last executing test programs:

2.257173405s ago: executing program 0 (id=2415):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x42)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="32d33a47d96ceacc565129f837dfc4ec", 0x10}, {&(0x7f0000000880)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f", 0x51}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000900)=0xdf8, 0x4)
writev(r2, &(0x7f0000000940)=[{&(0x7f0000000980)="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", 0x2ef}], 0x1)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'geneve0\x00', @ifru_data=&(0x7f0000000000)="9bb8c957a97d385068006b0ffd3fe82f74010d37978244f8517fd3968c725de0"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x8, 0x7, 0x6, 0x8000, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @multicast1, {[@generic={0x94, 0x10, "5e2b6b0b2a48d3bd58c689249446"}, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x7, [0x125, 0x5, 0x6, 0x6, 0x1, 0x9, 0x8001, 0x6]}, @timestamp={0x44, 0x10, 0x18, 0x0, 0x2, [0xf12a, 0x9, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8d, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0xa, 0x1, 0x9, [{@broadcast, 0x7}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@loopback, 0x9}, {@private=0xa010102, 0x3}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

2.00051415s ago: executing program 0 (id=2418):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100"], 0x6c}}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) (async)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async, rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) (async)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.960513771s ago: executing program 2 (id=2419):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a8230088a82a"], 0xc6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.467593277s ago: executing program 2 (id=2424):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f3aa82759ac798172d9a0b81ce423913d33af2cd35426aa174efaca4cf53f8fcb932c4a14908e2ea9f6c57968e7dc31921e889e6d97b021089c4a5ad4e3e0f734183f5ebd3ae5dff9f5b463d0460061df1fafa468d9618c6e5c8ded39d075b2820f5e9e2517556b1f4d2b30fb490a8a5c251ee232e9475bdccbcb0bb94a5b319ad68bc08dfc75d1ca4fdd5502bec946bf635fcd5cc3c41e2456a46ed63fc987dda67d2a6a94827ab0b93eb3c06f29d7dc20707681d89d74c75445049f8b5c354307a5336d8b17548344043cfda08a00bd4385defa6434dc8735927678a51e10f6c23943c10d4106726ce56091c59d0df9ac5c2e5d97019f9190fe0b015c82733a6052847ec46069f9c6e526b4845237279fd4a5ffc1a8044d2a67233c37daad9b8f8564142c45694ea73ab5f2779faa2820cb6d8ce4d11ddf4df00872f7a46c3bf77645a8646a3f325afd1e91ae758a3fe43620e40", 0xfdef}], 0x1}}], 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000640)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)

1.305787916s ago: executing program 4 (id=2427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0xfffe)
preadv(r2, &(0x7f00000002c0), 0xa, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0xb, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000859b00"/28], 0x50)
socket$tipc(0x1e, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r6, r8, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x179, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
write(0xca, &(0x7f0000000200)="04164921513a15916c", 0x9)
listen(r3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0)

1.222991098s ago: executing program 1 (id=2428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000000a010400000000000000000500000048000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000021400048008000140000000000800024000000001140000001100010000000000000000000500000a0abef7c34479bc37d0fb583dacaaadb8c0a10962d4314aaac5513cdefcf3e0966efd0c390b83821ba679a41e2cb4643b0174de8c77bc69053594659757db"], 0x84}}, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101f02, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000100)={0xfd58, 0x0})
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x1ff, @remote, 0x1000}}}, 0x108)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000000a010400000000000000000500000048000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000021400048008000140000000000800024000000001140000001100010000000000000000000500000a0abef7c34479bc37d0fb583dacaaadb8c0a10962d4314aaac5513cdefcf3e0966efd0c390b83821ba679a41e2cb4643b0174de8c77bc69053594659757db"], 0x84}}, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101f02, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x1) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) (async)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000100)={0xfd58, 0x0}) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x1ff, @remote, 0x1000}}}, 0x108) (async)
close(r4) (async)

1.193475041s ago: executing program 2 (id=2429):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4)
pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1.105913335s ago: executing program 0 (id=2431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4001})
socket(0x11, 0xa, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084"], 0x6a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10)
close(0x3)

1.104884534s ago: executing program 4 (id=2432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0xffffffffffffffd2}, 0x48)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)='F', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x6a, 0x3, 0x0, &(0x7f0000000600))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000140), 0x0}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x0, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
r10 = socket$tipc(0x1e, 0x5, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000001200), &(0x7f0000001240)=0x4)
sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r10], 0xc4}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

983.779761ms ago: executing program 2 (id=2433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc514}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008001}, 0x488c0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0)

955.202218ms ago: executing program 1 (id=2435):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x6, 0x2}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x4, [{0xd, 0x3, 0x5}, {0x8, 0x4, 0x8}, {0xb, 0x1, 0x4}, {0x2, 0x0, 0xbe}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x4}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @enum64={0x40, 0x2, 0x0, 0x13, 0x0, 0x2, [{0xa, 0x4, 0xd}, {0x4, 0x7ff, 0x3}]}, @float={0x8, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xffff}}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xe}}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f0000000100)=""/22, 0xf1, 0x16, 0x1, 0x9}, 0x28)

786.008258ms ago: executing program 3 (id=2436):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b7f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093c0b077000200000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000316b"], 0x134}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
socket(0x1, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0)

773.473869ms ago: executing program 4 (id=2437):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$inet(r2, &(0x7f0000001e00)={&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="e587c4cb421c040e7da2af5666d6a29a4137deb7862501e7ad0a0cf98528abf0", 0x20}, {&(0x7f0000000200)="61ebd87acd1a6262f82b42c77467ea75cc3d201cbca6f319995dfc0fd1a92914a5009516e860c1a2b4d4be8ab6774da397b43313e204f92e056fb609eae299aa51ca201d989ef9f4ffca3b52a4a9a22307", 0x51}, {&(0x7f0000000dc0)="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", 0x1000}], 0x3}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c0001002bf9ff00fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000b3060a00020081e03eeb2f9f000008000f0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4040004)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000009000000010000000f00000008000000", @ANYRES32=r1, @ANYBLOB="02000000001000000000000088f806d1fa98dd00", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0400000002000000020000000a00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0x10, &(0x7f0000000d00)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff450200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r5}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x18, 0x0, 0x398037b3d3988ec5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
sendto$inet6(r4, &(0x7f0000000440)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r4, 0x2d92000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000540)=0x40)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@bridge_delvlan={0x30, 0x71, 0x2, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x50, 0x2}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x20000000)

726.708406ms ago: executing program 1 (id=2438):
r0 = socket$kcm(0x10, 0x0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x64, r2, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

592.414432ms ago: executing program 0 (id=2439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)

591.728238ms ago: executing program 3 (id=2440):
syz_emit_ethernet(0x8e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x19, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local, {[@ssrr={0x89, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @rand_addr=0x64010102]}, @end, @timestamp_prespec={0x44, 0x24, 0x3b, 0x3, 0x7, [{@multicast2, 0xffffffff}, {@loopback, 0x900000}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0x3, 0xd}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x61, [@broadcast, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newnexthop={0x8c, 0x68, 0x200, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x65}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffffd2}]}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x7ff}, {0x3ff}, {0x22d, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}]}}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
syz_emit_ethernet(0x8e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x19, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local, {[@ssrr={0x89, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @rand_addr=0x64010102]}, @end, @timestamp_prespec={0x44, 0x24, 0x3b, 0x3, 0x7, [{@multicast2, 0xffffffff}, {@loopback, 0x900000}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0x3, 0xd}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x61, [@broadcast, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newnexthop={0x8c, 0x68, 0x200, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x65}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffffd2}]}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x7ff}, {0x3ff}, {0x22d, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}]}}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)

590.225863ms ago: executing program 4 (id=2441):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000001f40)=""/102393, &(0x7f000001af40)=0x18ff9)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f00000001c0)='\n|\x00\b\x00\x80\x00\x00\x00\xec#O\xfea\xb1\x00', 0x48042, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x10]}, {0x19f9, 0x3, 0x9, 0x2}}, 0xbd39, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x81})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @sk_skb}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90)

589.020299ms ago: executing program 2 (id=2442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400100000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000100)) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async, rerun: 64)
close(0x3) (rerun: 64)

514.399083ms ago: executing program 1 (id=2443):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40900, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4e, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008085}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000cc0), 0x56)
sendmsg$kcm(r6, &(0x7f0000000d00)={&(0x7f0000000d40)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e00)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}, {&(0x7f0000000080)="8093397fb0b2a74547458af82ce68d1bde2e367187214d78762f4afad60e14f5f12fe5dfc9cffa0d7ecaf48c1cf8d6f07a7fec80511add0f39", 0x39}, {&(0x7f00000000c0)="4e10eff89b2cbc9e63c15a3c1139d444bbb5754b969375fab29b907257e5aca7073a953594bc45fa242cc4ae79f22197df31a636aa267e97ea2772ebad993b23e2a557522cc05caceaf4f6974b6fc6ef754a61a81079b05decceddd4fb403c20ae301a59fa65e67da4135829a7e0ec695716e364596d", 0x76}, {&(0x7f0000000140)="f08dacedb028256063a5cd84a9df2851d60ff71273c3a79eea41acd7f52a389ff83679556f9648682594abbf7de1f05af45221a82aacdaac", 0x38}, {&(0x7f0000000300)="425ba611ce73ed569d5fbd119800670357c3bf19011344b832a1f7638faaf01191b526e8b0a488b8abfd4f2051f1d1aa2d678ad7663a280e7ce064846a6a5d826a2f64dfb07ca60798e36e6d6e89e0ee3852971a3a6d84d15f483b48a4e20adc0b62c4a5d9b83bfc4d50e942cff1b9578ea8e18ffd5d1a59ec97b5fbe3fcaba66f6d82c7f5a5ee556cf5e211624840", 0x8f}, {&(0x7f0000001280)="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", 0x1000}], 0x6}, 0x4005)

486.599378ms ago: executing program 0 (id=2444):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x20, 0x0, [{}, {@private}]}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
syz_emit_ethernet(0x42, &(0x7f0000000e40)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000072c40fe800000000000000000000000000001ff020000000000000000000000000001", @ANYRES16=r1, @ANYRES32=r1], 0x0)
r2 = socket(0x2b, 0x1, 0x0)
listen(r2, 0x0)
ppoll(&(0x7f0000000e80)=[{r2, 0xa0}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000f00)={0x14, 0x42, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x64000048}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', <r4=>0x0, 0x8, 0x7800, 0x7, 0x1, {{0x8, 0x4, 0x3, 0x24, 0x20, 0x64, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x0, [{@remote, 0x4}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fd9}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x6b, '\x00', r4, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r5 = socket(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000600)={0xa, 0x4e1f, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="611404"], 0xa8)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000900)=[0x3, 0x5])
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x44)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="60000000fc831c607831c104f7325d8b09c37c2500db15ce51b466d4f7c6420bb4e8ae6a080af847b7813e7c0536c30094d6aaa349258c80a188ee2b76ebd9c238b78b3a8a505f0aa8747547c6874a93aa54cdef25a4254720dea9cb339b67b7c2d1a681613c9dacc83010b01b13128f3fdfb003172f6398d952677d24ca5aa50949274819", @ANYRES16=0x0, @ANYBLOB="0100000000000000000039000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x60}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast2}}}, &(0x7f0000000a00)=0x84)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)

473.695055ms ago: executing program 3 (id=2445):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1)

410.046322ms ago: executing program 4 (id=2446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0000000000000002202000ff0000000000000008000200ffffffff08000100ac1414aa00000000"], 0x2c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x128}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x128}, 0x0)
recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x62)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000008020000000000"], 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, &(0x7f00000010c0)=""/4080, 0xff0}, 0x0)
mmap(&(0x7f000087f000/0x1000)=nil, 0x1000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec779000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f00000006c0)='O', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x0, 0x0, @private2}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f00000004c0)=0x7ff, 0x4)
bind$inet6(r8, &(0x7f0000000500)={0xa, 0x8000002, 0x2004}, 0x1c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
sendto$inet6(r8, &(0x7f0000000580)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0)
close(r4)

407.187698ms ago: executing program 1 (id=2447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0)

330.130587ms ago: executing program 2 (id=2448):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@delchain={0x54, 0x64, 0xf31, 0xfffdfff9, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0)
r8 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000180)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84)

302.112322ms ago: executing program 3 (id=2449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000a000128009000100766c616e000000009000028006000100030000000c0002001a000000010000001c0004800c0001005fe7fd35ffffff7f0c00010004000000070000001c0004800c0001000100008057010000000000000000ffff06000000400003800c000100ffff0000070000000c0001000100000030636a5e0c00010001000000040200000c0001000100000009000000bdfd0100100000000000800014000300766c616e30"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xe325, 0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000400e54854f556a5c80d3a4159b6e935c2f611f1f4494b0fc32542f83d0000000072d1a91a13eb32714b25e3fef1263cad79e272bbc278298e22f9c6d589338e9f3f5f0d2ada9b6222bc3a631aac341ce7bc67dbbe237fdb6d843a346abb6356e0987be510e595a070a9431f2f89da69a2754fed089c28814e9a52d05e51dc7224c0d38d9a1fe3fae53bd3b0eaf65ee305916b36201814a450719efb3a9f09770903484fbc1f570866b0dd6c2d8231862894c6111c38a07e75baea045540b0e92a", @ANYRES16=r2, @ANYBLOB="000228bd7000fcdbdf25020000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c040)

244.813441ms ago: executing program 1 (id=2450):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"8a5f676e1b3c068c6d3cce645325cd38", <r1=>0x0, 0x0, {0xfffffffffffffff9, 0x1}, {0xe, 0x4}, 0x2, [0x9, 0x3, 0x45893950, 0x0, 0x8000000000000000, 0x4ab3000000000, 0x2, 0x4a2, 0x9, 0x0, 0x5, 0x29, 0x80000001, 0xfffffffffffffff9, 0x3, 0x2]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @empty}, 0x2, 0x3, 0x4, 0x3}}, 0x2e)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0xc090)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0xe8, 0x700001b, 0x148, 0xe8, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x12}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0xa, 0x3, 0x3, 0x2, 0x5, 0x1], 0x1, 0x4}}}, @common=@set={{0x40}, {{0x2, [0x1, 0x2, 0x0, 0x4, 0x3, 0x2], 0x1, 0x9}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000880)=r1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000800), &(0x7f0000000840)=0x4)

74.731509ms ago: executing program 3 (id=2451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x28, 0x6a, 0x501, 0x70bd26, 0x0, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x28}}, 0xc850)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000140)={0x6, 0x21724879, 0x2})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
ioctl(r0, 0x8, &(0x7f00000002c0)="6024e5239580b0d7708a41c045b822fa6453229ee1688c4e750d9a30d4bb5e7ba3c0a9c9d42408bf6238b04c551880c2104ad184d864a575ee4a3707a44733c7de9a97ce59626bdb63e601ffc345d46d072b8f153c8ae0791bcfe8107dcbdb86dba6eda9eaad96484bd7613a500d0f6aed12a710")
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
accept4$tipc(r0, 0x0, &(0x7f0000000280), 0x80000)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000200), 0x10)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x9, 0xfffffffc, 0x4, 0x7, 0x4})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="80100000f73d4e1ae07bcea5f812b8bb021a67a9fe106ea50a736ac8a1848f0d589af10a32f4d7e7b59f7de5a0c084064874519f576b992c367561ed0c464b8d95eb0e30146f03148512c5f302b29016bc430d25bccf5e", @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf254b0000000e00a80066697273746e616d650000000410a800f1ac7da9fc4c1e0e79a5e8ce69854674c0fac38c5cb1bc1f777e1788fd103dcd68e01adbf03b837e119204906e459f2be2c9675cf76d8030879f70095736ef5892d76850fa35e75557237f079403fd930e0097ac9815e323091baedb30a5e97dd0a6ff9fbed4b92880702067dbb90d9ec4ee5c7b4959c0a5ee378ec763e1a76cd75c8daec454516ef607b30551ed774a5d0a86add5e4b0e46e4167c25aab678ee2464903ce11b7a62ade5ed5e551974d6b26e91985a80b4fdcd48cab8f29388745b286e6cd8ff21aebed421435ca84e1e0d1b1c010a5c55db0ba1e9dd15ce7544045c03bc2877c6b7b5029f508e81c24f96f029250ad4623c35b91c795528ad99204f6c337380e27ed3fdd4678bab036200efb8352c7ae2783b9518e1059d8367ec2b099d9fa6fd906cd1981603039f2c45c4937a295f412c606d3c8711e7074e0b68b31f4dbe821856807b81dd3e1f2ca2488225cbb125b6c42f7d9d5d60ba9909476c4fe5bec78e6a2a0ccd9bec1e906e2bab28af29c1058e7cddc55182e59887041225f59aa7720fb2342d5830fc4e1a21882ec622c023c57e3bf987d3c076e490c0284ff31860411d6179ba6b7c483151acd21be59de84f138a756869d88222165f4ae3c80efc9ac66a279c928578effe9f25093d7be623edf207acf3b4d7d56520756fc34022f05e8932917b00a4860b71147f0cbaf28538c68ef28c59cf85dcfe68ddb8ae94989640704f37812f9ad92def5d92253d6996139a119ac6a62eb41eae645d8c43abc0abbb5efe89d2b6fd6a652eb42839ae8589ee691ac2ad4a9421e4d1cf59c41bd834bd80c0ae71882e0ee92d0910a2b8ab240dfca53d29e48ce856e7bc98c015411615e1b4acca35420d275ba7a63f6fd2b9edc168b29c920bdabed0e70aea25c773b21f4431023f0cc398fe08a321791047a79c5dba19b4af312b8d4b88326bc5e78c296114a0805f5a51767223ba2b2ec06bc8423886b82b4d9a1dbe6d94ea4591361642461767e9caf4d6fe16f265773c984213600b41caead46a101cdc51643300df11a9858040328ec06e0a24397c8423e91a5935091638622fe97f68e872872b9877530c2e176558e992b67bdd634f3303d7bbec57f93606de7f30d4119ad960425fa8c3b13ac518faca3897f5959db189c4429e2ecab992dce56bdd4c4de608702b5a599d63b92cc9340b9f8d384189e62e69cec0e451827a0f77f4a08d02bfb8f0173e199cb214c1da34d4553e321bb3752c88f53edfacce59381310f7f8bce16094f8513576040e12037b57625e95a926823c6af22c11478010f9a1f4a214d5bb7a6c6246c50ceca3025c61e95334fce40a2de7ec9f30003df09dd437fc5c47e6d296a25343ecb3eec3fc11c81ae2c8fbdadd2b8a1fc08f7e7026a4a9a484c94e617a2cc9f9a1073a43e25a9d5dcae49f988e2650688271e8de4b31aae63e8f65628a86a5e85447cdc1be7c62f7ef8570f975128d525920f89f5132478aebc59950abeae71e4f344a6564c203928663f7378e28e1a024dc4aed38e67ec83f2c9a68c899afdf289f97e7f10612cce884c9fae0369bdc96e577d8a425cda890c1675df4a7eec3af249f4ce19ab427244a8fa635f2284b16725e2de09500f9911a3d47e3865fa3fe50f682d6989ae651d7a40ddf8c832a57d367e62f438c1fdf5647a80a5a79db591a6832d9a4d6029eca12e56ee95a9dbcb9756317ad77ff44f999ae3f6ff513eae7b67d60609e15bdb50a7374a27d1224d3cec8f9c3858a2a26fa0e19e9ef131dd922afe946ec5140d2835826196df586ec8f7cafa84229873bf94018dd80a1eef4a5930979f216be80b7ec1ab5d4400612b552bc040da90e21db98616eed82394747fb04d87edfdd0f35949276c5cb885f5126b6c8f51471980d8cb7ce6b607082e66f26a57a92b14985df71eed2020f020ef0c0638d4e655fe7c628f79be4c639abf3a60774f0ac687d43a5fdedf5a22e55736e7c64247973e3436770b74145d0aae6137632b283655cdb76ae3fe280d3ccc3df148ea3568d320dab4345aff39bdef773579506060dc01668febbfc5568926cd366a795cb9ee140fefbab7f6f96fe59c845df93a2ba2622937e3f91e2341fc98e68695af71e49f2c4ba28811046d74a105c121b2350a936690c16006aadea2c41ddf90126fc5cffca6cee6ad239eedbde890b77166b361728057cc0b21cf5437731665e5e95635e9e7e09b0f3e4d6a164841ee0620a0cb8b3eb7eae01a7b76e9fae7cf3a91b60afc15c6066c2c2a333715426cff911309ba30826ede2596121a0c19bb92226ac105627d73659ccd3cd7d336b7cc3e6496ce8b659e505cec8fd35fd9260c635b9193e8d0c2d39fc93ca35621efa8870ab617c4910dc1d80cdd3cc924e61df1dde2575268d587218cbbdc9e1e1773820881234371fec957b64731d30f025c76d5bc4ce57c26b10e4b573f7878dcbd04b3527432746c1e1bdb4defec93f60ade00209a8f3122df2d8c6f662195ebb22ab1c298f47e47054782d068d9c7bf1717b08b390e2e76f1ad2d0b3c127d087db39e1bbe9250aab2457ad067946885070a00975872d1967a8688a55a4054714135918e8011b802e94c2adc064fa0e49175c081692a30e9c77344790b58bffbdd63c7386c92f41f753523f42ebb37dae0bf251497923ba05d287ec7aaba2d84a39da12b6c62a67dd490f2f9fc18adc79aeaf8ebadbc638832c5db9cdc5a4dd6f6ffbda5b8ff458948c8b135a933a86809295fd632fd7a9916ef3ffe48947250fbb64ed401457388c6a81198c21572056c71fe6a119d02be616316f1a8a8221ac9e34b0f1b2ac4d7499766813f06bbc074fc38e9c980a689ca29c93c845218bb2c60acb78b7e8d5a301bf9c961af0bcb54854a8b77cc4f7e81c237f905e129271ff419161a24cef3cc7ad3fb42a78bd9c26cc8ad0b784946a3212a1654c58da3b0aa6d2ace3b6cefbabc83218be1d504e326d5bdd92299c90656c0cce1c77153199c0927112a8a3693a6160996eae9d26ba233c3df3b79a2421422e1ddbf73a84093219895ee5f46c22d7cb53bc01f136ef9d38a124cfeb6bc21fa08413d06b3e73ab5842964a744a3ae3bc597c42a8767ad09b9ba7f05b1b572fce94aeba0a7fa1c321a07b56b58bead02590b614f0473657754367eb8d82493e4e96bf9cc3f43d107cdf5763b531a4df3ea5081ce2f7e2575def8ebec977612d409d860f563477fb34fad5b8d6862d6070606a93936ad09430309f453157cbcd7d5687fc67f4d5d076dcfe9cb19d5380a68cd15e4869ef5b065fb974b800117d21374ba8449dd75be3de07fe468617e6e1903e8bb9881b0cb07b9005d4b1c462bea4220cd882e95e86db2586a9e11892729a5a987896aca2742353fa07ce3c1b2521c14f3678609bdf15630e52be7bce48a7645447bb3412a790a6685d9cd4bd2d7f58f326049ff88539bca4ee702e6fe0158e2219829a8bc1eae594e6eb7e827471d56c007eb2ee6764caf9e7be7d9672ba481c680671f30caad4255c9813c74ac1338e6f2a21490e3b7dcfc8c68178ce00119c066293bbcb48a59ff6e18f5eacf449d58c52e3bca2dde3d75346028477d3c80c9fe8da755e64d28f4a458a1d44f9a78f934ecfcde44487c7c1abe8e559aebda8433f04cc7180ad1a72c7dec2ab311f02fad69e904cb8fc06e9417679911192f7bf845165f87bd8609ae912bbbf36c1ca4e8f92e685685465b8d6716108c994eec210d7921603a02d6eb6048822c0acfd0a67d83e0426703326df6b7bcf4faa8edb5d34fb7c8699f76884d12d2394f03e8f525206cf9b476563f95516c5eb9cb9416861ebd61763494553ec3b2e0c9c9353b3432cfce493990e115cdf2be3107282baa1ef2c5b1c551e08f09ba44ea1829071488b7c6b90c8918f7fef2af6d324c54ec769fa330b593b8ae631fce1e08cca7a1dfbfe619319da21c54ba81946e25bf7238f585ade4ef2aa75c129169dd28c41bbfc15c9bb880b2525afae0b0e97d6c99635014c30155a1ada277c093b719c804f819bd8f4624c17a70d67a34e01fadd2dec8fdb77b58e5a6ec7171720f93c378f9650de24bee6b849831c19ca55251f23c31714ad95cd7493eec780c60cd397e14e7f049051bab246bb15042ee556e9b2de8dcdab2833485c9ca31af7ef1cb2b918c97484d07d807bb2bd6210b9c6aa5f02825fa11c27386c13baf7f8653c3ab6f8c70bae0d3a6de65ec58895052a0055c74050ee9b574a2c7200ed2246eae35680f48f597f1399c739430892e93dd483e02c22c3ee55763c9d6e83fa093955474ca3b6e7f9d959fad6578b03fa0f5505efe6e4067a0548b449bd8d8547611ee59ae41344b5fd6030e88b6132f5d8fe34c8a6f9ff18202efc7070e1996dc20812a4707f1bf8dbdb83a8378d9531e4304c1ada3168eb53cb765401b188da64de99d0ca63b2cb0b80eee69aef23c0e206acddfb235d7ef460c59e7cb3a95da3e4dd0817aeec7f31a659ed9d7539193be85462df2c1f13198984e1ec340729cbe58a0f9789d48469b9c1edae4602a7737e18a194a1e51fc9903c3af97f2c5f395980e47ae6c559f2989964dd5fe6ba7613cccd0c67290cc34ee6192f72759f7d024e69fdc094057ac2b5fbb1ab7c0da41fded3179e86c203f4b6face3347224b8fdb438b739837d7ba9cf288fb3d4b61ab412d6407002d4db59518e2e42e67bd5281f2c47a7d049b5227d02cddf00802130e11e6007862beee0be5272ce3d3671189b12437b28097900e176744065ebc89620ce77bd84773c21d809a181a6fbc022c4a8c7d4b331d29172e6d4893e4c1985de22b98a2b5758152080d38b1a0029e02c2a7a6bb68941a1073997b5b80273a19de5447b4369a1bddd5f6c8f6c5998b69f04bc38e6b3ac096ec953a45f206f9d209eb0f4f52ded870d904df3f3edef314798fb950cbd803135854b3d4417e6d1ca809288c82ce868760f5a35cca5267623bc19cc8e3cf09fa0b1d5e57cc893fe0dc2798e8d75dc75f5906b99a88b05d38a857ac6f04527fa7646ceeed1ddc9a925da32c8fbf6033ce47fa715079761894082902143a8b34145aa177f948681319d253a315d44eb7c428cd5f24dafb5893f2a14f7f9bfc86274efdca1621a7fb01b5e3f8161806c43d7cab614d4fb3f3d615c3cf65a1a16ea8650bae1219c4b1e2033e82f7408bc172c4abf28004f3b7234205705ea025a669ed79302e8aae4756a9bca6beeb87908a815522e91d9839ee8a5d703090121dc415539c0aeb05e5964421a4aee236a114989e1e04aac090caac7d9dda4ae3cdcf1bb8289021358bd10f9cdd28553c9da1900bfe0178364b652446e597be39287414d62ebc88a2a6da3157e0bfe26d43fbe64f147823b2033f7855fc1d52911fa4fdaf09510e06d90ecd4a3cbc38948ebaa0e3894e26676d8f0d446886825809a8aba7d12bd68d32d5907f421ed779714d33cd1717665aa67d0792e7b8809704a385d4396cc8fada3bbb8128118380a370f58234fc51a1734e9d297c2fedc293c6b667d8acaeeaf5213a1cc3ecb36746878b593a05df6c46b4b68dab9782a2a3a19f92ac0a8217f1c919427dd31d8e219b910a6d0395ac38087ad16f27568b95b7f1d56b819596fa46c60625c7b4623fae5e3d6dfbb6ed222012b17ce7cc1b4ddf81e13202d6331e82f64520434fdc45c5cc4469d892bf384e88b65845cc7f4d014b1b678e38b24029c97c0b2c21da06fe7aeddcf456041c971604e650f00a8007365636f6e646e616d6500000c00a600b8070000000000000e00a80066697273746e616d650000000c00a60008000000000000000e00a90066697273746e616d650000000f00a9007365636f6e646e616d650000"], 0x1080}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

60.610151ms ago: executing program 3 (id=2452):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000100)=0x6, 0x4)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
socket$kcm(0xa, 0x2, 0x73)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000380)=0x7fff)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0x15, 0x0, 0x0)
sendto$packet(r7, &(0x7f00000004c0)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f0000000500)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendmsg$sock(r2, &(0x7f0000000040)={&(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfc}, 0x80, 0x0}, 0x4)
sendto$inet6(r1, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private1}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40031f0931c416d0a24964cb8f1fa600000010000100"/34, @ANYRES32=0x0, @ANYBLOB="0000000052a4000014000300627269646765300000000000000000000a0001000000000000000000"], 0x40}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="114353012008ba000000375186dd", 0xe, 0x20044805, &(0x7f0000000300)={0x11, 0xd, r9, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
shutdown(r1, 0x1)
listen(r1, 0x0)
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8)

59.099068ms ago: executing program 0 (id=2453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x331, 0x70bd29, 0xfffffffb, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050005}, 0x24810) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x331, 0x70bd29, 0xfffffffb, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050005}, 0x24810)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0xc, [{0x9, 0x16, 0x2f2}, {0x4, 0x9, 0x10}, {0x1, 0xc9, 0xce}, {0x3, 0x0, 0xde0}]}, @struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x945, [{0x9, 0x1, 0x1}, {0xf, 0x0, 0x9}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000500)=""/165, 0x8b, 0xa5, 0x1, 0x4, 0x10000}, 0x28)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010}, 0x18)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000680)="110000001000"/22, 0x16) (async)
write(r8, &(0x7f0000000680)="110000001000"/22, 0x16)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x9, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r9, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x4, 0x8}, 0xc)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r11, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f00000008c0)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r12, &(0x7f00000008c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x1b, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f4d, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x40}, @ringbuf_query, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, @cb_func={0x18, 0x1}, @map_fd={0x18, 0xc, 0x1, 0x0, r5}]}, &(0x7f0000000b40)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', r2, @sk_skb=0x4, r6, 0x8, &(0x7f0000000b80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x4, 0x200, 0x80000000}, 0x10, 0x0, r7, 0x4, &(0x7f0000000c00)=[r9, r10, r11, 0x1, r12, r13], &(0x7f0000000c40)=[{0x3, 0x1, 0x3, 0x9}, {0x3, 0x5, 0xe, 0xc}, {0x1, 0x5, 0x4, 0x1}, {0x0, 0x5, 0xc, 0xe}], 0x10, 0x9}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x45, 0x49}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x30000074)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="881600003100090027bd7000fddbdf250400000008001a80040002"], 0x1688}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

0s ago: executing program 4 (id=2454):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000200)=0x7)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
sendto$inet(r2, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x2000007, 0x13, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):


[  121.927237][ T7272] 8021q: adding VLAN 0 to HW filter on device bond26
[  121.951670][ T7272] 8021q: adding VLAN 0 to HW filter on device bond27
[  121.972461][ T7272] 8021q: adding VLAN 0 to HW filter on device bond28
[  121.999104][ T7272] 8021q: adding VLAN 0 to HW filter on device bond29
[  122.022090][ T7272] 8021q: adding VLAN 0 to HW filter on device bond30
[  122.039774][ T7272] 8021q: adding VLAN 0 to HW filter on device bond31
[  122.063735][ T7272] 8021q: adding VLAN 0 to HW filter on device bond32
[  122.086330][ T7272] 8021q: adding VLAN 0 to HW filter on device bond33
[  122.163693][ T7308] bond34: entered promiscuous mode
[  122.164100][ T7308] 8021q: adding VLAN 0 to HW filter on device bond34
[  122.194451][ T7308] bond34: (slave bridge3): making interface the new active one
[  122.194475][ T7308] bridge3: entered promiscuous mode
[  122.195516][ T7308] bond34: (slave bridge3): Enslaving as an active interface with an up link
[  123.001240][ T7206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.457833][ T5652] Bluetooth: hci3: unexpected event 0x34 length: 37 > 6
[  123.458830][ T7339] veth1_to_hsr: entered allmulticast mode
[  123.686446][ T7351] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  123.839981][ T7361] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  123.869980][ T7361] 0ªX¹¦Dö»: entered allmulticast mode
[  123.948924][ T7371] ieee802154 phy0 wpan0: encryption failed: -22
[  124.292042][ T7390] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  124.374404][ T7395] __nla_validate_parse: 6 callbacks suppressed
[  124.374424][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'.
[  124.652286][ T7420] validate_nla: 27 callbacks suppressed
[  124.652307][ T7420] netlink: 'syz.1.402': attribute type 1 has an invalid length.
[  124.718630][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.777583][ T7438] erspan0: entered promiscuous mode
[  124.777600][ T7438] erspan0: entered allmulticast mode
[  126.093690][ T7458] syz_tun: entered allmulticast mode
[  126.925042][ T7455] syz_tun: left allmulticast mode
[  127.571622][ T7409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.771986][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'.
[  127.792871][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'.
[  127.792893][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'.
[  127.803454][ T7470] vcan0: tx drop: invalid da for name 0x0000000000000002
[  127.866937][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'.
[  128.438849][ T7503] syzkaller1: entered promiscuous mode
[  128.438873][ T7503] syzkaller1: entered allmulticast mode
[  128.484873][ T7508] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  128.549240][ T7508] bond13: entered promiscuous mode
[  128.549696][ T7508] 8021q: adding VLAN 0 to HW filter on device bond13
[  128.607454][ T7512] bond13: (slave bridge3): making interface the new active one
[  128.607479][ T7512] bridge3: entered promiscuous mode
[  128.610803][ T7512] bond13: (slave bridge3): Enslaving as an active interface with an up link
[  128.769574][ T7523] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  128.957424][ T7525] bond13: (slave bridge4): Enslaving as a backup interface with an up link
[  129.108543][  T116] IPVS: starting estimator thread 0...
[  129.109203][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.109421][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.109587][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.109738][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.109888][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.110040][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.110195][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.122284][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.122528][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.122699][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.193731][ T7549] IPVS: using max 28 ests per chain, 67200 per kthread
[  129.358798][ T7559] IPVS: Scheduler module ip_vs_mh  not found
[  129.916988][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'.
[  129.954287][ T7596] netlink: 72 bytes leftover after parsing attributes in process `syz.3.448'.
[  130.040880][ T7599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.213999][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.214263][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.214488][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.219803][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.220055][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.220281][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.220484][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.220691][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  130.683899][ T7643] bond35: entered promiscuous mode
[  130.683963][ T7643] bond35: entered allmulticast mode
[  130.684448][ T7643] 8021q: adding VLAN 0 to HW filter on device bond35
[  130.853300][ T7658] ip6gretap0: entered promiscuous mode
[  130.855339][ T7658] syz_tun: entered promiscuous mode
[  131.060725][ T7664] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  131.264414][ T7681] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  131.264436][ T7681] netlink: 'syz.3.464': attribute type 2 has an invalid length.
[  131.552786][ T7684] syz.4.469 (7684) used greatest stack depth: 18112 bytes left
[  132.873349][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873419][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  133.921116][ T7664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.122986][ T7725] ipt_rpfilter: unknown options
[  134.376246][ T7741] netlink: 'syz.2.484': attribute type 9 has an invalid length.
[  134.380204][ T7743] x_tables: duplicate underflow at hook 2
[  134.407066][ T7745] x_tables: duplicate underflow at hook 2
[  134.806414][ T7752] netlink: 'syz.3.487': attribute type 10 has an invalid length.
[  134.819241][ T7752] geneve2: entered promiscuous mode
[  134.819268][ T7752] geneve2: entered allmulticast mode
[  135.275424][ T7783] __nla_validate_parse: 37 callbacks suppressed
[  135.275446][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'.
[  135.496393][ T7789] netlink: 'syz.1.498': attribute type 58 has an invalid length.
[  135.496937][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'.
[  135.571970][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'.
[  135.579989][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[  135.755538][ T7808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.504'.
[  135.837783][ T7813] bond36: option primary: mode dependency failed, not supported in mode balance-xor(2)
[  135.840493][ T7813] bond36 (unregistering): Released all slaves
[  135.946558][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'.
[  135.967418][ T7824] netlink: 'syz.4.510': attribute type 1 has an invalid length.
[  135.987619][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.011274][ T7824] bond1: (slave veth0_to_bond): making interface the new active one
[  136.022488][ T7824] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  136.029549][ T7824] bond1: entered promiscuous mode
[  136.029574][ T7824] veth0_to_bond: entered promiscuous mode
[  136.029761][ T7824] bond1: entered allmulticast mode
[  136.029775][ T7824] veth0_to_bond: entered allmulticast mode
[  136.600551][ T7847] netlink: 'syz.0.515': attribute type 4 has an invalid length.
[  136.600576][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'.
[  136.611008][ T7849] netlink: 'syz.0.515': attribute type 4 has an invalid length.
[  136.611028][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'.
[  136.704078][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.4.518'.
[  136.739800][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.520'.
[  136.753468][ T7856] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  136.755111][ T7856] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 !
[  136.945001][ T7865] syzkaller0: entered promiscuous mode
[  136.945024][ T7865] syzkaller0: entered allmulticast mode
[  136.978586][ T7865] syzkaller1: entered promiscuous mode
[  136.978610][ T7865] syzkaller1: entered allmulticast mode
[  137.068285][ T7869] raw_sendmsg: syz.4.523 forgot to set AF_INET. Fix it!
[  137.092130][ T7873] netlink: 'syz.0.524': attribute type 3 has an invalid length.
[  137.189397][ T7877] 0ªî{X¹¦: left allmulticast mode
[  137.343932][ T7888] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[  137.453346][ T7888] bond4: option mode: invalid value (7)
[  137.455789][ T7888] bond4 (unregistering): Released all slaves
[  137.609677][ T7904] net_ratelimit: 23 callbacks suppressed
[  137.609696][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.610079][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.610499][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.611023][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.611400][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.654325][ T7899] bridge5: the hash_elasticity option has been deprecated and is always 16
[  137.678472][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.678955][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.679372][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.679804][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.680279][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.924870][ T7920] netlink: 'syz.4.536': attribute type 21 has an invalid length.
[  137.948765][ T7920] bridge0: entered promiscuous mode
[  137.948790][ T7920] bridge0: entered allmulticast mode
[  137.966815][ T7920] team0: Port device bridge0 added
[  137.987923][ T7920] bridge0: port 1(team0) entered blocking state
[  137.988078][ T7920] bridge0: port 1(team0) entered disabled state
[  137.989036][ T7920] team0: entered allmulticast mode
[  137.989056][ T7920] team_slave_0: entered allmulticast mode
[  137.989090][ T7920] team_slave_1: entered allmulticast mode
[  138.032809][ T7920] team0: left allmulticast mode
[  138.032835][ T7920] team_slave_0: left allmulticast mode
[  138.032854][ T7920] team_slave_1: left allmulticast mode
[  138.390478][ T7952] x_tables: duplicate underflow at hook 1
[  138.408225][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.408364][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.408475][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.408584][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.408701][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.410536][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.410634][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.410762][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.410872][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.410978][ T7960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.533458][ T7964] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[  138.569009][ T7950] syzkaller1: entered promiscuous mode
[  138.569032][ T7950] syzkaller1: entered allmulticast mode
[  138.668915][ T7964] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.681058][ T7968] bridge6: entered promiscuous mode
[  138.690582][ T7968] bond4: (slave bridge6): making interface the new active one
[  138.699313][ T7968] bond4: (slave bridge6): Enslaving as an active interface with an up link
[  138.926129][ T7977] 8021q: adding VLAN 0 to HW filter on device bond14
[  138.927777][ T7983] bond0: option ad_select: unable to set because the bond device is up
[  139.030271][ T7989] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  139.827704][ T8045] lo: entered promiscuous mode
[  139.844950][ T8045] tunl0: entered promiscuous mode
[  139.859647][ T8045] gre0: entered promiscuous mode
[  139.903170][ T8045] 0ªX¹¦Dö»: entered promiscuous mode
[  139.903194][ T8045] 0ªX¹¦Dö»: left allmulticast mode
[  139.926534][ T8045] erspan0: entered promiscuous mode
[  139.948331][ T8045] ip_vti0: entered promiscuous mode
[  140.082546][ T8058] batman_adv: batadv0: Adding interface: syzkaller0
[  140.082571][ T8058] batman_adv: batadv0: Interface activated: syzkaller0
[  140.326014][ T8082] tipc: Enabled bearer <udp:syz0>, priority 10
[  140.409585][ T8084] tap0: tun_chr_ioctl cmd 1074025676
[  140.409609][ T8084] tap0: owner set to 0
[  140.431397][ T8088] sctp: [Deprecated]: syz.2.587 (pid 8088) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.431397][ T8088] Use struct sctp_sack_info instead
[  140.616275][ T8099] vcan0: left promiscuous mode
[  140.713284][ T8099] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.725930][ T8099] bridge3: left promiscuous mode
[  140.730867][ T8099] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.749171][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.749309][ T6777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.785414][ T8104] netlink: 'syz.2.592': attribute type 1 has an invalid length.
[  141.124038][ T8119] bond15 (unregistering): Released all slaves
[  141.397231][ T8135] __nla_validate_parse: 19 callbacks suppressed
[  141.397251][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.603'.
[  141.591158][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'.
[  141.594478][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'.
[  142.149958][ T8194] xt_hashlimit: size too large, truncated to 1048576
[  142.452244][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'.
[  142.452308][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'.
[  142.558322][ T8217] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  142.576371][ T8217] bond15 (unregistering): Released all slaves
[  142.593730][ T8219] netlink: 144 bytes leftover after parsing attributes in process `syz.3.620'.
[  142.605924][ T8220] netlink: 'syz.2.621': attribute type 1 has an invalid length.
[  142.647097][ T8220] Cannot find del_set index 0 as target
[  142.649214][ T8220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'.
[  142.755499][ T8223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.622'.
[  143.055610][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  143.153529][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'.
[  143.184323][ T8247] bond2: entered allmulticast mode
[  143.184881][ T8247] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.305815][ T8254] net_ratelimit: 27 callbacks suppressed
[  143.305838][ T8254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.141178][ T8297] netlink: 'syz.0.646': attribute type 8 has an invalid length.
[  144.141203][ T8297] sch_fq: defrate 0 ignored.
[  144.187561][ T8298] netlink: 'syz.0.646': attribute type 8 has an invalid length.
[  144.187586][ T8298] sch_fq: defrate 0 ignored.
[  144.350912][ T5646] block nbd2: Receive control failed (result -32)
[  144.351113][ T5652] block nbd1: Receive control failed (result -32)
[  144.807562][ T8323] nftables ruleset with unbound chain
[  144.839164][ T8330] rxe_eth0 speed is unknown, defaulting to 1000
[  145.027083][ T8341] ieee802154 phy0 wpan0: encryption failed: -22
[  145.050021][ T8338] lo: entered allmulticast mode
[  145.151117][ T8347] 8021q: VLANs not supported on wg0
[  145.164136][ T8347] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  145.369265][ T8358] Bluetooth: MGMT ver 1.23
[  145.547518][ T8364] Bluetooth: hci0: unsupported parameter 5135
[  145.547539][ T8364] Bluetooth: hci0: unsupported parameter 8192
[  145.547551][ T8364] Bluetooth: hci0: unsupported parameter 5135
[  145.547562][ T8364] Bluetooth: hci0: unsupported parameter 8192
[  145.750564][ T8375] netlink: 'syz.4.668': attribute type 5 has an invalid length.
[  145.750805][ T8376] netlink: 'syz.4.668': attribute type 5 has an invalid length.
[  146.249176][ T8394] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  146.267369][ T8394] 0ªî{X¹¦: entered allmulticast mode
[  146.269653][ T8394] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  146.403208][ T8394] __nla_validate_parse: 9 callbacks suppressed
[  146.403241][ T8394] netlink: 52 bytes leftover after parsing attributes in process `syz.2.672'.
[  146.408669][ T8396] netlink: 41 bytes leftover after parsing attributes in process `syz.0.675'.
[  146.450541][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'.
[  146.497018][ T8403] 8021q: VLANs not supported on vcan0
[  146.520122][ T8405] Cannot find map_set index 135 as target
[  146.599560][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.679'.
[  146.607122][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.679'.
[  146.632932][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'.
[  146.633009][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'.
[  146.647447][ T8408] netlink: 576 bytes leftover after parsing attributes in process `syz.0.679'.
[  146.738479][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'.
[  146.740617][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'.
[  146.775946][ T8414] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  146.786718][ T8414] bond5 (unregistering): Released all slaves
[  147.148827][ T8431] netlink: 'syz.3.686': attribute type 1 has an invalid length.
[  147.518413][ T8460] netlink: 'syz.0.698': attribute type 1 has an invalid length.
[  147.800758][ T8479] ip_tables: iptables: counters copy to user failed while replacing table
[  148.115806][ T8498] h: entered promiscuous mode
[  148.263988][ T8515] netlink: 'syz.0.715': attribute type 2 has an invalid length.
[  148.265607][ T8515] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  148.459662][ T8521] bond36: (slave bridge0): Device is not bonding slave
[  148.459789][ T8521] bond36: option active_slave: invalid value (bridge0)
[  148.463270][ T8521] bond36 (unregistering): Released all slaves
[  148.503696][ T8519] syzkaller0: entered promiscuous mode
[  148.503721][ T8519] syzkaller0: entered allmulticast mode
[  148.600858][ T8530] syzkaller1: entered promiscuous mode
[  148.600882][ T8530] syzkaller1: entered allmulticast mode
[  148.877621][   T13] wlan1: Trigger new scan to find an IBSS to join
[  150.026840][ T8594] syzkaller0: entered promiscuous mode
[  150.026864][ T8594] syzkaller0: entered allmulticast mode
[  150.081160][ T8600] x_tables: duplicate entry at hook 4
[  150.159787][  T316] block nbd0: Possible stuck request ffff8880290be000: control (read@0,4096B). Runtime 30 seconds
[  150.268446][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.369002][ T8615] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[  150.369025][ T8615] netlink: 'syz.1.745': attribute type 268 has an invalid length.
[  150.381682][ T8615] openvswitch: netlink: Tunnel attr 7 has unexpected len 380 expected 0
[  150.698258][ T8635] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  150.981314][ T8657] sctp: [Deprecated]: syz.0.757 (pid 8657) Use of int in maxseg socket option.
[  150.981314][ T8657] Use struct sctp_assoc_value instead
[  151.100431][ T8660] bridge_slave_0: invalid flags given to default FDB implementation
[  151.233463][ T8668] tipc: Enabling of bearer <if:i> rejected, media not registered
[  151.260455][ T8670] openvswitch: netlink: Key type 31 is not supported
[  151.279718][ T8672] netlink: 'syz.4.762': attribute type 1 has an invalid length.
[  151.365401][ T8672] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.459981][ T8676] bond3: (slave veth5): Enslaving as an active interface with a down link
[  151.529749][ T8672] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  151.546216][ T8672] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  151.804486][ T8709] __nla_validate_parse: 21 callbacks suppressed
[  151.804511][ T8709] netlink: 9 bytes leftover after parsing attributes in process `syz.2.773'.
[  151.806037][ T8709] 0ªî{X¹¦: entered promiscuous mode
[  151.806062][ T8709] 0ªî{X¹¦: left allmulticast mode
[  151.810794][ T8709] netlink: 5 bytes leftover after parsing attributes in process `syz.2.773'.
[  151.810920][ T8709] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  151.825766][ T8709] 1ªî{X¹¦: left promiscuous mode
[  151.825791][ T8709] 1ªî{X¹¦: entered allmulticast mode
[  151.830099][ T8709] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  151.913636][   T43] wlan1: Trigger new scan to find an IBSS to join
[  151.935401][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'.
[  151.935398][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'.
[  151.935427][ T8714] netlink: 'syz.2.775': attribute type 6 has an invalid length.
[  152.026314][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[  152.053090][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[  152.133758][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.777'.
[  152.307089][ T8727] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  152.309321][ T8727] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  152.310052][ T8727] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  152.366833][ T8727] syzkaller1: entered promiscuous mode
[  152.366850][ T8727] syzkaller1: entered allmulticast mode
[  152.701840][ T8747] IPVS: ip_vs_add_dest(): server weight less than zero
[  152.779143][ T8750] ebt_limit: overflow, try lower: 0/0
[  152.866550][ T8758] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  153.131001][ T8772] netlink: 'syz.0.792': attribute type 3 has an invalid length.
[  153.131100][ T8770] netlink: 'syz.0.792': attribute type 3 has an invalid length.
[  153.160168][ T8776] xt_LOG: level 8 >= 8
[  153.435101][ T8797] ip6t_hbh: Not strict - not implemented
[  153.491039][ T8799] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  153.545220][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.797'.
[  153.545264][ T8790] netlink: 10 bytes leftover after parsing attributes in process `syz.4.797'.
[  153.723970][ T8790] netlink: 10 bytes leftover after parsing attributes in process `syz.4.797'.
[  153.848928][   T29] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  153.860122][ T8814] macsec1: entered promiscuous mode
[  153.867721][ T8814] macsec1: entered allmulticast mode
[  153.867749][ T8814] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  153.884435][ T8814] 8021q: adding VLAN 0 to HW filter on device macsec1
[  153.900287][ T8814] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  154.070370][   T29] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  154.124198][ T7263] udevd[7263]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  154.309803][ T8835] netlink: 'syz.3.810': attribute type 1 has an invalid length.
[  154.694985][ T8866] syzkaller0: left promiscuous mode
[  154.695008][ T8866] syzkaller0: left allmulticast mode
[  154.872021][   T43] wlan1: Trigger new scan to find an IBSS to join
[  155.160159][ T8888] netlink: 'syz.4.823': attribute type 10 has an invalid length.
[  155.183469][ T8888] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  155.202741][ T8888] team0: Port device wlan0 added
[  155.233192][ T8866] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  155.621268][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  155.635844][ T8914] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  155.635868][ T8914] netlink: 'syz.2.832': attribute type 2 has an invalid length.
[  155.734157][ T8921] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  155.758327][ T6778] wlan1: Creating new IBSS network, BSSID 8e:8c:03:44:fe:12
[  156.471990][ T5652] Bluetooth: hci0: command 0x0c13 tx timeout
[  156.474394][ T5646] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  156.828441][ T8941] __nla_validate_parse: 13 callbacks suppressed
[  156.828455][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'.
[  157.043506][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'.
[  158.489825][ T8906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.654698][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'.
[  158.718161][ T8952] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  158.726641][ T8953] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  158.797344][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'.
[  159.007196][ T8981] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  159.008486][ T8981] bond3 (unregistering): Released all slaves
[  161.733249][ T8958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.901107][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'.
[  161.969170][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969210][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969235][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969267][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969292][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969315][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969338][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969362][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969385][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969406][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969428][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969448][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969472][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969495][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969518][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969539][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969561][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969583][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969607][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969630][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969653][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969677][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969700][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969723][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969747][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969770][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969794][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969818][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969841][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969863][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.969886][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983104][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983136][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983160][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983183][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983205][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983228][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983251][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983282][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983305][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983328][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983350][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983373][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983396][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983453][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983476][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983500][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983521][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983544][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983567][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983589][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983612][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983634][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983657][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983679][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983702][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983724][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983746][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983769][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983792][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983814][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983836][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983859][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983881][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  161.983904][ T9000] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  162.524642][ T9024] openvswitch: netlink: Message has 6 unknown bytes.
[  162.559841][ T9025] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.637607][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'.
[  162.851030][ T9037] netlink: 72 bytes leftover after parsing attributes in process `syz.0.861'.
[  162.851059][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'.
[  162.851074][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[  162.925318][ T9043] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  162.933291][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.861'.
[  162.937462][ T9043] xt_hashlimit: size too large, truncated to 1048576
[  163.351641][ T9063] netlink: 'syz.2.869': attribute type 12 has an invalid length.
[  163.409386][ T9067] Bluetooth: hci0: unsupported parameter 5135
[  163.409412][ T9067] Bluetooth: hci0: unsupported parameter 8192
[  163.409425][ T9067] Bluetooth: hci0: unsupported parameter 5135
[  163.409437][ T9067] Bluetooth: hci0: unsupported parameter 8192
[  163.439038][ T9063] bond15: option primary_reselect: invalid value (255)
[  163.450986][ T9063] bond15 (unregistering): Released all slaves
[  163.538353][ T9069] rxe_eth0 speed is unknown, defaulting to 1000
[  163.903067][ T9089] netlink: 'syz.4.877': attribute type 5 has an invalid length.
[  163.959674][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'.
[  163.959712][ T9089] netlink: 'syz.4.877': attribute type 30 has an invalid length.
[  164.014991][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'.
[  164.015027][ T9090] netlink: 'syz.4.877': attribute type 30 has an invalid length.
[  164.076218][ T9096] netlink: 'syz.4.877': attribute type 5 has an invalid length.
[  164.090620][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'.
[  164.090667][ T9097] netlink: 'syz.4.877': attribute type 30 has an invalid length.
[  164.092015][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'.
[  164.092043][ T9098] netlink: 'syz.4.877': attribute type 30 has an invalid length.
[  164.127740][ T9090] netlink: 'syz.4.877': attribute type 5 has an invalid length.
[  164.214333][ T9097] netlink: 'syz.4.877': attribute type 5 has an invalid length.
[  164.492536][ T9119] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (11337696) !
[  166.326121][ T9067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.451689][  T116] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.451725][  T116] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.510737][ T9134] netlink: 'syz.0.887': attribute type 7 has an invalid length.
[  166.652361][ T9143] bond4: entered promiscuous mode
[  166.652868][ T9143] 8021q: adding VLAN 0 to HW filter on device bond4
[  167.311360][ T9175] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  167.345947][ T9175] __nla_validate_parse: 68 callbacks suppressed
[  167.345976][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'.
[  167.534672][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.902'.
[  167.604301][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[  167.753784][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'.
[  167.760351][ T9204] xfrm0: entered promiscuous mode
[  167.760372][ T9204] xfrm0: entered allmulticast mode
[  167.760995][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'.
[  167.800260][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'.
[  167.810299][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'.
[  167.820464][ T9210] block nbd3: Unsupported socket: should be TCP or UNIX.
[  168.051137][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  168.280485][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'.
[  168.629141][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.915'.
[  169.246644][ T9264] validate_nla: 131 callbacks suppressed
[  169.246667][ T9264] netlink: 'syz.4.923': attribute type 1 has an invalid length.
[  169.279959][ T9264] 8021q: adding VLAN 0 to HW filter on device bond5
[  169.342458][ T9264] bond5: (slave veth7): Enslaving as an active interface with a down link
[  169.362285][ T9264] bond5: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  169.462858][ T9272] netlink: 'syz.4.927': attribute type 16 has an invalid length.
[  169.462904][ T9272] veth0_macvtap: entered allmulticast mode
[  169.497912][ T9274] ip_tables: iptables: counters copy to user failed while replacing table
[  169.498911][ T9197] NFSD: Failed to start, no listeners configured.
[  169.511603][ T9274] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:21
[  169.566027][ T9277] x_tables: duplicate underflow at hook 2
[  169.566160][ T9276] x_tables: duplicate underflow at hook 2
[  169.589561][ T9276] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.683970][ T5646] Bluetooth: hci0: Unexpected cc 0x2753 with no status
[  169.685387][ T5646] Bluetooth: hci0: Unexpected cc 0x2753 with no status
[  170.374904][ T9316] netlink: 'syz.2.941': attribute type 1 has an invalid length.
[  170.374943][ T9316] block nbd0: NBD_DISCONNECT
[  170.375045][ T9316] block nbd0: Send disconnect failed -32
[  170.375064][ T9316] block nbd0: shutting down sockets
[  170.438276][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.438473][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.460267][ T2014] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.460307][ T2014] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.475240][ T2014] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.475287][ T2014] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.476750][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.476902][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.477058][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.477081][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.477227][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.477250][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.477369][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.477391][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.477719][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.477756][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.478792][ T7145] ldm_validate_partition_table(): Disk read failed.
[  170.478958][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.478986][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.479106][  T316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  170.479130][  T316] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.479413][ T7145] Dev nbd0: unable to read RDB block 0
[  170.481178][ T7145]  nbd0: unable to read partition table
[  170.552079][ T7145] ldm_validate_partition_table(): Disk read failed.
[  170.552830][ T7145] Dev nbd0: unable to read RDB block 0
[  170.554277][ T7145]  nbd0: unable to read partition table
[  170.934630][ T9324] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  170.934651][ T9324] netlink: 'syz.1.944': attribute type 2 has an invalid length.
[  170.934662][ T9324] netlink: 'syz.1.944': attribute type 3 has an invalid length.
[  171.291974][ T9334] veth1_macvtap: left promiscuous mode
[  171.292004][ T9334] macsec0: entered promiscuous mode
[  171.511576][ T9347] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  171.652605][ T9357] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  172.025321][ T9369] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  172.026045][ T9366] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  172.784006][ T5646] Bluetooth: hci2: Malformed Event: 0x02
[  172.800863][ T9390] syzkaller0: left promiscuous mode
[  172.800886][ T9390] syzkaller0: left allmulticast mode
[  172.840969][ T9390] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  173.035619][ T9399] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  173.382745][ T9416] __nla_validate_parse: 19 callbacks suppressed
[  173.382767][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'.
[  173.498769][ T9414] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  173.512806][ T6777] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.512856][ T6777] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.512890][ T6777] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.512924][ T6777] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.857822][ T6777] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.857875][ T6777] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.857910][ T6777] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.857943][ T6777] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.442394][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'.
[  175.200862][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.276341][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.276597][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'.
[  175.310946][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.311538][ T9486] xt_ipcomp: unknown flags 1D
[  175.322456][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.338207][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.338871][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.363796][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  175.693673][ T9502] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  176.008281][ T9517] syzkaller0: entered promiscuous mode
[  176.008306][ T9517] syzkaller0: entered allmulticast mode
[  176.014500][ T9517] 0: reclassify loop, rule prio 0, protocol 800
[  176.306889][ T9525] IPVS: length: 185 != 8
[  176.320491][ T9528] Cannot find add_set index 4 as target
[  176.669936][ T9542] netlink: 'syz.4.993': attribute type 1 has an invalid length.
[  177.159250][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.180307][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.235943][ T9572] xfrm0: entered promiscuous mode
[  177.540356][   T30] audit: type=1800 audit(1793982458.040:2): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1049 res=0 errno=-22
[  177.567234][   T30] audit: type=1804 audit(1793982458.070:3): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1005" name="/newroot/202/memory.events" dev="tmpfs" ino=1049 res=1 errno=0
[  178.125740][ T9613] xt_socket: unknown flags 0xc
[  178.234157][ T9617] netlink: 'syz.2.1014': attribute type 10 has an invalid length.
[  178.396477][ T9622] ip_tables: iptables: counters copy to user failed while replacing table
[  178.566569][ T9627] syzkaller0: entered promiscuous mode
[  178.566594][ T9627] syzkaller0: entered allmulticast mode
[  178.576185][ T9629] __nla_validate_parse: 9 callbacks suppressed
[  178.576206][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  178.619481][ T9629] bond36: entered promiscuous mode
[  178.619545][ T9629] bond36: entered allmulticast mode
[  178.620053][ T9629] 8021q: adding VLAN 0 to HW filter on device bond36
[  179.113963][ T9645] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  179.141266][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'.
[  179.141297][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.141316][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.175355][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.175384][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.279941][ T9647] sit0: entered promiscuous mode
[  179.296051][ T9647] netlink: 'syz.4.1028': attribute type 1 has an invalid length.
[  179.296078][ T9647] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1028'.
[  179.516972][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  179.518407][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  179.673171][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'.
[  179.698823][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'.
[  180.149032][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'.
[  180.170770][ T9707] netlink: 'syz.0.1044': attribute type 1 has an invalid length.
[  180.208901][ T5646] Bluetooth: hci3: unexpected cc 0x100c length: 5 > 3
[  180.244318][ T9711] netlink: 'syz.0.1044': attribute type 1 has an invalid length.
[  180.781826][ T9705] hsr_slave_0: left promiscuous mode
[  180.836063][ T9705] hsr_slave_1: left promiscuous mode
[  181.174747][ T9751] netlink: 'syz.4.1054': attribute type 3 has an invalid length.
[  181.217381][ T9753] netlink: 'syz.0.1051': attribute type 4 has an invalid length.
[  181.217408][ T9753] netlink: 'syz.0.1051': attribute type 21 has an invalid length.
[  181.492000][   T43] IPVS: starting estimator thread 0...
[  181.492216][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'.
[  181.493882][ T9761] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  181.584074][ T9768] IPVS: using max 34 ests per chain, 81600 per kthread
[  182.110279][ T9782] netlink: 'syz.4.1063': attribute type 1 has an invalid length.
[  182.274200][ T9782] 8021q: adding VLAN 0 to HW filter on device bond6
[  182.464495][ T9793] bond6: (slave geneve2): making interface the new active one
[  182.484553][ T9793] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  182.611841][ T9808] Cannot find del_set index 0 as target
[  182.743970][ T9820] Cannot find del_set index 0 as target
[  182.780101][ T9814] ip_tables: iptables: counters copy to user failed while replacing table
[  182.896813][ T9814] syzkaller1: entered promiscuous mode
[  182.896841][ T9814] syzkaller1: entered allmulticast mode
[  182.900972][ T9814] sit0: entered promiscuous mode
[  182.981320][ T9814] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  182.981347][ T9814] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1071'.
[  183.515172][ T9848] bond7 (unregistering): Released all slaves
[  183.651753][ T9860] __nla_validate_parse: 1 callbacks suppressed
[  183.651776][ T9860] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1076'.
[  183.750050][ T9865] batman_adv: batadv0: Adding interface: syzkaller0
[  183.750074][ T9865] batman_adv: batadv0: Interface activated: syzkaller0
[  183.856258][ T9869] netlink: 'syz.4.1079': attribute type 16 has an invalid length.
[  183.856283][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1079'.
[  184.139456][ T9885] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1081'.
[  184.434163][ T9899] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  184.521501][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'.
[  184.573281][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.990406][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  184.990464][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  185.030123][ T9934] netlink: 'syz.3.1098': attribute type 10 has an invalid length.
[  185.030554][ T9935] netlink: 'syz.3.1098': attribute type 10 has an invalid length.
[  185.039688][ T9934] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  185.075571][ T9934] bridge0: port 1(netdevsim1) entered blocking state
[  185.075692][ T9934] bridge0: port 1(netdevsim1) entered disabled state
[  185.085175][ T9934] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  185.220659][ T9942] netlink: 'syz.4.1099': attribute type 13 has an invalid length.
[  185.220685][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'.
[  185.224628][ T9942] netlink: 'syz.4.1099': attribute type 13 has an invalid length.
[  185.224653][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'.
[  185.252969][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'.
[  185.286706][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'.
[  185.477556][ T9948] nbd: must specify at least one socket
[  185.757770][ T9969] netlink: 'syz.3.1109': attribute type 1 has an invalid length.
[  185.765583][ T9969] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  185.796185][ T6779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  186.367025][ T9990] bond3: option arp_all_targets: invalid value (18446744073709551613)
[  186.383843][ T9990] bond3 (unregistering): Released all slaves
[  186.641000][T10007] Cannot find add_set index 4 as target
[  186.770825][T10018] xt_hashlimit: size too large, truncated to 1048576
[  186.841292][T10023] xt_hashlimit: size too large, truncated to 1048576
[  187.379447][T10053] IPv6: sit3: Disabled Multicast RS
[  187.510072][T10062] wireguard0: entered promiscuous mode
[  187.594695][T10064] netlink: 'syz.3.1137': attribute type 2 has an invalid length.
[  187.971362][T10079] netlink: ct family unspecified
[  187.985893][T10080] netlink: ct family unspecified
[  188.006670][ T5646] block nbd0: Receive control failed (result -32)
[  188.129423][T10092] xt_connbytes: Forcing CT accounting to be enabled
[  188.129689][T10092] set match dimension is over the limit!
[  188.399083][T10098] hsr_slave_1 (unregistering): left promiscuous mode
[  188.428154][T10104] 0ªî{X¹¦: entered promiscuous mode
[  188.428178][T10104] 0ªî{X¹¦: left allmulticast mode
[  188.437581][T10108] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  188.449957][T10108] 1ªî{X¹¦: left promiscuous mode
[  188.449978][T10108] 1ªî{X¹¦: entered allmulticast mode
[  188.464689][T10108] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  188.559273][T10104] 1ªî{X¹¦: entered promiscuous mode
[  188.559297][T10104] 1ªî{X¹¦: left allmulticast mode
[  188.680149][T10104] __nla_validate_parse: 15 callbacks suppressed
[  188.680170][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.680704][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.683872][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.685112][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.685493][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.687093][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.688189][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.689792][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.690387][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  188.690732][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1146'.
[  194.314808][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  206.632248][ T5638] Bluetooth: hci2: command 0x0406 tx timeout
[  206.634800][ T5643] Bluetooth: hci3: command 0x0406 tx timeout
[  206.634867][ T5652] Bluetooth: hci1: command 0x0406 tx timeout
[  212.435737][ T4952] Bluetooth: hci2: ACL packet for unknown connection handle 3484
[  212.436406][T10178] __nla_validate_parse: 15 callbacks suppressed
[  212.436420][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1160'.
[  212.473872][T10178] bond0: (slave bond_slave_0): Releasing backup interface
[  212.509571][T10187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1163'.
[  212.530891][T10178] bond_slave_0: entered promiscuous mode
[  212.530917][T10178] bond_slave_0: entered allmulticast mode
[  212.740330][T10205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1167'.
[  213.224269][T10224] openvswitch: netlink: Actions may not be safe on all matching packets
[  214.218541][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'.
[  214.260451][T10273] netlink: 'syz.2.1177': attribute type 1 has an invalid length.
[  214.282818][T10273] 8021q: adding VLAN 0 to HW filter on device bond15
[  214.309707][T10273] bond15: (slave geneve2): making interface the new active one
[  214.322599][T10273] bond15: (slave geneve2): Enslaving as an active interface with an up link
[  214.409753][T10276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1178'.
[  214.464635][T10280] ip_tables: iptables: counters copy to user failed while replacing table
[  214.578366][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'.
[  215.436761][T10180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.739769][T10292] IPv6: NLM_F_CREATE should be specified when creating new route
[  215.739867][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'.
[  216.067803][T10313] mac80211_hwsim hwsim5 ÿ
: renamed from wlan1 (while UP)
[  216.413398][T10339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1193'.
[  216.419136][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  216.598433][T10351] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1196'.
[  216.721662][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  216.957134][T10372] bond16: option downdelay: invalid value (18446744073709551615)
[  216.957159][T10372] bond16: option downdelay: allowed values 0 - 2147483647
[  216.962618][T10372] bond16 (unregistering): Released all slaves
[  217.250758][T10344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.257645][T10387] syz.0.1204 (10387) used greatest stack depth: 17992 bytes left
[  217.457816][T10393] netlink: 'syz.4.1208': attribute type 10 has an invalid length.
[  217.481684][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.485959][T10393] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  217.900048][T10423] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

(�h\E3�~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð<
[  217.983832][T10431] __nla_validate_parse: 4 callbacks suppressed
[  217.983854][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'.
[  217.999706][T10431] IPVS: ip_vs_edit_dest(): server weight less than zero
[  218.066764][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'.
[  218.066814][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'.
[  218.094780][T10431] ip6gretap0: entered promiscuous mode
[  218.096813][T10431] syz_tun: entered promiscuous mode
[  218.097540][T10431] debugfs: 'hsr1' already exists in 'hsr'
[  218.097562][T10431] Cannot create hsr debugfs directory
[  218.136741][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1221'.
[  218.139374][T10441] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1221'.
[  218.162709][T10441] netlink: 'syz.4.1221': attribute type 9 has an invalid length.
[  218.295121][T10445] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1227'.
[  218.616898][T10471] bridge0: entered promiscuous mode
[  218.616923][T10471] bridge0: entered allmulticast mode
[  218.693502][T10478] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  218.716087][ T4952] Bluetooth: hci2: unexpected event for opcode 0x1004
[  218.814002][T10485] 8021q: VLANs not supported on xfrm0
[  218.816223][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'.
[  218.828422][T10481] syzkaller0: entered promiscuous mode
[  218.828443][T10481] syzkaller0: entered allmulticast mode
[  218.853088][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'.
[  218.853117][T10481] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1235'.
[  218.853194][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'.
[  218.968726][T10493] netlink: 'syz.0.1240': attribute type 83 has an invalid length.
[  218.995379][T10488] lo: left allmulticast mode
[  219.149355][T10496] veth2: entered promiscuous mode
[  219.149376][T10496] veth2: entered allmulticast mode
[  219.360139][T10514] netlink: 'syz.4.1248': attribute type 10 has an invalid length.
[  219.371051][T10514] team0: Port device dummy0 added
[  219.793614][T10537] netlink: 'syz.2.1254': attribute type 15 has an invalid length.
[  219.845941][T10540] sctp: [Deprecated]: syz.4.1256 (pid 10540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.845941][T10540] Use struct sctp_sack_info instead
[  219.923181][T10544] bridge0: port 3(syz_tun) entered blocking state
[  219.923302][T10544] bridge0: port 3(syz_tun) entered disabled state
[  219.923474][T10544] syz_tun: entered allmulticast mode
[  219.929264][T10544] syz_tun: entered promiscuous mode
[  219.932982][T10544] bridge0: port 3(syz_tun) entered blocking state
[  219.933103][T10544] bridge0: port 3(syz_tun) entered forwarding state
[  220.113373][T10551] 8021q: adding VLAN 0 to HW filter on device bond7
[  220.118513][T10551] bridge0: port 1(bond7) entered blocking state
[  220.118641][T10551] bridge0: port 1(bond7) entered disabled state
[  220.118808][T10551] bond7: entered allmulticast mode
[  220.130391][T10551] bond7: entered promiscuous mode
[  220.134301][T10551] bridge0: port 1(bond7) entered blocking state
[  220.134473][T10551] bridge0: port 1(bond7) entered forwarding state
[  220.169253][ T6783] bridge0: port 1(bond7) entered disabled state
[  220.259016][T10570] netlink: 'syz.2.1263': attribute type 1 has an invalid length.
[  220.266458][T10557] 8021q: adding VLAN 0 to HW filter on device bond8
[  220.267245][T10557] bridge0: port 2(bond8) entered blocking state
[  220.269617][T10557] bridge0: port 2(bond8) entered disabled state
[  220.269766][T10557] bond8: entered allmulticast mode
[  220.274202][T10557] bond8: entered promiscuous mode
[  220.275333][T10557] bridge0: port 2(bond8) entered blocking state
[  220.275442][T10557] bridge0: port 2(bond8) entered forwarding state
[  220.326812][ T6783] bridge0: port 2(bond8) entered disabled state
[  220.365394][T10570] bond16: entered promiscuous mode
[  220.365834][T10570] 8021q: adding VLAN 0 to HW filter on device bond16
[  220.456898][T10571] 8021q: adding VLAN 0 to HW filter on device bond16
[  220.457311][T10571] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address
[  220.457331][T10571] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  220.506874][T10571] bond16: (slave wireguard0): making interface the new active one
[  220.506901][T10571] wireguard0: entered promiscuous mode
[  220.528761][T10571] bond16: (slave wireguard0): Enslaving as an active interface with an up link
[  220.625339][T10586] tunl0: entered promiscuous mode
[  220.640190][T10586] netlink: 'syz.3.1266': attribute type 4 has an invalid length.
[  220.753739][T10588] netlink: 'syz.0.1267': attribute type 4 has an invalid length.
[  220.929215][T10594] netlink: 'syz.4.1269': attribute type 1 has an invalid length.
[  221.475417][T10620] Bluetooth: hci0: unsupported parameter 5134
[  221.475440][T10620] Bluetooth: hci0: unsupported parameter 8192
[  221.475451][T10620] Bluetooth: hci0: unsupported parameter 5134
[  221.475462][T10620] Bluetooth: hci0: unsupported parameter 8192
[  221.566774][   T30] audit: type=1804 audit(1793982502.070:4): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1280" name="/newroot/256/cgroup.controllers" dev="tmpfs" ino=1325 res=1 errno=0
[  221.571346][   T30] audit: type=1800 audit(1793982502.070:5): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1280" name="cgroup.controllers" dev="tmpfs" ino=1325 res=0 errno=-22
[  221.574870][   T30] audit: type=1800 audit(1793982502.080:6): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1280" name="cgroup.controllers" dev="tmpfs" ino=1325 res=0 errno=-22
[  221.897351][T10646] xt_hashlimit: size too large, truncated to 1048576
[  221.897374][T10646] xt_hashlimit: max too large, truncated to 1048576
[  221.897608][T10646] xt_hashlimit: invalid rate
[  221.911338][T10649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.914876][T10649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.917959][T10649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.920060][T10649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  222.050741][T10655] ieee802154 phy1 wpan1: encryption failed: -22
[  222.173811][ T6783] nci: nci_ntf_packet: unknown ntf opcode 0x3
[  222.408450][ T4952] Bluetooth: hci2: unexpected cc 0x1009 length: 8 > 7
[  222.408486][ T4952] Bluetooth: hci2: unexpected event for opcode 0x1009
[  225.090040][T10657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.127562][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.266093][T10706] ip6t_ah: unknown flags 5
[  225.378534][T10718] xt_l2tp: v2 sid > 0xffff: 4294967294
[  225.435913][T10719] 1ªî{X¹¦: left promiscuous mode
[  225.444191][T10717] ip_tables: iptables: counters copy to user failed while replacing table
[  225.594863][T10719] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.595592][T10719] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.619758][T10719] bond0: left allmulticast mode
[  225.619782][T10719] bond_slave_0: left allmulticast mode
[  225.619796][T10719] bond_slave_1: left allmulticast mode
[  225.703819][T10737] netlink: 'syz.1.1307': attribute type 1 has an invalid length.
[  225.718141][T10719] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  225.824225][T10746] __nla_validate_parse: 16 callbacks suppressed
[  225.824246][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[  225.874820][T10737] bond7: entered promiscuous mode
[  225.875189][T10737] 8021q: adding VLAN 0 to HW filter on device bond7
[  225.989943][ T4952] Bluetooth: hci4: link tx timeout
[  225.989963][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  225.991313][ T4952] Bluetooth: hci4: link tx timeout
[  225.991329][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.017602][T10739] bond7: (slave bridge7): making interface the new active one
[  226.017627][T10739] bridge7: entered promiscuous mode
[  226.020864][ T4952] Bluetooth: hci4: link tx timeout
[  226.020883][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.030008][ T4952] Bluetooth: hci4: link tx timeout
[  226.030028][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.041779][ T4952] Bluetooth: hci4: link tx timeout
[  226.041800][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.057527][T10739] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  226.062041][ T4952] Bluetooth: hci4: link tx timeout
[  226.062061][ T4952] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.103437][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  226.187557][T10756] Bluetooth: ISO socket layer initialized
[  226.189113][T10765] xt_NETMAP: bad rangesize 37.
[  226.223869][ T4952] Bluetooth: hci2: unexpected event for opcode 0x2003
[  226.268292][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'.
[  226.464109][T10774] pimreg: entered allmulticast mode
[  226.534415][T10783] netlink: 'syz.4.1318': attribute type 1 has an invalid length.
[  226.534441][T10783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1318'.
[  226.727942][T10793] bond17 (unregistering): Released all slaves
[  226.748408][T10799] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  227.075123][T10812] tunl0: left promiscuous mode
[  227.081197][T10812] sit0: left promiscuous mode
[  227.229804][T10812] bridge0: left promiscuous mode
[  227.229847][T10812] bridge0: left allmulticast mode
[  227.236690][T10812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  227.330442][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'.
[  228.071603][ T4952] Bluetooth: hci4: command 0x0406 tx timeout
[  229.503135][T10783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.660250][T10868] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1332'.
[  229.842594][T10879] netlink: 'syz.4.1335': attribute type 1 has an invalid length.
[  229.858461][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'.
[  229.902833][T10879] netlink: 'syz.4.1335': attribute type 1 has an invalid length.
[  230.070685][T10887] IPv6: NLM_F_REPLACE set, but no existing node found!
[  230.136245][T10874] infiniband syz2: set active
[  230.136364][T10874] infiniband syz2: added bridge_slave_1
[  230.204758][T10874] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  230.204800][T10874] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  230.204838][T10874] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  230.304047][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'.
[  230.333517][T10874] RDS/IB: syz2: added
[  230.333578][T10874] smc: adding ib device syz2 with port count 1
[  230.333597][T10874] smc:    ib device syz2 port 1 has no pnetid
[  230.417045][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.481659][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.576031][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.884856][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.884856][T10923] Use struct sctp_sack_info instead
[  230.884911][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.884911][T10923] Use struct sctp_sack_info instead
[  230.884950][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.884950][T10923] Use struct sctp_sack_info instead
[  230.884987][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.884987][T10923] Use struct sctp_sack_info instead
[  230.885025][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885025][T10923] Use struct sctp_sack_info instead
[  230.885062][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885062][T10923] Use struct sctp_sack_info instead
[  230.885099][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885099][T10923] Use struct sctp_sack_info instead
[  230.885137][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885137][T10923] Use struct sctp_sack_info instead
[  230.885174][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885174][T10923] Use struct sctp_sack_info instead
[  230.885211][T10923] sctp: [Deprecated]: syz.0.1350 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.885211][T10923] Use struct sctp_sack_info instead
[  231.276428][T10939] block nbd3: server does not support multiple connections per device.
[  231.276751][T10939] block nbd3: shutting down sockets
[  231.311819][T10940] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  231.334954][T10940] Bluetooth: hci0: unsupported parameter 5135
[  231.334978][T10940] Bluetooth: hci0: unsupported parameter 8192
[  231.334992][T10940] Bluetooth: hci0: unsupported parameter 5135
[  231.335005][T10940] Bluetooth: hci0: unsupported parameter 8192
[  231.343347][T10943] block nbd4: server does not support multiple connections per device.
[  231.356520][T10943] block nbd4: shutting down sockets
[  231.369505][T10940] sit0: entered promiscuous mode
[  231.496703][T10949] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  231.508313][T10940] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  231.508336][T10940] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1357'.
[  231.618001][T10949] 8021q: adding VLAN 0 to HW filter on device bond8
[  231.640437][T10949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1359'.
[  231.759778][T10955] bond8: (slave geneve3): making interface the new active one
[  231.806295][T10955] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  232.054132][T10967] syzkaller0: entered promiscuous mode
[  232.054157][T10967] syzkaller0: entered allmulticast mode
[  232.378173][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'.
[  232.395500][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1366'.
[  232.395888][T10983] smc: ib device syz2 ibport 1 applied user defined pnetid S
[  232.820426][T11004] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1367'.
[  233.080721][T11026] netlink: 'syz.0.1372': attribute type 21 has an invalid length.
[  233.080745][T11026] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1372'.
[  233.081010][T11030] openvswitch: netlink: Message has -1 unknown bytes.
[  233.140180][T11026] netlink: 'syz.0.1372': attribute type 4 has an invalid length.
[  233.140220][T11026] netlink: 'syz.0.1372': attribute type 5 has an invalid length.
[  233.140232][T11026] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1372'.
[  233.266524][T11030] bond17: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  233.302422][T11030] bond17 (unregistering): Released all slaves
[  233.517056][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'.
[  233.869549][T11077] netlink: 'syz.2.1384': attribute type 4 has an invalid length.
[  234.015869][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'.
[  234.107756][T11081] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  234.107781][T11081] netlink: 'syz.1.1383': attribute type 2 has an invalid length.
[  234.402820][T11095] tap0: tun_chr_ioctl cmd 1074025672
[  234.402841][T11095] tap0: ignored: set checksum disabled
[  234.440072][T11095] tap0: tun_chr_ioctl cmd 1074025673
[  234.440096][T11105] tap0: tun_chr_ioctl cmd 1074025672
[  234.440110][T11105] tap0: ignored: set checksum disabled
[  234.600140][T11122] netlink: 'syz.3.1397': attribute type 10 has an invalid length.
[  234.757664][T11122] team0: Device wg2 is of different type
[  247.747960][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  255.752881][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  261.506657][T11152] netlink: 'syz.1.1400': attribute type 1 has an invalid length.
[  261.535367][T11149] bond17 (unregistering): Released all slaves
[  261.620969][T11159] netlink: 'syz.1.1400': attribute type 1 has an invalid length.
[  261.808606][T11155] bond9: (slave gretap1): making interface the new active one
[  261.810187][T11155] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  261.945372][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'.
[  262.071974][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'.
[  262.270152][T11188] netlink: 'syz.1.1411': attribute type 1 has an invalid length.
[  262.414260][T11197] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1412'.
[  262.439277][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.439299][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.500833][T11191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.549926][T11204] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1416'.
[  262.853487][T11210] bond17 (unregistering): Released all slaves
[  262.900601][T11217] netlink: 'syz.0.1421': attribute type 4 has an invalid length.
[  262.900623][T11217] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1421'.
[  262.906734][T11214] netlink: 'syz.2.1419': attribute type 4 has an invalid length.
[  262.907811][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'.
[  263.028150][ T5646] block nbd296: Receive control failed (result -32)
[  263.187851][T11231] gre1: entered promiscuous mode
[  263.197843][T11232] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1425'.
[  263.246482][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'.
[  263.250964][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  263.280886][T11231] vlan3: entered promiscuous mode
[  263.280910][T11231] bond0: entered promiscuous mode
[  263.280926][T11231] dummy0: entered promiscuous mode
[  263.409910][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'.
[  263.967777][T11269] netlink: 'syz.4.1437': attribute type 21 has an invalid length.
[  263.967859][T11269] netlink: 'syz.4.1437': attribute type 4 has an invalid length.
[  263.967874][T11269] netlink: 'syz.4.1437': attribute type 5 has an invalid length.
[  264.556324][T11304] x_tables: duplicate underflow at hook 2
[  264.590276][T11312] GUP no longer grows the stack in syz.1.1451 (11312): 200000003000-20000000a000 (200000001000)
[  264.590339][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.1.1451 Not tainted syzkaller #0 PREEMPT(full) 
[  264.590380][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  264.590400][T11312] Call Trace:
[  264.590408][T11312]  <TASK>
[  264.590418][T11312]  dump_stack_lvl+0xe8/0x150
[  264.590458][T11312]  __get_user_pages+0x23b1/0x2750
[  264.590494][T11312]  ? lock_acquire+0x115/0x350
[  264.590536][T11312]  ? __gup_longterm_locked+0xcb2/0x16f0
[  264.590566][T11312]  ? rcu_is_watching+0x16/0xb0
[  264.590600][T11312]  __gup_longterm_locked+0xe24/0x16f0
[  264.590655][T11312]  gup_fast_fallback+0x360/0x27a0
[  264.590739][T11312]  ? __pfx_gup_fast_fallback+0x10/0x10
[  264.590769][T11312]  ? is_valid_gup_args+0x11f/0x200
[  264.590801][T11312]  ? get_user_pages_fast+0x4d/0xb0
[  264.590833][T11312]  __iov_iter_get_pages_alloc+0x378/0xa40
[  264.590864][T11312]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  264.590892][T11312]  ? __fget_files+0x2a/0x420
[  264.590921][T11312]  iov_iter_get_pages2+0x5e/0xa0
[  264.590950][T11312]  __se_sys_vmsplice+0x844/0x16f0
[  264.591000][T11312]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  264.591029][T11312]  ? __pfx_futex_wait+0x10/0x10
[  264.591135][T11312]  do_syscall_64+0x166/0x520
[  264.591159][T11312]  ? trace_irq_disable+0x3b/0x140
[  264.591187][T11312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.591209][T11312]  ? clear_bhb_loop+0x70/0xc0
[  264.591235][T11312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.591256][T11312] RIP: 0033:0x7f498df9fb19
[  264.591277][T11312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.591296][T11312] RSP: 002b:00007f498ee1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  264.591327][T11312] RAX: ffffffffffffffda RBX: 00007f498e225fa0 RCX: 00007f498df9fb19
[  264.591343][T11312] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000009
[  264.591356][T11312] RBP: 00007f498e037b70 R08: 0000000000000000 R09: 0000000000000000
[  264.591379][T11312] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  264.591391][T11312] R13: 00007f498e226038 R14: 00007f498e225fa0 R15: 00007ffefa85b0b8
[  264.591427][T11312]  </TASK>
[  264.592913][T11312] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  264.595012][T11312] netlink: 'syz.1.1451': attribute type 1 has an invalid length.
[  264.668249][T11312] bond10: (slave gretap2): making interface the new active one
[  264.683959][T11312] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  265.298019][T11350] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  265.404294][T11353] Cannot find del_set index 3 as target
[  265.609797][T11359] tipc: Started in network mode
[  265.609830][T11359] tipc: Node identity 26e7ec1ce06d, cluster identity 4711
[  265.610076][T11359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.610367][T11357] rxe_eth0 speed is unknown, defaulting to 1000
[  265.845560][T11358] tipc: Disabling bearer <eth:syzkaller0>
[  266.294974][T11360] rxe_eth0 speed is unknown, defaulting to 1000
[  266.345121][T11400] xt_hashlimit: size too large, truncated to 1048576
[  266.624404][T11408] sock: sock_set_timeout: `syz.3.1478' (pid 11408) tries to set negative timeout
[  267.594803][T11441] __nla_validate_parse: 10 callbacks suppressed
[  267.594827][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'.
[  267.660891][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'.
[  267.699147][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'.
[  268.473274][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'.
[  268.962286][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  268.962314][T11486] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1495'.
[  269.090130][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  269.090160][T11492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1495'.
[  269.245754][T11494] validate_nla: 1 callbacks suppressed
[  269.245776][T11494] netlink: 'syz.4.1496': attribute type 1 has an invalid length.
[  269.735350][T11506] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1498'.
[  269.735377][T11506] nbd: illegal input index -8454144
[  269.909002][T11526] netlink: 'syz.1.1499': attribute type 30 has an invalid length.
[  269.909028][T11526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1499'.
[  269.934777][T11525] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003
[  270.000691][T11525] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20001
[  270.140599][T11494] bond9: entered promiscuous mode
[  270.141061][T11494] 8021q: adding VLAN 0 to HW filter on device bond9
[  270.255411][T11496] 8021q: adding VLAN 0 to HW filter on device bond9
[  270.257044][T11496] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  270.257068][T11496] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  270.365834][T11496] bond9: (slave wireguard0): making interface the new active one
[  270.365862][T11496] wireguard0: entered promiscuous mode
[  270.400273][T11496] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  271.082676][T11550] netlink: 'syz.3.1508': attribute type 12 has an invalid length.
[  271.325136][T11550] bond37: option primary_reselect: invalid value (255)
[  271.347869][T11550] bond37 (unregistering): Released all slaves
[  271.568255][T11543] bond10: Invalid ad_actor_system MAC address.
[  271.568280][T11543] bond10: option ad_actor_system: invalid value (1)
[  271.590934][T11543] bond10 (unregistering): Released all slaves
[  271.897452][T11581] netlink: 'syz.4.1514': attribute type 10 has an invalid length.
[  272.054915][T11586] TC_ACT_REPEAT abuse ?
[  272.112080][T11586] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  272.119959][T11602] TC_ACT_REPEAT abuse ?
[  272.120812][T11586] bond11 (unregistering): Released all slaves
[  272.230478][T11596] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  272.260295][T11596] bond11 (unregistering): Released all slaves
[  272.607456][T11618] __nla_validate_parse: 6 callbacks suppressed
[  272.607478][T11618] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.1522'.
[  272.706103][T11626] netlink: 'syz.1.1524': attribute type 15 has an invalid length.
[  272.706128][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'.
[  272.853491][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'.
[  273.214291][T11640] bridge8: entered allmulticast mode
[  273.747988][T11676] lo: entered allmulticast mode
[  273.760241][T11676] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  273.772632][T11676] xt_HMARK: spi-set and port-set can't be combined
[  273.774364][T11675] lo: left allmulticast mode
[  273.880449][T11687] netlink: 'syz.1.1546': attribute type 1 has an invalid length.
[  273.926433][T11687] bond11: (slave geneve4): making interface the new active one
[  273.927932][T11687] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  273.928067][ T6783] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  273.928141][ T6783] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  273.942438][ T6776] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  274.014853][T11692] netlink: 'syz.0.1549': attribute type 3 has an invalid length.
[  274.016265][T11692] netlink: 'syz.0.1549': attribute type 3 has an invalid length.
[  274.135407][T11698] netlink: 'syz.3.1550': attribute type 3 has an invalid length.
[  274.502324][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  274.502359][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'.
[  274.503282][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  274.503307][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'.
[  274.596757][T11730] syzkaller0: entered promiscuous mode
[  274.596783][T11730] syzkaller0: entered allmulticast mode
[  274.614626][T11725] netlink: 'syz.3.1560': attribute type 1 has an invalid length.
[  275.719142][T11745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.964396][T11746] batman_adv: batadv0: Adding interface: syz_tun
[  276.964412][T11746] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.964441][T11746] batman_adv: batadv0: Interface activated: syz_tun
[  277.249612][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'.
[  277.442188][T11794] netlink: 'syz.4.1576': attribute type 2 has an invalid length.
[  277.766717][T11818] pim6reg1: entered promiscuous mode
[  277.766741][T11818] pim6reg1: entered allmulticast mode
[  277.853983][T11826] sit0: entered promiscuous mode
[  277.873286][T11826] netlink: 'syz.3.1584': attribute type 1 has an invalid length.
[  277.873310][T11826] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1584'.
[  278.179758][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1589'.
[  278.382557][T11852] netlink: 'syz.1.1592': attribute type 2 has an invalid length.
[  278.610789][T11866] netlink: 'syz.3.1597': attribute type 4 has an invalid length.
[  278.610814][T11866] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1597'.
[  278.673694][ T1182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  279.529217][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'.
[  279.704894][T11923] syzkaller0: left promiscuous mode
[  279.704918][T11923] syzkaller0: left allmulticast mode
[  279.920730][T11927] geneve3: entered allmulticast mode
[  279.970762][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'.
[  279.983715][T11937] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  280.336167][T11953] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1622'.
[  280.421632][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1623'.
[  280.533311][T11966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  280.659083][T11976] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  280.679832][T11969] bond12: option lp_interval: invalid value (0)
[  280.679847][T11969] bond12: option lp_interval: allowed values 1 - 2147483647
[  280.696413][T11969] bond12 (unregistering): Released all slaves
[  280.747102][T11977] bond12: option lp_interval: invalid value (0)
[  280.747119][T11977] bond12: option lp_interval: allowed values 1 - 2147483647
[  280.748219][T11977] bond12 (unregistering): Released all slaves
[  282.912608][T11930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.309700][T12032] lo: entered allmulticast mode
[  283.323384][T12033] IPVS: set_ctl: invalid protocol: 121 0.0.0.0:0
[  283.324581][T12033] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  283.377348][T12035] gretap0: entered promiscuous mode
[  283.707738][T12057] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1646'.
[  283.707763][T12057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1646'.
[  284.133419][T12032] lo: left allmulticast mode
[  309.597402][ T6783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  310.383716][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.383915][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.384104][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.384387][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.384563][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.384740][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.384920][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.385092][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.385279][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.385446][T12067] netlink: 624 bytes leftover after parsing attributes in process `syz.1.1648'.
[  310.797234][T12100] ip_tables: iptables: counters copy to user failed while replacing table
[  310.833592][T12102] tipc: Cannot configure node identity twice
[  311.207134][T12125] Bluetooth: MGMT ver 1.23
[  311.500968][T12136] netlink: 'syz.1.1663': attribute type 1 has an invalid length.
[  311.550039][T12135] vlan0: entered allmulticast mode
[  311.550063][T12135] bond0: entered allmulticast mode
[  311.550076][T12135] bond_slave_0: entered allmulticast mode
[  311.550093][T12135] bond_slave_1: entered allmulticast mode
[  311.550108][T12135] batadv0: entered allmulticast mode
[  311.724905][T12148] xt_time: invalid argument - start or stop time greater than 23:59:59
[  311.806790][T12152] : entered promiscuous mode
[  311.967311][T12164] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  312.004557][T12164] 8021q: adding VLAN 0 to HW filter on device bond12
[  312.014534][T12164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.267795][T12183] netlink: 'syz.0.1679': attribute type 2 has an invalid length.
[  312.267821][T12183] netlink: 'syz.0.1679': attribute type 2 has an invalid length.
[  312.458771][T12195] netlink: 'syz.3.1683': attribute type 3 has an invalid length.
[  312.686128][T12208] team0: Device gtp1 is up. Set it down before adding it as a team port
[  313.138734][T12210] gre1: entered promiscuous mode
[  313.138757][T12210] gre1: entered allmulticast mode
[  313.230236][T12220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.038727][T12255] openvswitch: netlink: Actions may not be safe on all matching packets
[  314.114760][T12260] veth1_macvtap: left promiscuous mode
[  314.186951][T12258] x_tables: unsorted underflow at hook 2
[  314.270086][   T30] audit: type=1800 audit(1793982594.770:7): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1705" name="memory.events" dev="tmpfs" ino=1740 res=0 errno=-22
[  314.280409][   T30] audit: type=1804 audit(1793982594.780:8): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1705" name="/newroot/338/memory.events" dev="tmpfs" ino=1740 res=1 errno=0
[  314.375121][T12269] vlan4: entered promiscuous mode
[  314.375146][T12269] bridge0: entered promiscuous mode
[  314.375337][T12269] vlan4: entered allmulticast mode
[  314.375352][T12269] bridge0: entered allmulticast mode
[  314.504206][T12273] netlink: 'syz.0.1709': attribute type 2 has an invalid length.
[  314.504231][T12273] netlink: 'syz.0.1709': attribute type 2 has an invalid length.
[  314.609061][T12277] netlink: 'syz.4.1708': attribute type 1 has an invalid length.
[  314.624229][T12281] xfrm0: left promiscuous mode
[  315.262682][T12318] netlink: 'syz.0.1722': attribute type 10 has an invalid length.
[  315.568379][T12334] __nla_validate_parse: 73 callbacks suppressed
[  315.568397][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'.
[  315.576465][T12333] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  316.010920][T12367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1735'.
[  316.060711][T12361] syzkaller1: entered promiscuous mode
[  316.060734][T12361] syzkaller1: entered allmulticast mode
[  316.066457][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'.
[  316.066478][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'.
[  316.118855][T12372] netlink: 'syz.2.1739': attribute type 2 has an invalid length.
[  316.123580][T12372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.299947][T12380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  316.748085][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'.
[  317.020732][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'.
[  317.020758][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'.
[  317.130533][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'.
[  317.130647][T12427] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.1755'.
[  317.199760][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  317.296208][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'.
[  317.779446][T12467] openvswitch: netlink: IP tunnel dst address not specified
[  317.987818][T12482] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  318.024815][T12482] ¾x9ÿ (unregistering): left allmulticast mode
[  318.024845][T12482] ¾x9ÿ (unregistering): left promiscuous mode
[  318.024921][T12482] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  318.319382][   T30] audit: type=1804 audit(1793982598.820:9): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1777" name="/newroot/384/cgroup.controllers" dev="tmpfs" ino=1971 res=1 errno=0
[  318.347227][   T30] audit: type=1800 audit(1793982598.850:10): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1777" name="cgroup.controllers" dev="tmpfs" ino=1971 res=0 errno=-22
[  318.740851][T12526] vlan0: entered allmulticast mode
[  318.740877][T12526] bond0: entered allmulticast mode
[  318.740891][T12526] bond_slave_0: entered allmulticast mode
[  318.740908][T12526] bond_slave_1: entered allmulticast mode
[  319.844068][T12592] bond37: entered promiscuous mode
[  319.844633][T12592] 8021q: adding VLAN 0 to HW filter on device bond37
[  319.974533][T12599] 8021q: adding VLAN 0 to HW filter on device bond37
[  319.975017][T12599] bond37: (slave sit1): The slave device specified does not support setting the MAC address
[  319.977344][T12599] bond37: (slave sit1): Error -95 calling set_mac_address
[  320.212417][T12614] validate_nla: 2 callbacks suppressed
[  320.212439][T12614] netlink: 'syz.0.1809': attribute type 1 has an invalid length.
[  320.212492][T12614] block nbd0: NBD_DISCONNECT
[  320.212521][T12614] block nbd0: Send disconnect failed -32
[  320.212563][T12614] block nbd0: shutting down sockets
[  320.387793][T12619] netlink: 'syz.1.1810': attribute type 1 has an invalid length.
[  320.482228][T12619] bond13: entered promiscuous mode
[  320.496539][T12619] 8021q: adding VLAN 0 to HW filter on device bond13
[  320.613036][T12624] IPVS: persistence engine module ip_vs_pe_À
 not found
[  320.643832][T12633] __nla_validate_parse: 13 callbacks suppressed
[  320.643854][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'.
[  320.795351][T12628] IPVS: persistence engine module ip_vs_pe_À
 not found
[  320.924161][T12649] x_tables: duplicate underflow at hook 2
[  321.018126][T12651] netlink: 'syz.2.1819': attribute type 4 has an invalid length.
[  321.034519][T12657] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20003
[  321.169597][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'.
[  321.169632][T12665] netlink: 'syz.0.1825': attribute type 5 has an invalid length.
[  321.169645][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'.
[  321.206913][T12665] geneve3: entered promiscuous mode
[  321.206936][T12665] geneve3: entered allmulticast mode
[  321.216357][T12668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1824'.
[  321.307390][T12671] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  321.402220][T12681] team0: Device xfrm0 is of different type
[  321.485688][T12686] netlink: 'syz.3.1828': attribute type 3 has an invalid length.
[  321.539416][ T4952] block nbd0: Receive control failed (result -32)
[  321.540601][ T5646] block nbd0: Receive control failed (result -32)
[  321.696029][T12692] netlink: 'syz.3.1831': attribute type 1 has an invalid length.
[  321.727525][T12692] bond38: entered promiscuous mode
[  321.727789][T12692] 8021q: adding VLAN 0 to HW filter on device bond38
[  321.759688][T12692] 8021q: adding VLAN 0 to HW filter on device bond38
[  321.759903][T12692] bond38: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  321.759914][T12692] bond38: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  321.794577][T12692] bond38: (slave ip6gre1): making interface the new active one
[  321.794599][T12692] ip6gre1: entered promiscuous mode
[  321.795675][T12692] bond38: (slave ip6gre1): Enslaving as an active interface with an up link
[  321.950443][T12701] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1835'.
[  321.961632][T12698] netlink: Conntrack attr has 8 unknown bytes
[  321.966154][T12703] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[  321.966176][T12703] sctp: [Deprecated]: syz.1.1834 (pid 12703) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.966176][T12703] Use struct sctp_sack_info instead
[  322.118217][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1838'.
[  322.120424][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  322.905604][T12752] netlink: 'syz.2.1849': attribute type 3 has an invalid length.
[  323.217013][T12675] NFSD: Failed to start, no listeners configured.
[  323.674403][T12772] syzkaller0: entered promiscuous mode
[  323.674419][T12772] syzkaller0: entered allmulticast mode
[  323.729352][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1855'.
[  323.903108][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'.
[  324.198133][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1868'.
[  324.230526][T12818] netlink: 'syz.2.1869': attribute type 2 has an invalid length.
[  326.255936][ T4952] Bluetooth: hci3: unexpected event for opcode 0x2002
[  327.937808][T12923] __nla_validate_parse: 2 callbacks suppressed
[  327.937828][T12923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1891'.
[  328.113269][T12926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1891'.
[  328.146202][T12894] NFSD: Failed to start, no listeners configured.
[  328.211097][T12934] ip_tables: iptables: counters copy to user failed while replacing table
[  329.014945][T12983] 0: reclassify loop, rule prio 0, protocol 03
[  329.416080][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.426193][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.515149][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.515175][T13009] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.517370][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.517391][T13009] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.518406][T13009] batman_adv: batadv0: Interface deactivated: syzkaller0
[  329.518424][T13009] batman_adv: batadv0: Removing interface: syzkaller0
[  329.799300][T13019] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1919'.
[  329.813445][T13021] xt_cluster: node mask cannot exceed total number of nodes
[  329.820371][T13025] xt_cluster: node mask cannot exceed total number of nodes
[  330.231661][ T4952] Bluetooth: hci3: command 0x0406 tx timeout
[  330.251070][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'.
[  330.269873][T13051] netlink: 'syz.2.1926': attribute type 3 has an invalid length.
[  330.269894][T13051] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1926'.
[  330.412018][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'.
[  330.725718][T13077] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  330.747680][T13079] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  330.900742][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  330.992975][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'.
[  331.168874][T13095] syzkaller0: entered promiscuous mode
[  331.168899][T13095] syzkaller0: entered allmulticast mode
[  331.218598][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'.
[  331.265828][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'.
[  331.267193][T13106] netlink: 'syz.4.1940': attribute type 1 has an invalid length.
[  331.390310][T13106] bond10: Invalid ad_actor_system MAC address.
[  331.390331][T13106] bond10: option ad_actor_system: invalid value (1)
[  331.397266][T13106] bond10 (unregistering): Released all slaves
[  331.448840][   T30] audit: type=1107 audit(1793982611.950:11): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O[Ûˆ¾w¯%ømM!–'
[  331.460950][   T30] audit: type=1107 audit(1793982611.960:12): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='»wÍ[—­®“-Æ(³ÔcÉ'
[  331.968000][T13148] gretap1: entered promiscuous mode
[  331.968024][T13148] gretap1: entered allmulticast mode
[  332.100600][T13155] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  332.264155][T13166] netlink: 'syz.2.1956': attribute type 49 has an invalid length.
[  332.410310][T13166] ip6gretap0: entered promiscuous mode
[  332.410334][T13166] ip6gretap0: entered allmulticast mode
[  333.140175][T13217] ip_tables: iptables: counters copy to user failed while replacing table
[  333.428414][T13239] netlink: 'syz.4.1974': attribute type 2 has an invalid length.
[  333.434266][T13239] __nla_validate_parse: 6 callbacks suppressed
[  333.434283][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1974'.
[  333.639891][T13257] netlink: 'syz.3.1978': attribute type 1 has an invalid length.
[  333.639915][T13257] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1978'.
[  333.926398][T13273] netlink: 'syz.2.1984': attribute type 1 has an invalid length.
[  334.156008][T13285] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1986'.
[  334.282822][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1988'.
[  334.338311][T13300] netlink: 'syz.2.1987': attribute type 4 has an invalid length.
[  334.714970][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'.
[  334.730941][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'.
[  334.920840][T13328] netlink: 'syz.1.1995': attribute type 1 has an invalid length.
[  334.976530][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1995'.
[  335.195529][T13343] netlink: 'syz.1.1999': attribute type 12 has an invalid length.
[  335.315754][T13350] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  335.640848][T13366] : renamed from bond_slave_1
[  335.719868][T13373] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  335.942699][T13382] bond0: Error: Cannot enslave bond to itself.
[  336.046106][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'.
[  336.211577][T13405] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2018'.
[  336.275637][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'.
[  337.125924][   T12] tipc: Subscription rejected, illegal request
[  337.427260][T13470] hsr_slave_0: left promiscuous mode
[  337.438037][T13470] hsr_slave_1: left promiscuous mode
[  338.413239][T13521] netlink: 'syz.1.2042': attribute type 1 has an invalid length.
[  338.525924][T13534] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  338.525947][T13534] __nla_validate_parse: 5 callbacks suppressed
[  338.525959][T13534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2042'.
[  338.911256][T13527] bond0: (slave dummy0): Releasing backup interface
[  338.928202][T13527] dummy0: left promiscuous mode
[  338.940343][T13534] dummy0: entered promiscuous mode
[  339.013679][T13536] syzkaller0: entered promiscuous mode
[  339.013703][T13536] syzkaller0: entered allmulticast mode
[  339.100747][T13558] syzkaller0: entered promiscuous mode
[  339.100770][T13558] syzkaller0: entered allmulticast mode
[  340.526751][ T6783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  341.925980][T13548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.805333][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'.
[  367.837579][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'.
[  367.923729][T13615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2055'.
[  367.923753][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'.
[  367.923766][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'.
[  367.923779][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'.
[  368.001893][T13622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2056'.
[  368.116509][T13615] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2055'.
[  368.136715][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'.
[  368.136953][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'.
[  368.264529][T13638] Bluetooth: hci0: unsupported parameter 5135
[  368.264553][T13638] Bluetooth: hci0: unsupported parameter 8192
[  368.264593][T13638] Bluetooth: hci0: unsupported parameter 5135
[  368.264608][T13638] Bluetooth: hci0: unsupported parameter 8192
[  368.580273][T13657] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  368.587202][T13657] policy can only be matched on NF_INET_PRE_ROUTING
[  368.587214][T13657] unable to load match
[  369.018208][ T4952] block nbd3: Receive control failed (result -32)
[  369.218190][T13694] netlink: 'syz.3.2073': attribute type 21 has an invalid length.
[  369.778866][T13739] ip_tables: iptables: counters copy to user failed while replacing table
[  369.879511][T13745] netlink: 'syz.2.2086': attribute type 3 has an invalid length.
[  369.938645][T13747] x_tables: duplicate underflow at hook 3
[  370.064680][T13745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.069268][T13745] bond0 (unregistering): Released all slaves
[  370.861797][T13800] ieee802154 phy1 wpan1: encryption failed: -22
[  370.960922][ T4952] block nbd4: Receive control failed (result -107)
[  371.048558][T13818] netlink: 'syz.0.2112': attribute type 2 has an invalid length.
[  371.128451][T13822] 8021q: adding VLAN 0 to HW filter on device bond15
[  371.248443][T13825] ip_tables: iptables: counters copy to user failed while replacing table
[  371.446994][ T1182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.851182][T13869] xt_l2tp: missing protocol rule (udp|l2tpip)
[  371.924592][T13872] bond39: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  371.928534][T13872] bond39 (unregistering): Released all slaves
[  372.508706][T13910] netlink: 'syz.3.2134': attribute type 1 has an invalid length.
[  372.830760][T13933] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.864973][T13939] macvlan0: entered promiscuous mode
[  372.864998][T13939] macvlan0: entered allmulticast mode
[  372.865746][T13939] bond0: (slave macvlan0): Error -22 calling dev_set_mtu
[  372.906596][T13943] tipc: Enabled bearer <ib:veth0_virt_wifi>, priority 10
[  373.084389][T13956] __nla_validate_parse: 118 callbacks suppressed
[  373.084409][T13956] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2147'.
[  373.445495][T13982] netlink: 'syz.3.2155': attribute type 10 has an invalid length.
[  373.455697][T13982] team0: Device wg2 is of different type
[  373.494084][T13982] openvswitch: netlink: Multiple metadata blocks provided
[  374.041568][T14022] netlink: 'syz.3.2164': attribute type 7 has an invalid length.
[  374.361268][T14037] bond10: option arp_all_targets: invalid value (18446744073709551613)
[  374.374547][T14037] bond10 (unregistering): Released all slaves
[  374.380405][T14045] xt_bpf: check failed: parse error
[  374.614454][T14064] netlink: 'syz.4.2176': attribute type 21 has an invalid length.
[  374.614481][T14064] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2176'.
[  374.614529][T14064] netlink: 'syz.4.2176': attribute type 4 has an invalid length.
[  374.614542][T14064] netlink: 'syz.4.2176': attribute type 5 has an invalid length.
[  374.614555][T14064] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2176'.
[  374.660379][T14058] netlink: 'syz.0.2177': attribute type 1 has an invalid length.
[  374.756667][T14058] bond3: option mode: invalid value (13)
[  374.774221][T14058] bond3 (unregistering): Released all slaves
[  374.907656][T14077] netlink: Unknown conntrack attr (0)
[  374.922579][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2181'.
[  374.922615][T14077] netlink: 'syz.4.2181': attribute type 7 has an invalid length.
[  374.922628][T14077] netlink: 'syz.4.2181': attribute type 8 has an invalid length.
[  374.922639][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'.
[  375.534276][T14117] netlink: 'syz.1.2193': attribute type 10 has an invalid length.
[  375.537212][T14117] dummy0: left promiscuous mode
[  375.638890][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'.
[  375.741166][T14127] ip_tables: iptables: counters copy to user failed while replacing table
[  375.927522][T14128] syzkaller1: entered promiscuous mode
[  375.927538][T14128] syzkaller1: entered allmulticast mode
[  376.053926][T14149] Cannot find del_set index 4 as target
[  376.069211][T14149] xt_hashlimit: size too large, truncated to 1048576
[  376.224772][T14158] netlink: 'syz.1.2203': attribute type 1 has an invalid length.
[  376.307827][T14158] 8021q: adding VLAN 0 to HW filter on device bond16
[  376.378737][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'.
[  376.382332][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'.
[  376.516710][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'.
[  376.517919][T14173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2207'.
[  376.623108][T14179] smc: removing ib device rxe0
[  376.733448][T14179] smbdirect: ib_dev[rxe0] removed
[  376.915019][T14191] ip_tables: iptables: counters copy to user failed while replacing table
[  377.606526][T14211] vcan0: tx address claim with broadcast sa
[  378.066453][T14217] IPv6: Can't replace route, no match found
[  378.190919][T14219] sctp: [Deprecated]: syz.1.2225 (pid 14219) Use of int in maxseg socket option.
[  378.190919][T14219] Use struct sctp_assoc_value instead
[  378.635118][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  378.744338][T14252] __nla_validate_parse: 3 callbacks suppressed
[  378.744358][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2232'.
[  378.821714][T14253] syzkaller1: entered promiscuous mode
[  378.821738][T14253] syzkaller1: entered allmulticast mode
[  378.906541][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2231'.
[  380.031953][T14292] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  380.032374][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'.
[  380.257208][T14308] team0: Port device dummy0 removed
[  380.388224][T14318] ip_tables: iptables: counters copy to user failed while replacing table
[  380.413617][T14319] sock: sock_timestamping_bind_phc: sock not bind to device
[  380.627922][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'.
[  380.627945][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'.
[  380.659941][T14323] 8021q: adding VLAN 0 to HW filter on device bond10
[  380.732473][T14324] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.762699][T14324] bond10: (slave bond0): making interface the new active one
[  380.799960][T14324] bond10: (slave bond0): Enslaving as an active interface with an up link
[  380.824745][T14319] syzkaller1: entered promiscuous mode
[  380.824768][T14319] syzkaller1: entered allmulticast mode
[  380.893059][T14324] bond10 (unregistering): (slave bond0): Releasing active interface
[  380.908488][T14324] bond10 (unregistering): Released all slaves
[  381.130663][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'.
[  381.332016][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'.
[  381.332040][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'.
[  381.332066][T14349] netlink: 'syz.1.2247': attribute type 15 has an invalid length.
[  381.390477][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'.
[  381.390500][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'.
[  381.390523][T14349] netlink: 'syz.1.2247': attribute type 15 has an invalid length.
[  381.422306][  T116] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  381.422355][  T116] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  381.422384][  T116] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  382.006059][T14371] ipvlan2: entered allmulticast mode
[  382.006084][T14371] virt_wifi0: entered allmulticast mode
[  382.010136][T14371] batman_adv: batadv0: Adding interface: ipvlan2
[  382.010155][T14371] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.010186][T14371] batman_adv: batadv0: Interface activated: ipvlan2
[  382.093026][T14371] ipvlan3: entered allmulticast mode
[  382.094961][T14371] batman_adv: batadv0: Adding interface: ipvlan3
[  382.095213][T14371] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.095243][T14371] batman_adv: The newly added mac address (0e:95:b9:7f:5d:f3) already exists on: ipvlan2
[  382.095257][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.095271][T14371] batman_adv: batadv0: Interface activated: ipvlan3
[  382.241122][T14389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.654391][T14413] secmark_tg_check: 55 callbacks suppressed
[  382.654416][T14413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  383.012358][T14435] x_tables: duplicate underflow at hook 2
[  383.239495][T14451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.397241][T14460] netlink: 'syz.2.2276': attribute type 2 has an invalid length.
[  383.697254][ T5646] block nbd5: Receive control failed (result -32)
[  383.699124][ T4952] block nbd5: Receive control failed (result -32)
[  383.794106][T14485] __nla_validate_parse: 7 callbacks suppressed
[  383.794127][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'.
[  383.918647][T14487] xt_nfacct: accounting object `' does not exist
[  384.159283][T14507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'.
[  385.084272][   T13] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96
[  385.115975][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'.
[  385.397543][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'.
[  385.458485][T14567] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  385.618919][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'.
[  385.618939][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'.
[  385.690404][T14579] netlink: 'syz.4.2303': attribute type 21 has an invalid length.
[  385.690468][T14579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2303'.
[  385.928145][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'.
[  386.247587][T14602] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2310'.
[  386.251251][T14602] sctp: [Deprecated]: syz.4.2310 (pid 14602) Use of int in max_burst socket option.
[  386.251251][T14602] Use struct sctp_assoc_value instead
[  386.380392][T14609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2312'.
[  386.396248][T14606] nbd: illegal input index 65508
[  386.645332][T14619] xt_hashlimit: size too large, truncated to 1048576
[  386.680232][T14624] netlink: 'syz.4.2318': attribute type 8 has an invalid length.
[  386.764961][T14630] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  386.826880][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.827251][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.827602][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.846088][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.846547][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.848040][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.848392][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.857840][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.863954][T14636] ip_tables: iptables: counters copy to user failed while replacing table
[  386.943112][T14638] netlink: 'syz.1.2315': attribute type 10 has an invalid length.
[  387.805461][T14685] netlink: 'syz.0.2331': attribute type 4 has an invalid length.
[  387.821178][T14685] vlan1: left allmulticast mode
[  387.821208][T14685] veth0_vlan: left allmulticast mode
[  387.850404][T14685] xt_l2tp: wrong L2TP version: 255
[  387.959582][T14685] netlink: 'syz.0.2331': attribute type 1 has an invalid length.
[  387.959608][T14685] netlink: 'syz.0.2331': attribute type 2 has an invalid length.
[  388.018492][T14690] netlink: 'syz.0.2331': attribute type 1 has an invalid length.
[  388.018762][T14690] netlink: 'syz.0.2331': attribute type 1 has an invalid length.
[  388.018777][T14690] netlink: 'syz.0.2331': attribute type 2 has an invalid length.
[  388.088863][T14688] bridge10: entered allmulticast mode
[  388.379930][T14703] syzkaller0: entered promiscuous mode
[  388.379953][T14703] syzkaller0: entered allmulticast mode
[  388.847228][T14727] __nla_validate_parse: 5 callbacks suppressed
[  388.847250][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'.
[  388.946576][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'.
[  389.150111][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2349'.
[  389.150458][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2349'.
[  389.322560][ T4952] Bluetooth: hci1: unexpected event for opcode 0x0005
[  389.438837][T14758] xt_connbytes: Forcing CT accounting to be enabled
[  389.438870][T14758] set match dimension is over the limit!
[  389.717123][T14775] syzkaller1: tun_chr_ioctl cmd 1074025677
[  389.717233][T14775] syzkaller1: linktype set to 823
[  389.769656][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'.
[  389.870458][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'.
[  389.870495][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'.
[  389.952963][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'.
[  390.125992][T14792] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2363'.
[  390.189726][T14794] wg0 speed is unknown, defaulting to 1000
[  390.189848][T14794] wg0 speed is unknown, defaulting to 1000
[  390.207360][T14794] wg0 speed is unknown, defaulting to 1000
[  390.208653][T14794] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  390.208682][T14794] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  390.208720][T14794] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  390.277077][T14764] NFSD: Failed to start, no listeners configured.
[  390.299846][T14794] wg0 speed is unknown, defaulting to 1000
[  390.303698][T14794] wg0 speed is unknown, defaulting to 1000
[  390.305517][T14794] wg0 speed is unknown, defaulting to 1000
[  390.307259][T14794] wg0 speed is unknown, defaulting to 1000
[  390.309243][T14794] wg0 speed is unknown, defaulting to 1000
[  390.412515][T14797] netlink: 'syz.2.2365': attribute type 21 has an invalid length.
[  390.412541][T14797] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2365'.
[  390.658407][T14809] bond39: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  390.674770][T14809] bond39 (unregistering): Released all slaves
[  391.019865][T14835] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  391.111036][T14822] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  391.117550][T14822] team0: Device ipvlan0 is already an upper device of the team interface
[  391.172163][T14845] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  391.302224][T14851] syzkaller0: entered promiscuous mode
[  391.302247][T14851] syzkaller0: entered allmulticast mode
[  391.697860][T14861] syzkaller0: entered promiscuous mode
[  391.697887][T14861] syzkaller0: entered allmulticast mode
[  391.734517][T14872] block nbd0: reconnected socket
[  391.767818][T14872] block nbd0: reconnected socket
[  391.945277][ T5646] block nbd0: Receive control failed (result -32)
[  391.946305][ T4952] block nbd0: Receive control failed (result -32)
[  392.116977][T14889] validate_nla: 2 callbacks suppressed
[  392.116998][T14889] netlink: 'syz.1.2388': attribute type 58 has an invalid length.
[  392.179808][T14893] netlink: 'syz.4.2389': attribute type 4 has an invalid length.
[  394.195289][T14885] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  394.211106][T14893] .`: renamed from bond0
[  395.452679][T14968] net_ratelimit: 57 callbacks suppressed
[  395.452699][T14968] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32)
[  395.545051][T14972] __nla_validate_parse: 9 callbacks suppressed
[  395.545073][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'.
[  395.589933][T14974] batman_adv: batadv0: Adding interface: syzkaller0
[  395.589952][T14974] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.590537][T14974] batman_adv: batadv0: Interface activated: syzkaller0
[  395.748612][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'.
[  395.761280][T14977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  395.849294][T14988] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2416'.
[  396.077809][ T5646] Bluetooth: hci4: command 0x0406 tx timeout
[  396.344175][T15005] syzkaller1: entered promiscuous mode
[  396.344198][T15005] syzkaller1: entered allmulticast mode
[  397.102114][T15069] netlink: 'syz.1.2435': attribute type 7 has an invalid length.
[  397.104548][T15070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2434'.
[  397.104588][T15070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'.
[  397.170170][T15066] tipc: MTU too low for tipc bearer
[  397.235387][T15066] bond18: option fail_over_mac: invalid value (16)
[  397.256659][T15066] bond18 (unregistering): Released all slaves
[  397.284655][T15081] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  397.305683][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'.
[  397.607673][T15103] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  397.697303][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'.
[  397.697329][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'.
[  397.697393][T15113] vlan0: entered promiscuous mode
[  397.697410][T15113] bond0: entered promiscuous mode
[  397.697424][T15113] bond_slave_0: entered promiscuous mode
[  397.697635][T15113] bond_slave_1: entered promiscuous mode
[  397.698108][T15113] vlan0: left allmulticast mode
[  397.698123][T15113] bond0: left allmulticast mode
[  397.698135][T15113] bond_slave_0: left allmulticast mode
[  397.698150][T15113] bond_slave_1: left allmulticast mode
[  397.701295][T15113] sock: sock_timestamping_bind_phc: sock not bind to device
[  397.719099][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'.
[  397.767333][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2448'.
[  397.928556][T15121] ipt_rpfilter: unknown options
[  397.930422][T15118] smc: removing ib device syz2
[  397.961630][T15123] syzkaller0: entered promiscuous mode
[  397.961654][T15123] syzkaller0: entered allmulticast mode
[  398.013036][T15118] 
[  398.015416][T15118] ======================================================
[  398.022449][T15118] WARNING: possible circular locking dependency detected
[  398.029494][T15118] syzkaller #0 Not tainted
[  398.033914][T15118] ------------------------------------------------------
[  398.040937][T15118] syz.1.2450/15118 is trying to acquire lock:
[  398.047004][T15118] ffff88801cec4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  398.056909][T15118] 
[  398.056909][T15118] but task is already holding lock:
[  398.064274][T15118] ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  398.072989][T15118] 
[  398.072989][T15118] which lock already depends on the new lock.
[  398.072989][T15118] 
[  398.083390][T15118] 
[  398.083390][T15118] the existing dependency chain (in reverse order) is:
[  398.092403][T15118] 
[  398.092403][T15118] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  398.099616][T15118]        __mutex_lock+0x197/0x15a0
[  398.104733][T15118]        get_device_parent+0x16f/0x3a0
[  398.110190][T15118]        device_add+0x2d4/0xb80
[  398.115034][T15118]        device_create+0x269/0x300
[  398.120151][T15118]        msr_device_create+0x33/0x50
[  398.125443][T15118]        cpuhp_invoke_callback+0x434/0x810
[  398.131264][T15118]        cpuhp_thread_fun+0x362/0x780
[  398.136653][T15118]        smpboot_thread_fn+0x5f8/0xb30
[  398.142131][T15118]        kthread+0x38b/0x480
[  398.146722][T15118]        ret_from_fork+0x514/0xb70
[  398.151831][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.157114][T15118] 
[  398.157114][T15118] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  398.164675][T15118]        cpuhp_thread_fun+0x127/0x780
[  398.170055][T15118]        smpboot_thread_fn+0x5f8/0xb30
[  398.175519][T15118]        kthread+0x38b/0x480
[  398.180113][T15118]        ret_from_fork+0x514/0xb70
[  398.185226][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.190506][T15118] 
[  398.190506][T15118] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  398.198236][T15118]        cpus_read_lock+0x3d/0x160
[  398.203357][T15118]        static_key_slow_inc+0x12/0x30
[  398.208848][T15118]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  398.215091][T15118]        nbd_genl_foreach_sock+0x265/0x450
[  398.220898][T15118]        nbd_genl_reconfigure+0xbbb/0x1040
[  398.226712][T15118]        genl_family_rcv_msg_doit+0x233/0x340
[  398.232779][T15118]        genl_rcv_msg+0x614/0x7a0
[  398.237810][T15118]        netlink_rcv_skb+0x226/0x4a0
[  398.243099][T15118]        genl_rcv+0x28/0x40
[  398.247597][T15118]        netlink_unicast+0x8ef/0xa80
[  398.252882][T15118]        netlink_sendmsg+0x7f0/0xb20
[  398.258176][T15118]        sock_sendmsg_nosec+0x14e/0x190
[  398.263723][T15118]        ____sys_sendmsg+0x54e/0x850
[  398.269016][T15118]        ___sys_sendmsg+0x2a5/0x360
[  398.274209][T15118]        __x64_sys_sendmsg+0x1b1/0x290
[  398.279672][T15118]        do_syscall_64+0x166/0x520
[  398.284787][T15118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.291201][T15118] 
[  398.291201][T15118] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  398.298849][T15118]        __mutex_lock+0x197/0x15a0
[  398.303967][T15118]        nbd_queue_rq+0x373/0xff0
[  398.308989][T15118]        blk_mq_dispatch_rq_list+0x499/0x1990
[  398.315063][T15118]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  398.321917][T15118]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  398.328425][T15118]        blk_mq_run_work_fn+0x167/0x2f0
[  398.333971][T15118]        process_scheduled_works+0xc3d/0x1630
[  398.340042][T15118]        worker_thread+0xa47/0xfb0
[  398.345153][T15118]        kthread+0x38b/0x480
[  398.349741][T15118]        ret_from_fork+0x514/0xb70
[  398.354849][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.360130][T15118] 
[  398.360130][T15118] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  398.367336][T15118]        __mutex_lock+0x197/0x15a0
[  398.372449][T15118]        nbd_queue_rq+0xc1/0xff0
[  398.377379][T15118]        blk_mq_dispatch_rq_list+0x499/0x1990
[  398.383449][T15118]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  398.390293][T15118]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  398.396789][T15118]        blk_mq_run_work_fn+0x167/0x2f0
[  398.402328][T15118]        process_scheduled_works+0xc3d/0x1630
[  398.408392][T15118]        worker_thread+0xa47/0xfb0
[  398.413502][T15118]        kthread+0x38b/0x480
[  398.418085][T15118]        ret_from_fork+0x514/0xb70
[  398.423190][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.428475][T15118] 
[  398.428475][T15118] -> #5 (set->srcu){.+.+}-{0:0}:
[  398.435593][T15118]        __synchronize_srcu+0xca/0x2f0
[  398.441050][T15118]        elevator_switch+0x1e8/0x7b0
[  398.446335][T15118]        elevator_change+0x2fa/0x480
[  398.451623][T15118]        elevator_set_default+0x375/0x440
[  398.457343][T15118]        blk_register_queue+0x404/0x4f0
[  398.462883][T15118]        __add_disk+0x6b8/0xdb0
[  398.467733][T15118]        add_disk_fwnode+0x100/0x3a0
[  398.473017][T15118]        nbd_dev_add+0x733/0xb60
[  398.477953][T15118]        nbd_init+0x168/0x1f0
[  398.482623][T15118]        do_one_initcall+0x250/0x870
[  398.487901][T15118]        do_initcall_level+0x10a/0x1a0
[  398.493364][T15118]        do_initcalls+0x59/0xa0
[  398.498214][T15118]        kernel_init_freeable+0x29d/0x3e0
[  398.503939][T15118]        kernel_init+0x22/0x1d0
[  398.508790][T15118]        ret_from_fork+0x514/0xb70
[  398.513898][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.519185][T15118] 
[  398.519185][T15118] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  398.526997][T15118]        __mutex_lock+0x197/0x15a0
[  398.532107][T15118]        elevator_change+0x1af/0x480
[  398.537395][T15118]        elevator_set_none+0xb5/0x140
[  398.542767][T15118]        blk_mq_update_nr_hw_queues+0x5ef/0x19e0
[  398.549090][T15118]        nbd_start_device+0x189/0xb30
[  398.554452][T15118]        nbd_genl_connect+0x167d/0x1cd0
[  398.560004][T15118]        genl_family_rcv_msg_doit+0x233/0x340
[  398.566065][T15118]        genl_rcv_msg+0x614/0x7a0
[  398.571081][T15118]        netlink_rcv_skb+0x226/0x4a0
[  398.576374][T15118]        genl_rcv+0x28/0x40
[  398.580877][T15118]        netlink_unicast+0x8ef/0xa80
[  398.586162][T15118]        netlink_sendmsg+0x7f0/0xb20
[  398.591447][T15118]        sock_sendmsg_nosec+0x14e/0x190
[  398.597009][T15118]        ____sys_sendmsg+0x54e/0x850
[  398.602291][T15118]        ___sys_sendmsg+0x2a5/0x360
[  398.607483][T15118]        __x64_sys_sendmsg+0x1b1/0x290
[  398.612949][T15118]        do_syscall_64+0x166/0x520
[  398.618058][T15118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.624471][T15118] 
[  398.624471][T15118] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  398.633077][T15118]        blk_alloc_queue+0x544/0x690
[  398.638368][T15118]        __blk_mq_alloc_disk+0x194/0x390
[  398.643997][T15118]        nbd_dev_add+0x494/0xb60
[  398.648926][T15118]        nbd_init+0x168/0x1f0
[  398.653597][T15118]        do_one_initcall+0x250/0x870
[  398.658883][T15118]        do_initcall_level+0x10a/0x1a0
[  398.664347][T15118]        do_initcalls+0x59/0xa0
[  398.669195][T15118]        kernel_init_freeable+0x29d/0x3e0
[  398.674933][T15118]        kernel_init+0x22/0x1d0
[  398.679786][T15118]        ret_from_fork+0x514/0xb70
[  398.684897][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.690193][T15118] 
[  398.690193][T15118] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  398.697403][T15118]        fs_reclaim_acquire+0x71/0x100
[  398.702871][T15118]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  398.709115][T15118]        alloc_inode+0xb8/0x1b0
[  398.713967][T15118]        iget_locked+0x12c/0x690
[  398.718908][T15118]        kernfs_get_inode+0x4f/0x770
[  398.724192][T15118]        kernfs_get_tree+0x5cd/0x980
[  398.729478][T15118]        vfs_get_tree+0x92/0x2a0
[  398.734419][T15118]        do_new_mount+0x325/0xb00
[  398.739443][T15118]        __se_sys_mount+0x31d/0x420
[  398.744659][T15118]        do_syscall_64+0x166/0x520
[  398.749772][T15118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.756186][T15118] 
[  398.756186][T15118] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  398.764174][T15118]        down_write+0x91/0x200
[  398.768935][T15118]        kernfs_remove_by_name_ns+0x4e/0x140
[  398.774917][T15118]        device_links_driver_bound+0x4ab/0x1440
[  398.781228][T15118]        driver_bound+0xd8/0x2e0
[  398.786191][T15118]        really_probe+0x774/0xae0
[  398.791236][T15118]        __driver_probe_device+0x1e8/0x360
[  398.797050][T15118]        driver_probe_device+0x4f/0x240
[  398.802604][T15118]        __device_attach_driver+0x270/0x410
[  398.808499][T15118]        bus_for_each_drv+0x258/0x2f0
[  398.813873][T15118]        __device_attach+0x2bd/0x430
[  398.819154][T15118]        device_initial_probe+0x9c/0x100
[  398.824777][T15118]        __bus_probe_device+0x126/0x220
[  398.830321][T15118]        device_add+0x7d7/0xb80
[  398.835166][T15118]        faux_device_create_with_groups+0x1a5/0x2b0
[  398.841763][T15118]        regulator_dummy_init+0x19/0x40
[  398.847309][T15118]        regulator_init+0xca/0x110
[  398.852416][T15118]        do_one_initcall+0x250/0x870
[  398.857706][T15118]        do_initcall_level+0x10a/0x1a0
[  398.863192][T15118]        do_initcalls+0x59/0xa0
[  398.868053][T15118]        kernel_init_freeable+0x29d/0x3e0
[  398.873778][T15118]        kernel_init+0x22/0x1d0
[  398.878643][T15118]        ret_from_fork+0x514/0xb70
[  398.883752][T15118]        ret_from_fork_asm+0x1a/0x30
[  398.889038][T15118] 
[  398.889038][T15118] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  398.897638][T15118]        __lock_acquire+0x164c/0x2de0
[  398.903015][T15118]        lock_acquire+0x115/0x350
[  398.908044][T15118]        down_read+0x45/0x320
[  398.912717][T15118]        kernfs_remove+0x35/0x80
[  398.917652][T15118]        __kobject_del+0xe0/0x310
[  398.922678][T15118]        kobject_del+0x45/0x60
[  398.927444][T15118]        cleanup_glue_dir+0x1a3/0x220
[  398.932815][T15118]        device_del+0x77d/0x8f0
[  398.937662][T15118]        cdev_device_del+0x27/0xf0
[  398.942767][T15118]        ib_umad_kill_port+0xf2/0x310
[  398.948134][T15118]        ib_umad_remove_one+0x160/0x270
[  398.953674][T15118]        remove_client_context+0xb9/0x1e0
[  398.959395][T15118]        disable_device+0x137/0x330
[  398.964592][T15118]        __ib_unregister_device+0x2c9/0x400
[  398.970478][T15118]        ib_unregister_device_and_put+0xb8/0xf0
[  398.976718][T15118]        nldev_dellink+0x3a4/0x440
[  398.981834][T15118]        rdma_nl_rcv+0x6ef/0xa40
[  398.986783][T15118]        netlink_unicast+0x8ef/0xa80
[  398.992069][T15118]        netlink_sendmsg+0x7f0/0xb20
[  398.997356][T15118]        sock_sendmsg_nosec+0x14e/0x190
[  399.002899][T15118]        ____sys_sendmsg+0x54e/0x850
[  399.008178][T15118]        ___sys_sendmsg+0x2a5/0x360
[  399.013370][T15118]        __x64_sys_sendmsg+0x1b1/0x290
[  399.018829][T15118]        do_syscall_64+0x166/0x520
[  399.023938][T15118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.030355][T15118] 
[  399.030355][T15118] other info that might help us debug this:
[  399.030355][T15118] 
[  399.040579][T15118] Chain exists of:
[  399.040579][T15118]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  399.040579][T15118] 
[  399.053965][T15118]  Possible unsafe locking scenario:
[  399.053965][T15118] 
[  399.061418][T15118]        CPU0                    CPU1
[  399.066783][T15118]        ----                    ----
[  399.072139][T15118]   lock(gdp_mutex);
[  399.076032][T15118]                                lock(cpuhp_state-up);
[  399.082958][T15118]                                lock(gdp_mutex);
[  399.089365][T15118]   rlock(&root->kernfs_supers_rwsem);
[  399.094822][T15118] 
[  399.094822][T15118]  *** DEADLOCK ***
[  399.094822][T15118] 
[  399.102958][T15118] locks held by syz.1.2450/15118: 3, last CPU#1:
[  399.109288][T15118]  #0: ffffffff9c041788 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[  399.119330][T15118]  #1: ffff88801c790730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400
[  399.130744][T15118]  #2: ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  399.139890][T15118] 
[  399.139890][T15118] stack backtrace:
[  399.145806][T15118] CPU: 1 UID: 0 PID: 15118 Comm: syz.1.2450 Not tainted syzkaller #0 PREEMPT(full) 
[  399.155197][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  399.165276][T15118] Call Trace:
[  399.168557][T15118]  <TASK>
[  399.171484][T15118]  dump_stack_lvl+0xe8/0x150
[  399.176090][T15118]  print_circular_bug+0x2e2/0x300
[  399.181122][T15118]  check_noncircular+0x12f/0x150
[  399.186068][T15118]  __lock_acquire+0x164c/0x2de0
[  399.190936][T15118]  lock_acquire+0x115/0x350
[  399.195438][T15118]  ? kernfs_remove+0x35/0x80
[  399.200035][T15118]  down_read+0x45/0x320
[  399.204199][T15118]  ? kernfs_remove+0x35/0x80
[  399.208793][T15118]  kernfs_remove+0x35/0x80
[  399.213207][T15118]  __kobject_del+0xe0/0x310
[  399.217726][T15118]  kobject_del+0x45/0x60
[  399.221972][T15118]  cleanup_glue_dir+0x1a3/0x220
[  399.226831][T15118]  device_del+0x77d/0x8f0
[  399.231166][T15118]  ? __pfx_device_del+0x10/0x10
[  399.236016][T15118]  ? xa_load+0x60/0x210
[  399.240178][T15118]  cdev_device_del+0x27/0xf0
[  399.244764][T15118]  ib_umad_kill_port+0xf2/0x310
[  399.249614][T15118]  ib_umad_remove_one+0x160/0x270
[  399.254640][T15118]  ? __pfx_ib_umad_remove_one+0x10/0x10
[  399.260189][T15118]  remove_client_context+0xb9/0x1e0
[  399.265403][T15118]  disable_device+0x137/0x330
[  399.270081][T15118]  ? __pfx_disable_device+0x10/0x10
[  399.275279][T15118]  ? __mutex_unlock_slowpath+0x731/0x900
[  399.280916][T15118]  __ib_unregister_device+0x2c9/0x400
[  399.286291][T15118]  ib_unregister_device_and_put+0xb8/0xf0
[  399.292015][T15118]  nldev_dellink+0x3a4/0x440
[  399.296615][T15118]  ? __lock_acquire+0x747/0x2de0
[  399.301555][T15118]  ? __pfx_nldev_dellink+0x10/0x10
[  399.306714][T15118]  ? apparmor_capable+0x126/0x170
[  399.311746][T15118]  ? bpf_lsm_capable+0x9/0x20
[  399.316425][T15118]  ? security_capable+0x7e/0x2c0
[  399.321370][T15118]  ? __pfx_nldev_dellink+0x10/0x10
[  399.326486][T15118]  rdma_nl_rcv+0x6ef/0xa40
[  399.330913][T15118]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  399.335863][T15118]  ? netlink_deliver_tap+0x2e/0x1b0
[  399.341065][T15118]  ? netlink_deliver_tap+0x2e/0x1b0
[  399.346267][T15118]  netlink_unicast+0x8ef/0xa80
[  399.351040][T15118]  netlink_sendmsg+0x7f0/0xb20
[  399.355808][T15118]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.361100][T15118]  ? aa_sock_msg_perm+0x144/0x210
[  399.366126][T15118]  ? apparmor_socket_sendmsg+0x98/0x360
[  399.371681][T15118]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.376979][T15118]  sock_sendmsg_nosec+0x14e/0x190
[  399.382011][T15118]  ____sys_sendmsg+0x54e/0x850
[  399.386772][T15118]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.392055][T15118]  ? import_iovec+0x73/0xa0
[  399.396560][T15118]  ___sys_sendmsg+0x2a5/0x360
[  399.401248][T15118]  ? __lock_acquire+0x747/0x2de0
[  399.406207][T15118]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.411473][T15118]  ? futex_wait+0x2a2/0x390
[  399.416042][T15118]  ? __fget_files+0x3a2/0x420
[  399.420723][T15118]  ? __fget_files+0x2a/0x420
[  399.425318][T15118]  __x64_sys_sendmsg+0x1b1/0x290
[  399.430260][T15118]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.435738][T15118]  do_syscall_64+0x166/0x520
[  399.440365][T15118]  ? trace_irq_disable+0x3b/0x140
[  399.445428][T15118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.451568][T15118]  ? clear_bhb_loop+0x70/0xc0
[  399.456246][T15118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.462152][T15118] RIP: 0033:0x7f498df9fb19
[  399.466576][T15118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.486187][T15118] RSP: 002b:00007f498ee1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.494607][T15118] RAX: ffffffffffffffda RBX: 00007f498e225fa0 RCX: 00007f498df9fb19
[  399.502581][T15118] RDX: 000000000000c090 RSI: 00002000000002c0 RDI: 0000000000000008
[  399.510553][T15118] RBP: 00007f498e037b70 R08: 0000000000000000 R09: 0000000000000000
[  399.518527][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.526512][T15118] R13: 00007f498e226038 R14: 00007f498e225fa0 R15: 00007ffefa85b0b8
[  399.534495][T15118]  </TASK>
[  399.584994][T15118] smbdirect: ib_dev[syz2] removed
[  399.586019][T15127] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  399.586670][T15127] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  402.952601][ T6783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)