last executing test programs:

7m44.664722659s ago: executing program 3 (id=307):
r0 = socket$kcm(0x2, 0x1, 0x84) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x44, r3, 0xb97534d5fe9704cf, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x582}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) (async)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)

7m43.696933325s ago: executing program 3 (id=320):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000000), 0xffffff7b, 0xe)
unshare(0x6060600)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84)

7m43.529037017s ago: executing program 3 (id=324):
syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0x8, 0x5de4, 0x7, 0x9d8}, 0x8)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x1, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000140)="01020000010006", 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
tee(r0, r0, 0x4, 0x0)
sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40c4, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x2a, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000700)=0x80000001, 0x4)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0xfff, 0x20, @local, @mcast2, 0x20, 0x8, 0x1b, 0x6}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000580)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x108)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

7m43.092844626s ago: executing program 3 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r2)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r1])
socket$netlink(0x10, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8}, 0x14)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c00", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)

7m42.704437627s ago: executing program 3 (id=331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', <r1=>0x0, 0x7800, 0x700, 0x0, 0x6, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@ra={0x94, 0x4}, @end, @noop, @lsrr={0x83, 0xf, 0x6c, [@multicast2, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x14, 0x7, 0x0, 0x4, [0xa, 0x9, 0x8, 0x7]}, @rr={0x7, 0x2b, 0xe2, [@remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @private=0xa010100, @broadcast, @remote, @remote, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x70, 0x48, 0x400, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, r1, 0x6bbc}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x70}}, 0x20000084)

7m42.555196051s ago: executing program 3 (id=333):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e047000000da000000000011f601ac1414aaac1414aa07030089079d00000000443c00030a01012f00000000e00000e8ffffffffab1e00010000000000000000000000ac141400"/134], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x7, 0x9, 0x10})
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x3, 0x0, &(0x7f00000003c0))
r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lc\x00', 0x1, 0x80002, 0x64}, 0x2c)
socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x9}, {0xfff2, 0x1}, {0xb, 0xc}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x4c}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000600), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r10)
sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="f46ffddff31e7297d99d673e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054)
sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000180), 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)

7m27.409751529s ago: executing program 32 (id=333):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e047000000da000000000011f601ac1414aaac1414aa07030089079d00000000443c00030a01012f00000000e00000e8ffffffffab1e00010000000000000000000000ac141400"/134], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x7, 0x9, 0x10})
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x3, 0x0, &(0x7f00000003c0))
r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lc\x00', 0x1, 0x80002, 0x64}, 0x2c)
socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x9}, {0xfff2, 0x1}, {0xb, 0xc}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x4c}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000600), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r10)
sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="f46ffddff31e7297d99d673e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054)
sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000180), 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.104052578s ago: executing program 2 (id=4312):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62000000000000000600000000000000ffffffffff00000000000000"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000100850000001ae4d5629500000000010069"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62000000000000000600000000000000ffffffffff00000000000000"], 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000100850000001ae4d5629500000000010069"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

3.055402826s ago: executing program 2 (id=4314):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r0, 0xfffffffffffffffe, 0x98)
syz_emit_ethernet(0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a00fc020000000000000000000000800001ff0200000000000000000000000000010200907800000000000000000000010100000000000000000000ffffe0000001330006d16600000017c17f07910000000000000000000000000000000028e3e3"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1036, &(0x7f00000004c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x31, 0x1028, 0x65, 0x0, 0x4, 0x21, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @noop]}}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x3, "1b0e14", 0x5, "d78b29"}, "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"}}}}}, &(0x7f0000001500)={0x1, 0x4, [0x489, 0xfdd, 0x4ee, 0xcc5]})
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000002e00)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1ff}}], 0x18}}], 0x1, 0x40000)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x82}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44008064)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.920678299s ago: executing program 5 (id=4316):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={r2, r3/1000+60000}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0)

2.85334222s ago: executing program 2 (id=4318):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @hci={0x1f, 0x3, 0x4}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0xb, <r2=>r1, 0x19}, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, 0xc51f})
r3 = socket(0xf, 0xa, 0xa39)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e22, 0x8001, 0xa, 0x20, 0xa0, 0x8, 0x0, 0xee01}, {0x7, 0x401, 0x5, 0x5, 0x4, 0x6, 0xff, 0x766}, {0xb, 0x200, 0x9, 0xb8a}, 0x69a1, 0x6e6bb5, 0x2, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x0, 0x84, 0x8, 0x3, 0x80000001}}, 0xe8)
bind(r3, &(0x7f0000000340)=@l2={0x1f, 0x0, @none, 0x1ff, 0x1}, 0x80)
listen(r3, 0x80)
connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendto$rxrpc(r3, &(0x7f0000000440)="4973b17d28e23fc1de2f190f5994bb185ff453be3d3e4bc0c70a6a1a2891b02d4812d4fd308dca833c3feccc4bafa612b52d3e8a8e8b5173c06a5777af4766f617533df1154173409e72a490eb133499bfe3c3f8ff0e763658a9137330924367dff48fd3eb9212ac2aa09a557a14b36e06a85404bd2955dda79a53404a9e65ecfd25e3eef4727c4bf081fc313a79231076f26cec0320f0f5c37c3dbd658b081e646d9e972aeeb2d6aecf0360ec8dff3ca7099b4e5e6d82e2d3793a5de73313eb5af0885703b827f06d0fbc57f54855c5ef8fca83c313743fda9b5de6bb0a4b8332", 0xe1, 0x4004011, &(0x7f0000000540)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xbf4d0000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x8}}, 0x24)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r3)
listen(r0, 0xffffff01)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000002480)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/124, 0x7c}, {&(0x7f0000000840)=""/99, 0x63}], 0x5, &(0x7f0000000940)=""/118, 0x76}, 0xb2d}, {{&(0x7f00000009c0), 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/236, 0xec}, {&(0x7f0000000b40)=""/49, 0x31}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/131, 0x83}, {&(0x7f0000001d40)=""/99, 0x63}], 0x6, &(0x7f0000001e40)=""/160, 0xa0}, 0xfffffffa}, {{&(0x7f0000001f00)=@tipc=@id, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f80)=""/200, 0xc8}, {&(0x7f0000002080)=""/241, 0xf1}, {&(0x7f0000002180)=""/38, 0x26}, {&(0x7f00000021c0)=""/123, 0x7b}], 0x4}, 0x6}, {{&(0x7f0000002280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/130, 0x82}], 0x1, &(0x7f0000002400)=""/114, 0x72}, 0x8}], 0x4, 0x12002, 0x0)
connect$vsock_stream(r5, &(0x7f0000002580)={0x28, 0x0, 0x0, @hyper}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000025c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002780), 0x4)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002840)={0xffffffffffffffff, 0x800, 0x10}, 0xc)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000028c0)=@generic={&(0x7f0000002880)='./file0\x00', 0x0, 0x10}, 0x18)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002940)=@o_path={&(0x7f0000002900)='./file0\x00', 0x0, 0x4018, r3}, 0x18)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000029c0)=@o_path={&(0x7f0000002980)='./file0\x00', 0x0, 0x4000, r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x11, 0x11, &(0x7f0000002640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002700)='syzkaller\x00', 0x1, 0x4, &(0x7f0000002740)=""/4, 0x41100, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000027c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002800)={0x0, 0x10, 0x81, 0x7f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002a00)=[0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000002a40)=[{0x1, 0x4, 0xc, 0x4}, {0x5, 0x3, 0x0, 0x7}, {0x2, 0x5, 0xa, 0xc}, {0x5, 0x5, 0x6, 0xb}, {0x0, 0x5, 0x1, 0x2}], 0x10, 0x460}, 0x94)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x1, &(0x7f0000002b80)=0x5, 0x8)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x844}, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000002cc0)={0x1, {0x17, 0x7, 0xfffffffffffffff9, 0xaaa, 0x100}})
getsockname$netlink(r3, &(0x7f0000002d00), &(0x7f0000002d40)=0xc)
getpeername$inet(r5, &(0x7f0000002d80)={0x2, 0x0, @multicast2}, &(0x7f0000002dc0)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003380)={0x6, 0x15, &(0x7f0000002ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, [@alu={0x7, 0x0, 0xb, 0xd, 0x9, 0xc, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0xb, 0xa, 0x50, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000002f80)='syzkaller\x00', 0x7, 0xf2, &(0x7f0000002fc0)=""/242, 0x41100, 0x4, '\x00', r1, 0x25, r3, 0x8, &(0x7f00000030c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000003100)={0x4, 0x10, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000032c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r10, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r9], &(0x7f0000003300)=[{0x3, 0x1, 0x7, 0x3}, {0x3, 0x1, 0x2, 0xa}, {0x1, 0x2, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x2, 0x5, 0x5}, {0x3, 0x5, 0x0, 0x1}], 0x10, 0x6}, 0x94)

2.69637725s ago: executing program 2 (id=4321):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x8907, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000040)='\x00', 0x40000, &(0x7f0000000200)={@_ha_fsid={[0xbc, 0x8]}, {0x1000, 0x40, 0x7, 0x8}}, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x5}, {[0x7, 0x4, 0xc, 0x1]}, 0x1, 0x41, &(0x7f0000000380)=""/65})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80005b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80005b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3d, 0x42, 0x40, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)="0b5225637725d696d22af67e43c48ef49d305679511694743e1bd491bc710c55ad533f58baaa3e1364555a0e30526c8032a49075db03bc3a083310f9ce8146c21099d1f1a4e05d51c739489f0b1196761b54990e104c77", 0x1079, r2}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r2, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
socket$netlink(0x10, 0x3, 0x4) (async)
r5 = socket$netlink(0x10, 0x3, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000300)="042faceee71080d3dbcbac3633c7db", 0xf}, {&(0x7f0000000500)="bbc24299c9f5f9ae7218209d7d81e72d4b7f072cd6629d11d4062371b2b0f838a757d8cfb80cd63e65c38de24ef7fcb16d6ed4f696cbb75a96242c393c94d5fd17c1fc9a40c5a7eacbb2bd5c3acc0af18b79d1e69e29c5cc9095fb7638f940b1e4f95f32705e6d81341b249d1e45197739dc1f7c1969a443f79d06c8b5c75666b7497033a546d579c865fb3f424143305c55b81cb8cbf0564fe3a9647c4295c6a0c94e56bf95e22ca47e96bc5f5e7289238403fa8c49d877790ed5de70948c383e78b1ad490ebdbc66c39ed667b115cfb512350a", 0xd4}, {&(0x7f00000006c0)="28220bde5e2a4fd57f40d51aa0248c2acb8bb313f198302a222022b3a7cc69cf5dfc84eef20d3e40569b2d208ba0f5aede88e73e66d7d5b2be1b7ed2db6bba9ada0bc3e059e61c8df8c4c19a5cc6e473e989831fe7d65f9248b6b891aea651582b33b15ef63f01335200ab59efadf4d1b96600d566762bb2e89fe191c0dd5cd4f7cffefb662328a634c8293c9e50a071391c13901ece8bf7dd03b8a7410452a5a867d6df957c8150ad750d8560c9a17c7df6f465def348307985158ae43103f501cdd61836ed995d512470615d227a2de7f6f0daf6cd4275e67b89e58d82953ce99237", 0xe3}, {&(0x7f00000007c0)="249831b513830ddcf5ae2e5806cc3538bb80babbd1254a9b2ebfd0f9226e3be506d88d7bc9aac7d9870f6661f11d28359a845616ba5028b2a9db6d8ed5bc2c7c62509263c95f538163db76f27712bcc68137c45c5cb074983863af0bca266e826db128e8d4e811476e060fe53ff8b1eba1ce6d76348fad357bdbb2be5f47be568673604e0a46a2c35810c9b5cf648e064330e041e7bbd9c388bf7eef9ac8b14ab3006eaae27b5ab6d70b4610f09c78e80a56f1b4d05612", 0xb7}, {&(0x7f0000000880)="453f3f8442cfc7c49e34dc88604dda910b6bf4b92d8d7932bd1c4a041c2c80fb12a1232da173c946483b81b0cba9d9eec1b38a325303f78be9caf6570086e747be7df16613ef0df35adfdbbb56ecf0167104b7d484a6d19bd20ed58f9c768038a5cb5fcf82fd8f2137032b04cb9171a88835f461b07d283634e333e56392c9de5e4a0b56996aca60241f651110be95d580ec24921b8aeeec741666c4eb9c59da5485c855825153b9753c0e09fa8356f5c972", 0xb2}, {&(0x7f0000000940)="20973c663a1ddf77b32a97281bc49e2300c1200e4391d5b43a5f466766d250dfef81a8938201b2120b93b50c4da3c171cd469acb0d62725ccf716748652d00a086fd721ced7dbde61550b1160af04a839575031ab34e2d1cf774d83cc85f275ba1610f7a57c58a2eb2a606c4bccaebf92ec1cb3268763ab110fe3a62137789a4cd26b2e52acc428d287ed1bec0", 0x8d}, {&(0x7f0000000a00)="7ca92c53120694a7a1f72063d10d0f359ee7ebf712871cbfa991987e48e44d5105f77f11df9335593df3fe2f9a303dc3ca2d08a64c8e1036cf8673755e4e2b4f4ada795ba5449008ddc0b1d44f240123dce0b1dcae05", 0x56}, {&(0x7f0000000a80)="fb7e68b7528549402320a1879973a0e14b87325b52fe8e3ed10e74466259a5294326eeebe1e48694f825b830e4e5b9ffc290f81938ecd3bd841737c994b9875d15cdd53d22fecd413f130c5de2553376e70aa884606088f2040bf728bed60b94322072128b9c830d38255af0d58e05551b60975602a2362464e3794e43fc6297d227979b101d7de215c15e849d684e87c26fbb932158f13c5fa10d1a244ffd39d07c29fcdb", 0xa5}, {&(0x7f0000000b40)="cd955cc7a527f86533c5e1af5c28d861d29be02468199695533d60a2564fdefd63851fd39be76a9a3a9c03720112dbcb37b59b5ce4af62da39059f53c7d2b18d11754328fc59b90fbe4827ff90a22e46d5c34351fc4416", 0x57}], 0x9}}, {{&(0x7f0000000c80)=@ll={0x11, 0x19, r9, 0x1, 0xa, 0x6, @broadcast}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000d00)="8b084b3d", 0x4}, {&(0x7f0000000d40)="34c90eaa6d56830f146ee02904cb871650604ee330ca0206a0f02322c337597bd2d3a7c5f781e8030dc72f26633bcd093cd50e8beb7b9f2ed82c07280eae73e9bb9b92905d4169d921d660d000d1bdf7a68a93dac675a595f0da32772cba07e5a2842e86232612b1be88c89709e4503814c51716", 0x74}], 0x2}}], 0x2, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0xa)
pipe(&(0x7f0000000080)={<r11=>0xffffffffffffffff})
tee(r10, r11, 0x1, 0x6) (async)
tee(r10, r11, 0x1, 0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0)
writev(r5, &(0x7f0000000300), 0x0) (async)
writev(r5, &(0x7f0000000300), 0x0)

2.486321983s ago: executing program 2 (id=4324):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250000000000000000000000000000000120010000000000000000000000000001000000004e220002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000003900)={0x0, 0xfffffffffffffda1, &(0x7f00000038c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100ebbc70b3a696d59f3a77a02fd000fb009f2575000000080001006e00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000003900)={0x0, 0xfffffffffffffda1, &(0x7f00000038c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100ebbc70b3a696d59f3a77a02fd000fb009f2575000000080001006e00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40808400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r12, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xaf5b, 0x5d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8d75, 0x17, 0x3, 0x0, 0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1135}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
r17 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r17, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5b3f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x90) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r17, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5b3f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x90)

1.959901733s ago: executing program 5 (id=4332):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.847954448s ago: executing program 5 (id=4334):
r0 = socket$netlink(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='\x1f7', 0x280100, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x1000008]}, {0x4b33, 0x9, 0x4, 0xb}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x3)

1.69576429s ago: executing program 4 (id=4337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0xe, &(0x7f0000000140), 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r6}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40)
recvmsg(r5, &(0x7f0000002cc0)={&(0x7f0000000080)=@can, 0x80, 0x0, 0x0, &(0x7f0000002c40)=""/112, 0x70}, 0x40012182)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x8004)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf255e00000008000300", @ANYRES32=r3, @ANYBLOB="5cf6bebcf219f41540aca66bdfe65544908bdced8eabe3b37f3285ac3aa718dbbfb5f7a154e9baaa86c202da2d964a1560a591f37cffeba816f6e9111c2826ac9a621213fb4a35d94acc5dbf165577f40f23686df897d75b22616939eae46e6d24c2bc4734ba547f9e377283a32849c43db1caf7dbee1811eb6472722ccb98473f7ff5320a761cff76d7cef32099252d48807706a1d9690fc3a1ccaabf9f33c1f59aaedff5d0162f4d78d12d3387c3a0f245f285bc2d9f449b6a7b35dc0a00000000ae9145a1ac1667efaf8829eeb11c8b20f392d3b8d3050a94457f217570c841959f8fa05a8c36f004977f0cc6a458c6ed4c063a38af65e35eb68ea67ab3528ca86cac6b5b5261622154a7a06e9f0b423b654e2eb8e063167d937d00"/299], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8080)
socket$inet_sctp(0x2, 0x1, 0x84)

1.608477429s ago: executing program 5 (id=4338):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4f23, @remote}, 0x10)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', r2, 0x7, 0x10, 0x1, 0x5d7, {{0x6, 0x4, 0x0, 0x2f, 0x18, 0x67, 0x0, 0xd, 0x29, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4}]}}}}})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "c697a38eb9c850c71e59b9fd051ac05b", "15bf6f6271b66ff3159ec80e0dc7452a", "35872f7452f169b2864c0915b87eefe1", "e66cf66ba261bf27247212691a83d34a"}}}, 0x4a)
listen(r3, 0xe0000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44}}}]}, 0x3c}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.600137703s ago: executing program 1 (id=4339):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20)
sendto$inet6(r0, &(0x7f0000000100)="5cb158", 0x3, 0xe0, &(0x7f0000000340)={0xa, 0x4e63, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e22, @remote}}, 0x7, 0x4, 0x10000, 0x8, 0xc0, 0x9, 0x1}, &(0x7f0000000240)=0x9c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa02080045000020400000001fe1e0000001a000e558000c907841090000"], 0x32)
ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000140)=0x10001, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050)

1.456085743s ago: executing program 2 (id=4340):
r0 = socket$inet(0x2, 0x3, 0x6)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x80000000, 0x98a1, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x6d, 0x29, 0x0, @private=0xa010100, @empty}}}})

1.455440334s ago: executing program 4 (id=4341):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x14, 0x29, 0x34, 0x5b0}}], 0x18}}], 0x1, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x1)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040))
sendmsg$AUDIT_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008090)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, 0xfffffffffffffffe, 0x98)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
accept4(r7, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
socket(0x1d, 0x2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040))
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x9e31b3e7ea4be928, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x82}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44008064)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x10, 0x7, 0x4, {{0x29, 0x4, 0x3, 0x1b, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0xb, 0xaa, [@multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xfffffffc}, {@empty, 0x401}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffff001}, {@remote}]}, @lsrr={0x83, 0x7, 0x68, [@private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x8, [{@rand_addr=0x64010102, 0x3}]}, @timestamp_prespec={0x44, 0x44, 0xf3, 0x3, 0xe, [{@rand_addr=0x64010102, 0x3}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@broadcast, 0xb3}, {@multicast2, 0x8}, {@multicast2, 0xb2}, {@loopback, 0x100}, {@multicast2, 0x7}]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}]}}}}})

1.454421124s ago: executing program 0 (id=4342):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}], 0x2c)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)

1.285593349s ago: executing program 0 (id=4343):
mmap(&(0x7f0000a76000/0x3000)=nil, 0x3000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap(&(0x7f0000c54000/0x4000)=nil, 0x4000, 0x1, 0xc3072, r0, 0xc3c2b000)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, r1, 0x0)
ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000000000))

1.216816081s ago: executing program 1 (id=4344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe5a}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x79b}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe5a}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x79b}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)={0x14, 0x17, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

1.093358416s ago: executing program 4 (id=4345):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x1a0, 0x1a0, 0xd0, 0x1a0, 0xd0, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'erspan0\x00', {}, {}, 0x62, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xd, 0xcf}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [0x0, 0xff000000], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}}, 0x20}}, 0x4080)

1.053797227s ago: executing program 0 (id=4346):
syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0)

920.336709ms ago: executing program 5 (id=4347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x52895}, [@IFLA_VFINFO_LIST={0x44, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80, 0xc6, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x282, 0x7f}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0xfffffffb}}]}]}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xb3}]}, 0x7c}}, 0x4041)

919.492663ms ago: executing program 1 (id=4348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x344, 0x3e, 0x200, 0x70bd2a, 0x25dfdbfd, {0xc}, [@generic="4ef78dcb05", @nested={0x14a, 0xa2, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x39}, @generic="d64781f30e14596d330efe8d64097cba30bcd686d70ed52dfee06a930d6b5b886e3b3685e80b4c9740defdd08be5587f845342b32f37d61b577e072120051129a759e4428b66eef809efa52ae2b8247588c8ea54bc9b490f091f6b4de6725152418fd4f5de02649cecff63a7dd28994ff6d2", @nested={0x4, 0x6}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="ab091f162cb10564adc912c40efeaa9039e508028d5a18b8a318105972a97523c6e64e9b1a31e31d3f909cfd407a9ed3125f032fcbb66d63d57c1137275681eefcf46f171c645f2c4019a0a2401f0d8886f3f6e737cc3e86ae786ba2f38cbe8c86ec142f7ffec256fb3c19b6bcaff1cb4dd676048cf8991aca69d9a516e2a7f39aa07bb69fee5e6c2f55c1944f43e7fb648a1c656668099b3c7e3059d437f498b1b0ab15af7ecfccdbbafd5889435c2d", @nested={0x4, 0x127}, @nested={0x4, 0xa3}]}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x8}, @nested={0x17f, 0x91, 0x0, 0x1, [@generic="ff5050a0a5ded615ccb3a4ad03a961f2f321fb3928fd8d122cfb8959af0b23c4c5bbd2f15bc042689269926961581f8498d929ea1de10b4d48286cea12a810ce825f9d81722d8274d6d83d1cede7cb26629866d972f18a63daef0a2215f94076487c367fe2a206aed4a7ceb644", @generic="aa544abf222da78b1b283aeb4819d0009ae9cc7a18521f6c2220552800e644dc3352cab854fd49c34e9147e8e8155c873014663614dd6b081683128522224749101fc6c2b61efaec63acd1999e3a75c6699c4d2df4fad510af79a546aab8e56d42c9ff14966760cf7e14c1bb2bdcc1c6ce52f815", @generic="6ff01b86a331751cfb64844b8f6e4f6b673f7aa48c60a51bac17409da65fa5de4796cd2947025061baaede4d212c8b36569a1ff658dd3a7f7d4a71291c592d0fb7ba85dfcbe416fa1bceb561fcd314e5b7f05b53e625fda12f8db84577d090325d8ed8fc61c8150dacbb81c2445e9ac6d16ba8fc6b56c9e969cc5318cd6c", @typed={0x8, 0xb0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, @generic="b6089c762793d1f6377d7c92ff9d24ac2a2bce6cfb9c713cda604bd1c186bc27bb8b5fdf1da378b2e71a4eab6907111e3bb8273c2a22e35e138c06ecf1a726c168bd51d31a6b7ba84e7c516c3105373fd28271"]}, 0x344}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94)

707.236786ms ago: executing program 0 (id=4349):
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x9e95c908073a4a8d, &(0x7f0000000040)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f00000010c0))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

706.554418ms ago: executing program 4 (id=4350):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000500), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e220000e8e57137f4baf7851d6b9b70361e6cdf2875542819de2df1ed1247e041fb7f42e9b1c190c330adb63e227dea612000b54e3994b56d72f4da"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB="68000000140001000000000000000000ff010000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000ffff"], 0x68}}, 0x0)
close(r3)
socket$packet(0x11, 0x2, 0x300)

657.627239ms ago: executing program 5 (id=4351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804)
socket(0x15, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4884)
r12 = socket$kcm(0x2, 0xa, 0x2)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r13, 0x29, 0x3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'geneve0\x00'})

637.941882ms ago: executing program 1 (id=4352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000040)="11432ae63248cde253012008ba0000", 0xf, 0x4008015, &(0x7f00000000c0)={0x11, 0x1, r3, 0x1, 0x7}, 0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newaddr={0x5c, 0x14, 0x400, 0x70bd28, 0x25dfdbff, {0xa, 0x2c, 0x40, 0x83, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x72a2}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7fffffff, 0x8, 0xdb85}}, @IFA_CACHEINFO={0x14, 0x6, {0xe, 0x1, 0xc, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8801}, 0x44000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$pppoe(0x18, 0x1, 0x0)
close(r7)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0xa17, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r8], &(0x7f0000000480)=""/250, 0x32, 0xfa, 0x1, 0x80000001}, 0x28)

451.51789ms ago: executing program 4 (id=4353):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080))
sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x20000081)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c)
r6 = socket$inet6(0xa, 0xa, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000027054080f5ff44000028000000000006907864010101ac1414aafffc4e22df390ce49530a360326518b3e7298c09fcfff188ab7465541ce5cf17161233d18630f7f99c33f06c24446495d37cbdb4b0a6a0ba32c740373d200632cb3faa6191d382636fd981cda6e1c7ae0a63fe466881ea3f9780e4b4bd1c044ce8f8e93b6e9c599af28baf4aaf4d8b709982eeffdb42d509ce4d6aa1d45a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000690780000"], 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @igmp={{0x16, 0x4, 0x1, 0x6, 0xa8, 0x67, 0x0, 0x7f, 0x2, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, {[@rr={0x7, 0xf, 0x77, [@multicast2, @multicast2, @local]}, @rr={0x7, 0x27, 0x67, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @remote, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}]}, @lsrr={0x83, 0x7, 0x7, [@private=0xa010102]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}, {0x12, 0x1, 0x0, @local, "8c3a7ff0849fb498e0b135b1f0763152bfbe7786b4e7c169691f3ef4d270ad8ad842d0c5bf5b9924ecf89f0a64818bf379fcf3f2c8edfb29589c629fb7ee3353c80f207ab1e4525e"}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x370, 0xa3e, 0x654, 0xf45]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r8, 0x1, 0x7}, 0x14)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@mcast2, 0x5, r8})

446.864952ms ago: executing program 0 (id=4354):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x26e1, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e929610faca2000000000000000000060000000000000010"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000006911b60000000000851000000200000085000000f6ff000495000000000000009500a505000000000cdc22a04b18d917abdee7c6f8ab2243474de1cfd29107bdff3b04e37cc9abd02c81a4a5e4e00e8330005926114651fb774045d7ed3cdc91096246cbb71f93ba0dae8166a24f05d6d0ec"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(r0)
socket$inet6(0xa, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

306.559767ms ago: executing program 1 (id=4355):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r7], 0xb)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={r7, 0x5, 0x5}, 0x8)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff6, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810)

231.498169ms ago: executing program 0 (id=4356):
r0 = socket$kcm(0x10, 0x7, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="61a000fe00000000691089000000000095000000000000007dac4d5c886ef8aaa1476f63d9196b01"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0x3aba54a3571d4071}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2629}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c864}, 0x4890)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x0)

184.174507ms ago: executing program 4 (id=4357):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltaction={0xf4, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30a}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x118}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f0000000200)='%pS    \x00', 0x10000, &(0x7f0000000400)={@_ha_fsid={[0xb, 0x1000]}, {0x3, 0x7, 0x3, 0x9}}, 0x7, &(0x7f0000000440), &(0x7f00000005c0)=0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000055003d0902000000fcdbdf25070000611340f2f56d00", @ANYRES32=r2], 0x18}}, 0x4090) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="530000c602"], 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'})
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08009f00060000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)

0s ago: executing program 1 (id=4358):
r0 = socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x8, 0x10}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', <r4=>0x0, 0x1, 0x1, 0xfffffff9, 0x7, {{0x6, 0x4, 0x1, 0x22, 0x18, 0x66, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@generic={0x7, 0x3, '('}]}}}}})
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r4, 0x10, 0x1, 0x6, 0x4, {{0xf, 0x4, 0x2, 0x1f, 0x3c, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, {[@end, @ssrr={0x89, 0x23, 0x53, [@remote, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @remote]}, @noop, @end]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x5, [@func={0xd, 0x0, 0x0, 0xc, 0x3}, @datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x591, 0x2}], "e5"}, @const={0x4, 0x0, 0x0, 0xa, 0x3}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000000480)=""/4096, 0x5d, 0x1000, 0x1, 0x0, 0x10000, @value=r5}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8a, 0x8a, 0x7, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x8}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0x0, 0x1}, {0x10}, {0x8, 0x4}, {0x8, 0x4}, {0x9}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @float={0xc, 0x0, 0x0, 0x10, 0x10}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xc8}], "1a86"}]}, {0x0, [0x2e, 0x6f, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000001680)=""/67, 0xab, 0x43, 0x0, 0x5}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x3, 0x6, 0x8, 0x28000, 0xffffffffffffffff, 0xfff, '\x00', r4, r3, 0x0, 0x2, 0x3, 0x4, @value=r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, &(0x7f0000000080)=""/12}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ae76f51d1c000000680001060000000000000000020000000400000004000400"], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

845'.
[  388.635291][T16419] veth1_vlan: entered promiscuous mode
[  388.740631][T16699] syzkaller0: entered promiscuous mode
[  388.750518][T16699] syzkaller0: entered allmulticast mode
[  388.924999][T10860] net_ratelimit: 62 callbacks suppressed
[  388.925016][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.939723][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.941225][ T8547] bond4: (slave geneve2): failed to get link speed/duplex
[  388.963782][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2850'.
[  388.977176][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2850'.
[  388.989503][T16419] veth0_macvtap: entered promiscuous mode
[  389.006844][T16419] veth1_macvtap: entered promiscuous mode
[  389.031633][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.066924][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.098469][T16419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.110383][ T3338] bond4: (slave geneve2): failed to get link speed/duplex
[  389.127085][T16719] netlink: 'syz.2.2852': attribute type 1 has an invalid length.
[  389.423903][ T8547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.452012][ T8547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.504110][T10860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.538024][T10860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.569556][T10860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.597321][T10860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.650042][T16733] netlink: 'syz.2.2855': attribute type 10 has an invalid length.
[  389.706995][T16733] veth0_to_bond: entered allmulticast mode
[  389.735013][T16733] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  389.771956][T10860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.797741][T10860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.834465][ T3338] bond4: (slave geneve2): failed to get link speed/duplex
[  389.843609][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.852337][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.894617][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.903614][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.981651][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  390.291953][ T9489] IPVS: starting estimator thread 0...
[  390.421203][T16762] IPVS: using max 30 ests per chain, 72000 per kthread
[  390.539346][T16767] netlink: 'syz.0.2864': attribute type 1 has an invalid length.
[  390.558412][T16770] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2865'.
[  390.605979][T16767] ip_vti0: Master is either lo or non-ether device
[  390.689388][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  390.704736][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  390.727758][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  390.746102][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  390.755939][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  390.908778][T16780] syzkaller0: entered promiscuous mode
[  390.929544][T16780] syzkaller0: entered allmulticast mode
[  391.275590][T16793] netlink: 'syz.5.2869': attribute type 1 has an invalid length.
[  391.442797][T16793] bond11: entered promiscuous mode
[  391.448482][T16793] 8021q: adding VLAN 0 to HW filter on device bond11
[  391.612783][T16793] bond11: (slave bridge8): making interface the new active one
[  391.631328][T16793] bridge8: entered promiscuous mode
[  391.676813][T16793] bond11: (slave bridge8): Enslaving as an active interface with an up link
[  391.724703][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.735702][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  391.764281][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  391.804555][T16802] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2871'.
[  391.856780][T16776] virt_wifi0 speed is unknown, defaulting to 1000
[  391.988527][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.003809][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.021777][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  392.220556][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.240043][T16830] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2880'.
[  392.249013][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.264530][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  392.443764][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.462862][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.473295][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  392.769038][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2884'.
[  392.813370][T16858] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2886'.
[  392.842881][T16858] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2886'.
[  392.862013][ T5631] Bluetooth: hci0: command tx timeout
[  392.895041][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'.
[  393.062963][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'.
[  393.072038][T16863] hsr_slave_0: left promiscuous mode
[  393.082314][T16863] hsr_slave_1: left promiscuous mode
[  393.246419][T16875] syzkaller0: entered promiscuous mode
[  393.268487][T16875] syzkaller0: entered allmulticast mode
[  393.526020][   T12] bridge_slave_1: left allmulticast mode
[  393.532429][   T12] bridge_slave_1: left promiscuous mode
[  393.540552][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.615968][   T12] dvmrp8: left allmulticast mode
[  394.013535][T16900] "syz.4.2893" (16900) uses obsolete ecb(arc4) skcipher
[  394.235877][   T12] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  394.503274][T13005] net_ratelimit: 48 callbacks suppressed
[  394.503292][T13005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.517428][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.571652][T13005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.580009][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.614444][T13005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.622934][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.635172][   T12] bond7 (unregistering): (slave gretap2): Releasing active interface
[  394.675563][   T12] bond13 (unregistering): (slave geneve3): Releasing active interface
[  394.747134][   T12] bond4 (unregistering): (slave bridge5): Releasing backup interface
[  394.760895][   T12] bridge5 (unregistering): left promiscuous mode
[  394.767538][   T12] bridge5 (unregistering): left allmulticast mode
[  394.798792][   T12] bond16 (unregistering): (slave bridge8): Releasing active interface
[  394.807126][   T12] bridge8 (unregistering): left promiscuous mode
[  394.817865][   T12] bridge8 (unregistering): left allmulticast mode
[  394.835979][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  394.847451][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.858427][   T12] bond0 (unregistering): Released all slaves
[  394.872647][   T12] bond1 (unregistering): Released all slaves
[  394.890304][   T12] bond2 (unregistering): Released all slaves
[  394.908829][   T12] bond3 (unregistering): Released all slaves
[  394.933360][   T12] bond4 (unregistering): Released all slaves
[  394.941325][ T5631] Bluetooth: hci0: command tx timeout
[  394.965886][   T12] bond5 (unregistering): Released all slaves
[  394.984108][   T12] bond6 (unregistering): Released all slaves
[  394.997729][   T12] bond7 (unregistering): Released all slaves
[  395.010732][   T12] bond8 (unregistering): Released all slaves
[  395.039946][   T12] bond9 (unregistering): Released all slaves
[  395.055040][   T12] bond10 (unregistering): Released all slaves
[  395.068353][   T12] bond11 (unregistering): Released all slaves
[  395.094319][   T12] bond12 (unregistering): Released all slaves
[  395.118191][   T12] bond13 (unregistering): Released all slaves
[  395.136972][   T12] bond14 (unregistering): (slave veth7): Releasing active interface
[  395.148032][   T12] bond14 (unregistering): (slave dummy0): Releasing active interface
[  395.163295][   T12] bond14 (unregistering): Released all slaves
[  395.178766][   T12] bond15 (unregistering): Released all slaves
[  395.208251][   T12] bond16 (unregistering): Released all slaves
[  395.305299][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  395.400911][T16776] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.434227][T16776] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.457018][T16776] bridge_slave_0: entered allmulticast mode
[  395.488047][T16776] bridge_slave_0: entered promiscuous mode
[  395.533541][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'.
[  395.654526][T10860] bond4: (slave geneve2): failed to get link speed/duplex
[  395.682028][   T12] tipc: Disabling bearer <ib:macvtap0>
[  395.699665][   T12] tipc: Left network mode
[  395.699840][T16928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.745781][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.754151][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.767289][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.790179][T16928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.857061][T16933] ip_vti0: entered promiscuous mode
[  395.885007][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'.
[  395.943831][T16776] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.970769][T16776] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.982859][T16776] bridge_slave_1: entered allmulticast mode
[  395.990917][T16776] bridge_slave_1: entered promiscuous mode
[  396.273217][T16955] netlink: 'syz.4.2902': attribute type 11 has an invalid length.
[  396.289711][T16776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.303053][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'.
[  396.327951][T16776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.369803][T16960] netlink: 'syz.2.2905': attribute type 4 has an invalid length.
[  396.498946][T16955] bond15: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  396.546909][T16955] bond15 (unregistering): Released all slaves
[  396.681550][T16776] team0: Port device team_slave_0 added
[  396.713872][T16776] team0: Port device team_slave_1 added
[  396.992375][T16776] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.016654][T16776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.056218][ T5631] Bluetooth: hci0: command tx timeout
[  397.064679][T16776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.580029][T16776] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.599843][T16776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.643647][T16776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.946145][T16776] hsr_slave_0: entered promiscuous mode
[  397.974401][T16776] hsr_slave_1: entered promiscuous mode
[  397.996745][T16776] debugfs: 'hsr0' already exists in 'hsr'
[  398.010149][T16776] Cannot create hsr debugfs directory
[  398.063663][T17017] dvmrp1: entered allmulticast mode
[  398.294721][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  398.353191][   T12] hsr_slave_0: left promiscuous mode
[  398.379422][   T12] hsr_slave_1: left promiscuous mode
[  398.406045][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.435193][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.494214][   T12] veth0_macvtap: left promiscuous mode
[  398.939541][T17041] __nla_validate_parse: 3 callbacks suppressed
[  398.939560][T17041] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2922'.
[  399.101219][ T5631] Bluetooth: hci0: command tx timeout
[  399.515066][T17050] IPVS: Scheduler module ip_vs_sip not found
[  399.702206][ T3312] net_ratelimit: 13 callbacks suppressed
[  399.702224][ T3312] bond4: (slave geneve2): failed to get link speed/duplex
[  399.906990][ T3312] bond4: (slave geneve2): failed to get link speed/duplex
[  399.921520][T17072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2928'.
[  399.983717][T17073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2928'.
[  400.044373][T17072] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.164650][   T12] IPVS: stop unused estimator thread 0...
[  400.403431][ T3338] bond4: (slave geneve2): failed to get link speed/duplex
[  400.426546][T17093] netlink: 'syz.0.2932': attribute type 1 has an invalid length.
[  400.489446][T17085] syzkaller0: entered promiscuous mode
[  400.495570][T17085] syzkaller0: entered allmulticast mode
[  400.523954][T17098] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2931'.
[  400.683032][T17089] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2931'.
[  400.827019][T17106] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  400.909987][T17106] bridge0: port 3(dummy0) entered blocking state
[  400.921798][T17106] bridge0: port 3(dummy0) entered disabled state
[  400.931545][T17106] dummy0: entered allmulticast mode
[  400.976142][T17106] dummy0: entered promiscuous mode
[  400.998606][T17106] bridge0: port 3(dummy0) entered blocking state
[  401.005152][T17106] bridge0: port 3(dummy0) entered forwarding state
[  401.057619][   T36] bond4: (slave geneve2): failed to get link speed/duplex
[  401.239564][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2938'.
[  401.291326][  T230] bond4: (slave geneve2): failed to get link speed/duplex
[  401.412274][   T12] bond4: (slave geneve2): failed to get link speed/duplex
[  401.530244][T17141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2940'.
[  401.596838][   T36] bond4: (slave geneve2): failed to get link speed/duplex
[  401.623518][T16776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  401.703973][T16776] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  401.736732][T16776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  401.786128][T17154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  401.793426][T17154] IPv6: NLM_F_CREATE should be set when creating new route
[  401.797248][T16776] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  401.800688][T17154] IPv6: NLM_F_CREATE should be set when creating new route
[  401.923667][T16776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  401.979926][T16776] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  402.160387][T17154] bond17: option mode: invalid value (10)
[  402.189650][T17154] bond17 (unregistering): Released all slaves
[  402.303968][ T3312] bond4: (slave geneve2): failed to get link speed/duplex
[  402.314663][T16776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  402.338043][T16776] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  402.378727][T17166] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.459536][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'.
[  402.660618][T17190] veth9: entered allmulticast mode
[  402.711363][   T36] bond4: (slave geneve2): failed to get link speed/duplex
[  402.826769][T16776] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.866586][ T3312] bond4: (slave geneve2): failed to get link speed/duplex
[  403.025394][T16776] 8021q: adding VLAN 0 to HW filter on device team0
[  403.108112][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.115329][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.185147][  T230] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.192341][  T230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.274492][T17217] x_tables: duplicate underflow at hook 2
[  403.400127][T17224] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  403.470972][T17224] netlink: 'syz.4.2958': attribute type 1 has an invalid length.
[  403.529482][T17229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2959'.
[  403.638421][T17224] bond15: entered promiscuous mode
[  403.644464][T17224] 8021q: adding VLAN 0 to HW filter on device bond15
[  403.690566][T17242] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  403.703402][T17240] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  403.796033][T17224] bond15: (slave bridge5): making interface the new active one
[  403.829626][T17224] bridge5: entered promiscuous mode
[  403.862609][T17224] bond15: (slave bridge5): Enslaving as an active interface with an up link
[  403.892615][T17246] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2962'.
[  403.978171][T17251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.146045][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'.
[  404.183956][T17251] syzkaller0: entered promiscuous mode
[  404.189529][T17251] syzkaller0: entered allmulticast mode
[  404.196870][T17251] tipc: Resetting bearer <eth:syzkaller0>
[  404.210540][T17262] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.217800][T17262] bridge0: port 1(bridge_slave_0) entered listening state
[  404.228291][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'.
[  404.229989][T17262] bridge0: entered allmulticast mode
[  404.250700][T17249] tipc: Resetting bearer <eth:syzkaller0>
[  404.269053][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'.
[  406.438065][T17249] tipc: Disabling bearer <eth:syzkaller0>
[  406.456482][T17264] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  406.465709][T17264] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2965'.
[  406.573126][   T36] net_ratelimit: 7 callbacks suppressed
[  406.573145][   T36] bond4: (slave geneve2): failed to get link speed/duplex
[  406.744456][   T12] bond4: (slave geneve2): failed to get link speed/duplex
[  406.756349][T17292] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  406.762194][T17298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2973'.
[  406.923361][T10860] bond4: (slave geneve2): failed to get link speed/duplex
[  407.115879][  T230] bond4: (slave geneve2): failed to get link speed/duplex
[  407.144944][T17313] netlink: 'syz.0.2976': attribute type 2 has an invalid length.
[  407.190934][T17316] xt_socket: unknown flags 0x50
[  407.195323][T17313] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2976'.
[  407.254562][T17320] netlink: 'syz.4.2978': attribute type 1 has an invalid length.
[  407.286829][T17320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2978'.
[  407.361688][T10860] bond4: (slave geneve2): failed to get link speed/duplex
[  407.492954][T10860] bond4: (slave geneve2): failed to get link speed/duplex
[  407.544143][T16776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.596976][T17337] netlink: 'syz.4.2981': attribute type 12 has an invalid length.
[  407.671410][T10860] bond4: (slave geneve2): failed to get link speed/duplex
[  407.787318][T17352] openvswitch: netlink: Duplicate key (type 6).
[  407.794712][T17337] bond16: option primary_reselect: invalid value (255)
[  407.819840][T17354] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2980'.
[  407.847631][T17354] xt_policy: neither incoming nor outgoing policy selected
[  407.856711][T17337] bond16 (unregistering): Released all slaves
[  408.226065][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2986'.
[  408.242707][   T36] bond4: (slave geneve2): failed to get link speed/duplex
[  408.267075][T16776] veth0_vlan: entered promiscuous mode
[  408.476992][T16776] veth1_vlan: entered promiscuous mode
[  408.506558][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'.
[  408.643304][T17389] netlink: 'syz.5.2989': attribute type 21 has an invalid length.
[  408.738415][T17385] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  408.810233][T16776] veth0_macvtap: entered promiscuous mode
[  408.839217][T16776] veth1_macvtap: entered promiscuous mode
[  408.904752][T16776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.950869][T16776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.514912][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.555400][T17424] __nla_validate_parse: 3 callbacks suppressed
[  409.555417][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'.
[  409.609896][T17415] bond2: (slave lo): Releasing backup interface
[  409.656245][T17415] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  409.765907][T17415] batman_adv: batadv0: Interface deactivated: dummy0
[  409.796052][T17415] batman_adv: batadv0: Removing interface: dummy0
[  409.809913][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2998'.
[  409.835153][T17415] bridge_slave_0: left allmulticast mode
[  409.840985][T17415] bridge_slave_0: left promiscuous mode
[  409.847805][T17415] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.862977][T17415] bridge_slave_1: left promiscuous mode
[  409.881386][T17415] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.896663][T17415] bond0: (slave bond_slave_0): Releasing backup interface
[  409.935877][T17415] bond_slave_0: left allmulticast mode
[  409.967506][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.999347][T17415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.064235][T17415] bond4: (slave geneve2): Removing an active aggregator
[  410.079020][T17415] bond4: (slave geneve2): Releasing backup interface
[  410.094608][ T9490] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  410.113637][ T9490] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  410.146606][T17415] bond8: (slave veth3): Releasing active interface
[  410.178570][T17415] bond13: (slave bridge4): Releasing active interface
[  410.205984][T17415] bond15: (slave bridge5): Releasing backup interface
[  410.214518][T17415] bridge5: left promiscuous mode
[  410.294574][T17424] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  410.489895][T13005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.498601][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.545444][T13005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.602855][ T8547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.647683][ T8547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.718841][T17463] netlink: 'syz.5.3003': attribute type 12 has an invalid length.
[  410.727682][T17464] netlink: 'syz.2.3002': attribute type 4 has an invalid length.
[  410.733733][T17463] netlink: 'syz.5.3003': attribute type 29 has an invalid length.
[  410.756495][T17463] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3003'.
[  410.766792][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3001'.
[  410.769454][T17463] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3003'.
[  410.835382][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3001'.
[  410.862744][ T9490] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  410.885995][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.920303][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.102034][ T5752] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  411.111935][T17475] syzkaller0: entered promiscuous mode
[  411.131273][T17475] syzkaller0: entered allmulticast mode
[  411.179237][T17487] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3007'.
[  411.303626][T17491] netlink: 'syz.4.3008': attribute type 1 has an invalid length.
[  411.337002][T17491] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3008'.
[  411.749166][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'.
[  411.787117][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'.
[  411.804851][T17509] unsupported nla_type 216
[  412.097560][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  412.110369][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  412.123640][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  412.135293][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  412.148408][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  412.253712][T17518] netlink: 'syz.4.3016': attribute type 10 has an invalid length.
[  412.724033][T17541] net_ratelimit: 3 callbacks suppressed
[  412.724053][T17541] openvswitch: netlink: Flow actions attr not present in new flow.
[  413.030101][T17550] netlink: 'syz.1.3024': attribute type 1 has an invalid length.
[  413.065288][T17550] netlink: 'syz.1.3024': attribute type 2 has an invalid length.
[  413.104961][T17550] netlink: 'syz.1.3024': attribute type 1 has an invalid length.
[  413.134925][T17550] netlink: 'syz.1.3024': attribute type 2 has an invalid length.
[  413.167895][T17559] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  413.418368][T17568] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  413.680162][T17521] virt_wifi0 speed is unknown, defaulting to 1000
[  414.769866][T17630] __nla_validate_parse: 2 callbacks suppressed
[  414.769883][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3041'.
[  414.909084][T17602] netlink: 'syz.4.3035': attribute type 10 has an invalid length.
[  415.004798][T17639] netlink: 'syz.1.3044': attribute type 8 has an invalid length.
[  415.019940][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'.
[  417.278866][T17639] bond0: entered promiscuous mode
[  417.284093][T17639] bond_slave_0: entered promiscuous mode
[  417.289946][T17639] bond_slave_1: entered promiscuous mode
[  417.298204][T17639] gretap0: entered promiscuous mode
[  417.305470][T17639] team0: entered promiscuous mode
[  417.310537][T17639] team_slave_0: entered promiscuous mode
[  417.317529][T17639] team_slave_1: entered promiscuous mode
[  417.325826][T17639] hsr1: entered promiscuous mode
[  417.584787][T17683] xt_hashlimit: size too large, truncated to 1048576
[  417.646555][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'.
[  417.794882][T17695] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3051'.
[  417.817907][T17521] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.837784][T17521] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.858091][T17521] bridge_slave_0: entered allmulticast mode
[  417.878135][T17521] bridge_slave_0: entered promiscuous mode
[  417.929243][T17690] vlan3: entered allmulticast mode
[  417.939194][T17690] bridge9: entered allmulticast mode
[  417.959996][T17521] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.978087][T17521] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.989325][T17521] bridge_slave_1: entered allmulticast mode
[  418.012551][T17521] bridge_slave_1: entered promiscuous mode
[  418.173983][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.239508][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.504889][T17521] team0: Port device team_slave_0 added
[  418.590756][T17521] team0: Port device team_slave_1 added
[  418.733201][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.752068][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.823434][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.885122][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.905009][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.980863][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.088973][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3067'.
[  419.111382][T17754] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3066'.
[  419.194395][T17521] hsr_slave_0: entered promiscuous mode
[  419.213006][T17521] hsr_slave_1: entered promiscuous mode
[  419.421571][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  419.780607][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'.
[  419.835933][T17793] batadv_slave_0: entered allmulticast mode
[  420.424193][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'.
[  420.623641][T17521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.676948][T17521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.714425][T17521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  420.958811][T17521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.012226][T17521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.033314][T17521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  421.258953][T17521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.317736][T17521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.341624][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  421.365667][T17869] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3090'.
[  421.376730][T17521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  421.406643][T17869] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3090'.
[  421.783854][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'.
[  421.812716][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'.
[  421.976051][T17521] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  422.009905][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  422.038016][T17521] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  422.083030][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  422.119544][T17521] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  422.139405][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  422.167844][T17521] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  422.217377][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  422.298335][T17910] netlink: 'syz.1.3102': attribute type 22 has an invalid length.
[  422.314812][T17906] syzkaller1: entered allmulticast mode
[  422.322129][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'.
[  422.340783][T17906] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3103'.
[  422.395579][T17910] netlink: 'syz.1.3102': attribute type 22 has an invalid length.
[  422.402556][ T3338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.407972][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'.
[  422.453725][ T3338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.466938][ T3338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.702425][ T3312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.807911][T17521] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.830638][T17937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3107'.
[  422.940516][T17521] 8021q: adding VLAN 0 to HW filter on device team0
[  422.982199][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.989366][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.040158][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.047325][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.075535][T17945] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  423.340399][T17955] bridge1: entered promiscuous mode
[  423.365230][T17955] bridge1: entered allmulticast mode
[  423.400773][T17955] team0: Port device bridge1 added
[  423.532696][T17969] xt_ipcomp: unknown flags 1D
[  423.686485][T17975] netlink: 'syz.1.3117': attribute type 1 has an invalid length.
[  423.730172][T17977] netlink: 'syz.0.3118': attribute type 12 has an invalid length.
[  423.753138][T17977] netlink: 'syz.0.3118': attribute type 29 has an invalid length.
[  423.772884][T17977] netlink: 'syz.0.3118': attribute type 2 has an invalid length.
[  423.810127][T17986] xt_hashlimit: size too large, truncated to 1048576
[  423.910795][T17979] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.921636][T17979] bond1: (slave bond2): making interface the new active one
[  423.929310][T17979] bond1: (slave bond2): Enslaving as an active interface with an up link
[  423.954089][T17983] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  424.210292][T17521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.403093][T17521] veth0_vlan: entered promiscuous mode
[  424.456677][T17521] veth1_vlan: entered promiscuous mode
[  424.570587][T17521] veth0_macvtap: entered promiscuous mode
[  424.625908][T17521] veth1_macvtap: entered promiscuous mode
[  424.676600][T17521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.720801][T17521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.867127][T18018] vlan2: entered allmulticast mode
[  424.910738][T18018] bridge2: entered allmulticast mode
[  424.940089][T18029] bridge2: port 1(erspan0) entered blocking state
[  424.947746][T18029] bridge2: port 1(erspan0) entered disabled state
[  424.955185][T18029] erspan0: entered allmulticast mode
[  424.970918][T18029] erspan0: entered promiscuous mode
[  424.980218][T18029] bridge2: port 1(erspan0) entered blocking state
[  424.986823][T18029] bridge2: port 1(erspan0) entered forwarding state
[  425.109799][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.130588][T18034] __nla_validate_parse: 6 callbacks suppressed
[  425.130603][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'.
[  425.150283][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.193625][ T8553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.203087][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3129'.
[  425.238352][ T8553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.359940][T13005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.398398][T13005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.506514][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.527340][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.543705][T18051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.585639][T18052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.732658][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3136'.
[  425.842352][T18060] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  425.936366][T18060] bond1 (unregistering): Released all slaves
[  426.983094][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'.
[  427.011822][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  427.027522][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  427.036075][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  427.047828][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  427.056556][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  427.357815][T18142] tipc: Started in network mode
[  427.393171][T18142] tipc: Node identity 2003, cluster identity 4711
[  427.419881][T18142] tipc: Node number set to 8195
[  427.488004][T18150] netlink: 'syz.5.3150': attribute type 23 has an invalid length.
[  427.999061][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'.
[  428.045556][T18175] netlink: 'syz.1.3155': attribute type 7 has an invalid length.
[  428.096020][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'.
[  428.253738][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'.
[  428.273475][T18175] netlink: 'syz.1.3155': attribute type 7 has an invalid length.
[  428.296983][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'.
[  428.318502][T18127] virt_wifi0 speed is unknown, defaulting to 1000
[  428.349526][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'.
[  428.625734][T18199] netlink: 'syz.2.3162': attribute type 21 has an invalid length.
[  428.683614][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'.
[  428.873902][T18212] tipc: Trying to set illegal importance in message
[  428.902530][T18212] tipc: Trying to set illegal importance in message
[  428.909750][T18212] tipc: Trying to set illegal importance in message
[  428.916985][T18212] tipc: Trying to set illegal importance in message
[  428.923967][T18212] tipc: Trying to set illegal importance in message
[  428.930593][T18212] tipc: Trying to set illegal importance in message
[  428.939959][T18212] tipc: Trying to set illegal importance in message
[  428.947313][T18212] tipc: Trying to set illegal importance in message
[  428.956040][T18212] tipc: Trying to set illegal importance in message
[  429.035848][T18215] vlan0: entered promiscuous mode
[  429.150753][T18227] netlink: 'syz.0.3170': attribute type 1 has an invalid length.
[  429.181193][   T50] Bluetooth: hci2: command tx timeout
[  429.880174][T18127] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.909298][T18127] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.944282][T18127] bridge_slave_0: entered allmulticast mode
[  429.970283][T18127] bridge_slave_0: entered promiscuous mode
[  430.005514][T18127] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.021299][T18127] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.032076][T18127] bridge_slave_1: entered allmulticast mode
[  430.040085][T18127] bridge_slave_1: entered promiscuous mode
[  430.176992][ T5752] IPVS: starting estimator thread 0...
[  430.189615][T18274] syzkaller0: entered promiscuous mode
[  430.198393][T18274] syzkaller0: entered allmulticast mode
[  430.244616][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.273170][T18283] IPVS: using max 31 ests per chain, 74400 per kthread
[  430.306977][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.615011][T18127] team0: Port device team_slave_0 added
[  430.683630][T18127] team0: Port device team_slave_1 added
[  430.831462][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.848169][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.877839][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.888980][T18304] Cannot find set identified by id 0 to match
[  430.919683][T18304] vcan1: entered promiscuous mode
[  430.927526][T18304] vcan1: entered allmulticast mode
[  430.962537][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.969583][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056b5e800: rx timeout, send abort
[  430.979111][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.008957][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.169243][T18315] __nla_validate_parse: 1 callbacks suppressed
[  431.169260][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3195'.
[  431.194335][T18127] hsr_slave_0: entered promiscuous mode
[  431.204666][T18127] hsr_slave_1: entered promiscuous mode
[  431.216940][T18127] debugfs: 'hsr0' already exists in 'hsr'
[  431.226076][T18127] Cannot create hsr debugfs directory
[  431.272478][   T50] Bluetooth: hci2: command tx timeout
[  431.296511][T18317] IPVS: Unknown mcast interface: rose0
[  431.463066][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807b686c00: rx timeout, send abort
[  431.471491][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056b5e800: abort rx timeout. Force session deactivation
[  431.944972][T18127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.971333][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807b686c00: abort rx timeout. Force session deactivation
[  431.971793][T18127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.167380][ T5708] IPVS: starting estimator thread 0...
[  432.185704][T18350] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.189478][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3208'.
[  432.212248][T18350] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.223472][T18350] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  432.262705][T18354] IPVS: using max 29 ests per chain, 69600 per kthread
[  432.450416][T18127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.453544][T18370] netlink: 'syz.0.3212': attribute type 1 has an invalid length.
[  432.472603][T18127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.687037][T18370] bond1: entered promiscuous mode
[  432.709794][T18370] 8021q: adding VLAN 0 to HW filter on device bond1
[  432.780962][T18127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.804734][T18127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.877040][T18384] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  432.879539][T18373] macvtap1: entered allmulticast mode
[  432.992040][T18127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.003370][T18127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.089100][T18378] macvtap2: entered allmulticast mode
[  433.134851][T18394] syz.2.3218: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  433.189440][T18394] CPU: 0 UID: 0 PID: 18394 Comm: syz.2.3218 Not tainted syzkaller #0 PREEMPT(full) 
[  433.189468][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  433.189489][T18394] Call Trace:
[  433.189564][T18394]  <TASK>
[  433.189633][T18394]  dump_stack_lvl+0xe8/0x150
[  433.189766][T18394]  warn_alloc+0x24c/0x270
[  433.189816][T18394]  ? stack_depot_save_flags+0x33/0x800
[  433.189947][T18394]  ? __pfx_warn_alloc+0x10/0x10
[  433.189974][T18394]  ? kasan_save_track+0x3e/0x80
[  433.190002][T18394]  ? __kasan_kmalloc+0x93/0xb0
[  433.190029][T18394]  ? xsk_setsockopt+0x52a/0x960
[  433.190112][T18394]  ? do_sock_setsockopt+0x17c/0x1b0
[  433.190183][T18394]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  433.190203][T18394]  ? do_syscall_64+0x174/0x580
[  433.190296][T18394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.190340][T18394]  __vmalloc_node_range_noprof+0x12c/0x1730
[  433.190395][T18394]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  433.190425][T18394]  ? __kasan_kmalloc+0x93/0xb0
[  433.190453][T18394]  ? __kmalloc_cache_noprof+0x32d/0x660
[  433.190485][T18394]  ? __kmalloc_cache_noprof+0x150/0x660
[  433.190513][T18394]  vmalloc_user_noprof+0xad/0xe0
[  433.190539][T18394]  ? xskq_create+0xbf/0x170
[  433.190561][T18394]  xskq_create+0xbf/0x170
[  433.190586][T18394]  xsk_init_queue+0x8a/0xe0
[  433.190609][T18394]  xsk_setsockopt+0x52a/0x960
[  433.190628][T18394]  ? __fget_files+0x2a/0x420
[  433.190670][T18394]  ? __pfx_xsk_setsockopt+0x10/0x10
[  433.190690][T18394]  ? __pfx_aa_sk_perm+0x10/0x10
[  433.190765][T18394]  ? aa_sock_opt_perm+0xff/0x1a0
[  433.190815][T18394]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  433.190863][T18394]  ? __pfx_xsk_setsockopt+0x10/0x10
[  433.190886][T18394]  do_sock_setsockopt+0x17c/0x1b0
[  433.190913][T18394]  __x64_sys_setsockopt+0x13d/0x1b0
[  433.190938][T18394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.190959][T18394]  do_syscall_64+0x174/0x580
[  433.190980][T18394]  ? trace_irq_disable+0x3b/0x140
[  433.191019][T18394]  ? clear_bhb_loop+0x40/0x90
[  433.191043][T18394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.191061][T18394] RIP: 0033:0x7fc83059e019
[  433.191109][T18394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.191126][T18394] RSP: 002b:00007fc8313e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  433.191182][T18394] RAX: ffffffffffffffda RBX: 00007fc830825fa0 RCX: 00007fc83059e019
[  433.191198][T18394] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  433.191209][T18394] RBP: 00007fc83063500c R08: 0000000000000004 R09: 0000000000000000
[  433.191221][T18394] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.191234][T18394] R13: 00007fc830826038 R14: 00007fc830825fa0 R15: 00007ffc0dbf2038
[  433.191265][T18394]  </TASK>
[  433.531785][   T50] Bluetooth: hci2: command tx timeout
[  433.557935][T18394] Mem-Info:
[  433.566055][T18394] active_anon:6264 inactive_anon:0 isolated_anon:0
[  433.566055][T18394]  active_file:0 inactive_file:42970 isolated_file:0
[  433.566055][T18394]  unevictable:768 dirty:81 writeback:0
[  433.566055][T18394]  slab_reclaimable:11587 slab_unreclaimable:114863
[  433.566055][T18394]  mapped:34503 shmem:1321 pagetables:1448
[  433.566055][T18394]  sec_pagetables:0 bounce:0
[  433.566055][T18394]  kernel_misc_reclaimable:0
[  433.566055][T18394]  free:1292554 free_pcp:10140 free_cma:0
[  433.613596][T18396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3218'.
[  433.613640][T18396] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3218'.
[  433.613657][T18396] netlink: 'syz.2.3218': attribute type 6 has an invalid length.
[  433.613679][T18396] netlink: 'syz.2.3218': attribute type 5 has an invalid length.
[  433.613692][T18396] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3218'.
[  433.614519][T18396] netlink: 'syz.2.3218': attribute type 15 has an invalid length.
[  433.623607][T18394] Node 0 active_anon:25056kB inactive_anon:0kB active_file:0kB inactive_file:171672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138012kB dirty:320kB writeback:0kB shmem:3748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16064kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  433.729540][T18394] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  433.815071][T18394] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  433.816317][T18127] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  433.845866][T18394] lowmem_reserve[]: 0 2488 2489 2489 2489
[  433.845917][T18394] Node 0 DMA32 free:1221616kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25188kB inactive_anon:0kB active_file:0kB inactive_file:171680kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:39800kB local_pcp:20680kB free_cma:0kB
[  433.845974][T18394] lowmem_reserve[]: 0 0 0 0 0
[  433.846013][T18394] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  433.846066][T18394] lowmem_reserve[]: 0 0 0 0 0
[  433.846102][T18394] Node 1 Normal free:3933160kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:440kB free_cma:0kB
[  433.846160][T18394] lowmem_reserve[]: 0 0 0 0 0
[  434.019330][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  434.029122][T18394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  434.044942][T18127] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  434.067308][T18419] netlink: 'syz.1.3222': attribute type 10 has an invalid length.
[  434.085098][T18420] netlink: 'syz.1.3222': attribute type 10 has an invalid length.
[  434.088701][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.093424][T18394] Node 0 DMA32: 480*4kB (UME) 62*8kB (UM) 2*16kB (UE) 3*32kB (UME) 1*64kB (U) 58*128kB (UM) 47*256kB (UME) 12*512kB (UM) 15*1024kB (UME) 7*2048kB (UM) 284*4096kB (UM) = 1221168kB
[  434.115286][T18127] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  434.133471][T18419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3222'.
[  434.137537][T18420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3222'.
[  434.156331][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.166954][T18127] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  434.175892][T18394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  434.193993][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.204333][T18394] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3933212kB
[  434.222974][T18394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  434.230885][T18420] geneve1: entered promiscuous mode
[  434.233089][T18394] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  434.247608][T18394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  434.259351][T18394] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  434.278322][T18394] 44264 total pagecache pages
[  434.282847][T18420] team0: Port device geneve1 added
[  434.283775][T18394] 0 pages in swap cache
[  434.334219][T18394] Free swap  = 124996kB
[  434.350341][T18394] Total swap = 124996kB
[  434.417790][T18394] 2097051 pages RAM
[  434.434460][T18394] 0 pages HighMem/MovableOnly
[  434.454566][T18394] 428238 pages reserved
[  434.486968][T18394] 0 pages cma reserved
[  434.798917][T18127] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.937994][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'.
[  434.965148][T18448] 8021q: adding VLAN 0 to HW filter on device bond3
[  435.000816][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'.
[  435.070025][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  435.098905][T18127] 8021q: adding VLAN 0 to HW filter on device team0
[  435.173992][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.181202][ T8551] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.194588][T18462] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3231'.
[  435.259929][T10856] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.267195][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.581854][ T5631] Bluetooth: hci2: command tx timeout
[  435.716214][T18483] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  436.658320][T18537] bond2: entered promiscuous mode
[  436.736035][T18550] __nla_validate_parse: 1 callbacks suppressed
[  436.736053][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3249'.
[  437.152991][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  437.156172][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.191828][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  437.237631][T18568] netlink: 'syz.2.3253': attribute type 4 has an invalid length.
[  437.270469][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.308677][T18577] veth1_to_bond: entered allmulticast mode
[  437.315204][T18568] netlink: 'syz.2.3253': attribute type 4 has an invalid length.
[  437.340863][T18567] veth1_to_bond: left allmulticast mode
[  437.479583][T18585] netlink: 'syz.1.3256': attribute type 11 has an invalid length.
[  437.517302][T18585] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.3256'.
[  437.532914][T18589] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3257'.
[  437.637380][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'.
[  437.650948][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'.
[  437.904289][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3261'.
[  437.937796][T18610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.975130][T18610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  438.011604][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'.
[  438.125154][T18127] veth0_vlan: entered promiscuous mode
[  438.175209][T18127] veth1_vlan: entered promiscuous mode
[  438.308221][T18127] veth0_macvtap: entered promiscuous mode
[  438.367839][T18127] veth1_macvtap: entered promiscuous mode
[  438.443330][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.540444][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.592012][  T230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.615958][  T230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.687030][T18637] virt_wifi0 speed is unknown, defaulting to 1000
[  438.771723][ T8551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.906443][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'.
[  439.017273][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.031526][  T230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.054722][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.324731][T18670] netlink: 'syz.5.3282': attribute type 2 has an invalid length.
[  439.415627][  T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.454099][  T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.510006][T18715] syzkaller0: entered promiscuous mode
[  440.516076][T18715] syzkaller0: entered allmulticast mode
[  442.735733][T18732] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  442.742495][T18732] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  442.826955][T18746] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  442.856647][T18746] bond1 (unregistering): Released all slaves
[  442.884833][T18750] netlink: 'syz.4.3299': attribute type 1 has an invalid length.
[  443.004335][T18762] __nla_validate_parse: 4 callbacks suppressed
[  443.004353][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'.
[  443.062500][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3301'.
[  443.073870][T18762] netlink: 'syz.1.3303': attribute type 10 has an invalid length.
[  443.092039][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'.
[  443.169938][T18732] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  443.183228][T18732] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  443.213203][T18768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3305'.
[  443.229250][T18732] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  443.246640][T18732] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  443.382832][T18732] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  443.409944][T18732] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  443.536084][T18732] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  443.548947][T18732] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  443.689688][T18732] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  443.704935][T18732] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  444.076331][   T10] IPVS: starting estimator thread 0...
[  444.168444][T18805] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  444.214250][T18801] IPVS: using max 29 ests per chain, 69600 per kthread
[  444.403433][T18820] bridge: RTM_NEWNEIGH with invalid state 0x4
[  444.626132][T18833] Cannot find set identified by id 0 to match
[  444.702719][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'.
[  444.766548][T18836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3327'.
[  444.832877][T18849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'.
[  444.887353][T18847] nbd: must specify at least one socket
[  444.912264][T18839] bond3: Unable to set up delay as MII monitoring is disabled
[  444.950653][T18839] bond3 (unregistering): Released all slaves
[  445.058160][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'.
[  445.073462][T18836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3327'.
[  445.074112][T18856] netlink: 'syz.5.3331': attribute type 1 has an invalid length.
[  445.091007][T18856] netlink: 'syz.5.3331': attribute type 2 has an invalid length.
[  445.117907][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'.
[  445.134939][T18861] sctp: [Deprecated]: syz.2.3332 (pid 18861) Use of int in max_burst socket option deprecated.
[  445.134939][T18861] Use struct sctp_assoc_value instead
[  445.236396][T18861] netlink: 'syz.2.3332': attribute type 10 has an invalid length.
[  445.294356][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.304109][T18867] netlink: 'syz.5.3335': attribute type 22 has an invalid length.
[  445.404075][T18867] netlink: 'syz.5.3335': attribute type 22 has an invalid length.
[  445.940741][T18909] sock: sock_timestamping_bind_phc: sock not bind to device
[  445.975972][T18912] lo: entered allmulticast mode
[  446.003154][T18912] tunl0: entered allmulticast mode
[  446.032905][T18912] gre0: entered allmulticast mode
[  446.107400][T18912] gretap0: entered allmulticast mode
[  446.118711][T18920] netlink: 'syz.1.3351': attribute type 1 has an invalid length.
[  446.147648][T18912] erspan0: entered allmulticast mode
[  446.175967][T18912] ip_vti0: entered allmulticast mode
[  446.193236][T18912] ip6_vti0: entered allmulticast mode
[  446.206978][T18912] sit0: entered allmulticast mode
[  446.219458][T18912] ip6tnl0: entered allmulticast mode
[  446.237537][T18912] ip6gre0: entered allmulticast mode
[  446.271283][T18912] syz_tun: entered allmulticast mode
[  446.349325][T18920] 8021q: adding VLAN 0 to HW filter on device bond4
[  446.382052][T18940] netlink: 'syz.5.3352': attribute type 1 has an invalid length.
[  446.521597][T18945] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  447.348245][T18986] netlink: 'syz.1.3364': attribute type 15 has an invalid length.
[  447.729235][T19001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  447.876571][T19006] pimreg4: entered allmulticast mode
[  448.236584][    T9] IPVS: starting estimator thread 0...
[  448.337991][T19039] netlink: 'syz.5.3379': attribute type 1 has an invalid length.
[  448.347464][T19035] IPVS: using max 28 ests per chain, 67200 per kthread
[  448.377740][T19038] netlink: 'syz.5.3379': attribute type 1 has an invalid length.
[  448.397989][T19040] team0 (unregistering): Port device team_slave_0 removed
[  448.470688][T19040] team0 (unregistering): Port device team_slave_1 removed
[  448.954457][T19064] __nla_validate_parse: 133 callbacks suppressed
[  448.954476][T19064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3384'.
[  449.271278][T19081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3387'.
[  449.481458][T19076] bond1: option mode: invalid value (7)
[  449.499797][T19076] bond1 (unregistering): Released all slaves
[  449.615927][T19081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.693955][T19081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.723750][T19085] sch_fq: defrate 0 ignored.
[  449.776473][T19095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3393'.
[  449.790328][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3393'.
[  449.817816][T19093] syzkaller0: entered promiscuous mode
[  449.833735][T19093] syzkaller0: entered allmulticast mode
[  449.958789][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'.
[  450.557408][T19137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3402'.
[  450.584338][T19137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3402'.
[  450.698470][T19142] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3404'.
[  450.731820][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3406'.
[  450.752139][T19150] validate_nla: 4 callbacks suppressed
[  450.752155][T19150] netlink: 'syz.5.3405': attribute type 2 has an invalid length.
[  450.768496][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3406'.
[  451.077272][T19162] netlink: 'syz.4.3411': attribute type 5 has an invalid length.
[  451.098550][T19166] netlink: 'syz.2.3410': attribute type 2 has an invalid length.
[  451.308268][T19173] syzkaller1: entered promiscuous mode
[  451.323459][T19173] syzkaller1: entered allmulticast mode
[  451.567056][T19186] netlink: 'syz.2.3416': attribute type 2 has an invalid length.
[  452.088827][T19213] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.096623][T19213] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.194522][T19213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.207810][T19213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.322228][T18899] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.349748][T18899] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.398522][T18899] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.434027][T18899] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.789729][T19246] netlink: 'syz.4.3433': attribute type 13 has an invalid length.
[  452.812560][T19246] gretap0: refused to change device tx_queue_len
[  452.832925][T19246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  453.535019][T19270] netlink: 'syz.2.3438': attribute type 13 has an invalid length.
[  453.564589][T19272] netlink: 'syz.4.3439': attribute type 1 has an invalid length.
[  453.657883][T19277] netlink: 'syz.2.3438': attribute type 6 has an invalid length.
[  454.540957][T19311] netlink: 'syz.0.3446': attribute type 1 has an invalid length.
[  454.626054][T19319] __nla_validate_parse: 10 callbacks suppressed
[  454.626072][T19319] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3448'.
[  454.644216][T19319] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3448'.
[  454.660679][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3447'.
[  454.755815][T19311] bond3: entered promiscuous mode
[  454.764129][T19311] 8021q: adding VLAN 0 to HW filter on device bond3
[  454.870558][T19324] openvswitch: netlink: Message has 4 unknown bytes.
[  454.902107][T19324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.004293][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3452'.
[  455.051757][T19336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3452'.
[  455.254667][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3454'.
[  455.670073][T19362] netlink: 'syz.4.3459': attribute type 3 has an invalid length.
[  455.906647][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3464'.
[  456.227911][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  456.307280][T19399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3466'.
[  456.395750][T19404] netlink: 'syz.2.3469': attribute type 5 has an invalid length.
[  456.455528][T19404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'.
[  457.115054][T19442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.789085][T19473] tipc: Invalid UDP bearer configuration
[  457.789168][T19473] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  458.185400][T19496] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  458.263272][T19496] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  458.368995][T19501] team0: Cannot enslave team device to itself
[  458.399532][T19504] syzkaller0: entered promiscuous mode
[  458.412072][T19504] syzkaller0: entered allmulticast mode
[  458.434696][T19509] netlink: 'syz.1.3491': attribute type 7 has an invalid length.
[  458.456128][T19509] netlink: 'syz.1.3491': attribute type 8 has an invalid length.
[  481.560902][T19572] __nla_validate_parse: 10 callbacks suppressed
[  481.560922][T19572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'.
[  481.690057][T19576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3502'.
[  481.710427][T19576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3502'.
[  481.825076][T19593] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3507'.
[  481.867977][T19593] gretap0: entered promiscuous mode
[  481.890308][T19593] gretap0: left allmulticast mode
[  482.008439][T19596] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  482.028488][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3512'.
[  482.313764][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3517'.
[  482.363821][T19628] netlink: 'syz.2.3517': attribute type 10 has an invalid length.
[  482.419052][T19628] veth1_macvtap: left promiscuous mode
[  482.436762][T19628] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  482.691947][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3522'.
[  482.700973][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3522'.
[  482.842927][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'.
[  482.852269][T19651] hsr_slave_0: left promiscuous mode
[  482.859422][T19651] hsr_slave_1: left promiscuous mode
[  483.077547][T19660] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  483.105882][T19670] nbd: must specify at least one socket
[  483.369002][T19679] 
: renamed from bond0 (while UP)
[  483.387119][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3531'.
[  484.558096][T19715] tipc: Failed to obtain node identity
[  484.587134][T19715] tipc: Enabling of bearer <ib:wlan0> rejected, failed to enable media
[  484.978436][T19729] 8021q: VLANs not supported on lo
[  485.449755][T19742] syzkaller0: entered promiscuous mode
[  485.489256][T19742] syzkaller0: entered allmulticast mode
[  485.816199][T19773] xt_time: invalid argument - start or stop time greater than 23:59:59
[  485.818036][T19769] team0 (unregistering): Port device team_slave_0 removed
[  485.839742][T19769] team0 (unregistering): Port device team_slave_1 removed
[  485.981273][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  486.233299][T19786] netlink: 'syz.5.3560': attribute type 1 has an invalid length.
[  486.313308][T19792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  486.370431][T19789] syzkaller0: entered promiscuous mode
[  486.379246][T19789] syzkaller0: entered allmulticast mode
[  486.562208][T19802] __nla_validate_parse: 15 callbacks suppressed
[  486.562225][T19802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3565'.
[  486.565192][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'.
[  486.577645][T18898] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  486.577688][T18898] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  486.577722][T18898] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  486.577754][T18898] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  486.580972][T19802] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3565'.
[  487.054476][T19828] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3572'.
[  487.240863][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  487.257128][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  487.267477][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  487.280630][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  487.289154][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  487.782984][T19835] netlink: 'syz.4.3575': attribute type 10 has an invalid length.
[  487.843068][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  487.863691][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  487.877106][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  487.912866][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  487.938134][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  488.208845][T19828] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  489.040714][T19896] netlink: 193 bytes leftover after parsing attributes in process `syz.4.3582'.
[  489.477405][T19830] virt_wifi0 speed is unknown, defaulting to 1000
[  489.514406][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'.
[  489.551162][T19893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3581'.
[  489.789528][T19924] syzkaller0: entered promiscuous mode
[  489.809719][T19924] syzkaller0: entered allmulticast mode
[  489.961164][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'.
[  489.981402][   T50] Bluetooth: hci1: command tx timeout
[  490.368098][T19951] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3593'.
[  490.562095][T19957] netlink: 'syz.0.3594': attribute type 11 has an invalid length.
[  490.600630][T19957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3594'.
[  491.022409][T19938] netlink: 'syz.4.3591': attribute type 10 has an invalid length.
[  491.040509][T19830] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.047936][T19830] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.064340][T19830] bridge_slave_0: entered allmulticast mode
[  491.115456][T19830] bridge_slave_0: entered promiscuous mode
[  491.147961][T19830] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.204772][T19830] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.223863][T19830] bridge_slave_1: entered allmulticast mode
[  491.235310][T19830] bridge_slave_1: entered promiscuous mode
[  491.393809][T19830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.438661][T19830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.642260][T19992] openvswitch: netlink: Unknown key attributes 20
[  491.677799][T19830] team0: Port device team_slave_0 added
[  491.735787][T19830] team0: Port device team_slave_1 added
[  491.758624][T19994] netlink: 'syz.1.3603': attribute type 1 has an invalid length.
[  491.812913][T19992] netlink: 'syz.0.3602': attribute type 3 has an invalid length.
[  491.941946][T20008] __nla_validate_parse: 1 callbacks suppressed
[  491.941962][T20008] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3606'.
[  491.944400][T19994] 8021q: adding VLAN 0 to HW filter on device bond5
[  491.975775][T19830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.990917][T20008] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3606'.
[  492.024951][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.062197][   T50] Bluetooth: hci1: command tx timeout
[  492.099057][T19830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.166787][T19830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.176201][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.203232][T19830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.230179][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'.
[  492.343243][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'.
[  492.424402][T19830] hsr_slave_0: entered promiscuous mode
[  492.458799][T19830] hsr_slave_1: entered promiscuous mode
[  492.462615][T20035] netlink: 'syz.4.3613': attribute type 1 has an invalid length.
[  492.478057][T19830] debugfs: 'hsr0' already exists in 'hsr'
[  492.495145][T19830] Cannot create hsr debugfs directory
[  492.515794][T20026] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  492.517816][T20029] veth0: entered promiscuous mode
[  492.744318][T20051] netlink: 'syz.4.3613': attribute type 30 has an invalid length.
[  492.786978][T20035] 8021q: adding VLAN 0 to HW filter on device bond1
[  492.934786][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'.
[  492.937791][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'.
[  493.002296][T20044] bond1: (slave geneve2): making interface the new active one
[  493.039572][T20044] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  493.047235][T20036] netlink: 'syz.1.3614': attribute type 10 has an invalid length.
[  493.193190][T18893] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  493.208760][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'.
[  493.233225][ T8553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  493.254832][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'.
[  493.268252][T20028] veth0: left promiscuous mode
[  493.772641][T18114] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.813625][T18114] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.847079][T18114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  493.880300][T18114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  494.141445][   T50] Bluetooth: hci1: command tx timeout
[  494.223785][T20103] ipvlan2: entered allmulticast mode
[  494.242903][T20103] batadv_slave_1: entered allmulticast mode
[  494.274551][T20103] batman_adv: batadv0: Adding interface: ipvlan2
[  494.320288][T20103] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.389917][T20103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.441173][T20103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.492929][T20103] batman_adv: batadv0: Interface activated: ipvlan2
[  494.578830][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3630'.
[  494.605004][T19830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.637754][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3630'.
[  494.653531][T19830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.717325][T19830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  495.062643][ T8553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  495.123381][ T8553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  495.235115][T19830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.278265][T19830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.310124][T19830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  495.403946][   T50] block nbd4: Receive control failed (result -32)
[  495.489522][T19830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.513969][T19830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.536351][T19830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  495.753071][ T8553] wlan0: Trigger new scan to find an IBSS to join
[  496.226251][   T50] Bluetooth: hci1: command tx timeout
[  496.266434][T19830] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  496.292821][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  496.303570][T20178] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  496.326148][T19830] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  496.355667][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  496.373260][T19830] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  496.415110][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  496.468420][T19830] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  496.514349][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  496.962694][T20216] netlink: 'syz.2.3650': attribute type 30 has an invalid length.
[  497.002714][T20216] netlink: 'syz.2.3650': attribute type 10 has an invalid length.
[  497.026881][T19830] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.066884][T20216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.120875][T20216] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  497.208690][T19830] 8021q: adding VLAN 0 to HW filter on device team0
[  497.217232][T20227] __nla_validate_parse: 4 callbacks suppressed
[  497.217248][T20227] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3653'.
[  497.249047][T18896] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.256281][T18896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.388054][T18896] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.395254][T18896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.578940][T20241] gtp0: entered promiscuous mode
[  497.590557][T20241] gtp0: entered allmulticast mode
[  497.628902][T20244] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  498.417446][T20287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3669'.
[  498.684379][T20300] netlink: 'syz.0.3674': attribute type 21 has an invalid length.
[  498.700471][T20300] IPv6: NLM_F_CREATE should be specified when creating new route
[  498.737818][T20300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  498.745134][T20300] IPv6: NLM_F_CREATE should be set when creating new route
[  498.752459][T20300] IPv6: NLM_F_CREATE should be set when creating new route
[  498.759704][T20300] IPv6: NLM_F_CREATE should be set when creating new route
[  498.845335][T20306] bond0: Device is already in use.
[  499.106612][T19830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.976560][T19830] veth0_vlan: entered promiscuous mode
[  500.035309][T19830] veth1_vlan: entered promiscuous mode
[  500.217178][T19830] veth0_macvtap: entered promiscuous mode
[  500.277836][T19830] veth1_macvtap: entered promiscuous mode
[  500.354627][T19830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.427718][T19830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.463223][T20362] can: request_module (can-proto-0) failed.
[  500.478037][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'.
[  500.522282][T18896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.563840][T18896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.737334][T20370] bond0: entered promiscuous mode
[  500.755213][T20370] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.784990][T18897] wlan0: Trigger new scan to find an IBSS to join
[  500.871335][T18897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.912246][T18893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.175494][T18893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.218695][T18893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.260920][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'.
[  501.326549][T20406] netlink: 'syz.0.3698': attribute type 9 has an invalid length.
[  501.484176][T18895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.515983][T18895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.699584][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.749805][T20425] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  501.797831][T20426] sctp: [Deprecated]: syz.1.3704 (pid 20426) Use of int in maxseg socket option.
[  501.797831][T20426] Use struct sctp_assoc_value instead
[  502.035147][T20441] geneve3: entered promiscuous mode
[  502.059605][T20441] geneve3: entered allmulticast mode
[  502.093187][T18893] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  502.135167][T18893] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  502.169040][T18893] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  502.197508][T18893] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  502.236251][T20448] netlink: 'syz.2.3709': attribute type 1 has an invalid length.
[  502.320343][T20448] 8021q: adding VLAN 0 to HW filter on device bond1
[  502.385425][T20453] bond1: (slave gretap1): making interface the new active one
[  502.395051][T20453] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  502.404507][T20451] vcan0: entered allmulticast mode
[  502.446480][T20451] xt_CT: You must specify a L4 protocol and not use inversions on it
[  502.719399][T20470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.783204][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.024002][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.286111][T20501] nbd: nbd4 already in use
[  503.311628][T20501] netlink: ct family unspecified
[  503.330975][T20501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.384891][T20503] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  503.647448][T20522] netlink: 'syz.0.3726': attribute type 1 has an invalid length.
[  503.722229][T20522] 8021q: adding VLAN 0 to HW filter on device bond4
[  503.815024][T20531] bond4: (slave veth0_to_bond): making interface the new active one
[  503.877224][T20531] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  503.919299][T20522] bond4: entered promiscuous mode
[  503.929331][T20522] veth0_to_bond: entered promiscuous mode
[  503.936357][T20522] bond4: entered allmulticast mode
[  503.943272][T20522] veth0_to_bond: entered allmulticast mode
[  504.063679][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.071849][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.499744][T20557] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3734'.
[  504.547050][T20560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3734'.
[  504.564900][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.620922][T20566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3736'.
[  504.638484][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.776286][T20575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3740'.
[  505.126938][T20597] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3745'.
[  505.246238][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  505.269363][T20603] netlink: 'syz.0.3747': attribute type 1 has an invalid length.
[  505.279912][T20603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3747'.
[  505.325923][T20611] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.3748'.
[  505.719949][T20628] netlink: 'syz.5.3753': attribute type 1 has an invalid length.
[  505.752801][T20632] netlink: 'syz.2.3755': attribute type 20 has an invalid length.
[  505.772613][T20628] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3753'.
[  505.796799][T20632] IPv6: NLM_F_CREATE should be specified when creating new route
[  505.977894][T20635] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  506.020986][T20635] bond6 (unregistering): Released all slaves
[  506.126878][T20645] netlink: 'syz.5.3756': attribute type 2 has an invalid length.
[  506.160735][T20645] netlink: 'syz.5.3756': attribute type 2 has an invalid length.
[  506.297597][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'.
[  506.405665][T20658] veth0_macvtap: left promiscuous mode
[  506.930204][T20695] net_ratelimit: 11 callbacks suppressed
[  506.930221][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.946865][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.956035][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.964485][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.990587][T20693] netlink: 'syz.1.3770': attribute type 12 has an invalid length.
[  507.184231][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.283145][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.291502][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.617586][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.626340][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.717069][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.876501][T20726] lo: Caught tx_queue_len zero misconfig
[  508.130606][T20743] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  508.525429][T20751] SET target dimension over the limit!
[  509.177153][T20796] netlink: 'syz.2.3801': attribute type 1 has an invalid length.
[  509.178349][T20790] netlink: 'syz.5.3799': attribute type 1 has an invalid length.
[  509.229940][T20798] netlink: 'syz.2.3801': attribute type 2 has an invalid length.
[  509.291270][T20790] netlink: 'syz.5.3799': attribute type 10 has an invalid length.
[  509.300083][T20790] dummy0: entered promiscuous mode
[  509.581788][T20817] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000
[  509.596721][T20819] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  509.608813][T20819] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  509.617240][T20819] gretap2: entered promiscuous mode
[  509.630232][T20819] gretap2: entered allmulticast mode
[  509.790006][T20831] __nla_validate_parse: 9 callbacks suppressed
[  509.790022][T20831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3811'.
[  509.979767][T20843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3813'.
[  510.423899][T20854] 8021q: adding VLAN 0 to HW filter on device bond3
[  510.511857][T20875] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3823'.
[  510.526029][T20872] bond3: (slave geneve4): making interface the new active one
[  510.564949][T20872] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  510.638933][T20880] validate_nla: 1 callbacks suppressed
[  510.638951][T20880] netlink: 'syz.0.3825': attribute type 2 has an invalid length.
[  510.672865][T18898] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0
[  510.712389][T18897] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0
[  510.740090][T18897] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0
[  510.784366][T18114] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0
[  510.847459][T20886] netlink: 'syz.2.3827': attribute type 1 has an invalid length.
[  510.955123][T20889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3829'.
[  511.304483][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3833'.
[  511.377587][T20907] syzkaller1: entered promiscuous mode
[  511.385341][T20917] xt_bpf: check failed: parse error
[  511.412861][T20907] syzkaller1: entered allmulticast mode
[  511.454184][T20910] IPVS: Scheduler module ip_vs_sip not found
[  511.517226][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'.
[  511.542107][T20907] Cannot find set identified by id 65534 to match
[  511.708281][T20933] IPv6: NLM_F_CREATE should be specified when creating new route
[  511.754687][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'.
[  511.764340][T20931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'.
[  511.947435][T20945] syzkaller0: entered promiscuous mode
[  511.953728][T20944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3843'.
[  511.979930][T20945] syzkaller0: entered allmulticast mode
[  512.049979][T20950] gre0: entered promiscuous mode
[  512.067197][T20950] gre0: entered allmulticast mode
[  512.223785][T18114] net_ratelimit: 11 callbacks suppressed
[  512.223801][T18114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.252536][ T9489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.266840][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.279292][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.294571][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.316249][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.350576][T20960] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3847'.
[  512.407085][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.471732][T20962] IPVS: dh: FWM 3 0x00000003 - no destination available
[  512.495021][ T5624] IPVS: starting estimator thread 0...
[  512.533226][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.627309][T20968] IPVS: using max 30 ests per chain, 72000 per kthread
[  512.838171][T20980] syzkaller0: entered promiscuous mode
[  512.870694][T20980] syzkaller0: entered allmulticast mode
[  513.428064][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.101623][ T5631] Bluetooth: hci1: command 0x0405 tx timeout
[  515.491614][T21016] 8021q: VLANs not supported on ip_vti0
[  515.529634][T21030] wg2: Caught tx_queue_len zero misconfig
[  515.638781][T21034] vlan2: entered allmulticast mode
[  515.655567][T21034] bond0: entered allmulticast mode
[  515.678325][T21034] bond_slave_0: entered allmulticast mode
[  515.711856][T21034] bond_slave_1: entered allmulticast mode
[  515.732013][T21034] batadv0: entered allmulticast mode
[  515.865402][T21044] vlan2: entered promiscuous mode
[  515.875520][T21044] geneve1: entered promiscuous mode
[  515.895686][T21044] vlan2: entered allmulticast mode
[  515.912495][T21044] geneve1: entered allmulticast mode
[  515.913673][T21051] netlink: 'syz.0.3869': attribute type 23 has an invalid length.
[  515.934988][T21042] sctp: [Deprecated]: syz.4.3867 (pid 21042) Use of int in maxseg socket option.
[  515.934988][T21042] Use struct sctp_assoc_value instead
[  516.140124][T21061] __nla_validate_parse: 4 callbacks suppressed
[  516.140143][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'.
[  516.214249][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'.
[  516.214685][T21057] batadv_slave_0: Caught tx_queue_len zero misconfig
[  517.193303][T21099] netlink: 'syz.0.3882': attribute type 11 has an invalid length.
[  517.247919][T21099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3882'.
[  517.611461][ T5731] net_ratelimit: 8 callbacks suppressed
[  517.611482][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.821873][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.982155][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.992588][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.003740][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.625315][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.666855][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.708704][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.862178][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.744820][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.784609][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.825288][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.912343][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.868465][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.906854][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.303778][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.947080][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.955232][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.966292][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.584152][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.985318][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.026544][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.066159][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.141447][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.623309][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.107274][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.145844][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.185078][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.662558][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.982216][T18896] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  534.228821][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.268203][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.309208][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.543020][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.702498][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.347134][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.821595][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.388493][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.421607][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.466013][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.863038][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.506954][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.607786][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'.
[  541.827566][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3889'.
[  541.854371][T21115] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  541.928731][T21120] hsr0: entered promiscuous mode
[  541.950898][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'.
[  542.029998][T21120] hsr_slave_0: left promiscuous mode
[  542.084076][T21120] hsr_slave_1: left promiscuous mode
[  542.153321][T21120] hsr0 (unregistering): left promiscuous mode
[  542.510276][T21154] syzkaller0: entered promiscuous mode
[  542.537615][T21154] syzkaller0: entered allmulticast mode
[  542.569281][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.922327][T21179] openvswitch: netlink: IP tunnel dst address not specified
[  542.939890][T21179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.134504][T21186] xt_limit: Overflow, try lower: 271964/0
[  543.356244][T21201] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20001
[  543.600688][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.708507][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'.
[  543.722936][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3916'.
[  543.903296][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.352290][T21234] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3924'.
[  544.567320][T21240] netlink: 'syz.4.3925': attribute type 8 has an invalid length.
[  544.637690][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.741620][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'.
[  544.926225][T21252] can: request_module (can-proto-0) failed.
[  544.956454][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'.
[  545.094438][T21272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3935'.
[  545.260278][T21272] bond0: (slave ip6gre0): Error: Device type is different from other slaves
[  545.333771][T21281] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3937'.
[  545.617554][T21297] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  545.662331][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.697168][T21302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.758902][T21297] syzkaller0: entered promiscuous mode
[  545.780786][T21297] syzkaller0: entered allmulticast mode
[  546.143340][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.680438][T21350] netlink: 'syz.1.3954': attribute type 2 has an invalid length.
[  546.689860][T21350] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3954'.
[  546.710086][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.717044][T21347] bond3: Unable to set up delay as MII monitoring is disabled
[  546.764387][T21347] bond3 (unregistering): Released all slaves
[  546.772840][T21353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3955'.
[  546.942313][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.082455][T21363] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3958'.
[  547.138503][T21365] Cannot find set identified by id 65534 to match
[  547.476180][T21381] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  547.757780][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.769643][T21391] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  547.817987][T21395] netlink: 'syz.2.3971': attribute type 1 has an invalid length.
[  547.898463][T21405] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3974'.
[  548.007621][T21412] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  548.017293][T21405] bond1: option fail_over_mac: invalid value (16)
[  548.025966][T21405] bond1 (unregistering): Released all slaves
[  548.471919][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'.
[  548.489137][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3980'.
[  548.796289][T21441] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  548.812988][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.835683][T21441] bond4 (unregistering): Released all slaves
[  548.878830][T21453] openvswitch: netlink: IP tunnel dst address not specified
[  548.899361][T21453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.913523][T21445] bridge_slave_0 (unregistering): left allmulticast mode
[  548.920638][T21445] bridge_slave_0 (unregistering): left promiscuous mode
[  548.929052][T21445] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.158752][T21462] netlink: 'syz.4.3991': attribute type 21 has an invalid length.
[  549.175806][T21462] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3991'.
[  549.282945][T21469] veth0_macvtap: entered allmulticast mode
[  549.293600][T21469] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  549.684376][T21487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3999'.
[  549.685145][T21489] netlink: 'syz.4.4000': attribute type 1 has an invalid length.
[  549.718619][T21487] veth0_macvtap: left promiscuous mode
[  549.728504][T21491] sctp: [Deprecated]: syz.2.4001 (pid 21491) Use of int in max_burst socket option.
[  549.728504][T21491] Use struct sctp_assoc_value instead
[  549.751330][T21489] netlink: 'syz.4.4000': attribute type 7 has an invalid length.
[  549.760247][T21492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.769434][T21489] netlink: 'syz.4.4000': attribute type 8 has an invalid length.
[  549.769454][T21489] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4000'.
[  549.769472][T21489] NCSI netlink: No device for ifindex 65584
[  549.800106][T21495] IPv6: addrconf: prefix option has invalid lifetime
[  549.808287][T21495] IPv6: addrconf: prefix option has invalid lifetime
[  549.828489][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.896542][T21489] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  549.939048][T21493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  550.047060][T21501] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  550.062800][T21489] vcan0: entered allmulticast mode
[  550.117753][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4004'.
[  551.099244][T21570] netlink: 'syz.2.4023': attribute type 64 has an invalid length.
[  551.125191][T21574] netlink: 'syz.0.4024': attribute type 1 has an invalid length.
[  552.087136][T21625] __nla_validate_parse: 6 callbacks suppressed
[  552.087155][T21625] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4036'.
[  552.322370][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4039'.
[  552.359553][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4039'.
[  552.438412][T21631] sctp: [Deprecated]: syz.2.4039 (pid 21631) Use of struct sctp_assoc_value in delayed_ack socket option.
[  552.438412][T21631] Use struct sctp_sack_info instead
[  552.490113][T21644] sctp: [Deprecated]: syz.2.4039 (pid 21644) Use of int in maxseg socket option.
[  552.490113][T21644] Use struct sctp_assoc_value instead
[  552.913089][T21663] netlink: 'syz.5.4047': attribute type 1 has an invalid length.
[  552.964910][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'.
[  553.333346][T21684] tipc: Started in network mode
[  553.338498][T21684] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  553.348110][T21684] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  553.770911][T21709] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4061'.
[  553.794923][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4061'.
[  554.058819][T21721] syzkaller1: entered promiscuous mode
[  554.078594][T21721] syzkaller1: entered allmulticast mode
[  554.143532][T21721] bridge0: entered promiscuous mode
[  554.165427][T21721] bridge0: entered allmulticast mode
[  554.537586][T21746] net_ratelimit: 60 callbacks suppressed
[  554.537605][T21746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.866883][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'.
[  555.304400][T21782] netlink: 170676 bytes leftover after parsing attributes in process `syz.5.4085'.
[  555.326670][T21782] openvswitch: netlink: Message has 512 unknown bytes.
[  555.809334][T21793] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  555.948057][T21796] ip6gre1: entered allmulticast mode
[  556.214740][ T8553] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  556.248096][T21808] 8021q: VLANs not supported on ip6gre0
[  556.562710][T21827] netlink: 'syz.1.4100': attribute type 1 has an invalid length.
[  556.572663][T21831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.589960][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4100'.
[  556.647160][T21836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4102'.
[  556.792088][T21844] IPVS: set_ctl: invalid protocol: 0 172.20.20.3:20000
[  556.958704][T21850] netlink: 'syz.1.4109': attribute type 1 has an invalid length.
[  557.076654][T21850] 8021q: adding VLAN 0 to HW filter on device bond7
[  557.158194][T21851] bond7: (slave veth3): Enslaving as an active interface with a down link
[  557.174084][T21859] 8021q: adding VLAN 0 to HW filter on device batadv1
[  557.183522][T21859] bond7: (slave batadv1): making interface the new active one
[  557.192825][T21859] batadv1: entered promiscuous mode
[  557.198699][T21859] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  557.280050][T21872] netlink: 'syz.1.4113': attribute type 1 has an invalid length.
[  557.308416][T21872] __nla_validate_parse: 8 callbacks suppressed
[  557.308433][T21872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4113'.
[  557.456953][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4116'.
[  557.471724][T21877] tipc: Started in network mode
[  557.480635][T21877] tipc: Node identity eed19ae32774, cluster identity 4711
[  557.490205][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'.
[  557.522129][T21877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.528801][T21875] netlink: 'syz.2.4114': attribute type 1 has an invalid length.
[  557.564878][T21877] syzkaller0: entered promiscuous mode
[  557.580653][T21877] syzkaller0: entered allmulticast mode
[  557.627936][T21877] tipc: Resetting bearer <eth:syzkaller0>
[  557.668470][T21892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.679792][T21876] tipc: Resetting bearer <eth:syzkaller0>
[  557.688330][T21893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.744613][T21876] tipc: Disabling bearer <eth:syzkaller0>
[  557.955923][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4121'.
[  557.966631][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'.
[  558.030121][T21907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4122'.
[  558.398174][T21921] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.4128'.
[  558.433153][T21921] netlink: 'syz.5.4128': attribute type 2 has an invalid length.
[  558.658209][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4132'.
[  558.850930][T21953] netlink: 'syz.4.4137': attribute type 3 has an invalid length.
[  558.935850][ T5631] block nbd5: Receive control failed (result -1)
[  558.986425][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'.
[  559.162674][T21965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4140'.
[  559.485876][T21980] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  559.653616][T21993] nbd: couldn't find device at index 134217728
[  559.935729][T22010] netlink: 'syz.2.4157': attribute type 2 has an invalid length.
[  560.177837][T22029] netlink: 'syz.2.4160': attribute type 11 has an invalid length.
[  560.202404][T22029] veth1: Caught tx_queue_len zero misconfig
[  560.381224][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  560.528680][T22045] syzkaller1: entered promiscuous mode
[  560.559695][T22045] syzkaller1: entered allmulticast mode
[  560.706193][T22059] netlink: 'syz.4.4169': attribute type 7 has an invalid length.
[  560.714755][T22059] netlink: 'syz.4.4169': attribute type 8 has an invalid length.
[  560.779872][T22056] IPv6: sit1: Disabled Multicast RS
[  560.873771][T22065] netlink: 'syz.1.4170': attribute type 1 has an invalid length.
[  561.100628][T22065] 8021q: adding VLAN 0 to HW filter on device bond8
[  561.281600][T22042] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  561.523631][T22091] xt_l2tp: v2 doesn't support IP mode
[  561.539010][T22096] x_tables: unsorted entry at hook 1
[  561.825890][T22118] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.833590][T22118] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.877219][T22118] bridge0: left allmulticast mode
[  562.540017][T22145] netlink: 'syz.4.4187': attribute type 83 has an invalid length.
[  562.583909][T22150] __nla_validate_parse: 15 callbacks suppressed
[  562.583925][T22150] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4189'.
[  562.634590][T22146] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4189'.
[  562.951630][T22158] ipt_REJECT: TCP_RESET invalid for non-tcp
[  563.217550][T22177] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  563.254486][T22178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4201'.
[  563.779944][T22206] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  563.877932][T22209] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4208'.
[  563.905657][T22209] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4208'.
[  564.026330][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'.
[  564.077978][T22184] netlink: 'syz.1.4203': attribute type 21 has an invalid length.
[  564.091468][T22184] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4203'.
[  564.111294][T22184] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4203'.
[  564.137944][T22220] xt_l2tp: invalid flags combination: 8
[  564.168569][T22220] xt_l2tp: invalid flags combination: 8
[  564.466366][T22233] xt_ipcomp: unknown flags 1D
[  564.914690][   T10] tipc: Node number set to 3383073507
[  564.986005][T22255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'.
[  565.339196][T22280] netlink: 'syz.4.4231': attribute type 1 has an invalid length.
[  565.344594][ T8553] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  565.484875][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4233'.
[  565.538194][T22286] 8021q: adding VLAN 0 to HW filter on device bond8
[  565.943910][T22310] nbd: must specify an index to disconnect
[  566.267447][T22330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.302020][T22329] xt_l2tp: invalid flags combination: 0
[  566.349806][T22334] xfrm1: entered allmulticast mode
[  566.699699][T22355] x_tables: duplicate underflow at hook 2
[  567.644050][T22409] FAULT_INJECTION: forcing a failure.
[  567.644050][T22409] name failslab, interval 1, probability 0, space 0, times 1
[  567.714189][T22409] CPU: 1 UID: 0 PID: 22409 Comm: syz.2.4268 Not tainted syzkaller #0 PREEMPT(full) 
[  567.714216][T22409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  567.714227][T22409] Call Trace:
[  567.714235][T22409]  <TASK>
[  567.714243][T22409]  dump_stack_lvl+0xe8/0x150
[  567.714279][T22409]  should_fail_ex+0x40c/0x560
[  567.714406][T22409]  should_failslab+0xa8/0x100
[  567.714437][T22409]  __kmalloc_cache_noprof+0xa8/0x660
[  567.714465][T22409]  ? sctp_association_new+0x89/0x25d0
[  567.714539][T22409]  ? sctp_association_new+0x89/0x25d0
[  567.714570][T22409]  sctp_association_new+0x89/0x25d0
[  567.714597][T22409]  ? __ipv6_addr_type+0x23d/0x2f0
[  567.714733][T22409]  sctp_connect_new_asoc+0x2e4/0x6b0
[  567.714797][T22409]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  567.714828][T22409]  ? __local_bh_enable_ip+0xd0/0x130
[  567.714864][T22409]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  567.714887][T22409]  ? security_sctp_bind_connect+0x7e/0x2c0
[  567.714970][T22409]  sctp_sendmsg+0x159b/0x2d00
[  567.715009][T22409]  ? __pfx_sctp_sendmsg+0x10/0x10
[  567.715038][T22409]  ? aa_sk_perm+0x6d5/0x900
[  567.715072][T22409]  ? sock_rps_record_flow+0x19/0x350
[  567.715137][T22409]  ? inet_sendmsg+0x298/0x320
[  567.715158][T22409]  ? __pfx_inet_sendmsg+0x10/0x10
[  567.715176][T22409]  sock_sendmsg_nosec+0x10e/0x180
[  567.715234][T22409]  ____sys_sendmsg+0x54e/0x850
[  567.715262][T22409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  567.715293][T22409]  ? import_iovec+0x73/0xa0
[  567.715346][T22409]  ___sys_sendmsg+0x2a5/0x360
[  567.715367][T22409]  ? __lock_acquire+0x683/0x2cf0
[  567.715411][T22409]  ? __pfx____sys_sendmsg+0x10/0x10
[  567.715439][T22409]  ? kstrtouint+0x6e/0xe0
[  567.715515][T22409]  ? __fget_files+0x2a/0x420
[  567.715540][T22409]  ? __fget_files+0x3a2/0x420
[  567.715576][T22409]  __sys_sendmmsg+0x273/0x4d0
[  567.715604][T22409]  ? __pfx___sys_sendmmsg+0x10/0x10
[  567.715635][T22409]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  567.715702][T22409]  ? ksys_write+0x242/0x270
[  567.715733][T22409]  ? __pfx_ksys_write+0x10/0x10
[  567.715759][T22409]  __x64_sys_sendmmsg+0xa0/0xc0
[  567.715788][T22409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.715809][T22409]  do_syscall_64+0x174/0x580
[  567.715831][T22409]  ? trace_irq_disable+0x3b/0x140
[  567.715855][T22409]  ? clear_bhb_loop+0x40/0x90
[  567.715877][T22409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.715893][T22409] RIP: 0033:0x7fc83059e019
[  567.715909][T22409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.715924][T22409] RSP: 002b:00007fc8313e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  567.715944][T22409] RAX: ffffffffffffffda RBX: 00007fc830825fa0 RCX: 00007fc83059e019
[  567.715956][T22409] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000003
[  567.715967][T22409] RBP: 00007fc8313e2090 R08: 0000000000000000 R09: 0000000000000000
[  567.715978][T22409] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[  567.715988][T22409] R13: 00007fc830826038 R14: 00007fc830825fa0 R15: 00007ffc0dbf2038
[  567.716018][T22409]  </TASK>
[  567.801254][T22417] __nla_validate_parse: 13 callbacks suppressed
[  567.801271][T22417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4269'.
[  568.063490][T22428] IPv6: NLM_F_CREATE should be specified when creating new route
[  568.170528][T22429] netlink: 'syz.1.4269': attribute type 1 has an invalid length.
[  568.199575][T22419] netlink: 'syz.4.4272': attribute type 1 has an invalid length.
[  568.206882][T22429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4269'.
[  568.226875][T22419] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4272'.
[  568.290420][T22436] gretap0: left promiscuous mode
[  568.439831][T22436] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  568.458741][T22436] veth1_macvtap: entered promiscuous mode
[  568.495494][T22436] 8021q: adding VLAN 0 to HW filter on device bond2
[  568.506255][T22436] 8021q: adding VLAN 0 to HW filter on device bond3
[  568.623205][ T8553] batadv1: left promiscuous mode
[  568.720334][T22445] sctp: [Deprecated]: syz.1.4278 (pid 22445) Use of struct sctp_assoc_value in delayed_ack socket option.
[  568.720334][T22445] Use struct sctp_sack_info instead
[  568.777447][T22445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4278'.
[  569.017763][T18898] tipc: Subscription rejected, illegal request
[  569.043605][T22464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4285'.
[  569.181209][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  569.477644][T22483] : renamed from bond_slave_1
[  569.578268][T22484] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  570.119305][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'.
[  570.290923][T22517] 8021q: adding VLAN 0 to HW filter on device bond4
[  570.420952][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'.
[  570.451517][T22532] netlink: 'syz.1.4304': attribute type 1 has an invalid length.
[  570.550863][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4306'.
[  570.607289][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4306'.
[  570.770924][T22551] netlink: 'syz.0.4302': attribute type 2 has an invalid length.
[  570.785977][T22552] openvswitch: netlink: Key 6 has unexpected len 177 expected 2
[  570.800432][T22523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4302'.
[  570.900344][T22560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.209812][T22574] ip6t_REJECT: ECHOREPLY is not supported
[  571.356472][T22581] netlink: 'syz.4.4319': attribute type 1 has an invalid length.
[  571.398634][T22586] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  571.417566][T22588] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  571.652003][T22601] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  571.757423][T22606] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  571.799906][T22606] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  571.805073][T22611] atomic_op ffff8880255f7198 conn xmit_atomic 0000000000000000
[  572.458917][T22640] netlink: 'syz.0.4336': attribute type 6 has an invalid length.
[  572.655782][T22655] Bluetooth: MGMT ver 1.23
[  572.795890][T22660] netlink: 'syz.5.4338': attribute type 1 has an invalid length.
[  572.853559][T22660] nbd1: detected capacity change from 0 to 127
[  572.865450][T22656] lo speed is unknown, defaulting to 1000
[  572.889430][ T1609] block nbd1: Dead connection, failed to find a fallback
[  572.902864][ T1609] block nbd1: shutting down sockets
[  572.909894][ T1609] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  572.922149][ T1609] Buffer I/O error on dev nbd1, logical block 0, async page read
[  572.933671][ T1609] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  572.944003][ T1609] Buffer I/O error on dev nbd1, logical block 1, async page read
[  572.951996][ T1609] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  572.963116][ T1609] Buffer I/O error on dev nbd1, logical block 2, async page read
[  572.971706][ T1609] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  572.981453][ T1609] Buffer I/O error on dev nbd1, logical block 3, async page read
[  572.993133][ T1609] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  572.995186][T22656] lo speed is unknown, defaulting to 1000
[  573.002656][ T1609] Buffer I/O error on dev nbd1, logical block 0, async page read
[  573.002922][ T1609] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.002949][ T1609] Buffer I/O error on dev nbd1, logical block 1, async page read
[  573.003040][ T1609] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.003064][ T1609] Buffer I/O error on dev nbd1, logical block 2, async page read
[  573.003151][ T1609] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.003175][ T1609] Buffer I/O error on dev nbd1, logical block 3, async page read
[  573.003276][ T1609] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.003299][ T1609] Buffer I/O error on dev nbd1, logical block 0, async page read
[  573.003391][ T1609] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.003414][ T1609] Buffer I/O error on dev nbd1, logical block 1, async page read
[  573.006500][T21182] ldm_validate_partition_table(): Disk read failed.
[  573.154655][T22656] lo speed is unknown, defaulting to 1000
[  573.319121][T21182] Dev nbd1: unable to read RDB block 0
[  573.347186][T21182]  nbd1: unable to read partition table
[  573.394888][T22680] 8021q: VLANs not supported on ip6tnl0
[  573.406353][T21182] ldm_validate_partition_table(): Disk read failed.
[  573.424432][T22680] __nla_validate_parse: 24 callbacks suppressed
[  573.424449][T22680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4350'.
[  573.454299][T21182] Dev nbd1: unable to read RDB block 0
[  573.463818][T21182]  nbd1: unable to read partition table
[  573.637676][T22687] syzkaller0: entered promiscuous mode
[  573.650380][T22687] syzkaller0: entered allmulticast mode
[  574.093946][T22656] infiniband syz1: set active
[  574.100642][T22656] infiniband syz1: added lo
[  574.118678][ T5708] lo speed is unknown, defaulting to 1000
[  574.120514][T22656] 
[  574.126912][T22656] ======================================================
[  574.133940][T22656] WARNING: possible circular locking dependency detected
[  574.140997][T22656] syzkaller #0 Not tainted
[  574.145406][T22656] ------------------------------------------------------
[  574.152462][T22656] syz.2.4340/22656 is trying to acquire lock:
[  574.158509][T22656] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900
[  574.168172][T22656] 
[  574.168172][T22656] but task is already holding lock:
[  574.175519][T22656] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060
[  574.184825][T22656] 
[  574.184825][T22656] which lock already depends on the new lock.
[  574.184825][T22656] 
[  574.195211][T22656] 
[  574.195211][T22656] the existing dependency chain (in reverse order) is:
[  574.204204][T22656] 
[  574.204204][T22656] -> #9 (wq_pool_mutex){+.+.}-{4:4}:
[  574.211748][T22656]        __mutex_lock+0x19d/0x1550
[  574.216889][T22656]        __alloc_workqueue+0xa9c/0x2060
[  574.222425][T22656]        alloc_workqueue_noprof+0xe3/0x210
[  574.228224][T22656]        padata_alloc+0xbe/0x360
[  574.233151][T22656]        pcrypt_init_padata+0x27/0x100
[  574.238665][T22656]        pcrypt_init+0x60/0xc0
[  574.243512][T22656]        do_one_initcall+0x250/0x870
[  574.248790][T22656]        do_initcall_level+0x10a/0x1a0
[  574.254276][T22656]        do_initcalls+0x59/0xa0
[  574.259134][T22656]        kernel_init_freeable+0x29d/0x3e0
[  574.264873][T22656]        kernel_init+0x1d/0x1d0
[  574.269718][T22656]        ret_from_fork+0x514/0xb70
[  574.274836][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.280115][T22656] 
[  574.280115][T22656] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  574.287833][T22656]        cpus_read_lock+0x42/0x160
[  574.292931][T22656]        static_key_slow_inc+0x12/0x30
[  574.298393][T22656]        setup_udp_tunnel_sock+0x2df/0x4f0
[  574.304248][T22656]        l2tp_tunnel_register+0xe77/0x1570
[  574.310114][T22656]        pppol2tp_connect+0x8e3/0x18b0
[  574.315576][T22656]        __sys_connect+0x323/0x460
[  574.320681][T22656]        __x64_sys_connect+0x7a/0x90
[  574.325955][T22656]        do_syscall_64+0x174/0x580
[  574.331059][T22656]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.337458][T22656] 
[  574.337458][T22656] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  574.345179][T22656]        lock_sock_nested+0x41/0x100
[  574.350497][T22656]        inet_shutdown+0x6a/0x390
[  574.355510][T22656]        nbd_mark_nsock_dead+0x2cb/0x550
[  574.361203][T22656]        recv_work+0x1cee/0x1e10
[  574.366125][T22656]        process_scheduled_works+0xa8e/0x14e0
[  574.372191][T22656]        worker_thread+0xa47/0xfb0
[  574.377293][T22656]        kthread+0x388/0x470
[  574.381873][T22656]        ret_from_fork+0x514/0xb70
[  574.386977][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.392247][T22656] 
[  574.392247][T22656] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  574.399877][T22656]        __mutex_lock+0x19d/0x1550
[  574.404975][T22656]        nbd_queue_rq+0x373/0x1150
[  574.410075][T22656]        blk_mq_dispatch_rq_list+0x499/0x1990
[  574.416221][T22656]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  574.423094][T22656]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  574.429586][T22656]        blk_mq_run_work_fn+0x16c/0x300
[  574.435119][T22656]        process_scheduled_works+0xa8e/0x14e0
[  574.441171][T22656]        worker_thread+0xa47/0xfb0
[  574.446270][T22656]        kthread+0x388/0x470
[  574.450850][T22656]        ret_from_fork+0x514/0xb70
[  574.455950][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.461224][T22656] 
[  574.461224][T22656] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  574.468432][T22656]        __mutex_lock+0x19d/0x1550
[  574.473531][T22656]        nbd_queue_rq+0xc1/0x1150
[  574.478540][T22656]        blk_mq_dispatch_rq_list+0x499/0x1990
[  574.484594][T22656]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  574.491438][T22656]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  574.497967][T22656]        blk_mq_run_work_fn+0x16c/0x300
[  574.503511][T22656]        process_scheduled_works+0xa8e/0x14e0
[  574.509571][T22656]        worker_thread+0xa47/0xfb0
[  574.514670][T22656]        kthread+0x388/0x470
[  574.519252][T22656]        ret_from_fork+0x514/0xb70
[  574.524357][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.529631][T22656] 
[  574.529631][T22656] -> #4 (set->srcu){.+.+}-{0:0}:
[  574.536746][T22656]        __synchronize_srcu+0xc9/0x2f0
[  574.542225][T22656]        elevator_switch+0x1e8/0x7b0
[  574.547578][T22656]        elevator_change+0x2fa/0x480
[  574.552853][T22656]        elevator_set_default+0x375/0x440
[  574.558567][T22656]        blk_register_queue+0x3f3/0x4e0
[  574.564147][T22656]        __add_disk+0x6cb/0xe30
[  574.569012][T22656]        add_disk_fwnode+0x100/0x3a0
[  574.574283][T22656]        nbd_dev_add+0x733/0xb60
[  574.579209][T22656]        nbd_init+0x15f/0x1e0
[  574.583911][T22656]        do_one_initcall+0x250/0x870
[  574.589186][T22656]        do_initcall_level+0x10a/0x1a0
[  574.594629][T22656]        do_initcalls+0x59/0xa0
[  574.599463][T22656]        kernel_init_freeable+0x29d/0x3e0
[  574.605176][T22656]        kernel_init+0x1d/0x1d0
[  574.610032][T22656]        ret_from_fork+0x514/0xb70
[  574.615132][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.620413][T22656] 
[  574.620413][T22656] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  574.628303][T22656]        __mutex_lock+0x19d/0x1550
[  574.633433][T22656]        elevator_change+0x1af/0x480
[  574.638729][T22656]        elevator_set_none+0xb5/0x140
[  574.644097][T22656]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  574.650421][T22656]        nbd_start_device+0x189/0xb30
[  574.655781][T22656]        nbd_genl_connect+0x1597/0x1c10
[  574.661313][T22656]        genl_family_rcv_msg_doit+0x233/0x340
[  574.667477][T22656]        genl_rcv_msg+0x614/0x7a0
[  574.672490][T22656]        netlink_rcv_skb+0x226/0x4a0
[  574.677761][T22656]        genl_rcv+0x28/0x40
[  574.682261][T22656]        netlink_unicast+0x7bb/0x940
[  574.687541][T22656]        netlink_sendmsg+0x813/0xb40
[  574.692828][T22656]        sock_sendmsg_nosec+0x13a/0x180
[  574.698373][T22656]        ____sys_sendmsg+0x54e/0x850
[  574.703645][T22656]        ___sys_sendmsg+0x2a5/0x360
[  574.708833][T22656]        __x64_sys_sendmsg+0x1b1/0x290
[  574.714296][T22656]        do_syscall_64+0x174/0x580
[  574.719407][T22656]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.725809][T22656] 
[  574.725809][T22656] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  574.734428][T22656]        blk_alloc_queue+0x544/0x690
[  574.739723][T22656]        __blk_mq_alloc_disk+0x194/0x390
[  574.745344][T22656]        nbd_dev_add+0x494/0xb60
[  574.750278][T22656]        nbd_init+0x15f/0x1e0
[  574.754943][T22656]        do_one_initcall+0x250/0x870
[  574.760216][T22656]        do_initcall_level+0x10a/0x1a0
[  574.765656][T22656]        do_initcalls+0x59/0xa0
[  574.770489][T22656]        kernel_init_freeable+0x29d/0x3e0
[  574.776199][T22656]        kernel_init+0x1d/0x1d0
[  574.781046][T22656]        ret_from_fork+0x514/0xb70
[  574.786151][T22656]        ret_from_fork_asm+0x1a/0x30
[  574.791423][T22656] 
[  574.791423][T22656] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  574.798632][T22656]        fs_reclaim_acquire+0x71/0x100
[  574.804081][T22656]        prepare_alloc_pages+0x15b/0x650
[  574.809705][T22656]        __alloc_frozen_pages_noprof+0x12f/0x380
[  574.816019][T22656]        __alloc_pages_noprof+0x10/0x100
[  574.821644][T22656]        pcpu_populate_chunk+0x181/0xb30
[  574.827263][T22656]        pcpu_alloc_noprof+0xbca/0x1900
[  574.832966][T22656]        xt_percpu_counter_alloc+0x145/0x1e0
[  574.839031][T22656]        translate_table+0x1311/0x2040
[  574.844580][T22656]        ip6t_register_table+0x112/0x320
[  574.850220][T22656]        ip6table_security_table_init+0x41/0x70
[  574.856462][T22656]        xt_find_table_lock+0x311/0x400
[  574.862002][T22656]        xt_request_find_table_lock+0x26/0x100
[  574.868155][T22656]        do_ip6t_get_ctl+0x77b/0x12f0
[  574.873531][T22656]        nf_getsockopt+0x26e/0x290
[  574.878700][T22656]        ipv6_getsockopt+0x213/0x2c0
[  574.884031][T22656]        do_sock_getsockopt+0x51d/0x7e0
[  574.889564][T22656]        __x64_sys_getsockopt+0x1a4/0x240
[  574.895269][T22656]        do_syscall_64+0x174/0x580
[  574.900370][T22656]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.906772][T22656] 
[  574.906772][T22656] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  574.914495][T22656]        __lock_acquire+0x1520/0x2cf0
[  574.919863][T22656]        lock_acquire+0x106/0x350
[  574.924877][T22656]        __mutex_lock+0x19d/0x1550
[  574.929980][T22656]        pcpu_alloc_noprof+0x231/0x1900
[  574.935513][T22656]        __alloc_workqueue+0xb2c/0x2060
[  574.941048][T22656]        alloc_workqueue_noprof+0xe3/0x210
[  574.946851][T22656]        ib_mad_init_device+0x993/0x2150
[  574.952574][T22656]        add_client_context+0x37c/0x7b0
[  574.958129][T22656]        enable_device_and_get+0x19c/0x3e0
[  574.963920][T22656]        ib_register_device+0x10af/0x1380
[  574.969623][T22656]        rxe_register_device+0x1e3/0x350
[  574.975330][T22656]        rxe_net_add+0x81/0x110
[  574.980165][T22656]        rxe_newlink+0xf4/0x1c0
[  574.985036][T22656]        nldev_newlink+0x5bc/0x650
[  574.990130][T22656]        rdma_nl_rcv+0x6ef/0xa40
[  574.995050][T22656]        netlink_unicast+0x7bb/0x940
[  575.000319][T22656]        netlink_sendmsg+0x813/0xb40
[  575.005590][T22656]        sock_sendmsg_nosec+0x13a/0x180
[  575.011125][T22656]        ____sys_sendmsg+0x54e/0x850
[  575.016396][T22656]        ___sys_sendmsg+0x2a5/0x360
[  575.021577][T22656]        __x64_sys_sendmsg+0x1b1/0x290
[  575.027020][T22656]        do_syscall_64+0x174/0x580
[  575.032120][T22656]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.038519][T22656] 
[  575.038519][T22656] other info that might help us debug this:
[  575.038519][T22656] 
[  575.048727][T22656] Chain exists of:
[  575.048727][T22656]   pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex
[  575.048727][T22656] 
[  575.061807][T22656]  Possible unsafe locking scenario:
[  575.061807][T22656] 
[  575.069277][T22656]        CPU0                    CPU1
[  575.074653][T22656]        ----                    ----
[  575.080028][T22656]   lock(wq_pool_mutex);
[  575.084258][T22656]                                lock(cpu_hotplug_lock);
[  575.091271][T22656]                                lock(wq_pool_mutex);
[  575.098026][T22656]   lock(pcpu_alloc_mutex);
[  575.102515][T22656] 
[  575.102515][T22656]  *** DEADLOCK ***
[  575.102515][T22656] 
[  575.110639][T22656] 6 locks held by syz.2.4340/22656:
[  575.115812][T22656]  #0: ffffffff9ab2c188 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[  575.125863][T22656]  #1: ffffffff8fd8c548 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650
[  575.135247][T22656]  #2: ffffffff8fd7da08 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0
[  575.145152][T22656]  #3: ffffffff8fd7dd08 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0
[  575.155152][T22656]  #4: ffff88804c79c620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0
[  575.166014][T22656]  #5: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060
[  575.175750][T22656] 
[  575.175750][T22656] stack backtrace:
[  575.181623][T22656] CPU: 1 UID: 0 PID: 22656 Comm: syz.2.4340 Not tainted syzkaller #0 PREEMPT(full) 
[  575.181641][T22656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  575.181650][T22656] Call Trace:
[  575.181657][T22656]  <TASK>
[  575.181665][T22656]  dump_stack_lvl+0xe8/0x150
[  575.181693][T22656]  print_circular_bug+0x2e1/0x300
[  575.181711][T22656]  check_noncircular+0x12e/0x150
[  575.181728][T22656]  __lock_acquire+0x1520/0x2cf0
[  575.181750][T22656]  ? check_path+0x21/0x40
[  575.181763][T22656]  ? check_noncircular+0xda/0x150
[  575.181778][T22656]  ? add_lock_to_list+0xc7/0x100
[  575.181792][T22656]  ? lockdep_unlock+0x5d/0xd0
[  575.181809][T22656]  ? __lock_acquire+0x13e8/0x2cf0
[  575.181831][T22656]  ? pcpu_alloc_noprof+0x231/0x1900
[  575.181849][T22656]  lock_acquire+0x106/0x350
[  575.181869][T22656]  ? pcpu_alloc_noprof+0x231/0x1900
[  575.181891][T22656]  __mutex_lock+0x19d/0x1550
[  575.181909][T22656]  ? pcpu_alloc_noprof+0x231/0x1900
[  575.181928][T22656]  ? __pfx___mutex_trylock_common+0x10/0x10
[  575.181946][T22656]  ? pcpu_alloc_noprof+0x231/0x1900
[  575.181962][T22656]  ? trace_contention_end+0x3d/0x140
[  575.181977][T22656]  ? __pfx___mutex_lock+0x10/0x10
[  575.181994][T22656]  ? __mutex_lock+0x30d/0x1550
[  575.182016][T22656]  ? __pfx___mutex_lock+0x10/0x10
[  575.182034][T22656]  pcpu_alloc_noprof+0x231/0x1900
[  575.182052][T22656]  ? __kmalloc_cache_node_noprof+0x3ce/0x630
[  575.182078][T22656]  __alloc_workqueue+0xb2c/0x2060
[  575.182105][T22656]  alloc_workqueue_noprof+0xe3/0x210
[  575.182128][T22656]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  575.182151][T22656]  ? __ib_alloc_pd+0x4d6/0x6d0
[  575.182221][T22656]  ? __ib_alloc_pd+0x1a1/0x6d0
[  575.182236][T22656]  ib_mad_init_device+0x993/0x2150
[  575.182268][T22656]  ? __pfx_ib_mad_init_device+0x10/0x10
[  575.182287][T22656]  ? do_raw_spin_unlock+0xf5/0x210
[  575.182305][T22656]  ? _raw_spin_unlock+0x28/0x50
[  575.182320][T22656]  add_client_context+0x37c/0x7b0
[  575.182340][T22656]  ? __pfx_add_client_context+0x10/0x10
[  575.182356][T22656]  ? xa_find+0x25b/0x2b0
[  575.182379][T22656]  enable_device_and_get+0x19c/0x3e0
[  575.182396][T22656]  ? __pfx_enable_device_and_get+0x10/0x10
[  575.182415][T22656]  ? device_add+0x6f6/0xb80
[  575.182466][T22656]  ib_register_device+0x10af/0x1380
[  575.182486][T22656]  ? __pfx_ib_register_device+0x10/0x10
[  575.182505][T22656]  ? xa_load+0x60/0x210
[  575.182522][T22656]  ? xa_load+0x60/0x210
[  575.182539][T22656]  ? xa_load+0x60/0x210
[  575.182557][T22656]  ? xa_load+0x1db/0x210
[  575.182577][T22656]  ? ib_device_set_netdev+0x5c9/0x6d0
[  575.182598][T22656]  rxe_register_device+0x1e3/0x350
[  575.182616][T22656]  rxe_net_add+0x81/0x110
[  575.182632][T22656]  rxe_newlink+0xf4/0x1c0
[  575.182654][T22656]  nldev_newlink+0x5bc/0x650
[  575.182673][T22656]  ? __pfx_nldev_newlink+0x10/0x10
[  575.182727][T22656]  ? bpf_lsm_capable+0x9/0x20
[  575.182747][T22656]  ? security_capable+0x7e/0x2c0
[  575.182792][T22656]  ? __pfx_nldev_newlink+0x10/0x10
[  575.182805][T22656]  rdma_nl_rcv+0x6ef/0xa40
[  575.182824][T22656]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  575.182846][T22656]  ? netlink_deliver_tap+0x2e/0x1b0
[  575.182864][T22656]  ? netlink_deliver_tap+0x2e/0x1b0
[  575.182882][T22656]  netlink_unicast+0x7bb/0x940
[  575.182901][T22656]  netlink_sendmsg+0x813/0xb40
[  575.182922][T22656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.182941][T22656]  ? aa_sock_msg_perm+0xf1/0x1b0
[  575.182959][T22656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.182976][T22656]  sock_sendmsg_nosec+0x13a/0x180
[  575.182998][T22656]  ____sys_sendmsg+0x54e/0x850
[  575.183016][T22656]  ? __pfx_____sys_sendmsg+0x10/0x10
[  575.183036][T22656]  ? import_iovec+0x73/0xa0
[  575.183052][T22656]  ___sys_sendmsg+0x2a5/0x360
[  575.183067][T22656]  ? __lock_acquire+0x683/0x2cf0
[  575.183088][T22656]  ? __pfx____sys_sendmsg+0x10/0x10
[  575.183106][T22656]  ? futex_wake+0x51b/0x5f0
[  575.183141][T22656]  ? __fget_files+0x2a/0x420
[  575.183161][T22656]  ? __fget_files+0x3a2/0x420
[  575.183184][T22656]  __x64_sys_sendmsg+0x1b1/0x290
[  575.183202][T22656]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  575.183225][T22656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.183240][T22656]  do_syscall_64+0x174/0x580
[  575.183258][T22656]  ? trace_irq_disable+0x3b/0x140
[  575.183277][T22656]  ? clear_bhb_loop+0x40/0x90
[  575.183293][T22656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.183308][T22656] RIP: 0033:0x7fc83059e019
[  575.183322][T22656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.183336][T22656] RSP: 002b:00007fc8313e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  575.183352][T22656] RAX: ffffffffffffffda RBX: 00007fc830825fa0 RCX: 00007fc83059e019
[  575.183364][T22656] RDX: 0000000020000810 RSI: 0000200000000240 RDI: 0000000000000004
[  575.183373][T22656] RBP: 00007fc83063500c R08: 0000000000000000 R09: 0000000000000000
[  575.183383][T22656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  575.183392][T22656] R13: 00007fc830826038 R14: 00007fc830825fa0 R15: 00007ffc0dbf2038
[  575.183409][T22656]  </TASK>
[  575.733605][T22656] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  575.735240][T22656] infiniband syz1: Couldn't open port 1
[  575.751076][T22656] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  575.766381][T22656] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  575.784897][T22656] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  575.814561][T22656] RDS/IB: syz1: added
[  575.818603][T22656] smc: adding ib device syz1 with port count 1
[  575.825480][T22656] smc:    ib device syz1 port 1 has no pnetid
[  575.831838][ T5752] lo speed is unknown, defaulting to 1000
[  575.838204][T22656] lo speed is unknown, defaulting to 1000
[  575.921597][T22656] lo speed is unknown, defaulting to 1000
[  575.977959][T22656] lo speed is unknown, defaulting to 1000
[  576.042956][T22656] lo speed is unknown, defaulting to 1000
[  576.097565][T22656] lo speed is unknown, defaulting to 1000
[  576.155634][T22656] lo speed is unknown, defaulting to 1000
[  576.211204][T22656] lo speed is unknown, defaulting to 1000
[  576.273250][T22656] lo speed is unknown, defaulting to 1000
[  576.336772][T22656] lo speed is unknown, defaulting to 1000
[  576.397858][T22656] lo speed is unknown, defaulting to 1000