last executing test programs:

2.216709196s ago: executing program 0 (id=1836):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
sendmmsg$sock(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="884a83180ec3c7dacc17eae99dbe0518f0117c7ffaa3586e174df358aacdee0f4b384fcacc11e97ca822c77e56fca6728146a44ec6c0f0ce6ff8a7def9dad29bdd871f3313f539ca949d3ed98ae464e4fbc4ad78f67adb87557c824e0e20f1b5e95f83bcdd9462d00812a62b48924f76aa0cb82e7a504858d8d056a1429cb77fa109d7cc1cfde3876fd574d38f0beb677e526fbc8541f18d66c66010099c919d7131b4a0233dd88dd6f1128e", 0xac}, {&(0x7f0000000300)="b15ba19e31", 0x5}, {&(0x7f0000000340)="3ce708c653a20a13c415addbcbf51f082bfd248bdc62f68950b43e37aaecffedc317ab7e45ac0212347dfefc95a8d7ec6404c482f2dd9f1caf6b595dbc5b80fd3e0652189a7b954029da4340a64af06fa1dd333d0e8a5d8d2b05300ebb2cbb8e05bb82da60d7361a59bdafe13a767950ce60a4bdafd463b1f0eee2e9e611953a60b7fa65fcf33ae9331ee76f9c6ffbfa3a2ac357266b6d0bac80f445da6b65212bb14223380be5c05a6633018667528e29574a8a95ddd8b54abae4fa8fc62ad7510449624dccd16a5148ed9b7d03b9400e6dee32f451188401d976b6f4", 0xdd}, {&(0x7f0000000440)="c3a1bad1d6e4f71d993e68a14ca48129122bdadd753f6ef5291ef12a39c20ebf2d3283680490899b6d67ed3be2ff4c5ae598c175bf4275376058834f7ca224180341d6bec53aa9a331f2c7fa93", 0x4d}, {&(0x7f00000004c0)="dd0b60cafe1e957845235aa68c6785b782bfcb80b29ac941ea9f639c3a3590ea8c96a00a6a044773ed9016571ee4f20e66123db70028700303513cd16c62242dc1fc8176acbe6e1b18982ccdc38b99fd559e5cdd74c251239e611b9aa0e45c57141d64b4c19550c14330f33bf9abc89482c9e81d68d9211994f7030d539d3240ee429b2cc0f711feb06ce2b2fb2abfc1a6774aa33463cbe8008209aec7a1b0a67f74cbc8b8497243ec98ed3b623df387af0615cc2cce23b46288f8a9", 0xbc}, {&(0x7f0000000580)="98e260e0945bbb49db185dece097c77f087f8fae29ec963124de89a2ae08ce24dfc83fd9afb096df0045791f1cb53247a532b5ef63b75bf9f5d96a2f506b7a86ab87d9b6a94dd12610228362847fd4d70523a36c71d39bb032ea77d8fbc9c940138d74d15a0d2aa07a9c8c3d94ca4113cdd1955df3ac75180c899a6ce24d3dec1e0c8a9d1a1af7b1c0", 0x89}, {&(0x7f0000000640)="e7be6b4fe8446c7bc623afd0a2981795c1769a77fd021a204fbb13de008ef8bfd8f620e29a5e6736fe3056d5799c87709a86ea1b6a71b606f6a8c6664c1fc405bf3a0f2c38fb711cfc03f7116bbc604d1d29757a8e224a35fa789814bbd6e36cf0c05ddc105e7ad9c8bbf332a661d3078aab5d382eb2725d3b3799dad03457cdd3152f0bb449248318", 0x89}, {&(0x7f0000000700)="a4424c5e7347e956a960ca194306c44b7bdec284317432a575e311a1277b8201314932159d1f6e72551320e8e3b4d0e0fbcf4f21249f38c8494c42ab8c8e44eebf4f8a24af2901feea30fd81e1b04190da51dba212bdd7896d4510dcd6ea97c50de18ac81f93179bf865930a1c3622ad79640deae9857156f060e2", 0x7b}, {&(0x7f0000000780)="c49be2b37f3c1dcd35282df4a43679e4b82716c6f3bd2129fc52fabdcd9ad3ea8454c9a0f295f90e860a6e31fe71a00377cac209b3df8e7e79f9817caf6e061e18c96a9e5c9671215f3ced357ce7c9ba71132904", 0x54}], 0x9, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x76de}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000000980)=@l2={0x1f, 0x401, @none, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="90c61558b36ec738642071486ffaf6e451440fb1402c1025fe5a9d07abfd21ab6e4ea6d1ac4bfee7714bd224d925e9afd95a70edc5edc9366e77da12f6225c29ed14b1d8844383c8f8eb0e28d0aaaa2cd60748d71f071c3b6bbc76a90a7e7ade276d77e1656f63f38aabe0e1b651ac1fc08d6cca970b8701a67d52dbbdcead54f7c278301886e3945d55630b1cddc9168c96347bd4bd661604bc", 0x9a}], 0x1, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e21, 0x10001, @mcast1, 0x8}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)="4099aaa4ab20bf75ea4dcee3bd9bc94aacddca742db6b7125864c15ff2338551fd47ef96ec51de6371fd90388c7ba5d332cdf79f2f9d806b6b13e1543c211cfd8c5d4227d01896cd4757a6e6e6bb8d822f6ad832a9ae35379fc377954da39427c1d1c119d41340a895ba6425ae8ba8b99a509b0e1a1add1acf2d457649c47b62547bafb3a6cd526a4894222d32c25d4432e725ffde86579a624e463b0f6dfbe03e9c9ec5ecc431d1ee9637ab", 0xac}, {&(0x7f0000000cc0)="e7d504b8fc8e2b55691f75a31adb233a24488ac52dbef0906b495241c64ba56f3ced31b1ac5e74d755f04b", 0x2b}], 0x2, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xfe}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e00)="9ffdbad4a1fd1a7d438520b8681164693c41d6d8fb3825e811ca05c5d7bdf58e05dcd66d0fe5d35a13df04af5156e64430c93e19fe6b8bb6e753dd9cc6504b20e5bb6deaea43e8c24c700062afa26eab74ad76ac4f5d9f63facf5fd5a002196b7dd1d3f78dc6ce37422581797e62f96ff1ff700c568a14d4ff2072552889f08b8752d54cbb51ca7416b6e2c9ffde0e5b2ca333f724b7ab414a3ca8b729d55bc517ac1379d7e3e78dfadcabe883179caeafceefc6255fd6ff96f67cecf1fb2b5760b3473cd6c86e0a4a70c0b9a8b114d22f78dc928e15c58474b0d9", 0xdb}, {&(0x7f0000000f00)="cd1fe2219b50f635a5c70d67d123595849797dbe9dc227bb01240f74ecb09a215618a204a637b7c5506f9b3a9a3fbdaeb32f7b8e84a53eb0dc890c6b2d1d426702ba47c3a112fa4f14297603e81be15b1153049b08a3d8a7ebdf73dd68027e2ad7936c741e1c8a45ebe5662b5e5627dbfc8cba9060190aa9b9d30f1a53befe79ec1b883f22a4620670f7c8bc2e5108265417b26c67bf496b293f35d35e0ef523352c3ce99fa0aad7f67fe8e074ae7744867de8c97aa664511e12cbbc9cc9848c613dc504d6dda659ef4b05c1d1f65bbdfc1c97d9c6e8", 0xd6}, {&(0x7f0000001000)}], 0x3, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}], 0x4, 0x0)
shutdown(r0, 0x1)

2.164199412s ago: executing program 3 (id=1837):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000740)={'dummy0\x00', @ifru_ivalue=0x10001})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x4, 0x32be4d464a7fb6a8, {0x6, @struct={0x7fffffff}, 0x0, 0x6, 0x2, 0x9, 0x9, 0xfff, 0x20, @struct={0x2, 0x9}, 0x9, 0x9, [0x4d, 0x7fffffff, 0x7, 0x400, 0x56e, 0x4]}, {0x2, @usage=0x206, <r2=>0x0, 0x5, 0x100000001, 0x31, 0x6, 0x80000001, 0x402, @struct={0x9, 0x7fffffff}, 0x8, 0x9, [0x7, 0x0, 0x3, 0x200000000, 0x3, 0x2]}, {0x101, @usage=0xa, 0x0, 0x5, 0x2a, 0x2, 0x9, 0x4df9, 0x10, @usage=0x9, 0x6, 0x0, [0x4, 0x0, 0x1, 0x200, 0x1, 0x4]}, {0x7, 0x0, 0x1}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={r2, 0x2, 0x1, [0x2, 0x3, 0x4cef4303, 0x7, 0x9], [0x4183, 0x8, 0x5, 0x101, 0x5, 0x4, 0x1, 0x9, 0x1, 0xad, 0x3, 0x3, 0x5, 0x7f, 0x12, 0xfffffffffffffff8, 0x3, 0xb50, 0x7ff, 0x4, 0x2, 0x0, 0x200, 0x5, 0x1, 0x8000000000000001, 0x1000000000000000, 0x2b, 0xf, 0x0, 0xff, 0xc, 0x80, 0x0, 0x9, 0x1, 0x1, 0x8000000000000000, 0x1, 0x7, 0x5, 0x9, 0x7, 0x10000, 0x3, 0x4, 0x6, 0x43d4, 0xac, 0x1000, 0x43, 0x5, 0x6, 0x1, 0x7fff, 0x3, 0xfffffffffffffff8, 0x1, 0x7, 0x9f, 0x4, 0x7, 0xa3, 0x1, 0x0, 0xffffffffffffffb2, 0x1, 0x3, 0x3, 0x0, 0x78, 0x0, 0x10001, 0x2, 0x2e5, 0xf31e, 0xf31, 0x7aa5c952, 0x0, 0x6640000000000, 0xffffffffffffff68, 0x3, 0x9bb, 0xffffffff, 0xfffffffffffff8b1, 0xfffffffffffffffc, 0x6, 0xe5, 0x0, 0x28a4, 0x63152be7, 0x5555, 0x0, 0xfffffffffffff7e2, 0x66b, 0xffffffff, 0x7, 0x9, 0x8001, 0xbdb, 0x3, 0x3, 0x7fff, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0xdc, 0x8, 0x55, 0x7, 0x1, 0x7, 0x2, 0xa, 0x0, 0x3, 0x3604, 0x7ff, 0x4, 0x23]})

1.939323627s ago: executing program 0 (id=1840):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvfrom(r0, &(0x7f0000002080)=""/4054, 0xfd6, 0x10132, 0x0, 0x0)

1.936088729s ago: executing program 3 (id=1841):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000012c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@align=0x1, {0xe1, 0x28, 0x10000, 0x3ff}}, 0x400, &(0x7f00000000c0), &(0x7f0000000100)=0xc6f3})

1.686343705s ago: executing program 3 (id=1844):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x6)
getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000880))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080)
r4 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000001640))
r7 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0xfffbfff6, @mcast2, 0x40}, 0x1c)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e1c, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

1.657906988s ago: executing program 1 (id=1845):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000))
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r6, 0x801, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000804}, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x3000c894}, 0x40000)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)

1.456378882s ago: executing program 2 (id=1846):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80032002)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0x805, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0x1c, 0x5, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2090}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x401, 0x7d732f28, 0x7, 0x8, 0x16a, 0x1]}, &(0x7f00000001c0)=0x78)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close(0x3)

1.350856268s ago: executing program 3 (id=1847):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000280)="eaa8a0acdad90020abed5de195fc2618e15baae7af350287d25c5692fee6c846e7b9c7d74d4aaa56ac933e9531d628b6dcb099f18f7fee4c198da7b85a69f0db15a60d2166b06b8e1220ba4eeb4d29165eb988eb2ead4407d1470c455be4af9c843640bd0e4336817df2e8701aef89cd9ac54cf3c35deb032aa7652833915cc3c7d0", 0x82}, {&(0x7f0000000340)="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", 0x18c}], 0x3, 0x0, 0x0, 0x2c}, 0x44004)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8)
getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800)
r10 = socket(0x2, 0x80805, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x100, 0x1f8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xff000000, 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {0x7f}, 0x21, 0x4, 0x43}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x400, 0x7, [0x1f, 0x38, 0x3d, 0x22, 0x20, 0x2c, 0x24, 0x5, 0xa, 0x5, 0x39, 0x3c, 0x15, 0x6, 0x1d, 0x25], 0x0, 0x2, 0x7ff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0x6, [0x5, 0x3, 0x26, 0xd, 0x13, 0x3, 0x2c, 0x38, 0x36, 0x2f, 0xd, 0x2e, 0x1e, 0x3d, 0x3, 0x33], 0x1, 0x9, 0x9}}}, {{@ip={@remote, @private=0xa010101, 0xffffffff, 0xffff00, 'veth0_to_hsr\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x84, 0x2, 0x22}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x5, 0x4, 0x6, 0x6, 0x4]}, {0x2, [0x5, 0x6, 0x3, 0x0, 0x4, 0x5], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r11, 0x4)
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="25790952e1d7e0a587", 0x3e}], 0x1}, 0x4004)
readv(r3, &(0x7f0000000840)=[{&(0x7f0000000600)=""/40, 0x28}], 0x1)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESHEX=r0], 0x50}, 0x1, 0x7}, 0x401c055)

1.126017642s ago: executing program 1 (id=1850):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
sendmmsg$sock(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="884a83180ec3c7dacc17eae99dbe0518f0117c7ffaa3586e174df358aacdee0f4b384fcacc11e97ca822c77e56fca6728146a44ec6c0f0ce6ff8a7def9dad29bdd871f3313f539ca949d3ed98ae464e4fbc4ad78f67adb87557c824e0e20f1b5e95f83bcdd9462d00812a62b48924f76aa0cb82e7a504858d8d056a1429cb77fa109d7cc1cfde3876fd574d38f0beb677e526fbc8541f18d66c66010099c919d7131b4a0233dd88dd6f1128e", 0xac}, {&(0x7f0000000300)="b15ba19e31", 0x5}, {&(0x7f0000000340)="3ce708c653a20a13c415addbcbf51f082bfd248bdc62f68950b43e37aaecffedc317ab7e45ac0212347dfefc95a8d7ec6404c482f2dd9f1caf6b595dbc5b80fd3e0652189a7b954029da4340a64af06fa1dd333d0e8a5d8d2b05300ebb2cbb8e05bb82da60d7361a59bdafe13a767950ce60a4bdafd463b1f0eee2e9e611953a60b7fa65fcf33ae9331ee76f9c6ffbfa3a2ac357266b6d0bac80f445da6b65212bb14223380be5c05a6633018667528e29574a8a95ddd8b54abae4fa8fc62ad7510449624dccd16a5148ed9b7d03b9400e6dee32f451188401d976b6f4", 0xdd}, {&(0x7f0000000440)="c3a1bad1d6e4f71d993e68a14ca48129122bdadd753f6ef5291ef12a39c20ebf2d3283680490899b6d67ed3be2ff4c5ae598c175bf4275376058834f7ca224180341d6bec53aa9a331f2c7fa93", 0x4d}, {&(0x7f00000004c0)="dd0b60cafe1e957845235aa68c6785b782bfcb80b29ac941ea9f639c3a3590ea8c96a00a6a044773ed9016571ee4f20e66123db70028700303513cd16c62242dc1fc8176acbe6e1b18982ccdc38b99fd559e5cdd74c251239e611b9aa0e45c57141d64b4c19550c14330f33bf9abc89482c9e81d68d9211994f7030d539d3240ee429b2cc0f711feb06ce2b2fb2abfc1a6774aa33463cbe8008209aec7a1b0a67f74cbc8b8497243ec98ed3b623df387af0615cc2cce23b46288f8a9", 0xbc}, {&(0x7f0000000580)="98e260e0945bbb49db185dece097c77f087f8fae29ec963124de89a2ae08ce24dfc83fd9afb096df0045791f1cb53247a532b5ef63b75bf9f5d96a2f506b7a86ab87d9b6a94dd12610228362847fd4d70523a36c71d39bb032ea77d8fbc9c940138d74d15a0d2aa07a9c8c3d94ca4113cdd1955df3ac75180c899a6ce24d3dec1e0c8a9d1a1af7b1c0", 0x89}, {&(0x7f0000000640)="e7be6b4fe8446c7bc623afd0a2981795c1769a77fd021a204fbb13de008ef8bfd8f620e29a5e6736fe3056d5799c87709a86ea1b6a71b606f6a8c6664c1fc405bf3a0f2c38fb711cfc03f7116bbc604d1d29757a8e224a35fa789814bbd6e36cf0c05ddc105e7ad9c8bbf332a661d3078aab5d382eb2725d3b3799dad03457cdd3152f0bb449248318", 0x89}, {&(0x7f0000000700)="a4424c5e7347e956a960ca194306c44b7bdec284317432a575e311a1277b8201314932159d1f6e72551320e8e3b4d0e0fbcf4f21249f38c8494c42ab8c8e44eebf4f8a24af2901feea30fd81e1b04190da51dba212bdd7896d4510dcd6ea97c50de18ac81f93179bf865930a1c3622ad79640deae9857156f060e2", 0x7b}, {&(0x7f0000000780)="c49be2b37f3c1dcd35282df4a43679e4b82716c6f3bd2129fc52fabdcd9ad3ea8454c9a0f295f90e860a6e31fe71a00377cac209b3df8e7e79f9817caf6e061e18c96a9e5c9671215f3ced357ce7c9ba71132904", 0x54}], 0x9, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x76de}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000000980)=@l2={0x1f, 0x401, @none, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="90c61558b36ec738642071486ffaf6e451440fb1402c1025fe5a9d07abfd21ab6e4ea6d1ac4bfee7714bd224d925e9afd95a70edc5edc9366e77da12f6225c29ed14b1d8844383c8f8eb0e28d0aaaa2cd60748d71f071c3b6bbc76a90a7e7ade276d77e1656f63f38aabe0e1b651ac1fc08d6cca970b8701a67d52dbbdcead54f7c278301886e3945d55630b1cddc9168c96347bd4bd661604bc", 0x9a}], 0x1, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e21, 0x10001, @mcast1, 0x8}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)="4099aaa4ab20bf75ea4dcee3bd9bc94aacddca742db6b7125864c15ff2338551fd47ef96ec51de6371fd90388c7ba5d332cdf79f2f9d806b6b13e1543c211cfd8c5d4227d01896cd4757a6e6e6bb8d822f6ad832a9ae35379fc377954da39427c1d1c119d41340a895ba6425ae8ba8b99a509b0e1a1add1acf2d457649c47b62547bafb3a6cd526a4894222d32c25d4432e725ffde86579a624e463b0f6dfbe03e9c9ec5ecc431d1ee9637ab", 0xac}, {&(0x7f0000000cc0)="e7d504b8fc8e2b55691f75a31adb233a24488ac52dbef0906b495241c64ba56f3ced31b1ac5e74d755f04b", 0x2b}], 0x2, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xfe}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e00)="9ffdbad4a1fd1a7d438520b8681164693c41d6d8fb3825e811ca05c5d7bdf58e05dcd66d0fe5d35a13df04af5156e64430c93e19fe6b8bb6e753dd9cc6504b20e5bb6deaea43e8c24c700062afa26eab74ad76ac4f5d9f63facf5fd5a002196b7dd1d3f78dc6ce37422581797e62f96ff1ff700c568a14d4ff2072552889f08b8752d54cbb51ca7416b6e2c9ffde0e5b2ca333f724b7ab414a3ca8b729d55bc517ac1379d7e3e78dfadcabe883179caeafceefc6255fd6ff96f67cecf1fb2b5760b3473cd6c86e0a4a70c0b9a8b114d22f78dc928e15c58474b0d9", 0xdb}, {&(0x7f0000000f00)="cd1fe2219b50f635a5c70d67d123595849797dbe9dc227bb01240f74ecb09a215618a204a637b7c5506f9b3a9a3fbdaeb32f7b8e84a53eb0dc890c6b2d1d426702ba47c3a112fa4f14297603e81be15b1153049b08a3d8a7ebdf73dd68027e2ad7936c741e1c8a45ebe5662b5e5627dbfc8cba9060190aa9b9d30f1a53befe79ec1b883f22a4620670f7c8bc2e5108265417b26c67bf496b293f35d35e0ef523352c3ce99fa0aad7f67fe8e074ae7744867de8c97aa664511e12cbbc9cc9848c613dc504d6dda659ef4b05c1d1f65bbdfc1c97d9c6e8", 0xd6}, {&(0x7f0000001000)="7c485e0159742bd036ff4bdc0ae10279a52ddc6cc5b06d5d7fd20f66ed092933b79e6c9df27b05f546ba5577ba18e6b028d3bbebe83fd9b70bbc80e688142706945d4413647c", 0x46}], 0x3, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}], 0x4, 0x0)
shutdown(r0, 0x1)

1.062000533s ago: executing program 1 (id=1851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0xc}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200ec0000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x24044011}, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0)

923.930867ms ago: executing program 0 (id=1853):
syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x14000801}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe)
accept4$bt_l2cap(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080)
r6 = socket$inet(0x2, 0x800, 0x7)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000001080)={0x3, [0x8, 0x75, 0xfff]}, 0xa)

862.5331ms ago: executing program 4 (id=1854):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC=0x0], 0x14c}}, 0x0)

840.141584ms ago: executing program 2 (id=1855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0)

768.581434ms ago: executing program 1 (id=1856):
socket$inet(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0xa, 0x3, 0x3a)
setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28)
r5 = socket(0x2, 0x2, 0x1)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x4, 0x2, 0xb, 0x59e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7c1, 0xfc3, 0xd}})

741.206361ms ago: executing program 4 (id=1857):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r6=>0x0}) (async)
getpeername(r1, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x80)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1194, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000000)) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

680.508192ms ago: executing program 2 (id=1858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000300)={{r0}, "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"})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000300)={{r0}, "72cc69291d0e9c99c922c9e29c6c76c1ee0b65f97bed5095763e27a1825aab28630cd121dbcb53f279f0b56929bcb2ac34dbb09beab5baf3773cfe74e4efce4919aa3c2012040772cb453fc053a73310697f1a2b5a2c1d7bff1d03b3e48698820771e184beb87796e9f217152686297e9b5689c9e5b01d2a8ee814d7710b62c99c53fdeb7cf471c4af167db6de3eabcfa0f7fb0ab434bb3d213c1bf0c76a80335070ee4a12b2ffacdd3dd61f8f6e5539b4771a3d6dbbecc3ceb1d57becb375b33c4162064d62f9429a123ad71c234c7020f0b825b4fce68167f198de709a60df26b665ce0bffbbe0b2768fd21e80547ec0b9bc51a88a4967e283651b01adc34390bdcba226cca81022ce9229567a3f232a820d82270d27baeecd67d31f453173ad7099a11f28b9023ba14ffb17a6b321f88deaea2fdd4dae375ee4c75ff83ae8a11fbb7f775e3c80767a851455a9a70ac30591059247fbe1767a9163960fba062dbbe8ed27015b48d14f2bab80d1e1101dcab23a28ea2bc80d82aa0390b260b38e44552557ddac42a9fe6cc20866353b2814b829d697447ea6dbedb9c1996dc1549c6ffb3045553ee86e2be26d84c34f91e5b2dd20a5bbce228900182f07fe1e3a4f3fae819ae1befd39a0b3524e03b7247721290705f9e4911ccc17bbe639e27f5237c3926e3e7a8ad4ff92e853fc63ef83a5ff903ceaee8084138e2262500e4a36078ae9e43148f84eb1642ec8795a49b5a1bccfaceac386dbba0e0faf820ea6008d1c77ec5dff71deb81736c62fba634eb22b3fa0b411da0a84069d738cb5bffea93f83c67c18949116faee6e0dbbc7da5a906b082702e5feb41e26342719d62c2eae132ee0c5033f5c2ecf0cd1a81293b564db7796d287f9f0ae052bf9451ceeeb8e057cdda5b9c3ebd4c0435e948e3ee040da12d0237ea87351b1d6b04fe56435ca2ede0a10c3e59b4061f4a9d6406ec7c9284dc0545bec210f690506cbc0726a7195983ba4c1399f279e59859975c319255f9ec46fa6121111beb5189f0a22629d1e78caa9fb0ed3aa5566b6d9da7b5cecf84dac5fb7a5c5c6fc68864dd4ddceb7b190e9c72b57a3a2fc789b048564747445d5a7fff9cec99d18a37cb69cacbbef1fc8ee85d6c1b2d7325b20a3fe5e2542185d6ec4f00abd29b297a65671c81dbd2afa8066886adca286f2f24c6e7c4f51cacc2e5e9cfaac18a8b2b19e79937d805c13194ad178270b986558519ce3ae56bc3be9cf926b127b7401807e18ac35d48c9579d174d7f40754b94df1d207d81a6b522a14039d8a4bccfb2c00b34abe579e1793479e03bcc8fa58e173547669c71129bf808a544831501bfbd792295ceeca849692a38797a2e04a15239573ac935bc16049266b3d30d9ff0c14decbe971030be16e6e12d41978f4f040b4c34c393562f67084e9c89443c2270a7649768d314d8c95cde388324abfb8173287bbee5d6d5f0b502c6fd3a9fb97d654c413f50e2793a43999811cec1b5ba12ebdd5c2f419ad80a1a2d86dbd6c3d9ff53621b7b057d8f898ef9ca57caefb95da17c7aefa14e801eb9bf8ff05d6003c8375063936fc1526ac4d5fdbe0210dfb531a504c2d46d6a0258b8737ba1b74fe512a002542193a5aad4b824942a3bce3cdcad7757541a654dcf9dd917be06e0def7c475ce1e76abfa61a9879b9dab6f3da0eda2960c51979455322e3fc2172b8a083257df5f2efc3c0e783183e21c30d6a478d376560571d8b93359dceda8f32128001b1103967190c123ffd7338939a53bf0bc484d42f6016e16386f02943d6a4e98d7a173f72ba561f292a89ec9968793e129fdbf1a1e882eff3f138518b798a9df8518698122045ef530d2c2f950c9a6eea7294d39739b64aab40d104bb65c4905bf43bbec2a88f744c2ed47346171b52221a055db68f9e5db6990e03fbcf73a9ce793fe3dc14588f3df577a1db86a1f8ea4c0edefc0ef476eb777e5dd8a9a70e0a6f151ccbac61d763b992dbbe735c776c1983b1dd2b646b7434e0e8fa2daceb88026ff6a72fbeb89c63846e2ddd893fce12290f4607b95332402c6b782f86588f373c7a0febf16d5ebb4854730f9b4edae1b8dec1812fd363f71abea0dbb99f1c19cddf32ccf47f9b89561ccb623aeb9b6d043a4d6bb7975d0cf89f3847e51116aadb171bcd64d3a95edfd29d984d0db19fa4d7c0fd0e9f507a4584c42b91d52cdd237184446f1992d33c4e7520ec37315413e7e1388c82202d0d384374d883dfed7e7641064c8b632434c244702910ca9057322f4692570990f1fb7ebc6191df546792f2847227900159c61b2e562e972ce79fef2d41c762e7f00f772f4bb5eef974a28235a87693d793dafe06677dd1fe88c29c6d4f3a452026d07bb4a97e2f1d705ba9761b0110f0e3db7ed444749a821758f792cab6b8a13985abb1538f78040e3e36f354192e13623966cc4ad7a4bc7d131a357679a419d6bc53c5399c741dfbf2396fccb11ca59bd6a26da69114915b74340ec5d211176ac529bbdf82477d556ff9f486501116e6af931355bf3b776ff590612086b6a680518a3d1b728ba692939a80e492b88f9b09922e721e0d923d7b8f0fd8a5b761aecc8187a1eee8418d7a01ee4bcc7f9466a0d39633e34763c1add658e7b011544d7899e85ab68be1d0c9ec8565bb81927c8a64f7fb7431bb45097a74746618c952e43fa5cc4f801ec4f9c0341d95d58e16861c119d352882cd0bdb397f53b664db4f3fc297c3720dbd4b6b2be19c6919936ce89606cc98347b27eb47d4d19a1ff4dfabf17e13edda65f36d4f2108ac3043150b4ca93edc87e30b4d2b6a4091ad713ae30edb5447b9d949c07b0dd93237f4952faf3ca6b5f7ced81d9dda41e6fc8e95034e592e93848702a3f2c76135958598a2b3fbad94718d9b76b347b9913e815fde1a6ce5f678f27fe082ce7e41fefbf460258cf55443855315ca534789d24d3ce44bce8e38db727047848e732f0d7d792ebb723c5bed7cdbe6b986a8d978339fe7b8a74a8d237bdc7b3a2b910ff026ea10e6f60b5630b891c6fb24b635c71640b6f5cd2751552cc94ee98e073a5517c8042cdcfda39306a6314cb63dc2e2c75afaf4957d22a6f90e1127c5e378eb2720c068d36154c940ec91fd83eb2c5b1511294928e62100c66dac5e6f65d2f3e50f0e0220153fd4795421ae1784f09c3fbb455602983750296540f5a2fd1725876f404b8cac53cf7c75b60fb652fa59076f49d92d6bc42653784f399eeb32c9d80d6a48c2f3b0abdd7e956da97f036f1a3049f64274b2a3b0c38fcbcd75cdf377e82b29f110a2748b0cb457fb739718bb4eb99ac200124f36bec3e27b70ec25a8f0aa8adce31f934fa67e0c56a08b99d2a7350e3dbab9b05c75cf6c0997bfbf27c7b33d78e3c2fd180b3d9cc1e1378f42b0282b5981b1e8c35311ab8ddc45d1d0a96f2814dbba8fd0bcd9268f4568e821984fa61ac53f300e07947c1936d129839bf02dd8dce0e354cf67f9d8d638c563c0091a1f5e4324932d71f7b9047da9e6790924bd59a1660940e221c4872e25d825b4da51a03404cd39883e44ec1306225bcce28b2a1a045b059fc0495862f374c731d80efeba101be7a198ab1f6c8ec6ef0550a6c6a03f4d3ec0230a390a26a883fee85cb0cd159e4bceb77655af4684257df3341ffc95aefdeff90b5e223e2e5bf7067e38ca7bbe4b88c2312eaa8cadeafdf54177f8e128545c9e23616c7bbbac3f03b97068a796f299466e8c351032755a31bcd12c474cd32916259ad5401f06e11f236f5bb47df98e0c1b02e03383a3d6b421aec5373cd91e65f217af930eb5f43eb74db62d001741679abe53e5625054c2e275b3bb0bf4c01a25f2ae05c96b54987866005bbfcf0a928ae7c75eb073a70025758efcb5592896adefcb94e99c6fd64c0faece30572a7028fedd45eddd5191d8f4343baaff863f7b06cfdb601d506160add014136d2d64a3c1448a133430053962c7fbfdace52483d87a82a0ef392d37c7c667adfa9c2f89dd2df035b6861ffe9c85476ac0fae53c66f2ef01c97c7f8b6b6f25fbeff391f72384aaad6ea683b3d10846f1755b3f142c87b2fbf7c42b61059d4c59778dfb89552b458826f502f7691b46252c6042c571fc50407c6b9ca66f75dc0adb9ff68cf28e4d294a30d230c5e4e6c13250897fb31a9b813d3d99b534fefcf5ffbb99d5df3c5884b840d121d6e005d37f2497082558268c975e917d9c260f31db61cab2e4b2d6cc7ca8cc7b3a631867fd6ccb73c277090fd99f0082d65e5250c704b673f3c19c3d59c483b1079f7e8b097ebab590e6ffde3d836b56172542423f7ca0754d305276514b283e409125e37a67053bdb87a84a1d4e4f647c875b286ea39e29018160fca914f787d92ed0a78f1b61b7b7020515ea91d7c033a05381f3fe3ed24f6c154bceac07a9a670cb2b9baf3dea5916f971df47b5826ee2232e920e075e81ba4da200476bf20145eb8b199b9834947bd3c9870f51b3c57fba91f4e3d69875b88075be709fbca20523d9f9d5aa55ae31bca92051ae0bfa40a23249f482b72a3fc8867f337f10ae162650519edffb425af804c3bbf942897e77f86cc592243d358b9be6c91b63a9e372e35af187648725d1dcae9ccc3cd6eee112f50987cd53f6faace68dc1af470d9a2b6e2df7ce2286cf5131977bd067349f96cc7118780976484f320065e109d331370359a1922452f9bdcae9c38f3f9c51f4ed0df2ec023a381cf21d74c5f2783db55005518ef5956bfc6c7f610635a85e27d200435f94fdf0e2667b69ccf46e4a5207327a45a12acd329b300cb57aba833858ff53ff2ee32a2da1e480174a69dfcf14b791dfd9045a3ddb2e7e32b968f3e6284824756184b18a4fa70dee380ce97a8cd9203c8a65ba4af13dfb0b2bc80012cd8bccced959de2b50a40580134132178d8809ae3fdd3abf4aab9484aefa6f9ede4c28342687e31efac5b2625dd0a4a358af8b04208d760707836f8ad885ee4d82517e7af2d54e1c0c81cc9120bdaf13637e893ae8ef7738ea7f43f6ad43039ae70702d60b7b0a879103b852b16d071eba64793ed12f03e0aec37d020719040c99cd0c8545fb1f76669764fdf258034e60b880b4630b4a11bbf39f4a2445c804b90779444f91d2c4c1f03168a6b43368a68cb5d44593db2e65d2d281f237b18acea8a8c775f4a01e7dc46f4d469f9efea05d3b2f86d62e487cf148fd9fa5914e73b3e0936039010451d2b558608910820189ffdc7866999b1c2767418e8b8ddc79caac6fa99fb089f7f9e7a27bf6f39cc10a7526e5d3cabd72052673623670c42595e78a698c7f3b07b59d95ca9a85883a7681bcb0fa516a2d4c7877e1186198872e4701bca1033477a73f118ffc5fe8232da72dabae7e6f6ebb8cc7d2c3eff907e536b479b175f76b6990f10cd3945538c60345310380ce428b4542d0296574e34c88b7735ccaeaa9c92727e67afd5efe213294aa17d8cd1232d33bebd46af958e886d4ab5eb8319f7da2e758be713631b1d59ccb1ee3045b3dc0999c454a00d9be05bf4b8ee30e2ecbb3dc54236eb4e36f3bcd1a6fb16b084053aeea98948c0b924a3d69bff22065f0b73b76dc5ae254c541d528cb366d84b3d9eb00bfb1e38245e893d96849001686f45cb0d9dd950ff3104e9976d24bb904ae615dff2f4b9b1509a30910006ca2f31d70dc4206847bb774c08fc3ca5a6a86e856fdbd80add15febe2406185a0113b3ab184cb92ed72a76a"}) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) (async)

583.73156ms ago: executing program 1 (id=1859):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x1c8, 0xa0, 0xb, 0x148, 0xa0, 0x148, 0x130, 0x230, 0x242, 0x130, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13a)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000208010400000000000000000a000004050003000700000004000480"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={<r4=>0x0}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000002c0)={r4, 0x7}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000280), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x2, 0x3, 0xa05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x5, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004061}, 0x0)
sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000009e000000fd45ff8f77e2007a0722198b864ac92512d4ece21de729692f02718387dd301ad57f0a3940b81f9b8df8ecf0ecb8f64cb8d6e402c65e0ac1e844b8f0fa8283e019b7193849fb18c0f66244388866937e0bfc1c1b2425aabbfa55b0038ce7b378d4ee086de98999762865e0b03289fec5246e698667bc0f57b0d56f1d46f554026d789a8e73793e11fc4462d0d057ef64bd8ce86921da68531766885b8650"], &(0x7f0000000140)=0xc2)

582.932342ms ago: executing program 4 (id=1860):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xff63, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000003114a3683ebe571f585a3ae34c1c8b138a469797618d3d5ee60dd242e785122035322caf9f6f49f406dc12328e30a12e24c369f00d804c60d632af75c9a57f607e481510c845e77cf717851ed1e74e0e582600003acd90f58ade69948ff22a65cc13d4337d08004a21b6744eebd048f18af1f5a7d9608dfbc982d98f0273e7822254f488f4ff6323100abdb7", @ANYRES16=r2, @ANYBLOB="01002abd7000fdffffff1e0000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800)
syz_emit_ethernet(0x6a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004510005c0000000000119078000000000000000061f3b23a84130b7800004e22004890780300ffff9ffcc73b5ef32a884f2033728e956f3f20d16734af14637c85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x804)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x402)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x55, &(0x7f00000003c0)={0x0}}, 0x40040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000061100900000000009500000000000000621700bd45dd72af"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r8 = socket$netlink(0x10, 0x3, 0x4)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$netlink(r8, &(0x7f0000000e00)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000000d80)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="100000001d00010028bd00000001df25"], 0x10}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000000000000000017790a626b1bead2594bad4bb9b00000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x20, 0x40080}, 0x40)
r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000107800001e030000"], 0x0)

483.446597ms ago: executing program 2 (id=1861):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
sendmmsg$sock(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="884a83180ec3c7dacc17eae99dbe0518f0117c7ffaa3586e174df358aacdee0f4b384fcacc11e97ca822c77e56fca6728146a44ec6c0f0ce6ff8a7def9dad29bdd871f3313f539ca949d3ed98ae464e4fbc4ad78f67adb87557c824e0e20f1b5e95f83bcdd9462d00812a62b48924f76aa0cb82e7a504858d8d056a1429cb77fa109d7cc1cfde3876fd574d38f0beb677e526fbc8541f18d66c66010099c919d7131b4a0233dd88dd6f1128e", 0xac}, {&(0x7f0000000300)="b15ba19e31", 0x5}, {&(0x7f0000000340)="3ce708c653a20a13c415addbcbf51f082bfd248bdc62f68950b43e37aaecffedc317ab7e45ac0212347dfefc95a8d7ec6404c482f2dd9f1caf6b595dbc5b80fd3e0652189a7b954029da4340a64af06fa1dd333d0e8a5d8d2b05300ebb2cbb8e05bb82da60d7361a59bdafe13a767950ce60a4bdafd463b1f0eee2e9e611953a60b7fa65fcf33ae9331ee76f9c6ffbfa3a2ac357266b6d0bac80f445da6b65212bb14223380be5c05a6633018667528e29574a8a95ddd8b54abae4fa8fc62ad7510449624dccd16a5148ed9b7d03b9400e6dee32f451188401d976b6f4", 0xdd}, {&(0x7f0000000440)="c3a1bad1d6e4f71d993e68a14ca48129122bdadd753f6ef5291ef12a39c20ebf2d3283680490899b6d67ed3be2ff4c5ae598c175bf4275376058834f7ca224180341d6bec53aa9a331f2c7fa93", 0x4d}, {&(0x7f00000004c0)="dd0b60cafe1e957845235aa68c6785b782bfcb80b29ac941ea9f639c3a3590ea8c96a00a6a044773ed9016571ee4f20e66123db70028700303513cd16c62242dc1fc8176acbe6e1b18982ccdc38b99fd559e5cdd74c251239e611b9aa0e45c57141d64b4c19550c14330f33bf9abc89482c9e81d68d9211994f7030d539d3240ee429b2cc0f711feb06ce2b2fb2abfc1a6774aa33463cbe8008209aec7a1b0a67f74cbc8b8497243ec98ed3b623df387af0615cc2cce23b46288f8a9", 0xbc}, {&(0x7f0000000580)="98e260e0945bbb49db185dece097c77f087f8fae29ec963124de89a2ae08ce24dfc83fd9afb096df0045791f1cb53247a532b5ef63b75bf9f5d96a2f506b7a86ab87d9b6a94dd12610228362847fd4d70523a36c71d39bb032ea77d8fbc9c940138d74d15a0d2aa07a9c8c3d94ca4113cdd1955df3ac75180c899a6ce24d3dec1e0c8a9d1a1af7b1c0", 0x89}, {&(0x7f0000000640)="e7be6b4fe8446c7bc623afd0a2981795c1769a77fd021a204fbb13de008ef8bfd8f620e29a5e6736fe3056d5799c87709a86ea1b6a71b606f6a8c6664c1fc405bf3a0f2c38fb711cfc03f7116bbc604d1d29757a8e224a35fa789814bbd6e36cf0c05ddc105e7ad9c8bbf332a661d3078aab5d382eb2725d3b3799dad03457cdd3152f0bb449248318", 0x89}, {&(0x7f0000000700)="a4424c5e7347e956a960ca194306c44b7bdec284317432a575e311a1277b8201314932159d1f6e72551320e8e3b4d0e0fbcf4f21249f38c8494c42ab8c8e44eebf4f8a24af2901feea30fd81e1b04190da51dba212bdd7896d4510dcd6ea97c50de18ac81f93179bf865930a1c3622ad79640deae9857156f060e2", 0x7b}, {&(0x7f0000000780)="c49be2b37f3c1dcd35282df4a43679e4b82716c6f3bd2129fc52fabdcd9ad3ea8454c9a0f295f90e860a6e31fe71a00377cac209b3df8e7e79f9817caf6e061e18c96a9e5c9671215f3ced357ce7c9ba71132904", 0x54}], 0x9, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x76de}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000000980)=@l2={0x1f, 0x401, @none, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="90c61558b36ec738642071486ffaf6e451440fb1402c1025fe5a9d07abfd21ab6e4ea6d1ac4bfee7714bd224d925e9afd95a70edc5edc9366e77da12f6225c29ed14b1d8844383c8f8eb0e28d0aaaa2cd60748d71f071c3b6bbc76a90a7e7ade276d77e1656f63f38aabe0e1b651ac1fc08d6cca970b8701a67d52dbbdcead54f7c278301886e3945d55630b1cddc9168c96347bd4bd661604bc", 0x9a}], 0x1, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e21, 0x10001, @mcast1, 0x8}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)="4099aaa4ab20bf75ea4dcee3bd9bc94aacddca742db6b7125864c15ff2338551fd47ef96ec51de6371fd90388c7ba5d332cdf79f2f9d806b6b13e1543c211cfd8c5d4227d01896cd4757a6e6e6bb8d822f6ad832a9ae35379fc377954da39427c1d1c119d41340a895ba6425ae8ba8b99a509b0e1a1add1acf2d457649c47b62547bafb3a6cd526a4894222d32c25d4432e725ffde86579a624e463b0f6dfbe03e9c9ec5ecc431d1ee9637ab", 0xac}, {&(0x7f0000000cc0)="e7d504b8fc8e2b55691f75a31adb233a24488ac52dbef0906b495241c64ba56f3ced31b1ac5e74d755f04b", 0x2b}], 0x2, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xfe}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e00)="9ffdbad4a1fd1a7d438520b8681164693c41d6d8fb3825e811ca05c5d7bdf58e05dcd66d0fe5d35a13df04af5156e64430c93e19fe6b8bb6e753dd9cc6504b20e5bb6deaea43e8c24c700062afa26eab74ad76ac4f5d9f63facf5fd5a002196b7dd1d3f78dc6ce37422581797e62f96ff1ff700c568a14d4ff2072552889f08b8752d54cbb51ca7416b6e2c9ffde0e5b2ca333f724b7ab414a3ca8b729d55bc517ac1379d7e3e78dfadcabe883179caeafceefc6255fd6ff96f67cecf1fb2b5760b3473cd6c86e0a4a70c0b9a8b114d22f78dc928e15c58474b0d9", 0xdb}, {&(0x7f0000000f00)="cd1fe2219b50f635a5c70d67d123595849797dbe9dc227bb01240f74ecb09a215618a204a637b7c5506f9b3a9a3fbdaeb32f7b8e84a53eb0dc890c6b2d1d426702ba47c3a112fa4f14297603e81be15b1153049b08a3d8a7ebdf73dd68027e2ad7936c741e1c8a45ebe5662b5e5627dbfc8cba9060190aa9b9d30f1a53befe79ec1b883f22a4620670f7c8bc2e5108265417b26c67bf496b293f35d35e0ef523352c3ce99fa0aad7f67fe8e074ae7744867de8c97aa664511e12cbbc9cc9848c613dc504d6dda659ef4b05c1d1f65bbdfc1c97d9c6e8", 0xd6}, {&(0x7f0000001000)="7c485e0159742bd036ff4bdc0ae10279a52ddc6cc5b06d5d7fd20f66ed092933b79e6c9df27b05f546ba5577ba18e6b028d3bbebe83fd9b70bbc80e688142706945d4413647c", 0x46}], 0x3, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}], 0x4, 0x0)
shutdown(r0, 0x1)

483.216537ms ago: executing program 0 (id=1862):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

384.807892ms ago: executing program 3 (id=1863):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) (async)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1}}) (async)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000000})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000006000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_procfs$namespace(0x0, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) (async, rerun: 32)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32)

336.522965ms ago: executing program 4 (id=1864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000009c0))
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1f8, 0x1e, 0x107, 0x70bd2b, 0x25dfdbff, {0xb, 0x7c}, [@nested={0x1e4, 0x3, 0x0, 0x1, [@nested={0x1e0, 0x78, 0x0, 0x1, [@nested={0xf6, 0xb9, 0x0, 0x1, [@nested={0x4, 0xcd}, @generic="db3ff200772a83212c12c98332a12b336c0ac5116f0ef0a434391878ae6626ab1b573fc2594f582b38163427667c0160880f0cefcca5f08572b023cd02bac11e948baebf07fa1fffb0e7fed01d29db594d330a3a57274b6bbf21a52833c7fae091599cc566dfd412456ee9e063e0b8baaa2611afea4b2747b1ac161f7973376ec119c4f810b36e8842dff1b84eebea744c3540cf924a81e9e778364116c0be95b2560c7e871095d8d03e874ed284b521fdb1494be740186a25beafb72286037498dec1c3723f33d6dee776cc922395c11659c0a73b20690af8a441789c2679829b5e52d76f0a05ad8607b41ce8bf"]}, @nested={0xe3, 0x90, 0x0, 0x1, [@generic="3a2e304ae4859208c55c5d7948e37f34f8f41626d4362dd4564fdaa8345708d096314fe9e17f215219ec331afd68521e0fe1f8892772ea2acaac3d22b9e31efa24534b4c880ed263494b8c6a9b05f338110e78f5226ca935e48e5bba16a9f68779c91ba74b082d2fa68e7cba18df769f4ac37f9465915c70cbe0f32bad62f2c34c455927f36bc665189aa1241f61891e9a8ef33e5ddf5322ac8987a249082a985347fe772d7d8e9fefb886d94398a401135ffc4a3a13adabc31dbaf4be05b7bed1c7edb5a8bbcb3f6a6465fa96441999e7349608b9c10c27ced4529b57e95e"]}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x24048040}, 0xc010)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000300010003", 0x7)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0x7, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x24040000)

333.368996ms ago: executing program 0 (id=1865):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))

264.4814ms ago: executing program 2 (id=1866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00029905000100000000002c00018014110300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x90}}, 0xef)

203.867968ms ago: executing program 3 (id=1867):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010471"], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000900000014001680100001800c0004000900000000100000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000000030400"/20, @ANYRES32=0x0, @ANYBLOB="0522000000000000280012800e000100697036677265746170000000140002800600180064000000080015007bf30b0008001e0008000000"], 0x50}, 0x1, 0xba01}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r7, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
shutdown(r7, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r11, @ANYRESHEX=0x0], 0x20}}, 0x4004)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}}, 0x18}}, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="210f27bd7000fcdbdf251c00000008000300", @ANYRES32=r13, @ANYBLOB="b98c89de04ba3b62d9f0a585e832480a59203f3ecc75507d4f26055c884c64c4560731d243c5c0079604699b0a7aef8b91c281df268221694b5f1560c35676d993bb533c8e81d5d7f32522082e2885770332b04b895f29fc3b50ebcb0343a3b3b0d708c1be24e67d8e05b905b0b48d7805a18ba1d50eff99cb5ee8da33812dd1e5da9c4c9152349e"], 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840)

148.06272ms ago: executing program 4 (id=1868):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="850e0000061700009502ff6a00000000cb4ed30947921b5598c6810ebc9f2701cbced7e412cf77e47fef3a4a7a13ce6f745111ab3bfc4c8e93ff0605fbbec81f3a919ad08a934c6fc5ab5aacdde79a55dc8cc4d1158f0d3a6f378a99a06360590fd8609c9df191ed6e9801577a36594c5cd62be0ffb054b5dcf1b31ddac09cbb079d65e539c1427158ee80f29e34f95cdb02e2d232525a9876c4fcc5ad4ca643d5b84598823aec45a3d36534be4c1d33d55280419031f963f48ff7ed458d"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)

147.705599ms ago: executing program 0 (id=1869):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0xfffffffffffffed8, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {0x0, 0xffe0}, {0xc, 0x5}}, [@TCA_RATE={0x0, 0x5, {0xfd, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044881}, 0x20000800)

103.918254ms ago: executing program 2 (id=1870):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)={0x0}}, 0x400400c0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f00000003c0)=0xc)
r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00')
r12 = getpid()
sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, r10)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf250f000000300001800d0001007564703a73797a30000000000d0001007564703a73797a30000000000c00028008000300eb8400005c00078008000100470000000c00040007000000000000000c000300faffffffffffffff0c0004001d39000000000000080002000600749e03a502004000000008000200060000000c00040005000000000000000800020008000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r15 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r14, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)

60.404962ms ago: executing program 1 (id=1871):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendfile(r1, r2, 0x0, 0x2)

0s ago: executing program 4 (id=1872):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

kernel console output (not intermixed with test programs):

netdevsim2: renamed from eth2
[   74.256536][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.265824][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.273206][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.286969][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.296570][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.322677][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.329763][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.346687][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.353754][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.362371][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.369464][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.458493][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.501559][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[   74.522700][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.565926][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.573080][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.604292][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.611435][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.669239][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[   74.711530][  T197] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.718724][  T197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.768682][  T197] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.775865][  T197] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.881691][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.988813][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[   75.023472][  T197] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.030671][  T197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.063629][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.070794][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.386029][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.485829][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.621214][ T5633] veth0_vlan: entered promiscuous mode
[   75.658500][ T5633] veth1_vlan: entered promiscuous mode
[   75.715327][ T5644] veth0_vlan: entered promiscuous mode
[   75.768679][ T5644] veth1_vlan: entered promiscuous mode
[   75.786073][ T5633] veth0_macvtap: entered promiscuous mode
[   75.820213][ T5633] veth1_macvtap: entered promiscuous mode
[   75.865304][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.911876][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.952762][ T1053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.962443][ T1053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.987862][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.995362][ T5644] veth0_macvtap: entered promiscuous mode
[   76.004910][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.011815][ T1053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.020599][ T1053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.040284][ T5644] veth1_macvtap: entered promiscuous mode
[   76.066312][   T50] Bluetooth: hci1: command tx timeout
[   76.074485][   T50] Bluetooth: hci3: command tx timeout
[   76.078305][ T5640] Bluetooth: hci2: command tx timeout
[   76.079904][   T50] Bluetooth: hci0: command tx timeout
[   76.137470][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.145117][ T5640] Bluetooth: hci4: command tx timeout
[   76.187174][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.209415][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.222838][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.240165][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.257589][ T1053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.281042][ T1053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.301505][ T1053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.332535][ T1053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.377367][ T5631] veth0_vlan: entered promiscuous mode
[   76.404478][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.404899][ T5630] veth0_vlan: entered promiscuous mode
[   76.414649][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.425704][ T5631] veth1_vlan: entered promiscuous mode
[   76.462139][ T5630] veth1_vlan: entered promiscuous mode
[   76.591217][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.609728][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.620174][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.656851][ T5631] veth0_macvtap: entered promiscuous mode
[   76.671121][ T5630] veth0_macvtap: entered promiscuous mode
[   76.683586][ T5630] veth1_macvtap: entered promiscuous mode
[   76.699354][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.701039][ T5631] veth1_macvtap: entered promiscuous mode
[   76.718869][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.743792][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.796891][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.817038][  T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.827464][  T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.852690][  T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.863455][  T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.975227][ T5831] Zero length message leads to an empty skb
[   77.144495][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.257006][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.333660][  T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.352458][  T197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.371610][ T5632] veth0_vlan: entered promiscuous mode
[   77.383581][  T197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.410461][  T197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.440432][ T5632] veth1_vlan: entered promiscuous mode
[   77.459309][  T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.468779][  T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.523024][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.530981][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.620542][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.632225][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.738340][  T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.752112][  T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.780954][ T3371] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.792462][ T3371] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.813757][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.814326][ T3371] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.835470][ T3371] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.844710][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.890125][ T5632] veth0_macvtap: entered promiscuous mode
[   77.920174][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.933448][ T5632] veth1_macvtap: entered promiscuous mode
[   77.952719][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.020215][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.068960][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.117493][  T197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.135006][  T197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.144440][ T5651] Bluetooth: hci3: command tx timeout
[   78.144753][   T50] Bluetooth: hci1: command tx timeout
[   78.149869][ T5640] Bluetooth: hci0: command tx timeout
[   78.155948][   T50] Bluetooth: hci2: command tx timeout
[   78.175836][  T197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.196667][  T197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.217837][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.238366][   T50] Bluetooth: hci4: command tx timeout
[   78.345868][ T5855] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   78.498451][ T5862] netlink: 'syz.1.11': attribute type 29 has an invalid length.
[   78.540781][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.562698][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.593795][ T5862] netlink: 'syz.1.11': attribute type 29 has an invalid length.
[   78.694298][ T5863] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.12'.
[   78.825346][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.840531][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.889621][ T5872] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[   79.150604][ T5874] xt_l2tp: v2 doesn't support IP mode
[   79.645198][ T5888] ipvlan2: entered promiscuous mode
[   79.647347][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[   79.692452][ T5891] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.734094][ T5891] netlink: 21 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.768968][ T5891] netlink: 21 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.786840][ T5900] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   79.822285][ T5901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   79.893469][ T5905] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   80.038208][ T5911] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   80.250759][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   80.663186][ T5948] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET)
[   80.702080][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'.
[   80.863234][ T5958] veth3: entered promiscuous mode
[   80.883708][ T5958] veth3: entered allmulticast mode
[   81.155203][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'.
[   81.201272][ T5978] netlink: 164 bytes leftover after parsing attributes in process `syz.4.44'.
[   81.237329][ T5981] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.42'.
[   81.556254][ T5993] raw_sendmsg: syz.4.46 forgot to set AF_INET. Fix it!
[   82.346781][ T6027] netlink: 'syz.3.60': attribute type 1 has an invalid length.
[   82.348590][ T6023] netlink: 'syz.4.59': attribute type 10 has an invalid length.
[   82.487972][ T6023] veth1_macvtap: left promiscuous mode
[   82.497369][ T6023] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[   82.907518][ T6046] team0: Device xfrm0 is of different type
[   82.942817][ T6056] warning: `syz.0.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.980692][ T6058] tls_set_device_offload: netdev not found
[   83.125249][ T6063] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   83.253432][ T6080] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   83.409644][ T6086] Bluetooth: MGMT ver 1.23
[   83.696970][ T6098] bond1 (unregistering): Released all slaves
[   83.746741][ T6100] syz_tun: entered allmulticast mode
[   83.972586][ T6122] __nla_validate_parse: 14 callbacks suppressed
[   83.972603][ T6122] netlink: 666 bytes leftover after parsing attributes in process `syz.3.87'.
[   84.222951][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   84.590579][ T6149] netlink: 83 bytes leftover after parsing attributes in process `syz.3.94'.
[   84.924197][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   84.935301][ T6174] netlink: 'syz.3.98': attribute type 11 has an invalid length.
[   84.988219][ T6174] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.98'.
[   85.045809][ T6179] netlink: 244 bytes leftover after parsing attributes in process `syz.0.101'.
[   85.137296][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'.
[   85.304566][ T6195] netlink: 71 bytes leftover after parsing attributes in process `syz.0.104'.
[   85.320957][ T6197] macvlan0: entered promiscuous mode
[   85.349626][ T6197] xt_hashlimit: size too large, truncated to 1048576
[   85.424602][ T6205] Unsupported ieee802154 address type: 0
[   85.510555][ T6200] –: renamed from vxcan1 (while UP)
[   85.809999][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[   85.866195][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   85.951437][ T6238] netlink: 'syz.3.118': attribute type 2 has an invalid length.
[   86.024385][ T6238] trusted_key: syz.3.118 sent an empty control message without MSG_MORE.
[   86.131839][ T6248] netlink: 'syz.3.118': attribute type 11 has an invalid length.
[   86.176205][ T6244] netlink: 'syz.3.118': attribute type 11 has an invalid length.
[   86.199329][ T6253] Cannot find map_set index 135 as target
[   86.249842][ T6256] SET target dimension over the limit!
[   86.258855][ T6257] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   86.316031][ T6251] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   86.341242][ T6260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.529706][ T6269] xt_hashlimit: size too large, truncated to 1048576
[   86.537777][ T6268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   86.550357][   T24] cfg80211: failed to load regulatory.db
[   86.893558][ T6285] netlink: 'syz.4.133': attribute type 1 has an invalid length.
[   86.933727][ T6285] netlink: 'syz.4.133': attribute type 2 has an invalid length.
[   87.212145][ T6300] syzkaller0: entered promiscuous mode
[   87.235296][ T6300] syzkaller0: entered allmulticast mode
[   87.293085][ T6304] team0: No ports can be present during mode change
[   87.310152][ T6304] IPv6: NLM_F_CREATE should be specified when creating new route
[   87.603717][ T6323] netlink: 'syz.3.148': attribute type 1 has an invalid length.
[   87.763796][ T6322] wg1 speed is unknown, defaulting to 1000
[   87.808339][ T6330] syzkaller0: entered promiscuous mode
[   87.815003][ T6330] syzkaller0: entered allmulticast mode
[   87.827774][   T50] Bluetooth: hci4: command tx timeout
[   87.836948][ T6322] wg1 speed is unknown, defaulting to 1000
[   87.928495][ T6322] wg1 speed is unknown, defaulting to 1000
[   87.929665][ T1053] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.960766][ T6322] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   87.964489][ T1053] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.005161][ T6344] xt_hashlimit: size too large, truncated to 1048576
[   88.008194][ T6322] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   88.038152][ T1053] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.057345][ T6322] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   88.065485][ T1053] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.086334][ T6322] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   88.106737][ T6322] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   88.124208][ T6347] –: renamed from vxcan1 (while UP)
[   88.156582][ T6350] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   88.189025][ T6350] netlink: 'syz.1.156': attribute type 3 has an invalid length.
[   88.216044][ T6350] NCSI netlink: No device for ifindex 813332851
[   88.245556][ T6322] wg1 speed is unknown, defaulting to 1000
[   88.273373][ T6355] : entered promiscuous mode
[   88.279340][ T6322] wg1 speed is unknown, defaulting to 1000
[   88.308889][ T6322] wg1 speed is unknown, defaulting to 1000
[   88.331881][ T6322] wg1 speed is unknown, defaulting to 1000
[   88.366346][ T6322] wg1 speed is unknown, defaulting to 1000
[   88.727343][ T6381] netlink: 'syz.1.166': attribute type 11 has an invalid length.
[   88.729869][ T6371] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[   88.795128][ T6371] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[   88.983860][ T6401] geneve2: entered promiscuous mode
[   89.000503][ T6401] geneve2: entered allmulticast mode
[   89.607852][ T6438] __nla_validate_parse: 21 callbacks suppressed
[   89.607886][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[   89.623218][ T6438] openvswitch: netlink: Flow actions attr not present in new flow.
[   89.719135][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'.
[   89.849448][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.203731][ T6417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.221258][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[   92.370224][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   92.473543][ T6452] syzkaller0: entered promiscuous mode
[   92.480175][ T6452] syzkaller0: entered allmulticast mode
[   92.517627][ T6452] netlink: 52 bytes leftover after parsing attributes in process `syz.1.189'.
[   92.546550][ T6452] tipc: Started in network mode
[   92.576996][ T6452] tipc: Node identity bef9fc8e49c6, cluster identity 4711
[   92.596610][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'.
[   92.610195][ T6452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.635829][ T6451] tipc: Resetting bearer <eth:syzkaller0>
[   92.736632][ T6451] tipc: Disabling bearer <eth:syzkaller0>
[   92.792473][ T6479] syzkaller0: entered promiscuous mode
[   92.803631][ T6479] syzkaller0: entered allmulticast mode
[   92.986335][   T57] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   93.385526][ T6510] netlink: 104 bytes leftover after parsing attributes in process `syz.1.201'.
[   93.461610][ T6514] netlink: 277 bytes leftover after parsing attributes in process `syz.4.204'.
[   95.849506][ T6494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.062945][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'.
[   96.081937][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'.
[   96.093264][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'.
[   96.109380][ T6540] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[   96.244270][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'.
[   96.312166][ T6554] netlink: 84 bytes leftover after parsing attributes in process `syz.0.214'.
[   96.358414][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'.
[   96.445849][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[   96.489359][ T6562] syzkaller0: entered promiscuous mode
[   96.501326][ T6562] syzkaller0: entered allmulticast mode
[   96.519564][ T6562] netlink: 52 bytes leftover after parsing attributes in process `syz.3.217'.
[   96.531406][ T6562] tipc: Started in network mode
[   96.537444][ T6562] tipc: Node identity 0affcfc4f213, cluster identity 4711
[   96.553493][ T6562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.578957][ T6561] tipc: Resetting bearer <eth:syzkaller0>
[   96.597711][ T6561] tipc: Disabling bearer <eth:syzkaller0>
[   96.727862][ T6569] batadv0: entered promiscuous mode
[   96.734941][ T6569] macsec1: entered promiscuous mode
[   96.741692][ T6569] 8021q: adding VLAN 0 to HW filter on device macsec1
[   96.752948][ T6569] batadv0: left promiscuous mode
[   96.818638][ T6572] netlink: 'syz.3.222': attribute type 21 has an invalid length.
[   96.971103][ T6580] netlink: 2 bytes leftover after parsing attributes in process `syz.3.224'.
[   96.992162][ T6582] netlink: 'syz.4.225': attribute type 21 has an invalid length.
[   97.014710][ T6582] netlink: 156 bytes leftover after parsing attributes in process `syz.4.225'.
[   97.233202][ T6596] ipt_REJECT: TCP_RESET invalid for non-tcp
[   97.570506][   T30] audit: type=1804 audit(1780544899.781:2): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.239" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=262 res=1 errno=0
[   97.633075][   T30] audit: type=1800 audit(1780544899.781:3): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="cgroup.controllers" dev="tmpfs" ino=262 res=0 errno=0
[   98.046287][ T6646] IPVS: nq: FWM 3 0x00000003 - no destination available
[   98.053369][  T808] IPVS: starting estimator thread 0...
[   98.144918][ T6647] IPVS: using max 32 ests per chain, 76800 per kthread
[   98.215431][ T6652] netlink: 'syz.0.251': attribute type 58 has an invalid length.
[   98.276607][ T6658] mac80211_hwsim hwsim11 ÿ
: renamed from wlan1 (while UP)
[   98.473023][ T6669] netlink: 'syz.4.257': attribute type 1 has an invalid length.
[   98.546837][ T6670] can: request_module (can-proto-0) failed.
[   98.571984][ T6669] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.581972][ T6680] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[   98.988563][ T6700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.050358][ T6707] netlink: zone id is out of range
[   99.072110][ T6707] netlink: zone id is out of range
[   99.087791][ T6707] netlink: zone id is out of range
[   99.119988][ T6707] netlink: zone id is out of range
[   99.165403][ T6707] netlink: zone id is out of range
[   99.183871][ T6707] netlink: zone id is out of range
[   99.199236][ T6713] netlink: 'syz.3.271': attribute type 1 has an invalid length.
[   99.212774][ T6707] netlink: zone id is out of range
[   99.229661][ T6713] netlink: 'syz.3.271': attribute type 1 has an invalid length.
[   99.266992][ T6713] netlink: 'syz.3.271': attribute type 8 has an invalid length.
[   99.585315][ T6737] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   99.597826][ T6740] sctp: [Deprecated]: syz.3.281 (pid 6740) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.597826][ T6740] Use struct sctp_sack_info instead
[  100.030006][ T6753] bond1: invalid ARP target 0.0.0.0 specified for addition
[  100.058552][ T6753] bond1: option arp_ip_target: invalid value (0)
[  100.071732][ T6753] bond1 (unregistering): Released all slaves
[  100.365760][ T6789] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  100.384865][ T6789] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  100.708842][ T6799] bond1: entered promiscuous mode
[  100.716600][ T6810] netem: change failed
[  100.723488][ T6795] netlink: 'syz.4.299': attribute type 7 has an invalid length.
[  100.742573][ T6802] netlink: 'syz.4.299': attribute type 7 has an invalid length.
[  101.461995][ T6849] x_tables: duplicate underflow at hook 1
[  101.469762][ T6851] __nla_validate_parse: 23 callbacks suppressed
[  101.469777][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'.
[  101.486079][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'.
[  101.618199][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[  101.770200][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'.
[  102.245431][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'.
[  102.265763][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'.
[  102.296293][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'.
[  102.316670][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[  102.829129][ T6913] syzkaller0: entered promiscuous mode
[  102.839286][ T6913] syzkaller0: entered allmulticast mode
[  102.939386][ T6935] netlink: 'syz.4.339': attribute type 11 has an invalid length.
[  102.949219][ T6935] netlink: 'syz.4.339': attribute type 11 has an invalid length.
[  102.957219][ T6935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.339'.
[  104.186253][ T6948] net_ratelimit: 47 callbacks suppressed
[  104.186269][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.366904][ T6961] syzkaller0: entered promiscuous mode
[  104.380731][ T6961] syzkaller0: entered allmulticast mode
[  104.418452][ T6962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.345'.
[  104.545079][ T6974] can: request_module (can-proto-0) failed.
[  105.053019][ T7010] ipvlan3: entered allmulticast mode
[  105.062905][ T7010] batadv_slave_1: entered allmulticast mode
[  105.074475][ T7010] batman_adv: batadv0: Adding interface: ipvlan3
[  105.081125][ T7010] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.109591][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.124488][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.174506][ T7010] batman_adv: batadv0: Interface activated: ipvlan3
[  105.209416][ T7013] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  105.233559][ T7013] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  105.250560][ T7013] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  105.566116][ T7038] netlink: 'syz.2.364': attribute type 6 has an invalid length.
[  105.619298][ T7038] netlink: 'syz.2.364': attribute type 6 has an invalid length.
[  105.628894][  T197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.655578][  T197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.676115][  T197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.706760][  T197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.754963][ T7043] erspan0: entered promiscuous mode
[  105.819201][ T7052] erspan0: left promiscuous mode
[  105.831815][ T7050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.852693][ T7053] netlink: 'syz.2.368': attribute type 15 has an invalid length.
[  105.912775][ T7056] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.200677][ T7073] syzkaller0: entered promiscuous mode
[  106.220330][ T7073] syzkaller0: entered allmulticast mode
[  106.303584][ T7076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.609325][ T7105] __nla_validate_parse: 7 callbacks suppressed
[  106.609340][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.380'.
[  106.670932][ T7105] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.701421][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'.
[  106.847300][ T7119] xt_ipcomp: unknown flags 1D
[  106.873312][ T7117] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.088441][ T7130] netlink: 'syz.4.388': attribute type 1 has an invalid length.
[  107.243314][ T7132] bond0: entered promiscuous mode
[  107.256071][ T7132] bond_slave_0: entered promiscuous mode
[  107.275833][ T7132] bond_slave_1: entered promiscuous mode
[  107.661956][ T7152] xt_hashlimit: size too large, truncated to 1048576
[  107.986307][ T7169] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.398'.
[  108.015725][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'.
[  108.025839][ T7169] openvswitch: netlink: Message has 5 unknown bytes.
[  108.049004][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'.
[  108.092082][ T7170] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[  108.102245][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'.
[  108.107101][ T7170] netlink: 96 bytes leftover after parsing attributes in process `syz.1.397'.
[  108.123492][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'.
[  108.371609][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.2.405'.
[  108.380722][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.2.405'.
[  108.540346][ T7201] netlink: 'syz.1.407': attribute type 10 has an invalid length.
[  108.549803][   T50] block nbd0: Receive control failed (result -32)
[  108.748402][ T7218] syzkaller0: entered promiscuous mode
[  108.757083][ T7218] syzkaller0: entered allmulticast mode
[  108.950142][ T7226] tipc: Started in network mode
[  108.961007][ T7226] tipc: Node identity a2fd7479a63c, cluster identity 4711
[  108.970380][ T7226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.047995][ T7225] syzkaller0: entered promiscuous mode
[  109.056165][ T7225] syzkaller0: entered allmulticast mode
[  109.170413][ T7226] syzkaller0: entered promiscuous mode
[  109.183591][ T7226] syzkaller0: entered allmulticast mode
[  109.191218][ T7226] tipc: Resetting bearer <eth:syzkaller0>
[  110.331463][ T7224] tipc: Resetting bearer <eth:syzkaller0>
[  110.647041][ T7266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.593277][ T7224] tipc: Disabling bearer <eth:syzkaller0>
[  111.614511][ T7249] bridge_slave_0: left allmulticast mode
[  111.620220][ T7249] bridge_slave_0: left promiscuous mode
[  111.626535][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.657181][ T7249] bridge_slave_1: left allmulticast mode
[  111.677824][ T7249] bridge_slave_1: left promiscuous mode
[  111.698798][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.714555][ T7249] bond0: (slave bond_slave_0): Releasing backup interface
[  111.726563][ T7249] bond0: (slave bond_slave_1): Releasing backup interface
[  111.732538][ T7273] RDS: rds_bind could not find a transport for ::ffff:172.30.2.1, load rds_tcp or rds_rdma?
[  111.750038][ T7249] team0: Port device team_slave_0 removed
[  111.756969][ T7249] team0: Port device team_slave_1 removed
[  111.762911][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.770769][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.778369][ T7249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  111.797362][  T808] tipc: Node number set to 79787129
[  111.937317][ T7275] syzkaller0: entered promiscuous mode
[  111.957590][ T7275] syzkaller0: entered allmulticast mode
[  112.643229][ T7309] netlink: 'syz.1.437': attribute type 1 has an invalid length.
[  112.820162][ T7317] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  112.849070][ T7315] __nla_validate_parse: 2 callbacks suppressed
[  112.849084][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'.
[  113.094541][ T7323] xt_hashlimit: size too large, truncated to 1048576
[  113.101263][ T7329] lo: entered allmulticast mode
[  113.101350][ T7329] lo: left allmulticast mode
[  113.195688][ T7332] netlink: 84 bytes leftover after parsing attributes in process `syz.3.447'.
[  113.285040][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'.
[  113.301038][ T7331] veth1_macvtap: entered promiscuous mode
[  113.336648][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  113.407004][   T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.425076][   T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.456700][   T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.488675][   T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.598404][ T7353] unsupported nlmsg_type 40
[  113.600157][ T7354] netlink: 83 bytes leftover after parsing attributes in process `syz.2.451'.
[  113.645281][ T7354] syzkaller0: entered promiscuous mode
[  113.652416][ T7354] syzkaller0: entered allmulticast mode
[  113.723567][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'.
[  113.745506][ T7358] netlink: 240 bytes leftover after parsing attributes in process `syz.3.454'.
[  113.755848][ T7363] 8021q: VLANs not supported on lo
[  114.030617][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.460'.
[  114.045567][ T7375] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.459'.
[  114.144920][ T7383] vlan2: entered promiscuous mode
[  114.150080][ T7383] hsr0: entered promiscuous mode
[  114.155996][ T7383] vlan2: entered allmulticast mode
[  114.169709][ T7385] netlink: 'syz.4.463': attribute type 21 has an invalid length.
[  114.174080][ T7383] hsr0: entered allmulticast mode
[  114.186969][ T7388] netlink: 144 bytes leftover after parsing attributes in process `syz.1.464'.
[  114.199330][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'.
[  114.208574][ T7386] netlink: 'syz.2.461': attribute type 17 has an invalid length.
[  114.208999][ T7383] hsr_slave_0: entered allmulticast mode
[  114.222674][ T7383] hsr_slave_1: entered allmulticast mode
[  114.255832][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.283122][ T7383] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[  114.453730][ T7397] ip6gre1: entered allmulticast mode
[  114.489611][ T7397] gretap1: entered promiscuous mode
[  114.539220][ T7408] nftables ruleset with unbound chain
[  114.626266][ T7409] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[  114.785318][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.792681][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.811562][ T7422] erspan0: entered promiscuous mode
[  114.820432][ T7422] erspan0: entered allmulticast mode
[  114.859934][ T7426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.873356][ T7421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.941838][ T7432] geneve1: entered promiscuous mode
[  115.407769][ T7459] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  115.414664][ T7463] xt_cgroup: invalid path, errno=-2
[  115.419679][ T7462] x_tables: unsorted underflow at hook 1
[  115.427152][ T7464] xt_cgroup: invalid path, errno=-2
[  115.444140][ T7462] netlink: 'syz.2.488': attribute type 3 has an invalid length.
[  116.283410][ T7509] netlink: 'syz.2.506': attribute type 1 has an invalid length.
[  116.339063][ T7509] bond1: (slave gretap1): making interface the new active one
[  116.359281][ T7509] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  116.592003][ T7531] xt_hashlimit: size too large, truncated to 1048576
[  116.611483][ T7532] ieee802154 phy1 wpan1: encryption failed: -22
[  116.888711][ T7544] netlink: Unknown conntrack attr (type=2304, max=9)
[  116.906056][ T7546] netlink: Unknown conntrack attr (type=2304, max=9)
[  117.003139][ T7551] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  117.035536][ T7551] IPVS: nq: FWM 3 0x00000003 - no destination available
[  117.492764][ T7579] Unknown metaid 0 dlen 28
[  118.338020][ T7633] __nla_validate_parse: 16 callbacks suppressed
[  118.338036][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'.
[  118.436087][ T7642] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  118.608792][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.542'.
[  118.621234][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'.
[  119.438019][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'.
[  119.546772][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[  119.557958][ T7708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.554'.
[  119.788073][ T7720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.809564][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'.
[  119.874552][ T3344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.897242][ T3344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.907204][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.492598][ T7758] netlink: 'syz.4.566': attribute type 1 has an invalid length.
[  120.586863][ T7758] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.624238][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.788075][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.823077][ T7775] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  120.875382][ T7775] Cannot find add_set index 0 as target
[  121.007756][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'.
[  121.306181][ T7801] bond2: option fail_over_mac: invalid value (16)
[  121.348736][ T7801] bond2 (unregistering): Released all slaves
[  121.592662][ T7817] pim6reg: entered allmulticast mode
[  121.712322][ T7825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.837430][ T7832] bridge1: entered promiscuous mode
[  121.854901][ T7832] bridge1: entered allmulticast mode
[  122.008719][ T7842] xt_hashlimit: size too large, truncated to 1048576
[  122.197141][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'.
[  122.961178][ T7876] sctp: [Deprecated]: syz.0.598 (pid 7876) Use of int in max_burst socket option.
[  122.961178][ T7876] Use struct sctp_assoc_value instead
[  123.132452][ T7891] netlink: 56 bytes leftover after parsing attributes in process `syz.0.598'.
[  123.406468][ T7907] bond2 (unregistering): Released all slaves
[  123.472721][ T7920] __nla_validate_parse: 2 callbacks suppressed
[  123.472735][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  123.489702][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  123.649460][ T7927] bridge0: port 1(syz_tun) entered blocking state
[  123.662265][ T7927] bridge0: port 1(syz_tun) entered disabled state
[  123.690495][ T7927] syz_tun: entered allmulticast mode
[  123.714804][ T7927] syz_tun: entered promiscuous mode
[  124.224285][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  124.358762][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'.
[  124.387942][ T7975] netlink: 256 bytes leftover after parsing attributes in process `syz.0.624'.
[  124.628895][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[  125.341642][ T8024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.703498][ T8048] syzkaller0: entered promiscuous mode
[  125.738282][ T8048] syzkaller0: entered allmulticast mode
[  125.841492][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'.
[  125.930764][ T8058] xt_bpf: check failed: parse error
[  126.033318][ T8073] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.643'.
[  126.067133][ T8075] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.643'.
[  126.177304][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.644'.
[  126.212722][ T8082] netlink: 404 bytes leftover after parsing attributes in process `syz.4.644'.
[  126.362785][ T8090] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  126.749151][ T8118] macvlan0: entered promiscuous mode
[  126.936117][ T8128] SET target dimension over the limit!
[  126.961665][ T8126] netem: change failed
[  127.092912][ T8133] xt_hashlimit: size too large, truncated to 1048576
[  127.185744][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.200428][ T8140] xt_ipcomp: unknown flags 1D
[  127.227118][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.568617][ T8157] gretap1: entered promiscuous mode
[  127.587251][ T8157] gretap1: entered allmulticast mode
[  127.750825][ T8166] x_tables: duplicate underflow at hook 1
[  127.819557][ T8176] openvswitch: netlink: IPv4 tun info is not correct
[  127.884205][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  128.621782][ T8206] __nla_validate_parse: 7 callbacks suppressed
[  128.621797][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.640374][ T8209] xt_hashlimit: size too large, truncated to 1048576
[  128.647766][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.682558][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.714140][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.741485][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.778008][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.805737][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'.
[  128.811033][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.853346][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.879942][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.887153][ T8210] bridge0: port 2(bridge_slave_1) entered listening state
[  128.895058][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.902213][ T8210] bridge0: port 1(bridge_slave_0) entered listening state
[  128.947949][ T8210] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.969639][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  128.994362][ T5750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.343243][ T8224] netlink: 'syz.1.684': attribute type 30 has an invalid length.
[  129.361781][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.372853][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.382184][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.391935][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.502659][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.824338][   T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.849876][ T8245] SET target dimension over the limit!
[  130.902849][ T8182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  130.922503][ T8252] netlink: 'syz.2.693': attribute type 1 has an invalid length.
[  130.944310][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  130.952253][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  131.717271][ T8297] syzkaller0: entered promiscuous mode
[  131.733779][ T8297] syzkaller0: entered allmulticast mode
[  132.046241][ T8327] netlink: 'syz.4.712': attribute type 1 has an invalid length.
[  132.628828][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  133.024014][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.031292][    C1] bridge0: topology change detected, propagating
[  133.038572][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.045818][    C1] bridge0: topology change detected, propagating
[  133.274067][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  135.304935][ T8404] __nla_validate_parse: 125 callbacks suppressed
[  135.304951][ T8404] netlink: 156 bytes leftover after parsing attributes in process `syz.4.732'.
[  135.498377][ T8422] xt_hashlimit: size too large, truncated to 1048576
[  135.596899][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.604143][ T8427] bridge0: port 2(bridge_slave_1) entered listening state
[  135.611553][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.618758][ T8427] bridge0: port 1(bridge_slave_0) entered listening state
[  135.654855][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'.
[  135.691807][ T8433] netlink: 'syz.3.738': attribute type 21 has an invalid length.
[  135.930955][ T8433] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  135.933700][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'.
[  135.952709][ T8449] netlink: 'syz.0.743': attribute type 5 has an invalid length.
[  135.961300][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'.
[  136.002266][ T8433] bond2 (unregistering): Released all slaves
[  136.021645][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'.
[  136.043793][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'.
[  136.079663][ T8453] netlink: 'syz.4.742': attribute type 15 has an invalid length.
[  136.118638][ T8453] netlink: 'syz.4.742': attribute type 15 has an invalid length.
[  136.152360][ T8453] netlink: 'syz.4.742': attribute type 15 has an invalid length.
[  136.290189][ T8464] netlink: 51 bytes leftover after parsing attributes in process `syz.3.747'.
[  136.371346][ T8469] sctp: [Deprecated]: syz.2.749 (pid 8469) Use of int in max_burst socket option deprecated.
[  136.371346][ T8469] Use struct sctp_assoc_value instead
[  136.501897][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  136.556505][ T8483] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  136.589061][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'.
[  136.606711][ T8483] netlink: 658 bytes leftover after parsing attributes in process `syz.1.754'.
[  136.623475][ T8483] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  136.812023][ T8496] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[  136.884940][ T8496] Unsupported ieee802154 address type: 0
[  137.015992][ T8510] FAULT_INJECTION: forcing a failure.
[  137.015992][ T8510] name failslab, interval 1, probability 0, space 0, times 1
[  137.028713][ T8510] CPU: 1 UID: 0 PID: 8510 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(full) 
[  137.028731][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  137.028754][ T8510] Call Trace:
[  137.028761][ T8510]  <TASK>
[  137.028771][ T8510]  dump_stack_lvl+0xe8/0x150
[  137.028802][ T8510]  should_fail_ex+0x412/0x560
[  137.028825][ T8510]  should_failslab+0xa8/0x100
[  137.028843][ T8510]  kmem_cache_alloc_bulk_noprof+0x8c/0x7c0
[  137.028869][ T8510]  ? pfn_valid+0x125/0x4c0
[  137.028885][ T8510]  ? pfn_valid+0x125/0x4c0
[  137.028904][ T8510]  bpf_test_run_xdp_live+0x179c/0x1cf0
[  137.028944][ T8510]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  137.028974][ T8510]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  137.029017][ T8510]  ? 0xffffffffa02019dc
[  137.029039][ T8510]  ? 0xffffffffa02030c8
[  137.029077][ T8510]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  137.029102][ T8510]  ? _copy_from_user+0x94/0xb0
[  137.029120][ T8510]  ? bpf_test_init+0x113/0x150
[  137.029138][ T8510]  ? xdp_convert_md_to_buff+0x5b/0x330
[  137.029161][ T8510]  bpf_prog_test_run_xdp+0x81c/0x1160
[  137.029198][ T8510]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  137.029223][ T8510]  ? __fget_files+0x2a/0x420
[  137.029246][ T8510]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  137.029268][ T8510]  bpf_prog_test_run+0x2c7/0x340
[  137.029289][ T8510]  __sys_bpf+0x643/0x950
[  137.029311][ T8510]  ? __pfx___sys_bpf+0x10/0x10
[  137.029348][ T8510]  ? ksys_write+0x242/0x270
[  137.029371][ T8510]  ? __pfx_ksys_write+0x10/0x10
[  137.029395][ T8510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.029412][ T8510]  __x64_sys_bpf+0x7c/0x90
[  137.029432][ T8510]  do_syscall_64+0x174/0x580
[  137.029450][ T8510]  ? clear_bhb_loop+0x40/0x90
[  137.029470][ T8510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.029485][ T8510] RIP: 0033:0x7fc8a059ce59
[  137.029499][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.029512][ T8510] RSP: 002b:00007fc8a1397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  137.029534][ T8510] RAX: ffffffffffffffda RBX: 00007fc8a0815fa0 RCX: 00007fc8a059ce59
[  137.029545][ T8510] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  137.029555][ T8510] RBP: 00007fc8a1397090 R08: 0000000000000000 R09: 0000000000000000
[  137.029564][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.029573][ T8510] R13: 00007fc8a0816038 R14: 00007fc8a0815fa0 R15: 00007ffeb155b1b8
[  137.029601][ T8510]  </TASK>
[  137.114068][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.381837][ T8522] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.629253][ T8542] syzkaller0: entered promiscuous mode
[  137.634925][ T8542] syzkaller0: entered allmulticast mode
[  137.802611][ T8556] netlink: 'syz.1.774': attribute type 1 has an invalid length.
[  137.842866][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.082399][ T8586] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  140.552936][ T8550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  140.749150][ T8611] __nla_validate_parse: 6 callbacks suppressed
[  140.749165][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'.
[  140.828882][ T8618] sctp: [Deprecated]: syz.3.782 (pid 8618) Use of int in max_burst socket option.
[  140.828882][ T8618] Use struct sctp_assoc_value instead
[  140.851971][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'.
[  140.916156][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'.
[  141.110159][ T8630] netlink: 'syz.0.784': attribute type 8 has an invalid length.
[  141.147891][ T8640] netlink: 'syz.1.790': attribute type 64 has an invalid length.
[  141.263208][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'.
[  141.465303][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  141.518920][ T8656] macsec0: entered promiscuous mode
[  141.529750][ T8658] netlink: 'syz.4.794': attribute type 49 has an invalid length.
[  141.545183][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  141.566545][ T8656] veth1_macvtap: left promiscuous mode
[  141.611636][ T8656] macsec0 (unregistering): left promiscuous mode
[  141.695962][ T8669] syzkaller0: entered promiscuous mode
[  141.718640][ T8669] syzkaller0: entered allmulticast mode
[  141.863320][ T8682] netlink: 'syz.2.800': attribute type 11 has an invalid length.
[  141.902152][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.800'.
[  142.001979][ T8690] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  142.079410][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'.
[  142.088646][ T8696] openvswitch: netlink: Flow actions attr not present in new flow.
[  142.200879][ T8698] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  142.257448][ T8702] netlink: 372 bytes leftover after parsing attributes in process `syz.2.806'.
[  142.422412][ T8713] netlink: 'syz.0.809': attribute type 12 has an invalid length.
[  142.453100][ T8713] netlink: 'syz.0.809': attribute type 29 has an invalid length.
[  142.484492][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'.
[  142.514633][ T8717] netlink: 'syz.0.809': attribute type 7 has an invalid length.
[  142.529773][ T8717] netlink: 'syz.0.809': attribute type 8 has an invalid length.
[  142.628198][ T8717] gretap0: entered promiscuous mode
[  142.774413][ T8725] ip6gretap1: entered promiscuous mode
[  142.797856][ T8725] ip6gretap1: entered allmulticast mode
[  142.870446][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:3840)
[  143.095983][ T8746] dvmrp0: entered allmulticast mode
[  143.841801][ T8777] netlink: 'syz.4.833': attribute type 13 has an invalid length.
[  144.293828][ T8785] syzkaller0: entered promiscuous mode
[  144.302878][ T8785] syzkaller0: entered allmulticast mode
[  144.879591][ T8837] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  145.977931][ T8818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.018347][ T8818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.076545][ T8826] ip6tnl0: entered promiscuous mode
[  146.097767][ T8826] __nla_validate_parse: 4 callbacks suppressed
[  146.097781][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  146.151472][ T8828] syzkaller0: entered promiscuous mode
[  146.157036][ T8828] syzkaller0: entered allmulticast mode
[  146.462072][ T8869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.850'.
[  146.504464][ T8869] erspan0: entered promiscuous mode
[  146.526699][ T8869] erspan0: entered allmulticast mode
[  146.591902][ T8877] xt_hashlimit: size too large, truncated to 1048576
[  146.688065][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.718466][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'.
[  147.024229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.301161][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'.
[  147.315478][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'.
[  147.359197][ T8907] netlink: 'syz.3.862': attribute type 3 has an invalid length.
[  147.402783][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'.
[  147.462957][ T8922] sctp: [Deprecated]: syz.4.867 (pid 8922) Use of int in max_burst socket option.
[  147.462957][ T8922] Use struct sctp_assoc_value instead
[  147.580216][ T8929] ip6tnl0: Caught tx_queue_len zero misconfig
[  147.608374][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'.
[  147.696588][ T8939] xt_hashlimit: size too large, truncated to 1048576
[  147.909099][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'.
[  148.004675][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  148.635654][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  148.875927][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'.
[  149.136797][ T9009] erspan0: entered allmulticast mode
[  149.263712][ T9012] nbd: socks must be embedded in a SOCK_ITEM attr
[  149.300993][ T9021] FAULT_INJECTION: forcing a failure.
[  149.300993][ T9021] name failslab, interval 1, probability 0, space 0, times 0
[  149.313697][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: syz.1.889 Not tainted syzkaller #0 PREEMPT(full) 
[  149.313717][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  149.313726][ T9021] Call Trace:
[  149.313732][ T9021]  <TASK>
[  149.313739][ T9021]  dump_stack_lvl+0xe8/0x150
[  149.313761][ T9021]  should_fail_ex+0x412/0x560
[  149.313784][ T9021]  should_failslab+0xa8/0x100
[  149.313802][ T9021]  kmem_cache_alloc_bulk_noprof+0x8c/0x7c0
[  149.313833][ T9021]  ? pfn_valid+0x125/0x4c0
[  149.313849][ T9021]  ? pfn_valid+0x125/0x4c0
[  149.313867][ T9021]  bpf_test_run_xdp_live+0x179c/0x1cf0
[  149.313909][ T9021]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  149.313940][ T9021]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  149.313981][ T9021]  ? 0xffffffffa02030c8
[  149.313995][ T9021]  ? 0xffffffffa0203194
[  149.314034][ T9021]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  149.314059][ T9021]  ? _copy_from_user+0x94/0xb0
[  149.314078][ T9021]  ? bpf_test_init+0x113/0x150
[  149.314096][ T9021]  ? xdp_convert_md_to_buff+0x5b/0x330
[  149.314120][ T9021]  bpf_prog_test_run_xdp+0x81c/0x1160
[  149.314156][ T9021]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  149.314181][ T9021]  ? __fget_files+0x2a/0x420
[  149.314204][ T9021]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  149.314226][ T9021]  bpf_prog_test_run+0x2c7/0x340
[  149.314245][ T9021]  __sys_bpf+0x643/0x950
[  149.314268][ T9021]  ? __pfx___sys_bpf+0x10/0x10
[  149.314304][ T9021]  ? ksys_write+0x242/0x270
[  149.314327][ T9021]  ? __pfx_ksys_write+0x10/0x10
[  149.314352][ T9021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.314369][ T9021]  __x64_sys_bpf+0x7c/0x90
[  149.314389][ T9021]  do_syscall_64+0x174/0x580
[  149.314404][ T9021]  ? trace_irq_disable+0x3b/0x140
[  149.314425][ T9021]  ? clear_bhb_loop+0x40/0x90
[  149.314444][ T9021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.314459][ T9021] RIP: 0033:0x7efdcfd9ce59
[  149.314473][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.314485][ T9021] RSP: 002b:00007efdd0bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  149.314501][ T9021] RAX: ffffffffffffffda RBX: 00007efdd0015fa0 RCX: 00007efdcfd9ce59
[  149.314512][ T9021] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  149.314522][ T9021] RBP: 00007efdd0bfe090 R08: 0000000000000000 R09: 0000000000000000
[  149.314531][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  149.314540][ T9021] R13: 00007efdd0016038 R14: 00007efdd0015fa0 R15: 00007ffc11bc9588
[  149.314567][ T9021]  </TASK>
[  149.659287][ T9020] gretap1: entered promiscuous mode
[  149.708392][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'.
[  149.769330][ T9020] batman_adv: batadv0: Adding interface: gretap1
[  149.807446][ T9020] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  149.828124][ T9020] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  150.252823][ T9052] netlink: 'syz.4.896': attribute type 33 has an invalid length.
[  150.398321][ T9052] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  150.459916][ T9052] bond3 (unregistering): Released all slaves
[  150.483019][ T9083] xt_ecn: cannot match TCP bits for non-tcp packets
[  151.157126][ T9117] __nla_validate_parse: 9 callbacks suppressed
[  151.157142][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'.
[  151.184139][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  151.210080][ T9123] netlink: 'syz.2.912': attribute type 21 has an invalid length.
[  151.259826][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  151.307026][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  151.349307][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  151.680641][ T9159] netlink: 'syz.1.921': attribute type 11 has an invalid length.
[  151.721166][ T9161] netlink: 'syz.0.922': attribute type 6 has an invalid length.
[  151.738582][ T9159] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.981858][ T9176] syzkaller1: entered promiscuous mode
[  152.005928][ T9176] syzkaller1: entered allmulticast mode
[  152.036195][ T9176] netlink: 'syz.0.925': attribute type 6 has an invalid length.
[  152.177245][ T9190] netlink: 76 bytes leftover after parsing attributes in process `syz.1.930'.
[  152.377372][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'.
[  152.405771][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'.
[  152.679663][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'.
[  152.755526][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'.
[  153.057698][ T9237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.318434][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'.
[  153.559198][ T9282] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  153.797055][ T9285] FAULT_INJECTION: forcing a failure.
[  153.797055][ T9285] name failslab, interval 1, probability 0, space 0, times 0
[  153.809718][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT(full) 
[  153.809736][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  153.809746][ T9285] Call Trace:
[  153.809752][ T9285]  <TASK>
[  153.809759][ T9285]  dump_stack_lvl+0xe8/0x150
[  153.809781][ T9285]  should_fail_ex+0x412/0x560
[  153.809804][ T9285]  should_failslab+0xa8/0x100
[  153.809822][ T9285]  kmem_cache_alloc_bulk_noprof+0x8c/0x7c0
[  153.809847][ T9285]  ? pfn_valid+0x125/0x4c0
[  153.809862][ T9285]  ? pfn_valid+0x125/0x4c0
[  153.809881][ T9285]  bpf_test_run_xdp_live+0x179c/0x1cf0
[  153.809923][ T9285]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  153.809954][ T9285]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  153.810005][ T9285]  ? 0xffffffffa02019cc
[  153.810019][ T9285]  ? 0xffffffffa02030c8
[  153.810059][ T9285]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  153.810085][ T9285]  ? _copy_from_user+0x94/0xb0
[  153.810104][ T9285]  ? bpf_test_init+0x113/0x150
[  153.810123][ T9285]  ? xdp_convert_md_to_buff+0x5b/0x330
[  153.810147][ T9285]  bpf_prog_test_run_xdp+0x81c/0x1160
[  153.810184][ T9285]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  153.810211][ T9285]  ? __fget_files+0x2a/0x420
[  153.810234][ T9285]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  153.810256][ T9285]  bpf_prog_test_run+0x2c7/0x340
[  153.810275][ T9285]  __sys_bpf+0x643/0x950
[  153.810298][ T9285]  ? __pfx___sys_bpf+0x10/0x10
[  153.810332][ T9285]  ? ksys_write+0x242/0x270
[  153.810356][ T9285]  ? __pfx_ksys_write+0x10/0x10
[  153.810382][ T9285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.810399][ T9285]  __x64_sys_bpf+0x7c/0x90
[  153.810420][ T9285]  do_syscall_64+0x174/0x580
[  153.810435][ T9285]  ? trace_irq_disable+0x3b/0x140
[  153.810456][ T9285]  ? clear_bhb_loop+0x40/0x90
[  153.810475][ T9285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.810490][ T9285] RIP: 0033:0x7fc8a059ce59
[  153.810505][ T9285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.810516][ T9285] RSP: 002b:00007fc8a1397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.810533][ T9285] RAX: ffffffffffffffda RBX: 00007fc8a0815fa0 RCX: 00007fc8a059ce59
[  153.810544][ T9285] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  153.810554][ T9285] RBP: 00007fc8a1397090 R08: 0000000000000000 R09: 0000000000000000
[  153.810564][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  153.810572][ T9285] R13: 00007fc8a0816038 R14: 00007fc8a0815fa0 R15: 00007ffeb155b1b8
[  153.810601][ T9285]  </TASK>
[  154.162631][ T9304] x_tables: duplicate underflow at hook 4
[  154.278472][   T50] block nbd1: Receive control failed (result -1)
[  154.875365][ T9331] openvswitch: netlink: Flow actions attr not present in new flow.
[  154.920744][ T9334] gtp0: entered promiscuous mode
[  154.956349][ T9334] gtp0: entered allmulticast mode
[  155.957899][ T9395] netlink: 'syz.1.986': attribute type 1 has an invalid length.
[  156.157386][ T9406] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.390113][ T9428] __nla_validate_parse: 7 callbacks suppressed
[  156.390129][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  156.692000][ T9428] vlan2: entered allmulticast mode
[  156.711996][ T9428] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  156.886387][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'.
[  156.932213][ T9458] xt_ecn: cannot match TCP bits for non-tcp packets
[  156.944816][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1003'.
[  157.105296][ T9465] nbd: must specify an index to disconnect
[  157.183612][ T9476] sctp: [Deprecated]: syz.1.1008 (pid 9476) Use of int in max_burst socket option deprecated.
[  157.183612][ T9476] Use struct sctp_assoc_value instead
[  157.231949][ T9476] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002
[  157.346908][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  157.391436][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1009'.
[  157.636110][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'.
[  157.637248][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'.
[  157.824284][ T9505] netlink: 'syz.1.1017': attribute type 1 has an invalid length.
[  157.836080][ T9505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1017'.
[  157.845302][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  157.859120][ T9505] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  158.010629][ T9521] xt_hashlimit: size too large, truncated to 1048576
[  158.110278][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  158.188100][ T9523] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  158.929070][ T9577] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  159.620663][ T9626] netlink: 'syz.3.1042': attribute type 4 has an invalid length.
[  159.644815][ T9612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.677842][ T9628] netlink: 'syz.3.1042': attribute type 4 has an invalid length.
[  159.939384][ T9640] tipc: Started in network mode
[  159.953530][ T9640] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  159.989780][ T9640] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  160.037440][ T9640] tipc: Enabled bearer <udp:syz0>, priority 10
[  160.197811][ T9658] vcan0: entered allmulticast mode
[  161.154034][ T5736] tipc: Node number set to 1
[  161.467488][ T9690] netlink: 'syz.2.1056': attribute type 16 has an invalid length.
[  161.475831][ T9690] netlink: 'syz.2.1056': attribute type 17 has an invalid length.
[  161.553035][ T9690] bridge0: port 1(syz_tun) entered blocking state
[  161.559652][ T9690] bridge0: port 1(syz_tun) entered forwarding state
[  161.607951][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.621691][ T9740] netlink: 'syz.0.1069': attribute type 21 has an invalid length.
[  161.628313][ T9737] FAULT_INJECTION: forcing a failure.
[  161.628313][ T9737] name failslab, interval 1, probability 0, space 0, times 0
[  161.630754][ T9690] 8021q: adding VLAN 0 to HW filter on device team0
[  161.642165][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.3.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  161.642183][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  161.642192][ T9737] Call Trace:
[  161.642199][ T9737]  <TASK>
[  161.642205][ T9737]  dump_stack_lvl+0xe8/0x150
[  161.642227][ T9737]  should_fail_ex+0x412/0x560
[  161.642249][ T9737]  should_failslab+0xa8/0x100
[  161.642268][ T9737]  kmem_cache_alloc_bulk_noprof+0x8c/0x7c0
[  161.642293][ T9737]  ? pfn_valid+0x125/0x4c0
[  161.642309][ T9737]  ? pfn_valid+0x125/0x4c0
[  161.642327][ T9737]  bpf_test_run_xdp_live+0x179c/0x1cf0
[  161.642366][ T9737]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  161.642396][ T9737]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  161.642437][ T9737]  ? 0xffffffffa02019c8
[  161.642450][ T9737]  ? 0xffffffffa02030c8
[  161.642488][ T9737]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  161.642513][ T9737]  ? _copy_from_user+0x94/0xb0
[  161.642531][ T9737]  ? bpf_test_init+0x113/0x150
[  161.642550][ T9737]  ? xdp_convert_md_to_buff+0x5b/0x330
[  161.642573][ T9737]  bpf_prog_test_run_xdp+0x81c/0x1160
[  161.642608][ T9737]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.642633][ T9737]  ? __fget_files+0x2a/0x420
[  161.642656][ T9737]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.642678][ T9737]  bpf_prog_test_run+0x2c7/0x340
[  161.642697][ T9737]  __sys_bpf+0x643/0x950
[  161.642720][ T9737]  ? __pfx___sys_bpf+0x10/0x10
[  161.642755][ T9737]  ? ksys_write+0x242/0x270
[  161.642777][ T9737]  ? __pfx_ksys_write+0x10/0x10
[  161.642802][ T9737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.642819][ T9737]  __x64_sys_bpf+0x7c/0x90
[  161.642838][ T9737]  do_syscall_64+0x174/0x580
[  161.642853][ T9737]  ? trace_irq_disable+0x3b/0x140
[  161.642886][ T9737]  ? clear_bhb_loop+0x40/0x90
[  161.642911][ T9737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.642925][ T9737] RIP: 0033:0x7f770639ce59
[  161.642939][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.642950][ T9737] RSP: 002b:00007f7707263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.642966][ T9737] RAX: ffffffffffffffda RBX: 00007f7706615fa0 RCX: 00007f770639ce59
[  161.642977][ T9737] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  161.642987][ T9737] RBP: 00007f7707263090 R08: 0000000000000000 R09: 0000000000000000
[  161.642995][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.643004][ T9737] R13: 00007f7706616038 R14: 00007f7706615fa0 R15: 00007ffd8821cee8
[  161.643031][ T9737]  </TASK>
[  161.720426][ T9743] __nla_validate_parse: 7 callbacks suppressed
[  161.720437][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[  161.728850][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.880799][ T9747] netlink: 'syz.1.1068': attribute type 9 has an invalid length.
[  161.992918][ T9690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.006779][ T9690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.027393][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  162.033904][ T9690] veth1_vlan: left promiscuous mode
[  162.043379][ T9690] veth0_vlan: left promiscuous mode
[  162.053565][ T9690] veth0_vlan: entered promiscuous mode
[  162.063906][ T9690] veth1_vlan: entered promiscuous mode
[  162.070420][ T9756] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1071'.
[  162.078025][ T9690] veth1_macvtap: left promiscuous mode
[  162.086628][ T9690] veth0_macvtap: left promiscuous mode
[  162.093184][ T9690] veth0_macvtap: entered promiscuous mode
[  162.102443][ T9690] veth1_macvtap: entered promiscuous mode
[  162.116922][ T9690] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  162.125252][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  162.133669][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  162.144807][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  162.153744][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  162.168345][ T9690] vlan2: left promiscuous mode
[  162.173299][ T9690] hsr0: left promiscuous mode
[  162.178934][ T9690] vlan2: left allmulticast mode
[  162.184149][ T9690] hsr0: left allmulticast mode
[  162.189029][ T9690] hsr_slave_0: left allmulticast mode
[  162.195535][ T9690] hsr_slave_1: left allmulticast mode
[  162.203547][ T9690] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.218516][ T9690] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.233014][ T9690] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.244886][ T9690] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.252914][ T9690] gtp0: left promiscuous mode
[  162.258248][ T9690] gtp0: left allmulticast mode
[  162.337212][ T9743] bridge_slave_1: left allmulticast mode
[  162.343025][ T9743] bridge_slave_1: left promiscuous mode
[  162.373032][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.408249][ T9743] bridge_slave_0: left allmulticast mode
[  162.425140][ T9743] bridge_slave_0: left promiscuous mode
[  162.434688][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.666692][ T5637] wg1 speed is unknown, defaulting to 1000
[  162.676188][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.686896][ T1053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.696209][ T5637] syz2: Port: 1 Link ACTIVE
[  162.733357][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'.
[  162.746177][ T1053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.772939][ T1053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.048873][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'.
[  163.235109][ T9799] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1083'.
[  163.518829][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'.
[  163.635162][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  163.644906][ T9820] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1091'.
[  163.653563][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.666176][ T9820] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1091'.
[  163.709601][ T9809] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.778618][ T9829] openvswitch: netlink: Duplicate or invalid key (type 0).
[  163.787261][ T9829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.070069][ T9847] : renamed from vlan0 (while UP)
[  164.636648][ T9885] SET target dimension over the limit!
[  164.893235][ T9897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  165.516074][ T9948] netlink: 'syz.2.1132': attribute type 11 has an invalid length.
[  165.524338][ T9948] netlink: 'syz.2.1132': attribute type 4 has an invalid length.
[  165.664184][ T5640] Bluetooth: hci4: command 0x0405 tx timeout
[  165.773206][ T9959] Bluetooth: MGMT ver 1.23
[  165.905597][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  165.912835][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  166.221442][ T9977] netlink: 'syz.1.1144': attribute type 3 has an invalid length.
[  166.269558][ T9980] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0
[  166.419714][ T9988] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  166.604692][ T9998] ipt_ECN: cannot use operation on non-tcp rule
[  166.814394][T10010] macsec0: entered promiscuous mode
[  166.824631][T10010] __nla_validate_parse: 10 callbacks suppressed
[  166.824645][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'.
[  166.848594][T10010] veth1_macvtap: left promiscuous mode
[  166.895114][T10010] macsec0 (unregistering): left promiscuous mode
[  166.923530][T10015] openvswitch: netlink: IP tunnel dst address not specified
[  167.201277][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'.
[  167.295712][T10029] syzkaller0: entered promiscuous mode
[  167.316681][T10029] syzkaller0: entered allmulticast mode
[  167.337485][T10035] x_tables: unsorted entry at hook 3
[  167.368656][T10035] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  167.379931][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  167.572241][T10052] netdevsim netdevsim0 
: renamed from netdevsim0 (while UP)
[  167.775544][T10063] veth0: Caught tx_queue_len zero misconfig
[  168.003739][T10076] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1174'.
[  168.022623][T10076] lo: Caught tx_queue_len zero misconfig
[  168.041345][T10076] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  168.138753][T10083] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1175'.
[  168.421105][T10103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1180'.
[  168.458186][   T30] audit: type=1804 audit(1780544970.671:4): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1181" name="/newroot/232/cgroup.controllers" dev="tmpfs" ino=1202 res=1 errno=0
[  168.511887][   T30] audit: type=1800 audit(1780544970.671:5): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="cgroup.controllers" dev="tmpfs" ino=1202 res=0 errno=0
[  168.888678][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'.
[  168.907525][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'.
[  168.956499][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'.
[  168.973028][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'.
[  169.008692][T10137] vcan0: tx drop: invalid da for name 0x0000000000000003
[  169.436292][T10168] netlink: 'syz.4.1199': attribute type 1 has an invalid length.
[  169.617942][T10168] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.658583][T10157] bond3: (slave geneve2): making interface the new active one
[  169.672250][T10157] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  169.681621][T10179] syzkaller1: entered promiscuous mode
[  169.690180][T10179] syzkaller1: entered allmulticast mode
[  169.708831][T10188] gtp0: entered promiscuous mode
[  169.716848][T10188] gtp0: entered allmulticast mode
[  169.840354][T10192] macvlan0: left promiscuous mode
[  170.439381][T10219] netlink: 'syz.4.1215': attribute type 1 has an invalid length.
[  170.872262][T10239] netlink: 'syz.4.1220': attribute type 1 has an invalid length.
[  171.907751][T10288] syz.2.1233 (10288) used obsolete PPPIOCDETACH ioctl
[  171.985619][T10294] __nla_validate_parse: 140 callbacks suppressed
[  171.985634][T10294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1236'.
[  172.216020][T10307] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  172.218003][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  172.236086][T10307] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  172.339847][T10310] syzkaller0: entered promiscuous mode
[  172.346479][T10310] syzkaller0: entered allmulticast mode
[  172.472784][T10325] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  172.493077][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'.
[  172.807938][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1252'.
[  172.832719][T10350] netlink: 'syz.0.1252': attribute type 11 has an invalid length.
[  172.904433][T10354] xt_ecn: cannot match TCP bits for non-tcp packets
[  173.085659][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1257'.
[  173.220977][T10375] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1259'.
[  173.230795][T10374] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1259'.
[  173.253645][T10375] netlink: 'syz.2.1259': attribute type 24 has an invalid length.
[  173.270109][T10374] netlink: 'syz.2.1259': attribute type 24 has an invalid length.
[  173.391967][T10387] Bluetooth: MGMT ver 1.23
[  173.614366][T10394] syzkaller0: entered promiscuous mode
[  173.632008][T10394] syzkaller0: entered allmulticast mode
[  173.659066][T10394] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1264'.
[  173.670263][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'.
[  173.925178][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1270'.
[  174.069093][T10423] netlink: 'syz.0.1274': attribute type 29 has an invalid length.
[  174.097872][T10423] netlink: 'syz.0.1274': attribute type 29 has an invalid length.
[  174.121504][T10423] netlink: 'syz.0.1274': attribute type 32 has an invalid length.
[  175.427967][T10514] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  175.467149][T10518] sctp: [Deprecated]: syz.3.1303 (pid 10518) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.467149][T10518] Use struct sctp_sack_info instead
[  175.483315][T10514] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.539901][T10514] bond1: (slave geneve3): making interface the new active one
[  175.590269][T10514] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  175.600428][T10526] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  176.099201][T10562] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  176.131063][T10562] 8021q: adding VLAN 0 to HW filter on device bond5
[  176.175750][T10562] bond5: (slave ip6gretap1): making interface the new active one
[  176.218105][T10562] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  176.285961][T10562] pim6reg: entered allmulticast mode
[  176.791822][T10605] netlink: 'syz.4.1328': attribute type 2 has an invalid length.
[  176.811460][T10600] erspan0: left allmulticast mode
[  176.935758][T10615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.218997][T10623] ieee802154 phy1 wpan1: encryption failed: -22
[  177.223771][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.256491][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.380534][T10600] geneve1: left promiscuous mode
[  177.467388][T10600] bond1: left promiscuous mode
[  177.490115][T10600] gretap1: left promiscuous mode
[  177.495384][T10600] gretap1: left allmulticast mode
[  177.519741][T10605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.743346][T10623] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.808855][  T138] netdevsim netdevsim0 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.830644][  T138] netdevsim netdevsim0 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.851320][T10636] bridge3: entered promiscuous mode
[  177.859144][T10636] bridge3: entered allmulticast mode
[  177.904780][  T138] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.937277][  T138] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.975445][  T138] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.007036][  T138] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.054918][  T138] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.098718][  T138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.211046][T10662] validate_nla: 1 callbacks suppressed
[  178.211060][T10662] netlink: 'syz.0.1342': attribute type 1 has an invalid length.
[  178.288434][T10666] IPv6: NLM_F_CREATE should be specified when creating new route
[  178.305066][T10662] __nla_validate_parse: 5 callbacks suppressed
[  178.305079][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  178.318334][T10669] syzkaller1: entered promiscuous mode
[  178.326569][T10669] syzkaller1: entered allmulticast mode
[  178.338271][T10669] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1345'.
[  178.353592][T10662] ip6gretap1: entered promiscuous mode
[  178.377904][T10662] ip6gretap1: entered allmulticast mode
[  178.508594][T10679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1348'.
[  178.771463][T10698] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1354'.
[  178.811969][T10698] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1354'.
[  178.818667][T10701] xt_HMARK: spi-set and port-set can't be combined
[  179.172843][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'.
[  179.194743][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'.
[  179.197040][T10733] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1362'.
[  179.264939][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.377109][T10732] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  179.394794][T10732] bond2 (unregistering): Released all slaves
[  179.485304][T10747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1366'.
[  179.511386][T10750] netlink: 'syz.2.1367': attribute type 1 has an invalid length.
[  179.683336][T10754] bond6: (slave bridge3): Enslaving as a backup interface with an up link
[  179.771545][T10750] macvlan3: entered promiscuous mode
[  179.788031][T10750] macvlan3: entered allmulticast mode
[  179.796616][T10750] bond6: entered promiscuous mode
[  179.801680][T10750] bridge3: entered promiscuous mode
[  179.810927][T10750] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  179.823565][T10750] bond6: left promiscuous mode
[  179.828824][T10750] bridge3: left promiscuous mode
[  179.909442][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  179.984692][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.999818][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.133707][T10791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.143215][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.307317][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.675414][T10816] syzkaller1: entered promiscuous mode
[  180.692320][T10816] syzkaller1: entered allmulticast mode
[  180.908720][T10823] syzkaller0: entered promiscuous mode
[  180.924216][T10823] syzkaller0: entered allmulticast mode
[  180.946197][T10823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.976596][T10822] tipc: Resetting bearer <eth:syzkaller0>
[  181.043791][T10822] tipc: Disabling bearer <eth:syzkaller0>
[  181.186587][T10838] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  181.218366][T10838] bond3 (unregistering): Released all slaves
[  181.356543][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.379449][T10850] 8021q: VLANs not supported on ip6_vti0
[  181.578185][T10863] sctp: [Deprecated]: syz.0.1400 (pid 10863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.578185][T10863] Use struct sctp_sack_info instead
[  181.643604][T10855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.700602][T10855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.906803][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.002420][T10855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.022715][T10855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.044262][T10891] syzkaller0: entered promiscuous mode
[  182.055198][T10891] syzkaller0: entered allmulticast mode
[  182.079344][T10885] TC_ACT_REPEAT abuse ?
[  182.162026][T10855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.179043][T10855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.321319][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.363320][T10855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.381716][T10855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.392508][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.423127][T10900] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.430767][T10900] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.556610][T10913] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.638666][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.662095][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.662853][T10913] x_tables: duplicate underflow at hook 3
[  182.703721][ T1053] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.712617][ T1053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.725893][T10920] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  182.792902][ T1053] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.814959][ T1053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.874317][ T1053] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.883263][ T1053] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.104334][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.187035][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.311654][T10956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.425449][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.715550][T10997] __nla_validate_parse: 24 callbacks suppressed
[  183.715565][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1440'.
[  183.828102][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.836951][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.845045][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.983959][T11012] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  184.071960][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  184.348322][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'.
[  184.362820][T11035] syzkaller0: entered promiscuous mode
[  184.368497][T11035] syzkaller0: entered allmulticast mode
[  184.834646][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'.
[  186.286973][T11079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  186.295784][T11079] IPv6: NLM_F_CREATE should be set when creating new route
[  186.333256][T11083] xt_hashlimit: size too large, truncated to 1048576
[  186.340571][T11085] batadv1: entered allmulticast mode
[  186.480650][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'.
[  186.567545][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  186.661893][T11090] batman_adv: batadv0: Interface activated: gretap1
[  186.689456][T11090] veth1_macvtap: entered promiscuous mode
[  186.899992][T11115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1469'.
[  187.244111][ T5761] net_ratelimit: 11 callbacks suppressed
[  187.244127][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.348115][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.385754][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.621905][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'.
[  187.638733][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  187.649338][T11152] xt_hashlimit: size too large, truncated to 1048576
[  187.790707][T11156] 8021q: adding VLAN 0 to HW filter on device bond7
[  187.828798][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'.
[  187.839623][T11164] x_tables: ip_tables: icmp match: only valid for protocol 1
[  187.914175][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  187.988865][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.024699][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.057874][T11169] vlan0: entered promiscuous mode
[  188.063034][T11169] bridge0: entered promiscuous mode
[  188.068990][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.251773][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'.
[  188.294157][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.328693][T11184] netlink: set zone limit has 4 unknown bytes
[  188.331594][T11182] netlink: 'syz.1.1488': attribute type 12 has an invalid length.
[  188.360909][T11189] netlink: zone id is out of range
[  188.432093][T11182] xt_nat: multiple ranges no longer supported
[  188.599878][T11197] FAULT_INJECTION: forcing a failure.
[  188.599878][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  188.630429][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.1.1491 Not tainted syzkaller #0 PREEMPT(full) 
[  188.630449][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  188.630457][T11197] Call Trace:
[  188.630463][T11197]  <TASK>
[  188.630469][T11197]  dump_stack_lvl+0xe8/0x150
[  188.630490][T11197]  should_fail_ex+0x412/0x560
[  188.630510][T11197]  _copy_to_user+0x31/0xb0
[  188.630529][T11197]  simple_read_from_buffer+0xe1/0x170
[  188.630550][T11197]  proc_fail_nth_read+0x1bb/0x230
[  188.630570][T11197]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.630591][T11197]  ? rw_verify_area+0x2a6/0x4d0
[  188.630609][T11197]  ? __lock_acquire+0x6b5/0x2cf0
[  188.630623][T11197]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.630641][T11197]  vfs_read+0x20c/0xa70
[  188.630665][T11197]  ? __pfx___mutex_lock+0x10/0x10
[  188.630683][T11197]  ? __pfx_vfs_read+0x10/0x10
[  188.630702][T11197]  ? __fget_files+0x2a/0x420
[  188.630724][T11197]  ? __fget_files+0x3a0/0x420
[  188.630739][T11197]  ? __fget_files+0x2a/0x420
[  188.630765][T11197]  ksys_read+0x150/0x270
[  188.630787][T11197]  ? __pfx_ksys_read+0x10/0x10
[  188.630816][T11197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.630833][T11197]  do_syscall_64+0x174/0x580
[  188.630847][T11197]  ? trace_irq_disable+0x3b/0x140
[  188.630868][T11197]  ? clear_bhb_loop+0x40/0x90
[  188.630887][T11197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.630902][T11197] RIP: 0033:0x7efdcfd5d68e
[  188.630917][T11197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  188.630929][T11197] RSP: 002b:00007efdd0bfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.630945][T11197] RAX: ffffffffffffffda RBX: 00007efdd0bfe6c0 RCX: 00007efdcfd5d68e
[  188.630955][T11197] RDX: 000000000000000f RSI: 00007efdd0bfe0a0 RDI: 0000000000000004
[  188.630964][T11197] RBP: 00007efdd0bfe090 R08: 0000000000000000 R09: 0000000000000000
[  188.630972][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.630980][T11197] R13: 00007efdd0016038 R14: 00007efdd0015fa0 R15: 00007ffc11bc9588
[  188.631009][T11197]  </TASK>
[  188.861159][T11201] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  188.869275][T11201] __nla_validate_parse: 2 callbacks suppressed
[  188.869286][T11201] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.1494'.
[  188.977444][T11204] netlink: 'syz.2.1498': attribute type 2 has an invalid length.
[  189.000745][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1497'.
[  189.238921][T11223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'.
[  189.268280][T11224] netlink: 'syz.4.1501': attribute type 1 has an invalid length.
[  189.493491][T11219] syzkaller0: entered promiscuous mode
[  189.505147][T11219] syzkaller0: entered allmulticast mode
[  189.975697][T11269] xt_hashlimit: size too large, truncated to 1048576
[  190.022248][T11275] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.029461][T11275] bridge0: port 2(bridge_slave_1) entered listening state
[  190.036880][T11275] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.044064][T11275] bridge0: port 1(bridge_slave_0) entered listening state
[  190.092268][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'.
[  190.160932][T11275] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  190.258704][T11289] netlink: 'syz.0.1519': attribute type 1 has an invalid length.
[  190.396384][T11289] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.474671][T11296] netlink: 'syz.1.1520': attribute type 13 has an invalid length.
[  190.527835][T11297] bond3: (slave geneve2): making interface the new active one
[  190.538030][T11297] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  190.552792][  T138] netdevsim netdevsim0 
: set [1, 0] type 2 family 0 port 6081 - 0
[  190.584056][  T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.625722][T11310] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1524'.
[  190.678813][  T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.697551][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.799113][T11321] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.812240][T11305] 
: renamed from bond0 (while UP)
[  191.293976][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'.
[  191.306110][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'.
[  191.423174][T11354] netlink: 'syz.3.1535': attribute type 1 has an invalid length.
[  191.437148][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  192.041616][T11385] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1543'.
[  192.464212][    C0] net_ratelimit: 20 callbacks suppressed
[  192.464232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.726823][T11400] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[  192.735338][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'.
[  194.067627][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.068043][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  194.084371][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.704950][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.713097][  T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.721976][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.730105][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.738845][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.831731][T11374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.104919][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.283244][T11433] veth1_macvtap: renamed from vlan0
[  195.289165][T11438] __nla_validate_parse: 2 callbacks suppressed
[  195.289177][T11438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1558'.
[  195.344749][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.705102][T11452] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1561'.
[  195.964757][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1565'.
[  195.984098][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.991359][    C0] bridge0: topology change detected, propagating
[  195.997958][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.005193][    C0] bridge0: topology change detected, propagating
[  196.152555][ T5643] Bluetooth: hci2: command 0x0406 tx timeout
[  196.158949][ T5642] Bluetooth: hci3: command 0x0406 tx timeout
[  196.165339][ T5640] Bluetooth: hci1: command 0x0406 tx timeout
[  196.190386][T11496] can: request_module (can-proto-0) failed.
[  196.335740][T11503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1571'.
[  196.400880][T11503] bond0: Caught tx_queue_len zero misconfig
[  196.437444][T11503] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1571'.
[  196.655282][T11521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'.
[  196.673636][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1573'.
[  196.709849][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1573'.
[  196.758573][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'.
[  197.231851][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'.
[  197.329575][T11542] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.357341][T11542] 8021q: adding VLAN 0 to HW filter on device team0
[  197.394993][T11542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.488302][T11542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.520235][T11542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.546238][T11542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.556957][T11542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.583574][T11542] veth1_macvtap: left promiscuous mode
[  197.594591][T11542] veth0_macvtap: left promiscuous mode
[  197.615169][T11542] veth0_macvtap: entered promiscuous mode
[  197.639265][T11542] veth1_macvtap: entered promiscuous mode
[  197.687128][T11542] 8021q: adding VLAN 0 to HW filter on device 

[  197.724560][T11542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.758642][T11542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.793381][T11542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  197.856435][T11542] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.948908][T11542] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.072090][ T3371] netdevsim netdevsim0 
: set [0, 0] type 1 family 0 port 8472 - 0
[  198.080284][ T3371] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  198.220260][  T138] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.306592][T10611] net_ratelimit: 3 callbacks suppressed
[  198.306607][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.447428][T11612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.481363][T11605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.609556][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.636470][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.669016][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.690854][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.740785][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.755701][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.777326][T11620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.189372][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.202290][T11642] xt_hashlimit: size too large, truncated to 1048576
[  199.203527][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.200942][  T138] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.361051][T11654] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  200.488425][T11662] xt_policy: output policy not valid in PREROUTING and INPUT
[  200.521935][T11654] 8021q: adding VLAN 0 to HW filter on device bond8
[  200.561108][  T138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  200.599037][T11674] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  200.614438][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  200.622636][  T138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  200.706805][T11681] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  200.706805][T11681] Please contact the netfilter-devel mailing list or update your nftables rules.
[  200.744338][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  200.752248][T11661] bond8: (slave geneve2): making interface the new active one
[  200.763194][T11661] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  200.785145][T11670] netlink: 'syz.3.1604': attribute type 4 has an invalid length.
[  200.795525][T11675] __nla_validate_parse: 8 callbacks suppressed
[  200.795538][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'.
[  201.025112][  T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  201.059845][T11672] syzkaller0: entered promiscuous mode
[  201.066875][T11672] syzkaller0: entered allmulticast mode
[  201.099809][T11688] gtp1: entered promiscuous mode
[  201.111559][T11688] gtp1: entered allmulticast mode
[  201.123564][T11695] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  201.136707][T11692] tipc: Enabled bearer <ib:gre0>, priority 28
[  201.217668][T10611] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.356166][T11702] xt_hashlimit: size too large, truncated to 1048576
[  201.413230][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1616'.
[  201.526370][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'.
[  201.612116][T11717] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1617'.
[  202.064938][T10611] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  202.840386][T11707] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  202.970687][  T808] tipc: Node number set to 4148165774
[  202.996200][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  203.061808][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  203.126782][  T197] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  203.135588][T11730] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1619'.
[  203.279949][T11744] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1621'.
[  203.496552][T11746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1624'.
[  203.603072][T11763] syzkaller1: entered promiscuous mode
[  203.632924][T11763] syzkaller1: entered allmulticast mode
[  203.664498][    C1] net_ratelimit: 25 callbacks suppressed
[  203.664511][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.751123][T11763] netlink: 'syz.4.1628': attribute type 5 has an invalid length.
[  203.895759][T11777] xt_hashlimit: size too large, truncated to 1048576
[  203.997743][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'.
[  204.028710][T11779] veth0_to_team: entered promiscuous mode
[  204.047055][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.069514][  T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.091995][ T3344] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.110201][T11779] 8021q: adding VLAN 0 to HW filter on device bond6
[  204.132811][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'.
[  204.196582][ T3371] bond6: (slave bridge3): link status up again after 0 ms
[  204.251614][ T3371] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.292539][ T3371] bond6: (slave bridge3): link status up again after 0 ms
[  204.308143][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.332317][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'.
[  204.334470][ T1053] bond6: (slave bridge3): link status up again after 0 ms
[  204.366626][ T1053] bond6: (slave bridge3): link status up again after 0 ms
[  204.929243][T11805] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  204.950922][T11805] bond3 (unregistering): Released all slaves
[  205.252867][T11825] xt_hashlimit: size too large, truncated to 1048576
[  205.883787][T11873] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  205.907362][T11873] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  206.878713][T11879] bond0: option all_slaves_active: invalid value (222)
[  206.901430][T11879] bond0 (unregistering): Released all slaves
[  206.924712][T11892] __nla_validate_parse: 4 callbacks suppressed
[  206.924788][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'.
[  206.940302][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'.
[  206.962512][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'.
[  206.982420][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'.
[  207.246728][T11900] syzkaller0: entered promiscuous mode
[  207.260744][T11900] syzkaller0: entered allmulticast mode
[  207.490674][T11920] xt_hashlimit: size too large, truncated to 1048576
[  207.643369][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'.
[  207.686846][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'.
[  207.787940][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1684'.
[  208.022542][T11954] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  208.030910][T11954] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  208.170474][T11965] netlink: 'syz.1.1693': attribute type 1 has an invalid length.
[  208.179284][T11965] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  208.304796][    C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed
[  208.304817][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  208.764277][ T3371] net_ratelimit: 45 callbacks suppressed
[  208.764297][ T3371] bond6: (slave bridge3): failed to get link speed/duplex
[  208.894610][ T3371] bond6: (slave bridge3): failed to get link speed/duplex
[  209.004025][  T197] bond6: (slave bridge3): failed to get link speed/duplex
[  209.124221][   T57] bond6: (slave bridge3): failed to get link speed/duplex
[  209.234954][  T197] bond6: (slave bridge3): failed to get link speed/duplex
[  209.345344][ T3371] bond6: (slave bridge3): failed to get link speed/duplex
[  209.455787][   T57] bond6: (slave bridge3): failed to get link speed/duplex
[  209.564448][   T57] bond6: (slave bridge3): failed to get link speed/duplex
[  209.664578][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.672952][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.587491][T11926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.771493][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1700'.
[  210.803468][T12005] xt_hashlimit: size too large, truncated to 1048576
[  210.813577][T12004] syzkaller1: entered promiscuous mode
[  210.825529][T12004] syzkaller1: entered allmulticast mode
[  210.968700][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'.
[  211.129669][T12011] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  211.599846][T12048] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1712'.
[  211.811572][T12065] xt_hashlimit: size too large, truncated to 1048576
[  211.956502][T12073] __nla_validate_parse: 2 callbacks suppressed
[  211.956519][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'.
[  212.031330][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'.
[  212.040949][T12077] netlink: 'syz.0.1720': attribute type 4 has an invalid length.
[  212.050919][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.135115][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.624240][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  212.777034][T12121] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1731'.
[  213.027904][T12134] netlink: 'syz.2.1736': attribute type 1 has an invalid length.
[  213.072979][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1738'.
[  213.082405][T12138] xt_hashlimit: size too large, truncated to 1048576
[  213.214303][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1737'.
[  213.775173][   T57] net_ratelimit: 46 callbacks suppressed
[  213.775190][   T57] bond6: (slave bridge3): failed to get link speed/duplex
[  213.872101][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'.
[  213.897284][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'.
[  213.915328][  T138] bond6: (slave bridge3): failed to get link speed/duplex
[  213.930961][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'.
[  213.957808][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'.
[  213.988151][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'.
[  214.104434][  T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.130864][  T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.185226][  T138] bond6: (slave bridge3): failed to get link speed/duplex
[  214.226391][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.314669][  T138] bond6: (slave bridge3): failed to get link speed/duplex
[  214.378219][T12221] netlink: 'syz.2.1758': attribute type 10 has an invalid length.
[  214.380198][T12217] xt_hashlimit: size too large, truncated to 1048576
[  214.402746][T12221] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  214.413799][T12223] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:8
[  214.421176][T12221] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  214.454296][   T13] bond6: (slave bridge3): failed to get link speed/duplex
[  214.532518][T12225] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.556800][ T5750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  214.585371][   T57] bond6: (slave bridge3): failed to get link speed/duplex
[  214.587829][ T5750] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.696177][ T1053] bond6: (slave bridge3): failed to get link speed/duplex
[  215.015016][ T5750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  215.054229][ T5750] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  216.893355][T12189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.101691][T12253] __nla_validate_parse: 2 callbacks suppressed
[  217.101705][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'.
[  217.109254][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  217.420063][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'.
[  217.441144][T12274] xt_hashlimit: size too large, truncated to 1048576
[  217.446478][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'.
[  217.539558][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'.
[  217.582548][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'.
[  217.716349][T12279] 8021q: adding VLAN 0 to HW filter on device bond4
[  218.056630][T12293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1776'.
[  218.090353][T12293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1776'.
[  218.130094][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'.
[  218.161357][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1773'.
[  218.171147][T12300] netlink: 'syz.2.1777': attribute type 1 has an invalid length.
[  218.181712][T12291] xt_ecn: cannot match TCP bits for non-tcp packets
[  218.189596][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'.
[  218.371938][T12303] syzkaller0: entered promiscuous mode
[  218.386169][T12303] syzkaller0: entered allmulticast mode
[  218.425470][T12306] Bluetooth: MGMT ver 1.23
[  218.792457][T12329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.800790][T12331] xt_hashlimit: size too large, truncated to 1048576
[  218.851116][T12329] tipc: Disabling bearer <eth:syzkaller0>
[  218.974401][    C0] net_ratelimit: 46 callbacks suppressed
[  218.974419][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.174216][ T1053] bond6: (slave bridge3): failed to get link speed/duplex
[  219.182908][T12349] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  219.304268][   T12] bond6: (slave bridge3): failed to get link speed/duplex
[  219.434161][  T197] bond6: (slave bridge3): failed to get link speed/duplex
[  219.565325][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.680731][T12375] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  219.724713][T12375] bond3: (slave lo): Enslaving as an active interface with an up link
[  219.727108][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.739837][T12375] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  219.759395][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.788747][   T12] bond6: (slave bridge3): failed to get link speed/duplex
[  219.853362][T12384] xt_hashlimit: size too large, truncated to 1048576
[  220.108063][   T12] bond6: (slave bridge3): link status up again after 0 ms
[  220.304393][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  220.311685][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  220.618683][T12432] netlink: 'syz.2.1820': attribute type 12 has an invalid length.
[  220.884638][T12449] gretap1: entered promiscuous mode
[  220.897864][T12449] batman_adv: batadv0: Adding interface: gretap1
[  220.907113][T12449] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  220.927692][T12449] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  221.030152][T12488] xt_hashlimit: size too large, truncated to 1048576
[  221.253403][T12500] syzkaller0: entered promiscuous mode
[  221.260180][T12500] syzkaller0: entered allmulticast mode
[  221.644529][T12505] nbd2: detected capacity change from 0 to 63
[  221.656135][   T50] block nbd2: Receive control failed (result -32)
[  221.656492][ T5634] block nbd2: Receive control failed (result -32)
[  221.678235][ T5658] block nbd2: Send control failed (result -32)
[  221.694153][ T5658] block nbd2: Request send failed, requeueing
[  221.721701][   T11] block nbd2: Dead connection, failed to find a fallback
[  221.729846][ T5658] block nbd2: Dead connection, failed to find a fallback
[  221.766797][ T5658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.768623][   T11] block nbd2: shutting down sockets
[  221.782668][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.799796][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  221.808190][ T5658] Buffer I/O error on dev nbd2, logical block 1, async page read
[  221.816759][ T5658] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.827241][ T5658] Buffer I/O error on dev nbd2, logical block 2, async page read
[  221.835336][ T5658] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.844634][ T5658] Buffer I/O error on dev nbd2, logical block 3, async page read
[  221.855454][ T5658] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.867891][ T5658] Buffer I/O error on dev nbd2, logical block 0, async page read
[  221.876297][ T5658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.885368][ T5658] Buffer I/O error on dev nbd2, logical block 1, async page read
[  221.893288][ T5658] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.902444][ T5658] Buffer I/O error on dev nbd2, logical block 2, async page read
[  221.912161][ T5658] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.937480][ T5658] Buffer I/O error on dev nbd2, logical block 3, async page read
[  221.958334][ T5658] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.987929][ T5658] Buffer I/O error on dev nbd2, logical block 0, async page read
[  222.010709][ T5658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.033382][T12527] veth9: entered promiscuous mode
[  222.041500][ T5658] Buffer I/O error on dev nbd2, logical block 1, async page read
[  222.051605][T12527] veth9: entered allmulticast mode
[  222.074951][ T5658] ldm_validate_partition_table(): Disk read failed.
[  222.106805][ T5658] Dev nbd2: unable to read RDB block 0
[  222.114944][ T5658]  nbd2: unable to read partition table
[  222.126743][ T5658] ldm_validate_partition_table(): Disk read failed.
[  222.149073][ T5658] Dev nbd2: unable to read RDB block 0
[  222.178864][ T5658]  nbd2: unable to read partition table
[  222.188360][T12535] xt_hashlimit: size too large, truncated to 1048576
[  222.303024][T12541] __nla_validate_parse: 14 callbacks suppressed
[  222.303041][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'.
[  222.336152][T12542] netlink: 'syz.3.1844': attribute type 16 has an invalid length.
[  222.356234][T12542] netlink: 'syz.3.1844': attribute type 17 has an invalid length.
[  222.401890][T12542] 
: left promiscuous mode
[  222.411549][T12542] bond_slave_0: left promiscuous mode
[  222.421976][T12542] bond_slave_1: left promiscuous mode
[  222.481863][T12542] macvlan0: left promiscuous mode
[  222.493265][T12542] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  222.505299][T12542] veth3: left promiscuous mode
[  222.510158][T12542] veth3: left allmulticast mode
[  222.523335][T12542] gretap1: left promiscuous mode
[  222.563302][T12550] tap0: tun_chr_ioctl cmd 1074025676
[  222.573143][T12550] tap0: owner set to 0
[  222.605266][T12544] IPv6: NLM_F_REPLACE set, but no existing node found!
[  222.631288][T12549] tipc: Failed to obtain node identity
[  222.642236][T12549] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  222.961569][T12568] sctp: [Deprecated]: syz.1.1851 (pid 12568) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.961569][T12568] Use struct sctp_sack_info instead
[  223.020577][T12568] netlink: 'syz.1.1851': attribute type 1 has an invalid length.
[  223.046744][T12568] netlink: 'syz.1.1851': attribute type 1 has an invalid length.
[  223.077626][T12574] xfrm1: entered allmulticast mode
[  223.387430][T12596] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'.
[  223.419891][T12596] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'.
[  223.466631][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1860'.
[  223.636448][T12609] netlink: 'syz.4.1864': attribute type 3 has an invalid length.
[  223.813383][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1867'.
[  223.916485][T12617] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  223.955521][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1867'.
[  223.968897][T12627] netlink: 'syz.4.1872': attribute type 1 has an invalid length.
[  223.978888][T12630] 
[  223.981226][T12630] ======================================================
[  223.988237][T12630] WARNING: possible circular locking dependency detected
[  223.995261][T12630] syzkaller #0 Not tainted
[  223.999669][T12630] ------------------------------------------------------
[  224.006664][T12630] syz.1.1871/12630 is trying to acquire lock:
[  224.012707][T12630] ffffffff8ea855c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x40/0x650
[  224.022086][T12630] 
[  224.022086][T12630] but task is already holding lock:
[  224.029431][T12630] ffff88801be84210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x83/0x3f0
[  224.039671][T12630] 
[  224.039671][T12630] which lock already depends on the new lock.
[  224.039671][T12630] 
[  224.050050][T12630] 
[  224.050050][T12630] the existing dependency chain (in reverse order) is:
[  224.059037][T12630] 
[  224.059037][T12630] -> #8 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  224.067525][T12630]        down_read+0x47/0x2e0
[  224.072185][T12630]        kernfs_iop_permission+0x7f/0x430
[  224.077885][T12630]        inode_permission+0x46f/0x5f0
[  224.083234][T12630]        cgroup_attach_permissions+0x286/0x9e0
[  224.089369][T12630]        __cgroup_procs_write+0x23a/0x300
[  224.095071][T12630]        cgroup_threads_write+0x24/0x50
[  224.100597][T12630]        cgroup_file_write+0x331/0x8f0
[  224.106035][T12630]        kernfs_fop_write_iter+0x3af/0x540
[  224.111818][T12630]        vfs_write+0x61d/0xb90
[  224.116562][T12630]        ksys_write+0x150/0x270
[  224.121393][T12630]        do_syscall_64+0x174/0x580
[  224.126485][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.132876][T12630] 
[  224.132876][T12630] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  224.140586][T12630]        cpus_read_lock+0x42/0x160
[  224.145684][T12630]        static_key_slow_inc+0x12/0x30
[  224.151128][T12630]        setup_udp_tunnel_sock+0x2fd/0x510
[  224.156914][T12630]        l2tp_tunnel_register+0xde2/0x1490
[  224.162698][T12630]        pppol2tp_connect+0x8b7/0x17c0
[  224.168135][T12630]        __sys_connect+0x312/0x450
[  224.173233][T12630]        __x64_sys_connect+0x7a/0x90
[  224.178497][T12630]        do_syscall_64+0x174/0x580
[  224.183589][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.189982][T12630] 
[  224.189982][T12630] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  224.197692][T12630]        lock_sock_nested+0x41/0x100
[  224.202956][T12630]        inet_shutdown+0x6a/0x390
[  224.207961][T12630]        nbd_mark_nsock_dead+0x2e9/0x560
[  224.213577][T12630]        recv_work+0x1c2e/0x1d40
[  224.218488][T12630]        process_scheduled_works+0xb5d/0x1860
[  224.224531][T12630]        worker_thread+0xa53/0xfc0
[  224.229622][T12630]        kthread+0x389/0x470
[  224.234194][T12630]        ret_from_fork+0x514/0xb70
[  224.239282][T12630]        ret_from_fork_asm+0x1a/0x30
[  224.244547][T12630] 
[  224.244547][T12630] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  224.252167][T12630]        __mutex_lock+0x1a3/0x1550
[  224.257254][T12630]        nbd_queue_rq+0x37b/0x1100
[  224.262348][T12630]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  224.268395][T12630]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  224.275222][T12630]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  224.281704][T12630]        blk_mq_run_hw_queue+0x348/0x4f0
[  224.287313][T12630]        blk_mq_dispatch_list+0xd16/0xe10
[  224.293009][T12630]        blk_mq_flush_plug_list+0x48d/0x570
[  224.298881][T12630]        __blk_flush_plug+0x3ed/0x4d0
[  224.304235][T12630]        __submit_bio+0x28d/0x580
[  224.309239][T12630]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  224.315371][T12630]        block_read_full_folio+0x599/0x830
[  224.321156][T12630]        filemap_read_folio+0x137/0x3b0
[  224.326686][T12630]        do_read_cache_folio+0x358/0x590
[  224.332301][T12630]        read_part_sector+0xb6/0x2b0
[  224.337563][T12630]        adfspart_check_ICS+0xb1/0x960
[  224.343003][T12630]        bdev_disk_changed+0x817/0x1770
[  224.348529][T12630]        blkdev_get_whole+0x380/0x510
[  224.353880][T12630]        bdev_open+0x31e/0xd30
[  224.358621][T12630]        blkdev_open+0x470/0x610
[  224.363542][T12630]        do_dentry_open+0x822/0x13a0
[  224.368806][T12630]        vfs_open+0x3b/0x340
[  224.373375][T12630]        path_openat+0x2e08/0x3860
[  224.378466][T12630]        do_file_open+0x23e/0x4a0
[  224.383471][T12630]        do_sys_openat2+0x113/0x200
[  224.388645][T12630]        __x64_sys_openat+0x138/0x170
[  224.393998][T12630]        do_syscall_64+0x174/0x580
[  224.399088][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.405478][T12630] 
[  224.405478][T12630] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  224.412663][T12630]        __mutex_lock+0x1a3/0x1550
[  224.417752][T12630]        nbd_queue_rq+0xc6/0x1100
[  224.422756][T12630]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  224.428803][T12630]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  224.435634][T12630]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  224.442114][T12630]        blk_mq_run_hw_queue+0x348/0x4f0
[  224.447728][T12630]        blk_mq_dispatch_list+0xd16/0xe10
[  224.453424][T12630]        blk_mq_flush_plug_list+0x48d/0x570
[  224.459295][T12630]        __blk_flush_plug+0x3ed/0x4d0
[  224.464645][T12630]        __submit_bio+0x28d/0x580
[  224.469648][T12630]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  224.475782][T12630]        block_read_full_folio+0x599/0x830
[  224.481566][T12630]        filemap_read_folio+0x137/0x3b0
[  224.487090][T12630]        do_read_cache_folio+0x358/0x590
[  224.492707][T12630]        read_part_sector+0xb6/0x2b0
[  224.497972][T12630]        adfspart_check_ICS+0xb1/0x960
[  224.503409][T12630]        bdev_disk_changed+0x817/0x1770
[  224.508934][T12630]        blkdev_get_whole+0x380/0x510
[  224.514293][T12630]        bdev_open+0x31e/0xd30
[  224.519044][T12630]        blkdev_open+0x470/0x610
[  224.523965][T12630]        do_dentry_open+0x822/0x13a0
[  224.529239][T12630]        vfs_open+0x3b/0x340
[  224.533806][T12630]        path_openat+0x2e08/0x3860
[  224.538902][T12630]        do_file_open+0x23e/0x4a0
[  224.543911][T12630]        do_sys_openat2+0x113/0x200
[  224.549090][T12630]        __x64_sys_openat+0x138/0x170
[  224.554447][T12630]        do_syscall_64+0x174/0x580
[  224.559534][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.565925][T12630] 
[  224.565925][T12630] -> #3 (set->srcu){.+.+}-{0:0}:
[  224.573024][T12630]        __synchronize_srcu+0xca/0x300
[  224.578461][T12630]        elevator_switch+0x1e8/0x7a0
[  224.583725][T12630]        elevator_change+0x2cc/0x450
[  224.588987][T12630]        elevator_set_default+0x36c/0x430
[  224.594685][T12630]        blk_register_queue+0x3e9/0x4e0
[  224.600211][T12630]        __add_disk+0x677/0xd50
[  224.605043][T12630]        add_disk_fwnode+0xfb/0x480
[  224.610223][T12630]        nbd_dev_add+0x72c/0xb50
[  224.615145][T12630]        nbd_init+0x168/0x1f0
[  224.619802][T12630]        do_one_initcall+0x250/0x870
[  224.625063][T12630]        do_initcall_level+0x104/0x190
[  224.630508][T12630]        do_initcalls+0x59/0xa0
[  224.635337][T12630]        kernel_init_freeable+0x2a6/0x3e0
[  224.641035][T12630]        kernel_init+0x1d/0x1d0
[  224.645867][T12630]        ret_from_fork+0x514/0xb70
[  224.650955][T12630]        ret_from_fork_asm+0x1a/0x30
[  224.656217][T12630] 
[  224.656217][T12630] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  224.664016][T12630]        __mutex_lock+0x1a3/0x1550
[  224.669105][T12630]        elevator_change+0x1b3/0x450
[  224.674368][T12630]        elevator_set_none+0xb5/0x140
[  224.679716][T12630]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  224.686023][T12630]        nbd_start_device+0x17f/0xb10
[  224.691377][T12630]        nbd_genl_connect+0x165b/0x1cf0
[  224.696900][T12630]        genl_family_rcv_msg_doit+0x22a/0x330
[  224.702948][T12630]        genl_rcv_msg+0x61c/0x7a0
[  224.707948][T12630]        netlink_rcv_skb+0x232/0x4b0
[  224.713215][T12630]        genl_rcv+0x28/0x40
[  224.717695][T12630]        netlink_unicast+0x75c/0x8e0
[  224.722957][T12630]        netlink_sendmsg+0x813/0xb40
[  224.728222][T12630]        ____sys_sendmsg+0x972/0x9f0
[  224.733481][T12630]        ___sys_sendmsg+0x2a5/0x360
[  224.738657][T12630]        __x64_sys_sendmsg+0x1bd/0x2a0
[  224.744098][T12630]        do_syscall_64+0x174/0x580
[  224.749186][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.755580][T12630] 
[  224.755580][T12630] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  224.764164][T12630]        blk_alloc_queue+0x546/0x680
[  224.769426][T12630]        __blk_mq_alloc_disk+0x197/0x390
[  224.775036][T12630]        nbd_dev_add+0x499/0xb50
[  224.779957][T12630]        nbd_init+0x168/0x1f0
[  224.784619][T12630]        do_one_initcall+0x250/0x870
[  224.789894][T12630]        do_initcall_level+0x104/0x190
[  224.795334][T12630]        do_initcalls+0x59/0xa0
[  224.800168][T12630]        kernel_init_freeable+0x2a6/0x3e0
[  224.805869][T12630]        kernel_init+0x1d/0x1d0
[  224.810703][T12630]        ret_from_fork+0x514/0xb70
[  224.815791][T12630]        ret_from_fork_asm+0x1a/0x30
[  224.821052][T12630] 
[  224.821052][T12630] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  224.828242][T12630]        __lock_acquire+0x15a5/0x2cf0
[  224.833593][T12630]        lock_acquire+0x106/0x350
[  224.838596][T12630]        fs_reclaim_acquire+0x71/0x100
[  224.844036][T12630]        kmem_cache_alloc_noprof+0x40/0x650
[  224.849910][T12630]        __kernfs_iattrs+0xdf/0x320
[  224.855089][T12630]        kernfs_iop_setattr+0xea/0x3f0
[  224.860527][T12630]        notify_change+0xc1a/0xf40
[  224.865614][T12630]        do_truncate+0x1c2/0x250
[  224.870534][T12630]        path_openat+0x2f89/0x3860
[  224.875627][T12630]        do_file_open+0x23e/0x4a0
[  224.880632][T12630]        do_sys_openat2+0x113/0x200
[  224.885810][T12630]        __x64_sys_openat+0x138/0x170
[  224.891162][T12630]        do_syscall_64+0x174/0x580
[  224.896251][T12630]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.902641][T12630] 
[  224.902641][T12630] other info that might help us debug this:
[  224.902641][T12630] 
[  224.912843][T12630] Chain exists of:
[  224.912843][T12630]   fs_reclaim --> cpu_hotplug_lock --> &root->kernfs_iattr_rwsem
[  224.912843][T12630] 
[  224.926376][T12630]  Possible unsafe locking scenario:
[  224.926376][T12630] 
[  224.933802][T12630]        CPU0                    CPU1
[  224.939146][T12630]        ----                    ----
[  224.944489][T12630]   lock(&root->kernfs_iattr_rwsem);
[  224.949752][T12630]                                lock(cpu_hotplug_lock);
[  224.956751][T12630]                                lock(&root->kernfs_iattr_rwsem);
[  224.964532][T12630]   lock(fs_reclaim);
[  224.968503][T12630] 
[  224.968503][T12630]  *** DEADLOCK ***
[  224.968503][T12630] 
[  224.976632][T12630] 3 locks held by syz.1.1871/12630:
[  224.981810][T12630]  #0: ffff888035d12410 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  224.990935][T12630]  #1: ffff88807957a280 (&sb->s_type->i_mutex_key#18){+.+.}-{4:4}, at: do_truncate+0x18f/0x250
[  225.001270][T12630]  #2: ffff88801be84210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x83/0x3f0
[  225.011947][T12630] 
[  225.011947][T12630] stack backtrace:
[  225.017820][T12630] CPU: 0 UID: 0 PID: 12630 Comm: syz.1.1871 Not tainted syzkaller #0 PREEMPT(full) 
[  225.017834][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  225.017842][T12630] Call Trace:
[  225.017848][T12630]  <TASK>
[  225.017855][T12630]  dump_stack_lvl+0xe8/0x150
[  225.017869][T12630]  print_circular_bug+0x2e1/0x300
[  225.017885][T12630]  check_noncircular+0x12e/0x150
[  225.017901][T12630]  __lock_acquire+0x15a5/0x2cf0
[  225.017914][T12630]  ? check_path+0x21/0x40
[  225.017928][T12630]  ? add_lock_to_list+0xc7/0x100
[  225.017941][T12630]  ? lockdep_unlock+0x5d/0xd0
[  225.017951][T12630]  ? __lock_acquire+0x146e/0x2cf0
[  225.017963][T12630]  ? kmem_cache_alloc_noprof+0x40/0x650
[  225.017978][T12630]  lock_acquire+0x106/0x350
[  225.017988][T12630]  ? kmem_cache_alloc_noprof+0x40/0x650
[  225.018005][T12630]  ? __kernfs_iattrs+0xdf/0x320
[  225.018019][T12630]  fs_reclaim_acquire+0x71/0x100
[  225.018035][T12630]  ? kmem_cache_alloc_noprof+0x40/0x650
[  225.018049][T12630]  kmem_cache_alloc_noprof+0x40/0x650
[  225.018072][T12630]  ? kernfs_iop_setattr+0x83/0x3f0
[  225.018087][T12630]  __kernfs_iattrs+0xdf/0x320
[  225.018106][T12630]  ? __pfx___kernfs_iattrs+0x10/0x10
[  225.018119][T12630]  ? down_write+0x16d/0x200
[  225.018132][T12630]  ? setattr_prepare+0x232/0xb30
[  225.018142][T12630]  ? kernfs_root+0x1c/0x230
[  225.018154][T12630]  ? kernfs_root+0x1c/0x230
[  225.018168][T12630]  kernfs_iop_setattr+0xea/0x3f0
[  225.018180][T12630]  ? try_break_deleg+0x5b/0x180
[  225.018190][T12630]  ? __pfx_kernfs_iop_setattr+0x10/0x10
[  225.018204][T12630]  notify_change+0xc1a/0xf40
[  225.018217][T12630]  do_truncate+0x1c2/0x250
[  225.018234][T12630]  ? __pfx_do_truncate+0x10/0x10
[  225.018249][T12630]  ? apparmor_file_truncate+0x39f/0x470
[  225.018268][T12630]  path_openat+0x2f89/0x3860
[  225.018295][T12630]  ? __pfx_path_openat+0x10/0x10
[  225.018312][T12630]  ? __lock_acquire+0x6b5/0x2cf0
[  225.018326][T12630]  do_file_open+0x23e/0x4a0
[  225.018342][T12630]  ? __pfx_do_file_open+0x10/0x10
[  225.018364][T12630]  ? _raw_spin_unlock+0x28/0x50
[  225.018378][T12630]  ? alloc_fd+0x64b/0x6c0
[  225.018393][T12630]  do_sys_openat2+0x113/0x200
[  225.018406][T12630]  ? __se_sys_futex+0x3a8/0x450
[  225.018420][T12630]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.018434][T12630]  ? rcu_is_watching+0x15/0xb0
[  225.018449][T12630]  __x64_sys_openat+0x138/0x170
[  225.018463][T12630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.018474][T12630]  do_syscall_64+0x174/0x580
[  225.018486][T12630]  ? trace_irq_disable+0x3b/0x140
[  225.018501][T12630]  ? clear_bhb_loop+0x40/0x90
[  225.018513][T12630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.018525][T12630] RIP: 0033:0x7efdcfd9ce59
[  225.018537][T12630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.018547][T12630] RSP: 002b:00007efdd0bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.018559][T12630] RAX: ffffffffffffffda RBX: 00007efdd0016090 RCX: 00007efdcfd9ce59
[  225.018568][T12630] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  225.018576][T12630] RBP: 00007efdcfe32d6f R08: 0000000000000000 R09: 0000000000000000
[  225.018583][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.018590][T12630] R13: 00007efdd0016128 R14: 00007efdd0016090 R15: 00007ffc11bc9588
[  225.018604][T12630]  </TASK>
[  225.346939][T12479] net_ratelimit: 48 callbacks suppressed
[  225.346957][T12479] bond6: (slave bridge3): failed to get link speed/duplex
[  225.407140][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'.
[  225.484204][T12481] bond6: (slave bridge3): failed to get link speed/duplex
[  225.603966][T12483] bond6: (slave bridge3): failed to get link speed/duplex
[  225.675248][T12479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.683457][T12479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.713949][T12481] bond6: (slave bridge3): failed to get link speed/duplex
[  225.823954][T12484] bond6: (slave bridge3): failed to get link speed/duplex
[  225.943962][T12484] bond6: (slave bridge3): failed to get link speed/duplex
[  226.054165][T12484] bond6: (slave bridge3): failed to get link speed/duplex
[  226.163952][T12481] bond6: (slave bridge3): failed to get link speed/duplex
[  227.984073][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  230.403972][T12484] net_ratelimit: 57 callbacks suppressed
[  230.403992][T12484] bond6: (slave bridge3): failed to get link speed/duplex
[  230.523932][T12481] bond6: (slave bridge3): failed to get link speed/duplex
[  230.633937][T12483] bond6: (slave bridge3): failed to get link speed/duplex
[  230.743935][T12479] bond6: (slave bridge3): failed to get link speed/duplex
[  230.854033][T12479] bond6: (slave bridge3): failed to get link speed/duplex
[  230.964037][T12479] bond6: (slave bridge3): failed to get link speed/duplex
[  231.083933][T12479] bond6: (slave bridge3): failed to get link speed/duplex
[  231.204142][T12484] bond6: (slave bridge3): failed to get link speed/duplex
[  231.244086][T12483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.252279][T12483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog