last executing test programs:

5m23.285383404s ago: executing program 2 (id=504):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10000000, 0x2}, 0x20)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0x9, "0a1f0ca7865b1e0629"})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth0_to_hsr\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r7=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'veth0_to_hsr\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ')*.:)'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '}'}]}, 0x74}, 0x1, 0x0, 0x0, 0x27e419ca4b64f2b3}, 0x4)
close(r0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x8d}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x19, &(0x7f00000006c0)=""/25, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x2, 0x1, 0x7, 0x8}, {0x5, 0x2, 0xd, 0xa}, {0x3, 0x5, 0x8, 0x9}, {0x1, 0x2, 0x6, 0x4}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x1}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={<r9=>r0, 0xfffffffffffffff8, 0x8000000000000001, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x17, &(0x7f00000003c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x1, 0xc, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3d}], &(0x7f0000000480)='GPL\x00', 0x8, 0x4f, &(0x7f00000004c0)=""/79, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x7, 0x6}, 0x10, 0xffffffffffffffff, r8, 0x6, &(0x7f0000000940)=[0xffffffffffffffff, r9], &(0x7f0000000980)=[{0x0, 0x1, 0x3, 0x9}, {0x5, 0x3, 0x3, 0x8}, {0x0, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x8, 0x7}, {0x5, 0x3, 0x4, 0xc}, {0x2, 0x4, 0x1, 0x9}], 0x10, 0x22}, 0x94)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r10, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x91}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4840)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000c00)=[@in6={0xa, 0x4e22, 0x1000, @private1, 0x2930}, @in6={0xa, 0x4e23, 0x80000000, @mcast1}, @in6={0xa, 0x4e20, 0xfffffffe, @empty, 0x4f1}], 0x54)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r8, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000d40)=[{}], 0x8, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000f80)={@remote, r11}, 0x14)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r12 = openat$cgroup_type(r9, &(0x7f0000000fc0), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000001000)={0x0, 0x1, 0x6, 0xf43a})
r13 = openat$cgroup_ro(r9, &(0x7f0000001240)='memory.events\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r9, <r14=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r8}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x23, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xff36}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='GPL\x00', 0x9, 0x7, &(0x7f00000011c0)=""/7, 0x40f00, 0x31, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x4, 0x4, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001340)=[r13, r9, r9, r14, r9, r9, r9, r9, r9], &(0x7f0000001380)=[{0x3, 0x3, 0xc, 0x5}], 0x10, 0x9}, 0x94)
ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0)
sendmsg$nl_route(r9, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=@ipv4_deladdr={0x3c, 0x15, 0x800, 0x70bd28, 0x25dfdbfd, {0x2, 0x1f, 0x17, 0xff, r11}, [@IFA_LABEL={0x14, 0x3, 'ip_vti0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x248}, @IFA_TARGET_NETNSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000001600)={0x0, 0x8, 0x1, [0x3]}, 0xa)

5m22.944277523s ago: executing program 2 (id=506):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', r4, 0x1, 0x10, 0x47f, 0xfffffff7, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @local}}}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
close(r6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYBLOB="02020000010000000300"/28, @ANYBLOB="489e0ac4f84c6e061c03e288552ba7f03fdda5bcbc223ca1e4478725c0ae7e140c5d106b6f299f410f5954a613ad94548dfb7ca516bc104dadc7df930c", @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES64], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r7 = socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0xb7f8d3da1ac189b1, 0xffffffffffffffff, 0xefffd000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000040)="fffe7cada6a5261bcec210b82e0b802593dc5b508e871a48569033da", 0x1c}], 0x2}, 0x1000)
bind$inet(r7, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

5m22.720034651s ago: executing program 2 (id=509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x40)

5m22.376903576s ago: executing program 2 (id=513):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040081)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000a00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c005020000001bd300058edb7c"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)
readv(r1, &(0x7f00000003c0), 0x0)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
r5 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='5\x00'/12, @ANYBLOB="293526050d62eb566f826f0bb45e5fdcbe464108f1100b2bce951bf5ea622f3c3721cd8ffa43900dea0d7bdab566a4aa9881", @ANYBLOB="392c01515ccd52ae7ce2b2cf845c497c6f15e2857ed34bd225c38c451e2d236654a8855654ff584cf0eab6f2264c0b8c7eff7b77588ee5e51761ca7311fe4c1999e22d2b", @ANYRESHEX=r3], 0x20)
sendmsg$nl_route(r3, 0x0, 0x24040040)
r6 = socket$kcm(0x21, 0x5, 0x2)
sendmsg$kcm(r6, 0x0, 0xff00)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
socket$netlink(0x10, 0x3, 0x0)

5m21.326802949s ago: executing program 2 (id=521):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$inet(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1", 0x1}], 0x1}}], 0x1, 0x8000)
sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b00)="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", 0x501}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="78000000000000002900000039000000730c020900000000fe8000000000000000000000000000bbfc01000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aafe88000000000000000000000000000160000000000000002900000037000000080800000000000001040000000004010a0730000000030a020500060000000000000001000000000000000700000000000000f9ffffffffffffff020000000000000005020040050200080000000000200000000000000029000000000000003c00000000000000010500000000000038000000000000002900000039000000670401a500000000ff0100000000000000000000000000010000000000000000000000000000000028"], 0x158}, 0x20000005) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x80000005, 0xb51b, 0xe}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001200010a000000000200edff7f00000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a00fa006200000b21"], 0x2a)

5m20.874342608s ago: executing program 2 (id=523):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x68}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xa4)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11)

5m5.567225272s ago: executing program 32 (id=523):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x68}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xa4)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11)

2.705234906s ago: executing program 4 (id=3100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pK    \x00'}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f0000000400)="15f589a33d09576660fed4739d951e676dcfbeec91f195a7f4d2810b7ba297aedfea9cd9965185647de1955955c340e0b82fb45f63a24c371bfffef773f82dabf4e62656f313022fa00c799791b2eac4e40d0fb17c52882e65e5b95aeafee118f81aba0ae2879da2a39cbb616c3781850990208c62cad4431c", &(0x7f0000000480)=""/155, 0x4}, 0x29)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x4004000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}}, 0x24}}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYBLOB="62bd0dfb4da62318f545b4670b2e250fa721e9e90c320e"], 0x1c}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x24, 0x10, 0x800, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xa}, {0xffee, 0xfff6}, {0x2, 0xd}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.29359291s ago: executing program 5 (id=3105):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100030000000000000081"], 0x30}}, 0x0) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r3, 0xffffffff) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x1, &(0x7f0000000380)}], 0x1, 0x40800) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/83, 0x53}], 0x1}, 0x0) (async, rerun: 64)
r6 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 64)
sendmmsg$unix(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045)
sendmsg$netlink(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 32)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) (async)
preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async)
connect$unix(r1, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
close(r0) (async)
bind$unix(r0, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.932933407s ago: executing program 5 (id=3109):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

1.932289555s ago: executing program 5 (id=3110):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x17}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c5)

1.748602807s ago: executing program 0 (id=3113):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000400)={<r5=>r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x3}, 0x8)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000000000006911d40000000000060000e600000000000000000000000023f3e373c3938c42ed6a186899d2b845e8cf318efdecab9c1f2fd832186afa61e138bcba565bc5166aedacf36bcc51694d4a86ee318ef7d845efa549e981478bd6d78d88a811ae2ee1828e88abced50312ea2597a7a310d14087ee65309cfe25b15973cd73eba44d2b1b535c9f6197df8e3049378bb5fc6c1b15f08825ad623a4eb5b968abf211372dc9f84eae9962ea76a963f8039eb07ed780cc9b4bc3c58aeeda5dcb1635f1f9e99b98cf976db097ee015b511c9a7080bbaef8f8415867"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002c341a7a5c3f7d43b5b089dd2477cdbd7000fbdbdf25090000001400086909000002000000000300f0ffffff04000780400007800500000008000200970e0000040004002cffffffffffff7f0000000800010009eeffff070001000008000008000100000800000800020003000000"], 0x68}}, 0x8040) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async)
sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0)

1.748263473s ago: executing program 5 (id=3114):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1.726173233s ago: executing program 3 (id=3115):
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
sendmmsg$inet6(r1, &(0x7f0000006a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x17000, @local, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001880)="af", 0x1}], 0x1}}], 0x2, 0x80c0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x800)

1.680714739s ago: executing program 4 (id=3116):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
close(r0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, 0x53)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x19}})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2ef, 0x2}, 0xe)

1.583462301s ago: executing program 0 (id=3117):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa9}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10) (async)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xc1, 0xab, &(0x7f00000006c0)="7ed48ab653cae16e14fa014487e3783a9f53ad156a4bf9450e992f3a4bffed34b962f886667218c7e4018858369f6bc24a3ab0065a51556480a33148f19a4b82a07b054578977878ce5a9ff3c6ecc4ab85f6d1ea152304e609a98e092315de88e8177a1934d98c9c6e688d73daaa3b1c348a786fbecfda094bc6a1af07b11547c5fe87bc233d6adfec3348fcf4073d6665eb9d96df57ab586d2475812839cef48f90e4ca66c82f8f59d3795749e1efe929a858049aa4fe009008f0ac3873975925", &(0x7f0000000840)=""/171, 0x3, 0x0, 0xe1, 0xae, &(0x7f0000000900)="fa1863db27c4d245a7405f74d2463c0ae78671c2f64a9e9e7cefba2cfeb11a4b80fc35aa658f9075296e8584c4bf1d5e25228d227d13fddef2a9298c29e7e5a631f2b21cd29c4a6ad733c9879d4e895f60937fe2385c4456857347c25134b583361de5815a2d93f2d09bc3e5d7c8dbd91927ce799a220eddcebbcaec1156c81cb088aefd69b5f1f91447be214f0c95ae280ab42bcc658d6f69d810f5910fa5c073c646366ef2dd757eed4c859b2616edee5c89ad8dd0ca303e2d1f5ab2466617a935168b4194919c9793eb34ac02112a44f61f6ce7f2e2d80abd23952b746a5125", &(0x7f0000000a00)="8e14e2bd5d37368806f98ea070bbc7a9f197c19ae928eb157399220d6671489c67c466f91fab17f255f7bb3e3922103b6f6c31578aaf145a7102128c6cfb723d34e5e8371fbf44b4fe1c9181800ed0cc903e2ffe40758d93f79c5967c7f277ab65d479d1b400be379cb8b4b1190b29bb3427474be4ecb025657449494fb571b54459d8baeba0f19a11b04f89acf3adf501ba96ba3c47a27fe4142f68aa4921e4d020a5380751a50ed3ace7a7ab5e", 0x1, 0x0, 0x2}, 0x50) (async)
shutdown(r3, 0x1) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r6, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c0005"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000630000000000000040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bbff3c678dd02ffa0000bf090000000000005509010000000000950000000000000047090000fcffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0)

1.507657489s ago: executing program 5 (id=3119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x9040, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local}, 0x14)

1.444155537s ago: executing program 4 (id=3120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "12b41403d1e96cda1e9a6ba8d58875bf48d539015d08dfa2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c8fe91cad30561b87ebac29c212e5e160672dfed184a59a"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xa)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4040)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @mss={0x2, 0x6}, @sack_perm, @window={0x3, 0x1, 0x8}, @sack_perm, @window={0x3, 0x6, 0xd86}], 0x6)
syz_80211_inject_frame(&(0x7f0000000400), &(0x7f0000000440)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fff}, @device_b, @broadcast, @initial, {0x6}}, @tdls_setup_cfm={0xc, 0x2, {0x1, 0x4}}}, 0x1d)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30}, 0x880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x4, 0x70}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20008840}, 0x4000)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40)
bind$vsock_stream(r4, &(0x7f00000009c0)={0x28, 0x0, 0x2711, @local}, 0x10)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000021c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)={&(0x7f0000000a40)={0x1728, 0xd, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x328, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x304, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "515d89cf87c93cdfbe6279480543d04aa5648d883195ed52782e48a5411a5beaf8093c84b1d622452ff8da77dbbe2df684a67d6a766321f672af07661efcf0362758ded7099627a6207ef7138833d8f5978b5b6ddd6831814b3780e015f3bbffb3eb1648e6899792bc14b8b4b75f5347994ae5a4163390dbdc09a209e4876f83c719402ab9ed528871ef66f0b992f86d3566a41f3c778eed5b761978b5c005bd6e8b9d0f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "94cc2f99b61f8d9c98e27cc0bb301c23843eebe9c23eef4ac783495415146d5e7be75797f6f82cef08ddd8539adb344a9a706fba60b135a5ec9943645568ff0f77eaffa74c61320de04a7038d732b513b171b4a2581c8e5199d0b99f00fe161929ccf9375e57559900942582dfffa4ffcf673cb34da41b81599cf032e0bdc2ad5a162aeb51"}, @NFTA_DATA_VALUE={0xf1, 0x1, "e03ed8b9c9955f438699fd5f71ebe4df2805750f9c9caa56789a36f248f31ef37aa0e942f7092564894e2a9012196cae9474d7b390ec67ce6eca6e37e979fc24971441e2615bfc0aaef8250e70189f838b23b90e61c78a8a43b48be8f35b08d5838fc9c9c4cf93de9cea45e0a26f111bc5671613c0eeb3d70881f08eb29fbda580ce34cafae7fd572d673e333d8675dc8fb5c5e974481fb437ab211df2d321a6bca5a988a8b1617860e2c9146934847f266016007f7fcaa1ed598c2104a7694f22822e4c4223d6d8a304cc82f2db190bf8c69f9089dfeb235e1279d300d7099d91dbdd18049b57db201003a9b2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x83, 0x1, "0fe2cd86203335f0f5ff5845463bbbd5184029c3028307b2a30d3b01b3908105ee565a434afbe7bfa403c85368d05e4b27ca288aa14709c0ee1dad986243c21c6d864a17c5f623eb11cd7cc129c92223ffc2e3ae2fa7fdf71910b46a0240bf5956bdb6b61cfe951704d06f11b33753013485c1c2d6183ab92ac04d7194587a"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13b8, 0x3, 0x0, 0x1, [{0x1254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_KEY={0x120c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "a679489c1f887801f6b797b82457b0931e42e21bd6a7f55a426015118b9d3b27abbe6a5fe04d4d08894647d9282bd0fb3c7dc51bb85eb92bd487a37d013bb9cd84f5a6de9ceda22186e87093575d964e6762b1ab3e36e5bb2c2c9b32c15b480948a680461f280061ac180f44de8f4a9c9c256a94b3f523c26a07e55ef1a8d532074628d7177446f53cfd2dcb15ea35182743d51efab9de6325a78cb5056c26e1827af83e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfd, 0x1, "e0240b073eab92bda45def81ea0c6597f1a2d9803edb211aa16c6371c7ec086b80f577b40a571b764d888844ec61699eddc35b96ecd655e41b23f49c7f5f88212763c4a8b1b06608bb65f01f5dc10b6ae024228c260cd423fcfe49c1a3ba13d2d045259055d4a11600452d70eea379a6eafbd3739c9802a1ee94a3c3c4348efff375234bfed601d1d130e00e43b4ef2dd9d2b659785e0bf2cbafd21b3041c7c2a4c50aa92c9bc2d01c907afa6d232d0a426e38c6baea4dada1d0f40b0537471c563a703a84c4a7258bdfb11a32869e2587329d961142f4fd33cad1de697fd187c76f41f2929f0a23a700752c01bac42c04418c878c39e2450f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "de604a996ae034d0ceabad98a6767380d957973a535cc4255f736dc886d196707d37d4c257d6f4c4b4b0815ff861b78634d0e1328896c96fe9ce08738837301c2d4044717ebb5b922a1395ca71309b57cc4a47b4a712b8847c6b56d5b931d51b8720a4c447dda239f9327acda3490125c392342bf3c551988c758433c255f7202e5337532b1ce34a30be271af02c92e99d19b5443d1ae8c132182dbd2b47479b5e63d96f3d7dcdd69a55ed201c4107c2632f2143c5f04afe5d48037391c95b27d847836c1778886e32e208b19255bf7c21b87e64a63a591dd2d63c017e43ae41ee245a109f2fef347089e23a2038b6a681"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc4c}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x1728}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000041}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002380)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x2, 0x1}, {0xffea, 0xfff1}, {0xffe0}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x34040840)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002500)={'ip6tnl0\x00', &(0x7f0000002480)={'syztnl1\x00', r11, 0x29, 0x8, 0xd, 0x9, 0x28, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x68, 0x8, 0x0, 0x7f}})
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002540)={0xfffffc00, 0x0, 0x4}, 0xc)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000002580)=0x1, 0x4)

1.384927251s ago: executing program 3 (id=3121):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.362758771s ago: executing program 0 (id=3122):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.103661887s ago: executing program 0 (id=3123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xd, 0x1, '!}].^&*\\\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40810)
unshare(0x20000400)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)

856.324741ms ago: executing program 5 (id=3124):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000400fffffff4000000000000000a20000000000a05000000000000000800070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8)

855.825281ms ago: executing program 0 (id=3125):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

853.938702ms ago: executing program 1 (id=3126):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000004000071105c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x35, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x3c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a300000000008000940000000010900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x4, 0x28, 0x67, 0x0, 0x7, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0xb, 0x5, [@local, @local]}]}}, @echo={0x8, 0x0, 0x0, 0x5, 0xf}}}}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000087bdcd3f8fc0000000000000000500000a28000000000a03000000000000000f000a00000708000240000000020900010073797a310000000038000000030a010100000000000000000a0000070900010073797a3100000000090003", @ANYBLOB="bd68e33d3646d6c1e42c1cfc2fc7233bf2b9dc7b4a881f7a9b37bb5e8100de37157c52443f2ef578332e6f0cea4b2f7a8982fe226b2536017da054b1122169630757f4b2908aa6a01ab48cbefd4e291f98c1f40862639b5ddac8ae59ed48640b3484d91583d32f861cb5c4abe50509a6ac32aabf86ff9c16da8f4db32f29ce42f77ac375328a1906d08c55d02b0befdaab0a3a8d4c01187fcab95795e032ddcc3fe2f8c30b0abc16b09ed071dde43cf5d7e2", @ANYBLOB="63273ad57db74c82b76036dad3de93e4078dd7a32ef6d3da5cb8f2651bdadfe155618c3cfbb37355a73ddc43543ec0e030dbb10570c3ed269a113465e74f8ced81e6d007b583c3b9654f12be1503c1702dea9cf52c475b4f6caaf97472ccf991b637f93f24686ab8eec127c05b21ae67f6f095ac255b08c09325cc658218a6ae59c5d0c778147c6834eba7863a2ee7c9179236ba5d6476ce2fa6002c0a5a398b5bb1fc7fbd1dcccf355921302bd28d7fdb08607bc1e87f5fa021c7e58066bd94ea1252f2acfd13136b7f10e843461a24d4cca1e39c6cdda2625eab09b974d4340cf028d2d30ea6e317a15fec115d32138ab6cd0fee94cd", @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000004000071105c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x35, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x3c) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a300000000008000940000000010900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x4, 0x28, 0x67, 0x0, 0x7, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0xb, 0x5, [@local, @local]}]}}, @echo={0x8, 0x0, 0x0, 0x5, 0xf}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000087bdcd3f8fc0000000000000000500000a28000000000a03000000000000000f000a00000708000240000000020900010073797a310000000038000000030a010100000000000000000a0000070900010073797a3100000000090003", @ANYBLOB="bd68e33d3646d6c1e42c1cfc2fc7233bf2b9dc7b4a881f7a9b37bb5e8100de37157c52443f2ef578332e6f0cea4b2f7a8982fe226b2536017da054b1122169630757f4b2908aa6a01ab48cbefd4e291f98c1f40862639b5ddac8ae59ed48640b3484d91583d32f861cb5c4abe50509a6ac32aabf86ff9c16da8f4db32f29ce42f77ac375328a1906d08c55d02b0befdaab0a3a8d4c01187fcab95795e032ddcc3fe2f8c30b0abc16b09ed071dde43cf5d7e2", @ANYBLOB="63273ad57db74c82b76036dad3de93e4078dd7a32ef6d3da5cb8f2651bdadfe155618c3cfbb37355a73ddc43543ec0e030dbb10570c3ed269a113465e74f8ced81e6d007b583c3b9654f12be1503c1702dea9cf52c475b4f6caaf97472ccf991b637f93f24686ab8eec127c05b21ae67f6f095ac255b08c09325cc658218a6ae59c5d0c778147c6834eba7863a2ee7c9179236ba5d6476ce2fa6002c0a5a398b5bb1fc7fbd1dcccf355921302bd28d7fdb08607bc1e87f5fa021c7e58066bd94ea1252f2acfd13136b7f10e843461a24d4cca1e39c6cdda2625eab09b974d4340cf028d2d30ea6e317a15fec115d32138ab6cd0fee94cd", @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async)

780.978763ms ago: executing program 3 (id=3127):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getroute={0x14, 0x1a, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c004}, 0x4040000)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="64000000190001002abd7000fbdbdf251d010900500012"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
poll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x1)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getroute={0x14, 0x1a, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c004}, 0x4040000) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="64000000190001002abd7000fbdbdf251d010900500012"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
poll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x1) (async)

690.060218ms ago: executing program 1 (id=3128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="202b00003e0007012bbd700000000000017c00000400fc80140001800d0006002d2f7b5b5d7b2d2d00000000542402"], 0x2b20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x70}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

611.903703ms ago: executing program 0 (id=3129):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0xffff}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0xff, 0x1ff, 0x54, 0x101}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}], 0x1c)
listen(r0, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)='2', 0x1}], 0x1}}], 0x1, 0x4008051)

611.09729ms ago: executing program 4 (id=3130):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4) (async)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000240)={'vxcan1\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)

522.958947ms ago: executing program 3 (id=3131):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa402, 0x10e1a}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40006}, 0x20000010) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x2c, &(0x7f0000000000)="5b158a260ada33bb5e78f4938ac7a55c4e1858c0a91f90a2388207fbbbed5d2610d18b2af998c31bf7af3602"}, {0x8, 0xe4, &(0x7f0000000240)="4d5fc7a73f00f52b8d7f2ed573e6891eb167e7b5a90ed0086fa6657dfa405eba0183468675e76aebae4f8464504747853e0d10f8c3582a17cbf8f5eb5703df67cfd6be40d4476e5609de092eca3a2a7125f42ce413999707ef364b785887a0a8e705b5019dc57e00ae9c5d9904e069f420144da032b857c5510ec6b9fde7d429874e9199fb00d8ff415aa058c89fd119048f6c7fccaa3367cc5fcf498475d6d18b03d3d361db116651455e5eee752d7d71f6f354aec522f8188b59ed28c7588d2da81f6c1d0e090a72c0ee4e647129871e2569d83a16d2197aedf2e380f54f7538af9d1e", 0x1}]}) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="13030000010203", 0x7}, {0x0, 0x8}], 0x2) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) (rerun: 32)

325.575973ms ago: executing program 4 (id=3132):
r0 = socket(0x400000000010, 0x800, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x1, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}}) (async, rerun: 32)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32)
getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x9}, {0x5, 0xa}, {0xb, 0xfff2}}}, 0x24}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000540)=[@mss={0x2, 0x6}, @sack_perm, @mss, @window={0x3, 0x9}, @window={0x3, 0x0, 0x401}, @window={0x3, 0x7bfc}, @mss={0x2, 0x2d}, @mss={0x2, 0x1000}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) (async)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000004c0)={0x0, "22e77c13da6078cecf9c63514100"}) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000014c0)={0x0, 0x100000000, 0x2, 0x1}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700)
write$tun(r5, &(0x7f00000002c0)=ANY=[], 0x33) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff}) (rerun: 64)
sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
connect$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x5}}, 0x10)

256.83292ms ago: executing program 3 (id=3133):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) (async)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="0100d6574f79fddbdf250700000008000300", @ANYRES32=r0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001060000000000000000004e001a28000000000adf00000000005e1affd502000000080001"], 0x7c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0100001000130726bd70000000000000d4a3e8fb81b4000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="5d0200b6", @ANYRES16=r5, @ANYRES64=r4, @ANYRES32=r3, @ANYBLOB="03970016005c673a89ee7561f5c88f4fc5444de24d790083593fe12b2250bab3f3594ab365aae7a93b24c5c80c86dde7e022127ddce7ba501b73addbbf4b2f6b04f6f64020086dec47a6dc179086acdd8eb3bba8026660c14400c73aa683014fe398920ad547cfb38ebfee4f62e74108000e16abc68836e53d8b4d3ec098a301a34dd15f06ca4de829f96b436f0e5ed428e07a329c9bcf730f0dba5df6a96d7fce99ff3c46ecfda09e73b71e7988016b37479654df4e", @ANYBLOB="8ca0fb9fff3ac2715c148090aee8b838895144c565d94086ca9d5f0d29f05c42f1b9a45280d50901150a267f7db0da49431c8e3287417a4c58528ad527a97dd4d578de267365b88d0c97610c4a11f8f2367fa69b8f031c95233d05b06486806114bac8bacbe1db366cc110d3b5b7b3751929f5450faa57130419b7c4a69ca1d32a1fd3081472bb89bd0460e55931634310e82db0175995367e7ed77f43cc756265d5e16f8d7e1fba12a5b2e1fc92cf9c0c5f6c2a899f005b24d0a365c751abb36cf87bf11b8181dd29d6e7c5f9d67333b70cfbe7a00e3f6d03049108c643b3d09b69c7", @ANYBLOB="64fa1232b5870a8b13a42f2028ec9f1d1d0c4d5798a6b985e44f724d81fcbb2c6e681ce693a6dd43a8c2e8cc49d1bd0c401890586ae583f987bdf5b40e961084f878acacdb950e5ec836de0d924a3fa5a5e8292dbcfa096e440c28a227c55b4eb8e53b2ecc35c29c91f7c0cbb780413d7c73d043141e6e25207a01fd7da4930e9e5a47706a9c20d41194ed795a6ae1bf0f9973de6a1d5c0b1ae439e45cc96640d40f1113bc620b1c55abc5a6ad69c4d9f721dde7fbe816dd0e976eb5d304b7252b16ae479a", @ANYRES64=0x0, @ANYRESOCT=r3, @ANYRESHEX=r6], 0x234}}, 0x24004090)

233.070698ms ago: executing program 1 (id=3134):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0}], 0x1, 0x45800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$kcm(0x29, 0x6, 0x0) (async)
socket$kcm(0x29, 0x6, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a6094ba843b4b92ceee720900000000000000000a0000040900010073797a310000000008f004400000000109000200737975310000000008000a40fffffffc140011800c000100636f756e7465720042e47050c2115872055de49d6b04000280400000000c0a010100000000000000000a0000020900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d10000001400000011002000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x20008800}, 0x40)

188.359476ms ago: executing program 1 (id=3135):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000080)=0x4f) (async, rerun: 64)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x221, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xd8, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x17b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x238}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0xf, 0xa}}, 0x16, @val={0x8c, 0x10, {0xb71, "cda6b62eecd6", @short="6a709819151adbae"}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4048001}, 0x8000)

164.13884ms ago: executing program 4 (id=3136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000240)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

100.420288ms ago: executing program 3 (id=3137):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa4}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002"], 0x38c}}, 0x0)

98.858453ms ago: executing program 1 (id=3138):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) (async)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001000)={'team0\x00', <r7=>0x0})
r8 = socket$igmp(0x2, 0x3, 0x2) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback, r10}, 0xc) (async)
sendmsg$inet(r5, &(0x7f0000000c80)={&(0x7f00000008c0)={0x2, 0x4e20, @private=0xe4000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast2}}}], 0x20}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) (async)
sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="400000457ae5ce1d81590000830000000000", 0x12}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) (async)
r11 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async)
connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, <r14=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@remote, 0x4e24, 0x7, 0x4e23, 0x2, 0x2, 0xa0, 0x0, 0x3c, 0x0, r14}, {0x8000, 0x0, 0x66be, 0x400, 0x3, 0x6c, 0x8109, 0x8}, {0x8, 0xa23a, 0xfff, 0xb7e}, 0x10000, 0x6e6bbb, 0x0, 0x1, 0x1}, {{@in=@private=0xa010102, 0x4d5, 0x33}, 0xa, @in=@private=0xa010101, 0x3506, 0x0, 0x2, 0x8, 0xfff, 0x9}}, 0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x4d2, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast1}]}, 0x104}}, 0x0)

0s ago: executing program 1 (id=3139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x11, 0x2, 0x10001)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r9], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x9040, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local}, 0x14)

kernel console output (not intermixed with test programs):

201][T12078] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  275.762256][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'.
[  275.774521][T12085] ip6t_srh: unknown srh match flags  4000
[  275.805712][T12074] team_slave_0: entered promiscuous mode
[  275.811868][T12074] team_slave_1: entered promiscuous mode
[  275.820424][T12074] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  275.842579][T12072] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  276.084424][T12088] ip6_vti0 speed is unknown, defaulting to 1000
[  276.122514][T12090] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1464'.
[  276.588372][T12110] pim6reg: entered allmulticast mode
[  276.916637][T12121] netlink: 'syz.5.1473': attribute type 7 has an invalid length.
[  276.964484][T12124] netlink: 'syz.4.1474': attribute type 1 has an invalid length.
[  276.983381][T12126] netlink: 'syz.3.1475': attribute type 16 has an invalid length.
[  276.992001][T12126] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1475'.
[  277.211733][T12134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.728385][T12153] netlink: 'syz.3.1482': attribute type 1 has an invalid length.
[  277.736737][T12154] netlink: 'syz.3.1482': attribute type 1 has an invalid length.
[  278.674396][T12148] Can't find ip_set type hasp,port,ip
[  278.693857][T12147] Can't find ip_set type hasp,port,ip
[  278.944561][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.980406][T12177] batman_adv: batadv0: Removing interface: ipvlan2
[  279.039151][T11985] Set syz1 is full, maxelem 65536 reached
[  279.088716][T12181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.188690][T12181] syzkaller0: entered promiscuous mode
[  279.199347][T12181] syzkaller0: entered allmulticast mode
[  279.296569][T12187] tipc: Resetting bearer <eth:syzkaller0>
[  279.385772][T12180] tipc: Resetting bearer <eth:syzkaller0>
[  279.422444][T12180] tipc: Disabling bearer <eth:syzkaller0>
[  280.590190][T12247] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  280.610599][T12247] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  280.640643][T12240] netlink: 'syz.1.1504': attribute type 23 has an invalid length.
[  280.733821][T12227] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  280.744473][T12227] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  280.994959][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1507'.
[  281.005284][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'.
[  281.259973][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'.
[  281.308560][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1514'.
[  281.470043][T12280] netlink: zone id is out of range
[  281.495866][T12280] netlink: zone id is out of range
[  281.501593][T12280] netlink: zone id is out of range
[  281.506851][T12280] netlink: zone id is out of range
[  281.517052][T12280] netlink: zone id is out of range
[  281.531471][T12280] netlink: zone id is out of range
[  281.536841][T12280] netlink: zone id is out of range
[  281.545985][T12280] netlink: zone id is out of range
[  281.565705][T12285] netlink: 'syz.4.1517': attribute type 14 has an invalid length.
[  281.733895][   T30] audit: type=1800 audit(1770252803.145:7): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1520" name="memory.events" dev="tmpfs" ino=716 res=0 errno=0
[  281.942379][T12317] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1527'.
[  282.061634][T12323] ip6_vti0 speed is unknown, defaulting to 1000
[  282.232644][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'.
[  282.312863][T12335] netlink: 'syz.4.1530': attribute type 1 has an invalid length.
[  282.326194][T12335] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1530'.
[  282.432902][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'.
[  282.571982][T12350] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1533'.
[  282.958930][T12368] sctp: [Deprecated]: syz.5.1537 (pid 12368) Use of int in max_burst socket option.
[  282.958930][T12368] Use struct sctp_assoc_value instead
[  283.050078][T12372] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1539'.
[  283.228084][T12375] ip6_vti0 speed is unknown, defaulting to 1000
[  283.463444][T12382] siw: device registration error -23
[  284.029633][T12401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.067584][T12394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.192326][T12412] ip6_vti0 speed is unknown, defaulting to 1000
[  284.250540][T12394] xt_CT: No such helper "pptp"
[  284.266689][T12388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.001680][T12440] xt_hashlimit: size too large, truncated to 1048576
[  285.009571][T12440] xt_hashlimit: max too large, truncated to 1048576
[  285.104052][T12434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.111806][T12434] IPv6: NLM_F_CREATE should be set when creating new route
[  285.630051][T12463] net_ratelimit: 6 callbacks suppressed
[  285.630073][T12463] openvswitch: netlink: Missing key (keys=40, expected=80)
[  285.699638][T12450] 8021q: adding VLAN 0 to HW filter on device bond8
[  285.981469][T12473] netlink: 'syz.4.1564': attribute type 13 has an invalid length.
[  286.303721][T12480] __nla_validate_parse: 5 callbacks suppressed
[  286.303743][T12480] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1568'.
[  286.320521][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'.
[  286.336344][T12477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1566'.
[  286.351438][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'.
[  286.370976][T12484] netlink: 'syz.3.1565': attribute type 18 has an invalid length.
[  286.535442][T12488] bond0: (slave dummy0): Releasing backup interface
[  286.561707][T12489] netlink: 'syz.5.1569': attribute type 10 has an invalid length.
[  286.589848][T12488] bridge_slave_0: left allmulticast mode
[  286.617128][T12488] bridge_slave_0: left promiscuous mode
[  286.641958][T12488] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.675106][T12488] bridge_slave_1: left allmulticast mode
[  286.689857][T12488] bridge_slave_1: left promiscuous mode
[  286.707361][T12488] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.742812][T12488] bond0: (slave bond_slave_0): Releasing backup interface
[  286.765875][T12488] bond0: (slave bond_slave_1): Releasing backup interface
[  286.797416][T12488] team_slave_0: left promiscuous mode
[  286.816404][T12488] team0: Port device team_slave_0 removed
[  286.837943][T12488] team_slave_1: left promiscuous mode
[  286.866659][T12488] team0: Port device team_slave_1 removed
[  286.884015][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.902392][T12488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.923217][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.930675][T12488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.973949][T12488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  287.044163][T12496] erspan0: entered promiscuous mode
[  287.202535][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'.
[  287.222962][T12505] ip6_vti0: Master is either lo or non-ether device
[  287.833186][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1578'.
[  288.016987][T12539] syzkaller0: entered promiscuous mode
[  288.051449][T12539] syzkaller0: entered allmulticast mode
[  288.533398][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'.
[  288.706615][T12553] netlink: 'syz.5.1583': attribute type 1 has an invalid length.
[  288.733301][T12553] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  288.965329][T12563] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1587'.
[  289.063684][T12568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.265419][T12568] syzkaller0: entered promiscuous mode
[  289.271069][T12568] syzkaller0: entered allmulticast mode
[  289.292961][T12568] tipc: Resetting bearer <eth:syzkaller0>
[  289.327523][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1592'.
[  289.378910][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'.
[  289.465749][ T1317] tipc: Resetting bearer <eth:syzkaller0>
[  289.502501][T12567] tipc: Resetting bearer <eth:syzkaller0>
[  291.315437][T12612] __nla_validate_parse: 2 callbacks suppressed
[  291.315470][T12612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1596'.
[  291.820510][T12567] tipc: Disabling bearer <eth:syzkaller0>
[  291.845311][T12591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  291.864199][T11886] tipc: Node number set to 3002139105
[  291.877623][T12594] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.122850][T12630] gre0: entered allmulticast mode
[  292.172541][T12631] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1600'.
[  292.195072][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'.
[  292.224870][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'.
[  292.237278][T12629] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  292.257913][T12629] bond7 (unregistering): Released all slaves
[  292.303742][T12642] netlink: 'syz.5.1602': attribute type 4 has an invalid length.
[  292.354863][T12641] siw: device registration error -23
[  292.381238][T12633] netlink: 'syz.5.1602': attribute type 4 has an invalid length.
[  292.663398][T12659] ip6_vti0 speed is unknown, defaulting to 1000
[  293.237393][T12683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'.
[  293.283498][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1613'.
[  293.312235][T12688] : entered promiscuous mode
[  293.473799][T12683] netlink: 'syz.1.1611': attribute type 1 has an invalid length.
[  293.502577][T12683] syz_tun: left promiscuous mode
[  293.521844][T12683] bond0: (slave syz_tun): Releasing backup interface
[  293.644081][T12681] ip6_vti0 speed is unknown, defaulting to 1000
[  294.046298][T12663] ip6_vti0 speed is unknown, defaulting to 1000
[  294.219926][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'.
[  294.249745][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'.
[  294.273516][T12706] netlink: 'syz.3.1619': attribute type 7 has an invalid length.
[  294.831843][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'.
[  296.433729][T12768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1635'.
[  296.467619][T12768] unsupported nlmsg_type 40
[  296.549224][T12776] netlink: 'syz.0.1636': attribute type 10 has an invalid length.
[  296.598045][T12768] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1635'.
[  296.664634][T12771] netlink: 'syz.0.1636': attribute type 39 has an invalid length.
[  296.675036][T12776] team0: Port device geneve0 removed
[  296.707898][T12778] xt_TCPMSS: Only works on TCP SYN packets
[  296.714781][T12778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.016148][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'.
[  297.128178][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1641'.
[  297.600680][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'.
[  297.686365][T12815] ip6_vti0 speed is unknown, defaulting to 1000
[  297.980733][T12830] netlink: 'syz.3.1649': attribute type 4 has an invalid length.
[  297.990280][T12830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1649'.
[  298.005658][T12830] .`: renamed from bond0
[  298.125086][T12831] nbd0: detected capacity change from 0 to 127
[  298.212195][   T52] block nbd0: Receive control failed (result -104)
[  298.417999][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1653'.
[  298.428658][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1653'.
[  298.464950][T12847] ip6_vti0 speed is unknown, defaulting to 1000
[  298.685877][T12856] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.701727][T12856] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.806200][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'.
[  298.849507][T12865] bridge0: port 3(syz_tun) entered blocking state
[  298.878308][T12865] bridge0: port 3(syz_tun) entered disabled state
[  298.912459][T12865] syz_tun: entered allmulticast mode
[  298.921704][T12865] syz_tun: entered promiscuous mode
[  298.965206][T12856] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.977684][T12856] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.097890][T12856] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.123471][T12856] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.262692][T12886] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  299.315907][T12856] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.354386][T12856] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.603954][ T1317] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.620155][ T1317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.735568][ T1317] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.754790][ T1317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.883433][   T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.891870][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.900130][   T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.931390][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.975179][T12907] macsec1: entered allmulticast mode
[  299.991664][T12907] macsec0: entered allmulticast mode
[  300.355576][T12914] bridge_slave_0: left allmulticast mode
[  300.393209][T12914] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.407836][T12914] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  300.909072][T12938] syzkaller0: entered promiscuous mode
[  300.928680][T12938] syzkaller0: entered allmulticast mode
[  300.956680][T12944] openvswitch: netlink: Message has 4 unknown bytes.
[  300.976988][T12944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.077167][T12945] ip6_vti0 speed is unknown, defaulting to 1000
[  301.188760][T12948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  301.249627][T12949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'.
[  301.713246][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  301.969988][T12971] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1687'.
[  302.039160][T12972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1686'.
[  302.442882][T12981] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1690'.
[  302.731368][T12999] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0
[  302.958521][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'.
[  303.217315][T13027] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1699'.
[  303.372571][T13031] netlink: 'syz.3.1701': attribute type 3 has an invalid length.
[  303.401955][T13031] netlink: 'syz.3.1701': attribute type 3 has an invalid length.
[  303.507693][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'.
[  303.865522][ T5484] veth0_vlan: left promiscuous mode
[  303.872416][T13055] netlink: 'syz.0.1707': attribute type 21 has an invalid length.
[  303.917197][ T5484] veth0_vlan: entered promiscuous mode
[  303.938338][T13055] netlink: 'syz.0.1707': attribute type 6 has an invalid length.
[  303.947336][T13055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1707'.
[  304.070042][T13062] netlink: 'syz.0.1710': attribute type 33 has an invalid length.
[  304.108731][T13062] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1710'.
[  304.141849][T13062] `: renamed from team0 (while UP)
[  304.427322][T13070] openvswitch: netlink: Actions may not be safe on all matching packets
[  304.470543][T13073] bridge0: entered allmulticast mode
[  304.494528][T13073] openvswitch: netlink: IP tunnel TTL not specified.
[  304.529456][T13082] openvswitch: netlink: Actions may not be safe on all matching packets
[  305.555271][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  306.577495][T13128] ip6gre1: entered promiscuous mode
[  306.601402][T13128] ip6gre1: entered allmulticast mode
[  306.790132][T13135] openvswitch: netlink: Message has -2 unknown bytes.
[  306.812228][T13135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.323092][T13157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1735'.
[  307.352208][T13157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1735'.
[  307.440138][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'.
[  307.873987][T13178] netlink: 708 bytes leftover after parsing attributes in process `syz.5.1740'.
[  307.913157][T13181] netlink: 'syz.4.1741': attribute type 1 has an invalid length.
[  307.923003][T13178] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  308.078216][T13190] xt_hashlimit: size too large, truncated to 1048576
[  308.085253][T13190] xt_hashlimit: max too large, truncated to 1048576
[  308.277302][T13200] netlink: 'syz.0.1747': attribute type 11 has an invalid length.
[  308.317529][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'.
[  308.431800][T13205] syzkaller0: entered promiscuous mode
[  308.437449][T13205] syzkaller0: entered allmulticast mode
[  308.613372][T13210] sctp: [Deprecated]: syz.0.1749 (pid 13210) Use of int in maxseg socket option.
[  308.613372][T13210] Use struct sctp_assoc_value instead
[  310.619037][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'.
[  310.635380][T13219] syz_tun: left promiscuous mode
[  310.640787][T13219] ip6gretap0: left promiscuous mode
[  310.657992][T13219] vcan0: left promiscuous mode
[  310.666843][T13219] 8021q: adding VLAN 0 to HW filter on device team0
[  310.676799][T13219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.711739][T13220] macsec0: entered promiscuous mode
[  310.732165][T13223] veth1_macvtap: entered allmulticast mode
[  310.741860][T13223] macsec0: left promiscuous mode
[  310.832868][ T9223] ip6_vti0 speed is unknown, defaulting to 1000
[  310.852017][ T9223] syz2: Port: 1 Link ACTIVE
[  310.862345][T13225] ip6_vti0 speed is unknown, defaulting to 1000
[  310.869718][ T9222] ip6_vti0 speed is unknown, defaulting to 1000
[  310.879990][T13242] sctp: [Deprecated]: syz.3.1756 (pid 13242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.879990][T13242] Use struct sctp_sack_info instead
[  311.164743][T13258] geneve4: entered promiscuous mode
[  311.187003][ T6442] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  311.201505][ T6442] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  311.231799][ T6442] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  311.263012][ T6442] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  311.407256][T13264] netlink: 'syz.0.1762': attribute type 1 has an invalid length.
[  311.435147][T13265] erspan0: entered allmulticast mode
[  311.511133][T13264] 8021q: adding VLAN 0 to HW filter on device bond6
[  311.606117][T13272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1764'.
[  312.002523][T13286] netlink: 'syz.0.1768': attribute type 4 has an invalid length.
[  312.193905][T13303] netlink: 'syz.4.1772': attribute type 8 has an invalid length.
[  312.547447][T13327] x_tables: duplicate underflow at hook 3
[  312.776640][T13345] sctp: [Deprecated]: syz.0.1783 (pid 13345) Use of int in maxseg socket option.
[  312.776640][T13345] Use struct sctp_assoc_value instead
[  312.872967][T13323] macvtap1: left promiscuous mode
[  312.878292][T13323] ip6gre1: left promiscuous mode
[  312.891515][T13323] veth5: left promiscuous mode
[  312.901762][T13323] macsec2: left promiscuous mode
[  312.943067][T13323] geneve3: left promiscuous mode
[  312.979429][T13323] geneve4: left promiscuous mode
[  312.995071][T13334] tunl0: Caught tx_queue_len zero misconfig
[  313.001571][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1780'.
[  313.024173][ T9221] ip6_vti0 speed is unknown, defaulting to 1000
[  313.044905][ T9221] syz2: Port: 1 Link DOWN
[  313.115080][ T6442] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.124747][ T6442] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  313.139831][ T9221] ip6_vti0 speed is unknown, defaulting to 1000
[  313.173781][ T6442] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.182942][ T6442] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  313.236151][ T6442] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.269752][ T6442] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  313.319338][ T6442] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.360428][ T6442] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  313.770726][T13381] delete_channel: no stack
[  313.948365][T13384] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  313.965969][T13389] ip6_vti0 speed is unknown, defaulting to 1000
[  314.096711][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1796'.
[  314.613202][T13421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1801'.
[  314.648636][T13424] netlink: 'syz.1.1803': attribute type 10 has an invalid length.
[  314.683189][T13424] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  314.696985][T13424] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  314.727061][T13426] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1801'.
[  314.823665][T13424] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  315.157115][T13425] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.215398][T13425] bond0: (slave rose0): Enslaving as an active interface with an up link
[  315.311987][T13438] bond8: option arp_interval: invalid value (18446744073709551615)
[  315.320010][T13438] bond8: option arp_interval: allowed values 0 - 2147483647
[  315.347491][T13438] bond8 (unregistering): Released all slaves
[  315.710467][T13465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'.
[  315.728903][T13466] netlink: 'syz.5.1811': attribute type 1 has an invalid length.
[  315.839324][T13469] netlink: 'syz.0.1809': attribute type 1 has an invalid length.
[  315.857634][T13466] bond3: entered promiscuous mode
[  315.921145][T13475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1811'.
[  315.948692][T13479] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1813'.
[  315.958487][T13479] ksmbd: Unknown IPC event: 1, ignore.
[  315.960913][T13466] bond3: entered allmulticast mode
[  316.136579][T13475] bond3: left promiscuous mode
[  316.148196][T13475] bond3: left allmulticast mode
[  316.163314][T13475] 8021q: adding VLAN 0 to HW filter on device bond3
[  316.297552][T13496] netlink: 'syz.0.1814': attribute type 11 has an invalid length.
[  316.330739][T13496] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1814'.
[  316.540197][T13505] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[  316.844995][T13525] veth0_vlan: left promiscuous mode
[  316.992131][T13521] ip6_vti0 speed is unknown, defaulting to 1000
[  318.143259][T13550] ip6_vti0 speed is unknown, defaulting to 1000
[  318.175187][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'.
[  318.211940][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'.
[  318.545492][T13587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'.
[  318.581495][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'.
[  319.079416][T13607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1836'.
[  319.194401][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  319.468369][T13611] ip6gretap0: entered promiscuous mode
[  319.523124][T13611] ip6gretap0: left promiscuous mode
[  319.621199][T13610] ip6_vti0 speed is unknown, defaulting to 1000
[  319.827530][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'.
[  320.147652][T13658] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1846'.
[  320.159057][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'.
[  320.180585][T13658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.298977][T13658] netlink: 'syz.4.1846': attribute type 4 has an invalid length.
[  320.313972][T13658] netlink: 'syz.4.1846': attribute type 4 has an invalid length.
[  320.327149][T13653] ip6_vti0 speed is unknown, defaulting to 1000
[  320.871787][T13679] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1851'.
[  321.164023][T13685] xt_recent: Unsupported userspace flags (000000b1)
[  322.272692][T13742] syzkaller0: entered promiscuous mode
[  322.278305][T13742] syzkaller0: entered allmulticast mode
[  322.649265][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.708705][T13770] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  322.934122][T13780] netlink: 'syz.3.1876': attribute type 8 has an invalid length.
[  323.296116][T13802] tipc: Started in network mode
[  323.327217][T13802] tipc: Node identity 220d470aad0c, cluster identity 4711
[  323.344377][T13802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.483083][T13804] syzkaller0: entered promiscuous mode
[  323.490025][T13804] syzkaller0: entered allmulticast mode
[  323.520248][T13811] __nla_validate_parse: 7 callbacks suppressed
[  323.520269][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'.
[  323.543359][T13802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.718656][T13802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.859352][T13804] ip6gretap0: entered promiscuous mode
[  323.909959][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'.
[  324.107269][T13804] tipc: Resetting bearer <eth:syzkaller0>
[  324.227694][T13804] tipc: Disabling bearer <eth:syzkaller0>
[  324.887106][T13869] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  325.050809][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'.
[  325.118627][T13875] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1895'.
[  325.185386][T13878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1895'.
[  325.755570][T13873] 8021q: adding VLAN 0 to HW filter on device bond8
[  325.942734][T13899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1900'.
[  326.109856][T13909] netlink: 'syz.5.1903': attribute type 1 has an invalid length.
[  326.143154][T13909] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.149930][   T30] audit: type=1804 audit(1770252847.555:8): pid=13908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1904" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1989 res=1 errno=0
[  326.180565][   T30] audit: type=1800 audit(1770252847.555:9): pid=13908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1904" name="cgroup.controllers" dev="tmpfs" ino=1989 res=0 errno=0
[  326.307881][T13911] bond4: (slave veth7): Enslaving as an active interface with a down link
[  326.339067][T13909] 8021q: adding VLAN 0 to HW filter on device batadv1
[  326.346699][T13909] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  326.398151][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1905'.
[  326.814903][T13943] netlink: 'syz.3.1914': attribute type 1 has an invalid length.
[  326.867151][T13943] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.890505][T13947] netlink: 'syz.5.1912': attribute type 4 has an invalid length.
[  327.020371][T13943] veth7: entered promiscuous mode
[  327.036848][T13943] bond7: (slave veth7): Enslaving as an active interface with a down link
[  327.048926][T13946] erspan0: entered allmulticast mode
[  327.063578][T13946] bond7: (slave erspan0): making interface the new active one
[  327.075513][T13946] erspan0: entered promiscuous mode
[  327.088665][T13946] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  327.541017][T13964] syz_tun: entered allmulticast mode
[  327.596913][T13964] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  327.626081][T13966] netlink: 'syz.4.1922': attribute type 1 has an invalid length.
[  327.651806][T13966] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1922'.
[  327.697794][T13962] syz_tun: left allmulticast mode
[  327.837644][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'.
[  327.856506][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1923'.
[  327.872737][T13980] .70·: renamed from hsr0
[  327.881420][T13977] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.894058][T13980] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  327.951504][T13980] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  328.001189][T13980] .70·: entered allmulticast mode
[  328.020534][T13980] hsr_slave_0: entered allmulticast mode
[  328.046884][T13980] hsr_slave_1: entered allmulticast mode
[  328.055002][T13980] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  328.072705][T13985] bond0: (slave gre0): Error: Device type is different from other slaves
[  328.238219][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 30 seconds
[  328.252352][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 30 seconds
[  328.263837][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 30 seconds
[  328.277817][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 30 seconds
[  328.742845][T14017] __nla_validate_parse: 3 callbacks suppressed
[  328.742865][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'.
[  328.773546][T14021] netlink: 'syz.0.1935': attribute type 3 has an invalid length.
[  328.782052][T14021] netlink: 'syz.0.1935': attribute type 2 has an invalid length.
[  328.868871][T14019] ip6_vti0 speed is unknown, defaulting to 1000
[  328.986274][T14037] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  329.363841][T14041] xfrm0: left allmulticast mode
[  329.438820][T14041] vlan1: left promiscuous mode
[  329.444122][T14041] bridge0: left promiscuous mode
[  329.471818][ T6442] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.481922][ T6442] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.490429][ T6442] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.499885][ T6442] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.035531][T14084] openvswitch: netlink: Key 6 has unexpected len 14 expected 2
[  330.246812][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'.
[  330.676596][T14090] syzkaller0: entered promiscuous mode
[  330.693818][T14090] syzkaller0: entered allmulticast mode
[  330.733050][T14107] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  330.742430][T14099] ip6_vti0 speed is unknown, defaulting to 1000
[  331.130176][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'.
[  331.359432][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'.
[  331.422443][T14141] netlink: 320 bytes leftover after parsing attributes in process `syz.5.1963'.
[  331.438842][T14141] nbd: must specify at least one socket
[  333.105394][T14127] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1961'.
[  333.115983][T14138] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  333.246044][T14155] x_tables: duplicate underflow at hook 2
[  333.262642][T14155] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  333.465475][T14162] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  333.512055][T14171] netlink: 'syz.1.1969': attribute type 10 has an invalid length.
[  333.550662][T14173] netlink: 'syz.5.1970': attribute type 1 has an invalid length.
[  333.695610][T14185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1970'.
[  333.732913][T14186] netlink: 'syz.3.1972': attribute type 1 has an invalid length.
[  333.765240][T14180] 8021q: adding VLAN 0 to HW filter on device batadv1
[  333.771778][T14186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1972'.
[  333.795974][T14180] bond5: (slave batadv1): making interface the new active one
[  333.833400][T14180] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  333.853707][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1972'.
[  333.931832][T14185] 8021q: adding VLAN 0 to HW filter on device bond5
[  334.222474][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1975'.
[  334.250070][T14211] netlink: 'syz.3.1974': attribute type 2 has an invalid length.
[  335.268111][T14259] netlink: 'syz.3.1987': attribute type 10 has an invalid length.
[  335.331555][T14259] netlink: 'syz.3.1987': attribute type 10 has an invalid length.
[  335.399912][T14268] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.429480][T14268] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.538608][T14268] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.579107][T14268] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.691019][T14268] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.731713][T14268] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.863674][T14287] ip6_vti0 speed is unknown, defaulting to 1000
[  335.885740][T14268] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.958817][T14268] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.192081][T14302] syzkaller0: entered promiscuous mode
[  336.197628][T14302] syzkaller0: entered allmulticast mode
[  336.267859][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'.
[  336.355972][T14319] netlink: 'syz.5.2002': attribute type 1 has an invalid length.
[  336.483696][T14319] bond6: entered promiscuous mode
[  336.499271][T14319] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.581701][T14311] ip6_vti0 speed is unknown, defaulting to 1000
[  336.649443][ T6427] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  336.661773][ T6427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.696810][ T6427] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.716596][ T6427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.872665][ T6427] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.988121][ T6427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.146732][ T6427] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  337.170149][ T6427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.218884][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'.
[  338.321701][ T1336] erspan0: left promiscuous mode
[  338.644142][T14394] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  338.750889][T14396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.824577][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2018'.
[  338.842392][T14402] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  339.027167][T14407] bond8: option lacp_active: invalid value (8)
[  339.040652][T14407] bond8 (unregistering): Released all slaves
[  339.107381][T14412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2023'.
[  339.119490][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'.
[  339.342368][T14422] pim6reg1: entered promiscuous mode
[  339.358103][T14422] pim6reg1: entered allmulticast mode
[  339.447449][T14425] netlink: 'syz.0.2028': attribute type 4 has an invalid length.
[  339.481703][T14425] netlink: 'syz.0.2028': attribute type 4 has an invalid length.
[  339.491571][T14429] IPv6: sit2: Disabled Multicast RS
[  339.572923][T14436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.661500][T14441] syzkaller0: entered promiscuous mode
[  339.676911][T14441] syzkaller0: entered allmulticast mode
[  339.779954][T14444] nbd: nbd0 already in use
[  340.271750][T14465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.323430][T14459] ip6_vti0 speed is unknown, defaulting to 1000
[  340.355698][T14465] tipc: Disabling bearer <eth:syzkaller0>
[  340.591224][T14477] netlink: 'syz.5.2041': attribute type 1 has an invalid length.
[  340.630361][T14479] 8021q: adding VLAN 0 to HW filter on device bond9
[  340.669385][T14485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2043'.
[  340.696450][T14477] bond7: entered promiscuous mode
[  340.705474][T14485] netlink: 'syz.1.2043': attribute type 1 has an invalid length.
[  340.721552][T14477] bond7: entered allmulticast mode
[  340.740697][T14477] 8021q: adding VLAN 0 to HW filter on device bond7
[  340.770897][T14483] erspan1: entered allmulticast mode
[  340.780544][T14483] bond7: (slave erspan1): making interface the new active one
[  340.788346][T14483] erspan1: entered promiscuous mode
[  340.793687][T14488] openvswitch: netlink: Duplicate key (type 21).
[  340.802220][T14483] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  340.869465][T14485] ip6gretap0: left promiscuous mode
[  340.881839][T14485] wg1: left promiscuous mode
[  340.920116][T14485] gretap1: left promiscuous mode
[  340.966010][T14485] bond6: left promiscuous mode
[  340.983476][T14485] vti0: left promiscuous mode
[  341.596099][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'.
[  341.632496][T14521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'.
[  341.659657][T14522] 8021q: VLANs not supported on ip_vti0
[  341.682180][T14521] 8021q: VLANs not supported on ip_vti0
[  341.824112][T14530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2057'.
[  341.870679][T14532] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20004
[  342.558781][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'.
[  342.568401][   T30] audit: type=1800 audit(1770252863.945:10): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2064" name="memory.events" dev="tmpfs" ino=2108 res=0 errno=0
[  342.600232][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2064'.
[  342.659940][T14560] gre2: entered allmulticast mode
[  342.670566][T14556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.759119][T14563] syz_tun: left allmulticast mode
[  342.790523][T14563] syz_tun: left promiscuous mode
[  342.798645][T14563] bridge0: port 3(syz_tun) entered disabled state
[  342.811121][T14563] bridge_slave_1: left allmulticast mode
[  342.817230][T14563] bridge_slave_1: left promiscuous mode
[  342.823273][T14563] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.835338][T14563] bond0: (slave 
3
2
): Releasing backup interface
[  342.846025][T14563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.856087][T14563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.866186][T14563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.036365][T14573] ip6_vti0 speed is unknown, defaulting to 1000
[  343.134712][T14581] netlink: 'syz.4.2072': attribute type 1 has an invalid length.
[  343.251135][T14585] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  343.273603][T14585] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  343.391042][T14589] macvlan0: entered promiscuous mode
[  343.396841][T14589] macvlan0: entered allmulticast mode
[  343.405018][T14589] bond10: entered promiscuous mode
[  343.421666][T14589] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  343.453950][T14589] bond10: left promiscuous mode
[  346.086964][T14631] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2085'.
[  346.122933][T14636] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2084'.
[  346.215223][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'.
[  346.315235][T14641] ip6_vti0 speed is unknown, defaulting to 1000
[  346.406078][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'.
[  346.842109][T14652] netlink: 'syz.0.2088': attribute type 1 has an invalid length.
[  346.850226][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  346.962396][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'.
[  349.139424][   T52] block nbd1: Receive control failed (result -1)
[  349.377729][T14656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2089'.
[  349.388877][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'.
[  349.547134][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'.
[  349.713092][T14663] delete_channel: no stack
[  350.001960][T14676] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  350.024903][T14680] ip6_vti0 speed is unknown, defaulting to 1000
[  350.062016][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'.
[  350.277669][T14695] 0ªî{X¹¦: renamed from gretap0
[  350.400384][T14695] 0ªî{X¹¦: entered allmulticast mode
[  350.421804][T14695] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  350.493038][T14707] openvswitch: netlink: Missing key (keys=40, expected=80)
[  350.502112][T14692] ip6_vti0 speed is unknown, defaulting to 1000
[  350.907271][T14722] syzkaller0: entered promiscuous mode
[  350.913194][T14722] syzkaller0: entered allmulticast mode
[  351.168720][T14704] ip6_vti0 speed is unknown, defaulting to 1000
[  351.537072][T14748] netlink: 'syz.4.2112': attribute type 8 has an invalid length.
[  352.029344][T14766] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  352.238373][T14775] __nla_validate_parse: 2 callbacks suppressed
[  352.238398][T14775] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2121'.
[  352.318339][T14776] netlink: 'syz.3.2119': attribute type 16 has an invalid length.
[  352.341564][T14776] netlink: 'syz.3.2119': attribute type 2 has an invalid length.
[  352.351820][T14776] netlink: 64098 bytes leftover after parsing attributes in process `syz.3.2119'.
[  352.410342][T14781] xt_connbytes: Forcing CT accounting to be enabled
[  352.460827][T14785] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  352.748263][T14792] netlink: 'syz.3.2123': attribute type 2 has an invalid length.
[  352.757116][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'.
[  352.824007][T14791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  352.840832][T14797] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2125'.
[  352.854383][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'.
[  352.904661][T14797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.994984][T14801] bond8: ARP target 9.0.0.0 is already present
[  353.037886][T14801] bond8: option arp_ip_target: invalid value (9)
[  353.080609][T14801] bond8 (unregistering): Released all slaves
[  353.304932][T14819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2129'.
[  353.343595][T14819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2129'.
[  353.372946][T14819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2129'.
[  353.454443][T14823] 0ªî{X¹¦: left allmulticast mode
[  353.511130][T14823] 8021q: adding VLAN 0 to HW filter on device team0
[  353.689195][T14823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.903764][T14842] SET target dimension over the limit!
[  353.967145][T14845] netlink: 'syz.4.2134': attribute type 30 has an invalid length.
[  353.986586][T14845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2134'.
[  354.032814][T14845] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  354.063514][T14845] bond12 (unregistering): Released all slaves
[  354.411441][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.438779][T14867] ip6_vti0 speed is unknown, defaulting to 1000
[  354.445679][T14876] Bluetooth: MGMT ver 1.23
[  354.674600][T14881] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2146'.
[  354.911198][T14886] syzkaller0: entered promiscuous mode
[  354.937974][T14886] syzkaller0: entered allmulticast mode
[  356.277552][T14908] ip6_vti0 speed is unknown, defaulting to 1000
[  356.430607][T14924] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  356.564761][T14923] ip6_vti0 speed is unknown, defaulting to 1000
[  357.409885][T14947] __nla_validate_parse: 5 callbacks suppressed
[  357.409909][T14947] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2163'.
[  357.687916][T14953] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  357.952271][T14964] xt_ecn: cannot match TCP bits for non-tcp packets
[  358.025437][T14966] wg1: entered promiscuous mode
[  358.037086][T14966] wg1: entered allmulticast mode
[  358.276641][T14971] netlink: 'syz.5.2171': attribute type 11 has an invalid length.
[  358.315068][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 60 seconds
[  358.326084][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 60 seconds
[  358.338495][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 60 seconds
[  358.349743][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 60 seconds
[  358.685028][T14983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2173'.
[  359.038446][T15003] netlink: 'syz.5.2178': attribute type 7 has an invalid length.
[  359.046519][T15003] netlink: 'syz.5.2178': attribute type 8 has an invalid length.
[  359.056230][T15003] netlink: 'syz.5.2178': attribute type 8 has an invalid length.
[  359.064561][T15003] netlink: 'syz.5.2178': attribute type 4 has an invalid length.
[  359.091339][T15003] netlink: 'syz.5.2178': attribute type 7 has an invalid length.
[  359.119144][T15003] netlink: 207236 bytes leftover after parsing attributes in process `syz.5.2178'.
[  359.237208][T15003] netlink: 'syz.5.2178': attribute type 1 has an invalid length.
[  359.252023][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2178'.
[  359.320085][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'.
[  359.359309][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  360.434864][T15060] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2188'.
[  360.455688][T15060] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2188'.
[  360.473237][T15060] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2188'.
[  360.513220][T15059] x_tables: duplicate underflow at hook 1
[  360.777982][T15072] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2199'.
[  361.185296][T15093] netlink: 'syz.0.2204': attribute type 2 has an invalid length.
[  361.194025][T15093] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  361.584581][T15117] ip6_vti0 speed is unknown, defaulting to 1000
[  362.297276][T15147] netlink: 'syz.1.2219': attribute type 2 has an invalid length.
[  362.319194][T15147] hmac(sha224): entered promiscuous mode
[  362.335565][T15147] bridge_slave_0: entered promiscuous mode
[  362.554125][T15158] netlink: 'syz.3.2221': attribute type 11 has an invalid length.
[  362.683588][T15150] NFSD: Failed to start, no listeners configured.
[  362.724415][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.766276][T15158] syzkaller0: entered promiscuous mode
[  362.783018][T15158] syzkaller0: entered allmulticast mode
[  362.859317][T15163] __nla_validate_parse: 1 callbacks suppressed
[  362.859341][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'.
[  363.155421][T15181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2226'.
[  365.204484][T15163] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  365.263657][T15187] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.466315][T15209] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  365.493126][T15203] ip6_vti0 speed is unknown, defaulting to 1000
[  365.508795][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'.
[  366.128232][T15240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2238'.
[  366.379283][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'.
[  366.404663][T15250] netlink: 'syz.1.2241': attribute type 3 has an invalid length.
[  366.517112][T15253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2242'.
[  366.537785][T15253] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2242'.
[  366.844521][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'.
[  366.878216][T15271] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.957958][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2248'.
[  367.157014][T15280] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2249'.
[  367.654652][T15311] syzkaller1: entered promiscuous mode
[  367.703961][T15318] syzkaller0: entered promiscuous mode
[  367.712929][T15318] syzkaller0: entered allmulticast mode
[  367.743972][T15314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.769917][T15312] tipc: Resetting bearer <eth:syzkaller0>
[  367.831645][T15312] tipc: Disabling bearer <eth:syzkaller0>
[  367.885841][T15321] ip6_vti0 speed is unknown, defaulting to 1000
[  368.274266][T15348] netlink: 'syz.3.2264': attribute type 15 has an invalid length.
[  368.291813][T15346] __nla_validate_parse: 3 callbacks suppressed
[  368.291833][T15346] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2265'.
[  368.312637][T15348] IPVS: sed: FWM 3 0x00000003 - no destination available
[  368.338263][T15346] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  368.456591][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'.
[  368.485792][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'.
[  368.597421][T15342] ip6_vti0 speed is unknown, defaulting to 1000
[  368.915230][T15370] bond9: option packets_per_slave: invalid value (1048582)
[  368.935873][T15370] bond9: option packets_per_slave: allowed values 0 - 65535
[  368.987924][T15370] bond9 (unregistering): Released all slaves
[  369.442720][T15388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2276'.
[  369.961661][T15397] openvswitch: netlink: Actions may not be safe on all matching packets
[  369.999862][T15397] netlink: 'syz.0.2279': attribute type 5 has an invalid length.
[  370.087295][T15404] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  370.353007][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'.
[  370.394039][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2285'.
[  370.413707][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'.
[  370.506061][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'.
[  370.538627][T15427] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2286'.
[  370.668430][T15432] ip6_vti0 speed is unknown, defaulting to 1000
[  370.683160][T15425] dummy0: entered promiscuous mode
[  370.700594][T15425] macsec2: entered promiscuous mode
[  370.711191][T15425] macsec2: entered allmulticast mode
[  370.717337][T15425] dummy0: entered allmulticast mode
[  370.728095][T15425] dummy0: left allmulticast mode
[  370.733961][T15425] dummy0: left promiscuous mode
[  372.962869][T15447] kthread_run failed with err -4
[  373.105088][T15454] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2294'.
[  373.146262][T15451] geneve2: entered promiscuous mode
[  373.171641][T15451] geneve2: entered allmulticast mode
[  373.179031][ T6435] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  373.320670][ T6435] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  373.392999][ T6435] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  373.413391][ T6435] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  373.661982][T15481] netlink: 'syz.1.2301': attribute type 3 has an invalid length.
[  373.676116][T15481] __nla_validate_parse: 1 callbacks suppressed
[  373.676138][T15481] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2301'.
[  373.707086][T15480] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  373.733289][T15481] netlink: 'syz.1.2301': attribute type 3 has an invalid length.
[  373.753590][T15481] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2301'.
[  373.756698][T15480] syzkaller0: entered promiscuous mode
[  373.792904][T15480] syzkaller0: entered allmulticast mode
[  373.946755][T15480] tipc: Resetting bearer <eth:syzkaller0>
[  373.969779][T15478] tipc: Resetting bearer <eth:syzkaller0>
[  373.994387][T15478] tipc: Disabling bearer <eth:syzkaller0>
[  374.035477][T15491] ip6_vti0 speed is unknown, defaulting to 1000
[  374.249495][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'.
[  374.308744][T15505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2310'.
[  374.476506][T15512] bond8 (unregistering): Released all slaves
[  374.518688][T15515] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  374.572959][T15518] vlan2: entered allmulticast mode
[  374.579352][T15518] bond_slave_0: entered allmulticast mode
[  374.589162][T15515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'.
[  374.902284][T15533] netlink: 'syz.0.2319': attribute type 1 has an invalid length.
[  374.966362][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'.
[  375.168605][T15545] vxcan2: entered allmulticast mode
[  375.256682][T15544] netlink: 'syz.0.2323': attribute type 2 has an invalid length.
[  375.479691][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'.
[  375.508182][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'.
[  375.645243][T15563] netlink: 'syz.1.2329': attribute type 1 has an invalid length.
[  375.700810][T15563] 8021q: adding VLAN 0 to HW filter on device bond9
[  375.900683][T15563] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  375.930222][T15563] bond9: (slave wlan0): Enslaving as an active interface with a down link
[  375.960771][T15578] bond0: Device is already in use.
[  376.159254][   T30] audit: type=1800 audit(1770252897.565:11): pid=15591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2333" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1464 res=0 errno=0
[  376.214798][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'.
[  376.287931][T15596] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2332'.
[  376.297186][T15596] openvswitch: netlink: Flow key attr not present in new flow.
[  376.596556][T15608] ip6_vti0 speed is unknown, defaulting to 1000
[  377.121498][T15611] ip6_vti0 speed is unknown, defaulting to 1000
[  377.253123][T15642] netlink: 'syz.0.2344': attribute type 13 has an invalid length.
[  377.667857][T15660] geneve3: entered promiscuous mode
[  377.816124][T15669] netlink: 'syz.1.2353': attribute type 3 has an invalid length.
[  377.860079][T15669] netlink: 'syz.1.2353': attribute type 3 has an invalid length.
[  377.970792][T15673] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  378.432114][T15688] netlink: 'syz.4.2360': attribute type 29 has an invalid length.
[  378.456830][T15688] netlink: 'syz.4.2360': attribute type 29 has an invalid length.
[  378.691741][T15702] ip6_vti0 speed is unknown, defaulting to 1000
[  378.702740][T15703] sctp: [Deprecated]: syz.5.2364 (pid 15703) Use of int in maxseg socket option.
[  378.702740][T15703] Use struct sctp_assoc_value instead
[  379.831918][T15744] ip6_vti0 speed is unknown, defaulting to 1000
[  379.959308][T15755] __nla_validate_parse: 7 callbacks suppressed
[  379.959333][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2380'.
[  380.106221][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'.
[  380.229918][T11886] IPVS: starting estimator thread 0...
[  380.345753][T15768] IPVS: using max 23 ests per chain, 55200 per kthread
[  380.639379][T15780] netlink: 'syz.5.2382': attribute type 39 has an invalid length.
[  380.769760][T15774] veth8: entered allmulticast mode
[  380.900976][T15761] ip6_vti0 speed is unknown, defaulting to 1000
[  380.911482][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2383'.
[  380.926326][T15787] tipc: Enabled bearer <ib:bridge0>, priority 10
[  381.403273][T15798] syz_tun: entered allmulticast mode
[  381.416601][T15800] netlink: 'syz.0.2387': attribute type 1 has an invalid length.
[  381.422786][T15798] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2386'.
[  381.492060][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2385'.
[  381.575525][T15800] bond8: entered promiscuous mode
[  381.592110][T15800] bond8: entered allmulticast mode
[  381.598256][T15800] 8021q: adding VLAN 0 to HW filter on device bond8
[  381.976404][T15821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2391'.
[  382.008462][T15821] netlink: 'syz.3.2391': attribute type 1 has an invalid length.
[  382.256865][T15825] bond10: option ad_select: invalid value (34)
[  382.268335][T15825] bond10 (unregistering): Released all slaves
[  382.378796][T15833] xt_CT: You must specify a L4 protocol and not use inversions on it
[  382.542220][T15842] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  382.603671][T15844] geneve4: entered promiscuous mode
[  382.639588][ T6435] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  382.663962][ T6435] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  382.702160][ T6435] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  382.817357][ T6435] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  383.009737][T15869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2402'.
[  383.057142][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'.
[  383.079446][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'.
[  383.212030][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2403'.
[  383.911594][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  383.980853][T15907] vxcan5: entered promiscuous mode
[  386.562083][T15942] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  386.573610][T15942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  386.584117][T15942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  386.644207][T15929] ip6_vti0 speed is unknown, defaulting to 1000
[  386.769328][T15976] __nla_validate_parse: 5 callbacks suppressed
[  386.769349][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2429'.
[  386.788309][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'.
[  386.799093][T15977] syzkaller1: entered promiscuous mode
[  386.811363][T15977] syzkaller1: entered allmulticast mode
[  387.312020][T15998] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  388.392565][T16042] netlink: 'syz.1.2439': attribute type 6 has an invalid length.
[  388.413056][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 90 seconds
[  388.423959][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 90 seconds
[  388.435887][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 90 seconds
[  388.446929][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 90 seconds
[  388.764092][T16020] delete_channel: no stack
[  388.813992][T16060] netlink: 'syz.4.2442': attribute type 2 has an invalid length.
[  388.984301][ T9221] IPVS: starting estimator thread 0...
[  389.020920][T16063] syzkaller0: entered promiscuous mode
[  389.051392][T16063] syzkaller0: entered allmulticast mode
[  389.071354][T16064] IPVS: using max 29 ests per chain, 69600 per kthread
[  389.408886][T16075] pimreg: tun_chr_ioctl cmd 1074025677
[  389.414946][T16075] pimreg: linktype set to 6
[  389.583602][T16081] netlink: 'syz.4.2451': attribute type 3 has an invalid length.
[  389.673917][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.759215][T16093] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  389.925917][T16104] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20004
[  389.985605][T16108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2460'.
[  390.010517][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2460'.
[  390.317368][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.330533][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.346259][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.381415][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.406199][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.431584][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.489232][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  390.984631][T16156] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  391.148641][T16124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.648884][T11886] syz0: Port: 1 Link DOWN
[  391.656415][ T1153] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.682013][ T1153] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.690512][ T1153] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.708558][ T1153] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.750227][ T1153] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.771102][ T1153] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.784876][ T1153] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.795758][ T1153] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.923329][T16175] __nla_validate_parse: 173 callbacks suppressed
[  391.923352][T16175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2475'.
[  392.195882][T16189] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2481'.
[  392.418263][T16206] netlink: 'syz.1.2484': attribute type 4 has an invalid length.
[  392.515636][T16213] nbd: must specify at least one socket
[  392.767635][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'.
[  392.781049][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2490'.
[  392.798116][T16222] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  392.857227][T16228] bond8: option broadcast_neighbor: invalid value (30)
[  392.866540][T16228] bond8 (unregistering): Released all slaves
[  392.945172][T16234] pimreg: left allmulticast mode
[  393.241591][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'.
[  393.389636][T16269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2500'.
[  393.403155][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'.
[  393.412873][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'.
[  393.432558][T16270] netlink: 'syz.5.2502': attribute type 10 has an invalid length.
[  393.450737][T16270] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2502'.
[  393.471096][T16270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  393.502239][T16270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  393.537053][T16270] hsr0: entered promiscuous mode
[  393.544488][T16270] bridge0: port 1(hsr0) entered blocking state
[  393.551112][T16270] bridge0: port 1(hsr0) entered disabled state
[  393.562602][T16270] hsr0: entered allmulticast mode
[  393.572143][T16270] hsr_slave_0: entered allmulticast mode
[  393.596438][T16273] netlink: 'syz.4.2504': attribute type 2 has an invalid length.
[  393.600389][T16270] hsr_slave_1: entered allmulticast mode
[  393.736136][T16287] syzkaller0: entered promiscuous mode
[  393.742301][T16287] syzkaller0: entered allmulticast mode
[  393.764938][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2507'.
[  393.780079][T16287] 0: reclassify loop, rule prio 0, protocol 800
[  393.939265][T16293] ip6_vti0 speed is unknown, defaulting to 1000
[  393.957205][T16295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.190803][T16298] netem: incorrect ge model size
[  394.196582][T16298] netem: change failed
[  394.356857][T16308] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  394.390239][T16308] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  394.882080][T16337] netlink: 'syz.5.2519': attribute type 11 has an invalid length.
[  394.892050][T16339] netlink: 'syz.5.2519': attribute type 11 has an invalid length.
[  394.943302][T16349] bridge_slave_1: invalid flags given to default FDB implementation
[  395.016891][T16346] ip6_vti0 speed is unknown, defaulting to 1000
[  395.415735][T16371] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  395.476351][T16374] sch_tbf: burst 19 is lower than device syzkaller0 mtu (1514) !
[  395.842231][T16379] ip6_vti0 speed is unknown, defaulting to 1000
[  396.078956][T16402] SET target dimension over the limit!
[  396.577951][T16422] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  397.271458][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  397.674695][T16474] __nla_validate_parse: 6 callbacks suppressed
[  397.674713][T16474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2550'.
[  397.730248][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2550'.
[  397.915870][T16487] netlink: 'syz.1.2554': attribute type 2 has an invalid length.
[  397.946009][T16491] syzkaller0: entered promiscuous mode
[  397.959400][T16491] syzkaller0: entered allmulticast mode
[  397.987488][T16487] : entered promiscuous mode
[  398.152497][T16500] xfrm1: entered allmulticast mode
[  398.359368][T16518] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2562'.
[  398.422905][T16521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2564'.
[  398.611147][T16532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'.
[  398.691440][T16533] ip6_vti0 speed is unknown, defaulting to 1000
[  399.240224][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'.
[  399.312822][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'.
[  399.684610][T16577] ip6_vti0 speed is unknown, defaulting to 1000
[  400.318750][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'.
[  400.366364][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2584'.
[  400.460303][T16609] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2585'.
[  401.634677][T16655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.693334][T16664] netlink: 'syz.5.2600': attribute type 3 has an invalid length.
[  402.139830][T16679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.210647][T16679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.326729][T16679] xt_CT: No such helper "pptp"
[  402.334176][T16678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.456999][T16690] wg1: left promiscuous mode
[  402.476287][T16690] wg1: left allmulticast mode
[  402.534285][T16690] bond6: left promiscuous mode
[  402.550673][T16690] bond7: left promiscuous mode
[  402.556757][T16690] erspan1: left promiscuous mode
[  402.562659][T16690] bond7: left allmulticast mode
[  402.576507][T16690] erspan1: left allmulticast mode
[  402.688189][T16699] __nla_validate_parse: 5 callbacks suppressed
[  402.688208][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'.
[  402.713181][T16699] netlink: 'syz.1.2607': attribute type 11 has an invalid length.
[  402.732213][T16695] ip6_vti0 speed is unknown, defaulting to 1000
[  402.957993][T16706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.206182][T16715] netlink: 'syz.5.2611': attribute type 10 has an invalid length.
[  403.266229][T16715] team0: Port device dummy0 added
[  403.295469][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2611'.
[  403.966615][T16727] SET target dimension over the limit!
[  404.633541][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'.
[  404.662271][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2621'.
[  404.737889][T16757] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2620'.
[  404.926380][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.123653][T16767] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2624'.
[  405.195656][T16772] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  405.242351][T16773] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2626'.
[  405.261691][T16773] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2626'.
[  405.575801][T16784] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2631'.
[  406.129201][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2629'.
[  406.397931][T16818] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  406.637766][T16833] netlink: 'syz.0.2643': attribute type 1 has an invalid length.
[  406.826533][T16825] syzkaller0: entered promiscuous mode
[  406.841816][T16825] syzkaller0: entered allmulticast mode
[  406.877581][T16833] bond9: entered promiscuous mode
[  406.887036][T16833] 8021q: adding VLAN 0 to HW filter on device bond9
[  407.618359][T16866] netlink: 'syz.3.2649': attribute type 13 has an invalid length.
[  409.105414][T16842] ip6_vti0 speed is unknown, defaulting to 1000
[  409.190623][T16858] syzkaller0: entered promiscuous mode
[  409.200675][T16858] syzkaller0: entered allmulticast mode
[  409.433743][T16873] __nla_validate_parse: 5 callbacks suppressed
[  409.433762][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'.
[  409.451402][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  409.531121][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'.
[  409.547758][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  409.560551][ T6442] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.569639][T16878] ip6_vti0 speed is unknown, defaulting to 1000
[  409.591970][ T6442] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  409.623014][ T6442] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  409.643371][ T6442] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  410.257935][T16902] debugfs: 'netdev:syzkaller0' already exists in 'phy4'
[  410.831594][T16932] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2661'.
[  411.033403][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2664'.
[  411.053441][T16945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.736162][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2670'.
[  411.774567][T16982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2670'.
[  411.849549][T16983] ip6_vti0 speed is unknown, defaulting to 1000
[  412.036618][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  412.200790][T17001] syzkaller0: entered promiscuous mode
[  412.215624][T17001] syzkaller0: entered allmulticast mode
[  412.374415][T17008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2678'.
[  413.754547][T17047] ip6_vti0 speed is unknown, defaulting to 1000
[  413.887745][T17050] dvmrp0: left allmulticast mode
[  414.974521][T17082] ip6_vti0 speed is unknown, defaulting to 1000
[  416.441399][T17115] ip6_vti0 speed is unknown, defaulting to 1000
[  416.480211][T17118] netlink: 'syz.5.2697': attribute type 12 has an invalid length.
[  416.488353][T17118] __nla_validate_parse: 3 callbacks suppressed
[  416.488373][T17118] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2697'.
[  416.522600][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2697'.
[  416.602782][T17126] netlink: 'syz.1.2699': attribute type 8 has an invalid length.
[  417.616867][T17150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.632748][T17150] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  417.642385][T17150] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  417.785992][T17150] tipc: Resetting bearer <eth:syzkaller0>
[  418.400304][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2709'.
[  418.481468][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 120 seconds
[  418.494358][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 120 seconds
[  418.506236][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 120 seconds
[  418.517709][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 120 seconds
[  418.564263][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2709'.
[  418.668775][T11882] tipc: Node number set to 3319350330
[  418.902010][T17204] nbd: must specify a size in bytes for the device
[  418.933356][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'.
[  419.155529][T17218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.180577][T17218] syzkaller0: entered promiscuous mode
[  419.242570][T17218] syzkaller0: entered allmulticast mode
[  419.274994][T17218] tipc: Resetting bearer <eth:syzkaller0>
[  419.319222][T17217] tipc: Resetting bearer <eth:syzkaller0>
[  419.397916][T17217] tipc: Disabling bearer <eth:syzkaller0>
[  419.718620][T17238] bond12: Unable to set peer notification delay as MII monitoring is disabled
[  419.737740][T17238] bond12 (unregistering): Released all slaves
[  419.786679][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'.
[  419.797000][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'.
[  420.052314][T17259] netlink: 'syz.5.2729': attribute type 1 has an invalid length.
[  420.112685][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'.
[  420.142557][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'.
[  420.260289][T17265] delete_channel: no stack
[  420.280506][T17265] delete_channel: no stack
[  420.291749][T17265] delete_channel: no stack
[  420.307321][T17265] delete_channel: no stack
[  420.322725][T17265] delete_channel: no stack
[  420.333159][T17265] delete_channel: no stack
[  420.342722][T17265] delete_channel: no stack
[  420.347538][T17265] delete_channel: no stack
[  420.355576][T17265] delete_channel: no stack
[  420.360889][T17265] delete_channel: no stack
[  420.369326][T17265] delete_channel: no stack
[  420.379861][T17265] delete_channel: no stack
[  420.391060][T17265] delete_channel: no stack
[  420.403681][T17265] delete_channel: no stack
[  420.414548][T17265] delete_channel: no stack
[  420.426110][T17265] delete_channel: no stack
[  420.437028][T17265] delete_channel: no stack
[  420.446554][T17265] delete_channel: no stack
[  420.455903][T17265] delete_channel: no stack
[  420.466126][T17265] delete_channel: no stack
[  420.478282][T17265] delete_channel: no stack
[  420.491863][T17265] delete_channel: no stack
[  420.501188][T17265] delete_channel: no stack
[  420.513280][T17265] delete_channel: no stack
[  420.523364][T17265] delete_channel: no stack
[  420.534427][T17265] delete_channel: no stack
[  420.559626][T17265] delete_channel: no stack
[  420.575560][T17265] delete_channel: no stack
[  420.586393][T17265] delete_channel: no stack
[  420.597647][T17265] delete_channel: no stack
[  420.607844][T17265] delete_channel: no stack
[  420.617910][T17265] delete_channel: no stack
[  420.629760][T17265] delete_channel: no stack
[  420.634611][T17287] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2735'.
[  420.667234][T17287] netlink: 'syz.0.2735': attribute type 9 has an invalid length.
[  420.849434][T17297] netlink: 'syz.5.2737': attribute type 4 has an invalid length.
[  420.990172][   T30] audit: type=1800 audit(1770252942.385:12): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2741" name=CB dev="tmpfs" ino=2958 res=0 errno=0
[  421.762662][T17328] __nla_validate_parse: 37 callbacks suppressed
[  421.762805][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'.
[  422.243255][T17368] syzkaller0: entered promiscuous mode
[  422.252010][T17368] syzkaller0: entered allmulticast mode
[  422.273987][T17368] macsec4: entered promiscuous mode
[  422.279482][T17368] macsec4: entered allmulticast mode
[  422.698475][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2765'.
[  422.828362][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2765'.
[  422.849708][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'.
[  422.927841][T17395] ip6_vti0 speed is unknown, defaulting to 1000
[  423.017601][T17400] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000
[  423.486619][T17414] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2773'.
[  423.509992][T17411] netlink: 'syz.1.2772': attribute type 1 has an invalid length.
[  423.918882][T17435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.150209][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'.
[  424.314845][T17449] netlink: 'syz.0.2784': attribute type 13 has an invalid length.
[  424.341691][T17449] netlink: 14589 bytes leftover after parsing attributes in process `syz.0.2784'.
[  424.498496][T17455] netlink: 'syz.1.2785': attribute type 83 has an invalid length.
[  424.755535][T17463] IPv6: sit1: Disabled Multicast RS
[  425.072958][T17475] ip6_vti0 speed is unknown, defaulting to 1000
[  425.295374][T17489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2795'.
[  425.357790][T16367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  425.372788][T16367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  425.387214][T16367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  425.402931][T16367] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  425.410829][T16367] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  425.721182][T17481] ip6_vti0 speed is unknown, defaulting to 1000
[  426.136544][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2800'.
[  426.163068][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2800'.
[  426.267327][T17491] ip6_vti0 speed is unknown, defaulting to 1000
[  426.484205][T17525] gretap0: entered promiscuous mode
[  427.511733][   T52] Bluetooth: hci1: command tx timeout
[  427.596097][T17561] netlink: 'syz.1.2810': attribute type 1 has an invalid length.
[  427.790802][ T6443] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  427.845714][ T6443] bond6 (unregistering): (slave gre1): Releasing backup interface
[  427.856291][ T6443] gre1 (unregistering): left promiscuous mode
[  428.085433][ T6443] bond1 (unregistering): (slave bridge1): Releasing active interface
[  428.185494][ T6443] bond5 (unregistering): (slave bridge3): Releasing active interface
[  428.470702][ T6443] bond0 (unregistering): Released all slaves
[  428.485007][ T6443] bond1 (unregistering): Released all slaves
[  428.608987][ T6443] bond2 (unregistering): (slave bond3): Releasing backup interface
[  428.618228][ T6443] bond2 (unregistering): Released all slaves
[  428.745723][ T6443] bond3 (unregistering): Released all slaves
[  428.867010][ T6443] bond4 (unregistering): (slave veth3): Releasing active interface
[  428.876243][ T6443] bond4 (unregistering): Released all slaves
[  428.996135][ T6443] bond5 (unregistering): Released all slaves
[  429.124515][ T6443] bond6 (unregistering): Released all slaves
[  429.138841][ T6443] bond7 (unregistering): Released all slaves
[  429.255143][ T6443] bond8 (unregistering): Released all slaves
[  429.371486][ T6443] bond9 (unregistering): Released all slaves
[  429.385666][ T6443] bond10 (unregistering): Released all slaves
[  429.399631][ T6443] bond11 (unregistering): Released all slaves
[  429.423769][T17561] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  429.593251][   T52] Bluetooth: hci1: command tx timeout
[  429.720247][ T6443] tipc: Disabling bearer <eth:syzkaller0>
[  429.752290][ T6443] tipc: Left network mode
[  430.352521][T17491] chnl_net:caif_netlink_parms(): no params data found
[  430.578925][T17601] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  430.603344][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  430.630109][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  431.344728][T17491] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.353089][T17491] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.360409][T17491] bridge_slave_0: entered allmulticast mode
[  431.369604][T17491] bridge_slave_0: entered promiscuous mode
[  431.473920][T17491] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.481159][T17491] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.518532][T17491] bridge_slave_1: entered allmulticast mode
[  431.543711][T17491] bridge_slave_1: entered promiscuous mode
[  431.562299][T17635] netem: incorrect gi model size
[  431.567843][T17635] netem: change failed
[  431.671367][   T52] Bluetooth: hci1: command tx timeout
[  431.839593][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.864338][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.901903][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'.
[  432.069463][T17655] team0: Port device dummy0 removed
[  432.095302][T17655] batman_adv: batadv0: Adding interface: dummy0
[  432.117249][T17655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.154063][T17655] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  432.278882][T17491] team0: Port device team_slave_0 added
[  432.299638][T17674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2833'.
[  432.343569][T17674] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2833'.
[  432.360200][T17643] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  432.400938][T17643] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  432.414885][T17491] team0: Port device team_slave_1 added
[  432.625614][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'.
[  432.723295][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.730335][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.767008][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.812764][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.819789][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.923782][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.249795][ T6443] hsr_slave_0: left promiscuous mode
[  433.256637][ T6443] hsr_slave_1: left promiscuous mode
[  433.271768][ T6443] macsec0: left allmulticast mode
[  433.276908][ T6443] veth1_macvtap: left allmulticast mode
[  433.285358][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'.
[  433.379409][T17704] x_tables: duplicate underflow at hook 1
[  433.468180][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'.
[  433.477527][T17705] netlink: 261 bytes leftover after parsing attributes in process `syz.3.2839'.
[  433.505336][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'.
[  433.752103][   T52] Bluetooth: hci1: command tx timeout
[  434.529111][T17709] ip6_vti0 speed is unknown, defaulting to 1000
[  434.577298][T17491] hsr_slave_0: entered promiscuous mode
[  434.604461][T17491] hsr_slave_1: entered promiscuous mode
[  434.611082][T17491] debugfs: 'hsr0' already exists in 'hsr'
[  434.637050][T17491] Cannot create hsr debugfs directory
[  435.042986][ T6443] IPVS: stop unused estimator thread 0...
[  435.061804][T17743] netlink: 'syz.3.2847': attribute type 1 has an invalid length.
[  435.274067][T17753] tipc: Can't bind to reserved service type 2
[  435.519586][T17773] block nbd5: not configured, cannot reconfigure
[  435.700321][T17782] __nla_validate_parse: 5 callbacks suppressed
[  435.700343][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2854'.
[  435.718465][T17782] openvswitch: netlink: Flow actions attr not present in new flow.
[  436.090295][T17797] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2858'.
[  436.106386][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2858'.
[  436.245630][T17798] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  436.453306][T17798] 8021q: adding VLAN 0 to HW filter on device bond10
[  436.503516][T17799] bond10: (slave gretap2): making interface the new active one
[  436.528874][T17799] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  436.976957][T17491] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  437.010737][T17491] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  437.042724][T17826] No such timeout policy "syz1"
[  437.048942][T17491] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  437.093126][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'.
[  437.104548][T17491] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  437.116881][T17827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2861'.
[  437.336138][T17844] netlink: 'syz.0.2864': attribute type 13 has an invalid length.
[  437.403471][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  437.731173][T17857] netlink: 'syz.1.2866': attribute type 21 has an invalid length.
[  437.964850][T17844] veth0_vlan: left promiscuous mode
[  437.983792][T17844] veth0_macvtap: left allmulticast mode
[  438.106618][T17869] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2868'.
[  438.128037][T17869] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2868'.
[  438.396224][T17844] tipc: Resetting bearer <ib:bridge0>
[  438.563294][T17857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2866'.
[  438.578333][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2866'.
[  438.696926][ T6429] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  438.715849][ T6429] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.733953][ T6429] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  438.772575][ T6429] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  438.781017][ T6429] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.809279][ T6429] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  438.818155][ T6429] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  438.826794][ T6429] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.839544][ T6429] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  438.850225][ T6429] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  438.881669][ T6429] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.905860][ T6429] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  439.128095][T17491] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.142925][T17897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  439.217322][T17491] 8021q: adding VLAN 0 to HW filter on device team0
[  439.321753][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.328979][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.406081][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.413363][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.497121][ T6443] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.523586][ T6443] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.535063][ T6443] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.555794][ T6443] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.801996][T17918] ip6_vti0 speed is unknown, defaulting to 1000
[  440.148055][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.303988][T17946] netlink: 'syz.5.2883': attribute type 1 has an invalid length.
[  441.078767][T17491] veth0_vlan: entered promiscuous mode
[  441.130164][T17491] veth1_vlan: entered promiscuous mode
[  441.236447][T17491] veth0_macvtap: entered promiscuous mode
[  441.313292][ T5484] veth0_macvtap: left promiscuous mode
[  441.345116][T17491] veth1_macvtap: entered promiscuous mode
[  441.423731][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.458455][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.504850][ T6427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.529205][ T6427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.594450][ T6427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.628307][ T6427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.864352][ T6440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.899683][ T6440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.026934][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.055005][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.156531][T18005] __nla_validate_parse: 7 callbacks suppressed
[  442.156555][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'.
[  442.183207][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'.
[  442.578423][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'.
[  442.816166][T18029] netlink: 'syz.4.2900': attribute type 13 has an invalid length.
[  442.857512][T18031] netlink: 'syz.1.2901': attribute type 7 has an invalid length.
[  442.870410][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  442.884571][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  442.893256][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.895687][T18031] netlink: 'syz.1.2901': attribute type 8 has an invalid length.
[  442.914684][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.929677][T18029] macvtap0: entered promiscuous mode
[  442.936891][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.972510][T18029] macvtap0: refused to change device tx_queue_len
[  443.137097][T18032] ip6_vti0 speed is unknown, defaulting to 1000
[  443.184022][   T52] block nbd2: Receive control failed (result -32)
[  443.402002][ T5827] .`: (slave syz_tun): Releasing backup interface
[  443.659659][T18075] netlink: 'syz.0.2907': attribute type 8 has an invalid length.
[  443.757149][T18077] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2908'.
[  443.777766][T18077] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2908'.
[  443.890524][T18082] batadv0: entered promiscuous mode
[  443.898846][T18082] dummy0: entered promiscuous mode
[  443.907592][T18082] debugfs: 'hsr1' already exists in 'hsr'
[  443.913733][T18082] Cannot create hsr debugfs directory
[  443.922155][T18082] hsr1: entered promiscuous mode
[  443.932616][T18082] hsr1: entered allmulticast mode
[  443.944094][T18082] batadv0: entered allmulticast mode
[  443.949744][T18082] dummy0: entered allmulticast mode
[  444.208712][T18032] chnl_net:caif_netlink_parms(): no params data found
[  444.294141][T18032] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.301551][T18032] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.309032][T18032] bridge_slave_0: entered allmulticast mode
[  444.317612][T18032] bridge_slave_0: entered promiscuous mode
[  444.326244][T18032] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.333550][T18032] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.340771][T18032] bridge_slave_1: entered allmulticast mode
[  444.349388][T18032] bridge_slave_1: entered promiscuous mode
[  444.382896][T18032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.396686][T18032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.431792][T18032] team0: Port device team_slave_0 added
[  444.440500][T18032] team0: Port device team_slave_1 added
[  444.472539][T18032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.479549][T18032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.505648][T18032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.520492][T18032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.527593][T18032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.554389][T18032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.602819][T18032] hsr_slave_0: entered promiscuous mode
[  444.609425][T18032] hsr_slave_1: entered promiscuous mode
[  444.616040][T18032] debugfs: 'hsr0' already exists in 'hsr'
[  444.622083][T18032] Cannot create hsr debugfs directory
[  445.032553][   T52] Bluetooth: hci0: command tx timeout
[  446.215577][T18050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  446.248243][T18032] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  446.355838][T18032] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  446.394604][T18032] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  446.443584][T18032] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  446.566311][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2914'.
[  446.708930][T18032] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.944718][T18032] 8021q: adding VLAN 0 to HW filter on device team0
[  446.967023][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.974321][ T6443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.030617][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.037993][ T6427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.111581][   T52] Bluetooth: hci0: command tx timeout
[  447.287830][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2919'.
[  447.305599][T18032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.350781][T18141] macvlan0: entered allmulticast mode
[  447.371802][T18141] veth1_vlan: entered allmulticast mode
[  447.393697][T18141] veth1_vlan: left allmulticast mode
[  447.503703][T18141] macvlan0 (unregistering): left allmulticast mode
[  447.544546][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2922'.
[  447.802164][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'.
[  447.811742][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'.
[  447.820681][T18161] netlink: 'syz.1.2923': attribute type 14 has an invalid length.
[  447.872397][T18161] netlink: 'syz.1.2923': attribute type 12 has an invalid length.
[  447.902167][T18171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2924'.
[  447.951919][T18173] batadv_slave_0: entered promiscuous mode
[  448.011488][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2924'.
[  448.020969][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2924'.
[  448.082564][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'.
[  448.143558][T18032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.164479][T18166] batadv_slave_0: left promiscuous mode
[  448.205583][T18179] netlink: 'syz.5.2926': attribute type 10 has an invalid length.
[  448.238253][T18179] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2926'.
[  448.327436][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'.
[  448.356316][T18187] 8021q: adding VLAN 0 to HW filter on device bond11
[  448.466255][T18201] Bluetooth: MGMT ver 1.23
[  448.552639][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 150 seconds
[  448.563602][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 150 seconds
[  448.574986][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 150 seconds
[  448.588987][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 150 seconds
[  448.893713][T18032] veth0_vlan: entered promiscuous mode
[  448.918297][T18032] veth1_vlan: entered promiscuous mode
[  448.989411][T18032] veth0_macvtap: entered promiscuous mode
[  449.037650][T18032] veth1_macvtap: entered promiscuous mode
[  449.117261][T18032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.154425][T18032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.180580][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.191694][   T52] Bluetooth: hci0: command tx timeout
[  449.218440][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.234765][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.276065][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.611631][T18249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  449.636017][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.646465][T18249] netlink: 'syz.1.2940': attribute type 14 has an invalid length.
[  449.672179][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.754028][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.782212][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.377662][T18275] netlink: 'syz.4.2946': attribute type 10 has an invalid length.
[  450.408056][T18275] team0: Device geneve0 is up. Set it down before adding it as a team port
[  450.443030][T18275] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  450.505121][T18279] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  450.702182][T18286] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  450.746710][T18286] hsr0: left allmulticast mode
[  450.771513][T18286] hsr_slave_0: left allmulticast mode
[  450.777139][T18286] hsr_slave_1: left allmulticast mode
[  450.784254][T18286] hsr0: left promiscuous mode
[  450.798249][T18293] xt_bpf: check failed: parse error
[  450.809705][T18286] bridge0: port 1(hsr0) entered disabled state
[  451.165485][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  451.184508][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  451.196790][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  451.207895][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  451.221843][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  451.271820][   T52] Bluetooth: hci0: command tx timeout
[  451.312017][T18306] ip6_vti0 speed is unknown, defaulting to 1000
[  451.936482][   T30] audit: type=1107 audit(1770252973.345:13): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  452.138961][T18306] chnl_net:caif_netlink_parms(): no params data found
[  452.290232][T18306] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.297913][T18306] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.305518][T18306] bridge_slave_0: entered allmulticast mode
[  452.315659][T18306] bridge_slave_0: entered promiscuous mode
[  452.325318][T18306] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.332922][T18306] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.340442][T18306] bridge_slave_1: entered allmulticast mode
[  452.348901][T18306] bridge_slave_1: entered promiscuous mode
[  452.404848][T18306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.418930][T18306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.461969][T18306] team0: Port device team_slave_0 added
[  452.476362][T18306] team0: Port device team_slave_1 added
[  452.514393][T18306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.521529][T18306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.548098][T18306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.567870][T18306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.575216][T18306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.603870][T18306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.676293][T18306] hsr_slave_0: entered promiscuous mode
[  452.683658][T18306] hsr_slave_1: entered promiscuous mode
[  452.690457][T18306] debugfs: 'hsr0' already exists in 'hsr'
[  452.696590][T18306] Cannot create hsr debugfs directory
[  453.271774][   T52] Bluetooth: hci4: command tx timeout
[  454.346463][T18321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.387694][T18306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  454.425786][T18306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  454.513282][T18306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  454.554738][T18306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  454.598893][T18382] openvswitch: netlink: Key type 325 is out of range max 32
[  454.618381][T18379] IPVS: Unknown mcast interface: pimreg1
[  454.795701][T18306] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.870182][T18306] 8021q: adding VLAN 0 to HW filter on device team0
[  454.910883][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.918157][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.974115][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.981375][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.131549][T18407] ip6_vti0 speed is unknown, defaulting to 1000
[  455.352378][   T52] Bluetooth: hci4: command tx timeout
[  455.577414][T18427] __nla_validate_parse: 13 callbacks suppressed
[  455.577438][T18427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2974'.
[  455.627866][T18306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.688660][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'.
[  455.724679][T18306] veth0_vlan: entered promiscuous mode
[  455.746980][T18306] veth1_vlan: entered promiscuous mode
[  455.814732][T18306] veth0_macvtap: entered promiscuous mode
[  455.836959][T18306] veth1_macvtap: entered promiscuous mode
[  455.845603][T18434] netlink: 'syz.3.2976': attribute type 142 has an invalid length.
[  455.902121][T18306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.974569][T18306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.024066][T18413] ip6_vti0 speed is unknown, defaulting to 1000
[  456.050916][ T6442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.074487][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2978'.
[  456.081740][ T6442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.192053][ T6442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.262066][ T6442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.558820][ T6442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.562664][T18447] ip6_vti0 speed is unknown, defaulting to 1000
[  456.589352][ T6442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.643704][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.661354][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.876855][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'.
[  456.877277][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'.
[  456.906861][T18460] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2950'.
[  457.102299][T18465] netlink: 'syz.0.2983': attribute type 2 has an invalid length.
[  457.110100][T18465] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  457.327363][T18470] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2985'.
[  457.352210][T18470] ksmbd: Unknown IPC event: 1, ignore.
[  457.441342][   T52] Bluetooth: hci4: command tx timeout
[  457.923626][T18495] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2992'.
[  458.076160][T18496] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.111715][T18496] 8021q: adding VLAN 0 to HW filter on device team0
[  458.158606][T18496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  458.460968][T18511] ip6_vti0 speed is unknown, defaulting to 1000
[  458.529843][T18515] ip6erspan0: entered allmulticast mode
[  458.545870][T18516] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3000'.
[  458.659509][T18522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3004'.
[  459.472554][T18553] ip6_vti0 speed is unknown, defaulting to 1000
[  459.522918][   T52] Bluetooth: hci4: command tx timeout
[  459.929970][T18571] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  460.495181][T18594] x_tables: duplicate underflow at hook 2
[  461.122634][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  461.132849][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  461.142757][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  461.154060][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  461.171626][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  461.247739][T18612] ip6_vti0 speed is unknown, defaulting to 1000
[  461.276319][T18611] __nla_validate_parse: 3 callbacks suppressed
[  461.276341][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3024'.
[  461.331626][T18611] netlink: 'syz.5.3024': attribute type 12 has an invalid length.
[  461.383173][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3024'.
[  461.433265][T18611] netlink: 'syz.5.3024': attribute type 12 has an invalid length.
[  462.124815][ T5822] syz_tun (unregistering): left allmulticast mode
[  462.538261][T18653] pim6reg: entered allmulticast mode
[  462.561691][T18612] chnl_net:caif_netlink_parms(): no params data found
[  462.749905][T18644] pim6reg: left allmulticast mode
[  462.767939][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'.
[  462.790576][T18666] sctp: [Deprecated]: syz.4.3035 (pid 18666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.790576][T18666] Use struct sctp_sack_info instead
[  462.897575][T18664] netlink: 'syz.3.3034': attribute type 39 has an invalid length.
[  462.927131][T18665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.940016][   T30] audit: type=1800 audit(1770252984.345:14): pid=18665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3036" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2138 res=0 errno=0
[  463.116973][T18612] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.149956][T18612] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.191850][T18612] bridge_slave_0: entered allmulticast mode
[  463.199829][T18612] bridge_slave_0: entered promiscuous mode
[  463.218725][T18612] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.241645][T18612] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.257755][T18612] bridge_slave_1: entered allmulticast mode
[  463.272593][   T52] Bluetooth: hci2: command tx timeout
[  463.282686][T18612] bridge_slave_1: entered promiscuous mode
[  463.335278][T18612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.348669][T18612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.455436][T18612] team0: Port device team_slave_0 added
[  463.462068][T18685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3041'.
[  463.474862][T18612] team0: Port device team_slave_1 added
[  463.555795][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3041'.
[  463.601983][T18612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.609005][T18612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.644082][T18612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.667560][T18612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.675172][T18612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.702050][T18612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.798962][T18612] hsr_slave_0: entered promiscuous mode
[  463.808847][T18612] hsr_slave_1: entered promiscuous mode
[  463.817555][T18612] debugfs: 'hsr0' already exists in 'hsr'
[  463.824178][T18612] Cannot create hsr debugfs directory
[  463.979354][T18698] syzkaller0: entered promiscuous mode
[  463.988752][T18698] syzkaller0: entered allmulticast mode
[  464.023024][T18699] ip6_vti0 speed is unknown, defaulting to 1000
[  464.265292][T18711] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  464.506226][T18612] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.575736][T18612] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  464.594909][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'.
[  464.605194][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'.
[  464.626176][T18722] netlink: 'syz.0.3050': attribute type 20 has an invalid length.
[  464.659799][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'.
[  464.728323][T18612] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.774082][T18612] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  465.068181][T18612] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.096345][T18612] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  465.215720][T18612] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.245434][T18612] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  465.330164][T18748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  465.351365][   T52] Bluetooth: hci2: command tx timeout
[  465.771149][T18766] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.779161][T18766] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.020587][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.043728][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.125740][T18766] macvtap0: left promiscuous mode
[  466.229219][T18766] hsr1: left promiscuous mode
[  466.234287][T18766] hsr1: left allmulticast mode
[  466.239111][T18766] batadv0: left allmulticast mode
[  466.244340][T18766] dummy0: left allmulticast mode
[  466.301801][ T6427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.316299][ T6427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.414483][ T6427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.433700][ T6427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.519953][T18612] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  466.588029][T18800] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3067'.
[  466.603232][T18612] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  466.649728][T18612] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  466.703415][T18612] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  466.746664][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'.
[  466.884935][T18799] batman_adv: batadv0: Removing interface: dummy0
[  467.305856][T18612] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.433229][   T52] Bluetooth: hci2: command tx timeout
[  467.451800][T18612] 8021q: adding VLAN 0 to HW filter on device team0
[  467.652807][T18844] ip6_vti0 speed is unknown, defaulting to 1000
[  467.661476][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.668687][ T6443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.731076][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.738441][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.933673][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'.
[  467.989220][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'.
[  468.545551][T18878] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  469.008812][T18612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.180700][T18612] veth0_vlan: entered promiscuous mode
[  469.199177][T18612] veth1_vlan: entered promiscuous mode
[  469.324872][T18612] veth0_macvtap: entered promiscuous mode
[  469.371701][T18612] veth1_macvtap: entered promiscuous mode
[  469.433804][T18612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.484411][T18612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.512663][   T52] Bluetooth: hci2: command tx timeout
[  469.539928][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'.
[  469.562197][ T6429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.572159][ T6429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.581132][ T6429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.622805][ T6429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.834247][ T6440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.863082][ T6440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.947526][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.955376][T18913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3088'.
[  469.996609][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.213116][T18932] netlink: 'syz.0.3092': attribute type 1 has an invalid length.
[  470.239746][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'.
[  470.508001][T18945] netlink: 'syz.3.3095': attribute type 1 has an invalid length.
[  470.834638][T18958] tap0: tun_chr_ioctl cmd 2148553947
[  471.055745][T18969] ip6_vti0 speed is unknown, defaulting to 1000
[  471.110550][T18974] gtp0: entered promiscuous mode
[  471.116489][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3104'.
[  471.142067][T18974] gtp0: entered allmulticast mode
[  471.332296][T18982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3105'.
[  471.588072][T18999] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3110'.
[  471.927417][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3117'.
[  472.114317][T19028] syzkaller0: entered promiscuous mode
[  472.125340][T19028] syzkaller0: entered allmulticast mode
[  472.157321][T19033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.211046][T19035] syzkaller0: entered promiscuous mode
[  472.238885][T19040] netlink: 'syz.0.3122': attribute type 22 has an invalid length.
[  472.248903][T19035] syzkaller0: entered allmulticast mode
[  472.289974][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.301916][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.347558][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.510143][ T1153] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  472.519829][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.529861][ T1153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  472.539079][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.550197][ T1153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  472.564637][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'.
[  472.581745][ T1153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  472.700284][T19052] netlink: 'syz.0.3125': attribute type 1 has an invalid length.
[  472.861617][T19063] netlink: 'syz.1.3128': attribute type 2 has an invalid length.
[  472.869481][T19063] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.3128'.
[  472.945323][T19070] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3130'.
[  472.984568][T19070] syzkaller0: entered promiscuous mode
[  473.000501][T19070] syzkaller0: entered allmulticast mode
[  473.264543][T19090] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3133'.
[  473.559483][T19111] syzkaller0: entered promiscuous mode
[  473.567014][T19105] 
[  473.569419][T19105] ======================================================
[  473.576472][T19105] WARNING: possible circular locking dependency detected
[  473.581595][T19111] syzkaller0: entered allmulticast mode
[  473.583548][T19105] syzkaller #0 Not tainted
[  473.593641][T19105] ------------------------------------------------------
[  473.600694][T19105] syz.3.3137/19105 is trying to acquire lock:
[  473.606804][T19105] ffff8881413ec858 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  473.616369][T19105] 
[  473.616369][T19105] but task is already holding lock:
[  473.623778][T19105] ffff8881413ec318 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  473.634031][T19105] 
[  473.634031][T19105] which lock already depends on the new lock.
[  473.634031][T19105] 
[  473.644506][T19105] 
[  473.644506][T19105] the existing dependency chain (in reverse order) is:
[  473.653561][T19105] 
[  473.653561][T19105] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  473.662334][T19105]        blk_alloc_queue+0x52f/0x610
[  473.667668][T19105]        __blk_mq_alloc_disk+0x197/0x390
[  473.673356][T19105]        nbd_dev_add+0x499/0xb50
[  473.678360][T19105]        nbd_init+0x168/0x1f0
[  473.683136][T19105]        do_one_initcall+0x250/0x840
[  473.688474][T19105]        do_initcall_level+0x104/0x190
[  473.693989][T19105]        do_initcalls+0x59/0xa0
[  473.698908][T19105]        kernel_init_freeable+0x2a6/0x3d0
[  473.704685][T19105]        kernel_init+0x1d/0x1d0
[  473.709585][T19105]        ret_from_fork+0x51b/0xa40
[  473.714748][T19105]        ret_from_fork_asm+0x1a/0x30
[  473.720177][T19105] 
[  473.720177][T19105] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  473.727493][T19105]        fs_reclaim_acquire+0x71/0x100
[  473.733006][T19105]        kmem_cache_alloc_node_noprof+0x48/0x6f0
[  473.739382][T19105]        __alloc_skb+0x1d0/0x7d0
[  473.744352][T19105]        __ip6_append_data+0x2a44/0x3c50
[  473.750041][T19105]        ip6_append_data+0x10f/0x280
[  473.755384][T19105]        rawv6_sendmsg+0x12d3/0x18e0
[  473.760726][T19105]        ____sys_sendmsg+0x894/0xad0
[  473.766062][T19105]        ___sys_sendmsg+0x2a5/0x360
[  473.771486][T19105]        __x64_sys_sendmsg+0x1bd/0x2a0
[  473.776998][T19105]        do_syscall_64+0xe2/0xf80
[  473.782086][T19105]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.788551][T19105] 
[  473.788551][T19105] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  473.796333][T19105]        lock_sock_nested+0x48/0x100
[  473.801756][T19105]        inet_shutdown+0x6a/0x390
[  473.806928][T19105]        nbd_mark_nsock_dead+0x2e9/0x560
[  473.812619][T19105]        recv_work+0x1bf4/0x1d00
[  473.817619][T19105]        process_scheduled_works+0xaec/0x17a0
[  473.823749][T19105]        worker_thread+0xda6/0x1360
[  473.829009][T19105]        kthread+0x726/0x8b0
[  473.833649][T19105]        ret_from_fork+0x51b/0xa40
[  473.838850][T19105]        ret_from_fork_asm+0x1a/0x30
[  473.844283][T19105] 
[  473.844283][T19105] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  473.851983][T19105]        __mutex_lock+0x19f/0x1300
[  473.857154][T19105]        nbd_queue_rq+0x37b/0x1100
[  473.862318][T19105]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  473.868437][T19105]        __blk_mq_sched_dispatch_requests+0xdce/0x15d0
[  473.875337][T19105]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  473.881895][T19105]        blk_mq_run_hw_queue+0x348/0x4f0
[  473.887595][T19105]        blk_mq_dispatch_list+0xd16/0xe10
[  473.893457][T19105]        blk_mq_flush_plug_list+0x48d/0x570
[  473.899417][T19105]        __blk_flush_plug+0x3ed/0x4d0
[  473.905026][T19105]        __submit_bio+0x4c6/0x5d0
[  473.910190][T19105]        submit_bio_noacct_nocheck+0x2f4/0xa20
[  473.916399][T19105]        block_read_full_folio+0x599/0x830
[  473.922267][T19105]        filemap_read_folio+0x137/0x3b0
[  473.927884][T19105]        do_read_cache_folio+0x358/0x590
[  473.933576][T19105]        read_part_sector+0xb6/0x2b0
[  473.938950][T19105]        adfspart_check_ICS+0xa5/0xa40
[  473.944475][T19105]        bdev_disk_changed+0x765/0x14c0
[  473.950067][T19105]        blkdev_get_whole+0x380/0x510
[  473.955486][T19105]        bdev_open+0x31e/0xd30
[  473.960315][T19105]        blkdev_open+0x470/0x610
[  473.965309][T19105]        do_dentry_open+0x7ce/0x1420
[  473.970654][T19105]        vfs_open+0x3b/0x340
[  473.975291][T19105]        path_openat+0x3486/0x3e20
[  473.980463][T19105]        do_filp_open+0x22d/0x490
[  473.985542][T19105]        do_sys_openat2+0x12f/0x220
[  473.990801][T19105]        __x64_sys_openat+0x138/0x170
[  473.996230][T19105]        do_syscall_64+0xe2/0xf80
[  474.001316][T19105]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.007878][T19105] 
[  474.007878][T19105] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  474.015149][T19105]        __mutex_lock+0x19f/0x1300
[  474.020323][T19105]        nbd_queue_rq+0xc6/0x1100
[  474.025446][T19105]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  474.031560][T19105]        __blk_mq_sched_dispatch_requests+0xdce/0x15d0
[  474.038554][T19105]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  474.045104][T19105]        blk_mq_run_hw_queue+0x348/0x4f0
[  474.050789][T19105]        blk_mq_dispatch_list+0xd16/0xe10
[  474.056597][T19105]        blk_mq_flush_plug_list+0x48d/0x570
[  474.062548][T19105]        __blk_flush_plug+0x3ed/0x4d0
[  474.067971][T19105]        __submit_bio+0x4c6/0x5d0
[  474.073047][T19105]        submit_bio_noacct_nocheck+0x2f4/0xa20
[  474.079250][T19105]        block_read_full_folio+0x599/0x830
[  474.085306][T19105]        filemap_read_folio+0x137/0x3b0
[  474.090899][T19105]        do_read_cache_folio+0x358/0x590
[  474.096581][T19105]        read_part_sector+0xb6/0x2b0
[  474.101923][T19105]        adfspart_check_ICS+0xa5/0xa40
[  474.107435][T19105]        bdev_disk_changed+0x765/0x14c0
[  474.113026][T19105]        blkdev_get_whole+0x380/0x510
[  474.118448][T19105]        bdev_open+0x31e/0xd30
[  474.123260][T19105]        blkdev_open+0x470/0x610
[  474.128260][T19105]        do_dentry_open+0x7ce/0x1420
[  474.133604][T19105]        vfs_open+0x3b/0x340
[  474.138240][T19105]        path_openat+0x3486/0x3e20
[  474.143413][T19105]        do_filp_open+0x22d/0x490
[  474.148484][T19105]        do_sys_openat2+0x12f/0x220
[  474.153729][T19105]        __x64_sys_openat+0x138/0x170
[  474.159147][T19105]        do_syscall_64+0xe2/0xf80
[  474.164230][T19105]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.170684][T19105] 
[  474.170684][T19105] -> #1 (set->srcu){.+.+}-{0:0}:
[  474.177861][T19105]        __synchronize_srcu+0xca/0x3e0
[  474.183397][T19105]        elevator_switch+0x1e8/0x750
[  474.188770][T19105]        elevator_change+0x2cc/0x450
[  474.194063][T19105]        elevator_set_default+0x36c/0x430
[  474.200259][T19105]        blk_register_queue+0x34e/0x3f0
[  474.205862][T19105]        __add_disk+0x677/0xd50
[  474.210737][T19105]        add_disk_fwnode+0xfb/0x480
[  474.215982][T19105]        nbd_dev_add+0x72c/0xb50
[  474.221040][T19105]        nbd_init+0x168/0x1f0
[  474.225841][T19105]        do_one_initcall+0x250/0x840
[  474.231154][T19105]        do_initcall_level+0x104/0x190
[  474.236665][T19105]        do_initcalls+0x59/0xa0
[  474.241552][T19105]        kernel_init_freeable+0x2a6/0x3d0
[  474.247650][T19105]        kernel_init+0x1d/0x1d0
[  474.252512][T19105]        ret_from_fork+0x51b/0xa40
[  474.257641][T19105]        ret_from_fork_asm+0x1a/0x30
[  474.262943][T19105] 
[  474.262943][T19105] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  474.270780][T19105]        __lock_acquire+0x15a5/0x2cf0
[  474.276231][T19105]        lock_acquire+0x106/0x330
[  474.281431][T19105]        __mutex_lock+0x19f/0x1300
[  474.286586][T19105]        elevator_change+0x1b3/0x450
[  474.291893][T19105]        elevator_set_none+0xb5/0x140
[  474.297281][T19105]        blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[  474.303630][T19105]        nbd_start_device+0x17f/0xb10
[  474.309039][T19105]        nbd_genl_connect+0x165b/0x1cf0
[  474.314607][T19105]        genl_family_rcv_msg_doit+0x22a/0x330
[  474.320696][T19105]        genl_rcv_msg+0x61c/0x7a0
[  474.325746][T19105]        netlink_rcv_skb+0x232/0x4b0
[  474.331069][T19105]        genl_rcv+0x28/0x40
[  474.335590][T19105]        netlink_unicast+0x80f/0x9b0
[  474.340889][T19105]        netlink_sendmsg+0x813/0xb40
[  474.346205][T19105]        ____sys_sendmsg+0xa68/0xad0
[  474.351530][T19105]        ___sys_sendmsg+0x2a5/0x360
[  474.356761][T19105]        __x64_sys_sendmsg+0x1bd/0x2a0
[  474.362348][T19105]        do_syscall_64+0xe2/0xf80
[  474.367445][T19105]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.373890][T19105] 
[  474.373890][T19105] other info that might help us debug this:
[  474.373890][T19105] 
[  474.384139][T19105] Chain exists of:
[  474.384139][T19105]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  474.384139][T19105] 
[  474.397910][T19105]  Possible unsafe locking scenario:
[  474.397910][T19105] 
[  474.405660][T19105]        CPU0                    CPU1
[  474.411036][T19105]        ----                    ----
[  474.416414][T19105]   lock(&q->q_usage_counter(io)#52);
[  474.421831][T19105]                                lock(fs_reclaim);
[  474.428364][T19105]                                lock(&q->q_usage_counter(io)#52);
[  474.436279][T19105]   lock(&q->elevator_lock);
[  474.440902][T19105] 
[  474.440902][T19105]  *** DEADLOCK ***
[  474.440902][T19105] 
[  474.449089][T19105] 6 locks held by syz.3.3137/19105:
[  474.454316][T19105]  #0: ffffffff8fa1ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  474.462521][T19105]  #1: ffffffff8fa1a948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  474.471511][T19105]  #2: ffff8881417881d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[  474.482959][T19105]  #3: ffff8881417880d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[  474.493942][T19105]  #4: ffff8881413ec318 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  474.504628][T19105]  #5: ffff8881413ec350 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  474.515705][T19105] 
[  474.515705][T19105] stack backtrace:
[  474.521682][T19105] CPU: 1 UID: 0 PID: 19105 Comm: syz.3.3137 Not tainted syzkaller #0 PREEMPT(full) 
[  474.521711][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  474.521732][T19105] Call Trace:
[  474.521739][T19105]  <TASK>
[  474.521748][T19105]  dump_stack_lvl+0xe8/0x150
[  474.521770][T19105]  print_circular_bug+0x2e1/0x300
[  474.521788][T19105]  check_noncircular+0x12e/0x150
[  474.521806][T19105]  __lock_acquire+0x15a5/0x2cf0
[  474.521836][T19105]  ? elevator_change+0x1b3/0x450
[  474.521849][T19105]  lock_acquire+0x106/0x330
[  474.521868][T19105]  ? elevator_change+0x1b3/0x450
[  474.521887][T19105]  __mutex_lock+0x19f/0x1300
[  474.521907][T19105]  ? elevator_change+0x1b3/0x450
[  474.521922][T19105]  ? rcu_is_watching+0x15/0xb0
[  474.521937][T19105]  ? elevator_change+0x1b3/0x450
[  474.521952][T19105]  ? __pfx___mutex_lock+0x10/0x10
[  474.521970][T19105]  ? enable_work+0x17f/0x230
[  474.521985][T19105]  ? lockdep_hardirqs_on+0x7a/0x110
[  474.522006][T19105]  ? __cancel_work_sync+0xf7/0x110
[  474.522022][T19105]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  474.522040][T19105]  elevator_change+0x1b3/0x450
[  474.522056][T19105]  elevator_set_none+0xb5/0x140
[  474.522069][T19105]  ? __pfx_elevator_set_none+0x10/0x10
[  474.522085][T19105]  ? xa_load+0x1db/0x210
[  474.522107][T19105]  blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[  474.522130][T19105]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  474.522148][T19105]  ? kernfs_add_one+0x46f/0x5c0
[  474.522170][T19105]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  474.522192][T19105]  ? sysfs_add_file_mode_ns+0x259/0x300
[  474.522212][T19105]  nbd_start_device+0x17f/0xb10
[  474.522272][T19105]  ? device_create_file+0xf4/0x1b0
[  474.522296][T19105]  nbd_genl_connect+0x165b/0x1cf0
[  474.522320][T19105]  ? __pfx_nbd_genl_connect+0x10/0x10
[  474.522345][T19105]  ? rcu_is_watching+0x15/0xb0
[  474.522360][T19105]  ? __nla_parse+0x40/0x60
[  474.522381][T19105]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  474.522407][T19105]  genl_family_rcv_msg_doit+0x22a/0x330
[  474.522431][T19105]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  474.522456][T19105]  ? __lock_acquire+0x6b5/0x2cf0
[  474.522481][T19105]  genl_rcv_msg+0x61c/0x7a0
[  474.522503][T19105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.522523][T19105]  ? __pfx_nbd_genl_connect+0x10/0x10
[  474.522548][T19105]  netlink_rcv_skb+0x232/0x4b0
[  474.522564][T19105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.522584][T19105]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  474.522599][T19105]  ? genl_rcv+0x19/0x40
[  474.522624][T19105]  ? down_read+0x272/0x2e0
[  474.522643][T19105]  ? genl_rcv+0xd/0x40
[  474.522666][T19105]  genl_rcv+0x28/0x40
[  474.522686][T19105]  netlink_unicast+0x80f/0x9b0
[  474.522704][T19105]  ? __pfx_netlink_unicast+0x10/0x10
[  474.522719][T19105]  ? netlink_sendmsg+0x650/0xb40
[  474.522735][T19105]  ? skb_put+0x11b/0x210
[  474.522777][T19105]  netlink_sendmsg+0x813/0xb40
[  474.522806][T19105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.522832][T19105]  ? aa_sock_msg_perm+0xf1/0x1b0
[  474.522858][T19105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  474.522874][T19105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.522890][T19105]  ____sys_sendmsg+0xa68/0xad0
[  474.522909][T19105]  ? __might_fault+0xaf/0x130
[  474.522933][T19105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  474.522956][T19105]  ? import_iovec+0x73/0xa0
[  474.522978][T19105]  ___sys_sendmsg+0x2a5/0x360
[  474.522997][T19105]  ? __lock_acquire+0x6b5/0x2cf0
[  474.523018][T19105]  ? __pfx____sys_sendmsg+0x10/0x10
[  474.523040][T19105]  ? futex_wake+0x4ac/0x580
[  474.523065][T19105]  ? __fget_files+0x2a/0x420
[  474.523079][T19105]  ? __fget_files+0x3a0/0x420
[  474.523098][T19105]  __x64_sys_sendmsg+0x1bd/0x2a0
[  474.523119][T19105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  474.523142][T19105]  ? rcu_is_watching+0x15/0xb0
[  474.523160][T19105]  do_syscall_64+0xe2/0xf80
[  474.523179][T19105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.523192][T19105]  ? trace_irq_disable+0x37/0x100
[  474.523206][T19105]  ? clear_bhb_loop+0x60/0xb0
[  474.523227][T19105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.523248][T19105] RIP: 0033:0x7f2902d9aeb9
[  474.523261][T19105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.523274][T19105] RSP: 002b:00007f2903c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.523291][T19105] RAX: ffffffffffffffda RBX: 00007f2903016090 RCX: 00007f2902d9aeb9
[  474.523314][T19105] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005
[  474.523324][T19105] RBP: 00007f2902e08c1f R08: 0000000000000000 R09: 0000000000000000
[  474.523334][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.523343][T19105] R13: 00007f2903016128 R14: 00007f2903016090 R15: 00007ffd72ed7318
[  474.523362][T19105]  </TASK>
[  475.069886][   T52] block nbd3: Receive control failed (result -32)
[  475.069895][ T5835] block nbd3: Receive control failed (result -32)
[  475.121361][T19105] nbd3: detected capacity change from 0 to 127
[  475.132324][T14128] block nbd3: Dead connection, failed to find a fallback
[  475.139432][T14128] block nbd3: shutting down sockets
[  475.171269][T14128] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.180792][T14128] Buffer I/O error on dev nbd3, logical block 0, async page read
[  475.219487][T14128] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.229447][T14128] Buffer I/O error on dev nbd3, logical block 1, async page read
[  475.239112][T14128] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.248823][T14128] Buffer I/O error on dev nbd3, logical block 2, async page read
[  475.256741][T14128] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.266528][T14128] Buffer I/O error on dev nbd3, logical block 3, async page read
[  475.277531][T14128] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.287400][T14128] Buffer I/O error on dev nbd3, logical block 0, async page read
[  475.296167][T14128] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.305800][T14128] Buffer I/O error on dev nbd3, logical block 1, async page read
[  475.315440][T14128] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.325315][T14128] Buffer I/O error on dev nbd3, logical block 2, async page read
[  475.333252][T14128] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.342782][T14128] Buffer I/O error on dev nbd3, logical block 3, async page read
[  475.350682][T14128] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.360623][T14128] Buffer I/O error on dev nbd3, logical block 0, async page read
[  475.368654][T14128] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  475.378244][T14128] Buffer I/O error on dev nbd3, logical block 1, async page read
[  475.386563][T14128] ldm_validate_partition_table(): Disk read failed.
[  475.393599][T14128] Dev nbd3: unable to read RDB block 0
[  475.400087][T14128]  nbd3: unable to read partition table
[  475.408484][T14128] ldm_validate_partition_table(): Disk read failed.
[  475.415525][T14128] Dev nbd3: unable to read RDB block 0
[  475.421665][T14128]  nbd3: unable to read partition table
[  478.440861][ T5189] udevd[5189]: worker [11773] /devices/virtual/block/nbd0 timeout; kill it
[  478.449804][ T5189] udevd[5189]: seq 20162 '/devices/virtual/block/nbd0' killed
[  478.632037][  T122] block nbd0: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 180 seconds
[  478.642952][  T122] block nbd0: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 180 seconds
[  478.654203][  T122] block nbd0: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 180 seconds
[  478.665346][  T122] block nbd0: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 180 seconds