last executing test programs:

4.128351017s ago: executing program 4 (id=4600):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000001940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa27000cc0"], 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

3.82488445s ago: executing program 4 (id=4606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e20, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}}, 0x32)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'vcan0\x00', @local})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r10)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0)

2.855857401s ago: executing program 1 (id=4612):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2})
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x10000000000002c9}, 0x8}], 0x1, 0x20, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB="00000000001d000000000000ba668dbd560a870d7171000000000000", @ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="000000000000000000000000000000000000008aeb21d9d5f186b7008c3a703f58f2a3a30bed1516bd295b722ba32e04461fd6d92db4aa9d5b209d815f7f602bd6313f2fac04efca882244872f006495349488fc34cd50539244581162d38ccd59749edc3af53e2fc0880794ecad0dbea33b2772fb898e89a9ac637d5194b0af0572968b490789065898cc023a50a3ecb39685"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xa2, &(0x7f00000003c0)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r6}, 0xc)
close(r7)
r8 = socket(0x10, 0x5, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x8000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, 0x0, 0x20044081)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000400)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000200)=0x10)
setsockopt(r10, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRESDEC=r7], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f0000000180)="4e9a3b6d37b54a5948c4936e2100"/27}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000280)={0x2, [<r12=>0x0, 0x0]}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000040)={r12, 0x1}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r12, 0x1}, &(0x7f0000000080)=0x8)

2.339534615s ago: executing program 1 (id=4616):
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)

2.216962811s ago: executing program 4 (id=4617):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x20) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x20)
ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})

2.128327542s ago: executing program 0 (id=4618):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800024000000000240001801400018008000100e00001000000000004001640"], 0x50}}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800)
setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000180)=0x1, 0x4)

2.124450421s ago: executing program 2 (id=4619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r6=>r5, 0x4, 0xfa, 0x8, 0x59, 0x2a, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0xc0, 0x700, 0xe}})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newchain={0x44, 0x64, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0xffe0}, {0xfff3, 0xf}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}})

2.071840033s ago: executing program 1 (id=4621):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0xdadd61dda054b40c}, 0x0)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x2a, 0x2, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="1e2e52710000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) (async)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="1e2e52710000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4f}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xff}}]}, 0x2c}}, 0x4000)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) (async)
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000061147c0001010000040000000000000095000000000000004febeedf9aac54db4fe65f7f7f2042a7c4c204c0be19e5a4f0cd3d62461fab0f013796232c60320e0abf0aa233b06ad65b99353d465fffe4eaa37b5f0c0286142ec60c4b1f075f76f38c1c83cdbb3063d47644a7c33a2c7adfceb709dff550312c9ace313e2a28a675b9eab50c12d3d498767f7b059ac3c7471d4dae9c8dfefb00db251d391a990a5e4efcbfb9b8911edfac80398ec2"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xce, &(0x7f0000000780)=""/206, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)

2.000662553s ago: executing program 0 (id=4622):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010)
recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0xfffffffffffffd21, 0x100ca, 0x0, 0xfffffffffffffd25)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b}, 0x28)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'sh\x00', 0x30, 0x660f5380, 0x7}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0x81, 0x6c}, {@remote, 0x4e23, 0x10002, 0x2, 0x1}}, 0x44)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000240)={'wlan1\x00', @multicast})
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0xfffffffffffffffd)
r6 = socket(0x400000000010, 0x3, 0x0)
connect$inet6(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'})

1.973841829s ago: executing program 4 (id=4623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0xee36}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87)

1.938379473s ago: executing program 2 (id=4624):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffd)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x2000800)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0)

1.862760433s ago: executing program 0 (id=4625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) (async)
r3 = getpid()
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async, rerun: 64)
r9 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) (async, rerun: 64)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/uts\x00') (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0xb8a1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0xb}]}}}, @IFLA_CARRIER={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) (async)
sendto$packet(r6, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005"], 0x270}}, 0x0) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlinkprop={0x7c, 0x6c, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x10}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "d56689e031b832f9a8ec293483b0b12dca"}, @IFLA_MAP={0x24, 0xe, {0x8, 0x1ff, 0x8, 0x185, 0x8, 0x6}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_WEIGHT={0x8, 0xf, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async, rerun: 64)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0xffffffffffffffff, [0x9fb, 0x8, 0x8000, 0xb51, 0x7fff, 0x589]}) (rerun: 64)

1.773814827s ago: executing program 4 (id=4627):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5)
sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f00000000c0)={0x6, 'veth0_to_batadv\x00', {0x10001}, 0xa000})

1.702662157s ago: executing program 3 (id=4628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x8, <r5=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=r5, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={<r6=>0xffffffffffffffff, &(0x7f0000000340)='GPL\x00', 0x40, &(0x7f0000000380)={@_ha_fsid={[0x40, 0x3]}, {0x1000, 0x7, 0xda, 0x7}}, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=0x8})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="090000000000000000000000000052c957bb3bec1fc972c1dbcc81d1a472a903fc93e7a669f38a10b7b28654eedd4d7db7ead504ef88448dc0dcb2be7d26f73c58158994c6fbf4ec0788f5d517c3a2ac651afdb6f5afd36d6e97bddc46463614d55d72478f5eb16b4ec04963d7ff88a5c5826a22de7dff82c2b8d1a3964c061b2b7aaa513d235d63e903390423293c7845ac3553ddbafee1650818e34d48b9aaf04f3c28a36f0f26c98ba22afc52e100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000300"/28], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x1f, &(0x7f0000000300)=""/31, 0x0, 0x62, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x4, 0x1d67ad1e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, r7, r8, r1, 0x1, 0xffffffffffffffff, r10], &(0x7f00000006c0)=[{0x1, 0x4, 0x1}, {0x1, 0x3, 0xd, 0x7}, {0x4, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x6, 0xc}, {0x3, 0x1, 0x7, 0x5}], 0x10, 0x5}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r1, r11, 0x2f, 0x2030, 0x4}, 0x20)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r13, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004016)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0)

1.600749141s ago: executing program 1 (id=4629):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@_ha_fsid={[0xb1, 0x2]}, {0x40, 0x760, 0x1ff, 0x6}}, {{[0x8001, 0x4, 0x7, 0x7]}, 0x0, 0x2, 0x2, 0x0, &(0x7f0000000000)=[{{@_ha_fsid={[0x3, 0x1]}, {0x6, 0xf800, 0x6, 0x8000000000000000}}, 0x4, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x17c1, 0x3]}, {0xc, 0x7, 0x8, 0x3}}, 0x2, 0x0, '/dev/rfkill\x00'}, {{@align=0x2c6, {0x400, 0x8001, 0x3, 0x1}}, 0x0, 0x0, '/dev/rfkill\x00'}, {{@align=0x9, {0xc99, 0x0, 0x3, 0x5}}, 0x830, 0x0, '/dev/rfkill\x00'}, {{@align=0xa44, {0x80d5, 0x0, 0x10, 0xdd8}}, 0x7fffffff, 0x0, '/dev/rfkill\x00'}, {{@align=0x10001, {0x391, 0x9, 0x2, 0xe}}, 0x6, 0x0, '/dev/rfkill\x00'}]}})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
close(r2) (async)
close(r2)

1.600222978s ago: executing program 0 (id=4630):
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0xfffffff0, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000003c0)={<r3=>r1, &(0x7f0000000000)='/dev/net/tun\x00', 0x4800, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0xa]}, {0x5, 0x100, 0x9, 0x8}}, 0x9, &(0x7f00000002c0), &(0x7f0000000380)})
getpeername$qrtr(r3, &(0x7f0000000400), &(0x7f0000000480)=0xc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)

1.569819884s ago: executing program 2 (id=4631):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xa, 'veth1_to_batadv\x00'})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000180)='&^{\x00', 0x8c81, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x5]}, {0xb4fe, 0x3, 0x1000, 0x6}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}, {[0x5, 0x6, 0x8, 0x5]}, 0x0, 0x8f, &(0x7f0000000280)=""/143})
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000400)=""/212, &(0x7f0000000500)=0xd4) (async)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000400)=""/212, &(0x7f0000000500)=0xd4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c981e04}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}]}, 0x50}}, 0x4000000)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x43c, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfe, {0x4, 0x2, 0x17, [0x9, 0x8, 0x10001, 0xe6, 0xfffffffb, 0x5, 0x5df, 0x0, 0x5, 0x80000000, 0x641, 0x5, 0x80, 0x7, 0x6, 0x0, 0xf0b, 0x2, 0x10000, 0x1, 0xfffffff9, 0x8, 0x20, 0x6, 0x4, 0x0, 0x8, 0x0, 0x9, 0x2, 0x3, 0x8, 0x89, 0x9, 0x4, 0x17, 0x6, 0x9, 0x70ab, 0x8, 0x9, 0x4, 0x7, 0x2, 0x3, 0x5, 0x8ac, 0x2, 0x4, 0x6, 0x6f2, 0x5, 0xd3, 0x4, 0x9, 0xc, 0x3, 0x4, 0x7, 0x5, 0x3, 0xb000, 0x80, 0x5a1e], [0x372c, 0x7fffffff, 0x6, 0x8, 0x8, 0x3, 0x3, 0x9, 0x2, 0x101, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x200, 0x4, 0xd4b7, 0x1, 0x6, 0x5, 0x9, 0x4, 0x0, 0x8, 0xc, 0x7f, 0x66, 0x7fffffff, 0x2, 0x6, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0xffff, 0xffff, 0x0, 0x99, 0x10000, 0x7, 0x9, 0x81, 0x4, 0x81, 0x4, 0x7fffffff, 0x432, 0xc60, 0x3, 0x4, 0x200, 0x8000, 0x2, 0x1, 0xfffffffc, 0x8000, 0x7e, 0x95, 0x9, 0xe], [0xffff8000, 0x5, 0x5, 0x9, 0x81, 0x1, 0x9, 0x7, 0xffffff83, 0x10001, 0x80, 0x20000000, 0x2, 0x1000, 0x4, 0x1, 0x44b, 0x3, 0x4, 0x7, 0x6, 0xd93, 0x80000000, 0x0, 0x5, 0xffff, 0x2, 0x5, 0xfffffffb, 0x0, 0x320, 0x7, 0x3, 0x8c3, 0xffff, 0x6, 0x4, 0x7, 0xf6, 0x8, 0xb, 0x7, 0x7138, 0x2, 0x8000, 0x3, 0x3, 0xe, 0x0, 0x5, 0xf, 0x2, 0xa855, 0x9, 0xffff, 0xffffffff, 0x9, 0x6, 0x6, 0x10001, 0x8, 0x7e22, 0x2, 0x2], [0x4, 0x10001, 0x6, 0x9d, 0x8, 0x4efc, 0x1, 0x9, 0xaf, 0x7, 0x33f461a9, 0x5, 0x5, 0x8, 0x3298dd02, 0x8, 0x2, 0x7, 0xff, 0x4, 0x4, 0x7ff, 0x10, 0x80000001, 0x36, 0x9, 0x2, 0x80, 0xfff, 0x7f, 0x2, 0x1, 0x9, 0x6, 0xff, 0x68a1, 0x7, 0x1, 0xfa5a, 0x4, 0x5, 0x9, 0xc39, 0x10000, 0xa2bf, 0x5, 0x0, 0x4, 0x1, 0x9, 0x5, 0x273a, 0x0, 0x4b300000, 0x3, 0x7, 0x1ff, 0x2000000, 0x1, 0x6a, 0x78, 0x7, 0x745570c8, 0xe], 0x1b, [':-,/\x00', '.-/)+*\x00', '\x00', '&^{\x00', '\x18-:(]\x00', '{!^\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x444}, 0x20000800) (async)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x43c, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfe, {0x4, 0x2, 0x17, [0x9, 0x8, 0x10001, 0xe6, 0xfffffffb, 0x5, 0x5df, 0x0, 0x5, 0x80000000, 0x641, 0x5, 0x80, 0x7, 0x6, 0x0, 0xf0b, 0x2, 0x10000, 0x1, 0xfffffff9, 0x8, 0x20, 0x6, 0x4, 0x0, 0x8, 0x0, 0x9, 0x2, 0x3, 0x8, 0x89, 0x9, 0x4, 0x17, 0x6, 0x9, 0x70ab, 0x8, 0x9, 0x4, 0x7, 0x2, 0x3, 0x5, 0x8ac, 0x2, 0x4, 0x6, 0x6f2, 0x5, 0xd3, 0x4, 0x9, 0xc, 0x3, 0x4, 0x7, 0x5, 0x3, 0xb000, 0x80, 0x5a1e], [0x372c, 0x7fffffff, 0x6, 0x8, 0x8, 0x3, 0x3, 0x9, 0x2, 0x101, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x200, 0x4, 0xd4b7, 0x1, 0x6, 0x5, 0x9, 0x4, 0x0, 0x8, 0xc, 0x7f, 0x66, 0x7fffffff, 0x2, 0x6, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0xffff, 0xffff, 0x0, 0x99, 0x10000, 0x7, 0x9, 0x81, 0x4, 0x81, 0x4, 0x7fffffff, 0x432, 0xc60, 0x3, 0x4, 0x200, 0x8000, 0x2, 0x1, 0xfffffffc, 0x8000, 0x7e, 0x95, 0x9, 0xe], [0xffff8000, 0x5, 0x5, 0x9, 0x81, 0x1, 0x9, 0x7, 0xffffff83, 0x10001, 0x80, 0x20000000, 0x2, 0x1000, 0x4, 0x1, 0x44b, 0x3, 0x4, 0x7, 0x6, 0xd93, 0x80000000, 0x0, 0x5, 0xffff, 0x2, 0x5, 0xfffffffb, 0x0, 0x320, 0x7, 0x3, 0x8c3, 0xffff, 0x6, 0x4, 0x7, 0xf6, 0x8, 0xb, 0x7, 0x7138, 0x2, 0x8000, 0x3, 0x3, 0xe, 0x0, 0x5, 0xf, 0x2, 0xa855, 0x9, 0xffff, 0xffffffff, 0x9, 0x6, 0x6, 0x10001, 0x8, 0x7e22, 0x2, 0x2], [0x4, 0x10001, 0x6, 0x9d, 0x8, 0x4efc, 0x1, 0x9, 0xaf, 0x7, 0x33f461a9, 0x5, 0x5, 0x8, 0x3298dd02, 0x8, 0x2, 0x7, 0xff, 0x4, 0x4, 0x7ff, 0x10, 0x80000001, 0x36, 0x9, 0x2, 0x80, 0xfff, 0x7f, 0x2, 0x1, 0x9, 0x6, 0xff, 0x68a1, 0x7, 0x1, 0xfa5a, 0x4, 0x5, 0x9, 0xc39, 0x10000, 0xa2bf, 0x5, 0x0, 0x4, 0x1, 0x9, 0x5, 0x273a, 0x0, 0x4b300000, 0x3, 0x7, 0x1ff, 0x2000000, 0x1, 0x6a, 0x78, 0x7, 0x745570c8, 0xe], 0x1b, [':-,/\x00', '.-/)+*\x00', '\x00', '&^{\x00', '\x18-:(]\x00', '{!^\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x444}, 0x20000800)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) (async)
ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9)
r5 = socket(0x2a, 0xa, 0xb)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000c00)={<r6=>0x0, 0xae, "db7c4e2abcc26c2052f7c0f1c68ce0af94312fe012194422526d2025285f39a0fbef366b3038916bb595050fde9199afdd0ee81ac85102ad1677188b212e3ed42a13d8ea16db231a2bee3a1e8c629cb894111f88facfff9d628c84cbd4137b7a422452d4298f5ddd599944e88881a8ef3543703aad61b23b3b4bbca126fa340eb1d706a5c05dce12bb79dba57cca191a149fecc6ebf1226537339e24e7a6db2be9cdff32e3bf3040fec80192917c"}, &(0x7f0000000cc0)=0xb6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000d40)={r6, 0x10, &(0x7f0000000d00)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000d80)=0x10) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000d40)={r6, 0x10, &(0x7f0000000d00)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000d80)=0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r5) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r5)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r7, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2a}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x8000)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x5e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x60000081) (async)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x5e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x60000081)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c804}, 0x10)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000001180)={0x50, 0x8a02, 0x4, 0xc, 0x7, 0x81})
ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000011c0)="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") (async)
ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000011c0)="2763e96722a7d713247c74ede3e09667ebbcce3f0d2a7c810a16a5fdeeca29904b40af12dd21492f79d548b2cf495399f38f50c3b231b2f4eb88861b7215c51a7e94c5203855ea8910227e1aa1662c66135d82ac74e648e5b6bcdcca04ceb2df10de743b054c7d81d63aaf1fc395f183e47430989a5c1589f0b96bf78a7af4bc40a5ed6600185036da80d6230bf77a34bceafba03459975aab1a8207548728a3b07146b8b446b4577c7dce38c28acae23544d68820a26f9ad542eeef3b21307950cae0b240147c19c9863a5fadf8650cce566a3d3116f63b19125dc8e655383547c35aeb64550f845112be5604a082495341419861aeb68e0ab355fed3472992d1e838878e624a5beaf26771f83493e92c0076362f7ccf1c49fc498f9b2e6d11384aab998ab5016bd95001292061bc62cf213f22201a1bf020bbf3eb34026e4650b30f95f4184372f51a9dd514abe897aba0beb34a70fd18d34143f290b65a28448dddcc7861bf2faaa19162d141acd369fa5c5ce539d61d5e58d06706a7f37bc4c995c79bb138b4f643da7f0f8d8170f63faf047c5f169acbdd461936461c9d98dcfc453084ff33ae7b4f521cd10a824d176217bcf3f99c3171b1064dedd5fa29455c8bae744eb8cc1e6bb6a7bc1519c590cfc4f4c617f64a2b3463c7263c7362f2c0aaba772224f73675c28b52d10b5718d1c674d3058d20a61518e0e80dc58d4ae5e54295fb0e9d598b9d3c16ff535eb65c1068a56130dfbe3701c2672d3227652d8341184873e9f10e3be517ee89e3c806358c605071aee4c482721fbfa2f57c02b698caccd7ad8049f750b7ef22afd761713ce31926adab09544dbabd0ffb9508e15a21842195482e27d3271e45e412cceaf7f5e3ca454f9e802cfad1f713180d397e2e694ff2a60b9fb15a40e70b148d47f94da6243d7c5e4c94d5a8ff04bc5fe75a67e927bd49f8e78063ad30fa1b88702c786ab5ef8a465321cfb01a61c15267643975cfd6e091759c3f71ba6e5addf6e7c4fe3f723816f5309c7956bfb3f6cfdd45fdf177214f3f5a425af85d5d92f40451d1cd3f7a3dca4ab4f6827c9ed1850c282a820beedfd8a3aaca420a63d20688b130d1508b48c7be6d90501d3f689d24e5bf2ab7191de5fa2873fc8891a25f993854628647baf4901e4d354d3eb46b8b9be4a2836c3bc922f56813e4371463644e59d68a027e1c3f7a49c00be85ff0d3873e0418151d0188e0a4ea1071cb375e293ece1ddfd8c9564038569090ab579ff960bc1a4779bee1e95da119533a2e549a1f890be6923fa21fa0909b1ba981603cc09b3eda5272f77c6c53a0c36faa58587fbc68013c899dda8bf1bdd8e801d2eca8145781ed1795cda21915bd1e38a13a57d428a748971c8fbb3584032278a82078f5824cb82583b20c70956eb8732ef4dfc8cfbd3a858676dff3d55aa3c27903857f488ecc5a9b54374399dfb58d7905c45cf4bdf52cc578a4f48866ee807bd76afcf0bc41f083d38755e0ed045d633bdb0a56eb7de50b369cd6ee493c5dd6bc5c4c98fb0a45476229a54e1e04283e9029054899851bb12fbbf55dc91d57f8605cf630159fbb333ecda87767f8c89634b71ec25016df69b612cc4f3ef40d50a69d27bf2b1abde144ca1c1f96c538b7f06a0fa1dec9ecdea18b531e1b09d2f82071cd0a54dde2f691425068fd8ce6657a626d47472e9f2db58c67e8a8a4cacbdd791505962810b0bb206f038ac2dff6b5b6ed63f601191267c5b63122f79d670a8a497a3346f9f15d77c649114b1bc64f44b571e1994cfb2bb1102cf55512da181b9d12c7a5bae833a6da0e5dcacf3be3b9740a8ee2ed2a4b6f9805ec471ac7eed59a3d8532916b3633134e655dd6457916dc3506b1728cfc2a4608d7bce1a2612c522ba52bd727662efa33803d41afa8899cc6d5c654fa3ee4a54320a41150681335f4277128c57c72c5592fd0a5092832ad8278dc5e28c38febe7e0051dad555e6e38e0351108ddb39b5df29d8e45a408236e7920abdb2f7a175ad30151d39c92ee7cdca8ebe246b4708a337e6e2052f7fbd088711c5c40524d39c7ed606da37f7b836449b780d1a09dd9b3e002f30aab97f5dd607e50e912b000afe162d95772d034ddb4e2027009de0a6c504b378694952f0d72e81992ed13e2f393ab5786ea8290c45390c9677f52d39c9fad6b5ad4839e4e514295732464b3f75e9dbbe3f711f5f7a678bbcd6584552324e8541ec2fd41851d4f21266bb71770de06f6be6e9929ed2b3524986cbfb4c14bebd68229fc10652bb24d07590454d643b7453428d22a933061a831827e85f9ad1d1614c407f2e95436a16a70fa2c47b04b7d73252269c3696032b0196fd8eb3d6859895fb45ab5c54047a4b3a1e59a4f744aa1f0a01f78bf680d05d5c9365ffb3fe2fda1db8801f8591a9d3b1239a78a76cf7d4927117043a45b2ae8c9b5318f849424c242cb9a44b26d939df0dbcdc030a991316ac30f9b41c31b063247c5e79953446613affeca92848ec327f9143f496ca8549eea0def697a5be356106ed9f826baf432cabe63814656cf67fb78666b8ae470da1ac65e02feb5e328ee75d6555271d15b07f711b9df808497a74cc08bf3df683d31887e0eac99edb5c9628ba5553a74e07ac23a2761d6a899b40ad42603f11f3bc3b52013e5f4e267611ea67e9afea933610d815aad18ca876acc13750cecaf018c247bbf6dd57ebe608a1df5c493505b281b35f55d5cf6214795cde0c986dc8a5a858ceda6769ee72222dbff1cd43db776e6cdb9a7f2aa19e9da704ca8f5329503f92abed58c639541094d939f012bcba0eece6c67ea15d0aaba4f3dd9f392fa2200ab4c90202ffbe2795c05d5b2b5a0e4e4bb77713e3361054817bb36e632e2f057e9acd939fe4d5a7783609c63a424275b2a4caacda91c1dfece469ca53577961375e453e6f4a81adb7b5a75367b65b87b45afeb1166e3d7d0d8b0acc5420539bcd91429e85f8f03f898f8128775984aa47197a19aaccfa85c0ee32c40bd04a5ce53048ee0287c3554b73f80d875bd8a14f8b5870a58955ec0bb616192109f2a08863c28139d20ab8fb46894ceeaf187aa749de6d98c952f3e9014b3332d7a4854505a8ec91babe39280a363f382ecf08537daf5007af2bd65da203345a7684ba74875eb29702f1297f787606dfc257f5730cb2846878fdcf255ca06c524948e094e001c805aedbce723a8c639a8ecafe841f2f043c2149532eea7a7c653d419a34cc87c460869c00188f9b9d7c1bbe4e8b10449154b38f5e4ee53dde58bb5956b00867692975f4ead82636a5ee70111dac6e377f1d7d076db0c24eba7a13f7553bc09caf243ada9bf692bf412d8f104034e5ea2ec0f59a3424205a066265fa53a0eecf384f0bd3e8254349e207287c2084f9a5b5e4724f49cbf4223f1b29084e817f66b6b32460b35160ed332ee17963cc165bdacaa456d6c1aa748fc0c1b7905b82036d38e56f8bbe4e54f2714a83c837bb2303763d0b5b7b88495832e46a210991dcfd767dc1163e3751fdd780876cc02f58eb5b1dbfc260c03730f6f8949fb179ea0a704e719fae8195e57204cb0c4feab5c13a2a28289c8ed2ea2c303723cd6e8688e2be43771310b7be57dcabbe65df3bb265ff143314d31eeeb6dc5b40ea68691acaa8c4243788e5508b02ba363d767718b6341199dea5c57fd580902bc265603a6ecb949d2e0e1d6a047852330ca2d47fd5349f6c07aa01126f5c949edaf2897a13a6ad127a2de68448b4dbbd086b8b99ca00ebb0cc8f0d9d398099a37eda3814f0662006ff634789f566a0bc9980208d14e0a17e3e5c2d3163828d37050ea4e1d3bae3d06642d2fbd9557bfeb9c5abbe3a337b2079f10260c2bb97690870a9259b399246df6395d0a40b85b9ac62027276cc69dccc545072f7ca310fc092a092bd65c6ab08fa0d25d00f634bd98fd772d3c3426a90f9b4d8cd169a1011e8d7578be8534032d2be0b08fb388aa17cbe8e280e84911916550224ec971035c481d2c5672883bb8ae9eeb10ed1ce5d9cfcd183c877f970e7f53799d3f35f264f4e8cb791f283d45b19500ea08f243ae179ac6ba82ec377988a8297561296ff946744f67144a7eb93378d3e2d9b2faf1f93de2da304ebf7a80c4f4fa20b8bb56fc4b51fbeebb3e70334fc1d4aae3611a6494581f7d3d0c94e2db1adecbbec7d363f54b7ef8c9810fd9d5ac083c2b22cef3d75e76dff1800b0493551d3b91cdd890deaca0e1b9073b3d319894edc2c62be268da7da835e3b0192b109ac5a17291328b5a6e77fcb3db9977f64613dfd262c6d7b37043c98558d79ddf797afbecdecfd1068334ef0a8f5ec362340eec1cb34fc4d848733ced88c2ae0ff632c421c8e6a250be914c2d86b042c82bc49573f8eafdce075299953f2cbd0e755ae834837a76d1ff558267b16cd673c64d04349ec0078b6efca8f12a745358035d45c82c17a5c5aaf2f41e42f56d26f330488663b46dd341ab4598b0a81fe59896e7598182a5e86f1c73c64ecf89751f9e849023c788ae92158ba69ac831a8cad6660ab71e0a8112694f1dee6b82239f01fc88f51b61489474b844212000ca76512adb4a669512c84706945e73491fa3d90b1885922c7fba5cee82f71510c9a12e25af69ac326f3c7d182c1829b9817ba68f3a759903da64865be175afb0b01e1a832fbcb1e31362ae492db287943236396698479ab2753d363c8e1bb56bef1cab9f732746a877726de13327e5cdefc752cc8b42f00e0f175b5e12728ee0bf6b3bc19e9e0216d42b720328351189be04a9188031faa8b30625ff9103fff8a7dc674e22c11439c511a2ffd61d0a25e30c8c085d9415f926aef30385839317bbef6533a4ce81e0c446cae6fd464f9330d3b57cc1284e9be16feeb48146a14927b45490e8840b9301cdbb52d15730c81bb1bd1a152152e4c504fea0c9a59695f884c871f5cf696bc85cdff3727899f4e2a3284c1bd488486f4217068114236743405b946214d0e3286d769b5fb647d7e573858f3f14fe0551ec7a8aad0ef443974d396d629d6ae582d22e076abb4b5cb8ec4a3c5223940f59f2532e543246dcb26dc7063e2825465256f73d78cb4c4effdddf71ca5690212520a751914c52f568b469c45ebdce4a7d87130e3aacea8527d24a0d246475b58717f4f85bffd3f003380096f74f03012be8f6308eefc6622db5c983027185ed81394e908799cb1a1c15d1aed0433665b8b8fb218a36c65b438084d92c8fcc4fe817df5f2529045d088bbbe9ff3c9f209a37f15665ee1c150f74b9882fa98b9701fe76ac7d45ab89cc79f685472dc7188eb7f81ce3be13bc8928cd4ed5a93c3dac73a278a31a977f8c798b82ce9e7a70b88cb5de54519e9887e2c5ecb8299d7f753ef91c3627e8efa1bcda90475e1e7f17ba3c9878189117e29949c2637dffb279f78b72288bbc15d20a162587b8b8a6d8a0f9e78dc87c657f8b79e08cd055a501af457a348ddc15f02e028fdb7788ff5da338d469ba06d4700e44a439f8c1a9af03e2f584e95c9aa341557acad5488818356122aae29305273c9f99dd9102783f6124844b445bb67ed8543caa481afc5fee1a81b76d67bbe16ee25df0c052467d13170d93181785c77e4222772ea6a07b5b1a079537b3c362b2a33c1bfae45226c036825965e7c3f276c3dc4943e250a8a4fd4cc9886b8e96588153195c26eec682bb7ea077d6cfacee5c711c568a0184765aa0bff3adc85242f54cab1c395cdfa740")
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x40, 0x1410, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000022c0)=0x3, 0x4)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002300)={@mcast2, <r8=>0x0}, &(0x7f0000002340)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000002380)={'ip6_vti0\x00', r8, 0x2f, 0x6, 0xc1, 0x3c, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x40, 0x3fc0, 0xcd6}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r5) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r5)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x30, r9, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x15, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80000) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x30, r9, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x15, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000002580)=[@in6={0xa, 0x4e21, 0x7fffffff, @local, 0x3}], 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000025c0))

1.451684553s ago: executing program 3 (id=4632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

1.385154598s ago: executing program 1 (id=4633):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="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", 0xfc)
sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x7, 0xe00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x50}}, @RTA_PRIORITY={0x8, 0x6, 0xec09}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x180e8c}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x38}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4)

1.349724856s ago: executing program 0 (id=4634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="e27f00000100671e00"/20, @ANYRES32, @ANYBLOB='\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.346974384s ago: executing program 2 (id=4635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010)
recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0xfffffffffffffd21, 0x100ca, 0x0, 0xfffffffffffffd25)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b}, 0x28)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'sh\x00', 0x30, 0x660f5380, 0x7}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0x81, 0x6c}, {@remote, 0x4e23, 0x10002, 0x2, 0x1}}, 0x44)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000240)={'wlan1\x00', @multicast})
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0xfffffffffffffffd)
r6 = socket(0x400000000010, 0x3, 0x0)
connect$inet6(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'})

1.245662589s ago: executing program 1 (id=4636):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x313}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}]}, 0x28}}, 0x8000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.244802249s ago: executing program 3 (id=4637):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0xffffffff}, 0x10}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52)
connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@generic={0xb, "7d132d0bd48e59d29fae0a77c5285ac92374b2b9e00522909bc33de2ba938d96ff1698f0233e7b30d9ddc66f7f618276779bf30e16980be750874e2358794f6fa50afa87472be5c0b1809f050d4959eccc6b2b22c1338b083fba2c32181bdf63df5136821b96bad189524f49fa658822f4b2ced1bb8d53d3be86b4059d27"}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$inet(0x2, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0xde, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, r1, 0x1, 0x0, 0x3, 0xe}, 0x50)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002200000225bd705d08a9cc00fddbdf2502000005060000080e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x804)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000440)={{0x88, @empty, 0x4e22, 0x1, 'wrr\x00', 0xa, 0x7dfe, 0x15}, {@multicast1, 0x4e24, 0x3, 0x4, 0xffff, 0x1}}, 0x44)

1.205615006s ago: executing program 4 (id=4638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdc03, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xfffe, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0x7, 0x1000, 0x0, 0x40001c2b, 0x8000, 0x7ff, 0x9d4, 0x2000000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, 0x0, 0xffe6)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={<r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_DEL_STATION(r10, 0x0, 0x4000091)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}]}, 0x30}}, 0x200488c0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3855, 0x12)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006d0010002abd7000fbdbdf2500000000", @ANYRES32=r12, @ANYBLOB="000001000800000008001d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x48d4)

1.204283172s ago: executing program 0 (id=4639):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.203138725s ago: executing program 2 (id=4640):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000100), 0x0}, 0x20)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}]}}, @info_reply={0x10, 0x0, 0x0, 0x8, 0x1414}}}}}, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x48}}, 0x0)

460.881142ms ago: executing program 3 (id=4641):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840", 0x83}], 0x1}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (rerun: 32)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r5, 0x8b20, &(0x7f0000000080))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c", 0x2a, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

372.030312ms ago: executing program 3 (id=4642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x23, &(0x7f0000000f40)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @generic={0x2, 0x6, 0x3, 0x4, 0xffff8000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0xb, 0x7, 0xa, 0xffffffffffffffff, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x6, 0x3, 0x9, 0x8, 0x10}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0xd9, &(0x7f0000000240)=""/217, 0x40f00, 0x9b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x10, 0x1, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r3, r1, r1], 0x0, 0x10, 0x510}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=<r8=>r0, 0x14, 0x1, 0x200, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x16, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x400}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000700)='syzkaller\x00', 0x401, 0x35, &(0x7f0000000740)=""/53, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x4, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x4, 0x4, 0x8, 0xa}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x15, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x1a26b0f7baec3464, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @alu={0x7, 0x1, 0xd, 0x8, 0x6, 0x6, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x3, 0x4, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3951}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x67, &(0x7f0000000a40)=""/103, 0x41100, 0x34, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x9, 0x10, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000b00)=[r8, r0, r3, r1, r3, r8, r8, r1], &(0x7f0000000b40)=[{0x0, 0x4, 0x7, 0x1}, {0x2, 0x5, 0xf, 0x6}, {0x3, 0x4, 0x5, 0xb}, {0x5, 0x4, 0x1, 0xb}, {0x2, 0x5, 0x7, 0x4}, {0x4, 0x5, 0x10, 0x4}, {0x4, 0x1, 0xf, 0x1}], 0x10, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c80)=r12, 0x4)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0xa, 0x80006, 0xa)
setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r13, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0)
r15 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r16=>0x0})
bind$can_j1939(r15, &(0x7f0000000040)={0x1d, r16, 0x8000000000000003, {0x0, 0xf0}}, 0x18)
sendmsg$nl_route_sched(r14, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x6, 0x2}, {0x3, 0xa}, {0xffff, 0xb}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8018)
setsockopt$inet6_tcp_int(r13, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r10, r2, 0x2d, 0xd, r7, @void, @value=r11, @void, @void, r9}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)

249.481103ms ago: executing program 2 (id=4643):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1}, 0x20)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x68}}, 0x0)

0s ago: executing program 3 (id=4644):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x66, 0x5, 0x7ff}) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}}}, &(0x7f00000001c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x3a, r1, r2}, {0x8, 0x1, 0x9, 0x101, 0x8000000000000001, 0x5, 0xfffffffffffffffb, 0x7}, {0x1, 0xdc, 0x10, 0x5cc10ad4}, 0x1c71efaf, 0x6e6bb7, 0x1, 0x1, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x2, 0x2, 0x7, 0x2, 0x9, 0x1}}, 0xe8) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) (async)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newrule={0x58, 0x20, 0x20, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x6, 0x9, 0x0, 0x0, 0x7, 0x10}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008810}, 0x840)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000080) (async)
getsockname(r0, &(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f00000006c0)=0x80) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x34, 0x2d, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0xffe0}, {0x8, 0x5}, {0x1, 0x9}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x3823}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x48010)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000800)={0x10, 0x0, 0x7, 0x3, 0x1, 0xc, 0x10000}) (async)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) (async)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000880))
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000008c0)=0x4) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00'}) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', r0}, 0x18) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r3, 0x800, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x66}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8014) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "670c615f4650c6a2a98161082b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5102a961c83124e4b6d272030d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc40c0}, 0x4800) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000c80))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r7, 0x8d0a9d80bac8ffd8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xef}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xcd5dbc3d94b66fa8)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb8, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0xff03}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb915}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x86}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc080}, 0x48000)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000001000)={'veth1_vlan\x00', 0x4}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000001040)={0x7, 0x80000001, 0x100, 0x80000000, 0x80000001})

kernel console output (not intermixed with test programs):

 `syz.1.2957'.
[  394.261848][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'.
[  394.570972][T17170] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2962'.
[  394.789891][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'.
[  394.892017][T17184] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000
[  395.026355][ T5623] Bluetooth: hci0: command tx timeout
[  395.870155][T17224] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  395.929637][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'.
[  397.031917][T17271] syzkaller0: entered promiscuous mode
[  397.044394][T17271] syzkaller0: entered allmulticast mode
[  397.051914][T17096] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.060407][T17096] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.069647][T17096] bridge_slave_0: entered allmulticast mode
[  397.077333][T17096] bridge_slave_0: entered promiscuous mode
[  397.087627][T17096] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.096914][T17096] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.104235][T17096] bridge_slave_1: entered allmulticast mode
[  397.105123][ T5623] Bluetooth: hci0: command tx timeout
[  397.119092][T17292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2989'.
[  397.120217][T17096] bridge_slave_1: entered promiscuous mode
[  397.169831][T17294] netlink: 'syz.2.2989': attribute type 30 has an invalid length.
[  399.184928][ T5625] Bluetooth: hci0: command tx timeout
[  399.277705][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'.
[  401.050482][T17294] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  401.074062][T17096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.118528][T17096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.265093][ T5625] Bluetooth: hci0: command 0x0419 tx timeout
[  401.296212][T17096] team0: Port device team_slave_0 added
[  401.318055][T17096] team0: Port device team_slave_1 added
[  401.503840][T17096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.542285][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.569671][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'.
[  401.593377][T17096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.610270][T17096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.618242][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.631639][T17339] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  401.646477][T17096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.678621][ T6522] batadv2: left promiscuous mode
[  401.847624][T17096] hsr_slave_0: entered promiscuous mode
[  401.877539][T17096] hsr_slave_1: entered promiscuous mode
[  401.889172][T17352] tipc: Failed to remove unknown binding: 66,1,1/750278747:2085985880/2085985882
[  401.918322][T17356] sctp: [Deprecated]: syz.0.3000 (pid 17356) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.918322][T17356] Use struct sctp_sack_info instead
[  402.064136][T17368] netlink: 'syz.2.3003': attribute type 1 has an invalid length.
[  402.659884][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.667128][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.799953][T17402] xt_hashlimit: size too large, truncated to 1048576
[  402.836937][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[  403.102168][T17404] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.177590][T17404] bridge_slave_0 (unregistering): left allmulticast mode
[  403.204040][T17404] bridge_slave_0 (unregistering): left promiscuous mode
[  403.216084][T17404] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.344774][ T5623] Bluetooth: hci0: command 0x0419 tx timeout
[  403.626858][T17096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.658053][T17096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  403.847360][T17446] syzkaller0: entered promiscuous mode
[  403.866029][T17446] syzkaller0: entered allmulticast mode
[  404.090791][T17096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.119596][T17096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  404.246665][T17470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3026'.
[  404.298800][T17096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.323445][T17096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  404.353026][T17463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3024'.
[  404.368599][T17472] syzkaller0: entered promiscuous mode
[  404.381880][T17472] syzkaller0: entered allmulticast mode
[  404.490751][T17096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.524850][T17096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  404.726579][T17485] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3029'.
[  404.882246][T17492] netlink: 21744 bytes leftover after parsing attributes in process `syz.0.3030'.
[  405.216323][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3032'.
[  405.217689][T17503] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3034'.
[  405.323060][T17096] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  405.372791][T17096] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  405.406057][T17096] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  405.428901][T17096] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  405.464230][T17515] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3034'.
[  405.493362][T17096] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  405.548211][T17096] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  405.570107][T17096] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  405.598796][T17096] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  405.982285][T17096] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.007334][T17541] netlink: 'syz.2.3040': attribute type 1 has an invalid length.
[  406.080532][T17096] 8021q: adding VLAN 0 to HW filter on device team0
[  406.105943][T13652] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.113187][T13652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.184127][T13652] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.191389][T13652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.771480][T17578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3048'.
[  406.811648][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'.
[  406.841413][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'.
[  406.930328][T17578] tipc: Started in network mode
[  406.946845][T17578] tipc: Node identity 3e53b680d1a4, cluster identity 4711
[  406.968316][T17578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.004575][T17578] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  407.142499][T17578] syzkaller0: entered promiscuous mode
[  407.160360][T17578] syzkaller0: entered allmulticast mode
[  407.174226][T17578] tipc: Resetting bearer <eth:syzkaller0>
[  407.205354][T17575] tipc: Resetting bearer <eth:syzkaller0>
[  407.338638][T17604] Bluetooth: MGMT ver 1.23
[  408.350277][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3057'.
[  408.360395][T17633] nbd: must specify at least one socket
[  410.310227][T17575] tipc: Disabling bearer <eth:syzkaller0>
[  410.323262][ T5754] tipc: Node number set to 4025988736
[  410.922314][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'.
[  411.111765][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'.
[  411.142520][T17096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.167343][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'.
[  411.301071][T17096] veth0_vlan: entered promiscuous mode
[  411.313556][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'.
[  411.344964][T17096] veth1_vlan: entered promiscuous mode
[  411.493694][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'.
[  411.519835][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'.
[  411.567206][T17748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'.
[  411.568114][T17737] 8021q: adding VLAN 0 to HW filter on device bond17
[  411.606816][T17737] bond17 (unregistering): Released all slaves
[  411.623659][T17751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3077'.
[  411.766659][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  411.818646][T17757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3078'.
[  411.974146][T17752] veth1_to_bridge: left promiscuous mode
[  411.983286][T13652] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  411.993826][T17752] bond_slave_0: left promiscuous mode
[  412.001772][T17752] veth1_to_bond: left promiscuous mode
[  412.008207][T17752] bond_slave_1: left promiscuous mode
[  412.013887][T17752] veth0_to_team: left promiscuous mode
[  412.020066][T17752] team_slave_0: left promiscuous mode
[  412.026043][T17752] veth1_to_team: left promiscuous mode
[  412.032508][T17752] team_slave_1: left promiscuous mode
[  412.038531][T17752] veth0_to_batadv: left promiscuous mode
[  412.045289][T17752] batadv_slave_0: left promiscuous mode
[  412.050964][T17752] veth1_to_batadv: left promiscuous mode
[  412.056994][T17752] batadv_slave_1: left promiscuous mode
[  412.062806][T17752] xfrm0: left promiscuous mode
[  412.069463][T17752] veth0_to_hsr: left promiscuous mode
[  412.078291][T17752] hsr_slave_0: left promiscuous mode
[  412.083948][T17752] veth1_to_hsr: left promiscuous mode
[  412.089607][T17752] hsr_slave_1: left promiscuous mode
[  412.095223][T17752] veth1_virt_wifi: left promiscuous mode
[  412.100999][T17752] veth0_virt_wifi: left promiscuous mode
[  412.107624][T17752] virt_wifi0: left promiscuous mode
[  412.113204][T17752] vlan1: left promiscuous mode
[  412.119733][T17752] macvlan0: left promiscuous mode
[  412.128532][T17752] macvlan1: left promiscuous mode
[  412.138959][T17752] ipvlan0: left promiscuous mode
[  412.144080][T17752] ipvlan1: left promiscuous mode
[  412.150185][T17752] macvtap0: left promiscuous mode
[  412.155846][T17752] macsec0: left promiscuous mode
[  412.160972][T17752] geneve0: left promiscuous mode
[  412.178689][T17752] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  412.186019][T17752] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  412.193148][T17752] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  412.201014][T17752] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[  412.208276][T17752] mac80211_hwsim hwsim10 �
: left promiscuous mode
[  412.215936][T17752] ipvlan2: left promiscuous mode
[  412.221058][T17752] gtp0: left promiscuous mode
[  412.226929][T17752] vlan2: left promiscuous mode
[  412.231951][T17752] mac80211_hwsim hwsim12 wlan2: left promiscuous mode
[  412.240145][T17752] mac80211_hwsim hwsim13 wlan3: left promiscuous mode
[  412.247408][T17752] bridge1: left promiscuous mode
[  412.252548][T17752] veth2: left promiscuous mode
[  412.258487][T17752] veth3: left promiscuous mode
[  412.264317][T17752] bond2: left promiscuous mode
[  412.269296][T17752] ip6gre1: left promiscuous mode
[  412.453715][T13622] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.476202][T13622] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  412.501351][T13622] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  412.534720][T13622] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.563089][T13622] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  412.597958][T13622] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  412.619545][T13622] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.632835][T17758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  412.645869][T13622] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  412.660299][T13622] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  412.722836][T13622] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.734200][T13622] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  412.744041][T13622] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  412.767966][T17096] veth0_macvtap: entered promiscuous mode
[  412.785561][T17096] veth1_macvtap: entered promiscuous mode
[  412.811395][T17096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.830835][T17096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.861285][T13652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.899338][T13652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.936451][T17790] netlink: 'syz.4.3086': attribute type 64 has an invalid length.
[  412.962646][T17789] netlink: 'syz.4.3086': attribute type 64 has an invalid length.
[  412.971527][T13652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.991744][T13652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.275703][T13647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.293419][T13647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.407355][T13652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.429843][T13652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.680418][T17820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.979489][T17837] bridge: RTM_NEWNEIGH with invalid ether address
[  414.318819][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  414.338567][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  414.348882][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  414.361723][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  414.374494][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  415.072970][T17879] batadv_slave_0: entered promiscuous mode
[  415.310949][T17885] netlink: 'syz.4.3109': attribute type 1 has an invalid length.
[  415.344079][T17885] netlink: 'syz.4.3109': attribute type 2 has an invalid length.
[  415.528653][T17893] netlink: 'syz.0.3103': attribute type 4 has an invalid length.
[  415.570581][T17896] netlink: 'syz.4.3112': attribute type 1 has an invalid length.
[  415.601087][T17899] netlink: 'syz.0.3103': attribute type 4 has an invalid length.
[  415.609411][T17862] bridge7: entered promiscuous mode
[  415.636712][T17862] bridge7: entered allmulticast mode
[  415.652370][T17900] netlink: 'syz.4.3112': attribute type 5 has an invalid length.
[  415.791774][T17896] 8021q: adding VLAN 0 to HW filter on device bond1
[  415.997420][T17915] __nla_validate_parse: 9 callbacks suppressed
[  415.997439][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'.
[  416.227236][T17920] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  416.464510][ T5623] Bluetooth: hci4: command tx timeout
[  416.610644][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3125'.
[  416.940291][T13652] batadv1: left allmulticast mode
[  416.967897][T17957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.982295][T13652] batadv1: left promiscuous mode
[  417.012432][T13652] bridge0: port 3(batadv1) entered disabled state
[  417.081970][T13652] bridge_slave_1: left allmulticast mode
[  417.100519][T13652] bridge_slave_1: left promiscuous mode
[  417.106746][T13652] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.141619][T13652] bridge_slave_0: left allmulticast mode
[  417.148622][T13652] bridge_slave_0: left promiscuous mode
[  417.162014][T13652] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.359734][T17978] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  417.406715][T13652] bond2 (unregistering): (slave ip6gre1): Releasing backup interface
[  417.531440][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'.
[  417.542844][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'.
[  417.678435][T13652] bond8 (unregistering): (slave geneve3): Releasing active interface
[  417.705241][T13652] bond3 (unregistering): (slave geneve2): Releasing active interface
[  417.722869][T13652] team0: Port device geneve1 removed
[  417.847211][T13652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.859126][T13652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.871319][T13652] bond0 (unregistering): Released all slaves
[  417.891500][T13652] bond1 (unregistering): (slave veth5): Releasing active interface
[  417.901601][T13652] bond1 (unregistering): Released all slaves
[  417.920102][T13652] bond2 (unregistering): Released all slaves
[  417.938026][T13652] bond3 (unregistering): Released all slaves
[  417.953298][T13652] bond4 (unregistering): Released all slaves
[  417.977343][T13652] bond5 (unregistering): (slave veth7): Releasing active interface
[  417.987417][T13652] bond5 (unregistering): Released all slaves
[  418.002797][T13652] bond6 (unregistering): Released all slaves
[  418.022005][T13652] bond7 (unregistering): Released all slaves
[  418.037731][T13652] bond8 (unregistering): Released all slaves
[  418.053842][T13652] bond9 (unregistering): (slave veth9): Releasing active interface
[  418.069932][T13652] batadv2: entered promiscuous mode
[  418.078572][T13652] bond9 (unregistering): (slave batadv2): Releasing active interface
[  418.087742][T13652] bond9 (unregistering): Released all slaves
[  418.104008][T13652] bond10 (unregistering): Released all slaves
[  418.173271][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  418.411429][T17997] bridge_slave_0: left allmulticast mode
[  418.423634][T17997] bridge_slave_0: left promiscuous mode
[  418.452358][T17997] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.492537][T17997] bridge_slave_1: left allmulticast mode
[  418.498659][T17997] bridge_slave_1: left promiscuous mode
[  418.505494][T17997] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.522922][T17997] bond0: (slave bond_slave_0): Releasing backup interface
[  418.543939][T17997] bond0: (slave bond_slave_1): Releasing backup interface
[  418.545313][ T5625] Bluetooth: hci4: command tx timeout
[  418.570286][T17997] team0: Port device team_slave_0 removed
[  418.580481][T17997] team0: Port device team_slave_1 removed
[  418.588123][T17997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.596601][T17997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.606438][T17997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.613866][T17997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.623761][T17997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  418.652450][T13652] tipc: Left network mode
[  419.644713][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3150'.
[  419.756158][T18059] xt_hashlimit: size too large, truncated to 1048576
[  420.340795][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2
[  420.365975][T18075] netlink: 'syz.4.3151': attribute type 21 has an invalid length.
[  420.425959][T18075] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3151'.
[  420.486107][T18080] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3151'.
[  420.563543][T18075] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3151'.
[  420.615221][T18086] netlink: 'syz.0.3152': attribute type 6 has an invalid length.
[  420.627308][ T5625] Bluetooth: hci4: command 0x040f tx timeout
[  421.191437][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'.
[  421.291228][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'.
[  421.686665][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3
[  421.752816][ T6533] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.776412][ T6533] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.781160][T18129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3161'.
[  421.803443][T17846] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.811437][T17846] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.822651][T17846] bridge_slave_0: entered allmulticast mode
[  421.842278][T17846] bridge_slave_0: entered promiscuous mode
[  421.869181][ T6533] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.879412][ T6533] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.895848][T17846] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.915391][T17846] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.940555][T17846] bridge_slave_1: entered allmulticast mode
[  421.952270][T17846] bridge_slave_1: entered promiscuous mode
[  422.050200][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'.
[  422.116978][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.230504][T18135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.377642][T18138] bond2: option xmit_hash_policy: invalid value (64)
[  422.390809][T18138] bond2 (unregistering): Released all slaves
[  422.440622][T18149] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3167'.
[  422.452337][T18149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3167'.
[  422.457325][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.500600][T13652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.509406][T13652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.642185][T18157] netlink: 'syz.2.3170': attribute type 11 has an invalid length.
[  422.704511][ T5623] Bluetooth: hci4: command 0x040f tx timeout
[  422.841997][T13622] smc: removing ib device syz0
[  422.913696][T13652] team0 (unregistering): Port device team_slave_1 removed
[  422.939157][T13652] team0 (unregistering): Port device team_slave_0 removed
[  423.076608][T18135] erspan0: entered promiscuous mode
[  423.092395][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'.
[  423.117425][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.356014][T13622] smbdirect: ib_dev[syz0] removed
[  423.939586][T17846] team0: Port device team_slave_0 added
[  423.976872][T17846] team0: Port device team_slave_1 added
[  424.449038][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.464790][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.536788][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.600418][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.636710][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.692565][T18218] netlink: 684 bytes leftover after parsing attributes in process `syz.4.3180'.
[  424.726212][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.742174][T18218] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR
[  424.785255][ T5623] Bluetooth: hci4: command 0x040f tx timeout
[  424.849629][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'.
[  424.850844][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'.
[  424.906033][T18228] netlink: 'syz.3.3181': attribute type 30 has an invalid length.
[  424.921049][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4
[  424.928985][T18227] netlink: 'syz.3.3181': attribute type 30 has an invalid length.
[  425.068034][T18234] netlink: 'syz.4.3182': attribute type 2 has an invalid length.
[  426.009697][T17846] hsr_slave_0: entered promiscuous mode
[  426.041825][T17846] hsr_slave_1: entered promiscuous mode
[  426.083829][T17846] debugfs: 'hsr0' already exists in 'hsr'
[  426.101006][T17846] Cannot create hsr debugfs directory
[  426.337874][T18257] __nla_validate_parse: 2 callbacks suppressed
[  426.337895][T18257] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3187'.
[  426.497746][T18260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3188'.
[  426.497857][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  426.553667][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  426.602265][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  426.628595][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  426.807074][T18258] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.832055][T18258] 8021q: adding VLAN 0 to HW filter on device team0
[  426.863480][T18258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.997762][T18258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  427.008699][T18258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  427.033986][T18258] veth1_vlan: left promiscuous mode
[  427.042865][T18258] veth0_vlan: left promiscuous mode
[  427.051298][T18258] veth0_vlan: entered promiscuous mode
[  427.060641][T18258] veth1_vlan: entered promiscuous mode
[  427.075917][T18258] veth1_macvtap: left promiscuous mode
[  427.086656][T18258] veth0_macvtap: left promiscuous mode
[  427.094294][T18258] veth0_macvtap: entered promiscuous mode
[  427.103431][T18258] veth1_macvtap: entered promiscuous mode
[  427.121025][T18258] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  427.130480][T18258] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  427.145679][T18258] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  427.163133][T18258] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  427.369187][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'.
[  427.415647][  T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.564559][T18286] hsr_slave_1 (unregistering): left promiscuous mode
[  427.599547][  T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.608864][  T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.642753][T13652] IPVS: stop unused estimator thread 0...
[  427.650972][  T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.873405][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'.
[  427.911499][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'.
[  427.959835][T18303] netlink: 'syz.2.3196': attribute type 15 has an invalid length.
[  427.993365][T18308] netlink: 'syz.3.3198': attribute type 21 has an invalid length.
[  428.124725][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'.
[  428.161696][T18303] netlink: 'syz.2.3196': attribute type 15 has an invalid length.
[  428.515519][T18341] ������: renamed from vlan1 (while UP)
[  429.393218][T18383] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  429.610703][T18381] bond4: (slave geneve4): making interface the new active one
[  429.637357][T18381] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  429.664821][T18388] 8021q: adding VLAN 0 to HW filter on device bond4
[  429.687822][T18387] tipc: Can't bind to reserved service type 2
[  429.703743][   T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  429.731412][   T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  429.776412][   T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  429.797159][   T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  429.810768][T18393] netlink: 'syz.3.3214': attribute type 9 has an invalid length.
[  430.396647][T17846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  430.448834][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  430.492201][T18438] netlink: 'syz.0.3223': attribute type 4 has an invalid length.
[  430.519970][T17846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  430.552461][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  430.576458][T17846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  430.589358][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  430.598124][T17846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  430.611079][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  430.905315][T17846] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.979735][T17846] 8021q: adding VLAN 0 to HW filter on device team0
[  431.015400][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.022627][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.063763][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.072428][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.149111][T18473] netlink: 'syz.0.3228': attribute type 21 has an invalid length.
[  431.242472][T18476] xt_CT: You must specify a L4 protocol and not use inversions on it
[  431.607286][T18497] netlink: 'syz.3.3233': attribute type 21 has an invalid length.
[  431.656719][T18497] IPv6: NLM_F_CREATE should be specified when creating new route
[  431.679048][T18497] netlink: 'syz.3.3233': attribute type 1 has an invalid length.
[  432.581914][T18547] netlink: 'syz.3.3243': attribute type 2 has an invalid length.
[  432.628240][T18553] ipvlan2: entered allmulticast mode
[  432.642499][T18553] batadv_slave_1: entered allmulticast mode
[  432.661899][T18553] batman_adv: batadv0: Adding interface: ipvlan2
[  432.683374][T18553] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.750053][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.791776][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.831768][T18553] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  432.895171][T18564] __nla_validate_parse: 8 callbacks suppressed
[  432.895191][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'.
[  433.178397][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.198092][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3252'.
[  433.202413][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3252'.
[  433.451879][T18593] netlink: 'syz.2.3253': attribute type 1 has an invalid length.
[  433.461721][T17846] veth0_vlan: entered promiscuous mode
[  433.484724][T18593] netlink: 'syz.2.3253': attribute type 4 has an invalid length.
[  433.503422][T18593] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3253'.
[  433.505948][T17846] veth1_vlan: entered promiscuous mode
[  433.573230][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  434.087553][T17846] veth0_macvtap: entered promiscuous mode
[  434.139560][T17846] veth1_macvtap: entered promiscuous mode
[  434.230141][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.296572][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.357572][T13652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.360655][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'.
[  434.403332][T13652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.433910][T13652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.571659][T18631] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  434.589275][T13652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.720498][T18637] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003
[  434.934207][T18639] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  434.979741][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.987008][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.169191][T18651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'.
[  435.206787][T18651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'.
[  435.403947][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.458329][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.642063][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.681094][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.783275][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'.
[  435.977860][T18696] netlink: 'syz.3.3279': attribute type 1 has an invalid length.
[  436.070405][T18696] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.093311][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'.
[  436.648811][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  436.664071][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  436.678932][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  436.689555][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  436.698362][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  436.872075][T18728] block nbd1: Unsupported socket: should be TCP or UNIX.
[  438.468914][T18803] bridge_slave_1: left allmulticast mode
[  438.489019][T18803] bridge_slave_1: left promiscuous mode
[  438.511371][T18803] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.536515][T18803] bridge_slave_0: left allmulticast mode
[  438.558678][T18803] bridge_slave_0: left promiscuous mode
[  438.582043][T18803] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.786339][ T5625] Bluetooth: hci3: command tx timeout
[  438.905860][T18830] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3306'.
[  438.986810][T18718] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.995676][T18718] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.003001][T18718] bridge_slave_0: entered allmulticast mode
[  439.020195][T18718] bridge_slave_0: entered promiscuous mode
[  439.030768][T18718] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.038403][T18718] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.052356][T18718] bridge_slave_1: entered allmulticast mode
[  439.065900][T18718] bridge_slave_1: entered promiscuous mode
[  439.135999][T18718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.151420][T18718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.315672][T18845] pim6reg: entered allmulticast mode
[  439.339356][T18718] team0: Port device team_slave_0 added
[  439.376656][T18718] team0: Port device team_slave_1 added
[  439.406830][T18851] netlink: 'syz.2.3312': attribute type 5 has an invalid length.
[  439.415282][T18852] netlink: 'syz.2.3312': attribute type 5 has an invalid length.
[  439.626132][T18718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.650406][T18718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.712698][T18718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.729320][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3316'.
[  439.778483][T18870] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3317'.
[  439.807089][T18860] bond5: Unable to set down delay as MII monitoring is disabled
[  439.849261][T18860] bond5 (unregistering): Released all slaves
[  439.909286][T18718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.917088][T18718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.943771][T18718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.140668][T18718] hsr_slave_0: entered promiscuous mode
[  440.168701][T18718] hsr_slave_1: entered promiscuous mode
[  440.185516][T18718] debugfs: 'hsr0' already exists in 'hsr'
[  440.194116][T18718] Cannot create hsr debugfs directory
[  440.297219][T18896] x_tables: duplicate underflow at hook 2
[  440.795503][T18916] netlink: 'syz.4.3330': attribute type 2 has an invalid length.
[  440.854878][T18897] syzkaller1: entered promiscuous mode
[  440.860509][T18897] syzkaller1: entered allmulticast mode
[  440.874646][ T5625] Bluetooth: hci3: command tx timeout
[  441.010665][T18718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  441.022413][T18718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  441.033112][T18718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.055217][T18923] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3333'.
[  441.079606][T18924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3333'.
[  441.090852][T18927] netlink: 'syz.1.3334': attribute type 22 has an invalid length.
[  441.104656][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'.
[  441.141165][T18927] netlink: 'syz.1.3334': attribute type 22 has an invalid length.
[  441.152514][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'.
[  441.211451][T18718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  441.224160][T18718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  441.238189][T18718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.386559][T18937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3335'.
[  441.427940][T18718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  441.438655][T18718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  441.453348][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3336'.
[  441.458632][T18718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.503459][ T5623] block nbd1: Receive control failed (result -107)
[  441.526442][T18932] nbd1: detected capacity change from 0 to 63
[  441.548610][ T5625] block nbd1: Receive control failed (result -104)
[  441.549238][ T7814] block nbd1: Send control failed (result -32)
[  441.565105][ T7814] block nbd1: Request send failed, requeueing
[  441.579304][ T1676] block nbd1: Dead connection, failed to find a fallback
[  441.590090][ T1676] block nbd1: shutting down sockets
[  441.596046][ T1676] blk_print_req_error: 114 callbacks suppressed
[  441.596063][ T1676] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  441.613311][ T1676] buffer_io_error: 138 callbacks suppressed
[  441.613329][ T1676] Buffer I/O error on dev nbd1, logical block 1, async page read
[  441.628218][ T1676] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  441.637469][ T1676] Buffer I/O error on dev nbd1, logical block 2, async page read
[  441.647810][ T1676] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  441.657876][ T1676] Buffer I/O error on dev nbd1, logical block 3, async page read
[  441.710595][T18718] netdevsim netdevsim0 
 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  441.721285][T18718] netdevsim netdevsim0 
 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  441.732768][T18718] netdevsim netdevsim0 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.110113][T18963] xt_hashlimit: size too large, truncated to 1048576
[  442.126020][ T7363] IPVS: starting estimator thread 0...
[  442.224397][T18969] IPVS: using max 36 ests per chain, 86400 per kthread
[  442.375232][T18718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  442.422458][T18718] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  442.456817][T18718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  442.492074][T18718] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.507845][T18718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  442.523000][T18979] xt_CT: No such helper "snmp_trap"
[  442.533669][T18718] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.565647][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'.
[  442.574665][T18718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  442.593068][T18718] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.770069][T18718] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.791937][T18718] 8021q: adding VLAN 0 to HW filter on device team0
[  442.807747][T13652] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.814871][T13652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.829223][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.836341][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.944959][ T5625] Bluetooth: hci3: command tx timeout
[  443.173532][T18718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.222547][T18718] veth0_vlan: entered promiscuous mode
[  443.233747][T18718] veth1_vlan: entered promiscuous mode
[  443.268982][T18718] veth0_macvtap: entered promiscuous mode
[  443.279909][T18718] veth1_macvtap: entered promiscuous mode
[  443.297767][T18718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.312527][T18718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.330041][ T6522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.339568][ T6522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.351412][ T6522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.361922][ T6522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.452923][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.469296][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.497722][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.505807][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.024749][ T5625] Bluetooth: hci3: command tx timeout
[  470.945008][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  471.598711][ T1676] block nbd1: Connection timed out, retrying (0/2 alive)
[  471.606094][ T1676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.615346][ T1676] Buffer I/O error on dev nbd1, logical block 0, async page read
[  471.623941][ T1581] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  471.635863][ T1581] Buffer I/O error on dev nbd1, logical block 0, async page read
[  471.643672][ T1581] Buffer I/O error on dev nbd1, logical block 1, async page read
[  471.651601][ T1581] Buffer I/O error on dev nbd1, logical block 2, async page read
[  471.659619][ T1581] Buffer I/O error on dev nbd1, logical block 3, async page read
[  471.670966][ T1676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.675138][ T1581] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.680966][ T1676] Buffer I/O error on dev nbd1, logical block 0, async page read
[  471.689325][ T1581] Buffer I/O error on dev nbd1, logical block 1, async page read
[  471.698467][ T1676] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.705104][ T1581] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.723086][ T1581] Buffer I/O error on dev nbd1, logical block 3, async page read
[  471.723274][ T1676] Buffer I/O error on dev nbd1, logical block 2, async page read
[  471.741893][ T1676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  471.742050][ T1581] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  471.751349][ T1676] Buffer I/O error on dev nbd1, logical block 0, async page read
[  471.769047][ T1676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  471.778637][ T1676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  471.790540][T17960] ldm_validate_partition_table(): Disk read failed.
[  471.800135][T17960] Dev nbd1: unable to read RDB block 0
[  471.809356][T17960]  nbd1: unable to read partition table
[  471.822133][T17960] ldm_validate_partition_table(): Disk read failed.
[  471.830546][T17960] Dev nbd1: unable to read RDB block 0
[  471.839532][T17960]  nbd1: unable to read partition table
[  498.555310][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'.
[  498.575624][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'.
[  498.624365][ T5625] Bluetooth: hci5: command 0x0405 tx timeout
[  498.751066][T19024] syzkaller1: entered promiscuous mode
[  498.772160][T19024] syzkaller1: entered allmulticast mode
[  498.982307][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  498.998178][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.010482][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.022560][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.038212][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  499.174875][T19042] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3360'.
[  499.599167][T19059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3363'.
[  499.638887][T19056] can: request_module (can-proto-0) failed.
[  499.727354][T19060] syzkaller0: entered promiscuous mode
[  499.755871][T19060] syzkaller0: entered allmulticast mode
[  499.794014][T19072] netlink: 'syz.4.3366': attribute type 1 has an invalid length.
[  499.802802][T19072] netlink: 'syz.4.3366': attribute type 2 has an invalid length.
[  500.226408][T19091] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  500.477439][T19103] netlink: 'syz.0.3375': attribute type 6 has an invalid length.
[  500.570092][T19106] netlink: 'syz.0.3375': attribute type 6 has an invalid length.
[  500.705839][T19113] netlink: 'syz.3.3377': attribute type 9 has an invalid length.
[  500.802671][T19117] ipvlan3: entered promiscuous mode
[  501.108482][ T5625] Bluetooth: hci1: command tx timeout
[  501.182858][T19128] syzkaller0: entered promiscuous mode
[  501.207265][T19128] syzkaller0: entered allmulticast mode
[  501.396923][T19150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3387'.
[  501.466930][T19153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3387'.
[  501.504177][T19150] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.537688][T19147] netlink: 'syz.4.3387': attribute type 1 has an invalid length.
[  501.550384][T19034] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.576387][T19034] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.596076][T19034] bridge_slave_0: entered allmulticast mode
[  501.614030][T19034] bridge_slave_0: entered promiscuous mode
[  501.641945][T19153] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.649278][T19153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.662586][T19153] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3387'.
[  501.669326][T19156] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  501.720152][T19034] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.737378][T19034] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.752332][T19034] bridge_slave_1: entered allmulticast mode
[  501.779956][T19034] bridge_slave_1: entered promiscuous mode
[  501.802852][T19153] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.949633][T19034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.962794][T19034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.041632][T19177] netlink: 'syz.0.3393': attribute type 2 has an invalid length.
[  502.080937][T19034] team0: Port device team_slave_0 added
[  502.107101][T19034] team0: Port device team_slave_1 added
[  502.237349][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'.
[  502.281448][T19034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.307876][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.365565][T19034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.379545][T19034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.387485][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.447557][T19034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.610008][ T7365] IPVS: starting estimator thread 0...
[  502.678266][T19197] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  502.695140][T19197] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  502.704560][T19207] IPVS: using max 28 ests per chain, 67200 per kthread
[  502.741355][T19034] hsr_slave_0: entered promiscuous mode
[  502.799889][T19034] hsr_slave_1: entered promiscuous mode
[  502.812358][T19197] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  502.836803][T19034] debugfs: 'hsr0' already exists in 'hsr'
[  502.870505][T19034] Cannot create hsr debugfs directory
[  502.901383][T19221] syzkaller0: entered promiscuous mode
[  502.903213][T19197] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  502.929294][T19221] syzkaller0: entered allmulticast mode
[  503.091532][T19227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3403'.
[  503.187867][ T5625] Bluetooth: hci1: command tx timeout
[  503.188157][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3403'.
[  503.374794][T19234] sctp: [Deprecated]: syz.4.3405 (pid 19234) Use of int in maxseg socket option.
[  503.374794][T19234] Use struct sctp_assoc_value instead
[  503.481977][T13622] smbdirect: ib_dev[syz2] removed
[  503.648301][T19244] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3407'.
[  504.172535][T19034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.232245][T19034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.241917][T19270] netlink: 'syz.4.3410': attribute type 10 has an invalid length.
[  504.266101][T19034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  504.300182][T19034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  504.441710][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3413'.
[  504.455331][T19270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.478056][T19270] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  504.667843][T19277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  504.759112][T19277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  504.837712][T19277] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  504.912759][T19277] bond0 (unregistering): Released all slaves
[  505.001835][T19285] netlink: 'syz.0.3413': attribute type 12 has an invalid length.
[  505.129932][T19034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.141459][T19034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.154286][T19034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  505.166239][T19034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  505.265796][ T5625] Bluetooth: hci1: command tx timeout
[  505.480214][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'.
[  507.344535][ T5625] Bluetooth: hci1: command tx timeout
[  507.589267][T19034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  507.638460][T19034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.673116][T19034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  507.686524][T19034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  507.823275][T19034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  507.844437][T19034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.875059][T19034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  507.893521][T19034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  508.261835][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3432'.
[  508.313412][T19358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3431'.
[  508.340178][T19355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3431'.
[  508.356612][T19351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'.
[  508.419688][T19351] veth3: entered allmulticast mode
[  508.427349][T19034] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  508.450369][T19034] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  508.463714][T19034] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  508.480554][T19034] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  508.531876][T19034] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  508.567781][T19034] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  508.580340][T19034] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  508.625029][T19034] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  508.781707][T19377] veth0: entered promiscuous mode
[  508.846907][T19376] veth0: left promiscuous mode
[  509.071546][T19034] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.100373][T19399] syzkaller0: entered promiscuous mode
[  509.120154][T19399] syzkaller0: entered allmulticast mode
[  509.166800][T19034] 8021q: adding VLAN 0 to HW filter on device team0
[  509.183809][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.191039][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.260085][T19410] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3443'.
[  509.282619][T13647] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.289929][T13647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.754738][T19434] xt_hashlimit: size too large, truncated to 1048576
[  509.952765][T19034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.160865][T19034] veth0_vlan: entered promiscuous mode
[  510.211079][T19034] veth1_vlan: entered promiscuous mode
[  510.254914][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'.
[  510.275206][T19452] netlink: 'syz.0.3455': attribute type 3 has an invalid length.
[  510.289033][T19034] veth0_macvtap: entered promiscuous mode
[  510.339143][T19034] veth1_macvtap: entered promiscuous mode
[  510.421067][T19034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.479186][T19463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  510.499663][T19034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.555234][   T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.589014][   T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.617876][   T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.638715][   T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.657640][T19470] netlink: 'syz.0.3460': attribute type 10 has an invalid length.
[  510.688508][T19472] xt_hashlimit: overflow, try lower: 3/0
[  510.702860][T19470] veth1_macvtap: left promiscuous mode
[  510.749390][T19470] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  510.791819][T19470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'.
[  511.018913][T19490] sctp: [Deprecated]: syz.0.3465 (pid 19490) Use of struct sctp_assoc_value in delayed_ack socket option.
[  511.018913][T19490] Use struct sctp_sack_info instead
[  511.037358][T19488] netlink: 'syz.1.3464': attribute type 21 has an invalid length.
[  511.051827][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.076630][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.091730][T19488] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3464'.
[  511.110239][T19485] syzkaller0: entered promiscuous mode
[  511.125957][T19485] syzkaller0: entered allmulticast mode
[  511.159593][T19495] netlink: 'syz.4.3466': attribute type 16 has an invalid length.
[  511.186045][T19495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3466'.
[  511.220031][T19488] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3464'.
[  511.231247][T19495] veth0_macvtap: entered allmulticast mode
[  511.259947][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.288747][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.423502][T19500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3469'.
[  511.453992][T19504] netlink: 'syz.0.3468': attribute type 12 has an invalid length.
[  511.483511][T19504] netlink: 'syz.0.3468': attribute type 29 has an invalid length.
[  511.513815][T19504] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3468'.
[  511.550651][T19504] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3468'.
[  511.573131][   T29] audit: type=1107 audit(1782645922.032:6): pid=19510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='V*�e�F��n��5!p
[  511.573131][   T29] �g<�s�$���|CN5g\�1�����B�-�����M�-���	8���Z��sS@��h����n���rTG#�1��	D
��ߖ*s�[@����:x?���.��Fڴ#sf�C�4��'
[  511.608186][T19515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.890136][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'.
[  512.971420][T19584] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  513.171040][T19596] xt_hashlimit: max too large, truncated to 1048576
[  513.392489][T19611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.866838][T19630] pimreg3: entered allmulticast mode
[  513.999721][T19634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  514.007073][T19634] IPv6: NLM_F_CREATE should be set when creating new route
[  514.081376][T19639] bond2 (unregistering): Released all slaves
[  514.140789][T19645] Bluetooth: MGMT ver 1.23
[  514.347314][T19651] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  514.402064][T19651] bond1 (unregistering): Released all slaves
[  514.841850][T19672] __nla_validate_parse: 9 callbacks suppressed
[  514.841871][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3516'.
[  515.066310][T19688] netlink: 'syz.1.3521': attribute type 2 has an invalid length.
[  515.649438][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'.
[  515.676154][T19704] Cannot find set identified by id 0 to match
[  515.749572][T19712] bond1: option lp_interval: invalid value (0)
[  515.759871][T19712] bond1: option lp_interval: allowed values 1 - 2147483647
[  515.788206][T19712] bond1 (unregistering): Released all slaves
[  515.914951][T19724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3530'.
[  516.007830][T19728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3528'.
[  516.033092][T19728] unsupported nlmsg_type 40
[  516.587579][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'.
[  516.808036][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'.
[  516.838142][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'.
[  516.895000][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'.
[  516.947639][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'.
[  516.973658][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'.
[  517.320288][T19789] SET target dimension over the limit!
[  517.574751][ T7363] IPVS: starting estimator thread 0...
[  517.694833][T19803] IPVS: using max 25 ests per chain, 60000 per kthread
[  517.749802][T19810] netlink: 'syz.3.3557': attribute type 49 has an invalid length.
[  517.897895][T19814] netlink: 'syz.4.3559': attribute type 1 has an invalid length.
[  518.561482][T19832] netlink: 'syz.3.3565': attribute type 1 has an invalid length.
[  518.579430][T19835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.632516][T19839] IPVS: sh: FWM 3 0x00000003 - no destination available
[  519.239931][T19856] syzkaller1: entered promiscuous mode
[  519.253955][T19856] syzkaller1: entered allmulticast mode
[  519.537338][T19878] IPVS: sh: FWM 3 0x00000003 - no destination available
[  519.690073][T19886] netlink: 'syz.2.3584': attribute type 1 has an invalid length.
[  520.232876][T19918] __nla_validate_parse: 71 callbacks suppressed
[  520.232899][T19918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3592'.
[  520.263419][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3592'.
[  520.309661][T19918] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3592'.
[  520.356682][ T5740] IPVS: starting estimator thread 0...
[  520.378447][T19918] netlink: 'syz.4.3592': attribute type 3 has an invalid length.
[  520.381696][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3592'.
[  520.436362][T19918] netlink: 'syz.4.3592': attribute type 2 has an invalid length.
[  520.454534][T19930] IPVS: using max 29 ests per chain, 69600 per kthread
[  520.458799][T19918] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3592'.
[  520.675694][T19944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3599'.
[  521.423619][T19944] erspan0: entered promiscuous mode
[  521.447573][T19944] erspan0: entered allmulticast mode
[  521.511017][T19986] netlink: 'syz.0.3610': attribute type 3 has an invalid length.
[  521.623815][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'.
[  521.641134][T19992] vcan0: entered allmulticast mode
[  521.661795][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'.
[  522.090529][T20017] netlink: 'syz.1.3619': attribute type 9 has an invalid length.
[  522.476368][T20041] netlink: 'syz.2.3626': attribute type 3 has an invalid length.
[  522.542044][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'.
[  522.554509][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  522.555469][ T5623] Bluetooth: hci0: command 0x0419 tx timeout
[  522.567375][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'.
[  522.947102][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  522.993513][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  523.008332][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  523.163309][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  524.270449][T20114] ������: renamed from virt_wifi0 (while UP)
[  524.523806][T20134] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  524.657950][T20134] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  524.675675][T20134] gretap1: entered promiscuous mode
[  524.681034][T20134] gretap1: entered allmulticast mode
[  525.011153][T20160] netlink: 'syz.2.3662': attribute type 13 has an invalid length.
[  525.038410][T20160] veth1_macvtap: left promiscuous mode
[  525.051837][T20160] macsec0: entered allmulticast mode
[  525.141850][T20169] netlink: 'syz.4.3665': attribute type 1 has an invalid length.
[  525.240717][T20176] __nla_validate_parse: 6 callbacks suppressed
[  525.240739][T20176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3667'.
[  525.302423][T20172] bond0: (slave geneve2): making interface the new active one
[  525.316908][T20172] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  525.359443][ T6533] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  525.396370][ T6533] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  525.428881][ T6533] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  525.465771][T20187] x_tables: duplicate underflow at hook 1
[  525.470719][ T6533] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  525.589814][T20197] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  525.866296][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'.
[  525.932199][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3676'.
[  525.999823][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'.
[  526.071588][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'.
[  526.183531][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  526.312795][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3682'.
[  526.420109][T20236] sctp: [Deprecated]: syz.0.3683 (pid 20236) Use of int in max_burst socket option.
[  526.420109][T20236] Use struct sctp_assoc_value instead
[  526.663954][T20245] netlink: 'syz.3.3686': attribute type 8 has an invalid length.
[  526.684628][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3686'.
[  526.898983][T20259] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3689'.
[  526.957247][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'.
[  529.617210][T20245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.632704][T20273] netlink: 'syz.4.3692': attribute type 1 has an invalid length.
[  530.020019][T20296] netlink: 'syz.2.3702': attribute type 4 has an invalid length.
[  530.449597][T20321] __nla_validate_parse: 6 callbacks suppressed
[  530.449619][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'.
[  530.466615][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'.
[  530.641268][T20333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  530.859716][T20346] virt_wifi0: entered allmulticast mode
[  530.911409][T20349] xt_TCPMSS: Only works on TCP SYN packets
[  530.956358][T20349] bond0: entered allmulticast mode
[  530.988739][T20354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.072067][T20354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.191468][T20362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3719'.
[  531.381493][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'.
[  531.401367][T20369] netlink: 'syz.3.3722': attribute type 5 has an invalid length.
[  531.417898][T20369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3722'.
[  531.469924][T20369] geneve3: entered promiscuous mode
[  531.483514][T20369] geneve3: entered allmulticast mode
[  531.501057][   T14] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  531.526425][   T14] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  531.679354][   T14] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  531.726961][   T14] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  531.853383][T20390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3727'.
[  531.863680][T20398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3730'.
[  531.895146][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'.
[  532.085281][T20410] netlink: 'syz.4.3733': attribute type 1 has an invalid length.
[  532.093542][T20411] netlink: 'syz.2.3735': attribute type 13 has an invalid length.
[  532.109916][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'.
[  532.238005][T20410] 8021q: adding VLAN 0 to HW filter on device bond2
[  532.288970][T20417] bond2: (slave geneve3): making interface the new active one
[  532.300986][T20417] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  532.313169][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3737'.
[  532.511662][T20436] netlink: 'syz.3.3742': attribute type 3 has an invalid length.
[  532.952799][T20459] xt_hashlimit: size too large, truncated to 1048576
[  533.411726][T20445] tipc: Resetting bearer <eth:syzkaller0>
[  533.618385][T20494] bond0: (slave bond_slave_1): Releasing backup interface
[  535.228861][T20578] netlink: 'syz.4.3775': attribute type 3 has an invalid length.
[  535.431904][T20585] Cannot find del_set index 4 as target
[  535.445809][T20582] Cannot find del_set index 4 as target
[  535.573720][T20593] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  535.598951][T20594] sctp: [Deprecated]: syz.3.3779 (pid 20594) Use of int in max_burst socket option.
[  535.598951][T20594] Use struct sctp_assoc_value instead
[  535.701165][T20594] geneve4: entered promiscuous mode
[  535.785339][T20603] openvswitch: netlink: Missing valid actions attribute.
[  535.816928][T20603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.960131][T20614] __nla_validate_parse: 10 callbacks suppressed
[  535.960156][T20614] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3783'.
[  536.143122][T20618] xt_nat: multiple ranges no longer supported
[  536.607945][T20652] syzkaller0: entered promiscuous mode
[  536.628355][T20652] syzkaller0: entered allmulticast mode
[  536.650680][ T5754] IPVS: starting estimator thread 0...
[  536.754768][T20654] IPVS: using max 28 ests per chain, 67200 per kthread
[  537.012894][T20669] netlink: 'syz.1.3798': attribute type 9 has an invalid length.
[  537.220813][T20668] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.257901][T20684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3803'.
[  537.553939][T20695] IPVS: sh: FWM 3 0x00000003 - no destination available
[  538.093552][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3810'.
[  538.457005][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'.
[  538.478604][T20747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3818'.
[  538.521463][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3819'.
[  538.840193][T20764] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3822'.
[  538.967571][T20777] xt_hashlimit: invalid interval
[  539.056887][T20782] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3826'.
[  539.066236][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'.
[  539.165056][T20784] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  539.350970][T20785] erspan0: left promiscuous mode
[  539.412928][T20806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3828'.
[  539.584760][ T5625] Bluetooth: hci4: command 0x040f tx timeout
[  539.982214][T20784] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  540.322623][T20785] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.702498][T20785] virt_wifi0: left allmulticast mode
[  540.814908][T20785] veth0_macvtap: left allmulticast mode
[  540.987527][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'.
[  541.049414][T20785] ipvlan2: left allmulticast mode
[  541.055810][T20785] batadv_slave_1: left allmulticast mode
[  541.063320][T20785] ipvlan3: left promiscuous mode
[  541.229628][T20874] netlink: 'syz.4.3836': attribute type 17 has an invalid length.
[  541.245233][T20863] syzkaller0: entered promiscuous mode
[  541.257159][T20863] syzkaller0: entered allmulticast mode
[  541.279361][ T6522] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.310195][ T6522] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  541.447604][ T6522] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.485132][ T6522] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  541.539124][ T6522] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.578717][ T6522] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  541.600470][ T6522] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.615109][ T6522] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  541.664502][ T5623] Bluetooth: hci4: command 0x040f tx timeout
[  541.710704][T20897] macvlan0: mtu less than device minimum
[  541.841791][T20901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3842'.
[  541.923653][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'.
[  541.968232][T20910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3847'.
[  542.039392][T20912] xt_hashlimit: size too large, truncated to 1048576
[  542.094120][T20916] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.3848'.
[  542.143300][T20916] 0�X��D��: renamed from gretap0 (while UP)
[  542.151077][T20921] netlink: 'syz.3.3848': attribute type 1 has an invalid length.
[  542.151103][T20921] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3848'.
[  542.167286][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'.
[  542.206741][T20916] 0�X��D��: entered allmulticast mode
[  542.419252][T20928] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3851'.
[  542.927847][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3860'.
[  542.979456][T20967] netlink: 'syz.0.3861': attribute type 8 has an invalid length.
[  543.266424][T20984] syzkaller0: entered promiscuous mode
[  543.272020][T20984] syzkaller0: entered allmulticast mode
[  543.336919][T20985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  543.391178][T20987] netlink: 'syz.1.3867': attribute type 1 has an invalid length.
[  543.401298][T20987] netlink: 'syz.1.3867': attribute type 11 has an invalid length.
[  543.409565][T20987] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3867'.
[  543.485488][T20990] syzkaller0: entered promiscuous mode
[  543.491009][T20990] syzkaller0: entered allmulticast mode
[  545.574657][T20992] netlink: 'syz.1.3869': attribute type 21 has an invalid length.
[  545.604780][T20940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.875814][T21008] x_tables: duplicate underflow at hook 4
[  545.961715][T21015] tun0: tun_chr_ioctl cmd 1074025675
[  545.981043][T21015] tun0: persist enabled
[  546.117305][T21020] __nla_validate_parse: 3 callbacks suppressed
[  546.117325][T21020] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3876'.
[  546.227301][T21028] netlink: 'syz.2.3878': attribute type 27 has an invalid length.
[  546.244665][T21028] netlink: 'syz.2.3878': attribute type 4 has an invalid length.
[  546.273818][T21032] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3880'.
[  546.277965][T21028] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3878'.
[  546.418063][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.426366][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.432522][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.438463][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.438872][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.461597][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.469784][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.476128][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.482299][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.489941][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.497362][T21038] ipt_REJECT: TCP_RESET invalid for non-tcp
[  546.500415][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.559520][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.599326][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.619037][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.640418][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.660701][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.709784][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.736308][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.773874][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.797421][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.816954][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.880893][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.957633][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.023414][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.103895][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.130548][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'.
[  547.155288][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.187185][T21077] team0: entered promiscuous mode
[  547.192849][T21077] team_slave_0: entered promiscuous mode
[  547.193145][T21079] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  547.200222][T21077] team_slave_1: entered promiscuous mode
[  547.208484][T21080] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  547.220122][T21077] gretap0: entered promiscuous mode
[  547.234087][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.685443][T21100] netlink: 'syz.0.3900': attribute type 1 has an invalid length.
[  547.720179][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'.
[  547.760560][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'.
[  547.797519][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3904'.
[  547.797768][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3902'.
[  547.979777][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  548.219656][T21125] xt_TCPMSS: Only works on TCP SYN packets
[  548.518193][T21140] netlink: 'syz.3.3913': attribute type 3 has an invalid length.
[  548.527119][T21140] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3913'.
[  548.881309][T21165] bond3: entered promiscuous mode
[  548.896525][T21165] macvlan2: entered promiscuous mode
[  548.902035][T21165] macvlan2: entered allmulticast mode
[  548.908457][T21165] bond3: (slave macvlan2): Opening slave failed
[  550.740730][T21110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.980843][T21179] bond0: Error: Cannot enslave bond to itself.
[  551.014126][T21177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.042671][T21180] netlink: 'syz.0.3923': attribute type 1 has an invalid length.
[  551.528931][T21215] netlink: 'syz.4.3934': attribute type 19 has an invalid length.
[  551.680259][T21223] __nla_validate_parse: 2 callbacks suppressed
[  551.680280][T21223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3936'.
[  551.733846][T21223] SET target dimension over the limit!
[  551.998247][T21235] syzkaller0: entered promiscuous mode
[  552.014039][T21235] syzkaller0: entered allmulticast mode
[  552.352985][T21249] netlink: 'syz.1.3944': attribute type 33 has an invalid length.
[  552.427677][T21249] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  552.446023][T21249] bond1 (unregistering): Released all slaves
[  552.450731][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3944'.
[  552.624727][T21254] nbd2: detected capacity change from 0 to 63
[  552.661200][T21254] netlink: 'syz.4.3945': attribute type 1 has an invalid length.
[  552.691310][ T5623] block nbd2: Receive control failed (result -104)
[  553.048556][T21277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3951'.
[  553.084643][T21279] syzkaller1: entered promiscuous mode
[  553.090780][T21279] syzkaller1: entered allmulticast mode
[  553.228352][T21284] net_ratelimit: 1 callbacks suppressed
[  553.228443][T21284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  553.498595][T21303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.570424][T21303] netlink: 'syz.0.3960': attribute type 5 has an invalid length.
[  554.116949][T21319] erspan0: left allmulticast mode
[  554.398927][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'.
[  554.620623][T21358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  554.665854][T21358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  554.711348][T21358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  554.929988][T21381] Cannot find set identified by id 0 to match
[  555.081210][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'.
[  555.099535][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  555.112317][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'.
[  555.153485][T21389] bond0: Error: Cannot enslave bond to itself.
[  555.299351][T21400] bond2 (unregistering): Released all slaves
[  555.339766][T21409] tipc: Trying to set illegal importance in message
[  555.478301][T21417] syzkaller0: entered promiscuous mode
[  555.492875][T21417] syzkaller0: entered allmulticast mode
[  555.979146][T21430] ipvlan2: entered allmulticast mode
[  555.986490][T21430] batadv_slave_1: entered allmulticast mode
[  555.995325][T21430] batman_adv: batadv0: Adding interface: ipvlan2
[  556.001749][T21430] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.026814][T21431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3992'.
[  556.028194][T21430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.046807][T21430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.057035][T21430] batman_adv: batadv0: Interface activated: ipvlan2
[  556.110226][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'.
[  556.119435][T21433] netlink: 'syz.2.3993': attribute type 5 has an invalid length.
[  556.128137][T21433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3993'.
[  556.140615][T21433] sctp: [Deprecated]: syz.2.3993 (pid 21433) Use of struct sctp_assoc_value in delayed_ack socket option.
[  556.140615][T21433] Use struct sctp_sack_info instead
[  557.067723][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  558.185449][T21405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  558.465718][T21451] vlan2: entered promiscuous mode
[  558.477987][T21451] bridge0: entered promiscuous mode
[  558.544080][T21461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'.
[  558.571451][T21453] SET target dimension over the limit!
[  558.859336][T21481] xt_CONNSECMARK: invalid mode: 0
[  558.860145][T21478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4007'.
[  558.897380][T21477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4009'.
[  558.928855][T21479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4009'.
[  559.073522][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4013'.
[  559.112489][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4013'.
[  559.130769][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4013'.
[  559.152138][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4013'.
[  559.163200][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4013'.
[  559.168400][T21503] IPVS: sh: FWM 3 0x00000003 - no destination available
[  559.436640][T21518] syzkaller0: entered promiscuous mode
[  559.442376][T21518] syzkaller0: entered allmulticast mode
[  559.458802][T21518] tipc: Started in network mode
[  559.473968][T21518] tipc: Node identity 0274e3057107, cluster identity 4711
[  559.488174][T21518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.498280][T21517] tipc: Resetting bearer <eth:syzkaller0>
[  559.542367][T21517] tipc: Disabling bearer <eth:syzkaller0>
[  559.549996][T21533] netlink: 'syz.4.4023': attribute type 4 has an invalid length.
[  559.559274][T21530] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.567964][T21530] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.583151][T21532] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.590425][T21532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.598038][T21532] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.605274][T21532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.617267][T21532] bridge0: entered promiscuous mode
[  559.622596][T21532] bridge0: entered allmulticast mode
[  559.849957][T21547] IPVS: sh: FWM 3 0x00000003 - no destination available
[  559.888521][T21553] openvswitch: netlink: Flow actions attr not present in new flow.
[  559.916445][T21553] openvswitch: netlink: Flow actions attr not present in new flow.
[  560.214763][T21575] ip6tnl2: entered promiscuous mode
[  560.221043][T21576] netlink: 'syz.0.4036': attribute type 4 has an invalid length.
[  560.438239][T21584] netlink: 'syz.4.4038': attribute type 10 has an invalid length.
[  560.453705][T21584] team0: Port device dummy0 added
[  560.983752][T21623] bond1: (slave gre0): Device is not bonding slave
[  560.990632][T21623] bond1: option active_slave: invalid value (gre0)
[  561.004083][T21623] bond1 (unregistering): Released all slaves
[  561.378364][T21651] IPVS: sh: FWM 3 0x00000003 - no destination available
[  561.395000][T21651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.588026][T21655] bond1: Removing last arp target with arp_interval on
[  561.827285][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.851296][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.860972][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.875491][T20814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.901332][T21680] netlink: 'syz.1.4067': attribute type 1 has an invalid length.
[  561.979964][T21680] 8021q: adding VLAN 0 to HW filter on device bond1
[  561.988918][T21681] syzkaller0: entered promiscuous mode
[  562.005919][T21681] syzkaller0: entered allmulticast mode
[  562.143678][T21695] __nla_validate_parse: 46 callbacks suppressed
[  562.143700][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'.
[  562.164650][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'.
[  562.258338][T21697] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  562.321856][T21708] x_tables: duplicate underflow at hook 1
[  562.330654][T21697] bond4 (unregistering): Released all slaves
[  562.383777][T21715] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4075'.
[  562.713317][T21726] netlink: 'syz.0.4081': attribute type 1 has an invalid length.
[  562.727211][T21733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4079'.
[  562.786580][T21738] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4083'.
[  562.821939][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'.
[  562.833393][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4083'.
[  562.850890][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'.
[  562.862998][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4083'.
[  563.213634][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'.
[  563.440803][T21763] bond1: option resend_igmp: invalid value (32767)
[  563.469784][T21763] bond1: option resend_igmp: allowed values 0 - 255
[  563.470659][T21721] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  563.497052][T21763] bond1 (unregistering): Released all slaves
[  563.705371][T21770] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  563.730493][T21770] bond1 (unregistering): Released all slaves
[  563.955946][T21779] bond2 (unregistering): Released all slaves
[  564.113705][T21792] syzkaller0: entered promiscuous mode
[  564.157199][T21792] syzkaller0: entered allmulticast mode
[  564.160324][T21798] xt_nat: multiple ranges no longer supported
[  564.212548][T21805] xt_CT: You must specify a L4 protocol and not use inversions on it
[  564.504102][T21821] netlink: 'syz.0.4105': attribute type 1 has an invalid length.
[  564.589294][T21821] bond2: entered promiscuous mode
[  564.595637][T21821] 8021q: adding VLAN 0 to HW filter on device bond2
[  564.624792][ T5625] Bluetooth: hci0: command 0x0419 tx timeout
[  564.692048][T21821] 8021q: adding VLAN 0 to HW filter on device bond2
[  564.701429][T21821] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  564.712031][T21821] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  564.738080][T21821] bond2: (slave vti0): making interface the new active one
[  564.762771][T21821] vti0: entered promiscuous mode
[  564.789116][T21821] vti0: left promiscuous mode
[  565.184969][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  565.291189][T21837] bond3: left promiscuous mode
[  566.216521][T21880] netlink: 'syz.0.4124': attribute type 1 has an invalid length.
[  566.263673][T21866] nbd3: detected capacity change from 0 to 63
[  566.279107][ T5623] block nbd3: Receive control failed (result -32)
[  566.279624][ T5625] block nbd3: Receive control failed (result -32)
[  566.291564][T19010] block nbd3: Send control failed (result -32)
[  566.299423][T19010] block nbd3: Request send failed, requeueing
[  566.310716][ T1676] block nbd3: Dead connection, failed to find a fallback
[  566.319180][ T1676] block nbd3: shutting down sockets
[  566.324701][ T1676] blk_print_req_error: 121 callbacks suppressed
[  566.324719][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  566.342227][ T1676] buffer_io_error: 135 callbacks suppressed
[  566.342247][ T1676] Buffer I/O error on dev nbd3, logical block 0, async page read
[  566.360975][ T1676] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  566.370593][ T1676] Buffer I/O error on dev nbd3, logical block 1, async page read
[  566.378552][ T1676] Buffer I/O error on dev nbd3, logical block 2, async page read
[  566.386750][ T1676] Buffer I/O error on dev nbd3, logical block 3, async page read
[  566.397052][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.406420][ T1676] Buffer I/O error on dev nbd3, logical block 0, async page read
[  566.414451][ T1676] Buffer I/O error on dev nbd3, logical block 1, async page read
[  566.422764][ T1676] Buffer I/O error on dev nbd3, logical block 2, async page read
[  566.432128][ T1676] Buffer I/O error on dev nbd3, logical block 3, async page read
[  566.440220][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  566.448936][T21878] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  566.449666][ T1676] Buffer I/O error on dev nbd3, logical block 0, async page read
[  566.486136][ T1581] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  566.497518][ T1581] Buffer I/O error on dev nbd3, logical block 1, async page read
[  566.507274][ T1581] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.519126][ T1581] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.529501][ T1581] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.539565][ T1581] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.555609][ T1581] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  566.565280][T20703] ldm_validate_partition_table(): Disk read failed.
[  566.567527][T21878] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  566.581030][T20703] Dev nbd3: unable to read RDB block 0
[  566.583577][T20703]  nbd3: unable to read partition table
[  566.623554][T21878] bond3: (slave ip6gre1): making interface the new active one
[  566.632356][T21878] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  566.670238][T20703] ldm_validate_partition_table(): Disk read failed.
[  566.687187][T20703] Dev nbd3: unable to read RDB block 0
[  566.696888][T20703]  nbd3: unable to read partition table
[  566.798976][T21887] net_ratelimit: 2 callbacks suppressed
[  566.798996][T21887] IPVS: sh: FWM 3 0x00000003 - no destination available
[  567.219891][T21909] netlink: 'syz.3.4129': attribute type 1 has an invalid length.
[  567.453236][T21920] __nla_validate_parse: 10 callbacks suppressed
[  567.453258][T21920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4135'.
[  567.472365][T21920] netlink: 'syz.2.4135': attribute type 33 has an invalid length.
[  567.568588][T21922] netlink: 'syz.4.4137': attribute type 19 has an invalid length.
[  567.580012][T21926] IPVS: sh: FWM 3 0x00000003 - no destination available
[  567.602338][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.610629][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.623181][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.634287][ T7365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.814947][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4141'.
[  567.880768][T21928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4139'.
[  567.974527][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.304471][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.414416][T21966] netlink: 'syz.0.4151': attribute type 2 has an invalid length.
[  568.435964][T21966] netlink: 'syz.0.4151': attribute type 2 has an invalid length.
[  568.527265][T21969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.599188][T21966] xt_CT: No such helper "snmp"
[  568.675744][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'.
[  568.710982][T21976] IPVS: sh: FWM 3 0x00000003 - no destination available
[  568.738509][T21969] netlink: 'syz.0.4151': attribute type 1 has an invalid length.
[  569.025229][T21985] netlink: 'syz.1.4155': attribute type 1 has an invalid length.
[  569.090807][T21990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4157'.
[  569.240127][ T5625] block nbd4: Receive control failed (result -32)
[  569.348575][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'.
[  569.588052][T22021] x_tables: duplicate underflow at hook 1
[  570.258630][T22045] netlink: 'syz.2.4174': attribute type 1 has an invalid length.
[  570.305077][ T5625] Bluetooth: hci0: command 0x0419 tx timeout
[  570.397550][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'.
[  570.589856][T22059] macvtap1: entered promiscuous mode
[  570.595813][T22059] vlan0: entered promiscuous mode
[  570.601457][T22059] macvtap1: entered allmulticast mode
[  570.608113][T22059] vlan0: entered allmulticast mode
[  570.613395][T22059] veth0_vlan: entered allmulticast mode
[  570.620270][T22045] syzkaller0: entered promiscuous mode
[  570.634309][T22045] syzkaller0: entered allmulticast mode
[  570.670420][T22078] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4184'.
[  570.681189][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'.
[  570.740215][T22084] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4185'.
[  570.869382][T22084] syzkaller0: entered promiscuous mode
[  570.888644][T22084] syzkaller0: entered allmulticast mode
[  571.412303][T22131] netlink: 'syz.1.4192': attribute type 1 has an invalid length.
[  571.556723][T22138] vlan0: left allmulticast mode
[  571.568494][T22138] veth0_vlan: left allmulticast mode
[  571.573988][T22138] vlan0: left promiscuous mode
[  571.595438][T22138] macvtap1: left promiscuous mode
[  571.952509][T22163] netlink: 'syz.0.4203': attribute type 16 has an invalid length.
[  571.955686][T22168] net_ratelimit: 2 callbacks suppressed
[  571.955702][T22168] IPVS: sh: FWM 3 0x00000003 - no destination available
[  572.011063][T22163] veth0_macvtap: entered allmulticast mode
[  573.351594][ T8002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.359803][ T8002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.371354][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.383565][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.757220][T22211] Bluetooth: MGMT ver 1.23
[  574.769398][T22211] Bluetooth: hci1: too big key_count value 32778
[  575.006220][T22213] syzkaller0: entered promiscuous mode
[  575.020912][T22213] syzkaller0: entered allmulticast mode
[  575.113387][T22233] block nbd4: NBD_DISCONNECT
[  575.123493][T22233] block nbd4: Send disconnect failed -32
[  575.147280][T22233] block nbd4: shutting down sockets
[  575.613333][T22263] __nla_validate_parse: 7 callbacks suppressed
[  575.613355][T22263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4226'.
[  575.963801][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.979869][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.993283][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.006735][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.019369][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.033482][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.048639][T22271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.068176][T22270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.067593][T22283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'.
[  578.092449][T22277] syzkaller0: entered promiscuous mode
[  578.098687][T22277] syzkaller0: entered allmulticast mode
[  578.841201][T22312] netlink: 'syz.3.4241': attribute type 1 has an invalid length.
[  578.851345][T22312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.769043][T22291] pimreg3: entered allmulticast mode
[  580.958853][T22326] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4246'.
[  580.985896][T22323] IPVS: sh: FWM 3 0x00000003 - no destination available
[  581.293849][T22344] netlink: 'syz.1.4253': attribute type 1 has an invalid length.
[  581.332280][T22346] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4254'.
[  581.333606][T22348] netlink: 'syz.1.4253': attribute type 1 has an invalid length.
[  581.787112][T22370] IPVS: sh: FWM 3 0x00000003 - no destination available
[  581.841795][T22372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4262'.
[  581.878317][T22374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4263'.
[  581.898912][T22374] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4263'.
[  582.011764][T22383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4264'.
[  582.110073][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4267'.
[  582.132628][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.143618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.163585][T22393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4268'.
[  582.182103][T22393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4268'.
[  582.362248][T22406] IPVS: sh: FWM 3 0x00000003 - no destination available
[  582.370398][T22410] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4272'.
[  582.955196][ T1676] block nbd2: Possible stuck request ffff888027187000: control (read@0,1024B). Runtime 30 seconds
[  582.955347][T19484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.969044][ T1676] block nbd2: Possible stuck request ffff8880271871c0: control (read@1024,1024B). Runtime 30 seconds
[  582.986891][ T1676] block nbd2: Possible stuck request ffff888027187380: control (read@2048,1024B). Runtime 30 seconds
[  583.001505][ T1676] block nbd2: Possible stuck request ffff888027187540: control (read@3072,1024B). Runtime 30 seconds
[  583.169035][T22458] IPVS: sh: FWM 3 0x00000003 - no destination available
[  583.245018][T22460] Cannot find add_set index 65532 as target
[  583.492489][T22475] netlink: 'syz.3.4290': attribute type 1 has an invalid length.
[  583.699049][T22483] macvtap1: entered promiscuous mode
[  583.719983][T22483] macvtap1: entered allmulticast mode
[  583.737773][T22483] veth1_vlan: entered allmulticast mode
[  584.010907][T22499] xt_hashlimit: size too large, truncated to 1048576
[  584.285466][T22512] IPVS: sh: FWM 3 0x00000003 - no destination available
[  584.463905][T22514] batadv_slave_1: entered promiscuous mode
[  584.519607][T22519] netlink: 'syz.4.4302': attribute type 26 has an invalid length.
[  584.536802][T13624] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  584.549035][T13624] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  584.560406][T22519] netlink: 'syz.4.4302': attribute type 26 has an invalid length.
[  584.569548][T22513] batadv_slave_1: left promiscuous mode
[  584.587128][T13624] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  584.612801][T13624] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  584.850011][T22534] syzkaller0: entered promiscuous mode
[  584.871879][T22530] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  584.873549][T22534] syzkaller0: entered allmulticast mode
[  584.901364][T22530] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  585.001309][T22530] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  585.016134][T22530] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  585.133649][T22530] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  585.141788][T22530] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  585.285563][T22559] IPVS: sh: FWM 3 0x00000003 - no destination available
[  585.358932][T22530] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  585.372436][T22530] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  585.443996][T22530] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  585.466724][T22530] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  585.488801][T22575] netlink: 'syz.2.4317': attribute type 7 has an invalid length.
[  585.523062][T22575] veth0: entered promiscuous mode
[  585.532549][T22576] syzkaller0: entered promiscuous mode
[  585.548298][T22576] syzkaller0: entered allmulticast mode
[  585.557875][T22573] veth0: left promiscuous mode
[  585.955779][T22598] IPVS: sh: FWM 3 0x00000003 - no destination available
[  585.993143][T22593] __nla_validate_parse: 15 callbacks suppressed
[  585.993164][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'.
[  586.030740][T22593] netlink: 'syz.3.4324': attribute type 5 has an invalid length.
[  586.050796][T22599] netlink: 'syz.3.4324': attribute type 4 has an invalid length.
[  586.069149][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4324'.
[  586.112989][T22602] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  586.137156][T22602] bond4 (unregistering): Released all slaves
[  586.548742][T22620] tipc: Started in network mode
[  586.559816][T22620] tipc: Node identity 5, cluster identity 4711
[  586.576533][T22620] tipc: Node number set to 5
[  586.678348][T22624] xfrm0: entered promiscuous mode
[  586.698124][T22624] team0: Device xfrm0 is of different type
[  586.716763][T22628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4337'.
[  586.727188][T22632] IPVS: sh: FWM 3 0x00000003 - no destination available
[  586.748459][T22628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4337'.
[  586.757221][T22634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.906716][T22642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4342'.
[  587.310074][T22667] IPVS: sh: FWM 3 0x00000003 - no destination available
[  587.318555][T22667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.331540][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  587.482847][T22674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.495445][T22674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.508400][T22674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.578437][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4355'.
[  587.601649][T22674] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  587.611693][T22674] netlink: 'syz.1.4352': attribute type 3 has an invalid length.
[  587.624490][T22683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.873255][T22695] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  587.939978][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'.
[  587.952096][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'.
[  588.700183][T22737] netlink: 'syz.2.4370': attribute type 1 has an invalid length.
[  589.109282][T22763] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  589.183946][T22766] bond0: (slave bond_slave_0): Releasing backup interface
[  589.328315][T22768] Unknown options in mask b7f2
[  589.495463][T22784] netlink: 'syz.4.4386': attribute type 1 has an invalid length.
[  589.510327][T22784] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4386'.
[  589.681355][T22791] netlink: 'syz.4.4390': attribute type 1 has an invalid length.
[  589.730501][T22793] net_ratelimit: 16 callbacks suppressed
[  589.730536][T22793] IPVS: sh: FWM 3 0x00000003 - no destination available
[  589.762450][T22791] 8021q: adding VLAN 0 to HW filter on device bond4
[  589.831588][T22800] bond4: (slave geneve4): making interface the new active one
[  589.878112][T22811] netlink: 'syz.3.4391': attribute type 4 has an invalid length.
[  589.890192][T22800] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  589.939010][T13635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.950906][T22814] netlink: 'syz.3.4391': attribute type 4 has an invalid length.
[  590.018458][T13635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.038636][T13635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.057951][T13635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.147528][T22824] IPVS: sh: FWM 3 0x00000003 - no destination available
[  590.284600][T22832] bridge0: port 3(veth1_to_bridge) entered blocking state
[  590.302195][T22832] bridge0: port 3(veth1_to_bridge) entered disabled state
[  590.314559][T22832] veth1_to_bridge: entered allmulticast mode
[  590.369349][T22832] veth1_to_bridge: entered promiscuous mode
[  590.388153][T22832] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  590.409396][T22832] bridge0: port 3(veth1_to_bridge) entered blocking state
[  590.416779][T22832] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  590.579744][T22854] IPVS: sh: FWM 3 0x00000003 - no destination available
[  591.057452][T22878] __nla_validate_parse: 1 callbacks suppressed
[  591.057471][T22878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4412'.
[  591.178062][T22884] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  591.195261][T22885] netlink: 'syz.4.4416': attribute type 2 has an invalid length.
[  591.206523][T22887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4416'.
[  591.243374][T22885] : entered promiscuous mode
[  591.291007][T22889] netlink: 'syz.2.4417': attribute type 1 has an invalid length.
[  591.338429][T22894] IPVS: sh: FWM 3 0x00000003 - no destination available
[  591.350605][T22889] 8021q: adding VLAN 0 to HW filter on device bond4
[  591.420874][T22895] bond4: (slave veth3): Enslaving as an active interface with a down link
[  591.426404][T22897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4420'.
[  591.439276][T22897] nbd: illegal input index -8454144
[  591.451282][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4420'.
[  591.472169][T22897] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  591.487883][T22897] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  591.514426][T22897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4420'.
[  591.542366][T22899] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4421'.
[  591.547930][T22902] Cannot find set identified by id 0 to match
[  591.561655][T22899] 0��{X��: renamed from gretap0 (while UP)
[  591.594859][T22899] 0��{X��: entered allmulticast mode
[  591.612587][T22899] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  592.151527][T22941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.302518][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4435'.
[  592.425290][T22961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4439'.
[  592.441663][T22962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4439'.
[  592.535468][T22968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.549740][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.566034][T22968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.577891][T22968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.998257][T22991] xt_ipcomp: unknown flags 1D
[  593.067560][T22993] 8021q: VLANs not supported on xfrm0
[  593.165650][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4451'.
[  593.195184][T22998] ipt_ECN: cannot use operation on non-tcp rule
[  593.221433][T23002] netlink: 'syz.2.4454': attribute type 5 has an invalid length.
[  593.370099][T23009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.776118][T23095] netlink: 'syz.1.4486': attribute type 1 has an invalid length.
[  594.846284][T23095] 8021q: adding VLAN 0 to HW filter on device bond2
[  595.042708][T23112] pimreg: entered allmulticast mode
[  595.063766][T23112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.072218][T23112] syzkaller0: entered promiscuous mode
[  595.078694][T23112] syzkaller0: entered allmulticast mode
[  595.087884][T23112] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  595.129561][T23112] tipc: Resetting bearer <eth:syzkaller0>
[  595.138454][T23111] tipc: Resetting bearer <eth:syzkaller0>
[  595.168323][T23111] tipc: Disabling bearer <eth:syzkaller0>
[  595.829431][T23146] net_ratelimit: 168 callbacks suppressed
[  595.829451][T23146] IPVS: sh: FWM 3 0x00000003 - no destination available
[  596.328018][T23166] __nla_validate_parse: 7 callbacks suppressed
[  596.328048][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4501'.
[  596.363723][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4501'.
[  596.441000][T23172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4502'.
[  596.452640][T23142] netlink: 'syz.2.4494': attribute type 11 has an invalid length.
[  596.473767][T23142] netlink: 'syz.2.4494': attribute type 4 has an invalid length.
[  596.482485][T23142] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4494'.
[  596.917253][T23186] IPv6: NLM_F_CREATE should be specified when creating new route
[  596.928488][T23184] syzkaller0: entered promiscuous mode
[  596.944555][T23184] syzkaller0: entered allmulticast mode
[  596.985502][T23184] simple: basic_1
[  597.422807][T23208] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  597.454064][T23208] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  597.474133][T23212] syzkaller0: entered promiscuous mode
[  597.487780][T23212] syzkaller0: entered allmulticast mode
[  597.493821][T23208] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  597.553280][T23208] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  598.202552][T23239] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  598.264014][T23239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4519'.
[  598.475698][T23257] syzkaller0: entered promiscuous mode
[  598.491826][T23257] syzkaller0: entered allmulticast mode
[  598.636391][T23262] netlink: 'syz.1.4527': attribute type 4 has an invalid length.
[  598.674853][T23263] netlink: 'syz.1.4527': attribute type 4 has an invalid length.
[  599.211421][T23287] Cannot find add_set index 46338 as target
[  599.221115][T23288] netlink: 'syz.3.4533': attribute type 33 has an invalid length.
[  599.277144][T23287] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  599.399640][T23291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4535'.
[  599.455787][T23296] netlink: 'syz.1.4537': attribute type 26 has an invalid length.
[  599.490629][T23297] bond4 (unregistering): Released all slaves
[  599.668977][T23306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4538'.
[  599.944533][T23317] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4541'.
[  599.994089][T23317] netlink: 'syz.3.4541': attribute type 83 has an invalid length.
[  600.039671][T23333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4544'.
[  600.461999][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4550'.
[  600.498882][T23358] block nbd0: reconnected socket
[  600.504041][T23358] netlink: 'syz.3.4552': attribute type 1 has an invalid length.
[  600.512020][T23358] nbd: error processing sock list
[  600.521694][ T5623] block nbd0: Receive control failed (result -32)
[  600.880095][T23378] netlink: 'syz.3.4558': attribute type 2 has an invalid length.
[  601.088866][T23391] netlink: 'syz.2.4562': attribute type 1 has an invalid length.
[  601.197178][T23395] bond5: (slave gretap0): making interface the new active one
[  601.207133][T23395] bond5: (slave gretap0): Enslaving as an active interface with an up link
[  601.381713][T23407] tipc: Started in network mode
[  601.400406][T23407] tipc: Node identity , cluster identity 4711
[  601.414314][T23407] tipc: Failed to obtain node identity
[  601.438840][T23407] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  601.599307][T23414] __nla_validate_parse: 5 callbacks suppressed
[  601.599330][T23414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4566'.
[  601.650279][T23414] SET target dimension over the limit!
[  601.836958][T23431] netlink: 'syz.0.4570': attribute type 39 has an invalid length.
[  601.936797][T23437] No such timeout policy "syz0"
[  602.017608][T23438] netlink: 'syz.4.4572': attribute type 1 has an invalid length.
[  602.058072][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'.
[  602.084064][T23438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4572'.
[  602.432545][T23454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  603.196397][T23482] syzkaller0: entered promiscuous mode
[  603.208089][T23482] syzkaller0: entered allmulticast mode
[  603.213787][T23479] can: request_module (can-proto-0) failed.
[  603.254007][T23486] netlink: 'syz.1.4587': attribute type 39 has an invalid length.
[  603.572478][   T29] audit: type=1107 audit(1782646014.042:7): pid=23502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  604.033252][   T29] audit: type=1804 audit(1782646014.502:8): pid=23532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4601" name="/newroot/250/cgroup.controllers" dev="tmpfs" ino=1294 res=1 errno=0
[  604.101728][   T29] audit: type=1800 audit(1782646014.502:9): pid=23532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4601" name="cgroup.controllers" dev="tmpfs" ino=1294 res=0 errno=0
[  604.232429][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.246618][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.256228][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.268720][T23544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4606'.
[  604.279772][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.315795][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.343343][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'.
[  604.444575][T23548] 0��{X��: left allmulticast mode
[  604.630159][T23548] bridge0: port 3(veth1_to_bridge) entered disabled state
[  604.637813][T23548] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.645159][T23548] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.663416][T23548] bridge0: left promiscuous mode
[  604.668739][T23548] bridge0: left allmulticast mode
[  604.993358][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.116826][T23567] IPVS: sh: FWM 3 0x00000003 - no destination available
[  605.352955][T23548] macsec0: left allmulticast mode
[  605.482321][T23548] batman_adv: batadv0: Interface deactivated: ipvlan2
[  605.490078][T23548] ipvlan2: left allmulticast mode
[  605.495886][T23548] batadv_slave_1: left allmulticast mode
[  605.540007][ T6533] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.588520][ T6533] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.624633][ T6533] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.650388][ T6533] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.751622][ T6533] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.783765][ T6533] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.824294][ T6533] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.855630][ T6533] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.013925][T23594] netlink: 'syz.3.4620': attribute type 4 has an invalid length.
[  606.143981][T23605] bond0: Master is either lo or non-ether device
[  606.322433][T23617] syzkaller0: entered promiscuous mode
[  606.329615][T23617] syzkaller0: entered allmulticast mode
[  606.690992][T23637] netlink: 'syz.1.4633': attribute type 12 has an invalid length.
[  606.735244][T23640] IPVS: sh: FWM 3 0x00000003 - no destination available
[  608.036299][T23648] 
[  608.038694][T23648] ======================================================
[  608.045765][T23648] WARNING: possible circular locking dependency detected
[  608.052919][T23648] syzkaller #0 Not tainted
[  608.057384][T23648] ------------------------------------------------------
[  608.064477][T23648] syz.4.4638/23648 is trying to acquire lock:
[  608.070984][T23648] ffff88801be9d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  608.080965][T23648] 
[  608.080965][T23648] but task is already holding lock:
[  608.088327][T23648] ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  608.097130][T23648] 
[  608.097130][T23648] which lock already depends on the new lock.
[  608.097130][T23648] 
[  608.107544][T23648] 
[  608.107544][T23648] the existing dependency chain (in reverse order) is:
[  608.116578][T23648] 
[  608.116578][T23648] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  608.123890][T23648]        __mutex_lock+0x19d/0x1550
[  608.129110][T23648]        get_device_parent+0x16f/0x3a0
[  608.134575][T23648]        device_add+0x2d4/0xb80
[  608.139429][T23648]        device_create+0x269/0x300
[  608.144557][T23648]        msr_device_create+0x33/0x50
[  608.149870][T23648]        cpuhp_invoke_callback+0x434/0x810
[  608.155679][T23648]        cpuhp_thread_fun+0x362/0x780
[  608.161050][T23648]        smpboot_thread_fn+0x57c/0xa80
[  608.166521][T23648]        kthread+0x388/0x470
[  608.171115][T23648]        ret_from_fork+0x514/0xb70
[  608.176252][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.181541][T23648] 
[  608.181541][T23648] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  608.189104][T23648]        cpuhp_thread_fun+0x127/0x780
[  608.194482][T23648]        smpboot_thread_fn+0x57c/0xa80
[  608.199956][T23648]        kthread+0x388/0x470
[  608.204569][T23648]        ret_from_fork+0x514/0xb70
[  608.209684][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.214977][T23648] 
[  608.214977][T23648] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  608.222714][T23648]        cpus_read_lock+0x42/0x160
[  608.227852][T23648]        static_key_slow_inc+0x12/0x30
[  608.233346][T23648]        nbd_genl_reconfigure+0x1301/0x1e80
[  608.239296][T23648]        genl_family_rcv_msg_doit+0x233/0x340
[  608.245537][T23648]        genl_rcv_msg+0x614/0x7a0
[  608.250568][T23648]        netlink_rcv_skb+0x226/0x4a0
[  608.255853][T23648]        genl_rcv+0x28/0x40
[  608.260359][T23648]        netlink_unicast+0x7bb/0x940
[  608.265642][T23648]        netlink_sendmsg+0x813/0xb40
[  608.270927][T23648]        sock_sendmsg_nosec+0x13a/0x180
[  608.276558][T23648]        ____sys_sendmsg+0x54e/0x850
[  608.281851][T23648]        ___sys_sendmsg+0x2a5/0x360
[  608.287048][T23648]        __x64_sys_sendmsg+0x1b1/0x290
[  608.292508][T23648]        do_syscall_64+0x174/0x580
[  608.297656][T23648]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.304079][T23648] 
[  608.304079][T23648] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  608.311734][T23648]        __mutex_lock+0x19d/0x1550
[  608.316850][T23648]        nbd_queue_rq+0x373/0x1150
[  608.321988][T23648]        blk_mq_dispatch_rq_list+0x499/0x1990
[  608.328176][T23648]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  608.335056][T23648]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  608.341558][T23648]        blk_mq_run_work_fn+0x16c/0x300
[  608.347107][T23648]        process_scheduled_works+0xa8e/0x14e0
[  608.353182][T23648]        worker_thread+0xa47/0xfb0
[  608.358299][T23648]        kthread+0x388/0x470
[  608.362890][T23648]        ret_from_fork+0x514/0xb70
[  608.368005][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.373299][T23648] 
[  608.373299][T23648] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  608.380514][T23648]        __mutex_lock+0x19d/0x1550
[  608.385625][T23648]        nbd_queue_rq+0xc1/0x1150
[  608.390655][T23648]        blk_mq_dispatch_rq_list+0x499/0x1990
[  608.396730][T23648]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  608.403601][T23648]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  608.410109][T23648]        blk_mq_run_work_fn+0x16c/0x300
[  608.415665][T23648]        process_scheduled_works+0xa8e/0x14e0
[  608.421740][T23648]        worker_thread+0xa47/0xfb0
[  608.426857][T23648]        kthread+0x388/0x470
[  608.431454][T23648]        ret_from_fork+0x514/0xb70
[  608.436574][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.441864][T23648] 
[  608.441864][T23648] -> #5 (set->srcu){.+.+}-{0:0}:
[  608.448991][T23648]        __synchronize_srcu+0xc9/0x2f0
[  608.454454][T23648]        elevator_switch+0x1e8/0x7b0
[  608.459817][T23648]        elevator_change+0x2fa/0x480
[  608.465109][T23648]        elevator_set_default+0x375/0x440
[  608.470856][T23648]        blk_register_queue+0x3f3/0x4e0
[  608.477401][T23648]        __add_disk+0x6cb/0xe30
[  608.482318][T23648]        add_disk_fwnode+0xfb/0x4b0
[  608.487538][T23648]        nbd_dev_add+0x733/0xb60
[  608.492487][T23648]        nbd_init+0x15f/0x1e0
[  608.497224][T23648]        do_one_initcall+0x250/0x870
[  608.502516][T23648]        do_initcall_level+0x10a/0x1a0
[  608.508052][T23648]        do_initcalls+0x59/0xa0
[  608.512907][T23648]        kernel_init_freeable+0x29d/0x3e0
[  608.518633][T23648]        kernel_init+0x1d/0x1d0
[  608.523518][T23648]        ret_from_fork+0x514/0xb70
[  608.528636][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.533926][T23648] 
[  608.533926][T23648] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  608.541754][T23648]        __mutex_lock+0x19d/0x1550
[  608.546867][T23648]        elevator_change+0x1af/0x480
[  608.552161][T23648]        elevator_set_none+0xb5/0x140
[  608.557543][T23648]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  608.563873][T23648]        nbd_start_device+0x189/0xb30
[  608.569249][T23648]        nbd_genl_connect+0x1597/0x1c10
[  608.574799][T23648]        genl_family_rcv_msg_doit+0x233/0x340
[  608.580882][T23648]        genl_rcv_msg+0x614/0x7a0
[  608.585924][T23648]        netlink_rcv_skb+0x226/0x4a0
[  608.591211][T23648]        genl_rcv+0x28/0x40
[  608.595717][T23648]        netlink_unicast+0x7bb/0x940
[  608.601003][T23648]        netlink_sendmsg+0x813/0xb40
[  608.606294][T23648]        sock_sendmsg_nosec+0x13a/0x180
[  608.611854][T23648]        ____sys_sendmsg+0x54e/0x850
[  608.617142][T23648]        ___sys_sendmsg+0x2a5/0x360
[  608.622355][T23648]        __x64_sys_sendmsg+0x1b1/0x290
[  608.627840][T23648]        do_syscall_64+0x174/0x580
[  608.632968][T23648]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.639395][T23648] 
[  608.639395][T23648] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  608.648043][T23648]        blk_alloc_queue+0x544/0x690
[  608.653351][T23648]        __blk_mq_alloc_disk+0x194/0x390
[  608.659011][T23648]        nbd_dev_add+0x494/0xb60
[  608.663962][T23648]        nbd_init+0x15f/0x1e0
[  608.668654][T23648]        do_one_initcall+0x250/0x870
[  608.673953][T23648]        do_initcall_level+0x10a/0x1a0
[  608.679424][T23648]        do_initcalls+0x59/0xa0
[  608.684282][T23648]        kernel_init_freeable+0x29d/0x3e0
[  608.690006][T23648]        kernel_init+0x1d/0x1d0
[  608.694860][T23648]        ret_from_fork+0x514/0xb70
[  608.699972][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.705262][T23648] 
[  608.705262][T23648] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  608.712481][T23648]        fs_reclaim_acquire+0x71/0x100
[  608.717981][T23648]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  608.724231][T23648]        alloc_inode+0xb8/0x1b0
[  608.729108][T23648]        iget_locked+0x131/0x6a0
[  608.734044][T23648]        kernfs_get_inode+0x4f/0x770
[  608.739334][T23648]        kernfs_get_tree+0x5cd/0x980
[  608.744643][T23648]        vfs_get_tree+0x92/0x2a0
[  608.749628][T23648]        do_new_mount+0x319/0xdc0
[  608.754667][T23648]        __se_sys_mount+0x31d/0x420
[  608.759870][T23648]        do_syscall_64+0x174/0x580
[  608.764988][T23648]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.771408][T23648] 
[  608.771408][T23648] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  608.779407][T23648]        down_write+0x96/0x200
[  608.784695][T23648]        kernfs_remove_by_name_ns+0x4e/0x140
[  608.790682][T23648]        device_links_driver_bound+0x4ab/0x1440
[  608.796929][T23648]        driver_bound+0xd8/0x2e0
[  608.801895][T23648]        really_probe+0x774/0xae0
[  608.806925][T23648]        __driver_probe_device+0x1e8/0x360
[  608.812736][T23648]        driver_probe_device+0x4f/0x240
[  608.818288][T23648]        __device_attach_driver+0x270/0x410
[  608.824189][T23648]        bus_for_each_drv+0x258/0x2f0
[  608.829568][T23648]        __device_attach+0x2c4/0x450
[  608.834880][T23648]        device_initial_probe+0xa1/0xd0
[  608.840434][T23648]        bus_probe_device+0x12a/0x220
[  608.845802][T23648]        device_add+0x7d7/0xb80
[  608.850656][T23648]        faux_device_create_with_groups+0x1a5/0x2b0
[  608.857309][T23648]        regulator_dummy_init+0x19/0x40
[  608.862866][T23648]        regulator_init+0xca/0x110
[  608.867973][T23648]        do_one_initcall+0x250/0x870
[  608.873262][T23648]        do_initcall_level+0x10a/0x1a0
[  608.879868][T23648]        do_initcalls+0x59/0xa0
[  608.884769][T23648]        kernel_init_freeable+0x29d/0x3e0
[  608.890497][T23648]        kernel_init+0x1d/0x1d0
[  608.895358][T23648]        ret_from_fork+0x514/0xb70
[  608.900478][T23648]        ret_from_fork_asm+0x1a/0x30
[  608.905767][T23648] 
[  608.905767][T23648] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  608.914387][T23648]        __lock_acquire+0x1520/0x2cf0
[  608.919782][T23648]        lock_acquire+0x106/0x350
[  608.924812][T23648]        down_read+0x4a/0x330
[  608.929492][T23648]        kernfs_remove+0x35/0x80
[  608.934456][T23648]        __kobject_del+0xe0/0x310
[  608.939546][T23648]        kobject_del+0x45/0x60
[  608.944317][T23648]        cleanup_glue_dir+0x1a3/0x220
[  608.949716][T23648]        device_del+0x77d/0x8f0
[  608.954573][T23648]        device_destroy+0xb2/0x1a0
[  608.959707][T23648]        macvtap_device_event+0x226/0x400
[  608.965498][T23648]        notifier_call_chain+0x1a5/0x3d0
[  608.971135][T23648]        unregister_netdevice_many_notify+0x17de/0x2150
[  608.978127][T23648]        macvlan_device_event+0x7e8/0x880
[  608.983884][T23648]        notifier_call_chain+0x1a5/0x3d0
[  608.989517][T23648]        unregister_netdevice_many_notify+0x17de/0x2150
[  608.996461][T23648]        vlan_device_event+0x143d/0x1580
[  609.002194][T23648]        notifier_call_chain+0x1a5/0x3d0
[  609.007850][T23648]        unregister_netdevice_many_notify+0x17de/0x2150
[  609.014804][T23648]        rtnl_dellink+0x5be/0x810
[  609.019901][T23648]        rtnetlink_rcv_msg+0x802/0xc00
[  609.025403][T23648]        netlink_rcv_skb+0x226/0x4a0
[  609.030706][T23648]        netlink_unicast+0x7bb/0x940
[  609.035996][T23648]        netlink_sendmsg+0x813/0xb40
[  609.041289][T23648]        sock_sendmsg_nosec+0x13a/0x180
[  609.046842][T23648]        ____sys_sendmsg+0x54e/0x850
[  609.052128][T23648]        ___sys_sendmsg+0x2a5/0x360
[  609.057327][T23648]        __x64_sys_sendmsg+0x1b1/0x290
[  609.062788][T23648]        do_syscall_64+0x174/0x580
[  609.067900][T23648]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.074317][T23648] 
[  609.074317][T23648] other info that might help us debug this:
[  609.074317][T23648] 
[  609.084544][T23648] Chain exists of:
[  609.084544][T23648]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  609.084544][T23648] 
[  609.097944][T23648]  Possible unsafe locking scenario:
[  609.097944][T23648] 
[  609.105413][T23648]        CPU0                    CPU1
[  609.110820][T23648]        ----                    ----
[  609.116196][T23648]   lock(gdp_mutex);
[  609.120119][T23648]                                lock(cpuhp_state-up);
[  609.126990][T23648]                                lock(gdp_mutex);
[  609.133412][T23648]   rlock(&root->kernfs_supers_rwsem);
[  609.138871][T23648] 
[  609.138871][T23648]  *** DEADLOCK ***
[  609.138871][T23648] 
[  609.147056][T23648] 2 locks held by syz.4.4638/23648:
[  609.152299][T23648]  #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810
[  609.161302][T23648]  #1: ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  609.170452][T23648] 
[  609.170452][T23648] stack backtrace:
[  609.176340][T23648] CPU: 0 UID: 0 PID: 23648 Comm: syz.4.4638 Not tainted syzkaller #0 PREEMPT(full) 
[  609.176359][T23648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.176369][T23648] Call Trace:
[  609.176416][T23648]  <TASK>
[  609.176442][T23648]  dump_stack_lvl+0xe8/0x150
[  609.176505][T23648]  print_circular_bug+0x2e1/0x300
[  609.176527][T23648]  check_noncircular+0x12e/0x150
[  609.176549][T23648]  __lock_acquire+0x1520/0x2cf0
[  609.176573][T23648]  ? kernfs_remove+0x35/0x80
[  609.176608][T23648]  lock_acquire+0x106/0x350
[  609.176623][T23648]  ? kernfs_remove+0x35/0x80
[  609.176643][T23648]  down_read+0x4a/0x330
[  609.176659][T23648]  ? kernfs_remove+0x35/0x80
[  609.176676][T23648]  kernfs_remove+0x35/0x80
[  609.176693][T23648]  __kobject_del+0xe0/0x310
[  609.176711][T23648]  kobject_del+0x45/0x60
[  609.176727][T23648]  cleanup_glue_dir+0x1a3/0x220
[  609.176746][T23648]  device_del+0x77d/0x8f0
[  609.176767][T23648]  ? __pfx_device_del+0x10/0x10
[  609.176785][T23648]  ? kobject_put+0x50f/0x550
[  609.176803][T23648]  device_destroy+0xb2/0x1a0
[  609.176822][T23648]  ? __pfx_device_destroy+0x10/0x10
[  609.176842][T23648]  ? kernfs_remove_by_name_ns+0x101/0x140
[  609.176861][T23648]  macvtap_device_event+0x226/0x400
[  609.176878][T23648]  ? __pfx_macvtap_device_event+0x10/0x10
[  609.176896][T23648]  notifier_call_chain+0x1a5/0x3d0
[  609.176915][T23648]  unregister_netdevice_many_notify+0x17de/0x2150
[  609.176942][T23648]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  609.176964][T23648]  ? netdev_upper_dev_unlink+0x99/0xe0
[  609.177009][T23648]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  609.177032][T23648]  ? macvlan_dellink+0x3e4/0x470
[  609.177054][T23648]  macvlan_device_event+0x7e8/0x880
[  609.177079][T23648]  ? __pfx_macvlan_device_event+0x10/0x10
[  609.177106][T23648]  notifier_call_chain+0x1a5/0x3d0
[  609.177124][T23648]  unregister_netdevice_many_notify+0x17de/0x2150
[  609.177149][T23648]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  609.177170][T23648]  ? call_rcu+0x64b/0x8b0
[  609.177188][T23648]  ? lockdep_hardirqs_on+0x7a/0x110
[  609.177216][T23648]  vlan_device_event+0x143d/0x1580
[  609.177241][T23648]  ? _raw_spin_unlock+0x28/0x50
[  609.177282][T23648]  ? __pfx_phonet_device_notify+0x10/0x10
[  609.177298][T23648]  ? __pfx_vlan_device_event+0x10/0x10
[  609.177322][T23648]  ? cgw_notifier+0x314/0x380
[  609.177385][T23648]  notifier_call_chain+0x1a5/0x3d0
[  609.177403][T23648]  unregister_netdevice_many_notify+0x17de/0x2150
[  609.177428][T23648]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  609.177449][T23648]  ? unregister_netdevice_queue+0x17d/0x340
[  609.177468][T23648]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  609.177487][T23648]  ? __pfx_veth_dellink+0x10/0x10
[  609.177560][T23648]  ? __pfx_veth_dellink+0x10/0x10
[  609.177579][T23648]  rtnl_dellink+0x5be/0x810
[  609.177595][T23648]  ? __pfx_rtnl_dellink+0x10/0x10
[  609.177613][T23648]  ? unwind_next_frame+0x8f/0x2550
[  609.177652][T23648]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  609.177677][T23648]  ? __pfx_rtnl_dellink+0x10/0x10
[  609.177695][T23648]  ? __pfx_rtnl_dellink+0x10/0x10
[  609.177707][T23648]  rtnetlink_rcv_msg+0x802/0xc00
[  609.177730][T23648]  ? netlink_sendmsg+0x5d4/0xb40
[  609.177749][T23648]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  609.177771][T23648]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  609.177795][T23648]  ? __lock_acquire+0x683/0x2cf0
[  609.177814][T23648]  netlink_rcv_skb+0x226/0x4a0
[  609.177831][T23648]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  609.177855][T23648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  609.177875][T23648]  ? netlink_deliver_tap+0x2e/0x1b0
[  609.177891][T23648]  ? netlink_deliver_tap+0x2e/0x1b0
[  609.177910][T23648]  netlink_unicast+0x7bb/0x940
[  609.177928][T23648]  netlink_sendmsg+0x813/0xb40
[  609.177948][T23648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  609.177966][T23648]  ? aa_sock_msg_perm+0xf1/0x1b0
[  609.178019][T23648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  609.178035][T23648]  sock_sendmsg_nosec+0x13a/0x180
[  609.178057][T23648]  ____sys_sendmsg+0x54e/0x850
[  609.178075][T23648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  609.178094][T23648]  ? import_iovec+0x73/0xa0
[  609.178141][T23648]  ___sys_sendmsg+0x2a5/0x360
[  609.178156][T23648]  ? __lock_acquire+0x683/0x2cf0
[  609.178172][T23648]  ? __pfx____sys_sendmsg+0x10/0x10
[  609.178188][T23648]  ? futex_wait+0x2a2/0x390
[  609.178236][T23648]  ? __fget_files+0x2a/0x420
[  609.178251][T23648]  ? __fget_files+0x3a2/0x420
[  609.178268][T23648]  __x64_sys_sendmsg+0x1b1/0x290
[  609.178285][T23648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  609.178308][T23648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.178324][T23648]  do_syscall_64+0x174/0x580
[  609.178337][T23648]  ? trace_irq_disable+0x3b/0x140
[  609.178357][T23648]  ? clear_bhb_loop+0x40/0x90
[  609.178374][T23648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.178390][T23648] RIP: 0033:0x7f15f899ce59
[  609.178424][T23648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.178458][T23648] RSP: 002b:00007f15f97a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  609.178493][T23648] RAX: ffffffffffffffda RBX: 00007f15f8c15fa0 RCX: 00007f15f899ce59
[  609.178512][T23648] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003
[  609.178523][T23648] RBP: 00007f15f8a32e6f R08: 0000000000000000 R09: 0000000000000000
[  609.178533][T23648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.178542][T23648] R13: 00007f15f8c16038 R14: 00007f15f8c15fa0 R15: 00007ffefe1a8ea8
[  609.178560][T23648]  </TASK>
[  609.777362][T23658] syzkaller0: entered promiscuous mode
[  609.782889][T23658] syzkaller0: entered allmulticast mode
[  612.859371][ T4990] udevd[4990]: worker [20705] /devices/virtual/block/nbd2 is taking a long time
[  613.034484][ T1676] block nbd2: Possible stuck request ffff888027187000: control (read@0,1024B). Runtime 60 seconds
[  613.045372][ T1676] block nbd2: Possible stuck request ffff8880271871c0: control (read@1024,1024B). Runtime 60 seconds
[  613.056290][ T1676] block nbd2: Possible stuck request ffff888027187380: control (read@2048,1024B). Runtime 60 seconds
[  613.067394][ T1676] block nbd2: Possible stuck request ffff888027187540: control (read@3072,1024B). Runtime 60 seconds