14565]        do_new_mount+0x325/0xb00
[  384.147608][T14565]        __se_sys_mount+0x31d/0x420
[  384.152835][T14565]        do_syscall_64+0x166/0x520
[  384.158613][T14565]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.165096][T14565] 
[  384.165096][T14565] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  384.173252][T14565]        down_write+0x91/0x200
[  384.178057][T14565]        kernfs_remove_by_name_ns+0x4e/0x140
[  384.184076][T14565]        device_links_driver_bound+0x4ab/0x1440
[  384.190362][T14565]        driver_bound+0xd8/0x2e0
[  384.195422][T14565]        really_probe+0x774/0xae0
[  384.200916][T14565]        __driver_probe_device+0x1e8/0x360
[  384.206756][T14565]        driver_probe_device+0x4f/0x240
[  384.212343][T14565]        __device_attach_driver+0x270/0x410
[  384.218280][T14565]        bus_for_each_drv+0x258/0x2f0
[  384.223710][T14565]        __device_attach+0x2c4/0x450
[  384.229046][T14565]        device_initial_probe+0xa1/0xd0
[  384.234631][T14565]        bus_probe_device+0x12a/0x220
[  384.240047][T14565]        device_add+0x7d7/0xb80
[  384.244948][T14565]        faux_device_create_with_groups+0x1a5/0x2b0
[  384.251662][T14565]        regulator_dummy_init+0x19/0x40
[  384.257322][T14565]        regulator_init+0xca/0x110
[  384.262481][T14565]        do_one_initcall+0x250/0x870
[  384.267818][T14565]        do_initcall_level+0x10a/0x1a0
[  384.273317][T14565]        do_initcalls+0x59/0xa0
[  384.278216][T14565]        kernel_init_freeable+0x29d/0x3e0
[  384.283983][T14565]        kernel_init+0x22/0x1d0
[  384.288884][T14565]        ret_from_fork+0x514/0xb70
[  384.294042][T14565]        ret_from_fork_asm+0x1a/0x30
[  384.299363][T14565] 
[  384.299363][T14565] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  384.308015][T14565]        __lock_acquire+0x164c/0x2de0
[  384.313458][T14565]        lock_acquire+0x115/0x350
[  384.318517][T14565]        down_read+0x45/0x320
[  384.323231][T14565]        kernfs_remove+0x35/0x80
[  384.328220][T14565]        __kobject_del+0xe0/0x310
[  384.333375][T14565]        kobject_del+0x45/0x60
[  384.338188][T14565]        cleanup_glue_dir+0x1a3/0x220
[  384.343613][T14565]        device_del+0x77d/0x8f0
[  384.348520][T14565]        unregister_netdevice_many_notify+0x181a/0x1d80
[  384.355577][T14565]        unregister_netdevice_queue+0x2f5/0x340
[  384.361880][T14565]        nsim_destroy+0x275/0x800
[  384.367073][T14565]        __nsim_dev_port_del+0x14e/0x200
[  384.372751][T14565]        nsim_dev_reload_destroy+0x288/0x490
[  384.378780][T14565]        nsim_dev_reload_down+0x8a/0xc0
[  384.384393][T14565]        devlink_reload+0x1ed/0x7f0
[  384.389766][T14565]        devlink_nl_reload_doit+0x921/0xc80
[  384.395710][T14565]        genl_family_rcv_msg_doit+0x233/0x340
[  384.401838][T14565]        genl_rcv_msg+0x614/0x7a0
[  384.406916][T14565]        netlink_rcv_skb+0x226/0x4a0
[  384.412246][T14565]        genl_rcv+0x28/0x40
[  384.416800][T14565]        netlink_unicast+0x8ef/0xa80
[  384.422132][T14565]        netlink_sendmsg+0x7f0/0xb20
[  384.427460][T14565]        sock_sendmsg_nosec+0x14e/0x190
[  384.433052][T14565]        ____sys_sendmsg+0x54e/0x850
[  384.438391][T14565]        ___sys_sendmsg+0x2a5/0x360
[  384.443675][T14565]        __x64_sys_sendmsg+0x1b1/0x290
[  384.449173][T14565]        do_syscall_64+0x166/0x520
[  384.454321][T14565]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.460787][T14565] 
[  384.460787][T14565] other info that might help us debug this:
[  384.460787][T14565] 
[  384.471046][T14565] Chain exists of:
[  384.471046][T14565]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  384.471046][T14565] 
[  384.484551][T14565]  Possible unsafe locking scenario:
[  384.484551][T14565] 
[  384.492050][T14565]        CPU0                    CPU1
[  384.497443][T14565]        ----                    ----
[  384.502880][T14565]   lock(gdp_mutex);
[  384.506821][T14565]                                lock(cpuhp_state-up);
[  384.513714][T14565]                                lock(gdp_mutex);
[  384.520166][T14565]   rlock(&root->kernfs_supers_rwsem);
[  384.525667][T14565] 
[  384.525667][T14565]  *** DEADLOCK ***
[  384.525667][T14565] 
[  384.533872][T14565] locks held by syz.4.1985/14565: 5, last CPU#1:
[  384.540300][T14565]  #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  384.548568][T14565]  #1: ffff888079435128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490
[  384.558995][T14565]  #2: ffff88807b588258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490
[  384.570021][T14565]  #3: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800
[  384.579149][T14565]  #4: ffffffff9080a100 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  384.588365][T14565] 
[  384.588365][T14565] stack backtrace:
[  384.594302][T14565] CPU: 1 UID: 0 PID: 14565 Comm: syz.4.1985 Not tainted syzkaller #0 PREEMPT(full) 
[  384.603748][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  384.613852][T14565] Call Trace:
[  384.617170][T14565]  <TASK>
[  384.620201][T14565]  dump_stack_lvl+0xe8/0x150
[  384.624908][T14565]  print_circular_bug+0x2e2/0x300
[  384.629987][T14565]  check_noncircular+0x12f/0x150
[  384.634983][T14565]  __lock_acquire+0x164c/0x2de0
[  384.639889][T14565]  ? lockdep_hardirqs_on+0x7b/0x110
[  384.645218][T14565]  ? __pfx___schedule+0x10/0x10
[  384.650126][T14565]  lock_acquire+0x115/0x350
[  384.654664][T14565]  ? kernfs_remove+0x35/0x80
[  384.659319][T14565]  down_read+0x45/0x320
[  384.663519][T14565]  ? kernfs_remove+0x35/0x80
[  384.668189][T14565]  kernfs_remove+0x35/0x80
[  384.672721][T14565]  __kobject_del+0xe0/0x310
[  384.677412][T14565]  kobject_del+0x45/0x60
[  384.681704][T14565]  cleanup_glue_dir+0x1a3/0x220
[  384.686638][T14565]  device_del+0x77d/0x8f0
[  384.691028][T14565]  ? __pfx_device_del+0x10/0x10
[  384.695916][T14565]  ? pm_runtime_set_memalloc_noio+0x1e7/0x260
[  384.702125][T14565]  ? netdev_unregister_kobject+0x347/0x450
[  384.708111][T14565]  unregister_netdevice_many_notify+0x181a/0x1d80
[  384.714585][T14565]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  384.721391][T14565]  ? __mutex_lock+0x305/0x15a0
[  384.726231][T14565]  ? lock_acquire+0x115/0x350
[  384.730957][T14565]  ? __kfree_rcu_sheaf+0x21/0x690
[  384.736038][T14565]  unregister_netdevice_queue+0x2f5/0x340
[  384.741827][T14565]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  384.748117][T14565]  ? mutex_destroy+0x39/0xf0
[  384.752751][T14565]  nsim_destroy+0x275/0x800
[  384.757300][T14565]  __nsim_dev_port_del+0x14e/0x200
[  384.762487][T14565]  nsim_dev_reload_destroy+0x288/0x490
[  384.767991][T14565]  ? __pfx_hook_capable+0x10/0x10
[  384.773180][T14565]  nsim_dev_reload_down+0x8a/0xc0
[  384.778257][T14565]  devlink_reload+0x1ed/0x7f0
[  384.782982][T14565]  ? __pfx_devlink_reload+0x10/0x10
[  384.788301][T14565]  ? apparmor_capable+0x126/0x170
[  384.793439][T14565]  ? bpf_lsm_capable+0x9/0x20
[  384.798202][T14565]  ? security_capable+0x7e/0x2c0
[  384.803303][T14565]  devlink_nl_reload_doit+0x921/0xc80
[  384.808726][T14565]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  384.814671][T14565]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  384.821035][T14565]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  384.827405][T14565]  genl_family_rcv_msg_doit+0x233/0x340
[  384.833005][T14565]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  384.839162][T14565]  ? bpf_lsm_capable+0x9/0x20
[  384.843890][T14565]  ? security_capable+0x7e/0x2c0
[  384.848874][T14565]  genl_rcv_msg+0x614/0x7a0
[  384.853444][T14565]  ? __pfx_genl_rcv_msg+0x10/0x10
[  384.858518][T14565]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  384.865016][T14565]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  384.870967][T14565]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  384.877528][T14565]  netlink_rcv_skb+0x226/0x4a0
[  384.882344][T14565]  ? __pfx_genl_rcv_msg+0x10/0x10
[  384.887422][T14565]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  384.892760][T14565]  ? down_read+0x2b9/0x320
[  384.897223][T14565]  genl_rcv+0x28/0x40
[  384.901267][T14565]  netlink_unicast+0x8ef/0xa80
[  384.906077][T14565]  netlink_sendmsg+0x7f0/0xb20
[  384.910882][T14565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.916214][T14565]  ? aa_sock_msg_perm+0x144/0x210
[  384.921342][T14565]  ? apparmor_socket_sendmsg+0x98/0x360
[  384.927016][T14565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.932346][T14565]  sock_sendmsg_nosec+0x14e/0x190
[  384.937419][T14565]  ____sys_sendmsg+0x54e/0x850
[  384.942245][T14565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  384.947572][T14565]  ? import_iovec+0x73/0xa0
[  384.952225][T14565]  ___sys_sendmsg+0x2a5/0x360
[  384.956979][T14565]  ? __lock_acquire+0x747/0x2de0
[  384.961953][T14565]  ? __pfx____sys_sendmsg+0x10/0x10
[  384.967189][T14565]  ? futex_wait+0x2a2/0x390
[  384.971786][T14565]  ? __fget_files+0x3a2/0x420
[  384.976496][T14565]  ? __fget_files+0x2a/0x420
[  384.981121][T14565]  __x64_sys_sendmsg+0x1b1/0x290
[  384.986263][T14565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  384.991791][T14565]  do_syscall_64+0x166/0x520
[  384.996419][T14565]  ? trace_irq_disable+0x3b/0x140
[  385.001610][T14565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.007714][T14565]  ? clear_bhb_loop+0x70/0xc0
[  385.012438][T14565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.018378][T14565] RIP: 0033:0x7f7919b9f559
[  385.022892][T14565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.042537][T14565] RSP: 002b:00007f791a9d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  385.050995][T14565] RAX: ffffffffffffffda RBX: 00007f7919e25fa0 RCX: 00007f7919b9f559
[  385.058999][T14565] RDX: 00000000000000b0 RSI: 0000200000000600 RDI: 000000000000000b
[  385.067004][T14565] RBP: 00007f7919c36b20 R08: 0000000000000000 R09: 0000000000000000
[  385.075006][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.083017][T14565] R13: 00007f7919e26038 R14: 00007f7919e25fa0 R15: 00007ffd9fa4ef48
[  385.091032][T14565]  </TASK>
[  386.018896][T14639] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  386.334348][ T7809] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  386.334387][ T7809] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2048 - 0
[  386.334414][ T7809] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.424079][ T7809] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  386.424315][ T7809] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2048 - 0
[  386.424345][ T7809] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.424396][ T7809] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  386.424424][ T7809] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2048 - 0
[  386.424452][ T7809] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.424486][ T7809] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  386.424514][ T7809] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2048 - 0
[  386.424541][ T7809] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0