last executing test programs:

3.183460686s ago: executing program 3 (id=4002):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001300310327bd7000fadbdf2400000000", @ANYRES32=0x0, @ANYBLOB="d0470200016004001400030064756d6d7930000000000000000000000800040008000000300016802c000180280001000200aca2"], 0x6c}}, 0x4040010)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018400000fdffffff000000000000000018010000756c6c2500000000002020207b1af8ff00000000bf0100000000000007010000f8ffffffb702000008000000b703000001040000850000009b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
shutdown(r0, 0x1)
close(0x3)

3.011968082s ago: executing program 3 (id=4005):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000009, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000000)={&(0x7f0000000100)={0x38, r1, 0x701, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "490f168d06c2f77807b2c0d0615667806683cd7c6732f935"}]}, 0x38}}, 0x2404c010)

2.519801846s ago: executing program 4 (id=4011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdb030010000000"], 0x14}}, 0x4044000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x63ba, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0xb2, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x10004004, &(0x7f0000000300)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c)
recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/130, 0x82}, 0xdb2a}], 0x1, 0x2020, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000480)=""/8153, 0x103000, 0x800, 0x9}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002480)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000024c0)=0x10, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x12, 0x0, &(0x7f0000002500))
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000002540)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000025c0)={'lo\x00', <r6=>0x0})
bind$xdp(r3, &(0x7f0000002600)={0x2c, 0x2, r6, 0xfffffffe, 0x0}, 0x5f)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000)
pselect6(0x40, &(0x7f0000002640)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x80000000009c2a, 0x4}, 0x0, &(0x7f0000002680)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x4000009}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x12, 0x0, 0x0, 0x0, 0x642, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x6, 0xf, &(0x7f0000002880)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r7, 0x702, 0xe, 0x0, &(0x7f00000029c0)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a00)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0xbd, 0x0, 0x8000000}}, 0xe8)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020603b33c664f000400000000000000150001000000050001000600000005000500020000000500040000006f72742c6e6574000000090002007379173100000000000000"], 0x64}}, 0x4840)

2.442177102s ago: executing program 2 (id=4013):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="89a25031b0f94f0cd90348a0d21ee413fa55c26836ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9890c9dcac5cf843794592a5d408bd312d70e14da62181e3aaa9c243d775a318fc99b73e54d27ac3f01a78de2df421629d0c172f41ca731248a0717e47bf7a4295f9f76b94c660e7d40b2edfaa8fb394752ba13a", 0xffc9}, {&(0x7f0000000280)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf988204009c7c4e4727f8d8979ce90000000013faf51834517bed4d0bfc521236429a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d217e66", 0x63}, {&(0x7f0000000300)="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", 0x1135}], 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="140000001400060096000000000000000300008022ba329a65ff10ecce1204d26189c1aef91e6d61d5ef639b720eab481edd8b083efc7b9ae091f7b656f1fcf72c65e81787212e87663a678d03c3a0155df9fd"], 0x14}], 0x1}, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES16], 0x0)

2.296665463s ago: executing program 2 (id=4014):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
splice(r2, &(0x7f00000001c0)=0x1, r1, 0x0, 0x6, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r3], 0x33)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="104e0600016a03002c001280110001006272696467655f736c617665000000001400058008002500ff0f00000500210001000000f4eb7c3ba9ae3a8d969fa82c98e02dd9caad7c0f552ec4963d0a95ae6d1c3dd2dee5d82d003fbb68f2e0352c40317ebb0dcef9c83d629e99e575cedebb63d7a613adcfe6a59d930f70c2fc9f8ac6b3f2c3fcb346374eab0d6315531c0a53c9d0e0d5a4ced527a6a2b3eb074959f16c248b2d7fa5d30503295df7538cf5a8d67c8cad5f4aca4d56ddf42caf9f990d51cc22bd913e1d75b92c02338f656f2c23bbfb0a5cd0a9390a72f4a09ed92b56a2c9b69554"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendfile(r3, r0, 0x0, 0x10000)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc)

2.140804285s ago: executing program 3 (id=4016):
socket$kcm(0x10, 0x0, 0x0) (async)
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x1)

2.044467745s ago: executing program 2 (id=4018):
openat$tun(0xffffffffffffff9c, 0x0, 0x129642, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[], 0x7c}}, 0x84c5)
sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a1f0400000000000000000a0000030900010073797a31000000003800048034000180090001006861736800000000240002800800044000000009080002400000000f080007400000000108000640fffffffe0900020073797a3200"], 0x8c}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000500)=0x80000004, 0x4)
bind$inet6(r8, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f00000005c0), &(0x7f0000000600)=@udp6=r8}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x5, 0x4, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r9, &(0x7f0000000780), &(0x7f00000007c0)=@udp6=r8}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400d8}, 0x4000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000dd0041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c0002800400148004000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f00000001c0)=0x5, 0x4)
sendmsg$inet6(r12, &(0x7f0000000240)={&(0x7f0000000340)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x59}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000004000000290000000b000000fffffffc00000000"], 0x18}, 0xc4)
r13 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000440)=0x44fb, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d000000000001000200000000000000683a73797a6b616c6c653230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

2.0304793s ago: executing program 3 (id=4019):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={<r0=>0xffffffffffffffff, &(0x7f0000000040)=',\\#\x00', 0x60100, &(0x7f00000000c0)={@_ha_fsid={[0x400, 0x2f]}, {0x6, 0x101, 0x9, 0x7f}}, 0xffffff45, &(0x7f0000000280), &(0x7f0000000300)=0x81})
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @hci={0x1f, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, @vsock={0x28, 0x0, 0xffffffff, @local}, 0x2, 0x0, 0x0, 0x0, 0x46, 0x0, 0x7dcf, 0xde48, 0x14})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2c}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'dummy0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x3, 0xb}, {0xa, 0xb}}}, 0x49}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)
r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r5)
sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
connect$pptp(r2, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000780)=ANY=[], 0x44}}, 0x40840c0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000060a421e00"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100027bd7000fbdbe116d1df250500000008000400ac14140d2c00070073797374656d5f753a6f626a6563745f723a68616c645f6b65796d61705f657865635f743a733000080004000a01010108000500ac1414aa0500010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x80)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r10, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000340)=0x1)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r13=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)

1.176252479s ago: executing program 1 (id=4021):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
syz_emit_ethernet(0x1f, &(0x7f0000000200)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300010f26bd7000fddbdf2500000000", @ANYBLOB="40800100000400000400140008002e000000000008000f000600000008001c"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x24}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x65, 0x484, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.088815319s ago: executing program 4 (id=4022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34aea}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)

964.758373ms ago: executing program 4 (id=4023):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@local, @multicast2}, &(0x7f00000004c0)=0xc)
r0 = socket$inet(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa}]}, &(0x7f0000000e80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ec0)={'bond0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000001040)={0x44, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x55, &(0x7f0000001380)=0x1, 0x4)
sendmsg$nl_generic(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x8c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x71, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94d"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r4)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000001540)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001600)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}}, 0x20000881)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a0000000020201020000000000000000020000031c0002800c000280050001003f0000000c0002802afe0100110000007000028014000180080001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r10, @ANYBLOB="010028bd70000000000001000000800008807cfdff7f24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b5400098028000080060001000a00000014200200fe880000000000000000000000000201050003000300000028000080060001000a000000140002000000000000000000000000000000000005000300010006001400020077673000000000000000000000000000080005"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b15, &(0x7f0000001880)={'wlan0\x00'})
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x52, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ae}, [@exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f00000008c0)='GPL\x00', 0x9, 0xf3, &(0x7f0000000900)=""/243, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000a80)=[{0x4, 0x5, 0x3, 0x7}, {0x2, 0x3, 0x5, 0x7}], 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1a, 0x3, 0x100, 0x7fff, 0x1410, 0xffffffffffffffff, 0xa694, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)

888.608044ms ago: executing program 2 (id=4024):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x2006})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0x80000010})
epoll_create1(0x0) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

812.523706ms ago: executing program 0 (id=4025):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0) (async)
syz_emit_ethernet(0x316, &(0x7f0000000880)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@void}, {@ipv4={0x800, @gre={{0x14, 0x4, 0x0, 0x1c, 0x304, 0x67, 0x0, 0xa6, 0x2f, 0x0, @local, @broadcast, {[@rr={0x7, 0x1f, 0x69, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010104, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @empty]}, @noop, @lsrr={0x83, 0x13, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x42, 0x3, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xbf, 0x0, [0x4c, 0x603], "2bb9a5b2ec676d7bf485e423f2748e164aa9684b39ee801f78d97fb3216e7a819d3776c1f7e76e844cbc897714e668e3a275bbe5170cc9250806c6263e8acaa863ad91c3a133035be05b973de34a44d0d286df3459fa121f102b4e5d8d1ba0ff834934e8f08ce0484b86330d0b2b3c489dbd3e7760605505fc145482b9b670cb6132dc673c9f25ca830386134ed8f10c6fa5d6d8ce9fedea4ace905e4c3c03ae71f9728a632aa88f904d7cdbddf1d6a44c52a416a3d8c692c641f420a440c7"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "961ea668c4f9d61ecbe1611e485f6700b7a72285e54e4edb20990169eb52d5942031a15b32f8e31d91e2fc1ac751"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2], "946c66b3ede3b901f6020dce55c870311aa6ff6662c97a3d127a8270e4f3cccd5445aa8e683cd4b9b17356c9f4ea31d8526a2ac9902e8ced42d5b8879a06d51a54512134c2749d25c531ea806fe50bda3cbc14d56781230531537b54ad05ba6ee4f58a76521d283670a5b47fae2ef9a2980cdbbb2dc3e40f4c946193f1ef522bd747ca4aa400d8cf418d7e5194c6d9be16826a0f913c6b3d477b2bc0bb23eb2f1fb280509906f98ea5f62f83b0db5825e52f"}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x2, 0x1, 0x0, 0x1, 0x6, 0x7}, 0x1, {0xfffffff8}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x2, 0x1, 0x1, 0x1, 0x7, 0x20}, 0x2, {0x1, 0x2, 0x0, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0xffffffff, "93710e8eca5cb929442d4cd1f3e9f44ad43edaaa43337c20ebf80dc9df387e6cdde85fb3b10af94865befbaa3795739ff7e5fc18c100a16a8e3283ca5e6d18c8d80e4d7c6ed988b4f41fe123d6831edb55a8b07f97bd744c878f0f228c9b1c2ae00c293ba09e61c014374b31226993da71532dd45c740c4156f93a4aefc9ed564471ef064c357fc530dbdf9ca0aea57584e8622183f9ac5ae61236b53545682772d2d18c1b1d30a414d18b9fe410ddcf8eef216ee9f03460c16cc9acbec67b48daa983df1646a7d965709f"}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0xffff, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10}, {}, {0x9}, {0x4, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001100)=""/133, 0x48, 0x85, 0x1, 0x4, 0x10000}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7}, &(0x7f0000000cc0), &(0x7f0000000d00)=r5}, 0x20) (async)
setsockopt(r4, 0x0, 0x489, &(0x7f0000000740)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f0000010015000000000002000000000000e6ffffff0000", 0x44) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4e, 0x4e, 0x8, [@datasec={0x2, 0x4, 0x0, 0xf, 0x2, [{0x5, 0xb, 0x1}, {0x8000, 0x2, 0x1}, {0x3, 0x7, 0x7fffffff}, {0x3, 0x3b, 0x33e}], 'p\r'}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x2e, 0x30, 0x0, 0x5f, 0x61, 0x0]}}, &(0x7f0000000200)=""/243, 0x70, 0xf3, 0x0, 0x7}, 0x28) (async)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r9, &(0x7f0000000d40)=[{{&(0x7f0000000e00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00\x00', 0x2}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x4e26, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b4464377", 0x5d}], 0x1}}, {{&(0x7f0000000fc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001000)=[{0x0}, {0x0}, {&(0x7f0000001040)="c09dc4b32ef1ed679c2d1014b8fdccae6efdcd7c04ae66e7a86e891092ae3df4b074974d2c3baf4a", 0x28}], 0x3}}], 0x3, 0x2000c044) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff3, '\x00', r3, r8, 0x2, 0x5, 0x2}, 0x50)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x28}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendto$inet6(r2, &(0x7f0000000500)="eddd095f7f89a5f46d37e3772d59c7aaed828981a34563c4b98d468a0bed67b1aac9987e690732c34967dbe030564f10ba50a63d14bc0f836d9a50f45f068aeab6e0a2a6a9290a79c6b03aeec4c042e6168cb417a385fa637868c8e8ba57ce", 0x5f, 0x20008005, &(0x7f0000000600)={0xa, 0x4e24, 0xfffffffd, @empty, 0xd}, 0x1c)

812.172732ms ago: executing program 1 (id=4026):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0)
accept(r1, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80)

729.404062ms ago: executing program 3 (id=4027):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
unshare(0x22020600)
r0 = socket(0xa, 0x3, 0x87)
sendto(r0, &(0x7f00000008c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
poll(&(0x7f00000009c0)=[{r0}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0x64, 0x2}]})
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fd3f000000000000bcd2d80a041173f74d0256d4b4000009000000e0880900c34000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x3)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a3100000000050001000700000034000780180001800d000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={<r5=>r2})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r5})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff})
ioctl$sock_ifreq(r6, 0x8995, &(0x7f00000006c0)={'veth1_macvtap\x00', @ifru_data=&(0x7f0000000700)="a94b6d2db28bf4dfcabae54185c51d718702631b624ce6f282c2daffc2c34863"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000600000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000006001000000000000200503000031f2a8e3ab4bf6fc"], 0x48}, 0x1, 0x0, 0x0, 0x488d0}, 0x880)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x0, 0x23}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1})
socket$inet_smc(0x2b, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000540)=0x6, 0x4)

709.055372ms ago: executing program 0 (id=4028):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25090000003800038008000100010000000800030003000000140002006d61635e656330000000000000000000060004000400000008000500e0000001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c40)={0x6, 0xfe, '\x00', [@pad1, @generic={0x6, 0x8, "e9bf116bec275fa9"}, @generic={0x4, 0x5c, "e1a4c3ae5886fc7c2bcdec3147516ef7544c4e94df81e22f08df5a73a8251a5fba1a5e9d34365dbdd2f50433097e367fb2fd60528e10adbe0a502cfc4404f7dcfb50611bb2a069da9f40ac17c9d27b6ce528068e05b068fd98018492"}, @hao={0xc9, 0x10, @private2}, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x8, 0x9e8e, [0x5, 0xe0, 0x8001, 0x1, 0x25a3, 0x8, 0x7ff, 0x0]}}, @generic={0xa4, 0x51, "2a3293e439f614bee1cc2a4fed42daf30865911846aced3d8d7c7f9a500d20734f3427bd3bc6e31a93f8fb887a3ec7bfc70055ae35efe6830e04bdad3620cbbea88e7f83ea28439b2ad35fe39f0170d7fa"}, @enc_lim={0x4, 0x1, 0x3}, @generic={0xff, 0x6cf, "dc2b9c9707a585858315819bc10429a6c60031ec29d1fa5e2cbb5b4dc6f89260534124c60ee949c6f6ca436d3af2071736ee7908ffa1a43cabd7785c2606bd70f9e5bab12f56fab05e3c043b12429991be64097efbd0cbc72af23921212cfe8e3e87275a013007c3c15d34803e5f75721e07728eba11a1e1a01d61056657f253f7c8e499563d3dffb4fbc8055f63a2be960961609cb8924153d6526fef7db927a81f501b2fc692a4d0d85fc73e9001634394014f737cb2c1a398642b92e16f8cb1cead26ee51044c59940f747d2b14c4c4872bf79ef34e2ff31632ab29a44debb0fc08d18bdd81b483ea67b254f29a4bbaa0ae553205ed1f7970939dbc190e61b4e3ca78381f67b6b308ae236006f1aa3379f23b757ba9d38ca207882ff08e604998e09a781e25d67d36765d2f1619d85aa9e1063bbbed0a6796131d9657faf1d64759652f5e4af48c55520abd717c19519da9680ab55276db2c28358264b191e60bb29d5e7cb3facf094dadca47475e4858e5c48f388dc496b6616889bc95f5241b67c51dcabe5febf0495d496b4ecf4e4829ff4bf6a6189ef5a7dfce32df0fa4bf0ff0654d218fd9555ae59dd38d5d390364bac7713bb389aa26042a34f6250e439fed0f9355825c1ca403c708c0551d93d5b4704388bf79acc3add29fe8285b74a2c2cf22748c9f5e5b48e3cec1e612f6fd0ba1858db26f9c804a86cb58959ce5d3423a6bfc02de5a3dbdeda95be855bc495c917fcb54f441852dbeb013121e83ae1af9b1428cee1f9b0210a92f562010993648ad0e0c598c3a340a6637e5970237608a26e430a6916a720035586ac9d0ffbec46feb1a9b77df4628bfd15844ed35b00e8f3bd58b5dc8ea39ac0a779217f7dc6f58dbe0b62b5614a55ca79aa06d1ff3add8ff848fd9249b5a91d3cbe39e246666c1076937644d706407db47b408f9595646a60554a330ba2168c39d73ad3d0ac131154b8213777c129b62cce4615d65eacf35fc10bd2a6563a0a6142d81d159feb074f59fbd210b5ab95bb71e012c2bf1ae423dbb41b12210755e7f31bdd43f7a6164c762f2cd4ac69cf56a0562112dd234295d8acf63bfda872f9b2a9e3447beed2da09a4386cf9f5c360cb702e337ad96cb25e803b50359d274d89a497b4d0d48e035a320cbc4a75e94e05228e22414ca6291f7c13e8f26a5b1f2864658696677465da1392e268c0f970c4e934938dd2c269e234a9b3f4c1a6a04d23729ab2cb762c77893e5f7dbc80d541073b170fb942e58162d88862abf35014381745aaf9ae3661aa2f6baf35483aa133d0453c5b1b694bf896f0ae1e0212ce55e71040fa8bd82327dd9b31ed3faa9a9264a9c87752ce455cfc041c359faaa24ca25ec9e7893cbb37225b421f995cb309546ee24bd1060e5e91b6b76a988a9004801782298c7e13262218054ef84023e41ae3a8c9cf13e1dbdd86a1e54fa2f6e6a1cd89e0de8b307b1d38ef3d0ac3ddec98c44da147089bc3f474dd85fb2539f8db6547b365545d1abb088a241fbd04c3c0c4a6f82d47f94fe69af936944a7d6503483aaa17dd22e780bc45a7e3b4ed7598892d5627925b8def71bd0e7f8ecc998f0dab7a8801ae0a97859f0602d88888152225c6f4450e71495f6a10b1e2d64a9a9fa1d09a188e5506293ec61a5cc047be2fe8193cb89f88515f7ef4bbf4c7a13fbc9c3b0cc520c9ecf98cab239651a1a0e80934a7e49dffa681360294a8cc0a103b9f46355e20face4669e6bf49a1743bdd2c59dfc23a5d70d8046f5c5796954fcadaf2c2747c43359807352f03db2faa157bec99e1c85631d43e8188df8af7b4b6f6ba2e873519439ea068020df91cbd007a8d30af9713216372e9ae5dabfaf238af44e091047de4aa2063317d055ccb8a802be73108783cdc1fd00c02c8d217b87abd44a377262492f4c89d34a09e77d06b7d4ff07a29137e54c8a1a65ed0ba04780030314683eae967806f4afefaccf9d7083cd681d95acd12c6438c7d204ce5f6b3ca5e771b3d83c5436eb715646cebec4809b984923e088389e532b135ce44875c8f16dc227aba10687580ee0c44bd8f5e94fef9ca8de1cb234b70c9d43c53b38f612f7dcc4f243db6e7d5aff7211fe4e22bb6b0f98320e25d36c381b8c9e6c6da80417c69c9101d5c99fd9b66ea8c15e65c1e7d1333d3a61947ed69b24feb0007c4bd1995e173b16e2c1371ff917d3e597863d4312d6fd44012b44a9b6b86e7f3b9fbd6b97e63831c465166f059d484805aeeff96349c14b8edd18185644db41c99fa673a80322b08202fe6d3b5c08239c1267f44acc688346b941b426bf1b149f8706b975202ab6f9c8f82f794f7a5cf08dbf53af8b87f62b5a943ca6004bd4c6c99f14ce1e4e1327348504df4e3ee140bc39e5db626ca599ddc1c28bca78604153c91055e83a0773ec2b849cefbaabefeda94bba437c89fe73"}]}, 0x800) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="85100000efffffff18110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000640)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0xc, &(0x7f0000002b40)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x3, 0xc, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x20, 0x2000000000000049, &(0x7f0000000540)=ANY=[], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r6, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc443}, 0x4000001)
setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000840)=0x2d, 0x4) (async)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x800)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r8, 0x40086e81, &(0x7f0000000280)=0x3) (async)
socket$kcm(0xa, 0x2, 0x3a)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000680)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffc}, {{@in6=@mcast2, 0x0, 0x17}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x2}}, 0xe8) (async)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x48091}, 0x10004001) (async)
syz_emit_ethernet(0x1ee, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="e34bb6d9f3380b797b0e86a94ecbf18d785831e0e87d96252a304a5ce152648e297b413f906b93e068c46407e266c324fe95d468774e2aac79f4dea3a8db153976f234fd3567ef4fad23b29a6be1da6fb5d92a4279ed9406b9d7314c94438328244d13a295397e9a4e561dcf65474f74d810ccb3752960d841f3490e77a3db3918cdf845cd1bca39e92a9deb7bac45a70d91250e909302f2e329ea92797ea53cdd76652a1998f58605b9baeb591d9f0cc390d5ee9a981bbc0c0c6c68e6ad87b50053a05eea4d4a70e26f807479d81f7f5ed6d88ffd92734d43d0cc16bd97c3e01b2d73", 0xe3}, {&(0x7f0000002540)="29d2a8275a5ef7da11ca397ea50877a85d356a6cc9d8b9723e32e4baf74c4d61609d5842d63b408d9acda3aee32ac8cec2d7ad99da0f853c47204f215187ad08d9707a5a7fc2140900e9a0dbad1ebffd181a4b2f7aaa14ed379e79b747accf", 0x5f}, {&(0x7f0000002f00)="c190dabb1b5874fc97e927062af2ea53e8b02b8188a5896c990db4cc0c6575ce63af45d0bbb5a1222765c77b983225db48f08fcae470d35f6936ca2d5def711d8bd6b05f7bbd9615e624189e6e8732b4d8f2a7d2395c3e8249bc52592d24089914dd347de25ded6f245718e3b880a0eebd5d77180c40a93493efbf78917b56497d86ef59e1148f59126164b7dad37820971b6ca483624c11bba5f9c86b7f013acda94daa50cc5d42a639c09d04847d8ba1f534744707d129f252d482d99c5c7140edc92c60991107c04fb6df80b4f61ac8cba503b43c0722ff4eaabc922222b5b384116db5ab76797baca846f55780b8b4542bb3a8f778fa877ac6472d8c8875fc4f7e66c8c069a6289d2e1e9d3f895fed0db76f418e88da0a3297d386a3ce2c934abb421e63a4761fd9ef1d2d1abe6eb5", 0x131}], 0x4, &(0x7f00000026c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x764}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}, 0x24000004) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a7741bce2908e4aa9000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000006000340000400000800074000000400180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) (async)
r12 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0x2, &(0x7f00000000c0)=0x1, 0x4)

660.84973ms ago: executing program 2 (id=4029):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa91}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}]}, 0xe4}}, 0x4)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

621.451413ms ago: executing program 3 (id=4030):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x82)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000005af300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10)
recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a000000a5ae6054e57ecf18d091ca351ec6366815aa3453076dd8ec340d601ba398eb3bfcb78ce3faf177615c12ba1d79e34735fa9078"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000400)={&(0x7f0000000000), 0x10, &(0x7f0000000500)={&(0x7f0000000600)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

615.277178ms ago: executing program 1 (id=4031):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a02627bd7000fbdbdf25110000003000018008000b00736970000c0007001200000008000000060002008700000007000600666f0000080006007772720008000600af210000080006006a0000005c00018008000b00736970000c0007000100000008000000080005000400000014000300fe80000000000000000000000000003908000b007369700008000500020000020700060072720000060004004e2300000800050004000000"], 0xb0}, 0x1, 0x0, 0x0, 0x24008004}, 0x402c880)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x6, 0x16, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x6, 0x16, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0)
socket$inet(0x2, 0x4, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f14010828bd7000fddbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x12, &(0x7f0000001b80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf0500000000000026090100000000009500000000000000950000000000000018630000080000000000000001800000bf9800000000000056080000000000fd85040000000000000000000000000000950000000000000016bc48d11664055936196eaf1c653b297776bc828a94f7061c4b51b072024f1f4e1fc7e8914d43af9037758825209c740e160ea776c2"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/162, 0xa2}], 0x1}, 0x5}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/4, 0x4}, {&(0x7f00000006c0)=""/57, 0x39}], 0x2, &(0x7f0000000740)=""/82, 0x52}, 0x1}, {{&(0x7f00000007c0)=@caif=@rfm, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000900)=""/225, 0xe1}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/88, 0x58}], 0x4, &(0x7f0000000b80)=""/18, 0x12}}], 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040027bd7000fddbdf250b00000048000280140003800800020001000000080001000101000014000380080002000002000008000200ff7f0000080001000000200004000400040004000400040008000200010001001400098008000200c136745308000200020000007c000680040002000800060000800000630003006b8749c0ff3d9366d290aa088a17315da670e375de1b185fa40982a784d335c340e70aaacc9fb228df77184be6a88a438f45468dc178ad5f17d6651d1f4341a8d79491cc40f779be3aad9dd1ab56e11c1014bff35e18e57f78b09dbc97a2e9000400050004000200"], 0xec}, 0x1, 0x0, 0x0, 0x40801}, 0x40000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002060300000000000000000000000003b8a6ca0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r10, 0x0)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040026bd7000ffdbdf2506000000080003000600000008000200000000000800040005000000080004000c000000c7bce165fc8d27c645f46ae6c30700788516feb220e3b39a8571b59ae02a0149237777af7637cb155490090c5772476dae4abbc9c4f9db7a6785cb74b75c4ddeae0e0dd18d716b25c5c7f3d7689b82d1c8b6a5457e5e418030cb1f66b7e85f783732df9af9e110a17b20ce019a05fb62268762067524cec24c2aab3a89b38721755d0ac37a4d69b8e838a524ea"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040026bd7000ffdbdf2506000000080003000600000008000200000000000800040005000000080004000c000000c7bce165fc8d27c645f46ae6c30700788516feb220e3b39a8571b59ae02a0149237777af7637cb155490090c5772476dae4abbc9c4f9db7a6785cb74b75c4ddeae0e0dd18d716b25c5c7f3d7689b82d1c8b6a5457e5e418030cb1f66b7e85f783732df9af9e110a17b20ce019a05fb62268762067524cec24c2aab3a89b38721755d0ac37a4d69b8e838a524ea"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x800)

472.048944ms ago: executing program 2 (id=4032):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r0, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xc, 0xc}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xc, 0xc}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x90, 0x32, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7069, 0x8, 0x2, 0x1}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x10000001})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r7}, 0xc)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
write(r5, &(0x7f0000000400)='PI', 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc)
sendmmsg$inet6(r8, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet6(r8, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000640)='bx', 0x2}], 0x1)
accept4(r0, 0x0, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000800)={0x1, 'lo\x00'}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000800)={0x1, 'lo\x00'}, 0x18)

471.31165ms ago: executing program 4 (id=4033):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x13, &(0x7f00000021c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000002280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x13, &(0x7f00000021c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000002280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/47}, {&(0x7f0000000700)=""/224}, {&(0x7f0000000800)=""/4096}, {&(0x7f0000001800)=""/124}, {&(0x7f0000001880)=""/60}]}}, {{&(0x7f00000018c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)=""/149}, {&(0x7f0000001a80)=""/118}, {&(0x7f0000001b00)=""/188}, {&(0x7f0000001bc0)=""/57}, {&(0x7f0000001c00)=""/135}, {&(0x7f0000001cc0)=""/101}, {&(0x7f0000001d40)=""/171}], 0x0, &(0x7f0000001e00)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000001ec0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r1, &(0x7f0000001ec0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r1, &(0x7f0000001f40)={&(0x7f0000001f80)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000002000)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000002040)=0x44f3, 0x4)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400280012800b00010067656e657665000018000280060005004e240000050008000000000004000600"], 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x84, 0xffffffff}], 0x10}}], 0x2, 0xc88c5)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) (async)
setsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

460.717442ms ago: executing program 0 (id=4034):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xb847, 0x53)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="23000000ece30300280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)

298.775387ms ago: executing program 0 (id=4035):
syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x3, 0x90}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@broadcast}]}]}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf04", 0x2, 0x8000}, 0x50)

200.407354ms ago: executing program 1 (id=4036):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x52}, 0x28)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0)

179.441217ms ago: executing program 4 (id=4037):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x70, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x70}}, 0x0)

162.474601ms ago: executing program 0 (id=4038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000000300)=""/155}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000003c0)={{r0}, &(0x7f0000000400)=0x4, &(0x7f0000000440)='%pS    \x00'}, 0x20) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010003000000000000000000000000000c0008000800080000000000"], 0xcc}}, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x40000000, 0x0, 0x3, 0xff}, 0x8)

87.750936ms ago: executing program 1 (id=4039):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r0, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x800002}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x30}, @IPVS_SVC_ATTR_TIMEOUT={0x59}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x4c042)
socket$inet_udp(0x2, 0x2, 0x0)

87.384419ms ago: executing program 4 (id=4040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x4c, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1000}, &(0x7f0000000040)=0x1b)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})

528.162µs ago: executing program 0 (id=4041):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000240)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc)
getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0))
r4 = accept4$nfc_llcp(r2, &(0x7f0000000280)={0x27, <r5=>0x0}, &(0x7f0000000480)=0x60, 0x80000)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000004c0)=""/92, &(0x7f0000000540)=0x5c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x5, 0x3, 0xfe, 0xff, "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", 0x3, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x6, 0xfffffffffffffffa, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000001b00)=@assoc_value={<r11=>0x0}, &(0x7f0000001b40)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="1400000004000000040000004804000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000777140c864390000000200b6a6"], 0x48)
getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000001b80)={r11, 0x2, 0x22, 0x8}, &(0x7f0000001bc0)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001c00)={r11, 0x1}, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYBLOB="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", @ANYRES8=r5, @ANYRES32=r3, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8851}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, 0x0, 0x6, 0x3, 0x1, 0x2, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x70bd2d, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e00000700fffffffe0000007fffff998d0fa2a6b3eddc18"}}]}, 0x150}}, 0x44050)
r13 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000700)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108)
r14 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r14, &(0x7f0000000980)={&(0x7f00000009c0)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000000a00)=[{&(0x7f0000000a40)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001a40)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001a80)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0)

0s ago: executing program 1 (id=4042):
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) (async)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0)
ioctl(r0, 0x0, &(0x7f00000003c0))
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000))
socket(0x1d, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r5, 0xf5f) (async)
listen(r5, 0xf5f)
accept(r5, 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

kernel console output (not intermixed with test programs):

7.288:15): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2874" name="cgroup.controllers" dev="tmpfs" ino=2964 res=0 errno=0
[  369.177865][   T31] audit: type=1800 audit(1791744097.288:16): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2874" name="cgroup.controllers" dev="tmpfs" ino=2964 res=0 errno=0
[  369.663778][T17081] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  369.676601][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'.
[  369.676644][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'.
[  369.722644][T17081] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.760164][T17081] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  369.774586][T17081] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.775409][T17081] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  369.815704][T17397] netlink: 'syz.1.2881': attribute type 11 has an invalid length.
[  369.835054][T17081] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.838051][T17081] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  369.879130][T17081] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.917877][T17393] bridge_slave_1: left allmulticast mode
[  369.944208][T17393] veth3: left promiscuous mode
[  369.944469][T17393] tipc: Resetting bearer <eth:syzkaller0>
[  369.957602][T17393] vlan2: left promiscuous mode
[  369.957623][T17393] syz_tun: left promiscuous mode
[  369.982832][T17393] vlan3: left allmulticast mode
[  369.982853][T17393] bond0: left allmulticast mode
[  369.985578][T17393] bridge2: left promiscuous mode
[  369.986168][T17393] bridge3: left promiscuous mode
[  369.986185][T17393] bridge3: left allmulticast mode
[  369.986340][T17393] bridge4: left promiscuous mode
[  369.986354][T17393] bridge4: left allmulticast mode
[  369.987646][T17393] ipvlan2: left allmulticast mode
[  369.987663][T17393] virt_wifi0: left allmulticast mode
[  369.988066][T17393] veth9: left allmulticast mode
[  369.988526][T17393] ip6tnl1: left allmulticast mode
[  369.989105][T17393] bond9: left promiscuous mode
[  369.989120][T17393] bond9: left allmulticast mode
[  369.989917][T17393] sit1: left allmulticast mode
[  370.006924][T17393] syzkaller1: left promiscuous mode
[  370.006945][T17393] syzkaller1: left allmulticast mode
[  370.180072][T17413] bond3: (slave veth0_to_bond): Releasing active interface
[  370.214775][T17413] .`: (slave bond_slave_0): Releasing backup interface
[  370.232908][T17413] .`: (slave bond_slave_1): Releasing backup interface
[  370.270480][T17413] team0: Port device team_slave_0 removed
[  370.299715][T17413] team0: Port device team_slave_1 removed
[  370.342631][T17425] pimreg: entered allmulticast mode
[  370.342842][T17425] pimreg: left allmulticast mode
[  370.593296][ T4939] Bluetooth: hci5: command tx timeout
[  370.593823][T17442] validate_nla: 91 callbacks suppressed
[  370.593838][T17442] netlink: 'syz.2.2888': attribute type 1 has an invalid length.
[  370.682353][T17442] 8021q: adding VLAN 0 to HW filter on device bond13
[  370.740080][T17441] bond13: (slave geneve3): making interface the new active one
[  370.741216][T17441] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  370.742309][ T5917] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.742391][ T5917] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.742426][ T5917] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.742459][ T5917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.796299][T17081] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.839524][T17081] 8021q: adding VLAN 0 to HW filter on device team0
[  370.870739][  T756] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.870833][  T756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.884151][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'.
[  370.980444][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.980506][ T9940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.140707][T17428] netlink: 'syz.4.2886': attribute type 1 has an invalid length.
[  371.204776][T17428] 8021q: adding VLAN 0 to HW filter on device bond8
[  371.346913][T17471] net_ratelimit: 10 callbacks suppressed
[  371.346932][T17471] openvswitch: netlink: nsh attribute has 17 unknown bytes.
[  371.856867][T17492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2895'.
[  371.880628][T17492] ip6tnl5: entered allmulticast mode
[  372.017529][T17511] bond14: option all_slaves_active: invalid value (255)
[  372.030889][T17511] bond14 (unregistering): Released all slaves
[  372.106509][T17518] ieee802154 phy1 wpan1: encryption failed: -22
[  372.240373][T17527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  372.241914][T17527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.433843][T17535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'.
[  372.454610][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'.
[  372.454633][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'.
[  372.466376][T17531] batman_adv: batadv0: Interface deactivated: veth0
[  372.584564][ T9939] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  372.585128][ T9939] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  372.588993][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  372.589018][T17539] block nbd2: Unsupported socket: should be TCP or UNIX.
[  372.602147][ T5739] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  372.671720][ T4939] Bluetooth: hci5: command tx timeout
[  372.709258][T17081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.809848][T17081] veth0_vlan: entered promiscuous mode
[  372.872563][T17081] veth1_vlan: entered promiscuous mode
[  372.903369][ T7832] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  372.932979][T17081] veth0_macvtap: entered promiscuous mode
[  372.949017][T17081] veth1_macvtap: entered promiscuous mode
[  372.970557][T17081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.991362][T17081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.033564][ T3708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.048182][ T7832] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  373.076646][ T3708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.081314][ T5913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.082158][ T5913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.198462][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.198479][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.344849][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.344871][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.617465][T17572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  373.770740][T17587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2908'.
[  373.809726][T17586] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2911'.
[  373.858479][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'.
[  374.148929][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'.
[  374.858732][T17631] syzkaller1: tun_chr_ioctl cmd 1074025672
[  374.858754][T17631] syzkaller1: ignored: set checksum disabled
[  374.893528][T17628] vcan0: tx address claim with broadcast sa
[  374.893650][T17637] vcan0: tx address claim with broadcast sa
[  375.012653][T17645] xt_hashlimit: size too large, truncated to 1048576
[  375.779573][T17666] IPVS: length: 155 != 8
[  375.995044][T17671] __nla_validate_parse: 6 callbacks suppressed
[  375.995064][T17671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'.
[  375.995077][T17671] nbd: must specify at least one socket
[  376.143572][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.147346][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.148068][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.150086][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.174637][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.564553][ T1159] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.564588][ T1159] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.666902][ T1159] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.666936][ T1159] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.734628][ T1159] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.734661][ T1159] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.786587][ T1159] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.786620][ T1159] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.830703][T17678] lo speed is unknown, defaulting to 1000
[  376.991688][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  377.101768][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  377.399820][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'.
[  377.399845][T17714] netlink: 'syz.0.2938': attribute type 1 has an invalid length.
[  377.518785][ T1159] veth0: left allmulticast mode
[  377.524198][ T1159] bridge0: port 1(veth0) entered disabled state
[  377.619177][ T1159] tipc: Resetting bearer <eth:syzkaller0>
[  377.968571][ T1159] erspan0 (unregistering): left allmulticast mode
[  378.188856][ T1159] tipc: Disabling bearer <eth:syzkaller0>
[  378.272999][ T4939] Bluetooth: hci0: command tx timeout
[  378.320597][ T1159] bond0 (unregistering): Released all slaves
[  378.337054][ T1159] bond1 (unregistering): Released all slaves
[  378.349701][ T1159] bond2 (unregistering): Released all slaves
[  378.366107][ T1159] bond3 (unregistering): Released all slaves
[  378.379693][ T1159] bond4 (unregistering): Released all slaves
[  378.389875][ T1159] bond5 (unregistering): Released all slaves
[  378.399952][ T1159] bond6 (unregistering): Released all slaves
[  378.419768][ T1159] bond7 (unregistering): Released all slaves
[  378.446506][ T1159] bond8 (unregistering): Released all slaves
[  378.469247][ T1159] bond9 (unregistering): (slave veth7): Releasing backup interface
[  378.470620][ T1159] bond9 (unregistering): Released all slaves
[  378.486542][ T1159] bond10 (unregistering): Released all slaves
[  378.498156][ T1159] bond12 (unregistering): Released all slaves
[  378.509799][ T1159] bond13 (unregistering): Released all slaves
[  378.520977][ T1159] bond11 (unregistering): Released all slaves
[  378.529316][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.540442][ T1159] bond14 (unregistering): Released all slaves
[  378.589855][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  378.776346][ T1159] tipc: Disabling bearer <eth:macvtap0>
[  378.808623][ T1159] tipc: Left network mode
[  379.112822][T17777] netlink: 'syz.4.2949': attribute type 1 has an invalid length.
[  379.383919][T17786] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2951'.
[  379.383940][T17786] tc_dump_action: action bad kind
[  379.696194][T17810] netlink: 'syz.2.2955': attribute type 3 has an invalid length.
[  379.911049][T17805] batman_adv: batadv0: Adding interface: syzkaller0
[  379.911068][T17805] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.911169][T17805] batman_adv: batadv0: Interface activated: syzkaller0
[  379.984131][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2957'.
[  380.189297][T17827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2956'.
[  380.201081][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  380.295402][T17804] batman_adv: batadv0: Interface deactivated: syzkaller0
[  380.363991][ T4939] Bluetooth: hci0: command tx timeout
[  380.368663][T17804] batman_adv: batadv0: Removing interface: syzkaller0
[  381.099600][T17678] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.100861][T17858] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  381.112735][T17858] ksmbd: Unknown IPC event: 8, ignore.
[  381.123811][T17678] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.123963][T17678] bridge_slave_0: entered allmulticast mode
[  381.145804][T17678] bridge_slave_0: entered promiscuous mode
[  381.164562][T17678] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.164664][T17678] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.164800][T17678] bridge_slave_1: entered allmulticast mode
[  381.168602][T17678] bridge_slave_1: entered promiscuous mode
[  381.289045][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.308781][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.440748][T17869] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  381.472529][T17678] team0: Port device team_slave_0 added
[  381.476137][T17678] team0: Port device team_slave_1 added
[  381.564608][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.564625][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.564648][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.583627][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.583644][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.583666][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.825505][T17678] hsr_slave_0: entered promiscuous mode
[  381.826438][T17879] xt_connbytes: Forcing CT accounting to be enabled
[  381.826454][T17879] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  381.832307][T17678] hsr_slave_1: entered promiscuous mode
[  381.832967][T17678] debugfs: 'hsr0' already exists in 'hsr'
[  381.832985][T17678] Cannot create hsr debugfs directory
[  381.862960][ T1159] IPVS: stop unused estimator thread 0...
[  382.083925][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  382.433121][ T4939] Bluetooth: hci0: command tx timeout
[  382.965399][T17936] Cannot find set identified by id 2 to match
[  383.087814][T17949] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2980'.
[  383.394688][T17956] syzkaller1: entered promiscuous mode
[  383.553956][T17678] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  383.581950][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  383.582843][T17678] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  383.587616][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  383.588488][T17678] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  383.625005][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  383.625729][T17678] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  383.631437][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  383.656772][T17974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'.
[  383.661416][T17978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'.
[  383.699396][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'.
[  383.944476][T17678] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.999020][T17678] 8021q: adding VLAN 0 to HW filter on device team0
[  384.017540][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.017741][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.041414][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.041576][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.329582][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'.
[  384.347310][T18015] netlink: 'syz.3.2988': attribute type 1 has an invalid length.
[  384.347329][T18015] netlink: 'syz.3.2988': attribute type 2 has an invalid length.
[  384.512552][ T4939] Bluetooth: hci0: command tx timeout
[  384.628601][T18024] batman_adv: batadv0: Adding interface: syzkaller0
[  384.628616][T18024] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.628703][T18024] batman_adv: batadv0: Interface activated: syzkaller0
[  384.887468][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2992'.
[  385.101923][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'.
[  385.215097][T18039] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2990'.
[  385.216323][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2990'.
[  385.352199][T18054] x_tables: duplicate underflow at hook 2
[  385.356855][T18054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2994'.
[  385.488331][T18025] batman_adv: batadv0: Interface deactivated: syzkaller0
[  385.552345][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  385.627399][T18025] batman_adv: batadv0: Removing interface: syzkaller0
[  385.768759][T18073] vlan5: entered promiscuous mode
[  385.768780][T18073] macvlan0: entered promiscuous mode
[  385.921195][T17678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.161160][T17678] veth0_vlan: entered promiscuous mode
[  386.201036][T17678] veth1_vlan: entered promiscuous mode
[  386.302854][T18099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.310996][T17678] veth0_macvtap: entered promiscuous mode
[  386.330488][T17678] veth1_macvtap: entered promiscuous mode
[  386.407603][T17678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.430256][T17678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.484863][ T3708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.484907][ T3708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.484976][ T3708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.485006][ T3708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.597630][T18119] netlink: 'syz.4.3006': attribute type 1 has an invalid length.
[  386.796679][T18123] bond10: (slave geneve0): making interface the new active one
[  386.799069][T18123] bond10: (slave geneve0): Enslaving as an active interface with an up link
[  386.839783][T18119] bond10: entered promiscuous mode
[  386.839812][T18119] geneve0: entered promiscuous mode
[  386.851904][T18119] 8021q: adding VLAN 0 to HW filter on device bond10
[  386.859248][ T3708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  386.859289][ T3708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  387.081586][ T3708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  387.124766][ T3708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  387.124830][   T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.124844][   T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.267734][   T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.267756][   T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.893827][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.907967][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.918341][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.920569][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.929484][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  388.083571][T18180] netlink: NAT attribute type 5 has unexpected length (0 != 2)
[  388.083608][T18180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.440334][ T5917] smbdirect: ib_dev[s`z1] removed
[  388.495507][T18199] __nla_validate_parse: 8 callbacks suppressed
[  388.495525][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'.
[  388.858010][T18202] tipc: Started in network mode
[  388.858040][T18202] tipc: Node identity 326fa3461358, cluster identity 4711
[  388.858182][T18202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.965807][T18212] bond15: (slave team0): Device is not bonding slave
[  388.965829][T18212] bond15: option active_slave: invalid value (team0)
[  388.991281][T18212] bond15 (unregistering): Released all slaves
[  389.115435][T18213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  389.160167][T18195] tipc: Disabling bearer <eth:syzkaller0>
[  389.275398][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'.
[  389.428587][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'.
[  389.512760][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'.
[  389.512783][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'.
[  389.591359][T18176] lo speed is unknown, defaulting to 1000
[  389.667149][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'.
[  389.951603][   T52] Bluetooth: hci4: command tx timeout
[  390.084551][T18268] syzkaller0: entered promiscuous mode
[  390.084572][T18268] syzkaller0: entered allmulticast mode
[  390.089463][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'.
[  390.102503][T18274] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.3033'.
[  390.388533][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'.
[  390.621108][T18176] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.621273][T18176] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.622286][T18176] bridge_slave_0: entered allmulticast mode
[  390.623864][T18176] bridge_slave_0: entered promiscuous mode
[  390.626853][T18176] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.627014][T18176] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.627142][T18176] bridge_slave_1: entered allmulticast mode
[  390.628714][T18176] bridge_slave_1: entered promiscuous mode
[  390.659712][T18176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.663924][T18176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.698789][T18176] team0: Port device team_slave_0 added
[  390.706494][T18176] team0: Port device team_slave_1 added
[  390.716306][T18298] Bluetooth: MGMT ver 1.23
[  390.765559][T18176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.765576][T18176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.765598][T18176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.766907][T18176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.766920][T18176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.766941][T18176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.886974][T18176] hsr_slave_0: entered promiscuous mode
[  390.887995][T18176] hsr_slave_1: entered promiscuous mode
[  390.888789][T18176] debugfs: 'hsr0' already exists in 'hsr'
[  390.888807][T18176] Cannot create hsr debugfs directory
[  390.949048][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  391.088299][T18310] bridge0: left promiscuous mode
[  391.115700][T18310] bridge_slave_0: left allmulticast mode
[  391.115724][T18310] bridge_slave_0: left promiscuous mode
[  391.115856][T18310] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.142567][T18313] bridge_slave_1: left allmulticast mode
[  391.142589][T18313] bridge_slave_1: left promiscuous mode
[  391.142769][T18313] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.154673][T18317] netlink: 'syz.1.3044': attribute type 1 has an invalid length.
[  391.235793][T18323] ip_tables: iptables: counters copy to user failed while replacing table
[  391.258217][T18320] bond1 (unregistering): Released all slaves
[  391.335595][T18326] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  391.357798][T18317] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  391.385834][T18176] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.468978][T18176] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.502604][T18329] syzkaller0: entered promiscuous mode
[  391.502622][T18329] syzkaller0: entered allmulticast mode
[  391.560029][T18176] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.656185][T18176] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.708736][T18331] netlink: 'syz.3.3049': attribute type 1 has an invalid length.
[  391.730760][T18331] bond15: entered promiscuous mode
[  391.730807][T18331] bond15: entered allmulticast mode
[  391.731163][T18331] 8021q: adding VLAN 0 to HW filter on device bond15
[  391.968765][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 30 seconds
[  391.972137][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 30 seconds
[  392.028492][T18176] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  392.032175][   T52] Bluetooth: hci4: command tx timeout
[  392.047799][T18176] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  392.048618][T18176] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  392.069643][T18176] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  392.070753][T18176] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  392.089422][T18176] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  392.090471][T18176] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  392.109396][T18176] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  392.239832][T18353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  392.437501][T18176] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.614336][T18176] 8021q: adding VLAN 0 to HW filter on device team0
[  392.620552][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.620670][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.662804][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.662888][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.738611][T18388] netlink: 'syz.1.3059': attribute type 1 has an invalid length.
[  392.893854][T18388] team0: Port device team_slave_1 removed
[  393.188679][T18411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  393.209601][T18409] Bluetooth: MGMT ver 1.23
[  393.209630][T18409] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  393.394748][T18176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.440178][T18423] vcan0: tx address claim with different name
[  393.455238][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.455536][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.455800][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.456128][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.456397][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.466634][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.466936][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.467217][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.467501][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.467795][T18424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.560526][T18176] veth0_vlan: entered promiscuous mode
[  393.600804][T18432] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  393.600827][T18432] nbd: illegal input index 393236
[  393.609129][T18176] veth1_vlan: entered promiscuous mode
[  393.647629][T18435] __nla_validate_parse: 6 callbacks suppressed
[  393.647647][T18435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3072'.
[  393.679808][T18435] xt_connbytes: Forcing CT accounting to be enabled
[  393.690353][T18176] veth0_macvtap: entered promiscuous mode
[  393.725167][T18176] veth1_macvtap: entered promiscuous mode
[  393.819356][T18176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.866336][T18176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.997648][ T5913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.997700][ T5913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.065327][ T3708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.065374][ T3708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.122193][   T52] Bluetooth: hci4: command tx timeout
[  394.209107][ T9940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.209129][ T9940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.310400][ T9939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.310422][ T9939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.886789][T18487] netlink: 'syz.1.3084': attribute type 1 has an invalid length.
[  394.886811][T18487] netlink: 'syz.1.3084': attribute type 2 has an invalid length.
[  394.886824][T18487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'.
[  395.305290][ T4939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  395.313289][ T4939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  395.328098][ T4939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  395.337007][ T4939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  395.339303][ T4939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  395.616815][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'.
[  395.631414][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3089'.
[  395.631483][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3089'.
[  396.017455][T18527] netlink: 'syz.4.3094': attribute type 1 has an invalid length.
[  396.017478][T18527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3094'.
[  396.038439][T18524] netlink: 'syz.0.3091': attribute type 32 has an invalid length.
[  396.040836][T18528] netlink: 'syz.0.3091': attribute type 32 has an invalid length.
[  396.118536][T18492] lo speed is unknown, defaulting to 1000
[  396.192271][   T52] Bluetooth: hci4: command tx timeout
[  396.541003][T18492] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.541140][T18492] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.541220][T18492] bridge_slave_0: entered allmulticast mode
[  396.542698][T18492] bridge_slave_0: entered promiscuous mode
[  396.545279][T18492] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.545432][T18492] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.545551][T18492] bridge_slave_1: entered allmulticast mode
[  396.547239][T18492] bridge_slave_1: entered promiscuous mode
[  396.582498][T18492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.585976][T18492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.634194][T18492] team0: Port device team_slave_0 added
[  396.636133][T18492] team0: Port device team_slave_1 added
[  396.659697][T18492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.659714][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.659735][T18492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.661076][T18492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.661089][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.661110][T18492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.717518][T18492] hsr_slave_0: entered promiscuous mode
[  396.727817][T18492] hsr_slave_1: entered promiscuous mode
[  396.728753][T18492] debugfs: 'hsr0' already exists in 'hsr'
[  396.728772][T18492] Cannot create hsr debugfs directory
[  396.904247][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'.
[  396.912464][T18550] syzkaller1: entered promiscuous mode
[  396.912485][T18550] syzkaller1: entered allmulticast mode
[  397.259103][T18492] team0: Port device netdevsim1 removed
[  397.293396][T18560] netlink: 'syz.4.3102': attribute type 1 has an invalid length.
[  397.294462][T18565] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.295360][T18565] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.340106][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'.
[  397.394765][   T52] Bluetooth: hci3: command tx timeout
[  397.756998][T18492] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  397.780690][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  397.791318][T18492] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  397.807646][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  397.821575][T18492] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  397.827996][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  397.830507][T18492] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  397.855977][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  397.890804][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'.
[  397.919724][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'.
[  397.919809][T18588] bridge_slave_1: left allmulticast mode
[  397.919829][T18588] bridge_slave_1: left promiscuous mode
[  397.920027][T18588] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.957774][T18588] bridge_slave_0: left allmulticast mode
[  397.957801][T18588] bridge_slave_0: left promiscuous mode
[  397.958035][T18588] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.122593][T18492] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.155984][T18492] 8021q: adding VLAN 0 to HW filter on device team0
[  398.170567][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.170650][ T9940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.206396][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.206499][ T9939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.332552][T18575] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  398.332573][T18575] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  398.544634][T18616] net_ratelimit: 120 callbacks suppressed
[  398.544655][T18616] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  398.578232][T18575] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  398.578252][T18575] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  399.002873][T18575] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  399.002893][T18575] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  399.103051][T18575] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  399.103075][T18575] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  399.347324][T18652] lo: entered promiscuous mode
[  399.347506][T18652] tunl0: entered promiscuous mode
[  399.347650][T18652] gre0: entered promiscuous mode
[  399.347765][T18652] 1ªX¹¦Dö»: entered promiscuous mode
[  399.347901][T18652] erspan0: entered promiscuous mode
[  399.348025][T18652] ip_vti0: entered promiscuous mode
[  399.348163][T18652] ip6_vti0: entered promiscuous mode
[  399.348267][T18652] sit0: entered promiscuous mode
[  399.348401][T18652] ip6tnl0: entered promiscuous mode
[  399.348507][T18652] ip6gre0: entered promiscuous mode
[  399.348608][T18652] syz_tun: entered promiscuous mode
[  399.348727][T18652] .`: entered promiscuous mode
[  399.349196][T18652] bond_slave_0: entered promiscuous mode
[  399.349334][T18652] bond_slave_1: entered promiscuous mode
[  399.349546][T18652] team0: entered promiscuous mode
[  399.349560][T18652] team_slave_1: entered promiscuous mode
[  399.349681][T18652] bridge3: entered promiscuous mode
[  399.350144][T18652] dummy0: entered promiscuous mode
[  399.350225][T18652] nlmon0: entered promiscuous mode
[  399.350343][T18652] batadv0: entered promiscuous mode
[  399.350445][T18652] veth0: entered promiscuous mode
[  399.350549][T18652] veth1: entered promiscuous mode
[  399.350661][T18652] wg0: entered promiscuous mode
[  399.366057][T18661] __nla_validate_parse: 2 callbacks suppressed
[  399.366074][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[  399.483747][T18652] wg1: entered promiscuous mode
[  399.483886][T18652] wg2: entered promiscuous mode
[  399.484047][T18652] veth0_to_bridge: entered promiscuous mode
[  400.104250][T18652] bridge_slave_0: entered promiscuous mode
[  400.105349][T18652] veth1_to_bridge: entered promiscuous mode
[  400.105517][T18652] bridge_slave_1: entered promiscuous mode
[  400.105665][T18652] veth0_to_bond: entered promiscuous mode
[  400.106768][T18652] veth1_to_bond: entered promiscuous mode
[  400.107011][T18652] veth1_to_team: entered promiscuous mode
[  400.107240][T18652] veth0_to_batadv: entered promiscuous mode
[  400.107372][T18652] batadv_slave_0: entered promiscuous mode
[  400.107512][T18652] xfrm0: entered promiscuous mode
[  400.107640][T18652] veth0_to_hsr: entered promiscuous mode
[  400.107912][T18652] veth1_to_hsr: entered promiscuous mode
[  400.108177][T18652] hsr0: entered promiscuous mode
[  400.108319][T18652] veth1_virt_wifi: entered promiscuous mode
[  400.108453][T18652] veth0_virt_wifi: entered promiscuous mode
[  400.108819][T18652] vlan0: entered promiscuous mode
[  400.109095][T18652] macvlan0: entered promiscuous mode
[  400.109225][T18652] macvlan1: entered promiscuous mode
[  400.109360][T18652] ipvlan0: entered promiscuous mode
[  400.109492][T18652] ipvlan1: entered promiscuous mode
[  400.109892][T18652] macvtap0: entered promiscuous mode
[  400.110055][T18652] macsec0: entered promiscuous mode
[  400.110160][T18652] geneve1: entered promiscuous mode
[  400.110300][T18652] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  400.110436][T18652] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  400.110571][T18652] syztnl1: entered promiscuous mode
[  400.110679][T18652] bridge1: entered promiscuous mode
[  400.110796][T18652] erspan1: entered promiscuous mode
[  400.111027][T18652] veth2: entered promiscuous mode
[  400.111163][T18652] veth3: entered promiscuous mode
[  400.232687][T18652] : entered promiscuous mode
[  400.232808][T18652] bond1: entered promiscuous mode
[  400.232821][T18652] batadv1: entered promiscuous mode
[  400.233075][T18652] dummy0.2: entered promiscuous mode
[  400.233396][T18652] veth4: entered promiscuous mode
[  400.233531][T18652] veth5: entered promiscuous mode
[  400.233798][T18652] bridge2: entered promiscuous mode
[  400.234036][T18652] bond0: entered promiscuous mode
[  400.234048][T18652] bond2: entered promiscuous mode
[  400.235539][T18652] dummy1: entered promiscuous mode
[  400.235686][T18652] bridge4: entered promiscuous mode
[  400.235914][T18652] vlan2: entered promiscuous mode
[  400.236118][T18652] syztnl0: entered promiscuous mode
[  400.236223][T18652] ip6tnl1: entered promiscuous mode
[  400.236323][T18652] bond3: entered promiscuous mode
[  400.236435][T18652] bond4: entered promiscuous mode
[  400.236447][T18652] xfrm1: entered promiscuous mode
[  400.236718][T18652] bridge5: entered promiscuous mode
[  400.239317][T18652] syztnl2: entered promiscuous mode
[  400.239433][T18652] bridge6: entered promiscuous mode
[  400.239543][T18652] bond5: entered promiscuous mode
[  400.239555][T18652] erspan2: entered promiscuous mode
[  400.239854][T18652] bond6: entered promiscuous mode
[  400.239957][T18652] bridge7: entered promiscuous mode
[  400.240064][T18652] veth6: entered promiscuous mode
[  400.240203][T18652] veth7: entered promiscuous mode
[  400.240372][T18652] veth1_macvtap.3: entered promiscuous mode
[  400.240640][T18652] vlan1: entered promiscuous mode
[  400.245419][T18652] bridge8: entered promiscuous mode
[  400.245535][T18652] ip6tnl2: entered promiscuous mode
[  400.245637][T18652] bond7: entered promiscuous mode
[  400.245889][T18652] gre1: entered promiscuous mode
[  400.245997][T18652] netdevsim netdevsim4 eth0: entered promiscuous mode
[  400.246116][T18652] netdevsim netdevsim4 eth1: entered promiscuous mode
[  400.246226][T18652] netdevsim netdevsim4 eth2: entered promiscuous mode
[  400.246416][T18652] netdevsim netdevsim4 eth3: entered promiscuous mode
[  400.246521][T18652] ip6erspan0: entered promiscuous mode
[  400.246629][T18652] vlan1.0: entered promiscuous mode
[  400.246812][T18652] bridge9: entered promiscuous mode
[  400.246921][T18652] gre2: entered promiscuous mode
[  400.247089][T18652] bareudp0: entered promiscuous mode
[  400.247224][T18652] bond8: entered promiscuous mode
[  400.247556][T18652] ip6tnl3: entered promiscuous mode
[  400.249247][T18652] bond9: entered promiscuous mode
[  400.301262][T18674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3123'.
[  400.301434][T18652] gtp0: entered promiscuous mode
[  400.306641][T18652] gre3: entered promiscuous mode
[  400.445825][ T9940] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  400.575215][ T9940] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  400.576004][ T9940] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  400.576042][ T9940] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  400.690278][T18676] syzkaller1: entered promiscuous mode
[  400.690300][T18676] syzkaller1: entered allmulticast mode
[  400.902106][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  400.965485][T18492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.144021][T18492] veth0_vlan: entered promiscuous mode
[  401.149173][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'.
[  401.178428][T18492] veth1_vlan: entered promiscuous mode
[  401.369340][T18492] veth0_macvtap: entered promiscuous mode
[  401.390800][T18492] veth1_macvtap: entered promiscuous mode
[  401.493082][T18492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.494657][T18727] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3133'.
[  401.536413][T18492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.724990][ T9940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.725038][ T9940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.725071][ T9940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.725103][ T9940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.974771][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.974793][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.001854][T18744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3137'.
[  402.077109][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.077130][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.192240][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  402.546614][T18762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'.
[  402.671190][T18764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3143'.
[  402.706871][T18775] xt_IDLETIMER: timeout value is too big
[  402.714979][T18764] x_tables: duplicate underflow at hook 2
[  402.908079][T18779] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  402.923514][T18779] netlink: 'syz.2.3145': attribute type 1 has an invalid length.
[  402.925861][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3145'.
[  403.304302][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  403.323307][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  403.326668][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  403.329093][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  403.329750][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  403.717252][T18779] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.735769][T18811] Cannot find set identified by id 0 to match
[  403.748398][T18779] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.890255][ T5616] .`: (slave syz_tun): Releasing backup interface
[  404.219073][T18791] lo speed is unknown, defaulting to 1000
[  404.266188][T18820] netlink: 'syz.1.3155': attribute type 1 has an invalid length.
[  404.266211][T18820] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3155'.
[  404.911352][ T9940] bond4 (unregistering): (slave xfrm1): Releasing backup interface
[  404.958742][ T9940] bond5 (unregistering): (slave erspan2): Releasing active interface
[  405.079339][ T9940] bond10 (unregistering): (slave geneve0): Releasing active interface
[  405.109518][ T9940] team0: Port device bridge3 removed
[  405.147811][ T9940] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.149176][ T9940] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.150477][ T9940] .` (unregistering): (slave team0): Releasing backup interface
[  405.176557][ T9940] .` (unregistering): Released all slaves
[  405.181288][ T9940] bond1 (unregistering): (slave veth5): Releasing active interface
[  405.199070][ T9940] bond1 (unregistering): (slave batadv1): Releasing active interface
[  405.200844][ T9940] bond1 (unregistering): Released all slaves
[  405.217843][ T9940] bond0 (unregistering): (slave bond2): Releasing backup interface
[  405.218390][ T9940] bond0 (unregistering): Released all slaves
[  405.230977][ T9940] bond2 (unregistering): Released all slaves
[  405.244071][ T9940] bond3 (unregistering): Released all slaves
[  405.251165][ T9940] bond4 (unregistering): Released all slaves
[  405.270233][ T9940] bond5 (unregistering): Released all slaves
[  405.283244][ T9940] bond6 (unregistering): Released all slaves
[  405.290921][ T9940] bond7 (unregistering): (slave lo): Releasing backup interface
[  405.291293][ T9940] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  405.305007][ T9940] bond7 (unregistering): Released all slaves
[  405.317745][ T9940] bond8 (unregistering): Released all slaves
[  405.331149][ T9940] bond9 (unregistering): Released all slaves
[  405.345146][ T9940] bond10 (unregistering): Released all slaves
[  405.395598][ T4939] Bluetooth: hci2: command tx timeout
[  405.647488][ T9940] tipc: Left network mode
[  405.687102][ T9940] IPVS: stopping master sync thread 13734 ...
[  405.755680][T18791] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.755774][T18791] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.755905][T18791] bridge_slave_0: entered allmulticast mode
[  405.756879][T18791] bridge_slave_0: entered promiscuous mode
[  405.783267][T18791] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.784553][T18791] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.784693][T18791] bridge_slave_1: entered allmulticast mode
[  405.788034][T18791] bridge_slave_1: entered promiscuous mode
[  405.847800][T18791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.849901][T18791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.880877][T18791] team0: Port device team_slave_0 added
[  405.884745][T18791] team0: Port device team_slave_1 added
[  405.928655][T18791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.928673][T18791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.928708][T18791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.930690][T18791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.930703][T18791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.930724][T18791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.079248][T18791] hsr_slave_0: entered promiscuous mode
[  406.080468][T18791] hsr_slave_1: entered promiscuous mode
[  406.081604][T18791] debugfs: 'hsr0' already exists in 'hsr'
[  406.081622][T18791] Cannot create hsr debugfs directory
[  406.204241][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.204830][ T9940] batman_adv: batadv0: Removing interface: veth0
[  406.369635][ T9940] team0 (unregistering): Port device team_slave_1 removed
[  406.491946][   T96] smc: removing ib device syz0
[  406.545014][   T96] smbdirect: ib_dev[syz0] removed
[  406.572696][T18800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.010762][T18863] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3163'.
[  407.472474][ T4939] Bluetooth: hci2: command tx timeout
[  407.697818][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'.
[  408.084728][T18909] ip_tables: iptables: counters copy to user failed while replacing table
[  408.148693][T18899] 8021q: adding VLAN 0 to HW filter on device bond1
[  408.174674][T18901] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  408.182413][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  408.456150][T18916] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3176'.
[  408.529135][ T9939] IPVS: starting estimator thread 0...
[  408.600046][T18935] nbd2: detected capacity change from 0 to 63
[  408.609981][ T4939] block nbd2: Receive control failed (result -32)
[  408.615262][ T2016] block nbd2: Dead connection, failed to find a fallback
[  408.615283][ T2016] block nbd2: shutting down sockets
[  408.615402][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  408.615485][ T2016] Buffer I/O error on dev nbd2, logical block 0, async page read
[  408.615541][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read
[  408.615554][ T2016] Buffer I/O error on dev nbd2, logical block 2, async page read
[  408.615568][ T2016] Buffer I/O error on dev nbd2, logical block 3, async page read
[  408.620642][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  408.620671][ T2016] Buffer I/O error on dev nbd2, logical block 0, async page read
[  408.620686][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read
[  408.620699][ T2016] Buffer I/O error on dev nbd2, logical block 2, async page read
[  408.620712][ T2016] Buffer I/O error on dev nbd2, logical block 3, async page read
[  408.620837][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.620857][ T2016] Buffer I/O error on dev nbd2, logical block 0, async page read
[  408.620942][ T2016] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.620963][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read
[  408.621054][ T2016] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.621147][ T2016] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.621259][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.621348][ T2016] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.621786][ T2016] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.621885][ T2016] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  408.632370][T18579] ldm_validate_partition_table(): Disk read failed.
[  408.632973][T18579] Dev nbd2: unable to read RDB block 0
[  408.635349][T18579]  nbd2: unable to read partition table
[  408.651641][T18933] IPVS: using max 32 ests per chain, 76800 per kthread
[  408.749567][T18579] ldm_validate_partition_table(): Disk read failed.
[  408.775710][T18579] Dev nbd2: unable to read RDB block 0
[  408.781190][T18579]  nbd2: unable to read partition table
[  408.793595][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'.
[  409.350657][T18958] Cannot find set identified by id 0 to match
[  409.552644][ T4939] Bluetooth: hci2: command tx timeout
[  409.929815][T18980] nbd: must specify at least one socket
[  410.814651][T18791] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  410.834171][T18791] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  410.839563][T18997] tipc: Started in network mode
[  410.839590][T18997] tipc: Node identity 46fb3b52fd3a, cluster identity 4711
[  410.839753][T18997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.853642][T18791] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  410.895761][T18791] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  410.905528][T18791] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  410.988151][T18791] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  410.996254][T19005] sctp: [Deprecated]: syz.1.3193 (pid 19005) Use of int in max_burst socket option.
[  410.996254][T19005] Use struct sctp_assoc_value instead
[  411.009869][T18791] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  411.036102][T18791] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  411.036559][T18995] syzkaller0: entered promiscuous mode
[  411.036578][T18995] syzkaller0: entered allmulticast mode
[  411.107648][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3193'.
[  411.256250][T18997] tipc: Resetting bearer <eth:syzkaller0>
[  411.274933][T19009] syzkaller0: entered promiscuous mode
[  411.274955][T19009] syzkaller0: entered allmulticast mode
[  411.632828][ T4939] Bluetooth: hci2: command tx timeout
[  411.681972][T18994] tipc: Resetting bearer <eth:syzkaller0>
[  411.733445][T18994] tipc: Disabling bearer <eth:syzkaller0>
[  411.823031][T19009] veth0_to_bridge: entered promiscuous mode
[  411.823222][T19009] macvtap1: entered allmulticast mode
[  411.823236][T19009] veth0_to_bridge: entered allmulticast mode
[  411.867569][T19009] veth0_to_bridge: left allmulticast mode
[  411.867589][T19009] veth0_to_bridge: left promiscuous mode
[  412.126634][ T9940] IPVS: stop unused estimator thread 0...
[  412.364366][T18791] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.397736][T18791] 8021q: adding VLAN 0 to HW filter on device team0
[  412.420217][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.420324][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.458328][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.458448][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.468790][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'.
[  412.649763][T19084] netlink: 'syz.3.3205': attribute type 1 has an invalid length.
[  413.450326][T19124] batadv_slave_1: entered promiscuous mode
[  413.784793][T18791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.055317][T19160] netlink: 'syz.2.3220': attribute type 1 has an invalid length.
[  414.071357][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3219'.
[  414.134617][T19160] bond1: entered promiscuous mode
[  414.155291][T19160] 8021q: adding VLAN 0 to HW filter on device bond1
[  414.247991][T19160] 8021q: adding VLAN 0 to HW filter on device bond1
[  414.255791][T19160] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  414.255811][T19160] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  414.257412][T19164] netlink: 'syz.2.3220': attribute type 1 has an invalid length.
[  414.277897][T19160] bond1: (slave ip6gre1): making interface the new active one
[  414.277916][T19160] ip6gre1: entered promiscuous mode
[  414.286051][T19160] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  414.609577][T18791] veth0_vlan: entered promiscuous mode
[  414.636482][T18791] veth1_vlan: entered promiscuous mode
[  414.683351][T18791] veth0_macvtap: entered promiscuous mode
[  414.690363][T18791] veth1_macvtap: entered promiscuous mode
[  414.734950][T18791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.739152][T18791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.836565][ T5920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.838452][   T96] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.874735][ T5920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.874781][ T5920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.089090][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.089111][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.197020][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.197040][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.263147][T19182] netlink: 'syz.2.3223': attribute type 1 has an invalid length.
[  415.360426][T19182] bond2: entered promiscuous mode
[  415.364344][T19182] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.378207][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  415.415079][T19185] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.416083][T19185] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  415.416103][T19185] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  415.497161][T19185] bond2: (slave wireguard0): making interface the new active one
[  415.497185][T19185] wireguard0: entered promiscuous mode
[  415.516486][T19185] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  415.617168][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  415.617189][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'.
[  415.647246][T19204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3224'.
[  415.662956][T19195] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.724124][T19195] netlink: 'syz.1.3225': attribute type 2 has an invalid length.
[  415.724146][T19195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3225'.
[  415.734565][T19203] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.749371][T19203] bond2: (slave bond0): making interface the new active one
[  415.750972][T19203] bond2: (slave bond0): Enslaving as an active interface with an up link
[  415.751902][T19192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3224'.
[  415.825970][T19195] : entered promiscuous mode
[  416.011934][T19221] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  416.098343][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3231'.
[  416.099568][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'.
[  416.287591][T19238] syzkaller0: entered promiscuous mode
[  416.287613][T19238] syzkaller0: entered allmulticast mode
[  416.301051][T19238] 0: reclassify loop, rule prio 0, protocol 800
[  416.309584][T19238] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  416.453384][T19242] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[  416.453412][T19242] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[  416.456732][T19242] bond1: entered allmulticast mode
[  416.462960][T19242] 8021q: adding VLAN 0 to HW filter on device bond1
[  416.515147][T19245] netlink: 'syz.2.3237': attribute type 10 has an invalid length.
[  416.525721][T19245] team0: Port device dummy0 added
[  416.590410][T19251] Bluetooth: hci0: too big key_count value 38657
[  416.763095][T19257] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  416.940735][T19266] batman_adv: batadv0: Adding interface: syzkaller0
[  416.940780][T19266] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.940807][T19266] batman_adv: batadv0: Interface activated: syzkaller0
[  417.065346][T19265] batman_adv: batadv0: Interface deactivated: syzkaller0
[  417.090598][T19265] batman_adv: batadv0: Removing interface: syzkaller0
[  417.305393][T19282] netlink: 'syz.4.3247': attribute type 10 has an invalid length.
[  417.306135][T19282] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.306727][T19282] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.319412][T19282] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.319523][T19282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.319806][T19282] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.319923][T19282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.349777][T19282] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  417.496613][T19303] __nla_validate_parse: 3 callbacks suppressed
[  417.496635][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'.
[  417.787930][T19316] netlink: 'syz.1.3256': attribute type 1 has an invalid length.
[  417.787952][T19316] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3256'.
[  417.961997][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'.
[  417.963865][T19320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3257'.
[  417.995829][T19320] ip6gre1: entered allmulticast mode
[  418.000211][   T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  418.505445][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'.
[  418.505469][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3260'.
[  418.505492][T19331] netlink: 'syz.2.3260': attribute type 15 has an invalid length.
[  418.516931][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'.
[  418.516951][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3260'.
[  418.516974][T19331] netlink: 'syz.2.3260': attribute type 15 has an invalid length.
[  418.531632][ T9940] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  418.531673][ T9940] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  418.531704][ T9940] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  418.531734][ T9940] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  418.643342][T19335] syzkaller0: entered promiscuous mode
[  418.643365][T19335] syzkaller0: entered allmulticast mode
[  418.846820][T19344] vti0: entered promiscuous mode
[  418.874404][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3266'.
[  418.890801][T19351] lo: entered promiscuous mode
[  418.890821][T19351] lo: entered allmulticast mode
[  418.903387][T19351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  419.185200][T19373] netlink: 'syz.4.3269': attribute type 1 has an invalid length.
[  419.212445][T19376] ieee802154 phy1 wpan1: encryption failed: -22
[  419.273313][T19369] batman_adv: batadv0: Adding interface: syzkaller0
[  419.273331][T19369] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.273359][T19369] batman_adv: batadv0: Interface activated: syzkaller0
[  419.276580][T19373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'.
[  419.327198][T19367] batman_adv: batadv0: Interface deactivated: syzkaller0
[  419.405869][T19367] batman_adv: batadv0: Removing interface: syzkaller0
[  419.920093][T19363] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  420.059580][T19412] sctp: [Deprecated]: syz.1.3278 (pid 19412) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.059580][T19412] Use struct sctp_sack_info instead
[  420.119167][T19409] openvswitch: netlink: Missing key (keys=50, expected=80)
[  420.387966][T19434] netlink: zone id is out of range
[  420.387983][T19434] netlink: zone id is out of range
[  420.387991][T19434] netlink: zone id is out of range
[  420.387998][T19434] netlink: zone id is out of range
[  420.388006][T19434] netlink: zone id is out of range
[  420.816597][T19456] 8021q: adding VLAN 0 to HW filter on device bond3
[  420.841921][T19463] netlink: 'syz.2.3293': attribute type 21 has an invalid length.
[  420.913199][T19461] tc_dump_action: action bad kind
[  421.785203][T19507] net_ratelimit: 1327 callbacks suppressed
[  421.785221][T19507] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  421.944612][T19514] bridge2: entered allmulticast mode
[  421.991152][T19505] x_tables: duplicate underflow at hook 2
[  422.010938][T19511] syzkaller0: entered promiscuous mode
[  422.010963][T19511] syzkaller0: entered allmulticast mode
[  422.032395][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  422.039243][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 60 seconds
[  422.039276][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 60 seconds
[  422.147900][T19485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.598201][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  425.174116][ T4988] udevd[4988]: worker [16801] /devices/virtual/block/nbd1 is taking a long time
[  426.770370][T19563] __nla_validate_parse: 8 callbacks suppressed
[  426.770390][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  426.803230][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3315'.
[  426.887256][T19570] ip_tables: iptables: counters copy to user failed while replacing table
[  427.053214][T19578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3317'.
[  427.054907][T19578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3317'.
[  427.055162][T19579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3317'.
[  427.268649][T19591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3320'.
[  427.297101][T19582] syzkaller0: entered promiscuous mode
[  427.297124][T19582] syzkaller0: entered allmulticast mode
[  427.679162][T19611] netlink: 'syz.4.3323': attribute type 61 has an invalid length.
[  429.696320][T19618] ip_tables: iptables: counters copy to user failed while replacing table
[  429.820972][T19628] xt_hashlimit: size too large, truncated to 1048576
[  429.876647][T19631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.889016][T19631] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.3328'.
[  430.044997][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'.
[  430.094960][T19628] xt_hashlimit: size too large, truncated to 1048576
[  430.206888][T19645] Bluetooth: MGMT ver 1.23
[  430.351727][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  430.401633][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'.
[  430.414668][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'.
[  430.453833][T19628] xt_hashlimit: size too large, truncated to 1048576
[  430.612053][T19628] xt_hashlimit: size too large, truncated to 1048576
[  432.911419][T19655] __nla_validate_parse: 1 callbacks suppressed
[  432.912815][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'.
[  432.912847][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'.
[  432.912861][T19655] netlink: 'syz.2.3333': attribute type 4 has an invalid length.
[  432.952444][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'.
[  433.112777][T19670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3336'.
[  433.116881][T19671] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3336'.
[  433.144298][T19673] netlink: 'syz.0.3339': attribute type 3 has an invalid length.
[  433.145672][T19670] syzkaller1: entered promiscuous mode
[  433.145688][T19670] syzkaller1: entered allmulticast mode
[  433.181102][T19678] netlink: 'syz.3.3338': attribute type 1 has an invalid length.
[  433.329817][T19678] veth3: entered allmulticast mode
[  433.389060][T19689] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  433.488909][T19699] geneve1: entered promiscuous mode
[  433.506296][T19699] siw: device registration error -23
[  433.511775][ T9940] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.512797][   T96] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.512830][   T96] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.512859][   T96] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.566480][ T4939] block nbd3: Receive control failed (result -32)
[  433.567077][   T52] block nbd3: Receive control failed (result -32)
[  433.585335][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3344'.
[  433.742443][T19716] openvswitch: netlink: EtherType 500 is less than min 600
[  433.866917][T19711] bond1: option ad_user_port_key: invalid value (1088)
[  433.866940][T19711] bond1: option ad_user_port_key: allowed values 0 - 1023
[  433.893499][T19711] bond1 (unregistering): Released all slaves
[  434.104197][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3353'.
[  434.112056][T19733] netlink: zone id is out of range
[  434.112069][T19733] netlink: zone id is out of range
[  434.112076][T19733] netlink: zone id is out of range
[  434.112083][T19733] netlink: zone id is out of range
[  434.112090][T19733] netlink: zone id is out of range
[  434.112096][T19733] netlink: zone id is out of range
[  434.112107][T19733] netlink: zone id is out of range
[  434.112113][T19733] netlink: zone id is out of range
[  434.157175][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'.
[  434.487099][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'.
[  434.506761][T19742] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  434.541885][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'.
[  434.585280][T19742] 8021q: adding VLAN 0 to HW filter on device bond3
[  434.622934][T19745] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  434.696231][T19742] bridge3: entered promiscuous mode
[  434.703915][T19742] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  434.799891][T19748] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.800005][T19748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.889512][T19748] geneve1: left promiscuous mode
[  435.310165][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.310269][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.325317][ T1005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.381566][ T1005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.381610][ T1005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.381639][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.622468][T19807] netlink: 'syz.2.3368': attribute type 3 has an invalid length.
[  435.693363][ T1005] IPVS: starting estimator thread 0...
[  435.746149][T19819] syzkaller0: entered promiscuous mode
[  435.746164][T19819] syzkaller0: entered allmulticast mode
[  435.793129][T19815] IPVS: using max 30 ests per chain, 72000 per kthread
[  435.810256][T19768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.906959][T19817] netlink: 'syz.0.3371': attribute type 2 has an invalid length.
[  436.111903][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  436.263523][T19845] 0·: renamed from hsr0 (while UP)
[  436.277130][T19845] 0·: entered allmulticast mode
[  436.277152][T19845] hsr_slave_0: entered allmulticast mode
[  436.277167][T19845] hsr_slave_1: entered allmulticast mode
[  436.455042][T19850] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003
[  436.693186][ T1005] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  436.744279][T19856] netlink: 'syz.2.3379': attribute type 9 has an invalid length.
[  439.681227][T19872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.787583][T19950] syz_tun: entered promiscuous mode
[  439.799476][T19950] macsec1: entered allmulticast mode
[  439.799496][T19950] syz_tun: entered allmulticast mode
[  439.841407][T19950] syz_tun: left allmulticast mode
[  439.841927][T19950] syz_tun: left promiscuous mode
[  439.923894][T19955] __nla_validate_parse: 5 callbacks suppressed
[  439.923913][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'.
[  439.923928][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'.
[  439.972211][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  440.074957][T19963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3396'.
[  440.166006][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'.
[  440.313095][ T9940] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  440.313138][ T9940] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  440.313168][ T9940] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  440.313198][ T9940] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  440.476501][T19984] net_ratelimit: 1709 callbacks suppressed
[  440.476520][T19984] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  440.523928][T19987] netlink: Conntrack attr has 8 unknown bytes
[  440.523958][T19987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.694553][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3404'.
[  440.766561][T19998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3407'.
[  440.920265][T20004] syz_tun: entered allmulticast mode
[  440.943639][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'.
[  441.057232][T20009] syz_tun: entered promiscuous mode
[  441.057449][T20009] vlan2: entered promiscuous mode
[  441.352064][T20023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3412'.
[  441.352089][T20023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3412'.
[  441.422684][T20000] syz_tun: left allmulticast mode
[  441.566585][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'.
[  442.071709][T20047] bond3: option lacp_active: invalid value (5)
[  442.075038][T20047] bond3 (unregistering): Released all slaves
[  442.152649][T20054] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  442.385227][T20068] nbd: must specify a device to reconfigure
[  442.861047][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  442.861074][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  442.861090][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  442.861107][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  442.861122][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  442.861138][T20087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  443.514497][T20079] tipc: Enabled bearer <eth:vlan1>, priority 0
[  443.515302][T20083] tipc: Enabling of bearer <eth:vlan1> rejected, already enabled
[  443.785883][T20100] bond4: option all_slaves_active: invalid value (255)
[  443.812456][T20100] bond4 (unregistering): Released all slaves
[  444.631535][  T191] tipc: Node number set to 557294406
[  444.677507][T20159] netlink: 'syz.0.3441': attribute type 1 has an invalid length.
[  444.725723][T20159] 8021q: adding VLAN 0 to HW filter on device bond1
[  444.753637][T20158] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  446.294888][T20197] __nla_validate_parse: 11 callbacks suppressed
[  446.294901][T20197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'.
[  446.294910][T20197] net_ratelimit: 27 callbacks suppressed
[  446.294916][T20197] openvswitch: netlink: Flow key attr not present in new flow.
[  446.991870][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  447.708790][T20166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.931130][   T31] kauditd_printk_skb: 26 callbacks suppressed
[  447.931150][   T31] audit: type=1804 audit(1791744176.058:43): pid=20204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3454" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=472 res=1 errno=0
[  447.931193][   T31] audit: type=1800 audit(1791744176.058:44): pid=20204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3454" name="cgroup.controllers" dev="tmpfs" ino=472 res=0 errno=0
[  447.934188][T20206] IPv6: NLM_F_CREATE should be specified when creating new route
[  447.943923][T20206] syzkaller1: entered promiscuous mode
[  447.943944][T20206] syzkaller1: entered allmulticast mode
[  447.948559][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'.
[  448.016609][   T31] audit: type=1804 audit(1791744176.158:45): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3454" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=472 res=1 errno=0
[  448.095466][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'.
[  448.172108][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'.
[  448.215732][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'.
[  448.268850][T20222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3453'.
[  448.853846][T20218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.854612][T20242] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3459'.
[  449.032707][T20218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.245098][T20218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.273848][T20260] netlink: 'syz.2.3463': attribute type 12 has an invalid length.
[  449.273867][T20260] netlink: 'syz.2.3463': attribute type 29 has an invalid length.
[  449.273884][T20260] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3463'.
[  449.275124][T20258] syzkaller0: entered promiscuous mode
[  449.275169][T20258] syzkaller0: entered allmulticast mode
[  449.408146][T20218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.517918][T20268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3465'.
[  449.590584][T20272] netlink: 'syz.4.3467': attribute type 1 has an invalid length.
[  449.621286][T20272] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.654872][T20272] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  449.741119][T20281] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3469'.
[  449.762457][ T1159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.823865][ T9939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.823908][ T9939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.823938][ T9939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.870743][T20286] syzkaller0: entered promiscuous mode
[  450.001690][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.044866][T20299] veth0_to_bridge: entered promiscuous mode
[  450.045136][T20299] macvtap1: entered allmulticast mode
[  450.045148][T20299] veth0_to_bridge: entered allmulticast mode
[  450.067825][T20299] veth0_to_bridge: left allmulticast mode
[  450.067851][T20299] veth0_to_bridge: left promiscuous mode
[  450.112415][T20302] netlink: 'syz.2.3474': attribute type 5 has an invalid length.
[  450.117296][T20297] syzkaller0: entered promiscuous mode
[  450.117348][T20297] syzkaller0: entered allmulticast mode
[  450.339009][T20311] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.343444][T20311] team0: Port device bond2 added
[  450.908951][T20336] sctp: [Deprecated]: syz.2.3481 (pid 20336) Use of int in max_burst socket option deprecated.
[  450.908951][T20336] Use struct sctp_assoc_value instead
[  450.911038][T20334] ipvlan1: entered promiscuous mode
[  450.911056][T20334] ipvlan1: entered allmulticast mode
[  450.911068][T20334] veth0_vlan: entered allmulticast mode
[  451.368606][T20360] __nla_validate_parse: 5 callbacks suppressed
[  451.368624][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'.
[  451.369756][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'.
[  451.592341][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3491'.
[  451.642798][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'.
[  451.642819][T20371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'.
[  451.677394][T20371] veth3: entered allmulticast mode
[  451.699567][T20371] bond4: (slave veth3): Enslaving as an active interface with an up link
[  451.742086][T20379] syzkaller0: entered promiscuous mode
[  451.742107][T20379] syzkaller0: entered allmulticast mode
[  451.754125][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'.
[  451.838669][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'.
[  451.840379][T20390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'.
[  451.942765][T20384] netlink: 'syz.0.3496': attribute type 1 has an invalid length.
[  451.991175][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'.
[  451.991207][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'.
[  452.020334][T20399] netlink: 'syz.2.3500': attribute type 2 has an invalid length.
[  452.038300][T20385] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  452.067589][T20385] bond3 (unregistering): Released all slaves
[  452.118566][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 90 seconds
[  452.118607][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 90 seconds
[  452.145923][T20390] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  452.150379][T20390] bond3 (unregistering): Released all slaves
[  452.383845][T20421] syzkaller0: left promiscuous mode
[  452.385535][T20421] syzkaller0: left allmulticast mode
[  452.402255][   T96] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.402296][   T96] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.402324][   T96] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.402353][   T96] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.938945][T20432] Bluetooth: ISO socket layer initialized
[  453.067802][T20438] IPVS: sh: FWM 3 0x00000003 - no destination available
[  453.387882][T20462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  454.181293][T20502] IPVS: sh: FWM 3 0x00000003 - no destination available
[  454.709320][ T5917] IPVS: starting estimator thread 0...
[  454.851800][T20523] IPVS: using max 32 ests per chain, 76800 per kthread
[  455.721996][T20561] netlink: 'syz.3.3531': attribute type 4 has an invalid length.
[  455.787939][T20561] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  455.828355][ T9940] IPVS: starting estimator thread 0...
[  455.828947][T20571] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  455.911883][T20572] IPVS: using max 27 ests per chain, 64800 per kthread
[  456.151074][T20591] netlink: 'syz.2.3538': attribute type 11 has an invalid length.
[  456.151096][T20591] netlink: 'syz.2.3538': attribute type 11 has an invalid length.
[  456.196307][T20591] ovs-dp0: entered promiscuous mode
[  456.390556][T20599] __nla_validate_parse: 45 callbacks suppressed
[  456.390576][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3540'.
[  456.390592][T20599] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3540'.
[  456.390608][T20599] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3540'.
[  456.390621][T20599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3540'.
[  456.797911][T20616] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  456.943982][T20626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3547'.
[  457.302735][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  457.328536][T20642] ip6t_REJECT: ECHOREPLY is not supported
[  457.376382][T20645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3554'.
[  457.542777][T20653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3556'.
[  457.544846][T20653] netlink: 'syz.2.3556': attribute type 7 has an invalid length.
[  457.544863][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'.
[  457.599348][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'.
[  457.630679][T20653] netlink: 'syz.2.3556': attribute type 7 has an invalid length.
[  457.637327][T20663] netlink: 'syz.2.3556': attribute type 7 has an invalid length.
[  457.639582][T20663] netlink: 'syz.2.3556': attribute type 7 has an invalid length.
[  457.652719][ T9940] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  457.652761][ T9940] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  457.652792][ T9940] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  457.652820][ T9940] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  457.994498][T20668] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.995372][T20668] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.352266][T20668] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.562264][   T96] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  458.562299][   T96] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  458.562322][   T96] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.562355][   T96] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  458.562377][   T96] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  458.562399][   T96] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.562429][   T96] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  458.562451][   T96] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  458.562473][   T96] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.562502][   T96] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  458.562524][   T96] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  458.562546][   T96] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.876143][T20717] netlink: 'syz.1.3568': attribute type 5 has an invalid length.
[  458.985673][ T9940] tipc: Subscription rejected, illegal request
[  458.995568][T20724] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  459.496256][T20733] netlink: Invalid conntrack helper
[  459.496288][T20733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.968746][T20737] syzkaller0: entered promiscuous mode
[  459.968768][T20737] syzkaller0: entered allmulticast mode
[  459.977546][ T9940] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.979449][ T1159] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.979487][ T1159] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.979520][ T1159] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  460.550993][T20770] syzkaller0: left promiscuous mode
[  460.551015][T20770] syzkaller0: left allmulticast mode
[  460.645745][T20778] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  460.655955][   T96] IPVS: starting estimator thread 0...
[  460.742136][T20779] IPVS: using max 33 ests per chain, 79200 per kthread
[  460.743744][T20787] netlink: 'syz.3.3590': attribute type 4 has an invalid length.
[  460.812386][T20792] xt_nfacct: accounting object `' does not exist
[  461.415073][T20829] ip_tables: iptables: counters copy to user failed while replacing table
[  461.613049][T20850] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  461.775369][T20856] pimreg: entered allmulticast mode
[  461.778810][T20856] pimreg: left allmulticast mode
[  462.074697][T20870] syz_tun: entered allmulticast mode
[  462.075468][T20870] syz_tun: left allmulticast mode
[  462.177743][T20876] netlink: 'syz.3.3617': attribute type 2 has an invalid length.
[  462.177765][T20876] __nla_validate_parse: 19 callbacks suppressed
[  462.177775][T20876] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3617'.
[  462.213919][T20876] netlink: 'syz.3.3617': attribute type 10 has an invalid length.
[  462.236947][T20876] team0: Port device dummy0 added
[  462.252666][T20876] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  462.673661][T20901] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3624'.
[  462.703656][T20901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'.
[  462.755913][T20903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.035005][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3634'.
[  463.052334][T20923] netlink: 'syz.2.3632': attribute type 10 has an invalid length.
[  463.052620][T20923] veth0_vlan: left promiscuous mode
[  463.054073][T20923] team0: Device veth0_vlan failed to register rx_handler
[  463.121122][T20926] netlink: 'syz.1.3635': attribute type 1 has an invalid length.
[  463.126888][T20923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3632'.
[  463.126918][T20923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3632'.
[  463.126934][T20923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3632'.
[  463.226906][T20931] netlink: 'syz.4.3637': attribute type 3 has an invalid length.
[  463.226926][T20931] netlink: 'syz.4.3637': attribute type 1 has an invalid length.
[  463.775697][T20958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3644'.
[  463.818158][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3643'.
[  463.905191][T20959] IPVS: persistence engine module ip_vs_pe_À not found
[  464.025083][T20972] netlink: NAT attribute has 8 unknown bytes
[  464.025117][T20972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.136395][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3655'.
[  464.174668][T20940] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  464.174690][T20940] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  464.284674][T20988] openvswitch: netlink: Message has 8 unknown bytes.
[  464.737169][T20984] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  464.810500][T20991] netlink: 'syz.3.3656': attribute type 4 has an invalid length.
[  464.964071][T21007] ip_tables: iptables: counters copy to user failed while replacing table
[  464.989375][T21007] syzkaller1: entered promiscuous mode
[  464.989395][T21007] syzkaller1: entered allmulticast mode
[  465.038031][T21003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.189611][T21013] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  465.210573][T21013] syzkaller0: entered promiscuous mode
[  465.210593][T21013] syzkaller0: entered allmulticast mode
[  465.368567][T21022] netlink: 'syz.4.3666': attribute type 1 has an invalid length.
[  465.535876][T21022] bond5: entered promiscuous mode
[  465.536758][T21022] 8021q: adding VLAN 0 to HW filter on device bond5
[  465.620825][T21035] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  465.627380][T21035] netlink: 'syz.0.3668': attribute type 1 has an invalid length.
[  465.639692][T21031] IPVS: Scheduler module ip_vs_sip not found
[  465.785012][T21024] 8021q: adding VLAN 0 to HW filter on device bond5
[  465.785400][T21024] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  465.785418][T21024] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  465.789636][T21024] bond5: (slave ip6gre1): making interface the new active one
[  465.789661][T21024] ip6gre1: entered promiscuous mode
[  465.800714][T21024] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  465.936571][T21035] 8021q: adding VLAN 0 to HW filter on device bond3
[  466.313883][T21062] netlink: 'syz.1.3673': attribute type 3 has an invalid length.
[  466.448742][T21055] 8021q: adding VLAN 0 to HW filter on device bond6
[  466.813814][T21092] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[  466.928355][T21101] gretap1: entered allmulticast mode
[  467.609419][T21145] __nla_validate_parse: 11 callbacks suppressed
[  467.609442][T21145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3692'.
[  467.699622][T21144] netlink: 'syz.0.3691': attribute type 10 has an invalid length.
[  467.747863][T21144] team0: Device veth0_vlan failed to register rx_handler
[  467.864424][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3693'.
[  467.971314][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'.
[  468.236102][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'.
[  468.236123][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3700'.
[  468.412224][T21205] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.977254][T21232] syzkaller0: entered promiscuous mode
[  468.977277][T21232] syzkaller0: entered allmulticast mode
[  469.000159][T21240] tipc: Started in network mode
[  469.000176][T21240] tipc: Node identity , cluster identity 4711
[  469.000189][T21240] tipc: Failed to obtain node identity
[  469.000214][T21240] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  469.025987][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3710'.
[  469.656417][T21266] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3717'.
[  471.246754][T21261] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  471.340874][T21266] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  471.400450][T21271] netlink: 'syz.0.3719': attribute type 29 has an invalid length.
[  471.400471][T21271] netlink: 'syz.0.3719': attribute type 31 has an invalid length.
[  471.538174][T21277] debugfs: 'ç–½mÔ%A¯úÆÿAZøZ´”ধ!E@Ò' already exists in 'ieee80211'
[  471.670085][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'.
[  471.765469][T21291] syzkaller0: Caught tx_queue_len zero misconfig
[  471.771012][T21284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.008802][T21297] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  472.169798][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3729'.
[  472.170059][T21304] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.226427][T21305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3729'.
[  472.325697][T21309] syzkaller0: entered promiscuous mode
[  472.325721][T21309] syzkaller0: entered allmulticast mode
[  472.749024][T21326] netlink: 'syz.1.3736': attribute type 12 has an invalid length.
[  472.911032][T21315] syzkaller0: entered promiscuous mode
[  472.911058][T21315] syzkaller0: entered allmulticast mode
[  472.955768][T21332] dummy0: entered promiscuous mode
[  473.055496][T21332] dummy0: left promiscuous mode
[  473.470403][T21371] __nla_validate_parse: 2 callbacks suppressed
[  473.470422][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3745'.
[  475.761148][T21371] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  475.764423][T21373] macsec0: entered promiscuous mode
[  475.764890][T21373] macsec0: left promiscuous mode
[  475.770855][T21375] veth1_macvtap: left promiscuous mode
[  475.822340][T21377] netlink: 'syz.0.3749': attribute type 12 has an invalid length.
[  475.979944][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  476.069553][T21392] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4)
[  476.074303][T21392] bond5 (unregistering): Released all slaves
[  476.438232][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3759'.
[  476.496614][T21433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3761'.
[  476.616607][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3763'.
[  476.657330][T21444] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3762'.
[  476.743814][T21451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3764'.
[  477.117897][T21472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3768'.
[  477.121824][T21474] ip_tables: iptables: counters copy to user failed while replacing table
[  477.408652][T21494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3773'.
[  477.429388][T21496] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3773'.
[  477.573686][T21504] netlink: 'syz.3.3778': attribute type 2 has an invalid length.
[  477.683433][T21515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.723108][T21515] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.775274][T21512] openvswitch: netlink: Flow actions attr not present in new flow.
[  478.512595][T21566] IPVS: ovf: TCP 172.20.20.170:20002 - no destination available
[  478.545729][T21570] xt_ecn: cannot match TCP bits for non-tcp packets
[  478.622383][T21576] __nla_validate_parse: 13 callbacks suppressed
[  478.622397][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'.
[  478.808243][T21583] syzkaller0: entered promiscuous mode
[  478.808267][T21583] syzkaller0: entered allmulticast mode
[  478.843066][T21583] 0: reclassify loop, rule prio 0, protocol 800
[  478.889760][T21586] x_tables: duplicate underflow at hook 1
[  478.910490][T21586] smbdirect: ib_dev[syz1] removed
[  478.925787][T21590] netlink: 'syz.1.3801': attribute type 10 has an invalid length.
[  478.950522][T21590] team0: Port device dummy0 added
[  479.037747][T21594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3803'.
[  479.038954][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3802'.
[  479.374901][T21621] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  479.386266][T21621] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  479.424307][T21621] bond4: entered promiscuous mode
[  479.424593][T21621] 8021q: adding VLAN 0 to HW filter on device bond4
[  479.424887][T21623] netlink: 'syz.0.3810': attribute type 2 has an invalid length.
[  479.424903][T21623] netlink: 'syz.0.3810': attribute type 2 has an invalid length.
[  479.467095][T21621] 8021q: adding VLAN 0 to HW filter on device bond4
[  479.467303][T21621] bond4: (slave gre3): The slave device specified does not support setting the MAC address
[  479.467315][T21621] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  479.469066][T21621] bond4: (slave gre3): making interface the new active one
[  479.469083][T21621] gre3: entered promiscuous mode
[  479.469940][T21621] bond4: (slave gre3): Enslaving as an active interface with an up link
[  479.494469][T21623] netlink: 'syz.0.3810': attribute type 2 has an invalid length.
[  479.494488][T21623] netlink: 'syz.0.3810': attribute type 2 has an invalid length.
[  479.631871][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  479.752619][T21646] syzkaller0: entered promiscuous mode
[  479.752640][T21646] syzkaller0: entered allmulticast mode
[  479.776868][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3816'.
[  479.808936][T21650] netlink: 'syz.0.3815': attribute type 1 has an invalid length.
[  479.982587][T21661] syzkaller0: entered promiscuous mode
[  479.982612][T21661] syzkaller0: entered allmulticast mode
[  480.029024][T21663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  480.029041][T21663] IPv6: NLM_F_CREATE should be set when creating new route
[  480.029083][T21663] IPv6: NLM_F_CREATE should be set when creating new route
[  480.268185][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'.
[  480.554756][T21687] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  480.584422][T21687] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  480.687530][T21695] ip_tables: iptables: counters copy to user failed while replacing table
[  480.945975][T21708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3834'.
[  481.455388][T21721] netlink: 'syz.2.3839': attribute type 10 has an invalid length.
[  481.524897][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'.
[  481.803367][T21721] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  481.896009][T21729] bridge_slave_1: left allmulticast mode
[  481.896036][T21729] bridge_slave_1: left promiscuous mode
[  481.896261][T21729] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.915428][T21729] bridge_slave_0: left allmulticast mode
[  481.915451][T21729] bridge_slave_0: left promiscuous mode
[  481.921276][T21729] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.211784][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 120 seconds
[  482.211825][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 120 seconds
[  482.278255][T21743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3843'.
[  482.299502][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'.
[  482.300374][T21743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'.
[  482.519238][T21729] bond0: (slave bridge0): Releasing backup interface
[  482.667691][T21744] bond4: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  482.670948][T21744] bond4 (unregistering): Released all slaves
[  482.788591][T21759] netlink: 'syz.1.3846': attribute type 7 has an invalid length.
[  482.838679][T21759] netlink: 'syz.1.3846': attribute type 105 has an invalid length.
[  482.941977][T21767] netlink: 'syz.0.3850': attribute type 1 has an invalid length.
[  482.942659][T21770] ip_tables: iptables: counters copy to user failed while replacing table
[  482.951132][T21770] netlink: ct_mark mask cannot be 0
[  482.951159][T21770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.988091][T21765] nbd: must specify at least one socket
[  483.019125][T21772] netlink: 'syz.3.3851': attribute type 7 has an invalid length.
[  483.019139][T21772] netlink: 'syz.3.3851': attribute type 5 has an invalid length.
[  483.070883][T21767] 8021q: adding VLAN 0 to HW filter on device bond4
[  483.150413][T21768] bond4: (slave veth5): Enslaving as an active interface with a down link
[  483.188323][T21775] bond4 (unregistering): (slave veth5): Releasing active interface
[  483.201496][T21775] bond4 (unregistering): Released all slaves
[  483.369454][T21793] openvswitch: netlink: Message has 2 unknown bytes.
[  483.415327][T21794] openvswitch: netlink: Message has 2 unknown bytes.
[  483.630908][T21806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.684526][T21810] __nla_validate_parse: 10 callbacks suppressed
[  483.684546][T21810] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3862'.
[  483.686370][T21810] netlink: 'syz.1.3862': attribute type 4 has an invalid length.
[  483.889336][T21820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3863'.
[  483.919968][T21816] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.3863'.
[  484.060854][T21825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3866'.
[  484.260795][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'.
[  484.365142][T21848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3869'.
[  484.663467][T21859] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3873'.
[  485.045825][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3875'.
[  485.045847][T21864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3875'.
[  485.046245][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3875'.
[  485.278242][T21877] xt_IDLETIMER: timeout value is zero
[  485.304206][T21877] vlan1: entered allmulticast mode
[  485.304228][T21877] bond0: entered allmulticast mode
[  485.304240][T21877] bond_slave_0: entered allmulticast mode
[  485.304256][T21877] bond_slave_1: entered allmulticast mode
[  485.467397][T21879] syzkaller0: entered promiscuous mode
[  485.467420][T21879] syzkaller0: entered allmulticast mode
[  485.675732][T21893] netlink: 'syz.0.3883': attribute type 11 has an invalid length.
[  485.675753][T21893] netlink: 'syz.0.3883': attribute type 11 has an invalid length.
[  485.741596][ T3708] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.742159][ T3708] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.742182][ T3708] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.742200][ T3708] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.979644][T21911] ieee802154 phy1 wpan1: encryption failed: -90
[  486.114857][T21914] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  486.661555][ T9940] IPVS: starting estimator thread 0...
[  486.753852][T21935] IPVS: using max 56 ests per chain, 134400 per kthread
[  486.986568][ T9940] IPVS: stop unused estimator thread 0...
[  501.395793][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  506.522825][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  512.275462][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 150 seconds
[  512.275504][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 150 seconds
[  542.351938][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  542.369424][ T2016] block nbd1: Possible stuck request ffff888028365080: control (read@0,1024B). Runtime 180 seconds
[  542.369454][ T2016] block nbd1: Possible stuck request ffff888028365240: control (read@1024,3072B). Runtime 180 seconds
[  544.053653][ T4988] udevd[4988]: worker [16801] /devices/virtual/block/nbd1 timeout; kill it
[  544.054611][ T4988] udevd[4988]: seq 19205 '/devices/virtual/block/nbd1' killed
[  545.075429][T21953] __nla_validate_parse: 6 callbacks suppressed
[  545.075449][T21953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3897'.
[  545.129094][T21963] x_tables: duplicate underflow at hook 3
[  545.183218][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3901'.
[  545.189911][T21971] ip6gre1: entered promiscuous mode
[  545.189934][T21971] ip6gre1: entered allmulticast mode
[  545.218288][T21953] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3897'.
[  545.387274][T21963] xt_CT: No such helper "netbios-ns"
[  545.520536][T21975] geneve3: entered promiscuous mode
[  545.528458][T21978] ip_tables: iptables: counters copy to user failed while replacing table
[  545.769902][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.769936][T21994] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  545.769949][T21994] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  545.769959][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.770768][T21990] tipc: Started in network mode
[  545.770792][T21990] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  545.770839][T21990] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  545.786448][T21994] geneve4: entered promiscuous mode
[  545.786469][T21994] geneve4: entered allmulticast mode
[  545.792996][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.793025][T21994] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  545.793038][T21994] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  545.793048][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.798111][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.798138][T21994] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  545.798150][T21994] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  545.798160][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.800798][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'.
[  545.800822][T21994] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  545.800834][T21994] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  545.804614][T21984] syzkaller0: entered promiscuous mode
[  545.804631][T21984] syzkaller0: entered allmulticast mode
[  545.808016][T21994] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  545.808033][T21994] netlink: 'syz.3.3906': attribute type 5 has an invalid length.
[  545.880654][T21984] vxlan1: entered promiscuous mode
[  545.880674][T21984] vxlan1: entered allmulticast mode
[  545.968738][T21987] vxlan2: entered promiscuous mode
[  545.968762][T21987] vxlan2: entered allmulticast mode
[  546.055262][T21996] vxlan3: entered promiscuous mode
[  546.055284][T21996] vxlan3: entered allmulticast mode
[  546.181965][ T9940] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 32855 - 0
[  546.185137][ T3708] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  546.185177][ T3708] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 32855 - 0
[  546.185209][ T3708] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  546.185240][ T3708] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 32855 - 0
[  546.185276][ T3708] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  546.185307][ T3708] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 32855 - 0
[  546.185338][ T3708] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  546.500377][T22020] bond7: entered promiscuous mode
[  546.510155][T22020] 8021q: adding VLAN 0 to HW filter on device bond7
[  546.564805][T22019] 8021q: adding VLAN 0 to HW filter on device bond7
[  546.576919][T22019] bond7: (slave gre1): The slave device specified does not support setting the MAC address
[  546.576943][T22019] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  546.589902][T22019] bond7: (slave gre1): making interface the new active one
[  546.589923][T22019] gre1: entered promiscuous mode
[  546.618976][T22019] bond7: (slave gre1): Enslaving as an active interface with an up link
[  546.676332][T22020] bond7 (unregistering): (slave gre1): Releasing backup interface
[  546.676357][T22020] gre1: left promiscuous mode
[  546.684222][T22020] bond7 (unregistering): Released all slaves
[  547.113109][T22062] sctp: [Deprecated]: syz.4.3918 (pid 22062) Use of int in max_burst socket option deprecated.
[  547.113109][T22062] Use struct sctp_assoc_value instead
[  547.210301][T22066] team0: Port device dummy0 removed
[  547.218118][T22066] batman_adv: batadv0: Adding interface: dummy0
[  547.218134][T22066] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.218152][T22066] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  547.396156][T22075] syzkaller0: entered promiscuous mode
[  547.396192][T22075] syzkaller0: entered allmulticast mode
[  547.749221][T22100] block nbd0: reconnected socket
[  547.920324][ T4939] block nbd0: Receive control failed (result -32)
[  548.094789][T22119] ´: entered promiscuous mode
[  548.166210][T22132] syzkaller0: entered promiscuous mode
[  548.166232][T22132] syzkaller0: entered allmulticast mode
[  548.553334][T22146] bond5: option lacp_active: invalid value (5)
[  548.570788][T22146] bond5 (unregistering): Released all slaves
[  548.668816][T22154] erspan0: entered promiscuous mode
[  548.669001][T22154] vlan2: entered promiscuous mode
[  548.906716][T22159] vlan2: entered promiscuous mode
[  549.441145][T22180] pimreg: tun_chr_ioctl cmd 1074025677
[  549.441256][T22180] pimreg: linktype set to 270
[  549.534897][T22193] IPVS: length: 155 != 8
[  549.728493][   T31] audit: type=1107 audit(1791744277.858:46): pid=22196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  550.534204][T22244] __nla_validate_parse: 73 callbacks suppressed
[  550.534224][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'.
[  551.051080][T22270] bond5: entered promiscuous mode
[  551.051103][T22270] bond5: entered allmulticast mode
[  551.063161][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'.
[  551.063180][T22270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3967'.
[  551.226313][T22279] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.284404][T22279] bridge_slave_0 (unregistering): left allmulticast mode
[  551.284431][T22279] bridge_slave_0 (unregistering): left promiscuous mode
[  551.284507][T22279] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.468173][T22296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3972'.
[  551.469022][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'.
[  551.527084][T22296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3972'.
[  551.562519][T22296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3972'.
[  551.562547][T22296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3972'.
[  551.739257][T22302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.775115][T22308] xt_hashlimit: size too large, truncated to 1048576
[  551.777300][T22309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3973'.
[  551.777692][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3973'.
[  551.835570][T22309] bond6: Unable to set down delay as MII monitoring is disabled
[  551.837324][T22309] bond6 (unregistering): Released all slaves
[  552.150366][T22327] bond1: option fail_over_mac: invalid value (127)
[  552.164608][T22327] bond1 (unregistering): Released all slaves
[  552.593242][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  552.793162][T22364] syzkaller1: entered promiscuous mode
[  552.793182][T22364] syzkaller1: entered allmulticast mode
[  552.868603][T22371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.930530][T22366] bridge0: Device is already in use.
[  552.933441][T22369] validate_nla: 62 callbacks suppressed
[  552.933461][T22369] netlink: 'syz.3.3989': attribute type 3 has an invalid length.
[  553.282560][T22393] netlink: 'syz.0.3992': attribute type 1 has an invalid length.
[  553.314369][T22393] 8021q: adding VLAN 0 to HW filter on device bond4
[  553.337698][T22393] bond4: (slave veth7): Enslaving as an active interface with a down link
[  553.352322][T22393] 8021q: adding VLAN 0 to HW filter on device batadv1
[  553.352576][T22393] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  553.448649][T22397] batman_adv: batadv0: Adding interface: syzkaller0
[  553.448661][T22397] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.448685][T22397] batman_adv: batadv0: Interface activated: syzkaller0
[  553.517113][T22397] batman_adv: batadv0: Interface activated: dummy0
[  553.517136][T22397] batadv0: mtu less than device minimum
[  553.519886][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.521183][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.522531][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.523859][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.525163][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.526470][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.527813][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.529136][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.530414][T22397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  553.778349][T22396] batman_adv: batadv0: Interface deactivated: syzkaller0
[  553.866923][T22396] batman_adv: batadv0: Removing interface: syzkaller0
[  553.926550][T22420] veth1_macvtap: entered promiscuous mode
[  553.927483][T22420] macsec0: entered promiscuous mode
[  554.004680][T22424] netlink: 'syz.4.4000': attribute type 4 has an invalid length.
[  554.038190][T22424] netlink: 'syz.4.4000': attribute type 4 has an invalid length.
[  554.106110][T22424] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  554.194322][T22431] bond5: Unable to set up delay as MII monitoring is disabled
[  554.196063][T22431] bond5 (unregistering): Released all slaves
[  554.251649][T22438] netlink: 'syz.4.4004': attribute type 9 has an invalid length.
[  554.251923][T22436] netlink: 'syz.4.4004': attribute type 9 has an invalid length.
[  554.495960][T22450] netlink: 'syz.0.4008': attribute type 29 has an invalid length.
[  554.548512][T22451] ipvlan2: entered allmulticast mode
[  554.548534][T22451] geneve1: entered allmulticast mode
[  554.571871][T22456] Bluetooth: hci0: unsupported parameter 5135
[  554.571892][T22456] Bluetooth: hci0: unsupported parameter 65
[  554.571903][T22456] Bluetooth: hci0: unsupported parameter 5135
[  554.571913][T22456] Bluetooth: hci0: unsupported parameter 65
[  554.809899][T22467] xt_hashlimit: size too large, truncated to 1048576
[  554.809919][T22467] xt_hashlimit: max too large, truncated to 1048576
[  554.812772][T22468] netlink: 'syz.4.4011': attribute type 1 has an invalid length.
[  555.343386][T22498] ipvlan2: entered allmulticast mode
[  555.343409][T22498] syz_tun: entered allmulticast mode
[  556.141841][T22504] __nla_validate_parse: 14 callbacks suppressed
[  556.141861][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4021'.
[  556.238585][T22507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4022'.
[  556.288717][T22501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4020'.
[  556.453454][T22513] netlink: 'syz.2.4024': attribute type 22 has an invalid length.
[  556.453475][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'.
[  556.453621][T22513] netlink: 'syz.2.4024': attribute type 22 has an invalid length.
[  556.453633][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'.
[  556.686928][T22531] IPVS: Unknown mcast interface: mac^ec0
[  556.707871][T22537] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4028'.
[  556.819781][T22543] IPVS: Error connecting to the multicast addr
[  556.820883][T22542] IPVS: Error connecting to the multicast addr
[  556.873204][T22554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4034'.
[  556.945524][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'.
[  556.984912][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  556.985662][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  556.985697][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  556.985726][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  557.093199][T22564] veth1_macvtap: left promiscuous mode
[  557.093229][T22564] macsec0: entered promiscuous mode
[  557.199489][T22573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4039'.
[  557.271230][T22578] 
[  557.273606][T22578] ======================================================
[  557.280623][T22578] WARNING: possible circular locking dependency detected
[  557.287647][T22578] syzkaller #0 Not tainted
[  557.292045][T22578] ------------------------------------------------------
[  557.299043][T22578] syz.1.4042/22578 is trying to acquire lock:
[  557.305091][T22578] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  557.315609][T22578] 
[  557.315609][T22578] but task is already holding lock:
[  557.322959][T22578] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  557.333046][T22578] 
[  557.333046][T22578] which lock already depends on the new lock.
[  557.333046][T22578] 
[  557.343431][T22578] 
[  557.343431][T22578] the existing dependency chain (in reverse order) is:
[  557.352428][T22578] 
[  557.352428][T22578] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  557.360142][T22578]        cpus_read_lock+0x42/0x160
[  557.365243][T22578]        static_key_slow_inc+0x12/0x30
[  557.370688][T22578]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  557.376931][T22578]        nbd_genl_foreach_sock+0x265/0x450
[  557.382728][T22578]        nbd_genl_reconfigure+0xbbb/0x1040
[  557.388520][T22578]        genl_family_rcv_msg_doit+0x233/0x340
[  557.394570][T22578]        genl_rcv_msg+0x614/0x7a0
[  557.399576][T22578]        netlink_rcv_skb+0x226/0x4a0
[  557.404847][T22578]        genl_rcv+0x28/0x40
[  557.409331][T22578]        netlink_unicast+0x7bd/0x940
[  557.414602][T22578]        netlink_sendmsg+0x813/0xb40
[  557.419874][T22578]        sock_sendmsg_nosec+0x14e/0x190
[  557.425407][T22578]        ____sys_sendmsg+0x54e/0x850
[  557.430678][T22578]        ___sys_sendmsg+0x2a5/0x360
[  557.435867][T22578]        __x64_sys_sendmsg+0x1b1/0x290
[  557.441311][T22578]        do_syscall_64+0x166/0x520
[  557.446408][T22578]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.452804][T22578] 
[  557.452804][T22578] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  557.460429][T22578]        __mutex_lock+0x19d/0x1550
[  557.465530][T22578]        nbd_queue_rq+0x373/0xff0
[  557.470539][T22578]        blk_mq_dispatch_rq_list+0x499/0x1990
[  557.476596][T22578]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  557.483440][T22578]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  557.489929][T22578]        blk_mq_run_work_fn+0x16c/0x300
[  557.495465][T22578]        process_scheduled_works+0xc3d/0x1630
[  557.501517][T22578]        worker_thread+0xa47/0xfb0
[  557.506618][T22578]        kthread+0x38b/0x480
[  557.511188][T22578]        ret_from_fork+0x514/0xb70
[  557.516291][T22578]        ret_from_fork_asm+0x1a/0x30
[  557.521565][T22578] 
[  557.521565][T22578] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  557.528768][T22578]        __mutex_lock+0x19d/0x1550
[  557.533868][T22578]        nbd_queue_rq+0xc1/0xff0
[  557.538796][T22578]        blk_mq_dispatch_rq_list+0x499/0x1990
[  557.544852][T22578]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  557.551697][T22578]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  557.558190][T22578]        blk_mq_run_work_fn+0x16c/0x300
[  557.563726][T22578]        process_scheduled_works+0xc3d/0x1630
[  557.569780][T22578]        worker_thread+0xa47/0xfb0
[  557.574880][T22578]        kthread+0x38b/0x480
[  557.579455][T22578]        ret_from_fork+0x514/0xb70
[  557.584555][T22578]        ret_from_fork_asm+0x1a/0x30
[  557.589859][T22578] 
[  557.589859][T22578] -> #4 (set->srcu){.+.+}-{0:0}:
[  557.596965][T22578]        __synchronize_srcu+0xc9/0x2f0
[  557.602411][T22578]        elevator_switch+0x1e8/0x7b0
[  557.607684][T22578]        elevator_change+0x2fa/0x480
[  557.612961][T22578]        elevator_set_default+0x375/0x440
[  557.618678][T22578]        blk_register_queue+0x3f3/0x4e0
[  557.624222][T22578]        __add_disk+0x6b8/0xdb0
[  557.629064][T22578]        add_disk_fwnode+0x100/0x3a0
[  557.634337][T22578]        nbd_dev_add+0x733/0xb60
[  557.639262][T22578]        nbd_init+0x168/0x1f0
[  557.643921][T22578]        do_one_initcall+0x250/0x870
[  557.649202][T22578]        do_initcall_level+0x10a/0x1a0
[  557.654645][T22578]        do_initcalls+0x59/0xa0
[  557.659483][T22578]        kernel_init_freeable+0x29d/0x3e0
[  557.665189][T22578]        kernel_init+0x22/0x1d0
[  557.670021][T22578]        ret_from_fork+0x514/0xb70
[  557.675129][T22578]        ret_from_fork_asm+0x1a/0x30
[  557.680414][T22578] 
[  557.680414][T22578] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  557.688215][T22578]        __mutex_lock+0x19d/0x1550
[  557.693318][T22578]        elevator_change+0x1af/0x480
[  557.698590][T22578]        elevator_set_none+0xb5/0x140
[  557.703947][T22578]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  557.710265][T22578]        nbd_start_device+0x189/0xb30
[  557.715622][T22578]        nbd_genl_connect+0x167d/0x1cd0
[  557.721151][T22578]        genl_family_rcv_msg_doit+0x233/0x340
[  557.727205][T22578]        genl_rcv_msg+0x614/0x7a0
[  557.732222][T22578]        netlink_rcv_skb+0x226/0x4a0
[  557.737501][T22578]        genl_rcv+0x28/0x40
[  557.741986][T22578]        netlink_unicast+0x7bd/0x940
[  557.747253][T22578]        netlink_sendmsg+0x813/0xb40
[  557.752526][T22578]        sock_sendmsg_nosec+0x14e/0x190
[  557.758060][T22578]        ____sys_sendmsg+0x54e/0x850
[  557.763326][T22578]        ___sys_sendmsg+0x2a5/0x360
[  557.768506][T22578]        __x64_sys_sendmsg+0x1b1/0x290
[  557.773948][T22578]        do_syscall_64+0x166/0x520
[  557.779048][T22578]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.785445][T22578] 
[  557.785445][T22578] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  557.794033][T22578]        blk_alloc_queue+0x544/0x690
[  557.799303][T22578]        __blk_mq_alloc_disk+0x194/0x390
[  557.804923][T22578]        nbd_dev_add+0x494/0xb60
[  557.809848][T22578]        nbd_init+0x168/0x1f0
[  557.814509][T22578]        do_one_initcall+0x250/0x870
[  557.819785][T22578]        do_initcall_level+0x10a/0x1a0
[  557.825229][T22578]        do_initcalls+0x59/0xa0
[  557.830066][T22578]        kernel_init_freeable+0x29d/0x3e0
[  557.835772][T22578]        kernel_init+0x22/0x1d0
[  557.840603][T22578]        ret_from_fork+0x514/0xb70
[  557.845705][T22578]        ret_from_fork_asm+0x1a/0x30
[  557.850981][T22578] 
[  557.850981][T22578] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  557.858174][T22578]        fs_reclaim_acquire+0x71/0x100
[  557.863618][T22578]        kmem_cache_alloc_noprof+0x5f/0x600
[  557.869496][T22578]        __kernfs_iattrs+0xdd/0x380
[  557.874680][T22578]        kernfs_iop_setattr+0xe6/0x3f0
[  557.880130][T22578]        notify_change+0xbba/0xea0
[  557.885233][T22578]        do_truncate+0x1c2/0x250
[  557.890156][T22578]        path_openat+0x15b5/0x1d60
[  557.895274][T22578]        do_file_open+0x23e/0x4a0
[  557.900285][T22578]        do_sys_openat2+0x115/0x200
[  557.905473][T22578]        __x64_sys_openat+0x138/0x170
[  557.910832][T22578]        do_syscall_64+0x166/0x520
[  557.915929][T22578]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.922326][T22578] 
[  557.922326][T22578] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  557.930823][T22578]        __lock_acquire+0x164c/0x2de0
[  557.936193][T22578]        lock_acquire+0x115/0x350
[  557.941198][T22578]        down_read+0x4a/0x330
[  557.945866][T22578]        kernfs_iop_permission+0x7f/0x430
[  557.951571][T22578]        inode_permission+0x3de/0x5f0
[  557.956932][T22578]        cgroup_attach_permissions+0x28e/0x9f0
[  557.963079][T22578]        __cgroup_procs_write+0x24b/0x320
[  557.968886][T22578]        cgroup_threads_write+0x24/0x50
[  557.974426][T22578]        cgroup_file_write+0x331/0x8f0
[  557.979887][T22578]        kernfs_fop_write_iter+0x3a4/0x540
[  557.985688][T22578]        vfs_write+0x612/0xba0
[  557.990448][T22578]        ksys_write+0x150/0x270
[  557.995285][T22578]        do_syscall_64+0x166/0x520
[  558.000401][T22578]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.006800][T22578] 
[  558.006800][T22578] other info that might help us debug this:
[  558.006800][T22578] 
[  558.017014][T22578] Chain exists of:
[  558.017014][T22578]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  558.017014][T22578] 
[  558.030990][T22578]  Possible unsafe locking scenario:
[  558.030990][T22578] 
[  558.038438][T22578]        CPU0                    CPU1
[  558.043786][T22578]        ----                    ----
[  558.049135][T22578]   rlock(cpu_hotplug_lock);
[  558.053712][T22578]                                lock(&nsock->tx_lock);
[  558.060632][T22578]                                lock(cpu_hotplug_lock);
[  558.067638][T22578]   rlock(&root->kernfs_iattr_rwsem);
[  558.072996][T22578] 
[  558.072996][T22578]  *** DEADLOCK ***
[  558.072996][T22578] 
[  558.081121][T22578] locks held by syz.1.4042/22578: 5, last CPU#0:
[  558.087434][T22578]  #0: ffff88807aedf0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  558.096469][T22578]  #1: ffff888035428460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  558.105331][T22578]  #2: ffff88808093b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  558.115083][T22578]  #3: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  558.124826][T22578]  #4: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  558.135344][T22578] 
[  558.135344][T22578] stack backtrace:
[  558.141244][T22578] CPU: 0 UID: 0 PID: 22578 Comm: syz.1.4042 Not tainted syzkaller #0 PREEMPT(full) 
[  558.150597][T22578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  558.160653][T22578] Call Trace:
[  558.163941][T22578]  <TASK>
[  558.166870][T22578]  dump_stack_lvl+0xe8/0x150
[  558.171467][T22578]  print_circular_bug+0x2e2/0x300
[  558.176493][T22578]  check_noncircular+0x12f/0x150
[  558.181421][T22578]  __lock_acquire+0x164c/0x2de0
[  558.186262][T22578]  ? __lock_acquire+0x747/0x2de0
[  558.191196][T22578]  lock_acquire+0x115/0x350
[  558.195688][T22578]  ? kernfs_iop_permission+0x7f/0x430
[  558.201048][T22578]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  558.206844][T22578]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  558.212649][T22578]  down_read+0x4a/0x330
[  558.216800][T22578]  ? kernfs_iop_permission+0x7f/0x430
[  558.222157][T22578]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  558.227948][T22578]  kernfs_iop_permission+0x7f/0x430
[  558.233131][T22578]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  558.238923][T22578]  inode_permission+0x3de/0x5f0
[  558.243770][T22578]  cgroup_attach_permissions+0x28e/0x9f0
[  558.249399][T22578]  __cgroup_procs_write+0x24b/0x320
[  558.254679][T22578]  cgroup_threads_write+0x24/0x50
[  558.259691][T22578]  ? __pfx_cgroup_threads_write+0x10/0x10
[  558.265395][T22578]  cgroup_file_write+0x331/0x8f0
[  558.270328][T22578]  ? __pfx_cgroup_file_write+0x10/0x10
[  558.275785][T22578]  ? __kmalloc_noprof+0x38c/0x720
[  558.280805][T22578]  ? __pfx_cgroup_file_write+0x10/0x10
[  558.286255][T22578]  kernfs_fop_write_iter+0x3a4/0x540
[  558.291535][T22578]  vfs_write+0x612/0xba0
[  558.295769][T22578]  ? __pfx_vfs_write+0x10/0x10
[  558.300534][T22578]  ? __fget_files+0x2a/0x420
[  558.305120][T22578]  ksys_write+0x150/0x270
[  558.309439][T22578]  ? __pfx_ksys_write+0x10/0x10
[  558.314284][T22578]  do_syscall_64+0x166/0x520
[  558.318865][T22578]  ? trace_irq_disable+0x3b/0x140
[  558.323875][T22578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.329927][T22578]  ? clear_bhb_loop+0x70/0xc0
[  558.334593][T22578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.340481][T22578] RIP: 0033:0x7f99f5d9e1d9
[  558.344910][T22578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.364502][T22578] RSP: 002b:00007f99f6c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  558.372906][T22578] RAX: ffffffffffffffda RBX: 00007f99f6025fa0 RCX: 00007f99f5d9e1d9
[  558.380861][T22578] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005
[  558.388818][T22578] RBP: 00007f99f5e35888 R08: 0000000000000000 R09: 0000000000000000
[  558.396782][T22578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  558.404742][T22578] R13: 00007f99f6026038 R14: 00007f99f6025fa0 R15: 00007ffd3c604f38
[  558.412710][T22578]  </TASK>
[  562.833044][ T1316] ieee802154 phy1 wpan1: encryption failed: -22